last executing test programs: 14m36.797415842s ago: executing program 1 (id=1042): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) setpriority(0x0, 0x1, 0xa7a8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb85"]) accept4(r0, 0x0, 0x0, 0x0) 14m33.607106235s ago: executing program 1 (id=1045): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) epoll_create(0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m29.648452062s ago: executing program 1 (id=1052): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x194}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m27.731554042s ago: executing program 1 (id=1058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='br_fdb_add\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff000000009500740000000000af6d15b19ed67a7e70c68a018b5caa859e932e001671776acd64100354ad2f28cacfa98dc7ad99bcc9e9f985994323dc70e035504190a7e40ef89af9af005baae864968556fa2857b6a1674e98bd02d2c98a9a49058598586ba7ac72df4f51211583baac05642d74e9397fea3bb7de9cff7d2e4a43ae0015e548b2573bf74957ae822ed3fa55bba8218923af847dfeb36f259a1bfc1b472b9484b86c954b724e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010000000000000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14m24.238479152s ago: executing program 1 (id=1065): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) socket(0x40000000015, 0x5, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 14m20.471147322s ago: executing program 1 (id=1078): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a5", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) 14m4.975010621s ago: executing program 32 (id=1078): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = add_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="a5", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) 3m48.871376187s ago: executing program 4 (id=2688): r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x80044d08, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "d913a3ef9b310e1f98d7b8087124cd70"}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e000000100000000000000000200"], 0x60}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) 3m47.168136897s ago: executing program 4 (id=2694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 3m46.493814625s ago: executing program 4 (id=2696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111b4000000000085000000580000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r6, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116300000000008510006402000000850000007600000095001300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x21) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/171, 0xab}, {&(0x7f0000000640)=""/198, 0xc6}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000001800)=""/221, 0xdd}, {&(0x7f0000001900)=""/117, 0x75}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000001980)=""/12, 0xc}, {&(0x7f00000019c0)=""/164, 0xa4}], 0xa, &(0x7f0000001b40)=""/90, 0x5a}, 0x40000002) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, 0x0) 3m46.069589933s ago: executing program 4 (id=2700): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x891e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r7, r7, 0x0, 0x40008) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd9) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3m44.681593222s ago: executing program 4 (id=2705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x29, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000000)=0x5f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000180000000000000000000000711207000000000095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf250800000014000200000000000000000000000000000000010500010003000000"], 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES64=r6], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) socket$inet6(0xa, 0x2, 0x3a) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xd, 0x206000) r9 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="44b8b5d825a03ffd00d516720cb1f3794b9d4d0378e4afa39f1d066970510290a73c9159eecbd953653ff1e9dea652053d9596367c58dc66e0546e83af881566c5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r10 = fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r11 = epoll_create1(0x0) ioctl$FIOCLEX(r11, 0x5451) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r9], 0x1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0x80184132, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0xc, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac", 0x31303453}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0420"], 0xa) 3m43.125859122s ago: executing program 4 (id=2710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0xfff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r5, 0x1, 0x30}, 0xc) 3m42.985573166s ago: executing program 33 (id=2710): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f00000000c0)=[{r4}], 0x1, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3, 0xfff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r5, 0x1, 0x30}, 0xc) 1m21.365301823s ago: executing program 3 (id=3234): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 1m17.730804195s ago: executing program 3 (id=3252): socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r6, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711075000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1m16.626961183s ago: executing program 3 (id=3262): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 1m13.925251934s ago: executing program 3 (id=3282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000100)=0x2) 1m12.673251405s ago: executing program 3 (id=3287): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) (fail_nth: 1) 1m4.660845502s ago: executing program 2 (id=3330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x15, &(0x7f0000000300)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x6, 0x7f, &(0x7f0000000400)=""/127, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x2, 0x8}, 0x10, 0xe1e1, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0x1, 0x1, r3], &(0x7f0000000540)=[{0x4, 0x2, 0x6, 0x8}, {0x5, 0x5, 0xa}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xfffffffffffffeec, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@datasec={0x2, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x80}, {}, {0x2, 0x1, 0x7}, {0x1, 0x3, 0x9efa}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x3e, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1}, 0x28) 1m3.61670793s ago: executing program 2 (id=3333): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m1.661754801s ago: executing program 6 (id=3340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 1m1.343938397s ago: executing program 2 (id=3342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x98, 0x2, "afa355", 0x1ff}]}}}, 0x12) 1m1.232018942s ago: executing program 3 (id=3291): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet(0x2, 0xa, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="14005a8010000080040001"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x49}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "14833d14d30e1744db21efdd1ced2219"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x0, 0x80a0000, 0x1}}, "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", "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"}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x2, 0x200000000000008}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_io_uring_setup(0x3dac, &(0x7f0000005b80)={0x0, 0xe873, 0x40, 0x2000040, 0x14e}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2, 0x1f}]}, 0x1}, 0x1) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) r11 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r11, 0x2, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r10, 0x401070cd, &(0x7f00000001c0)={0x5}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m0.938039936s ago: executing program 6 (id=3345): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x6, 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) munlockall() shutdown(r3, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = syz_io_uring_setup(0x417d, &(0x7f0000000300)={0x0, 0x1, 0x10710, 0x1ffe, 0x37, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r6, 0x567, 0x20, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a3000000000090003007379000000defbe40e7b33bb5661740014000480080001400012000108000240000000002c000000050a03000000000000000000020000060900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x400, 0x8, 0x0, 0x7}) 56.582363319s ago: executing program 0 (id=3347): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30454070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000609"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000000c0)=0x7, 0x12) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x28, 0x3c, 0x67, 0x0, 0x8b, 0x6, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x6, 0x0, 0x0, 0x1000, 0x8, 0x3, 0x4e21, 0x4e20, 0x2, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x4040800) 53.220870177s ago: executing program 0 (id=3353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000380), &(0x7f0000000040)=@udp=r1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x50) ppoll(&(0x7f0000000100)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r4, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) 52.62574713s ago: executing program 2 (id=3354): r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d08, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "d913a3ef9b310e1f98d7b8087124cd70"}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e000000100000000000000000200"], 0x60}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) 52.599296313s ago: executing program 6 (id=3355): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 51.163920968s ago: executing program 6 (id=3356): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x150, 0x150, 0x170, 0x0, 0x260, 0x238, 0x206, 0x260, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x100, 0x0, 0x0, 0xfffffff7, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r9, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r10, 0x0, 0x2fff, 0x4, &(0x7f0000000380)="6a721cb2", 0x1}) 50.283970373s ago: executing program 0 (id=3357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b78", 0x22, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x28, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x164}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 49.75429351s ago: executing program 5 (id=3359): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xae37, 0x3000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 49.667281867s ago: executing program 5 (id=3360): socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0xd8, r7, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 48.916931164s ago: executing program 5 (id=3361): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x4c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x194}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 48.85388337s ago: executing program 0 (id=3362): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}]}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 48.727132405s ago: executing program 5 (id=3363): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 48.687040192s ago: executing program 2 (id=3364): syz_open_dev$usbfs(0x0, 0x800000001fe, 0x181002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251edfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff0000008e404eab9cca4e09b9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) r1 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES8=r4], 0x10) close(r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_bcm(r5, &(0x7f0000001580)={&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000001480), 0x0, &(0x7f00000014c0)=""/135, 0x87}, 0x40014023) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r7 = getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r8, 0x5403, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r7}}, 0x3c) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800100000000000000000000000000818110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.316862952s ago: executing program 5 (id=3365): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) 44.552975942s ago: executing program 34 (id=3291): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) socket$inet(0x2, 0xa, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="14005a8010000080040001"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x49}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "14833d14d30e1744db21efdd1ced2219"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x0, 0x80a0000, 0x1}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adb41456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae2a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e259ce021216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d744bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf40334f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e1549d552978eb8135a5f8c79c3ceb8dd5815b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4061d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x2, 0x200000000000008}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_io_uring_setup(0x3dac, &(0x7f0000005b80)={0x0, 0xe873, 0x40, 0x2000040, 0x14e}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2, 0x1f}]}, 0x1}, 0x1) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) r11 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r11, 0x2, &(0x7f0000000300)) ioctl$IOC_PR_CLEAR(r10, 0x401070cd, &(0x7f00000001c0)={0x5}) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 44.522351506s ago: executing program 0 (id=3367): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000100)={0x578, 0x40, 0x400, 0x11c0, 0x124, 0x0, 0x2c, 0x1, {0x18000000, 0xef6, 0x1}, {0x4, 0x800, 0x1}, {0x8, 0x5, 0x1}, {0x401, 0xfff, 0x1}, 0x0, 0x2, 0x2e7c, 0x9, 0x1, 0x9, 0x10f, 0x8456, 0xcd7a, 0x8, 0x0, 0x79, 0x3d, 0x0, 0x0, 0x9}) (fail_nth: 1) 44.509156591s ago: executing program 6 (id=3368): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000006c0)=""/134, 0x86}], 0x2}, 0x401}], 0x1, 0x63, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 44.058361185s ago: executing program 5 (id=3369): r0 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 42.978484305s ago: executing program 2 (id=3370): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xae37, 0x3000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 42.846908066s ago: executing program 6 (id=3371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) 42.568693047s ago: executing program 0 (id=3372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) 0s ago: executing program 35 (id=3372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) kernel console output (not intermixed with test programs): 0 PID: 15570 Comm: syz.5.2836 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1131.843331][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1131.843342][T15570] Call Trace: [ 1131.843349][T15570] [ 1131.843358][T15570] dump_stack_lvl+0x189/0x250 [ 1131.843390][T15570] ? __pfx____ratelimit+0x10/0x10 [ 1131.843414][T15570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.843433][T15570] ? __pfx__printk+0x10/0x10 [ 1131.843455][T15570] ? __might_fault+0xb0/0x130 [ 1131.843490][T15570] should_fail_ex+0x414/0x560 [ 1131.843519][T15570] _copy_from_user+0x2d/0xb0 [ 1131.843539][T15570] kstrtouint_from_user+0xc4/0x170 [ 1131.843566][T15570] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1131.843608][T15570] proc_fail_nth_write+0x88/0x240 [ 1131.843627][T15570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1131.843651][T15570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1131.843671][T15570] vfs_write+0x27e/0xa90 [ 1131.843703][T15570] ? __pfx_vfs_write+0x10/0x10 [ 1131.843727][T15570] ? __fget_files+0x2a/0x420 [ 1131.843748][T15570] ? __fget_files+0x3a0/0x420 [ 1131.843763][T15570] ? __fget_files+0x2a/0x420 [ 1131.843788][T15570] ksys_write+0x145/0x250 [ 1131.843809][T15570] ? __fget_files+0x3a0/0x420 [ 1131.843826][T15570] ? __pfx_ksys_write+0x10/0x10 [ 1131.843854][T15570] ? do_syscall_64+0xbe/0x3b0 [ 1131.843875][T15570] do_syscall_64+0xfa/0x3b0 [ 1131.843889][T15570] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.843912][T15570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.843929][T15570] ? clear_bhb_loop+0x60/0xb0 [ 1131.843950][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.843966][T15570] RIP: 0033:0x7f5b9ab8d3df [ 1131.843983][T15570] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1131.843997][T15570] RSP: 002b:00007f5b9ba97030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1131.844016][T15570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b9ab8d3df [ 1131.844029][T15570] RDX: 0000000000000001 RSI: 00007f5b9ba970a0 RDI: 0000000000000006 [ 1131.844039][T15570] RBP: 00007f5b9ba97090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.844050][T15570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1131.844060][T15570] R13: 0000000000000000 R14: 00007f5b9adb6160 R15: 00007fffe6d41368 [ 1131.844091][T15570] [ 1132.147018][T15567] dummy0: left promiscuous mode [ 1132.156325][T15567] batadv0: left promiscuous mode [ 1133.355171][T15581] tipc: Enabled bearer , priority 0 [ 1133.375674][T15590] tipc: Enabled bearer , priority 0 [ 1133.385837][T15590] syzkaller0: entered promiscuous mode [ 1133.391851][T15590] syzkaller0: entered allmulticast mode [ 1133.402209][T15578] tipc: Resetting bearer [ 1133.616142][T15577] tipc: Disabling bearer [ 1133.661453][T15598] tipc: Resetting bearer [ 1133.805155][T15597] vivid-000: disconnect [ 1133.810673][T15597] vivid-000: reconnect [ 1133.817630][T15589] tipc: Resetting bearer [ 1133.854688][T15589] tipc: Disabling bearer [ 1133.954381][T15608] FAULT_INJECTION: forcing a failure. [ 1133.954381][T15608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.970834][T15608] CPU: 1 UID: 0 PID: 15608 Comm: syz.0.2852 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1133.970860][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1133.970871][T15608] Call Trace: [ 1133.970878][T15608] [ 1133.970886][T15608] dump_stack_lvl+0x189/0x250 [ 1133.970918][T15608] ? __pfx____ratelimit+0x10/0x10 [ 1133.970943][T15608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.970961][T15608] ? __pfx__printk+0x10/0x10 [ 1133.970982][T15608] ? __might_fault+0xb0/0x130 [ 1133.971016][T15608] should_fail_ex+0x414/0x560 [ 1133.971044][T15608] _copy_from_user+0x2d/0xb0 [ 1133.971063][T15608] __se_sys_openat2+0x142/0x2c0 [ 1133.971085][T15608] ? __pfx___se_sys_openat2+0x10/0x10 [ 1133.971105][T15608] ? rcu_is_watching+0x15/0xb0 [ 1133.971129][T15608] ? do_syscall_64+0xbe/0x3b0 [ 1133.971148][T15608] do_syscall_64+0xfa/0x3b0 [ 1133.971163][T15608] ? lockdep_hardirqs_on+0x9c/0x150 [ 1133.971185][T15608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.971202][T15608] ? clear_bhb_loop+0x60/0xb0 [ 1133.971223][T15608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.971239][T15608] RIP: 0033:0x7fdcb478e929 [ 1133.971255][T15608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.971268][T15608] RSP: 002b:00007fdcb563c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1133.971288][T15608] RAX: ffffffffffffffda RBX: 00007fdcb49b5fa0 RCX: 00007fdcb478e929 [ 1133.971300][T15608] RDX: 0000200000000080 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 1133.971312][T15608] RBP: 00007fdcb563c090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.971322][T15608] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1133.971333][T15608] R13: 0000000000000000 R14: 00007fdcb49b5fa0 R15: 00007fff613d32a8 [ 1133.971362][T15608] [ 1134.389511][ T30] audit: type=1326 audit(1752135470.364:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1134.421416][ T30] audit: type=1326 audit(1752135470.394:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.399182][ T30] audit: type=1326 audit(1752135471.365:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.433072][ T30] audit: type=1326 audit(1752135471.405:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.613038][ T30] audit: type=1326 audit(1752135471.585:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.636498][ T30] audit: type=1326 audit(1752135471.615:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.769321][ T30] audit: type=1326 audit(1752135471.745:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.829349][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2855'. [ 1135.921699][ T30] audit: type=1326 audit(1752135471.885:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.952441][ T30] audit: type=1326 audit(1752135471.885:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1135.976275][ T30] audit: type=1326 audit(1752135471.925:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15614 comm="syz.3.2855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c77b8e929 code=0x7ffc0000 [ 1137.286495][T15653] FAULT_INJECTION: forcing a failure. [ 1137.286495][T15653] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.303959][T15653] CPU: 1 UID: 0 PID: 15653 Comm: syz.0.2864 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1137.303987][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.303997][T15653] Call Trace: [ 1137.304005][T15653] [ 1137.304012][T15653] dump_stack_lvl+0x189/0x250 [ 1137.304037][T15653] ? __pfx____ratelimit+0x10/0x10 [ 1137.304062][T15653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.304080][T15653] ? __pfx__printk+0x10/0x10 [ 1137.304107][T15653] ? __pfx___might_resched+0x10/0x10 [ 1137.304130][T15653] should_fail_ex+0x414/0x560 [ 1137.304159][T15653] should_failslab+0xa8/0x100 [ 1137.304185][T15653] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1137.304210][T15653] ? __alloc_skb+0x112/0x2d0 [ 1137.304232][T15653] __alloc_skb+0x112/0x2d0 [ 1137.304256][T15653] netlink_sendmsg+0x5c6/0xb30 [ 1137.304285][T15653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.304313][T15653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1137.304336][T15653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.304356][T15653] __sock_sendmsg+0x219/0x270 [ 1137.304384][T15653] ____sys_sendmsg+0x505/0x830 [ 1137.304410][T15653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.304441][T15653] ? import_iovec+0x74/0xa0 [ 1137.304464][T15653] ___sys_sendmsg+0x21f/0x2a0 [ 1137.304488][T15653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.304552][T15653] ? __fget_files+0x2a/0x420 [ 1137.304567][T15653] ? __fget_files+0x3a0/0x420 [ 1137.304594][T15653] __x64_sys_sendmsg+0x19b/0x260 [ 1137.304621][T15653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.304651][T15653] ? __pfx_ksys_write+0x10/0x10 [ 1137.304670][T15653] ? rcu_is_watching+0x15/0xb0 [ 1137.304694][T15653] ? do_syscall_64+0xbe/0x3b0 [ 1137.304715][T15653] do_syscall_64+0xfa/0x3b0 [ 1137.304729][T15653] ? lockdep_hardirqs_on+0x9c/0x150 [ 1137.304752][T15653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.304769][T15653] ? clear_bhb_loop+0x60/0xb0 [ 1137.304790][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.304806][T15653] RIP: 0033:0x7fdcb478e929 [ 1137.304823][T15653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.304837][T15653] RSP: 002b:00007fdcb563c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.304856][T15653] RAX: ffffffffffffffda RBX: 00007fdcb49b5fa0 RCX: 00007fdcb478e929 [ 1137.304869][T15653] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 1137.304879][T15653] RBP: 00007fdcb563c090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.304890][T15653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.304900][T15653] R13: 0000000000000000 R14: 00007fdcb49b5fa0 R15: 00007fff613d32a8 [ 1137.304929][T15653] [ 1137.747242][ T5921] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1137.937236][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 1137.949673][ T5921] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1137.983686][ T5921] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.995987][ T5921] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.014831][ T5921] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1138.024197][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1138.025669][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.051629][ T5921] usbtmc 3-1:16.0: bulk endpoints not found [ 1138.163502][ T43] usb 7-1: device descriptor read/64, error -71 [ 1138.605306][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1139.022930][T15674] netlink: 'syz.0.2871': attribute type 3 has an invalid length. [ 1139.038836][T15674] netlink: 622 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1139.122182][T15675] vivid-000: disconnect [ 1139.127899][T15675] vivid-000: reconnect [ 1139.132620][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1139.323188][ T43] usb 7-1: device descriptor read/64, error -71 [ 1139.452062][ T43] usb usb7-port1: attempt power cycle [ 1139.656159][T12642] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1139.786078][T12642] usb 1-1: device descriptor read/64, error -71 [ 1140.042064][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1140.059266][T12642] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1140.066637][ T43] usb 7-1: device descriptor read/8, error -71 [ 1140.091221][ T9484] usb 3-1: USB disconnect, device number 38 [ 1140.325935][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1140.422116][ T43] usb 7-1: device descriptor read/8, error -71 [ 1140.641679][ T43] usb usb7-port1: unable to enumerate USB device [ 1140.715717][T12642] usb 1-1: device descriptor read/64, error -71 [ 1140.825961][T12642] usb usb1-port1: attempt power cycle [ 1141.179801][T15696] FAULT_INJECTION: forcing a failure. [ 1141.179801][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.204215][T15696] CPU: 0 UID: 0 PID: 15696 Comm: syz.3.2875 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1141.204241][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.204252][T15696] Call Trace: [ 1141.204260][T15696] [ 1141.204267][T15696] dump_stack_lvl+0x189/0x250 [ 1141.204292][T15696] ? __pfx____ratelimit+0x10/0x10 [ 1141.204316][T15696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1141.204334][T15696] ? __pfx__printk+0x10/0x10 [ 1141.204361][T15696] ? __pfx___might_resched+0x10/0x10 [ 1141.204385][T15696] should_fail_ex+0x414/0x560 [ 1141.204413][T15696] should_failslab+0xa8/0x100 [ 1141.204445][T15696] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1141.204467][T15696] ? preempt_schedule_irq+0xb5/0x150 [ 1141.204487][T15696] ? __alloc_skb+0x112/0x2d0 [ 1141.204510][T15696] __alloc_skb+0x112/0x2d0 [ 1141.204533][T15696] netlink_sendmsg+0x5c6/0xb30 [ 1141.204563][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.204590][T15696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1141.204613][T15696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.204633][T15696] __sock_sendmsg+0x219/0x270 [ 1141.204659][T15696] ____sys_sendmsg+0x505/0x830 [ 1141.204685][T15696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.204718][T15696] ? import_iovec+0x74/0xa0 [ 1141.204742][T15696] ___sys_sendmsg+0x21f/0x2a0 [ 1141.204765][T15696] ? __pfx____sys_sendmsg+0x10/0x10 [ 1141.204822][T15696] ? __fget_files+0x2a/0x420 [ 1141.204837][T15696] ? __fget_files+0x3a0/0x420 [ 1141.204864][T15696] __x64_sys_sendmsg+0x19b/0x260 [ 1141.204887][T15696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1141.204919][T15696] ? rcu_is_watching+0x15/0xb0 [ 1141.204942][T15696] ? do_syscall_64+0xbe/0x3b0 [ 1141.204962][T15696] do_syscall_64+0xfa/0x3b0 [ 1141.204977][T15696] ? lockdep_hardirqs_on+0x9c/0x150 [ 1141.204999][T15696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.205017][T15696] ? clear_bhb_loop+0x60/0xb0 [ 1141.205037][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.205052][T15696] RIP: 0033:0x7f5c77b8e929 [ 1141.205068][T15696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.205081][T15696] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.205100][T15696] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1141.205113][T15696] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 1141.205124][T15696] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1141.205134][T15696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.205145][T15696] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1141.205173][T15696] [ 1141.472335][T12642] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1141.727050][T12642] usb 1-1: device descriptor read/8, error -71 [ 1141.964988][T12642] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1141.989963][T12642] usb 1-1: device descriptor read/8, error -71 [ 1142.102260][ T9264] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1142.154922][ T5832] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1142.235517][T12642] usb usb1-port1: unable to enumerate USB device [ 1142.290064][ T9264] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1142.298797][ T9264] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1142.312191][ T9264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1142.325690][ T9264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1142.337384][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.348680][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1142.364797][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.373179][ T9264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1142.395350][ T9264] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1142.404514][ T9264] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1142.417194][ T9264] usb 4-1: Product: syz [ 1142.421389][ T9264] usb 4-1: Manufacturer: syz [ 1142.491993][ T5832] usb 3-1: config 0 descriptor?? [ 1142.499787][ T9264] cdc_wdm 4-1:1.0: skipping garbage [ 1142.508352][ T9264] cdc_wdm 4-1:1.0: skipping garbage [ 1142.560358][ T9264] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1142.576804][ T9264] cdc_wdm 4-1:1.0: Unknown control protocol [ 1142.681750][T15713] vivid-000: disconnect [ 1142.704527][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1142.723719][T15713] vivid-000: reconnect [ 1142.907805][ T9264] usb 4-1: USB disconnect, device number 56 [ 1142.932943][ T5832] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 1142.952319][ T5832] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input20 [ 1143.237110][ T5832] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1143.476992][T15719] vivid-000: disconnect [ 1143.482739][T15719] vivid-000: reconnect [ 1143.522251][ T5832] usb 3-1: USB disconnect, device number 39 [ 1143.944321][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1144.183898][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1144.200987][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1144.213827][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.415987][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.433611][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1144.445476][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.461523][ T43] usbtmc 4-1:16.0: bulk endpoints not found [ 1146.749239][ T5832] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1146.770688][T15743] netlink: 'syz.6.2890': attribute type 3 has an invalid length. [ 1146.778744][T15743] netlink: 622 bytes leftover after parsing attributes in process `syz.6.2890'. [ 1146.893036][ T5962] usb 4-1: USB disconnect, device number 57 [ 1147.033707][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 1147.071247][ T5832] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.097425][ T5832] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.107458][ T5832] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1147.116757][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.167555][ T5832] hub 6-1:4.0: USB hub found [ 1147.379544][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.417168][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.438333][T15754] binfmt_misc: register: failed to install interpreter file ./file0 [ 1147.462932][ T5832] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1147.506709][ T5832] usb 6-1: USB disconnect, device number 36 [ 1147.741968][T15759] program syz.3.2896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1148.623610][T15764] tipc: Enabled bearer , priority 10 [ 1149.710656][T15780] vivid-000: disconnect [ 1149.715791][T15780] vivid-000: reconnect [ 1149.791474][ T5962] tipc: Node number set to 702936664 [ 1150.236959][T15786] netlink: 'syz.2.2901': attribute type 3 has an invalid length. [ 1150.251048][T15786] netlink: 622 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1150.373389][T15788] FAULT_INJECTION: forcing a failure. [ 1150.373389][T15788] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.427347][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.5.2902 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1150.427375][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1150.427386][T15788] Call Trace: [ 1150.427393][T15788] [ 1150.427401][T15788] dump_stack_lvl+0x189/0x250 [ 1150.427426][T15788] ? __pfx____ratelimit+0x10/0x10 [ 1150.427451][T15788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1150.427471][T15788] ? __pfx__printk+0x10/0x10 [ 1150.427498][T15788] ? __pfx___might_resched+0x10/0x10 [ 1150.427522][T15788] should_fail_ex+0x414/0x560 [ 1150.427551][T15788] should_failslab+0xa8/0x100 [ 1150.427578][T15788] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1150.427602][T15788] ? __alloc_skb+0x112/0x2d0 [ 1150.427626][T15788] __alloc_skb+0x112/0x2d0 [ 1150.427649][T15788] netlink_sendmsg+0x5c6/0xb30 [ 1150.427680][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.427709][T15788] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1150.427731][T15788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1150.427753][T15788] __sock_sendmsg+0x219/0x270 [ 1150.427781][T15788] ____sys_sendmsg+0x505/0x830 [ 1150.427809][T15788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1150.427840][T15788] ? import_iovec+0x74/0xa0 [ 1150.427863][T15788] ___sys_sendmsg+0x21f/0x2a0 [ 1150.427887][T15788] ? __pfx____sys_sendmsg+0x10/0x10 [ 1150.427945][T15788] ? __fget_files+0x2a/0x420 [ 1150.427961][T15788] ? __fget_files+0x3a0/0x420 [ 1150.427988][T15788] __x64_sys_sendmsg+0x19b/0x260 [ 1150.428012][T15788] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1150.428073][T15788] ? __pfx_ksys_write+0x10/0x10 [ 1150.428093][T15788] ? rcu_is_watching+0x15/0xb0 [ 1150.428118][T15788] ? do_syscall_64+0xbe/0x3b0 [ 1150.428140][T15788] do_syscall_64+0xfa/0x3b0 [ 1150.428154][T15788] ? lockdep_hardirqs_on+0x9c/0x150 [ 1150.428185][T15788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.428202][T15788] ? clear_bhb_loop+0x60/0xb0 [ 1150.428223][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.428240][T15788] RIP: 0033:0x7f5b9ab8e929 [ 1150.428255][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.428269][T15788] RSP: 002b:00007f5b9bad9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.428288][T15788] RAX: ffffffffffffffda RBX: 00007f5b9adb5fa0 RCX: 00007f5b9ab8e929 [ 1150.428302][T15788] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000005 [ 1150.428314][T15788] RBP: 00007f5b9bad9090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.428325][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.428335][T15788] R13: 0000000000000000 R14: 00007f5b9adb5fa0 R15: 00007fffe6d41368 [ 1150.428365][T15788] [ 1150.650674][ T5962] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1150.858089][ T5962] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.870027][ T5962] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1150.898534][ T5962] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1150.917997][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.929553][ T5962] usb 7-1: Product: syz [ 1150.937844][ T5962] usb 7-1: Manufacturer: syz [ 1150.943564][ T5962] usb 7-1: SerialNumber: syz [ 1150.959474][ T5962] usb 7-1: config 0 descriptor?? [ 1151.281015][T15798] ptrace attach of "./syz-executor exec"[5831] was attempted by " [ 1151.636299][ T5962] usb 7-1: USB disconnect, device number 7 [ 1151.874721][T15800] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2906'. [ 1153.450518][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2910'. [ 1153.469109][T15808] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2910'. [ 1153.501517][T15808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1153.527006][T15808] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1153.700211][T15821] netlink: 'syz.6.2914': attribute type 3 has an invalid length. [ 1153.708305][T15821] netlink: 622 bytes leftover after parsing attributes in process `syz.6.2914'. [ 1153.872554][T15825] ptrace attach of "./syz-executor exec"[5845] was attempted by " [ 1156.725357][T13139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1156.849696][T13139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.857610][T13139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.865609][T13139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.890352][T13139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.951987][T15865] ptrace attach of "./syz-executor exec"[15084] was attempted by " [ 1157.431575][T15867] siw: device registration error -23 [ 1157.645082][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2917'. [ 1157.776125][T15870] 9pnet: Unknown protocol version 9p20\++} [ 1158.292053][T15859] chnl_net:caif_netlink_parms(): no params data found [ 1158.525893][T15859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.538814][T15859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.546246][T15859] bridge_slave_0: entered allmulticast mode [ 1158.562013][T15859] bridge_slave_0: entered promiscuous mode [ 1158.578195][T15859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.585617][T15859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.594915][T15879] vivid-000: disconnect [ 1158.600378][T15879] vivid-000: reconnect [ 1158.601156][T15859] bridge_slave_1: entered allmulticast mode [ 1158.726251][T15859] bridge_slave_1: entered promiscuous mode [ 1158.834013][T15859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.850229][T15859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.965011][T15859] team0: Port device team_slave_0 added [ 1159.050388][T15859] team0: Port device team_slave_1 added [ 1159.237210][T15859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.267699][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.796064][T13139] Bluetooth: hci2: command tx timeout [ 1159.879541][T15897] FAULT_INJECTION: forcing a failure. [ 1159.879541][T15897] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.919287][T15897] CPU: 0 UID: 0 PID: 15897 Comm: syz.3.2932 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1159.919314][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1159.919326][T15897] Call Trace: [ 1159.919334][T15897] [ 1159.919342][T15897] dump_stack_lvl+0x189/0x250 [ 1159.919367][T15897] ? __pfx____ratelimit+0x10/0x10 [ 1159.919392][T15897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1159.919410][T15897] ? __pfx__printk+0x10/0x10 [ 1159.919434][T15897] ? __pfx___might_resched+0x10/0x10 [ 1159.919454][T15897] ? fs_reclaim_acquire+0x7d/0x100 [ 1159.919477][T15897] should_fail_ex+0x414/0x560 [ 1159.919507][T15897] should_failslab+0xa8/0x100 [ 1159.919534][T15897] __kmalloc_noprof+0xcb/0x4f0 [ 1159.919556][T15897] ? tomoyo_encode+0x28b/0x550 [ 1159.919579][T15897] tomoyo_encode+0x28b/0x550 [ 1159.919604][T15897] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1159.919634][T15897] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1159.919659][T15897] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1159.919685][T15897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1159.919726][T15897] ? __lock_acquire+0xab9/0xd20 [ 1159.919765][T15897] ? __fget_files+0x2a/0x420 [ 1159.919784][T15897] ? __fget_files+0x2a/0x420 [ 1159.919799][T15897] ? __fget_files+0x3a0/0x420 [ 1159.919814][T15897] ? __fget_files+0x2a/0x420 [ 1159.919835][T15897] security_file_ioctl+0xcb/0x2d0 [ 1159.919861][T15897] __se_sys_ioctl+0x47/0x170 [ 1159.919886][T15897] do_syscall_64+0xfa/0x3b0 [ 1159.919900][T15897] ? lockdep_hardirqs_on+0x9c/0x150 [ 1159.919923][T15897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.919940][T15897] ? clear_bhb_loop+0x60/0xb0 [ 1159.919961][T15897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.919977][T15897] RIP: 0033:0x7f5c77b8e929 [ 1159.919993][T15897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.920008][T15897] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1159.920027][T15897] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1159.920040][T15897] RDX: 00002000000001c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1159.920052][T15897] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.920063][T15897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.920074][T15897] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1159.920104][T15897] [ 1159.920124][T15897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1159.979448][T15859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.185928][T15859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.192888][T15859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.235859][T15859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.325495][T15859] hsr_slave_0: entered promiscuous mode [ 1160.332922][T15859] hsr_slave_1: entered promiscuous mode [ 1160.341281][T15859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.348989][T15859] Cannot create hsr debugfs directory [ 1160.604807][T15859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.654249][T15913] FAULT_INJECTION: forcing a failure. [ 1160.654249][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.702047][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.3.2938 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1160.702082][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1160.702093][T15913] Call Trace: [ 1160.702101][T15913] [ 1160.702110][T15913] dump_stack_lvl+0x189/0x250 [ 1160.702137][T15913] ? __pfx____ratelimit+0x10/0x10 [ 1160.702162][T15913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1160.702181][T15913] ? __pfx__printk+0x10/0x10 [ 1160.702209][T15913] ? __pfx___might_resched+0x10/0x10 [ 1160.702227][T15913] ? fs_reclaim_acquire+0x7d/0x100 [ 1160.702249][T15913] should_fail_ex+0x414/0x560 [ 1160.702279][T15913] should_failslab+0xa8/0x100 [ 1160.702306][T15913] __kmalloc_cache_noprof+0x70/0x3d0 [ 1160.702329][T15913] ? input_allocate_device+0x4e/0x2a0 [ 1160.702353][T15913] input_allocate_device+0x4e/0x2a0 [ 1160.702374][T15913] uinput_ioctl_handler+0x142/0x1570 [ 1160.702404][T15913] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1160.702440][T15913] ? __fget_files+0x2a/0x420 [ 1160.702456][T15913] ? __fget_files+0x3a0/0x420 [ 1160.702478][T15913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1160.702496][T15913] ? __pfx_uinput_ioctl+0x10/0x10 [ 1160.702522][T15913] __se_sys_ioctl+0xf9/0x170 [ 1160.702548][T15913] do_syscall_64+0xfa/0x3b0 [ 1160.702564][T15913] ? lockdep_hardirqs_on+0x9c/0x150 [ 1160.702587][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.702604][T15913] ? clear_bhb_loop+0x60/0xb0 [ 1160.702625][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.702642][T15913] RIP: 0033:0x7f5c77b8e929 [ 1160.702659][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1160.702674][T15913] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.702693][T15913] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1160.702706][T15913] RDX: 0000200000000300 RSI: 00000000401c5504 RDI: 0000000000000003 [ 1160.702719][T15913] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.702730][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.702740][T15913] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1160.702771][T15913] [ 1161.103465][T15859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.283398][T15926] netlink: 'syz.6.2945': attribute type 10 has an invalid length. [ 1161.341983][T15859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.723735][T15859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.871529][T13139] Bluetooth: hci2: command tx timeout [ 1162.804237][T15859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1163.584841][T15859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1163.635185][T15859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1163.672374][T15859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1163.934250][T13139] Bluetooth: hci2: command tx timeout [ 1164.400812][T15859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.502828][T15859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.533185][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.540484][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.555164][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.562343][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.932259][T15859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.952520][ T5921] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1165.042106][T15859] veth0_vlan: entered promiscuous mode [ 1165.068874][T15859] veth1_vlan: entered promiscuous mode [ 1165.115311][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1165.124723][ T5921] usb 7-1: New USB device found, idVendor=0473, idProduct=7003, bcdDevice=7a.1a [ 1165.140812][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.149689][ T5921] usb 7-1: Product: syz [ 1165.156843][ T5921] usb 7-1: Manufacturer: syz [ 1165.161635][ T5921] usb 7-1: SerialNumber: syz [ 1165.191875][ T5921] usb 7-1: config 0 descriptor?? [ 1165.198676][T15859] veth0_macvtap: entered promiscuous mode [ 1165.213862][T15859] veth1_macvtap: entered promiscuous mode [ 1165.262803][T15859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.278845][T15859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.456152][T15993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.503636][ T5921] usb 7-1: USB disconnect, device number 8 [ 1165.983116][T13139] Bluetooth: hci2: command tx timeout [ 1167.315207][T15859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.324178][T15859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.344128][T15859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.353319][T15859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.519203][T11936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.556794][T11936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.617914][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2962'. [ 1167.634109][T15996] netlink: 'syz.6.2962': attribute type 7 has an invalid length. [ 1167.638670][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.652336][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.844839][T16003] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1169.991235][ T5962] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1170.155895][ T5962] usb 7-1: Using ep0 maxpacket: 32 [ 1170.170213][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.201539][ T5962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.227783][ T5962] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.263662][ T5962] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1170.280827][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1170.289287][ T5962] usb 7-1: Product: syz [ 1170.296260][ T5962] usb 7-1: Manufacturer: syz [ 1170.301431][ T5962] usb 7-1: SerialNumber: syz [ 1170.338827][ T5962] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input22 [ 1170.385597][T10297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.407451][T10297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.416031][T10297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.427122][T10297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.437934][T10297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1170.684528][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 1170.718593][ T5831] syz_tun (unregistering): left allmulticast mode [ 1170.729707][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2968'. [ 1170.740400][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2968'. [ 1170.759662][ T5831] syz_tun (unregistering): left promiscuous mode [ 1170.779297][ T5831] bridge0: port 3(syz_tun) entered disabled state [ 1170.828421][T12642] usb 7-1: USB disconnect, device number 9 [ 1170.852358][T12642] appletouch 7-1:1.0: input: appletouch disconnected [ 1171.750404][T16042] chnl_net:caif_netlink_parms(): no params data found [ 1171.830322][ T9264] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1172.040875][ T9264] usb 3-1: Using ep0 maxpacket: 32 [ 1172.071550][ T9264] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1172.092525][ T9264] usb 3-1: config 120 has an invalid interface number: 203 but max is 0 [ 1172.101318][ T9264] usb 3-1: config 120 has no interface number 0 [ 1172.119869][ T9264] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=dc.46 [ 1172.130060][ T9264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.138162][ T9264] usb 3-1: Product: syz [ 1172.145410][ T9264] usb 3-1: Manufacturer: syz [ 1172.151454][ T9264] usb 3-1: SerialNumber: syz [ 1172.470993][T13139] Bluetooth: hci4: command tx timeout [ 1172.553517][T16060] siw: device registration error -23 [ 1172.584214][ T9264] ttusb_dec_send_command: command bulk message failed: error -22 [ 1172.634817][ T9264] ttusb-dec 3-1:120.203: probe with driver ttusb-dec failed with error -22 [ 1172.665521][T16042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.665763][ T9264] usb 3-1: USB disconnect, device number 40 [ 1172.700537][T16042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.721246][T16042] bridge_slave_0: entered allmulticast mode [ 1172.735188][T16042] bridge_slave_0: entered promiscuous mode [ 1172.752530][T16042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.767117][T16042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.793436][T16042] bridge_slave_1: entered allmulticast mode [ 1172.807157][T16042] bridge_slave_1: entered promiscuous mode [ 1172.845536][T16042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.877669][T16042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.049625][T16042] team0: Port device team_slave_0 added [ 1173.057154][T16042] team0: Port device team_slave_1 added [ 1173.081551][T16042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.249380][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.471453][T16042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.521366][T16042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.534878][T16042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.567351][T16042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.521087][T16042] hsr_slave_0: entered promiscuous mode [ 1174.530107][T16042] hsr_slave_1: entered promiscuous mode [ 1174.539807][T16042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.555228][T13139] Bluetooth: hci4: command tx timeout [ 1174.579011][T16042] Cannot create hsr debugfs directory [ 1176.188516][T16115] binfmt_misc: register: failed to install interpreter file ./file0 [ 1176.617957][T13139] Bluetooth: hci4: command tx timeout [ 1176.858543][T16042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.246788][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.254555][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.379048][T16142] vivid-000: disconnect [ 1177.384536][T16142] vivid-000: reconnect [ 1178.726689][T13139] Bluetooth: hci4: command tx timeout [ 1178.862519][T16042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.079524][T16042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.152865][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 1179.159054][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 1179.249846][ T9264] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1179.255056][T16042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.418374][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1179.434692][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1179.498163][ T9264] usb 4-1: no configurations [ 1179.508262][ T9264] usb 4-1: can't read configurations, error -22 [ 1179.546411][T12642] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1179.706068][ T9264] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1179.966044][T12642] usb 3-1: Using ep0 maxpacket: 8 [ 1179.967661][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 1179.977508][T12642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1179.980562][T12642] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1179.997924][T16042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1180.005988][T12642] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1180.014385][T12642] usb 3-1: Product: syz [ 1180.019208][T12642] usb 3-1: Manufacturer: syz [ 1180.023796][T12642] usb 3-1: SerialNumber: syz [ 1180.048865][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 1180.066962][T16042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1180.100077][T16042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1180.167101][ T9264] usb 4-1: no configurations [ 1180.175918][ T9264] usb 4-1: can't read configurations, error -22 [ 1180.183063][T16042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1180.190153][ T9264] usb usb4-port1: attempt power cycle [ 1180.327501][T12642] usb 3-1: Invalid connection information received from device [ 1180.963771][T16042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.080086][T16042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.096194][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.103394][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.129209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.136388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1181.180465][ T9264] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1181.190100][T16042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.206611][ T9264] usb 4-1: no configurations [ 1181.212397][ T9264] usb 4-1: can't read configurations, error -22 [ 1181.378087][ T9264] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1181.393653][T16042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.407391][ T9264] usb 4-1: no configurations [ 1181.412093][ T9264] usb 4-1: can't read configurations, error -22 [ 1181.422801][ T9264] usb usb4-port1: unable to enumerate USB device [ 1181.499883][T16042] veth0_vlan: entered promiscuous mode [ 1181.514298][T16042] veth1_vlan: entered promiscuous mode [ 1181.567290][T16042] veth0_macvtap: entered promiscuous mode [ 1181.578499][T16042] veth1_macvtap: entered promiscuous mode [ 1181.613996][T16042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.680126][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1181.691209][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1181.712815][T16042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.728977][T16042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.737930][T16042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.321950][T16159] ceph: No mds server is up or the cluster is laggy [ 1182.329281][T16042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.340082][T16042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.367029][ T5907] kworker/0:5 (5907) used greatest stack depth: 15928 bytes left [ 1182.526593][ T9264] usb 3-1: USB disconnect, device number 41 [ 1182.672777][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.691938][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.748463][T10851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.757204][T10851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.434992][T16209] ieee802154 phy0 wpan0: encryption failed: -90 [ 1183.793700][T16216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3017'. [ 1184.582532][T16227] xt_ecn: cannot match TCP bits for non-tcp packets [ 1185.390525][T16233] FAULT_INJECTION: forcing a failure. [ 1185.390525][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.406424][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.3.3022 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1185.406450][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1185.406462][T16233] Call Trace: [ 1185.406470][T16233] [ 1185.406487][T16233] dump_stack_lvl+0x189/0x250 [ 1185.406513][T16233] ? __pfx____ratelimit+0x10/0x10 [ 1185.406538][T16233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.406558][T16233] ? __pfx__printk+0x10/0x10 [ 1185.406580][T16233] ? __might_fault+0xb0/0x130 [ 1185.406615][T16233] should_fail_ex+0x414/0x560 [ 1185.406644][T16233] _copy_from_iter+0x1db/0x16f0 [ 1185.406675][T16233] ? __pfx__copy_from_iter+0x10/0x10 [ 1185.406693][T16233] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1185.406718][T16233] ? skb_put+0x11b/0x210 [ 1185.406742][T16233] hci_sock_sendmsg+0x422/0xef0 [ 1185.406770][T16233] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1185.406796][T16233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1185.406819][T16233] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1185.406841][T16233] __sock_sendmsg+0x219/0x270 [ 1185.406869][T16233] sock_write_iter+0x258/0x330 [ 1185.406895][T16233] ? __pfx_sock_write_iter+0x10/0x10 [ 1185.406930][T16233] ? bpf_lsm_file_permission+0x9/0x20 [ 1185.406946][T16233] ? security_file_permission+0x75/0x290 [ 1185.406979][T16233] vfs_write+0x548/0xa90 [ 1185.407007][T16233] ? __pfx_sock_write_iter+0x10/0x10 [ 1185.407030][T16233] ? __pfx_vfs_write+0x10/0x10 [ 1185.407063][T16233] ? __fget_files+0x2a/0x420 [ 1185.407089][T16233] ksys_write+0x145/0x250 [ 1185.407114][T16233] ? __pfx_ksys_write+0x10/0x10 [ 1185.407134][T16233] ? rcu_is_watching+0x15/0xb0 [ 1185.407157][T16233] ? do_syscall_64+0xbe/0x3b0 [ 1185.407177][T16233] do_syscall_64+0xfa/0x3b0 [ 1185.407194][T16233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.407209][T16233] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1185.407225][T16233] ? clear_bhb_loop+0x60/0xb0 [ 1185.407244][T16233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.407260][T16233] RIP: 0033:0x7f5c77b8e929 [ 1185.407276][T16233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.407291][T16233] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1185.407311][T16233] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1185.407324][T16233] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 1185.407335][T16233] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.407347][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.407358][T16233] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1185.407386][T16233] [ 1185.929595][T16241] batman_adv: batadv0: Adding interface: dummy0 [ 1185.944587][T16241] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.976269][T16241] batman_adv: batadv0: Interface activated: dummy0 [ 1185.998619][T16241] batadv0: mtu less than device minimum [ 1186.006267][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.018429][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.030370][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.042353][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.054273][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.066217][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.078172][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.090108][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.102050][T16241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1186.409532][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3027'. [ 1186.444073][T16248] macvlan0: entered promiscuous mode [ 1186.450842][T16248] batadv_slave_0: entered promiscuous mode [ 1186.695567][ T43] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1186.752806][ T9264] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1186.881876][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.024771][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.139511][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1187.236321][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.317498][ T43] usb 3-1: config 0 descriptor?? [ 1187.432429][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1187.463959][ T9264] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 1187.489240][ T9264] usb 4-1: config 4 has no interface number 0 [ 1187.563397][ T5962] usb 3-1: USB disconnect, device number 42 [ 1187.624313][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1187.639170][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.651691][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1187.661406][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.676402][ T9] usb 1-1: config 0 descriptor?? [ 1187.695597][ T9] hub 1-1:0.0: USB hub found [ 1187.722954][ T9264] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1187.740090][ T9264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.749075][ T9264] usb 4-1: Product: syz [ 1187.753426][ T9264] usb 4-1: Manufacturer: syz [ 1187.758221][ T9264] usb 4-1: SerialNumber: syz [ 1187.812730][ T9264] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1187.860730][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1187.870835][T16269] netlink: 'syz.5.3034': attribute type 1 has an invalid length. [ 1187.878728][T16269] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1187.912893][ T9] hub 1-1:0.0: 1 port detected [ 1187.990398][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1188.013247][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1188.045911][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1188.057173][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1188.105016][ T9] usb 1-1: USB disconnect, device number 46 [ 1188.234092][T16279] netlink: 'syz.2.3037': attribute type 2 has an invalid length. [ 1188.861890][ T5894] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1189.100182][ T5894] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1189.100223][ T9264] vp7045: USB control message 'in' went wrong. [ 1189.116572][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1189.138105][ T9264] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1189.168361][ T5894] usb 3-1: Product: syz [ 1189.176370][ T5894] usb 3-1: Manufacturer: syz [ 1189.180994][ T5894] usb 3-1: SerialNumber: syz [ 1189.217576][ T5894] usb 3-1: config 0 descriptor?? [ 1189.250562][ T5894] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1189.269850][ T9264] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1189.285346][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 1189.291065][ T9264] usb 4-1: USB disconnect, device number 62 [ 1189.340714][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1189.372353][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 1189.411395][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1189.436694][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1189.459083][T16289] netlink: 'syz.2.3039': attribute type 6 has an invalid length. [ 1189.486410][ T5894] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1189.495553][T16298] netlink: 'syz.5.3040': attribute type 6 has an invalid length. [ 1190.903330][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1191.080985][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1191.097845][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1191.119973][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1191.143093][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1191.158775][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.166953][ T9] usb 7-1: Product: syz [ 1191.178492][ T9] usb 7-1: Manufacturer: syz [ 1191.186224][ T9] usb 7-1: SerialNumber: syz [ 1191.397457][ T9] usb 7-1: config 0 descriptor?? [ 1191.414054][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1191.423929][ T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1191.634405][T16327] dvmrp8: entered allmulticast mode [ 1191.876940][ T9264] usb 3-1: USB disconnect, device number 43 [ 1191.962652][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1191.991987][T16331] netlink: 'syz.2.3050': attribute type 7 has an invalid length. [ 1192.401900][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1192.423854][ T9] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1192.473600][ T9] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1192.481070][ T9] em28xx 7-1:0.0: No AC97 audio processor [ 1192.523032][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1192.753399][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 1193.671185][ T9264] usb 7-1: USB disconnect, device number 10 [ 1193.678465][ T9264] em28xx 7-1:0.0: Disconnecting em28xx [ 1193.767206][ T9264] em28xx 7-1:0.0: Freeing device [ 1193.914258][T16373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3063'. [ 1193.954273][T16373] netlink: 'syz.6.3063': attribute type 7 has an invalid length. [ 1193.959440][ T5894] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1194.180051][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1194.324949][ T5894] usb 1-1: device descriptor read/64, error -71 [ 1194.578696][ T5894] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1194.738792][ T5894] usb 1-1: device descriptor read/64, error -71 [ 1194.849086][ T5894] usb usb1-port1: attempt power cycle [ 1194.911833][T16407] netlink: 'syz.5.3075': attribute type 6 has an invalid length. [ 1195.009987][ T5962] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1195.064220][T16411] netlink: 'syz.5.3076': attribute type 4 has an invalid length. [ 1195.073625][T16412] vivid-000: disconnect [ 1195.078834][T16412] vivid-000: reconnect [ 1195.083787][T16411] netlink: 'syz.5.3076': attribute type 6 has an invalid length. [ 1195.103834][T16411] IPv6: NLM_F_CREATE should be specified when creating new route [ 1195.178509][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 1195.193023][ T5962] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1195.206737][ T5894] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1195.237241][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1195.253065][ T5894] usb 1-1: device descriptor read/8, error -71 [ 1195.266105][ T5962] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1195.282216][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.293199][ T5962] usb 3-1: Product: syz [ 1195.297477][ T5962] usb 3-1: Manufacturer: syz [ 1195.313504][ T5962] usb 3-1: SerialNumber: syz [ 1195.351792][ T5962] usb 3-1: config 0 descriptor?? [ 1195.373231][ T5962] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1195.386874][ T5962] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1195.508345][ T5894] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1195.593055][ T5894] usb 1-1: device descriptor read/8, error -71 [ 1195.732000][ T5894] usb usb1-port1: unable to enumerate USB device [ 1196.041249][ T5962] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1196.056458][ T5962] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1196.072447][ T5962] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1196.081658][ T5962] em28xx 3-1:0.0: No AC97 audio processor [ 1196.260098][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1196.274153][T16434] netlink: 'syz.6.3086': attribute type 7 has an invalid length. [ 1196.689916][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3091'. [ 1197.046703][T16458] vivid-000: disconnect [ 1197.051923][T16458] vivid-000: reconnect [ 1197.109660][T16459] ptrace attach of "./syz-executor exec"[16042] was attempted by " [ 1197.949542][ T5962] usb 3-1: USB disconnect, device number 44 [ 1198.785538][ T5962] em28xx 3-1:0.0: Disconnecting em28xx [ 1198.792811][ T5962] em28xx 3-1:0.0: Freeing device [ 1199.065867][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1199.065884][ T30] audit: type=1400 audit(1752135535.067:135): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=16476 comm="syz.2.3098" name="24" dev="tmpfs" ino=137 [ 1199.143119][T16483] netlink: 'syz.5.3097': attribute type 6 has an invalid length. [ 1199.366767][T16490] netlink: 'syz.6.3102': attribute type 1 has an invalid length. [ 1199.382538][T16490] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3102'. [ 1199.517567][T16494] ptrace attach of "./syz-executor exec"[16042] was attempted by " [ 1199.579912][ T6011] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1200.196447][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 1200.662281][T16506] FAULT_INJECTION: forcing a failure. [ 1200.662281][T16506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.701630][ T6011] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1200.716805][T16506] CPU: 1 UID: 0 PID: 16506 Comm: syz.2.3109 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1200.716829][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1200.716840][T16506] Call Trace: [ 1200.716848][T16506] [ 1200.716857][T16506] dump_stack_lvl+0x189/0x250 [ 1200.716884][T16506] ? __pfx____ratelimit+0x10/0x10 [ 1200.716910][T16506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.716930][T16506] ? __pfx__printk+0x10/0x10 [ 1200.716964][T16506] should_fail_ex+0x414/0x560 [ 1200.716993][T16506] _copy_to_user+0x31/0xb0 [ 1200.717016][T16506] simple_read_from_buffer+0xe1/0x170 [ 1200.717045][T16506] proc_fail_nth_read+0x1df/0x250 [ 1200.717068][T16506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.717090][T16506] ? rw_verify_area+0x258/0x650 [ 1200.717119][T16506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1200.717140][T16506] vfs_read+0x200/0x980 [ 1200.717169][T16506] ? __pfx___mutex_lock+0x10/0x10 [ 1200.717188][T16506] ? __pfx_vfs_read+0x10/0x10 [ 1200.717211][T16506] ? __fget_files+0x2a/0x420 [ 1200.717233][T16506] ? __fget_files+0x3a0/0x420 [ 1200.717249][T16506] ? __fget_files+0x2a/0x420 [ 1200.717276][T16506] ksys_read+0x145/0x250 [ 1200.717295][T16506] ? __fget_files+0x2a/0x420 [ 1200.717314][T16506] ? __pfx_ksys_read+0x10/0x10 [ 1200.717343][T16506] ? do_syscall_64+0xbe/0x3b0 [ 1200.717365][T16506] do_syscall_64+0xfa/0x3b0 [ 1200.717381][T16506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.717405][T16506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.717423][T16506] ? clear_bhb_loop+0x60/0xb0 [ 1200.717444][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.717462][T16506] RIP: 0033:0x7f0a5878d33c [ 1200.717479][T16506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1200.717495][T16506] RSP: 002b:00007f0a595c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1200.717515][T16506] RAX: ffffffffffffffda RBX: 00007f0a589b5fa0 RCX: 00007f0a5878d33c [ 1200.717529][T16506] RDX: 000000000000000f RSI: 00007f0a595c80a0 RDI: 0000000000000007 [ 1200.717541][T16506] RBP: 00007f0a595c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.717554][T16506] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1200.717567][T16506] R13: 0000000000000000 R14: 00007f0a589b5fa0 R15: 00007fffc5d76388 [ 1200.717597][T16506] [ 1200.974515][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1201.032195][ T6011] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1201.044537][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.052893][ T6011] usb 4-1: Product: syz [ 1201.057132][ T6011] usb 4-1: Manufacturer: syz [ 1201.061750][ T6011] usb 4-1: SerialNumber: syz [ 1201.070117][ T6011] usb 4-1: config 0 descriptor?? [ 1201.119673][ T6011] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1201.133154][ T6011] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1201.280835][T12642] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 1201.325898][T12642] hid-generic 0000:0003:0000.0009: unknown main item tag 0x0 [ 1201.371822][T16516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3111'. [ 1201.409185][T12642] hid-generic 0000:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1201.620068][T16526] fido_id[16526]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1201.698986][T16528] ptrace attach of "./syz-executor exec"[9440] was attempted by " [ 1202.425981][ T6011] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1202.547231][ T6011] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1202.561171][ T6011] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1202.571704][ T6011] em28xx 4-1:0.0: No AC97 audio processor [ 1202.637206][ T9264] usb 4-1: USB disconnect, device number 63 [ 1202.645296][ T9264] em28xx 4-1:0.0: Disconnecting em28xx [ 1202.652891][ T9264] em28xx 4-1:0.0: Freeing device [ 1202.774601][T12642] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1202.927168][T12642] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.957344][T12642] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1202.986454][T12642] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1203.000489][T12642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.097470][T12642] usb 7-1: config 0 descriptor?? [ 1203.858691][T12642] kye 0003:0458:5011.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1204.415145][T12642] kye 0003:0458:5011.000A: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 1204.426288][T12642] kye 0003:0458:5011.000A: tablet-enabling feature report not found [ 1204.434571][T12642] kye 0003:0458:5011.000A: tablet enabling failed [ 1204.446889][T12642] usb 7-1: USB disconnect, device number 11 [ 1204.536430][T16578] fido_id[16578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1206.217963][T16602] netlink: 'syz.2.3133': attribute type 30 has an invalid length. [ 1206.230595][T16602] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.239552][T16602] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.248242][T16602] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.258909][T16602] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.285195][T12642] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1206.851252][T16602] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.860221][T16602] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.870215][T16602] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.879959][T16602] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.202626][T12642] usb 1-1: Using ep0 maxpacket: 16 [ 1207.214281][T12642] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1207.226285][T12642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1207.261789][T12642] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1207.272145][T12642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.283971][T12642] usb 1-1: Product: syz [ 1207.288201][T12642] usb 1-1: Manufacturer: syz [ 1207.294290][T12642] usb 1-1: SerialNumber: syz [ 1207.350780][T12642] usb 1-1: config 0 descriptor?? [ 1207.421856][T12642] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1207.431812][T12642] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1208.029816][T12642] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1208.068627][T12642] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1208.105142][T12642] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1208.145374][T12642] em28xx 1-1:0.0: No AC97 audio processor [ 1208.279150][T16642] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3142'. [ 1209.071450][T12642] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1209.274358][ T6011] usb 1-1: USB disconnect, device number 51 [ 1209.282200][ T6011] em28xx 1-1:0.0: Disconnecting em28xx [ 1209.319948][ T6011] em28xx 1-1:0.0: Freeing device [ 1209.503020][T12642] usb 3-1: device descriptor read/64, error -71 [ 1209.781147][ T5962] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1209.841957][T16672] vivid-000: disconnect [ 1209.847533][T16672] vivid-000: reconnect [ 1209.901085][T10297] Bluetooth: hci1: command 0x0405 tx timeout [ 1210.482968][ T5962] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 1210.548275][T12642] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1210.981052][T12642] usb 3-1: device descriptor read/64, error -71 [ 1211.136337][ T5962] usb 7-1: config 0 has no interface number 0 [ 1211.145853][ T5962] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.157162][ T5962] usb 7-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.169621][ T5962] usb 7-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1211.178994][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.190023][ T5962] usb 7-1: config 0 descriptor?? [ 1211.224146][T12642] usb usb3-port1: attempt power cycle [ 1211.293612][T16681] FAULT_INJECTION: forcing a failure. [ 1211.293612][T16681] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1211.308461][T16681] CPU: 0 UID: 0 PID: 16681 Comm: syz.3.3155 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1211.308488][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1211.308499][T16681] Call Trace: [ 1211.308507][T16681] [ 1211.308515][T16681] dump_stack_lvl+0x189/0x250 [ 1211.308540][T16681] ? __pfx____ratelimit+0x10/0x10 [ 1211.308564][T16681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.308582][T16681] ? __pfx__printk+0x10/0x10 [ 1211.308607][T16681] ? fs_reclaim_acquire+0x7d/0x100 [ 1211.308635][T16681] should_fail_ex+0x414/0x560 [ 1211.308665][T16681] prepare_alloc_pages+0x213/0x610 [ 1211.308691][T16681] __alloc_frozen_pages_noprof+0x123/0x370 [ 1211.308716][T16681] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1211.308745][T16681] ? policy_nodemask+0x27c/0x720 [ 1211.308774][T16681] ? __lock_acquire+0xab9/0xd20 [ 1211.308798][T16681] alloc_pages_mpol+0x232/0x4a0 [ 1211.308828][T16681] vma_alloc_folio_noprof+0xe4/0x200 [ 1211.308856][T16681] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1211.308893][T16681] folio_prealloc+0x30/0x180 [ 1211.308920][T16681] __handle_mm_fault+0x2c88/0x5620 [ 1211.308968][T16681] ? __pfx___handle_mm_fault+0x10/0x10 [ 1211.309040][T16681] ? find_vma+0xe7/0x160 [ 1211.309063][T16681] ? __pfx_find_vma+0x10/0x10 [ 1211.309091][T16681] handle_mm_fault+0x2d5/0x7f0 [ 1211.309126][T16681] do_user_addr_fault+0x764/0x1390 [ 1211.309168][T16681] exc_page_fault+0x76/0xf0 [ 1211.309197][T16681] asm_exc_page_fault+0x26/0x30 [ 1211.309213][T16681] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1211.309234][T16681] Code: 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 00 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1211.309248][T16681] RSP: 0018:ffffc9000387fa18 EFLAGS: 00050202 [ 1211.309265][T16681] RAX: ffffffff84b82c01 RBX: ffff88807b600000 RCX: 0000000000000968 [ 1211.309278][T16681] RDX: 0000000000000000 RSI: ffff88807b600640 RDI: 0000200000008000 [ 1211.309290][T16681] RBP: ffffc9000387fb78 R08: ffff88807b600fa7 R09: 1ffff1100f6c01f4 [ 1211.309303][T16681] R10: dffffc0000000000 R11: ffffed100f6c01f5 R12: 1ffff9200070ffaf [ 1211.309316][T16681] R13: 00002000000079c0 R14: ffffc9000387fd88 R15: 0000000000000fa8 [ 1211.309337][T16681] ? _copy_to_iter+0x211/0x16f0 [ 1211.309360][T16681] _copy_to_iter+0x24c/0x16f0 [ 1211.309390][T16681] ? __pfx__copy_to_iter+0x10/0x10 [ 1211.309404][T16681] ? __up_read+0x280/0x680 [ 1211.309426][T16681] ? __pfx___up_read+0x10/0x10 [ 1211.309448][T16681] ? seq_read_iter+0xb7a/0xe10 [ 1211.309475][T16681] seq_read_iter+0xbeb/0xe10 [ 1211.309514][T16681] proc_reg_read_iter+0x1b7/0x280 [ 1211.309536][T16681] vfs_read+0x4cd/0x980 [ 1211.309568][T16681] ? __pfx_vfs_read+0x10/0x10 [ 1211.309602][T16681] ? __fget_files+0x2a/0x420 [ 1211.309628][T16681] ksys_read+0x145/0x250 [ 1211.309652][T16681] ? __pfx_ksys_read+0x10/0x10 [ 1211.309670][T16681] ? rcu_is_watching+0x15/0xb0 [ 1211.309695][T16681] ? do_syscall_64+0xbe/0x3b0 [ 1211.309716][T16681] do_syscall_64+0xfa/0x3b0 [ 1211.309731][T16681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1211.309761][T16681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.309777][T16681] ? clear_bhb_loop+0x60/0xb0 [ 1211.309797][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.309813][T16681] RIP: 0033:0x7f5c77b8e929 [ 1211.309827][T16681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.309841][T16681] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1211.309859][T16681] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1211.309872][T16681] RDX: 0000000000002020 RSI: 00002000000079c0 RDI: 0000000000000003 [ 1211.309884][T16681] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.309895][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.309906][T16681] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1211.309938][T16681] [ 1211.934806][T12642] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1212.159967][T12642] usb 3-1: device not accepting address 47, error -71 [ 1212.428421][ T5962] logitech-djreceiver 0003:046D:C534.000B: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.6-1/input28 [ 1212.903971][ T5962] usb 7-1: USB disconnect, device number 12 [ 1213.042826][T16696] fido_id[16696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1213.249380][ T9484] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1213.401134][ T9484] usb 1-1: Using ep0 maxpacket: 16 [ 1213.604633][ T9484] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1213.741213][ T9484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1213.915350][ T9484] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1213.927307][ T9484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.986707][ T9484] usb 1-1: Product: syz [ 1213.992174][ T9484] usb 1-1: Manufacturer: syz [ 1213.996806][ T9484] usb 1-1: SerialNumber: syz [ 1214.013412][ T9484] usb 1-1: config 0 descriptor?? [ 1214.037460][ T9484] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1214.052908][ T9484] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1214.388987][T16708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1214.395189][T16708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1214.405266][T16708] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1214.416111][T16708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1214.429401][T16708] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1214.506983][T16708] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1214.571113][T16708] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1214.601897][T16708] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1214.621689][T16708] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1214.873714][ T9484] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1214.944013][ T9484] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1215.004898][ T9484] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1215.051153][ T9484] em28xx 1-1:0.0: No AC97 audio processor [ 1215.506002][T16729] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3172'. [ 1215.718126][T13139] Bluetooth: hci3: command 0x0406 tx timeout [ 1215.915707][T16746] program syz.2.3178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1216.028165][ T9484] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1216.059976][ T5962] usb 1-1: USB disconnect, device number 52 [ 1216.067610][ T5962] em28xx 1-1:0.0: Disconnecting em28xx [ 1216.075072][ T5962] em28xx 1-1:0.0: Freeing device [ 1216.308048][ T9484] usb 4-1: Using ep0 maxpacket: 16 [ 1216.438410][T10297] Bluetooth: hci1: command 0x0405 tx timeout [ 1216.444686][T13139] Bluetooth: hci2: command 0x0c1a tx timeout [ 1216.470385][ T9484] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1216.497161][ T9484] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1216.523436][ T9484] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1216.535497][ T9484] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.549954][ T9484] usb 4-1: config 0 descriptor?? [ 1216.601848][T13139] Bluetooth: hci4: command 0x0c1a tx timeout [ 1217.310499][T16777] program syz.6.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.503201][ T9484] saitek 0003:06A3:0621.000C: unknown main item tag 0x0 [ 1217.527420][ T9484] saitek 0003:06A3:0621.000C: unknown main item tag 0x0 [ 1217.542763][ T9484] saitek 0003:06A3:0621.000C: unknown main item tag 0x0 [ 1217.557435][ T9484] saitek 0003:06A3:0621.000C: unknown main item tag 0x0 [ 1217.568571][ T9484] saitek 0003:06A3:0621.000C: unknown main item tag 0x0 [ 1217.597490][ T9484] saitek 0003:06A3:0621.000C: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 1217.649136][ T5962] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1217.775494][T16787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1217.869924][ T5962] usb 7-1: Using ep0 maxpacket: 16 [ 1218.884696][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1219.415830][T13139] Bluetooth: hci2: command 0x0c1a tx timeout [ 1219.422443][T13139] Bluetooth: hci1: command 0x0405 tx timeout [ 1219.435376][T13139] Bluetooth: hci4: command 0x0c1a tx timeout [ 1219.521147][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1219.534466][ T5962] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1219.543935][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.552014][ T5962] usb 7-1: Product: syz [ 1219.556305][ T5962] usb 7-1: Manufacturer: syz [ 1219.565845][ T5962] usb 7-1: SerialNumber: syz [ 1219.573823][ T5962] usb 7-1: config 0 descriptor?? [ 1219.582255][ T5962] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1219.591575][ T5962] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1219.713353][ T9484] usb 4-1: USB disconnect, device number 64 [ 1220.261032][ T5962] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1220.267941][ T5962] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1220.354705][ T5962] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1220.376417][ T5962] em28xx 7-1:0.0: No AC97 audio processor [ 1221.050884][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3198'. [ 1221.384798][T16817] comedi comedi1: Minor 0 could not be opened [ 1221.453238][ T5962] usb 7-1: USB disconnect, device number 13 [ 1221.464119][ T5962] em28xx 7-1:0.0: Disconnecting em28xx [ 1221.475719][T10297] Bluetooth: hci4: command 0x0c1a tx timeout [ 1221.481686][ T5962] em28xx 7-1:0.0: Freeing device [ 1221.485627][T13139] Bluetooth: hci2: command 0x0c1a tx timeout [ 1222.653580][T16837] net_ratelimit: 10 callbacks suppressed [ 1222.653599][T16837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1223.845252][T16852] FAULT_INJECTION: forcing a failure. [ 1223.845252][T16852] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.864192][T16852] CPU: 0 UID: 0 PID: 16852 Comm: syz.0.3215 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1223.864219][T16852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1223.864231][T16852] Call Trace: [ 1223.864239][T16852] [ 1223.864248][T16852] dump_stack_lvl+0x189/0x250 [ 1223.864272][T16852] ? __pfx____ratelimit+0x10/0x10 [ 1223.864297][T16852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1223.864317][T16852] ? __pfx__printk+0x10/0x10 [ 1223.864345][T16852] ? __pfx___might_resched+0x10/0x10 [ 1223.864364][T16852] ? fs_reclaim_acquire+0x7d/0x100 [ 1223.864387][T16852] should_fail_ex+0x414/0x560 [ 1223.864416][T16852] should_failslab+0xa8/0x100 [ 1223.864442][T16852] __kmalloc_noprof+0xcb/0x4f0 [ 1223.864463][T16852] ? kfree+0x4d/0x440 [ 1223.864482][T16852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1223.864506][T16852] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1223.864526][T16852] ? tomoyo_domain+0xda/0x130 [ 1223.864551][T16852] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1223.864575][T16852] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1223.864602][T16852] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1223.864642][T16852] ? __lock_acquire+0xab9/0xd20 [ 1223.864682][T16852] ? __fget_files+0x2a/0x420 [ 1223.864708][T16852] ? __fget_files+0x2a/0x420 [ 1223.864723][T16852] ? __fget_files+0x3a0/0x420 [ 1223.864738][T16852] ? __fget_files+0x2a/0x420 [ 1223.864759][T16852] security_file_ioctl+0xcb/0x2d0 [ 1223.864786][T16852] __se_sys_ioctl+0x47/0x170 [ 1223.864811][T16852] do_syscall_64+0xfa/0x3b0 [ 1223.864827][T16852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.864847][T16852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.864864][T16852] ? clear_bhb_loop+0x60/0xb0 [ 1223.864884][T16852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.864900][T16852] RIP: 0033:0x7f77d258e929 [ 1223.864915][T16852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.864929][T16852] RSP: 002b:00007f77d3356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.864948][T16852] RAX: ffffffffffffffda RBX: 00007f77d27b5fa0 RCX: 00007f77d258e929 [ 1223.864960][T16852] RDX: 0000000000000037 RSI: 000000004008700c RDI: 0000000000000003 [ 1223.864971][T16852] RBP: 00007f77d3356090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.864982][T16852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.864993][T16852] R13: 0000000000000000 R14: 00007f77d27b5fa0 R15: 00007ffe1e3973b8 [ 1223.865021][T16852] [ 1223.865029][T16852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1223.986949][T16836] Process accounting resumed [ 1224.144317][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1224.202066][T16858] 9pnet_fd: Insufficient options for proto=fd [ 1224.333925][T12642] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1224.343883][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1224.352489][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1224.373960][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1224.401521][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1224.416804][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.429012][ T9] usb 7-1: Product: syz [ 1224.433314][ T9] usb 7-1: Manufacturer: syz [ 1224.441278][ T9] usb 7-1: SerialNumber: syz [ 1224.511402][T12642] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1224.528553][ T9] usb 7-1: config 0 descriptor?? [ 1224.533729][T12642] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1224.541819][T12642] usb 1-1: Product: syz [ 1224.553437][T12642] usb 1-1: Manufacturer: syz [ 1224.565332][ T9] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1224.587412][T12642] usb 1-1: SerialNumber: syz [ 1224.594056][ T9] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1224.620901][T12642] usb 1-1: config 0 descriptor?? [ 1224.647888][T12642] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1224.669698][T12642] dvb-usb: bulk message failed: -22 (4/0) [ 1224.689301][T12642] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.706375][T12642] dvb-usb: bulk message failed: -22 (5/0) [ 1224.712195][T12642] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.728751][T12642] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1224.744734][T12642] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1224.856740][T16856] netlink: 'syz.0.3218': attribute type 6 has an invalid length. [ 1224.872451][ T5962] usb 1-1: USB disconnect, device number 53 [ 1225.019982][T16876] netlink: zone id is out of range [ 1225.026061][T16876] netlink: zone id is out of range [ 1225.032006][T16876] netlink: zone id is out of range [ 1225.041839][T16876] netlink: zone id is out of range [ 1225.053222][T16876] netlink: del zone limit has 4 unknown bytes [ 1225.192681][ T9] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1225.199523][ T9] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1225.498687][ T9] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1225.506368][ T9] em28xx 7-1:0.0: No AC97 audio processor [ 1226.686135][T16914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1226.732620][ T9484] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1227.101954][ T9] usb 7-1: USB disconnect, device number 14 [ 1227.271521][ T9] em28xx 7-1:0.0: Disconnecting em28xx [ 1227.398551][ T9] em28xx 7-1:0.0: Freeing device [ 1228.265280][T16920] FAULT_INJECTION: forcing a failure. [ 1228.265280][T16920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.324479][T16922] program syz.0.3241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1228.362384][ T9484] usb 4-1: Using ep0 maxpacket: 32 [ 1228.368531][T16920] CPU: 0 UID: 0 PID: 16920 Comm: syz.2.3240 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1228.368554][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1228.368565][T16920] Call Trace: [ 1228.368573][T16920] [ 1228.368581][T16920] dump_stack_lvl+0x189/0x250 [ 1228.368605][T16920] ? __pfx____ratelimit+0x10/0x10 [ 1228.368630][T16920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1228.368648][T16920] ? __pfx__printk+0x10/0x10 [ 1228.368670][T16920] ? __might_fault+0xb0/0x130 [ 1228.368703][T16920] should_fail_ex+0x414/0x560 [ 1228.368732][T16920] _copy_from_user+0x2d/0xb0 [ 1228.368753][T16920] __sys_connect+0x123/0x440 [ 1228.368772][T16920] ? __fget_files+0x3a0/0x420 [ 1228.368788][T16920] ? __pfx___sys_connect+0x10/0x10 [ 1228.368819][T16920] ? __pfx_ksys_write+0x10/0x10 [ 1228.368839][T16920] ? rcu_is_watching+0x15/0xb0 [ 1228.368865][T16920] __x64_sys_connect+0x7a/0x90 [ 1228.368885][T16920] do_syscall_64+0xfa/0x3b0 [ 1228.368900][T16920] ? lockdep_hardirqs_on+0x9c/0x150 [ 1228.368923][T16920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.368941][T16920] ? clear_bhb_loop+0x60/0xb0 [ 1228.368961][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.368978][T16920] RIP: 0033:0x7f0a5878e929 [ 1228.368993][T16920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1228.369016][T16920] RSP: 002b:00007f0a595c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1228.369035][T16920] RAX: ffffffffffffffda RBX: 00007f0a589b5fa0 RCX: 00007f0a5878e929 [ 1228.369049][T16920] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1228.369060][T16920] RBP: 00007f0a595c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.369071][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.369082][T16920] R13: 0000000000000000 R14: 00007f0a589b5fa0 R15: 00007fffc5d76388 [ 1228.369111][T16920] [ 1228.369382][ T9484] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.607548][ T9484] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.621681][ T9484] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1229.784184][ T9484] usb 4-1: string descriptor 0 read error: -71 [ 1229.790593][ T9484] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1229.802429][ T9484] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1229.819570][ T9484] usb 4-1: can't set config #1, error -71 [ 1229.896406][ T9484] usb 4-1: USB disconnect, device number 65 [ 1230.006236][T16947] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3251'. [ 1230.070641][ T9264] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1230.109891][T16953] program syz.2.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.241101][ T9264] usb 7-1: Using ep0 maxpacket: 16 [ 1230.249838][ T9264] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1230.268289][ T9264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1230.289154][ T9264] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1230.298579][ T9264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.388989][ T9264] usb 7-1: Product: syz [ 1230.393980][ T9264] usb 7-1: Manufacturer: syz [ 1230.398727][ T9264] usb 7-1: SerialNumber: syz [ 1230.864239][ T9264] usb 7-1: config 0 descriptor?? [ 1230.951355][ T9264] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1230.990439][ T9264] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1231.579112][ T9264] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1231.593431][ T9264] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1231.600657][ T6011] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1231.800074][ T6011] usb 4-1: Using ep0 maxpacket: 32 [ 1231.891903][ T9264] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1231.914104][ T9264] em28xx 7-1:0.0: No AC97 audio processor [ 1231.984981][ T6011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.998424][ T6011] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.008699][ T6011] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1232.026794][ T6011] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1232.036172][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1232.047125][ T6011] usb 4-1: Product: syz [ 1232.051580][ T6011] usb 4-1: Manufacturer: syz [ 1232.056402][ T6011] usb 4-1: SerialNumber: syz [ 1232.068996][ T6011] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 1232.143038][T16999] program syz.0.3269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1232.345487][ T6011] usb 4-1: USB disconnect, device number 66 [ 1232.393187][ T6011] appletouch 4-1:1.0: input: appletouch disconnected [ 1232.410509][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1232.467760][T17009] netlink: 'syz.5.3272': attribute type 6 has an invalid length. [ 1232.689783][ T9] usb 3-1: device descriptor read/64, error -71 [ 1233.049670][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1233.304175][T12642] usb 7-1: USB disconnect, device number 15 [ 1233.335928][T12642] em28xx 7-1:0.0: Disconnecting em28xx [ 1233.430371][T12642] em28xx 7-1:0.0: Freeing device [ 1233.435515][ T9] usb 3-1: device descriptor read/64, error -71 [ 1233.569588][ T9] usb usb3-port1: attempt power cycle [ 1233.663988][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1233.949187][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1234.756231][T17026] netlink: 'syz.0.3281': attribute type 6 has an invalid length. [ 1234.799177][ T9] usb 3-1: device descriptor read/8, error -71 [ 1235.066196][T17049] FAULT_INJECTION: forcing a failure. [ 1235.066196][T17049] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.079033][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1235.087148][T17049] CPU: 1 UID: 0 PID: 17049 Comm: syz.3.3287 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1235.087171][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1235.087181][T17049] Call Trace: [ 1235.087190][T17049] [ 1235.087197][T17049] dump_stack_lvl+0x189/0x250 [ 1235.087221][T17049] ? __pfx____ratelimit+0x10/0x10 [ 1235.087246][T17049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.087264][T17049] ? __pfx__printk+0x10/0x10 [ 1235.087289][T17049] ? __pfx___might_resched+0x10/0x10 [ 1235.087307][T17049] ? fs_reclaim_acquire+0x7d/0x100 [ 1235.087328][T17049] should_fail_ex+0x414/0x560 [ 1235.087357][T17049] should_failslab+0xa8/0x100 [ 1235.087383][T17049] __kmalloc_noprof+0xcb/0x4f0 [ 1235.087404][T17049] ? kfree+0x4d/0x440 [ 1235.087421][T17049] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1235.087445][T17049] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1235.087466][T17049] ? tomoyo_domain+0xda/0x130 [ 1235.087489][T17049] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1235.087520][T17049] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1235.087547][T17049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1235.087585][T17049] ? __lock_acquire+0xab9/0xd20 [ 1235.087621][T17049] ? __fget_files+0x2a/0x420 [ 1235.087639][T17049] ? __fget_files+0x2a/0x420 [ 1235.087653][T17049] ? __fget_files+0x3a0/0x420 [ 1235.087668][T17049] ? __fget_files+0x2a/0x420 [ 1235.087687][T17049] security_file_ioctl+0xcb/0x2d0 [ 1235.087714][T17049] __se_sys_ioctl+0x47/0x170 [ 1235.087738][T17049] do_syscall_64+0xfa/0x3b0 [ 1235.087753][T17049] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.087776][T17049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.087794][T17049] ? clear_bhb_loop+0x60/0xb0 [ 1235.087814][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.087831][T17049] RIP: 0033:0x7f5c77b8e929 [ 1235.087846][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.087861][T17049] RSP: 002b:00007f5c78ab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.087880][T17049] RAX: ffffffffffffffda RBX: 00007f5c77db5fa0 RCX: 00007f5c77b8e929 [ 1235.087893][T17049] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003 [ 1235.087905][T17049] RBP: 00007f5c78ab4090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.087916][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.087925][T17049] R13: 0000000000000000 R14: 00007f5c77db5fa0 R15: 00007ffcbaea3d48 [ 1235.087954][T17049] [ 1235.332048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.360157][T17049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1235.366993][ T9] usb 3-1: device descriptor read/8, error -71 [ 1235.376558][T17049] usb usb8: usbfs: process 17049 (syz.3.3287) did not claim interface 0 before use [ 1235.479203][ T9] usb usb3-port1: unable to enumerate USB device [ 1235.488261][ T5894] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1235.652821][ T5894] usb 7-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1235.668314][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1235.676425][ T5894] usb 7-1: Product: syz [ 1235.696761][ T5894] usb 7-1: Manufacturer: syz [ 1235.701732][ T5894] usb 7-1: SerialNumber: syz [ 1235.731768][ T5894] usb 7-1: config 0 descriptor?? [ 1235.746483][ T5894] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1235.758244][ T5894] dvb-usb: bulk message failed: -22 (4/0) [ 1235.764037][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1235.788694][ T5894] dvb-usb: bulk message failed: -22 (5/0) [ 1235.798106][ T5894] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1235.823394][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1235.860970][ T5894] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1235.916943][T17063] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.928322][T17063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.938875][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1235.947682][T17063] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.953620][T17047] netlink: 'syz.6.3286': attribute type 6 has an invalid length. [ 1235.971330][T17063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.979204][T17063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1236.034684][ T5894] usb 7-1: USB disconnect, device number 16 [ 1236.100662][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1236.117602][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.135828][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.155002][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.209517][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1236.228729][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1236.258033][ T9] usb 3-1: Product: syz [ 1236.265286][ T9] usb 3-1: Manufacturer: syz [ 1236.280777][ T9] usb 3-1: SerialNumber: syz [ 1236.320524][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input25 [ 1236.550196][ T9] usb 3-1: USB disconnect, device number 53 [ 1236.627321][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 1237.225322][T17087] program syz.6.3299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1237.287705][T17062] chnl_net:caif_netlink_parms(): no params data found [ 1237.593685][T17062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.604271][T17062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.620219][T17062] bridge_slave_0: entered allmulticast mode [ 1237.638658][T17062] bridge_slave_0: entered promiscuous mode [ 1237.653901][T17062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.662562][T17062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.681599][T17062] bridge_slave_1: entered allmulticast mode [ 1237.693322][T17062] bridge_slave_1: entered promiscuous mode [ 1237.717243][ T9484] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1237.900189][ T9484] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1237.914156][ T9484] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.935023][ T9484] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1237.951939][ T9484] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.969714][T17062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.990206][ T9484] usb 7-1: config 0 descriptor?? [ 1238.005807][T17062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.027365][T17063] Bluetooth: hci0: command tx timeout [ 1238.315459][T17062] team0: Port device team_slave_0 added [ 1238.331767][T17062] team0: Port device team_slave_1 added [ 1238.473722][ T5894] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1238.557909][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.571201][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.927038][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1239.057108][T17093] FAULT_INJECTION: forcing a failure. [ 1239.057108][T17093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.083741][T17093] CPU: 0 UID: 0 PID: 17093 Comm: syz.6.3302 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1239.083768][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1239.083780][T17093] Call Trace: [ 1239.083788][T17093] [ 1239.083796][T17093] dump_stack_lvl+0x189/0x250 [ 1239.083821][T17093] ? __pfx____ratelimit+0x10/0x10 [ 1239.083845][T17093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.083872][T17093] ? __pfx__printk+0x10/0x10 [ 1239.083907][T17093] should_fail_ex+0x414/0x560 [ 1239.083936][T17093] _copy_to_user+0x31/0xb0 [ 1239.083958][T17093] simple_read_from_buffer+0xe1/0x170 [ 1239.083988][T17093] proc_fail_nth_read+0x1df/0x250 [ 1239.084011][T17093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.084032][T17093] ? rw_verify_area+0x258/0x650 [ 1239.084053][T17093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.084073][T17093] vfs_read+0x200/0x980 [ 1239.084100][T17093] ? __pfx___mutex_lock+0x10/0x10 [ 1239.084118][T17093] ? __pfx_vfs_read+0x10/0x10 [ 1239.084141][T17093] ? __fget_files+0x2a/0x420 [ 1239.084162][T17093] ? __fget_files+0x3a0/0x420 [ 1239.084178][T17093] ? __fget_files+0x2a/0x420 [ 1239.084204][T17093] ksys_read+0x145/0x250 [ 1239.084229][T17093] ? __pfx_ksys_read+0x10/0x10 [ 1239.084264][T17093] do_syscall_64+0xfa/0x3b0 [ 1239.084282][T17093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.084299][T17093] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1239.084315][T17093] ? clear_bhb_loop+0x60/0xb0 [ 1239.084336][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.084353][T17093] RIP: 0033:0x7fcd7798d33c [ 1239.084369][T17093] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1239.084384][T17093] RSP: 002b:00007fcd7888b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1239.084402][T17093] RAX: ffffffffffffffda RBX: 00007fcd77bb5fa0 RCX: 00007fcd7798d33c [ 1239.084414][T17093] RDX: 000000000000000f RSI: 00007fcd7888b0a0 RDI: 0000000000000004 [ 1239.084426][T17093] RBP: 00007fcd7888b090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.084437][T17093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.084447][T17093] R13: 0000000000000000 R14: 00007fcd77bb5fa0 R15: 00007ffcfb1b8258 [ 1239.084476][T17093] [ 1239.144536][ T9484] hid-generic 0003:04F3:0754.000D: unknown main item tag 0x0 [ 1239.148564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.338603][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.353058][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.363175][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.378723][T17062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.396316][ T9484] hid-generic 0003:04F3:0754.000D: unknown main item tag 0x0 [ 1239.403777][ T9484] hid-generic 0003:04F3:0754.000D: unknown main item tag 0x0 [ 1239.411879][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.444791][ T9484] hid-generic 0003:04F3:0754.000D: unknown main item tag 0x0 [ 1239.454249][ T9484] hid-generic 0003:04F3:0754.000D: unknown main item tag 0x0 [ 1239.463281][ T5894] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1239.472615][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1239.487064][T17062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.513983][ T9484] hid-generic 0003:04F3:0754.000D: failed to start in urb: -90 [ 1239.525847][ T5894] usb 3-1: Product: syz [ 1239.533953][ T5894] usb 3-1: Manufacturer: syz [ 1239.540271][ T5894] usb 3-1: SerialNumber: syz [ 1239.764251][T17062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.774890][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.800866][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.819772][T17062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.908757][ T9484] hid-generic 0003:04F3:0754.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 1239.931537][ T5894] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 1239.970513][ T9484] usb 7-1: USB disconnect, device number 17 [ 1240.117713][T17063] Bluetooth: hci0: command tx timeout [ 1240.119944][T17138] fido_id[17138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1240.175490][ T5894] usb 3-1: USB disconnect, device number 54 [ 1240.223864][ T5894] appletouch 3-1:1.0: input: appletouch disconnected [ 1240.243417][T17062] hsr_slave_0: entered promiscuous mode [ 1240.260471][T17062] hsr_slave_1: entered promiscuous mode [ 1240.270641][T17062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1240.281928][T17062] Cannot create hsr debugfs directory [ 1240.326300][ T9484] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1240.531416][ T9484] usb 7-1: config 0 has an invalid interface number: 186 but max is 1 [ 1240.550806][ T9484] usb 7-1: config 0 has no interface number 1 [ 1240.562071][ T9484] usb 7-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 1240.571611][ T9484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.579973][ T9484] usb 7-1: Product: syz [ 1240.584299][ T9484] usb 7-1: Manufacturer: syz [ 1240.589592][ T9484] usb 7-1: SerialNumber: syz [ 1240.605138][ T9484] usb 7-1: config 0 descriptor?? [ 1240.730226][T17062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.869301][T17062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.003174][T17153] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3321'. [ 1241.145036][T17062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.307629][T17062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.133097][T17062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1242.173436][T17062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1242.185213][T17063] Bluetooth: hci0: command tx timeout [ 1242.283234][T17062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1242.314975][T17062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1242.854343][ T5894] usb 7-1: USB disconnect, device number 18 [ 1243.008909][T17062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.052346][T17062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.163466][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.170721][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.212309][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.219567][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.620049][T17189] ptrace attach of "./syz-executor exec"[15859] was attempted by "./syz-executor exec"[17189] [ 1243.669514][ T5894] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1243.837369][ T5894] usb 7-1: Using ep0 maxpacket: 32 [ 1243.853100][ T5894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.904109][ T5894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.913894][ T5894] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.960977][ T5894] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1243.971776][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1244.011682][ T5894] usb 7-1: Product: syz [ 1244.016626][ T5894] usb 7-1: Manufacturer: syz [ 1244.064814][ T5894] usb 7-1: SerialNumber: syz [ 1244.125422][ T5894] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input27 [ 1244.142972][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.265358][T17063] Bluetooth: hci0: command tx timeout [ 1244.323056][ T5894] usb 7-1: USB disconnect, device number 19 [ 1244.336206][T17062] veth0_vlan: entered promiscuous mode [ 1244.354287][ T6011] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1244.398749][ T5894] appletouch 7-1:1.0: input: appletouch disconnected [ 1244.410511][T17062] veth1_vlan: entered promiscuous mode [ 1244.541230][T17062] veth0_macvtap: entered promiscuous mode [ 1244.549020][ T6011] usb 3-1: Using ep0 maxpacket: 8 [ 1244.561288][ T6011] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1244.579048][T17062] veth1_macvtap: entered promiscuous mode [ 1244.592219][ T6011] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1244.638767][ T6011] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1244.657699][ T6011] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1244.663209][T17062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.673697][ T6011] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.688111][T17062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.691236][T17062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.704896][ T6011] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1244.713358][T17062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.731034][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.731356][T17062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.799699][T17062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.972987][ T6011] usb 3-1: usb_control_msg returned -32 [ 1245.003348][ T6011] usbtmc 3-1:16.0: can't read capabilities [ 1245.063936][ T6011] usb 3-1: USB disconnect, device number 55 [ 1245.106708][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.151087][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.465354][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1245.523104][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.531801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.811006][ C0] sched: DL replenish lagged too much [ 1250.421030][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1251.390815][ T6011] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1251.568823][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1251.590036][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.615323][ T6011] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1251.647300][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.678751][ T6011] usb 1-1: config 0 descriptor?? [ 1252.115071][ T6011] hid-generic 0003:04F3:0754.000E: unknown main item tag 0x0 [ 1252.132964][ T6011] hid-generic 0003:04F3:0754.000E: unknown main item tag 0x0 [ 1252.145172][ T6011] hid-generic 0003:04F3:0754.000E: unknown main item tag 0x0 [ 1252.155913][ T6011] hid-generic 0003:04F3:0754.000E: unknown main item tag 0x0 [ 1252.165993][ T6011] hid-generic 0003:04F3:0754.000E: unknown main item tag 0x0 [ 1252.185763][ T6011] hid-generic 0003:04F3:0754.000E: failed to start in urb: -90 [ 1252.220275][ T6011] hid-generic 0003:04F3:0754.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.0-1/input0 [ 1252.971941][T17251] blkio.reset_stats is deprecated [ 1253.257486][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1254.273244][ T5894] usb 1-1: USB disconnect, device number 54 [ 1254.848671][ T5894] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1255.030656][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 1255.086605][ T5894] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1255.140473][ T5894] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.178219][ T5894] usb 1-1: config 6 has no interface number 0 [ 1255.198384][ T5894] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1255.254112][ T5894] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1255.418044][ T5894] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1255.545201][ T5894] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1255.580507][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.612870][ T5894] usb 1-1: Product: syz [ 1255.617378][ T5894] usb 1-1: Manufacturer: syz [ 1255.631808][ T5894] usb 1-1: SerialNumber: syz [ 1255.931815][ T5894] hso 1-1:6.2: Failed to find INT IN ep [ 1256.451066][ T9484] usb 1-1: USB disconnect, device number 55 [ 1257.027086][T17285] Bluetooth: MGMT ver 1.23 [ 1257.081710][T10697] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1257.602900][ T7144] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1259.202367][ T9484] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1259.369824][ T9484] usb 1-1: Using ep0 maxpacket: 8 [ 1259.383666][ T9484] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1259.400030][ T9484] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1259.414910][ T9484] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1259.432702][ T9484] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1259.445048][ T9484] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.472065][ T9484] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1259.494053][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.909258][ T9484] usb 1-1: GET_CAPABILITIES returned 0 [ 1259.949090][ T9484] usbtmc 1-1:16.0: can't read capabilities [ 1263.081466][ T9484] usb 1-1: USB disconnect, device number 56 [ 1264.185957][T17317] FAULT_INJECTION: forcing a failure. [ 1264.185957][T17317] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.335116][T17317] CPU: 1 UID: 0 PID: 17317 Comm: syz.0.3367 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 1264.335145][T17317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1264.335157][T17317] Call Trace: [ 1264.335165][T17317] [ 1264.335173][T17317] dump_stack_lvl+0x189/0x250 [ 1264.335214][T17317] ? __pfx____ratelimit+0x10/0x10 [ 1264.335239][T17317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.335258][T17317] ? __pfx__printk+0x10/0x10 [ 1264.335286][T17317] ? __pfx___might_resched+0x10/0x10 [ 1264.335309][T17317] ? fs_reclaim_acquire+0x7d/0x100 [ 1264.335333][T17317] should_fail_ex+0x414/0x560 [ 1264.335361][T17317] should_failslab+0xa8/0x100 [ 1264.335387][T17317] __kmalloc_noprof+0xcb/0x4f0 [ 1264.335409][T17317] ? kfree+0x4d/0x440 [ 1264.335427][T17317] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1264.335452][T17317] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1264.335472][T17317] ? tomoyo_domain+0xda/0x130 [ 1264.335496][T17317] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1264.335519][T17317] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1264.335546][T17317] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1264.335588][T17317] ? __lock_acquire+0xab9/0xd20 [ 1264.335634][T17317] ? __fget_files+0x2a/0x420 [ 1264.335654][T17317] ? __fget_files+0x2a/0x420 [ 1264.335668][T17317] ? __fget_files+0x3a0/0x420 [ 1264.335683][T17317] ? __fget_files+0x2a/0x420 [ 1264.335704][T17317] security_file_ioctl+0xcb/0x2d0 [ 1264.335730][T17317] __se_sys_ioctl+0x47/0x170 [ 1264.335759][T17317] do_syscall_64+0xfa/0x3b0 [ 1264.335775][T17317] ? lockdep_hardirqs_on+0x9c/0x150 [ 1264.335798][T17317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.335816][T17317] ? clear_bhb_loop+0x60/0xb0 [ 1264.335837][T17317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.335854][T17317] RIP: 0033:0x7f77d258e929 [ 1264.335875][T17317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.335890][T17317] RSP: 002b:00007f77d3356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.335909][T17317] RAX: ffffffffffffffda RBX: 00007f77d27b5fa0 RCX: 00007f77d258e929 [ 1264.335923][T17317] RDX: 0000200000000100 RSI: 0000000000004606 RDI: 0000000000000003 [ 1264.335934][T17317] RBP: 00007f77d3356090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.335946][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.335956][T17317] R13: 0000000000000000 R14: 00007f77d27b5fa0 R15: 00007ffe1e3973b8 [ 1264.335985][T17317] [ 1264.335993][T17317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1265.068303][T10297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1265.082579][T10297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1265.091673][T10297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1265.100532][T10297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1265.119218][T10297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1268.058026][T10297] Bluetooth: hci3: command tx timeout [ 1270.595854][T17063] Bluetooth: hci3: command tx timeout [ 1272.912539][T10297] Bluetooth: hci3: command tx timeout [ 1275.465537][T10297] Bluetooth: hci3: command tx timeout [ 1300.187584][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.203882][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1358.957796][T10297] Bluetooth: hci0: command 0x0406 tx timeout [ 1362.079617][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.460370][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.450687][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1370.457674][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17328/1:b..l [ 1370.466631][ C0] rcu: (detected by 0, t=10503 jiffies, g=66173, q=288383 ncpus=2) [ 1370.474618][ C0] task:syz.5.3369 state:R running task stack:26728 pid:17328 tgid:17328 ppid:9440 task_flags:0x40004c flags:0x00004000 [ 1370.489237][ C0] Call Trace: [ 1370.492535][ C0] [ 1370.495479][ C0] __schedule+0x16a2/0x4cb0 [ 1370.500012][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.505152][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.510275][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1370.515580][ C0] ? __pfx___schedule+0x10/0x10 [ 1370.520463][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1370.525769][ C0] preempt_schedule_irq+0xb5/0x150 [ 1370.530895][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1370.536645][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1370.542468][ C0] irqentry_exit+0x6f/0x90 [ 1370.546912][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1370.552903][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1370.558195][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab e1 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1370.577810][ C0] RSP: 0018:ffffc900038eefd8 EFLAGS: 00000206 [ 1370.583890][ C0] RAX: a6ffaecc4c3dd800 RBX: 0000000000000000 RCX: a6ffaecc4c3dd800 [ 1370.591872][ C0] RDX: 0000000000000000 RSI: ffffffff8db71883 RDI: ffffffff8be1ca40 [ 1370.599852][ C0] RBP: ffffffff81729ae5 R08: 0000000000000000 R09: ffffffff81729ae5 [ 1370.607831][ C0] R10: ffffc900038ef198 R11: ffffffff81acf290 R12: 0000000000000002 [ 1370.615810][ C0] R13: ffffffff8e13f160 R14: 0000000000000000 R15: 0000000000000246 [ 1370.623791][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.628918][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1370.635087][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.640227][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.645344][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.651424][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.656544][ C0] unwind_next_frame+0xc2/0x2390 [ 1370.661490][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.666617][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1370.671737][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1370.676428][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1370.682594][ C0] arch_stack_walk+0x11c/0x150 [ 1370.687378][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.694246][ C0] stack_trace_save+0x9c/0xe0 [ 1370.698940][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1370.704345][ C0] kasan_save_track+0x3e/0x80 [ 1370.709033][ C0] ? kasan_save_track+0x3e/0x80 [ 1370.713897][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1370.718936][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1370.724585][ C0] ? fill_pool+0x100/0x570 [ 1370.729011][ C0] ? debug_object_activate+0x383/0x420 [ 1370.734480][ C0] ? call_rcu+0xaa/0x9c0 [ 1370.738732][ C0] ? kmem_cache_free+0x309/0x400 [ 1370.743685][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 1370.748543][ C0] ? unlink_anon_vmas+0x503/0x670 [ 1370.753581][ C0] ? free_pgtables+0x7bf/0xaf0 [ 1370.758362][ C0] ? exit_mmap+0x444/0xb50 [ 1370.762795][ C0] ? __mmput+0x118/0x410 [ 1370.767052][ C0] ? exit_mm+0x1da/0x2c0 [ 1370.771304][ C0] ? do_exit+0x648/0x22e0 [ 1370.775645][ C0] ? do_group_exit+0x21c/0x2d0 [ 1370.780425][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 1370.785641][ C0] ? x64_sys_call+0x21ba/0x21c0 [ 1370.790504][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1370.795187][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.801311][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1370.806181][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1370.811661][ C0] ? fill_pool+0x100/0x570 [ 1370.816094][ C0] fill_pool+0x100/0x570 [ 1370.820351][ C0] ? debug_object_activate+0x35a/0x420 [ 1370.825825][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1370.830597][ C0] ? kasan_save_stack+0x4d/0x60 [ 1370.835457][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 1370.840836][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 1370.845706][ C0] ? debug_object_activate+0x35a/0x420 [ 1370.851182][ C0] debug_object_activate+0x383/0x420 [ 1370.856489][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1370.862650][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 1370.867504][ C0] call_rcu+0xaa/0x9c0 [ 1370.871599][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1370.876299][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 1370.881160][ C0] kmem_cache_free+0x309/0x400 [ 1370.885943][ C0] __put_anon_vma+0x12b/0x2d0 [ 1370.890633][ C0] unlink_anon_vmas+0x503/0x670 [ 1370.895510][ C0] free_pgtables+0x7bf/0xaf0 [ 1370.900114][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1370.905244][ C0] ? __pfx_down_write+0x10/0x10 [ 1370.910108][ C0] ? __mas_set_range+0x12f/0x3c0 [ 1370.915061][ C0] exit_mmap+0x444/0xb50 [ 1370.919321][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1370.924537][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1370.929312][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1370.934963][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1370.939672][ C0] ? uprobe_clear_state+0x274/0x290 [ 1370.944890][ C0] ? mm_update_next_owner+0xa7/0x870 [ 1370.950207][ C0] __mmput+0x118/0x410 [ 1370.954298][ C0] exit_mm+0x1da/0x2c0 [ 1370.958392][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1370.963003][ C0] ? rcu_is_watching+0x15/0xb0 [ 1370.967783][ C0] do_exit+0x648/0x22e0 [ 1370.971978][ C0] ? preempt_schedule_common+0x83/0xd0 [ 1370.977453][ C0] ? preempt_schedule+0xae/0xc0 [ 1370.982322][ C0] ? __pfx_do_exit+0x10/0x10 [ 1370.986933][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1370.992341][ C0] do_group_exit+0x21c/0x2d0 [ 1370.996960][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1371.001999][ C0] x64_sys_call+0x21ba/0x21c0 [ 1371.006688][ C0] do_syscall_64+0xfa/0x3b0 [ 1371.011203][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1371.016415][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.022489][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1371.027183][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.033086][ C0] RIP: 0033:0x7f5b9ab8e929 [ 1371.037510][ C0] RSP: 002b:00007fffe6d416c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1371.045936][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b9ab8e929 [ 1371.053926][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1371.061911][ C0] RBP: 00007fffe6d4172c R08: 00000005e6d417bf R09: 0000000000000063 [ 1371.069896][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001bc [ 1371.077877][ C0] R13: 0000000000000063 R14: 000000000013439b R15: 00007fffe6d41780 [ 1371.085884][ C0]