last executing test programs: 18.222395952s ago: executing program 3 (id=2305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0xfffffffffffffdef) 16.924205595s ago: executing program 3 (id=2310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(&(0x7f0000000340), 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, &(0x7f00000001c0)=""/60, &(0x7f0000000300)=0x3c) 15.507314377s ago: executing program 4 (id=2312): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r6, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) 13.864330126s ago: executing program 4 (id=2313): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a) sendmsg$nl_route(r0, 0x0, 0x4000864) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000800400000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) 13.857261245s ago: executing program 1 (id=2314): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_io_uring_setup(0x6375, &(0x7f0000000140)={0x0, 0xca65, 0x10000, 0x2, 0x2}, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) 13.308135846s ago: executing program 3 (id=2316): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x48080, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = dup(r3) write$binfmt_aout(r4, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x80000, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x40000c4) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000180)}, {&(0x7f0000000a80)="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", 0x3ed}], 0x2}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072b1d810120a105d5afc0102030109021b0001000000000904"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x124a82, 0x0) 12.481775912s ago: executing program 1 (id=2317): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) socket(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0x800, 0x4, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x85, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x80, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x2, '\x00', 0x9}, {0x7, 0x2, 0xfd, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0xd}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000040000000000000001ffffffff8c"], 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f00000000c0)={[{0x8, 0x4e00, "9903a146705af158"}]}) 9.066457349s ago: executing program 4 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000010711e0e20000000000001090224000100000004100400058203000100092100000002220300090581030000ee0501"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x31, 0x3, {0x3, 0x21, "96"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r8, &(0x7f0000001140)=[{&(0x7f00000000c0)="4904522d30d71d5dca000000000000826abc0b29f8a8d1796420c0296d409fc1059f0400000006bbe87fb9b656390555dbddda96", 0x34}, {&(0x7f0000000140)}], 0x2, 0x4000001, 0x0) sendfile(r7, r8, 0x0, 0x8000fb00) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000000200)=ANY=[]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="60000000020603000000000000000000091a83d0dc0476b6ef8e1fe9f0d800000205000100070000000900020073797a32000000001400078083ff1500020000000800124000000000050005000200000005000400010000000000040002000000"], 0x60}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r11, 0x40284504, &(0x7f0000000080)={0x73, 0x0, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 8.850970997s ago: executing program 3 (id=2325): socket$kcm(0x29, 0xa, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000020000000000004279c9373388ccd0dde5a7823cf03742ec1c048db9cdd7646603a7a494565d7405ff3c22f413182426107729d62f30e8991cb1b083ff4fe9b750258034fd688dec9eca9a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r2, 0xc8cfe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1300, 0x1d) 8.660014543s ago: executing program 1 (id=2326): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xffa1}, {0x0, 0x6}}}, 0x1c}}, 0x2008020) 7.498598696s ago: executing program 1 (id=2328): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f3f245a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0xf7fffffe, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000003c0)={@hyper, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) 5.497639288s ago: executing program 0 (id=2334): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000001a00000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xprtrdma_post_send\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303045303031917cb965cf30303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) write$snddsp(r3, &(0x7f0000000180)="ee", 0x1) syz_fuse_handle_req(r1, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvfrom(r5, 0x0, 0x0, 0x10101, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) close(r6) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000940)=0x400) 5.372695761s ago: executing program 2 (id=2335): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) writev(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x3000000, 0x0, 0x880}, 0x0) 5.287829571s ago: executing program 3 (id=2336): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = socket(0x2, 0x80805, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x2ecd4c, 0x3, &(0x7f00000002c0)="fa363c", 0x5}) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000"], 0xfc}}, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x400c844) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x10) (async, rerun: 64) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) dup3(r3, r4, 0x80000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) 4.299524858s ago: executing program 2 (id=2337): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r5, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x4}) 3.949715427s ago: executing program 3 (id=2338): socket$kcm(0x29, 0xa, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000020000000000004279c9373388ccd0dde5a7823cf03742ec1c048db9cdd7646603a7a494565d7405ff3c22f413182426107729d62f30e8991cb1b083ff4fe9b750258034fd688dec9eca9a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r2, 0xc8cfe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1300, 0x1d) 3.692470608s ago: executing program 4 (id=2339): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) landlock_restrict_self(r2, 0xf129df3d27234030) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) connect$x25(r2, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x80) 3.608328483s ago: executing program 1 (id=2340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x552}}, './file0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040)={{0xe7ff}}, 0x0, 0x0, 0x40}}) 3.447903268s ago: executing program 1 (id=2341): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x300, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0x8, 0x7}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x5}}, @TCA_RATE={0x6, 0x5, {0xef, 0xb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, 0xee01) syz_usb_connect(0x3, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r4, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r4, r4, 0x2f, 0x2028, 0x4, @void, @void, @value=r5}, 0x20) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2e, 0x25dfdbfb}, 0x14}}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b0001000010000904330001fd6ffd00090582020002000400"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r8]) syz_usb_control_io(r0, 0x0, 0x0) setregid(0x0, 0x0) setgroups(0x1, &(0x7f0000000000)=[0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) mount$fuseblk(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000580)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}], [{@fowner_lt={'fowner<', r9}}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', 0xee01}}]}}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x28, 0x2, &(0x7f0000000180)={0x1c, "062422ffd60775c221c4b99c5d226d4177d369b7d49cc4492d050600"}}) syz_emit_ethernet(0x5a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x64, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010102, 0x3ffc}]}, @ssrr={0x89, 0xb, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 3.447386539s ago: executing program 0 (id=2342): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newchain={0x80, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x50, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_RSVP_ACT={0x40, 0x6, [@m_simple={0x3c, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0xe, 0x6, "a0983c6eae097254cfd8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0xf00, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1}}], 0x1, 0x1, 0x0) 3.25931305s ago: executing program 4 (id=2343): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'TLB^'}, {0x20, '#! '}]}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) r8 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f0000000340)={0x0, 0x40eb99, 0x8, 0x0, 0xd5}, 0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/15, 0xf}], 0x1}, 0x7}], 0x1, 0x2021, 0x0) read$msr(r0, &(0x7f00000000c0)=""/34, 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 2.920690742s ago: executing program 2 (id=2344): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2, 0x3, 0x0, 0x10}) r1 = socket$inet6_sctp(0xa, 0x79ae45f96c6de6fc, 0x84) r2 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x840) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x0) setrlimit(0x2, &(0x7f0000000000)={0x3, 0x6}) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000300)) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001"], 0x3c}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) (async) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000002200)) (async) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000080)={0x9, 0x0, 0x40f4, 0x0, 0x2, 0x7f, "b2093a00", 0x1, 0x4, 0x0, 0x3, 0xfd}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="a2b0d4040000378af8c6267fb22f0700fb4a8fc0ff0d62f0266922486f5092b04c81f5b4e6733bd98936cb5d66d8bd"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000003000008000000b704000000000000850000020100000085000000230000009500"/73], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5b7, 0x30}, &(0x7f0000000080)=0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r8, r9, &(0x7f0000001240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, &(0x7f0000001200)={0x77359400}, 0x1, 0xc, 0x1}) (async) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x8, 0x820a, 0xff, 0xe, 0xfffff3a9, 0x1, 0x10001, r6}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119a000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) 2.188158597s ago: executing program 2 (id=2345): syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) mbind(&(0x7f000012e000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x14, 0x101, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x1b, &(0x7f0000001100)=ANY=[], 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) (fail_nth: 3) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 2.187403166s ago: executing program 4 (id=2346): socket$kcm(0x29, 0xa, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000020000000000004279c9373388ccd0dde5a7823cf03742ec1c048db9cdd7646603a7a494565d7405ff3c22f413182426107729d62f30e8991cb1b083ff4fe9b750258034fd688dec9eca9a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r2, 0xc8cfe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1300, 0x1d) 2.03122661s ago: executing program 0 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r6, r6}, &(0x7f000001f600)=""/94, 0x5e, &(0x7f0000000240)={&(0x7f000001f680)={'sha512-generic\x00'}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 800.497659ms ago: executing program 2 (id=2348): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc4e, 0x2d}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040905}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 535.465548ms ago: executing program 0 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffffe, 0xe81, {0x6, 0xffffffffffffffff, 0x1002, 0x4, 0xc, 0x0, {0x4, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x6, 0x5, 0x9, 0x1, 0x1000, 0x7, 0x0, 0xee01, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async, rerun: 64) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x48002, 0x0) sendfile(r5, r4, 0x0, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 304.269048ms ago: executing program 0 (id=2350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x2000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x0, 0x2, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 258.211435ms ago: executing program 2 (id=2351): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f947c7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 0s ago: executing program 0 (id=2352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x4, 0x5, 0x1, 0x32d, 0x4, 0xffffffff, 0x5, 0x1}, &(0x7f0000000180)={0x6, 0xa, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0x5, 0xb}, &(0x7f00000001c0)={0xa, 0x3, 0x1, 0xa, 0x3, 0x100000001, 0x1c, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000240)={[0x1]}, 0x8}) r2 = memfd_create(&(0x7f0000000040)='[\v\xdb\xd8\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97#\xd8\xd5\x8c#\nT\t&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xe0\x1fr\x14\xdb\xd3\xcd\xfd\xbdn\xf7k\xbal\x00\b\x00\xc7i\x00\x00\x00\xb5r\xda{\xac9i\xd0\xf46\x8cS\xdc>c\xbc\xd9yf =\x9c\x12\x83Lm\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0', [{0x20, '\t'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1me\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb\x8ez\xad_\xc4\x9c\xdc\x88\xfa`k\xc3.\xa8]\x9eI.T\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\x02\a\x11\xbd\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x1d-s\x16\xe5\xdc\xb7\xc8\'\xae0{LX>m\xeeG\x81\xd6\'\b\xc6\\\xf1\x1bJ:\x9d\xe60\xab\f\x90\x85r\xb8\x92\xd4\x00:jA\xc90\xec\xc2*|\xc2?\xab\xf2\x03@\x19\xd1L\xc0\xedB\xf4\x06\x85\bXJ\xb8\xb4\xf4)\x8cfXC\x10\xdf\xd5\xc6\xed\x8b\xa0\x80\xca\x9b\xfat\x10\xcd\x0f\x12\x1b\x8ft$\xacS\x01\xbee>\xdd\xb5\x19^\x11\xf0om\xab\x16`F\xd9\x1b\xd6\xd3\x1dl\x86\x1b\x1d?\xfc\x02h]\xbb{\x9e\b\xf1\\\xe1\xcd \x81\xbe\xbdK\xe3w\xfae\xeaIw\x05\xd6\xc3\xc1\x02A\x9d\a\x10\xf2\x0e\xb0\x19w#\xa9\x1fOQ\xc3t-\xa4\x04\xcd\x89\xcf\x8ch\xf5\"\a^\t\xb6\xc0\xa7Z\xbe\x108<\xc8\xb4\x90\xf1&\x90\x00\xb8\xce\xa3\v=B\xc1\x11\x11\xd4\x8c\xc3\x05\xc7Q\xae,xV\xe1\xa0\xd6\xdf&\xe0\xc5A\xe9r3K)-{!\xfcc\xc5\xaf\xe5\xdf\x16\x84\xe2#(\xddm\x99\xf7u\x1d\xb6\xf4\a2c\x16]\xc6\x10~\xb2>\xc9\xf4\xb4Yt\x10f\x94\x82(yOF\xaa\xc6=\xe5\xaes\xdf\rf\x04\xbdM\x8a\xf3\x00Q\x8a\xde\xe5M'}]}, 0x1bf) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/68, 0x44}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2900, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f0000000000)='./file0\x00', 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="0002666415873d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x48804, 0x0, 0x2f) write$binfmt_misc(r1, &(0x7f00000004c0)="8bc17168", 0x4) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) setsockopt(r0, 0x84, 0x82, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) kernel console output (not intermixed with test programs): ect="B" requested=w pid=12409 comm="syz.0.1642" daddr=fe80:: dest=20002 [ 724.158188][T12415] delete_channel: no stack [ 724.166214][T12415] delete_channel: no stack [ 724.418001][T12416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.514107][ T5904] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 724.526476][T12414] netlink: 'syz.1.1643': attribute type 12 has an invalid length. [ 724.554214][ T5960] usb 5-1: USB disconnect, device number 27 [ 724.560672][ T5904] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 724.587444][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.954678][ T5904] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 725.192101][T12426] bridge0: entered allmulticast mode [ 725.617035][T12431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.625841][T12431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.184976][T12438] ubi: mtd0 is already attached to ubi31 [ 726.198054][ T5904] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 726.209743][ T977] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 726.226994][ T5904] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 726.491885][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 726.595043][ T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.632749][ T977] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 726.643799][ T977] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 726.674156][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.713630][ T977] usb 3-1: config 0 descriptor?? [ 726.742448][ T5904] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 726.756727][ T5904] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 726.898324][T12443] FAULT_INJECTION: forcing a failure. [ 726.898324][T12443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.915698][T12443] CPU: 0 UID: 0 PID: 12443 Comm: syz.1.1650 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 726.915723][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.915733][T12443] Call Trace: [ 726.915741][T12443] [ 726.915749][T12443] dump_stack_lvl+0x189/0x250 [ 726.915775][T12443] ? __pfx____ratelimit+0x10/0x10 [ 726.915795][T12443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.915816][T12443] ? __pfx__printk+0x10/0x10 [ 726.915839][T12443] ? __might_fault+0xb0/0x130 [ 726.915869][T12443] should_fail_ex+0x414/0x560 [ 726.915893][T12443] _copy_from_user+0x2d/0xb0 [ 726.915920][T12443] btf_new_fd+0x33a/0xc90 [ 726.915950][T12443] ? __pfx_btf_new_fd+0x10/0x10 [ 726.915970][T12443] ? bpf_token_put+0x143/0x160 [ 726.915996][T12443] ? bpf_btf_load+0x126/0x190 [ 726.916017][T12443] __sys_bpf+0x635/0x860 [ 726.916047][T12443] ? __pfx___sys_bpf+0x10/0x10 [ 726.916085][T12443] ? ksys_write+0x22a/0x250 [ 726.916104][T12443] ? __pfx_ksys_write+0x10/0x10 [ 726.916120][T12443] __x64_sys_bpf+0x7c/0x90 [ 726.916134][T12443] do_syscall_64+0xfa/0x3b0 [ 726.916145][T12443] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.916156][T12443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.916167][T12443] ? clear_bhb_loop+0x60/0xb0 [ 726.916179][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.916188][T12443] RIP: 0033:0x7f020b78ebe9 [ 726.916199][T12443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.916207][T12443] RSP: 002b:00007f020c596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 726.916219][T12443] RAX: ffffffffffffffda RBX: 00007f020b9b5fa0 RCX: 00007f020b78ebe9 [ 726.916227][T12443] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 726.916233][T12443] RBP: 00007f020c596090 R08: 0000000000000000 R09: 0000000000000000 [ 726.916240][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.916246][T12443] R13: 00007f020b9b6038 R14: 00007f020b9b5fa0 R15: 00007fff24c8eb28 [ 726.916262][T12443] [ 727.413816][ T5926] usb 4-1: USB disconnect, device number 36 [ 727.428637][T12448] FAULT_INJECTION: forcing a failure. [ 727.428637][T12448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.457704][T12448] CPU: 0 UID: 0 PID: 12448 Comm: syz.0.1652 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 727.457732][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.457744][T12448] Call Trace: [ 727.457751][T12448] [ 727.457760][T12448] dump_stack_lvl+0x189/0x250 [ 727.457785][T12448] ? __pfx____ratelimit+0x10/0x10 [ 727.457807][T12448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.457828][T12448] ? __pfx__printk+0x10/0x10 [ 727.457866][T12448] should_fail_ex+0x414/0x560 [ 727.457892][T12448] _copy_to_user+0x31/0xb0 [ 727.457921][T12448] simple_read_from_buffer+0xe1/0x170 [ 727.457947][T12448] proc_fail_nth_read+0x1df/0x250 [ 727.457974][T12448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.458001][T12448] ? rw_verify_area+0x258/0x650 [ 727.458029][T12448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.458053][T12448] vfs_read+0x200/0x980 [ 727.458088][T12448] ? __pfx___mutex_lock+0x10/0x10 [ 727.458111][T12448] ? __pfx_vfs_read+0x10/0x10 [ 727.458141][T12448] ? __fget_files+0x2a/0x420 [ 727.458167][T12448] ? __fget_files+0x3a0/0x420 [ 727.458197][T12448] ? __fget_files+0x2a/0x420 [ 727.458228][T12448] ksys_read+0x145/0x250 [ 727.458249][T12448] ? __pfx_ksys_read+0x10/0x10 [ 727.458267][T12448] ? __secure_computing+0xe2/0x2a0 [ 727.458304][T12448] do_syscall_64+0xfa/0x3b0 [ 727.458324][T12448] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.458345][T12448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.458364][T12448] ? clear_bhb_loop+0x60/0xb0 [ 727.458388][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.458407][T12448] RIP: 0033:0x7ff6a238d5fc [ 727.458425][T12448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 727.458442][T12448] RSP: 002b:00007ff6a3268030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.458462][T12448] RAX: ffffffffffffffda RBX: 00007ff6a25b5fa0 RCX: 00007ff6a238d5fc [ 727.458477][T12448] RDX: 000000000000000f RSI: 00007ff6a32680a0 RDI: 0000000000000003 [ 727.458489][T12448] RBP: 00007ff6a3268090 R08: 0000000000000000 R09: 0000000000000000 [ 727.458501][T12448] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 727.458513][T12448] R13: 00007ff6a25b6038 R14: 00007ff6a25b5fa0 R15: 00007fffd0551728 [ 727.458545][T12448] [ 729.832978][ T30] audit: type=1400 audit(729.243:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12460 comm="syz.1.1655" daddr=fe80:: dest=20002 [ 729.948853][ T5960] usb 3-1: USB disconnect, device number 31 [ 732.293179][T12489] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 732.293179][T12489] program syz.3.1665 not setting count and/or reply_len properly [ 732.982004][ T977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 733.121746][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 733.152096][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 733.167844][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 733.205143][ T30] audit: type=1400 audit(733.153:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12505 comm="syz.3.1669" daddr=fe80:: dest=20002 [ 733.209280][ T977] usb 5-1: config 176 has an invalid interface number: 240 but max is 0 [ 733.588418][ T977] usb 5-1: config 176 has no interface number 0 [ 734.081302][ T10] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 734.111986][ T977] usb 5-1: config 176 interface 240 has no altsetting 0 [ 734.119414][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 734.131821][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.141242][ T977] usb 5-1: language id specifier not provided by device, defaulting to English [ 734.275309][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 734.404909][ T977] usb 5-1: New USB device found, idVendor=19d2, idProduct=fff6, bcdDevice=c3.db [ 734.532071][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.643121][T12492] siw: device registration error -23 [ 734.687740][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1670'. [ 734.748700][ T977] usb 5-1: can't set config #176, error -71 [ 734.822883][ T977] usb 5-1: USB disconnect, device number 28 [ 735.057639][T12550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.066879][T12550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.414344][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 735.480808][ T10] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 736.600506][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 736.608968][ T30] audit: type=1400 audit(736.543:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12565 comm="syz.3.1678" daddr=::ffff:172.20.20.170 dest=20004 [ 736.660617][ T10] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 736.704917][ T10] usb 3-1: USB disconnect, device number 32 [ 737.061983][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 738.871754][T12579] bridge0: left promiscuous mode [ 739.233019][T12591] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 739.402784][T12590] Bluetooth: MGMT ver 1.23 [ 739.408034][T12590] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 739.992951][ T5960] IPVS: starting estimator thread 0... [ 740.004850][T12600] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1689'. [ 740.121587][T12603] IPVS: using max 25 ests per chain, 60000 per kthread [ 743.492027][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 743.533685][T12621] netlink: 'syz.0.1693': attribute type 7 has an invalid length. [ 744.118077][T12621] : entered promiscuous mode [ 744.125902][T12622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 744.688808][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1694'. [ 744.882008][T12641] ocfs2_dlmfs: Unknown parameter '“‡šcRaòàÙ’<ÎËõ¸¨'\ôy0Öç‡ñL]:O¯ŽsŒôêäü9ï' [ 744.945201][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 746.188492][ T30] audit: type=1400 audit(746.133:93): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12651 comm="syz.3.1702" daddr=ff00:0:800::1 dest=20128 [ 747.581692][T12664] delete_channel: no stack [ 747.677075][T12664] delete_channel: no stack [ 747.758531][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1705'. [ 747.849423][T12661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.876200][T12661] netlink: 'syz.3.1706': attribute type 12 has an invalid length. [ 748.017435][T12656] delete_channel: no stack [ 748.091504][T12672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.167851][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 748.246174][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 748.270445][T12674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1710'. [ 748.280238][T12674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1710'. [ 748.292178][T12674] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1710'. [ 748.321753][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 749.770578][T12681] set match dimension is over the limit! [ 749.830985][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.861895][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.905242][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.940762][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.961216][ T10] usb 5-1: Product: syz [ 749.969218][ T10] usb 5-1: Manufacturer: syz [ 749.984473][ T10] usb 5-1: SerialNumber: syz [ 750.862139][ T10] usb 5-1: 0:2 : does not exist [ 750.905210][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 750.961933][ T5911] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 751.291736][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 751.329210][T12696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.339957][ T10] usb 5-1: USB disconnect, device number 29 [ 751.358939][ T5911] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 751.373212][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.381321][ T5911] usb 4-1: Product: syz [ 751.386557][ T5911] usb 4-1: Manufacturer: syz [ 751.421168][ T5911] usb 4-1: SerialNumber: syz [ 751.526185][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.550548][ T5911] usb 4-1: config 0 descriptor?? [ 751.696875][T12708] delete_channel: no stack [ 751.714150][T12708] delete_channel: no stack [ 751.783604][T12708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.199714][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.218842][T12706] netlink: 'syz.2.1721': attribute type 12 has an invalid length. [ 752.240007][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.538439][T12713] fuse: blksize only supported for fuseblk [ 752.572448][ T5911] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 752.580894][ T5911] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 753.030527][ T30] audit: type=1400 audit(752.973:94): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12712 comm="syz.1.1723" daddr=fe80::aa dest=3 [ 753.091291][T12718] netlink: 'syz.0.1724': attribute type 10 has an invalid length. [ 753.106109][T12718] team0: Device veth1_vlan failed to register rx_handler [ 753.154017][ T5911] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -32 [ 753.301380][T12731] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 753.460597][T12733] set match dimension is over the limit! [ 754.071288][ T30] audit: type=1400 audit(754.013:95): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12717 comm="syz.2.1725" daddr=::ffff:127.0.0.1 [ 754.088669][ T5974] usb 4-1: USB disconnect, device number 37 [ 755.318267][T12751] binder: 12738:12751 ioctl c0306201 200000000240 returned -11 [ 756.132533][ T5911] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 756.293121][T12760] delete_channel: no stack [ 756.301036][T12760] delete_channel: no stack [ 756.351041][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.419727][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.504846][T12760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.511995][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.765450][T12759] netlink: 'syz.4.1735': attribute type 12 has an invalid length. [ 756.773752][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.791676][ T5911] usb 2-1: Product: syz [ 756.797447][ T5911] usb 2-1: Manufacturer: syz [ 756.805461][ T5911] usb 2-1: SerialNumber: syz [ 757.062388][ T5911] usb 2-1: 0:2 : does not exist [ 757.790707][ T5911] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 757.973605][ T5911] usb 2-1: USB disconnect, device number 27 [ 758.022272][ T5974] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 758.241882][ T5974] usb 5-1: device descriptor read/64, error -71 [ 758.347834][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.511816][ T5974] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 758.537847][ T30] audit: type=1400 audit(758.483:96): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12784 comm="syz.0.1740" daddr=fe80::bb dest=20003 [ 758.811846][ T5974] usb 5-1: device descriptor read/64, error -71 [ 759.532628][ T5974] usb usb5-port1: attempt power cycle [ 759.591744][ T5960] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 759.831885][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 760.516204][ T5960] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 760.525253][ T5960] usb 4-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 760.671717][ T5960] usb 4-1: config 0 has no interface number 0 [ 760.693648][ T5960] usb 4-1: config 0 interface 202 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 760.735052][ T5960] usb 4-1: New USB device found, idVendor=08ca, idProduct=0109, bcdDevice=bf.1b [ 760.755379][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.800611][ T5960] usb 4-1: Product: syz [ 760.820855][ T5960] usb 4-1: Manufacturer: syz [ 761.041737][ T5960] usb 4-1: SerialNumber: syz [ 761.413841][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 761.486384][ T30] audit: type=1400 audit(761.373:97): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12798 comm="syz.1.1744" daddr=fe80::bb dest=5 [ 761.522362][T12810] delete_channel: no stack [ 761.527186][T12810] delete_channel: no stack [ 761.535283][T12810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.553083][T12810] netlink: 'syz.4.1746': attribute type 12 has an invalid length. [ 761.784751][ T5960] usb 4-1: config 0 descriptor?? [ 761.837761][ T5960] usb 4-1: can't set config #0, error -71 [ 761.844175][T12812] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 761.871885][ T5960] usb 4-1: USB disconnect, device number 38 [ 761.884063][T12812] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1747'. [ 762.034965][T12817] set match dimension is over the limit! [ 762.723198][ T30] audit: type=1400 audit(762.253:98): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12825 comm="syz.2.1753" daddr=::ffff:0.0.0.0 dest=20003 [ 763.117016][ T30] audit: type=1400 audit(762.633:99): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12820 comm="syz.0.1752" daddr=fe80::bb dest=5 [ 763.723043][T12852] ubi: mtd0 is already attached to ubi31 [ 766.097917][T12900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 766.181747][T12906] set match dimension is over the limit! [ 766.844401][T12900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 766.901417][T12900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.950788][T12900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 766.981833][T12900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 767.013167][T12908] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 767.110389][T12908] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 767.742013][T12919] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 767.972493][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 769.007063][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 769.061820][T10985] Bluetooth: hci2: command 0x0406 tx timeout [ 769.066797][T12932] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1769'. [ 769.077464][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 769.077620][T10985] Bluetooth: hci3: command 0x0406 tx timeout [ 769.093006][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'. [ 769.093131][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 769.525951][T12935] delete_channel: no stack [ 769.530514][T12935] delete_channel: no stack [ 769.587658][T12935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.640029][T12935] netlink: 'syz.0.1772': attribute type 12 has an invalid length. [ 769.697867][T12944] ubi: mtd0 is already attached to ubi31 [ 769.880648][ T30] audit: type=1326 audit(769.823:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12946 comm="syz.3.1775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a4fd8ebe9 code=0x0 [ 770.301923][T12968] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 770.380925][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 770.619985][T12947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1774'. [ 774.380570][ T30] audit: type=1326 audit(774.323:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13018 comm="syz.2.1785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c6278ebe9 code=0x0 [ 774.642934][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 774.695468][T13027] JFS: discard option not supported on device [ 774.706491][T13027] Mount JFS Failure: -22 [ 774.711126][T13027] jfs_mount failed w/return code = -22 [ 775.305075][T13025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 775.305075][T13025] program syz.4.1787 not setting count and/or reply_len properly [ 775.504516][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 775.680695][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 775.689635][ T9] usb 2-1: config 179 has no interface number 0 [ 775.696239][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 775.707675][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 775.720627][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.071360][ T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 776.094425][ T30] audit: type=1400 audit(775.763:102): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13029 comm="syz.0.1789" daddr=fe80::bb dest=5 [ 776.566499][ T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 776.650282][ T9] usb 2-1: config 179 interface 65 has no altsetting 0 [ 776.657382][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 776.666696][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.176286][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input33 [ 777.350519][ T9] usb 2-1: USB disconnect, device number 28 [ 777.356595][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 778.302711][ T5960] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 778.555001][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 779.026758][ T5960] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.395923][ T5960] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.421809][ T5960] usb 4-1: config 0 interface 0 has no altsetting 0 [ 779.432109][ T5960] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 779.453444][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.590615][ T5960] usb 4-1: config 0 descriptor?? [ 779.629660][T13064] fuse: Bad value for 'group_id' [ 779.656233][T13064] fuse: Bad value for 'group_id' [ 779.816845][ T5960] usbhid 4-1:0.0: can't add hid device: -71 [ 780.372050][T13068] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 780.372050][T13068] program syz.1.1799 not setting count and/or reply_len properly [ 780.438785][ T5960] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.507455][ T5960] usb 4-1: USB disconnect, device number 39 [ 780.630882][T13075] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 782.250673][T13091] tipc: Started in network mode [ 782.255658][T13091] tipc: Node identity 02d61ef8ae3c, cluster identity 4711 [ 782.263343][T13091] tipc: Enabled bearer , priority 0 [ 782.272718][T13091] syzkaller0: entered promiscuous mode [ 782.278265][T13091] syzkaller0: entered allmulticast mode [ 782.361087][ T30] audit: type=1400 audit(782.183:103): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13088 comm="syz.1.1806" daddr=fe80::aa dest=3 [ 782.595189][T13088] tipc: Resetting bearer [ 782.633415][T13088] tipc: Disabling bearer [ 782.702046][ T977] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 783.139589][T13106] input: syz0 as /devices/virtual/input/input34 [ 783.172230][ T977] usb 5-1: device descriptor read/64, error -71 [ 783.401811][ T8983] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 783.432118][ T977] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 783.621943][ T977] usb 5-1: device descriptor read/64, error -71 [ 783.622062][ T8983] usb 3-1: Using ep0 maxpacket: 16 [ 783.658543][ T8983] usb 3-1: config index 0 descriptor too short (expected 38, got 36) [ 783.667857][ T8983] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 783.725675][ T8983] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 783.735842][ T8983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 783.742363][ T977] usb usb5-port1: attempt power cycle [ 783.746137][ T8983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.781584][ T8983] usb 3-1: config 0 descriptor?? [ 783.839048][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 784.121757][ T977] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 785.341291][ T977] usb 5-1: device descriptor read/8, error -71 [ 785.574981][ T8983] usb 3-1: USB disconnect, device number 33 [ 786.214043][T13125] fuse: Bad value for 'group_id' [ 786.239265][T13125] fuse: Bad value for 'group_id' [ 787.297802][T13134] binder: 13133:13134 ioctl c0306201 200000000240 returned -11 [ 787.395392][T13142] sctp: [Deprecated]: syz.2.1820 (pid 13142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.395392][T13142] Use struct sctp_sack_info instead [ 787.829154][T13153] syz.3.1821: attempt to access beyond end of device [ 787.829154][T13153] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 787.853258][T13153] syz.3.1821: attempt to access beyond end of device [ 787.853258][T13153] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 787.892953][T13153] netlink: 160720 bytes leftover after parsing attributes in process `syz.3.1821'. [ 787.921815][ T8983] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 788.169680][ T8983] usb 2-1: Using ep0 maxpacket: 8 [ 788.200606][ T5960] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 788.216346][ T8983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.254251][ T8983] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 788.282036][ T8983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.320117][ T8983] usb 2-1: config 0 descriptor?? [ 788.339753][ T8983] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 788.345483][T13157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.455945][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 788.505418][ T5960] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.516086][ T5960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.531213][ T5960] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.571831][ T5960] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.638072][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1826'. [ 788.645092][ T5960] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 788.683886][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.771833][ T977] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 788.901885][ T977] usb 3-1: device descriptor read/64, error -71 [ 788.948737][ T5960] usb 4-1: GET_CAPABILITIES returned 0 [ 789.262313][ T8983] gspca_vc032x: reg_r err -110 [ 789.668945][ T8983] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 789.679245][ T5960] usbtmc 4-1:16.0: can't read capabilities [ 789.761688][ T977] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 789.921838][ T977] usb 3-1: device descriptor read/64, error -71 [ 789.940243][T13171] delete_channel: no stack [ 789.944880][T13171] delete_channel: no stack [ 789.951503][T13171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.962205][T13171] netlink: 'syz.0.1829': attribute type 12 has an invalid length. [ 790.045254][ T977] usb usb3-port1: attempt power cycle [ 790.192322][ T30] audit: type=1400 audit(790.143:104): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13172 comm="syz.4.1830" daddr=fe80:: dest=20002 [ 791.152875][ T977] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 791.264137][ T977] usb 3-1: device descriptor read/8, error -71 [ 791.541887][ T977] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 792.513369][ T977] usb 3-1: device descriptor read/8, error -71 [ 792.568438][ T5974] usb 2-1: USB disconnect, device number 29 [ 792.625911][ T977] usb usb3-port1: unable to enumerate USB device [ 792.865173][ T977] usb 4-1: USB disconnect, device number 40 [ 793.764176][T13196] binder: 13181:13196 ioctl c0306201 200000000240 returned -11 [ 794.197523][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1839'. [ 794.361735][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 794.497102][T13213] delete_channel: no stack [ 794.501855][T13213] delete_channel: no stack [ 794.511322][T13213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.528429][T13213] netlink: 'syz.1.1841': attribute type 12 has an invalid length. [ 794.570201][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 794.596428][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 794.693716][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.706844][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 795.165466][T13221] set match dimension is over the limit! [ 795.554275][T13226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.565527][T13226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.586519][ T30] audit: type=1400 audit(795.483:105): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13223 comm="syz.4.1844" daddr=fe80:: dest=20002 [ 795.733544][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 796.298951][ T10] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 796.514294][T13230] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 796.908301][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 796.992516][ T10] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 797.191980][ T10] usb 4-1: USB disconnect, device number 41 [ 797.297603][T13233] netlink: 'syz.4.1846': attribute type 6 has an invalid length. [ 797.447734][T13236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.427515][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1851'. [ 799.507494][T13261] set match dimension is over the limit! [ 799.796851][T13263] delete_channel: no stack [ 799.811137][T13263] delete_channel: no stack [ 800.066075][T13263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.194776][T13263] netlink: 'syz.2.1854': attribute type 12 has an invalid length. [ 802.269673][T13288] loop2: detected capacity change from 0 to 7 [ 802.509489][T13288] Dev loop2: unable to read RDB block 7 [ 802.541881][T13288] loop2: AHDI p1 p2 p3 [ 802.591314][T13288] loop2: partition table partially beyond EOD, truncated [ 802.692060][T13288] loop2: p1 start 1601398130 is beyond EOD, truncated [ 802.699273][T13288] loop2: p2 start 1702059890 is beyond EOD, truncated [ 803.292369][T13294] Invalid ELF header type: 2 != 1 [ 803.331882][T13294] Invalid ELF header type: 3 != 1 [ 803.469718][T13298] program syz.0.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 804.369552][T13305] set match dimension is over the limit! [ 804.370126][T13303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1866'. [ 808.857823][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1880'. [ 808.866537][ T30] audit: type=1400 audit(808.793:106): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13347 comm="syz.3.1880" daddr=ff02::1 dest=20002 [ 809.055333][T13350] Cannot find set identified by id 0 to match [ 809.131821][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 809.462259][ T5974] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 809.479017][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 809.486944][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 809.502197][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.542428][ T10] usb 3-1: config 0 descriptor?? [ 810.218964][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 810.312761][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.448366][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.520094][ T5974] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 810.587164][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.733819][ T5974] usb 4-1: config 0 descriptor?? [ 811.620064][T13384] FAULT_INJECTION: forcing a failure. [ 811.620064][T13384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.633542][T13384] CPU: 1 UID: 0 PID: 13384 Comm: syz.4.1889 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 811.633568][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 811.633581][T13384] Call Trace: [ 811.633589][T13384] [ 811.633598][T13384] dump_stack_lvl+0x189/0x250 [ 811.633629][T13384] ? __pfx____ratelimit+0x10/0x10 [ 811.633656][T13384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 811.633678][T13384] ? __pfx__printk+0x10/0x10 [ 811.633702][T13384] ? __might_fault+0xb0/0x130 [ 811.633734][T13384] should_fail_ex+0x414/0x560 [ 811.633759][T13384] _copy_from_user+0x2d/0xb0 [ 811.633787][T13384] __sys_connect+0x123/0x440 [ 811.633813][T13384] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 811.633834][T13384] ? __pfx___sys_connect+0x10/0x10 [ 811.633885][T13384] __x64_sys_connect+0x7a/0x90 [ 811.633911][T13384] do_syscall_64+0xfa/0x3b0 [ 811.633934][T13384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.633952][T13384] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 811.633971][T13384] ? clear_bhb_loop+0x60/0xb0 [ 811.633994][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.634013][T13384] RIP: 0033:0x7fe4cef8ebe9 [ 811.634032][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.634047][T13384] RSP: 002b:00007fe4cfdc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 811.634067][T13384] RAX: ffffffffffffffda RBX: 00007fe4cf1b6180 RCX: 00007fe4cef8ebe9 [ 811.634082][T13384] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000003 [ 811.634094][T13384] RBP: 00007fe4cfdc3090 R08: 0000000000000000 R09: 0000000000000000 [ 811.634105][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.634116][T13384] R13: 00007fe4cf1b6218 R14: 00007fe4cf1b6180 R15: 00007fffffe728b8 [ 811.634149][T13384] [ 812.571948][ T5974] usbhid 4-1:0.0: can't add hid device: -71 [ 812.578150][ T5974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 812.622236][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 812.632544][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 812.652396][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 812.663623][ T10] usb 3-1: USB disconnect, device number 38 [ 812.720215][ T5974] usb 4-1: USB disconnect, device number 42 [ 813.664304][T13403] Cannot find set identified by id 0 to match [ 814.492649][T13416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 814.499227][T13416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.508642][T13416] vhci_hcd vhci_hcd.0: Device attached [ 814.817941][ T10] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 814.934726][T13422] netlink: 'syz.2.1901': attribute type 1 has an invalid length. [ 815.925085][T13417] vhci_hcd: connection reset by peer [ 815.958374][T10541] vhci_hcd: stop threads [ 815.962833][T10541] vhci_hcd: release socket [ 815.977699][T10541] vhci_hcd: disconnect device [ 816.098284][T13429] xt_hashlimit: max too large, truncated to 1048576 [ 817.352270][T13447] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 817.430219][T13452] bridge0: entered allmulticast mode [ 817.585685][ T8983] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 818.553907][ T8983] usb 4-1: Using ep0 maxpacket: 32 [ 818.837762][ T8983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 819.032136][ T8983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 819.082532][T13462] delete_channel: no stack [ 819.087094][T13462] delete_channel: no stack [ 819.094473][T13462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.112668][T13462] netlink: 'syz.2.1914': attribute type 12 has an invalid length. [ 819.255560][T13468] FAULT_INJECTION: forcing a failure. [ 819.255560][T13468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.269329][T13468] CPU: 0 UID: 0 PID: 13468 Comm: syz.4.1916 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 819.269354][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.269366][T13468] Call Trace: [ 819.269374][T13468] [ 819.269382][T13468] dump_stack_lvl+0x189/0x250 [ 819.269406][T13468] ? __pfx____ratelimit+0x10/0x10 [ 819.269425][T13468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.269446][T13468] ? __pfx__printk+0x10/0x10 [ 819.269467][T13468] ? __might_fault+0xb0/0x130 [ 819.269502][T13468] should_fail_ex+0x414/0x560 [ 819.269528][T13468] _copy_from_user+0x2d/0xb0 [ 819.269553][T13468] ___sys_recvmsg+0x12e/0x510 [ 819.269571][T13468] ? __pfx____sys_recvmsg+0x10/0x10 [ 819.269619][T13468] ? __might_fault+0xb0/0x130 [ 819.269642][T13468] do_recvmmsg+0x307/0x770 [ 819.269668][T13468] ? __pfx_do_recvmmsg+0x10/0x10 [ 819.269684][T13468] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 819.269707][T13468] __x64_sys_recvmmsg+0x190/0x240 [ 819.269719][T13468] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 819.269738][T13468] ? do_syscall_64+0xbe/0x3b0 [ 819.269764][T13468] do_syscall_64+0xfa/0x3b0 [ 819.269786][T13468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.269805][T13468] ? asm_sysvec_call_function_single+0x1a/0x20 [ 819.269820][T13468] ? clear_bhb_loop+0x60/0xb0 [ 819.269833][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.269842][T13468] RIP: 0033:0x7fe4cef8ebe9 [ 819.269853][T13468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.269862][T13468] RSP: 002b:00007fe4cfde4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 819.269874][T13468] RAX: ffffffffffffffda RBX: 00007fe4cf1b6090 RCX: 00007fe4cef8ebe9 [ 819.269888][T13468] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000006 [ 819.269900][T13468] RBP: 00007fe4cfde4090 R08: 0000000000000000 R09: 0000000000000000 [ 819.269912][T13468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.269924][T13468] R13: 00007fe4cf1b6128 R14: 00007fe4cf1b6090 R15: 00007fffffe728b8 [ 819.269957][T13468] [ 819.627256][ T8983] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 819.881003][ T8983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.931165][ T8983] usb 4-1: Product: syz [ 819.950839][ T8983] usb 4-1: Manufacturer: syz [ 820.003403][ T8983] usb 4-1: SerialNumber: syz [ 820.003673][ T10] vhci_hcd: vhci_device speed not set [ 820.179129][ T8983] usb 4-1: config 0 descriptor?? [ 820.242274][T13446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 821.131766][ T30] audit: type=1400 audit(820.483:107): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13471 comm="syz.4.1918" daddr=fe80::bb dest=5 [ 821.314320][ T8983] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 821.370560][T10541] usb 4-1: Failed to submit usb control message: -71 [ 821.420913][ T8983] usb 4-1: USB disconnect, device number 43 [ 821.466012][T10541] usb 4-1: unable to send the bmi data to the device: -71 [ 821.922870][T10541] usb 4-1: unable to get target info from device [ 821.989864][T10541] usb 4-1: could not get target info (-71) [ 822.015511][T10541] usb 4-1: could not probe fw (-71) [ 823.790870][T13521] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 824.721442][T13527] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 825.072792][ T30] audit: type=1400 audit(825.023:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13528 comm="syz.0.1930" daddr=fe80::bb dest=20003 [ 829.390272][T13592] overlayfs: failed to resolve './file0': -2 [ 831.136657][ T30] audit: type=1400 audit(831.083:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13619 comm="syz.3.1945" daddr=fe80::bb dest=20003 [ 832.093407][T13595] warn_alloc: 1 callbacks suppressed [ 832.093426][T13595] syz.2.1938: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 832.372207][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.2.1938 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 832.372237][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.372250][T13595] Call Trace: [ 832.372258][T13595] [ 832.372267][T13595] dump_stack_lvl+0x189/0x250 [ 832.372295][T13595] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 832.372326][T13595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.372348][T13595] ? __pfx__printk+0x10/0x10 [ 832.372373][T13595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 832.372398][T13595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 832.372430][T13595] warn_alloc+0x214/0x310 [ 832.372460][T13595] ? __pfx_warn_alloc+0x10/0x10 [ 832.372493][T13595] ? __get_vm_area_node+0x28f/0x300 [ 832.372515][T13595] ? __do_replace+0xb4/0xaa0 [ 832.372538][T13595] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 832.372568][T13595] ? stack_depot_save_flags+0x40/0x900 [ 832.372614][T13595] ? translate_table+0x1b4d/0x1f90 [ 832.372646][T13595] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 832.372683][T13595] ? __do_replace+0xb4/0xaa0 [ 832.372707][T13595] vzalloc_noprof+0xb2/0xf0 [ 832.372730][T13595] ? __do_replace+0xb4/0xaa0 [ 832.372750][T13595] __do_replace+0xb4/0xaa0 [ 832.372770][T13595] ? __pfx_translate_table+0x10/0x10 [ 832.372807][T13595] ? __pfx___do_replace+0x10/0x10 [ 832.372845][T13595] ? _copy_from_user+0x94/0xb0 [ 832.372878][T13595] do_arpt_set_ctl+0xa2a/0xf10 [ 832.372902][T13595] ? __mutex_trylock_common+0x153/0x260 [ 832.372930][T13595] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 832.372954][T13595] ? rcu_is_watching+0x15/0xb0 [ 832.372991][T13595] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 832.373018][T13595] ? __pfx___mutex_lock+0x10/0x10 [ 832.373040][T13595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 832.373081][T13595] nf_setsockopt+0x26c/0x290 [ 832.373113][T13595] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 832.373141][T13595] do_sock_setsockopt+0x179/0x1b0 [ 832.373175][T13595] __x64_sys_setsockopt+0x13f/0x1b0 [ 832.373209][T13595] do_syscall_64+0xfa/0x3b0 [ 832.373234][T13595] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.373254][T13595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.373273][T13595] ? clear_bhb_loop+0x60/0xb0 [ 832.373298][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.373316][T13595] RIP: 0033:0x7f1c6278ebe9 [ 832.373335][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.373353][T13595] RSP: 002b:00007f1c63541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 832.373375][T13595] RAX: ffffffffffffffda RBX: 00007f1c629b6090 RCX: 00007f1c6278ebe9 [ 832.373391][T13595] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 000000000000000b [ 832.373403][T13595] RBP: 00007f1c62811e19 R08: 0000000000000068 R09: 0000000000000000 [ 832.373416][T13595] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 832.373429][T13595] R13: 00007f1c629b6128 R14: 00007f1c629b6090 R15: 00007ffe3dd4d5a8 [ 832.373462][T13595] [ 832.373498][T13595] Mem-Info: [ 832.831795][T13595] active_anon:6022 inactive_anon:9411 isolated_anon:0 [ 832.831795][T13595] active_file:17271 inactive_file:42214 isolated_file:0 [ 832.831795][T13595] unevictable:768 dirty:181 writeback:0 [ 832.831795][T13595] slab_reclaimable:10485 slab_unreclaimable:103231 [ 832.831795][T13595] mapped:34028 shmem:9970 pagetables:1545 [ 832.831795][T13595] sec_pagetables:0 bounce:0 [ 832.831795][T13595] kernel_misc_reclaimable:0 [ 832.831795][T13595] free:1284265 free_pcp:11304 free_cma:0 [ 833.121077][T13595] Node 0 active_anon:24004kB inactive_anon:37556kB active_file:68892kB inactive_file:168856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136212kB dirty:736kB writeback:0kB shmem:38344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13276kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 833.299614][T13595] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:64kB pagetables:300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 833.854987][T13595] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 833.884641][T13595] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 833.892191][T13595] Node 0 DMA32 free:1213760kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24000kB inactive_anon:37516kB active_file:67116kB inactive_file:168796kB unevictable:1536kB writepending:736kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:33748kB local_pcp:25584kB free_cma:0kB [ 833.946191][T13632] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 834.001721][T13595] lowmem_reserve[]: 0 0 1 1 1 [ 834.038237][T13595] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 834.305842][T13681] fuse: Unknown parameter 'group_i00000000000000000000' [ 834.325542][T13595] lowmem_reserve[]: 0 0 0 0 0 [ 834.370167][T13595] Node 1 Normal free:3913208kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6816kB local_pcp:2336kB free_cma:0kB [ 834.461711][T13595] lowmem_reserve[]: 0 0 0 0 0 [ 834.491851][T13595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 834.661692][T13595] Node 0 DMA32: 325*4kB (ME) 234*8kB (UM) 25*16kB (UM) 290*32kB (ME) 46*64kB (UME) 109*128kB (UME) 33*256kB (UM) 25*512kB (UM) 15*1024kB (UME) 7*2048kB (UM) 276*4096kB (UM) = 1211188kB [ 834.787033][T13595] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 834.848592][T13595] Node 1 Normal: 174*4kB (UME) 66*8kB (UME) 39*16kB (UME) 242*32kB (UME) 76*64kB (UME) 23*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3913208kB [ 835.225845][T13691] netlink: 'syz.3.1952': attribute type 1 has an invalid length. [ 835.624743][T13595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 835.731895][T13595] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.001928][T13595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 836.041545][T13595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 836.080169][T13595] 72326 total pagecache pages [ 836.118707][T13595] 1 pages in swap cache [ 836.141903][T13595] Free swap = 124992kB [ 836.156681][T13595] Total swap = 124996kB [ 836.161749][T13595] 2097051 pages RAM [ 836.186028][T13595] 0 pages HighMem/MovableOnly [ 836.211867][T13595] 424695 pages reserved [ 836.216081][T13595] 0 pages cma reserved [ 839.881243][T13769] fuse: Unknown parameter 'group_i00000000000000000000' [ 840.274130][T13761] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 840.529994][T13780] ubi: mtd0 is already attached to ubi31 [ 842.085968][T13792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 843.311816][ T30] audit: type=1400 audit(843.243:110): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13799 comm="syz.4.1970" daddr=fe80::bb dest=5 [ 843.890762][ T30] audit: type=1400 audit(843.823:111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13809 comm="syz.4.1973" daddr=fe80::bb dest=20003 [ 848.931766][T13825] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 849.323768][T13827] fuse: Unknown parameter 'group_i00000000000000000000' [ 850.607767][T13837] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 851.481771][T13485] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 851.652027][T13485] usb 4-1: Using ep0 maxpacket: 16 [ 851.659772][T13485] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 851.674058][T13485] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.684885][T13485] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 851.695520][T13485] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 851.707214][T13485] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 851.723792][T13485] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 851.727904][ T30] audit: type=1400 audit(851.673:112): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13849 comm="syz.0.1986" daddr=fe80::bb dest=20003 [ 851.951906][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.960037][T13485] usb 4-1: Product: syz [ 852.902714][T13485] usb 4-1: Manufacturer: syz [ 852.979027][T13485] usb 4-1: SerialNumber: syz [ 854.472287][T13485] usb 4-1: USB disconnect, device number 44 [ 854.479430][T13867] fuse: Unknown parameter 'group_id00000000000000000000' [ 854.655063][T13828] udevd[13828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.860099][T13876] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.149408][T13876] vlan2: entered promiscuous mode [ 855.156199][T13876] vlan2: entered allmulticast mode [ 855.161507][T13876] hsr_slave_1: entered allmulticast mode [ 855.188352][ T30] audit: type=1400 audit(854.963:113): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13873 comm="syz.1.1993" daddr=fe80::bb dest=5 [ 855.711942][T13485] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 857.544004][T13485] usb 3-1: unable to get BOS descriptor or descriptor too short [ 857.553772][T13485] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.567339][T13485] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 857.586984][T13485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.666152][T13485] usb 3-1: Product: syz [ 857.678500][T13485] usb 3-1: Manufacturer: syz [ 857.687425][T13485] usb 3-1: SerialNumber: syz [ 858.342377][ T30] audit: type=1400 audit(858.243:114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13907 comm="syz.3.2000" daddr=fe80:: dest=20002 [ 860.413798][ T30] audit: type=1400 audit(860.363:115): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13924 comm="syz.3.2003" daddr=2001:: dest=20000 [ 860.553447][T13929] fuse: Unknown parameter 'group_id00000000000000000000' [ 860.654497][T13485] usb 3-1: USB disconnect, device number 39 [ 860.733328][ T977] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 860.745488][T13828] udevd[13828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.026435][ T977] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 861.062120][ T977] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 861.132373][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.218260][ T977] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 861.786689][T13942] siw: device registration error -23 [ 861.951147][T13945] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 862.212201][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.221440][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.298368][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 862.307626][ T977] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 862.968232][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 862.977205][ T977] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 863.179544][T13957] netlink: 'syz.2.2012': attribute type 12 has an invalid length. [ 863.526625][ T43] usb 5-1: USB disconnect, device number 37 [ 864.027008][T13964] comedi comedi0: comedi_config --init_data is deprecated [ 864.055099][T13965] netlink: 'syz.4.2013': attribute type 8 has an invalid length. [ 864.094235][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 864.331725][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 865.008620][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 865.016902][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 865.026491][ T43] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 865.035406][ T43] usb 4-1: config 1 has no interface number 0 [ 865.044303][ T43] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 865.053981][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.062719][ T43] usb 4-1: Product: syz [ 865.066914][ T43] usb 4-1: Manufacturer: syz [ 865.158221][ T43] usb 4-1: SerialNumber: syz [ 865.515047][ T43] usb 4-1: USB disconnect, device number 45 [ 866.896110][T13994] netlink: 'syz.3.2024': attribute type 12 has an invalid length. [ 867.430549][T13998] FAULT_INJECTION: forcing a failure. [ 867.430549][T13998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.455271][T13998] CPU: 0 UID: 0 PID: 13998 Comm: syz.2.2025 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 867.455300][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 867.455312][T13998] Call Trace: [ 867.455320][T13998] [ 867.455328][T13998] dump_stack_lvl+0x189/0x250 [ 867.455355][T13998] ? __pfx____ratelimit+0x10/0x10 [ 867.455376][T13998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.455397][T13998] ? __pfx__printk+0x10/0x10 [ 867.455421][T13998] ? __might_fault+0xb0/0x130 [ 867.455449][T13998] should_fail_ex+0x414/0x560 [ 867.455470][T13998] fpu__restore_sig+0x1bb/0x1100 [ 867.455491][T13998] ? __lock_acquire+0xab9/0xd20 [ 867.455502][T13998] ? __pfx_fpu__restore_sig+0x10/0x10 [ 867.455533][T13998] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 867.455553][T13998] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 867.455567][T13998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 867.455593][T13998] ? __task_pid_nr_ns+0x28/0x470 [ 867.455609][T13998] ? do_syscall_64+0xbe/0x3b0 [ 867.455623][T13998] do_syscall_64+0xfa/0x3b0 [ 867.455635][T13998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.455645][T13998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 867.455655][T13998] ? clear_bhb_loop+0x60/0xb0 [ 867.455670][T13998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.455680][T13998] RIP: 0033:0x7f1c6278ebe7 [ 867.455690][T13998] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 867.455700][T13998] RSP: 002b:00007f1c63562038 EFLAGS: 00000246 [ 867.455709][T13998] RAX: 0000000000000114 RBX: 00007f1c629b5fa0 RCX: 00007f1c6278ebe9 [ 867.455717][T13998] RDX: fffffffffffffc01 RSI: 0000000000000008 RDI: 0000000000000005 [ 867.455724][T13998] RBP: 00007f1c63562090 R08: 0000000000000000 R09: 0000000000000000 [ 867.455730][T13998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.455736][T13998] R13: 00007f1c629b6038 R14: 00007f1c629b5fa0 R15: 00007ffe3dd4d5a8 [ 867.455752][T13998] [ 867.733919][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 868.781861][ T977] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 869.640670][ T977] usb 4-1: device descriptor read/64, error -71 [ 869.873070][T14031] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 870.024939][ T977] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 870.288304][T14035] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 870.588467][ T977] usb 4-1: device descriptor read/64, error -71 [ 870.916800][T14042] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 870.916800][T14042] program syz.2.2036 not setting count and/or reply_len properly [ 870.951717][ T977] usb usb4-port1: attempt power cycle [ 871.497964][T14048] 9pnet_fd: Insufficient options for proto=fd [ 871.513716][T14045] set match dimension is over the limit! [ 872.492503][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'. [ 873.221820][T14075] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 874.709891][T14087] set match dimension is over the limit! [ 874.720458][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 875.084052][T14079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 875.098685][T14079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 875.123038][T14079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 875.135681][T14079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 875.152985][T14079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 875.349369][T14092] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 875.349369][T14092] program syz.1.2054 not setting count and/or reply_len properly [ 875.457176][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 875.803135][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 875.811205][ T9] usb 4-1: too many configurations: 191, using maximum allowed: 8 [ 875.844626][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 875.860705][ T9] usb 4-1: can't read configurations, error -61 [ 876.032274][ T9] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 876.203118][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 876.213654][ T9] usb 4-1: too many configurations: 191, using maximum allowed: 8 [ 876.257764][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 876.265535][ T9] usb 4-1: can't read configurations, error -61 [ 876.281107][ T9] usb usb4-port1: attempt power cycle [ 876.612394][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 876.613147][T14109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2060'. [ 876.631501][T12933] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 876.642221][ T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 876.673640][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 876.716812][ T9] usb 4-1: too many configurations: 191, using maximum allowed: 8 [ 876.786511][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 876.797489][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 877.590725][ T9] usb 4-1: can't read configurations, error -61 [ 878.471707][T12933] Bluetooth: hci3: command 0x0406 tx timeout [ 878.477844][T12933] Bluetooth: hci4: command 0x0406 tx timeout [ 878.484050][T12933] Bluetooth: hci2: command 0x0406 tx timeout [ 878.490759][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 879.135902][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 879.232166][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 879.293749][T14121] set match dimension is over the limit! [ 879.651958][ T9] usb 4-1: device descriptor read/8, error -71 [ 879.772124][ T9] usb usb4-port1: unable to enumerate USB device [ 879.956643][T14128] netlink: 'syz.2.2066': attribute type 7 has an invalid length. [ 879.980370][T14128] : entered promiscuous mode [ 879.993715][T14128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 880.141791][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 880.191731][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 880.206045][T14133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 880.206045][T14133] program syz.2.2068 not setting count and/or reply_len properly [ 880.364232][ T43] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 880.391124][ T43] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 880.499505][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 880.508186][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.515589][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 880.602607][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 880.613579][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.614203][T14124] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.688269][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.708528][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 882.079866][T13485] usb 4-1: USB disconnect, device number 53 [ 882.652320][T14156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.663480][T14156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.758114][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 882.777245][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 882.884064][ T43] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 882.955181][T14157] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 883.055739][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 883.362984][ T9] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 883.437282][ T9] usb 5-1: config 0 has no interface number 0 [ 883.447268][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 883.447765][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 883.478311][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.520858][ T9] usb 5-1: Product: syz [ 883.526760][T14160] set match dimension is over the limit! [ 883.540125][ T43] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 883.600744][ T9] usb 5-1: Manufacturer: syz [ 883.619374][ T9] usb 5-1: SerialNumber: syz [ 883.648727][ T9] usb 5-1: config 0 descriptor?? [ 883.791524][T14166] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 883.912096][ T43] usb 2-1: USB disconnect, device number 30 [ 884.026243][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 884.385206][ T5911] usb 5-1: USB disconnect, device number 38 [ 884.421529][ T5911] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -19 [ 884.446858][ T5911] f81534a_ctrl 5-1:0.88: failed to enable ports: -19 [ 884.717988][T14176] xt_hashlimit: max too large, truncated to 1048576 [ 885.495158][T14178] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 885.800887][T14183] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 885.800887][T14183] program syz.2.2080 not setting count and/or reply_len properly [ 886.071821][ T30] audit: type=1400 audit(885.983:116): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14180 comm="syz.0.2081" daddr=0:0:2::1 dest=3 [ 887.006775][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 887.052021][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 887.076082][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 887.271700][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 887.661250][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.674485][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.849648][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 887.882267][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 887.916975][T14207] set match dimension is over the limit! [ 888.064360][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 888.064899][ T10] usb 3-1: Product: syz [ 888.073393][ T5842] Bluetooth: hci1: Injecting HCI hardware error event [ 888.089358][ T5842] Bluetooth: hci1: hardware error 0x00 [ 888.099014][ T10] usb 3-1: Manufacturer: syz [ 888.296915][ T10] hub 3-1:4.0: USB hub found [ 888.418701][ T30] audit: type=1400 audit(888.363:117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14212 comm="syz.3.2089" dest=20001 [ 888.478773][ T10] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 888.712346][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 889.330189][T14232] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 889.330189][T14232] program syz.4.2094 not setting count and/or reply_len properly [ 889.810206][T14241] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 889.810206][T14241] The task syz.0.2096 (14241) triggered the difference, watch for misbehavior. [ 890.142084][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 890.565633][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2095'. [ 890.852722][ T5911] usb 3-1: USB disconnect, device number 41 [ 891.316686][T14247] netlink: 'syz.0.2098': attribute type 19 has an invalid length. [ 891.346396][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 891.404664][T14247] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.413810][T14247] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.422674][T14247] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.431784][T14247] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.465391][T14247] netlink: 'syz.0.2098': attribute type 19 has an invalid length. [ 891.513317][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 891.873206][T14259] set match dimension is over the limit! [ 892.589463][T14267] netlink: 'syz.3.2103': attribute type 7 has an invalid length. [ 892.650156][T14267] : entered promiscuous mode [ 894.093557][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2103'. [ 894.111952][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 896.232017][T14278] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 896.232017][T14278] program syz.4.2107 not setting count and/or reply_len properly [ 896.431765][T12933] Bluetooth: hci5: command 0x1003 tx timeout [ 896.455417][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 896.605072][ T10] usb 2-1: device descriptor read/all, error -71 [ 897.450599][T14298] netlink: 'syz.3.2112': attribute type 10 has an invalid length. [ 897.465209][T14298] team0: Port device vlan0 added [ 897.710176][ T30] audit: type=1400 audit(897.653:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14303 comm="syz.3.2115" daddr=ff00:0:2000::1 dest=20128 [ 898.458744][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 898.480077][T14306] set match dimension is over the limit! [ 898.621786][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 898.645575][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 898.663838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.752185][ T9] usb 3-1: Product: syz [ 898.776347][ T9] usb 3-1: Manufacturer: syz [ 898.878997][ T9] usb 3-1: SerialNumber: syz [ 898.883853][T14316] 9pnet_fd: Insufficient options for proto=fd [ 898.887131][ T9] usb 3-1: config 0 descriptor?? [ 899.444422][T14323] usb usb6: usbfs: process 14323 (syz.2.2110) did not claim interface 46 before use [ 899.981727][ T9] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 899.989179][ T9] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 900.160159][T14325] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 900.160159][T14325] program syz.3.2121 not setting count and/or reply_len properly [ 900.509080][ T5842] block nbd0: Receive control failed (result -107) [ 900.531804][T14329] nbd0: detected capacity change from 0 to 32 [ 900.551118][T13828] block nbd0: Dead connection, failed to find a fallback [ 900.591402][T13828] block nbd0: shutting down sockets [ 900.618749][T13828] blk_print_req_error: 11 callbacks suppressed [ 900.618766][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.645332][T13828] buffer_io_error: 26 callbacks suppressed [ 900.645348][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.665120][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.680417][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.690819][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.704372][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.715377][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.725716][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.734599][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.744529][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.760055][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.770201][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.780569][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.794240][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.804103][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.851824][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 900.893063][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 900.918181][T13828] ldm_validate_partition_table(): Disk read failed. [ 901.012356][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.031081][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.039837][T13828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 901.104109][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 901.113245][ T5960] usb 3-1: USB disconnect, device number 42 [ 901.322656][T13828] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.500364][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.510440][T13828] Dev nbd0: unable to read RDB block 0 [ 901.519349][T13828] nbd0: unable to read partition table [ 901.536934][ T9] usb 5-1: config 0 descriptor?? [ 901.560237][T13828] ldm_validate_partition_table(): Disk read failed. [ 901.605923][T13828] Dev nbd0: unable to read RDB block 0 [ 901.615617][T13828] nbd0: unable to read partition table [ 901.725208][T14343] netlink: 'syz.3.2127': attribute type 1 has an invalid length. [ 901.746645][T14342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 902.028883][T14332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.124525][T14332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.383606][ T5960] usb 5-1: USB disconnect, device number 39 [ 903.290107][T14354] set match dimension is over the limit! [ 905.246806][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 905.278556][T14366] netlink: 'syz.3.2134': attribute type 3 has an invalid length. [ 905.425052][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 905.458952][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 905.486496][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.499708][T14369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2135'. [ 905.510996][ T9] usb 2-1: config 0 descriptor?? [ 905.530013][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 905.534067][T14369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 905.541604][ T9] usb 2-1: Detected FT4232H [ 905.732611][ T5960] lo speed is unknown, defaulting to 1000 [ 905.740902][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 906.368989][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 906.487905][T14384] IPVS: Unknown mcast interface: bridge0 [ 906.515962][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 906.528315][ T9] usb 2-1: USB disconnect, device number 33 [ 906.549751][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 906.755125][ T9] ftdi_sio 2-1:0.0: device disconnected [ 908.535879][T14398] netlink: 'syz.4.2140': attribute type 1 has an invalid length. [ 908.951876][ T30] audit: type=1400 audit(908.883:119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14399 comm="syz.1.2145" daddr=fe80::bb dest=20003 [ 909.839347][T14402] netlink: 'syz.3.2144': attribute type 3 has an invalid length. [ 909.888130][ T30] audit: type=1400 audit(909.833:120): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14407 comm="syz.0.2147" daddr=fe80::bb [ 909.963120][ T30] audit: type=1400 audit(909.833:121): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14407 comm="syz.0.2147" daddr=2001:: [ 911.269249][ T30] audit: type=1400 audit(911.213:122): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14409 comm="syz.4.2146" daddr=::ffff:127.0.0.1 [ 912.331469][T14437] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 913.080637][T14449] loop9: detected capacity change from 0 to 7 [ 913.096586][T14449] Dev loop9: unable to read RDB block 7 [ 913.117821][T14449] loop9: unable to read partition table [ 913.152907][T14449] loop9: partition table beyond EOD, truncated [ 913.330092][T14449] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 913.458166][T14457] netlink: 'syz.1.2156': attribute type 1 has an invalid length. [ 914.882479][T14472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'. [ 917.831784][ T43] IPVS: starting estimator thread 0... [ 917.931723][T14500] IPVS: using max 30 ests per chain, 72000 per kthread [ 918.029122][ T30] audit: type=1400 audit(917.973:123): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14501 comm="syz.4.2169" daddr=fe80::bb dest=5 [ 919.421619][T14519] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 919.429577][T14519] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 919.441337][T14519] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 919.449430][T14519] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 920.764655][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 920.820744][T14530] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 921.122419][T14535] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 921.149363][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2177'. [ 921.370691][T14546] FAULT_INJECTION: forcing a failure. [ 921.370691][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 921.401335][T14546] CPU: 1 UID: 0 PID: 14546 Comm: syz.2.2181 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 921.401363][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.401376][T14546] Call Trace: [ 921.401384][T14546] [ 921.401394][T14546] dump_stack_lvl+0x189/0x250 [ 921.401422][T14546] ? __pfx____ratelimit+0x10/0x10 [ 921.401444][T14546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.401466][T14546] ? __pfx__printk+0x10/0x10 [ 921.401498][T14546] ? __pfx___might_resched+0x10/0x10 [ 921.401519][T14546] ? fs_reclaim_acquire+0x7d/0x100 [ 921.401548][T14546] should_fail_ex+0x414/0x560 [ 921.401572][T14546] should_failslab+0xa8/0x100 [ 921.401593][T14546] __kmalloc_noprof+0xcb/0x4f0 [ 921.401609][T14546] ? tomoyo_encode+0x28b/0x550 [ 921.401637][T14546] tomoyo_encode+0x28b/0x550 [ 921.401666][T14546] tomoyo_realpath_from_path+0x58d/0x5d0 [ 921.401703][T14546] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 921.401724][T14546] tomoyo_path_number_perm+0x1e8/0x5a0 [ 921.401746][T14546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 921.401786][T14546] ? __lock_acquire+0xab9/0xd20 [ 921.401827][T14546] ? __fget_files+0x2a/0x420 [ 921.401852][T14546] ? __fget_files+0x2a/0x420 [ 921.401871][T14546] ? __fget_files+0x3a0/0x420 [ 921.401891][T14546] ? __fget_files+0x2a/0x420 [ 921.401916][T14546] security_file_ioctl+0xcb/0x2d0 [ 921.401939][T14546] __se_sys_ioctl+0x47/0x170 [ 921.401967][T14546] do_syscall_64+0xfa/0x3b0 [ 921.401984][T14546] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.402005][T14546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.402023][T14546] ? clear_bhb_loop+0x60/0xb0 [ 921.402046][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.402062][T14546] RIP: 0033:0x7f1c6278ebe9 [ 921.402078][T14546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.402093][T14546] RSP: 002b:00007f1c63562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.402114][T14546] RAX: ffffffffffffffda RBX: 00007f1c629b5fa0 RCX: 00007f1c6278ebe9 [ 921.402128][T14546] RDX: 0000200000000b00 RSI: 000000004008af03 RDI: 0000000000000003 [ 921.402140][T14546] RBP: 00007f1c63562090 R08: 0000000000000000 R09: 0000000000000000 [ 921.402152][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.402162][T14546] R13: 00007f1c629b6038 R14: 00007f1c629b5fa0 R15: 00007ffe3dd4d5a8 [ 921.402193][T14546] [ 921.694975][T14546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 921.757346][ T30] audit: type=1400 audit(921.703:124): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14551 comm="syz.1.2182" daddr=fe80::bb dest=5 [ 921.992900][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 923.661942][T14580] lo speed is unknown, defaulting to 1000 [ 924.414751][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'. [ 925.256651][ T30] audit: type=1400 audit(925.203:125): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14599 comm="syz.1.2196" daddr=fe80::bb dest=20003 [ 926.585371][T14601] delete_channel: no stack [ 926.590119][T14601] delete_channel: no stack [ 926.627033][T14601] netlink: 'syz.4.2197': attribute type 12 has an invalid length. [ 927.162893][T14615] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 927.543303][ T30] audit: type=1400 audit(927.493:126): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14617 comm="syz.3.2202" daddr=fe80::bb dest=20003 [ 929.320905][T14641] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 930.799504][T14652] netlink: 'syz.1.2210': attribute type 16 has an invalid length. [ 931.008234][ T30] audit: type=1400 audit(930.953:127): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=14662 comm="syz.2.2214" name="/" dev="mqueue" ino=4486 [ 931.445792][T14669] FAULT_INJECTION: forcing a failure. [ 931.445792][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.281932][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.0.2216 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 932.281960][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.281972][T14669] Call Trace: [ 932.281980][T14669] [ 932.281989][T14669] dump_stack_lvl+0x189/0x250 [ 932.282016][T14669] ? __pfx____ratelimit+0x10/0x10 [ 932.282035][T14669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.282057][T14669] ? __pfx__printk+0x10/0x10 [ 932.282081][T14669] ? __might_fault+0xb0/0x130 [ 932.282112][T14669] should_fail_ex+0x414/0x560 [ 932.282137][T14669] _copy_from_iter+0x1db/0x16f0 [ 932.282165][T14669] ? rcu_is_watching+0x15/0xb0 [ 932.282187][T14669] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 932.282206][T14669] ? __pfx__copy_from_iter+0x10/0x10 [ 932.282230][T14669] ? __build_skb_around+0x257/0x3e0 [ 932.282260][T14669] ? netlink_sendmsg+0x642/0xb30 [ 932.282283][T14669] ? skb_put+0x11b/0x210 [ 932.282312][T14669] netlink_sendmsg+0x6b2/0xb30 [ 932.282346][T14669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.282390][T14669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.282409][T14669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 932.282436][T14669] __sock_sendmsg+0x21c/0x270 [ 932.282461][T14669] ____sys_sendmsg+0x505/0x830 [ 932.282494][T14669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.282532][T14669] ? import_iovec+0x74/0xa0 [ 932.282562][T14669] ___sys_sendmsg+0x21f/0x2a0 [ 932.282593][T14669] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.282655][T14669] ? __fget_files+0x2a/0x420 [ 932.282676][T14669] ? __fget_files+0x3a0/0x420 [ 932.282708][T14669] __x64_sys_sendmsg+0x19b/0x260 [ 932.282737][T14669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.282775][T14669] ? __pfx_ksys_write+0x10/0x10 [ 932.282790][T14669] ? rcu_is_watching+0x15/0xb0 [ 932.282815][T14669] ? do_syscall_64+0xbe/0x3b0 [ 932.282842][T14669] do_syscall_64+0xfa/0x3b0 [ 932.282860][T14669] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.282880][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.282899][T14669] ? clear_bhb_loop+0x60/0xb0 [ 932.282922][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.282939][T14669] RIP: 0033:0x7ff6a238ebe9 [ 932.282958][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.282973][T14669] RSP: 002b:00007ff6a3268038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.282994][T14669] RAX: ffffffffffffffda RBX: 00007ff6a25b5fa0 RCX: 00007ff6a238ebe9 [ 932.283009][T14669] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 932.283022][T14669] RBP: 00007ff6a3268090 R08: 0000000000000000 R09: 0000000000000000 [ 932.283034][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.283046][T14669] R13: 00007ff6a25b6038 R14: 00007ff6a25b5fa0 R15: 00007fffd0551728 [ 932.283077][T14669] [ 933.043644][T14708] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2220'. [ 933.339010][T14694] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 933.360980][T14701] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 933.405066][T14701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2219'. [ 933.429908][ T30] audit: type=1400 audit(933.353:128): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14706 comm="syz.1.2218" daddr=fe80::bb dest=20003 [ 933.676264][T14701] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 937.461673][ T5911] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 937.507236][T14750] loop6: detected capacity change from 0 to 524287999 [ 937.570481][T14752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2233'. [ 938.013151][ T5911] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 938.311841][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.319915][ T5911] usb 2-1: Product: syz [ 938.848952][ T5911] usb 2-1: Manufacturer: syz [ 938.926215][ T5911] usb 2-1: SerialNumber: syz [ 939.012834][ T5911] usb 2-1: config 0 descriptor?? [ 939.108459][ T5911] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 940.080643][ T30] audit: type=1400 audit(939.053:129): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14786 comm="syz.4.2235" daddr=fe80::bb dest=20003 [ 940.106816][ T5911] sonixb 2-1:0.0: Error reading register 00: -110 [ 940.658725][ T5911] usb 2-1: USB disconnect, device number 34 [ 941.748287][ T30] audit: type=1400 audit(941.153:130): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14796 comm="syz.4.2238" daddr=fe80::bb dest=5 [ 942.106207][ C0] hrtimer: interrupt took 27525 ns [ 942.141277][T14810] netlink: 160720 bytes leftover after parsing attributes in process `syz.4.2240'. [ 942.936984][ T977] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 943.103848][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 943.123182][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 943.164033][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 943.219292][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 943.249844][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.379823][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 943.389268][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.543050][T14823] block nbd1: shutting down sockets [ 943.551648][ T8983] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 943.643644][ T977] usb 5-1: GET_CAPABILITIES returned 0 [ 943.669520][ T977] usbtmc 5-1:16.0: can't read capabilities [ 943.721909][ T8983] usb 3-1: Using ep0 maxpacket: 16 [ 943.732324][ T8983] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 943.765676][ T8983] usb 3-1: config 1 has no interface number 0 [ 943.795054][ T8983] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 943.836074][ T8983] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 943.858076][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.872179][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.881578][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.889621][ T8983] usb 3-1: config 1 interface 105 has no altsetting 0 [ 943.890752][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.908776][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.917896][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.927073][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 943.967906][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.000160][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.009508][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.018684][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.027759][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.040463][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.046011][ T8983] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 944.049703][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.068257][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 944.077395][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 944.115228][ T977] usb 5-1: USB disconnect, device number 40 [ 944.135293][ T8983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.320415][ T8983] usb 3-1: Product: syz [ 944.433619][ T8983] usb 3-1: Manufacturer: syz [ 944.730064][T14859] netlink: 'syz.3.2246': attribute type 1 has an invalid length. [ 944.842108][ T8983] usb 3-1: SerialNumber: syz [ 944.904294][T14820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.013999][T14820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.029043][ T30] audit: type=1400 audit(944.973:131): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14861 comm="syz.0.2248" daddr=fe80::bb dest=20003 [ 945.345028][ T2152] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 945.949316][T14867] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2249'. [ 946.029864][T14820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 946.045721][T14820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 946.127603][ T2152] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 946.137216][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.156803][T14870] netlink: 'syz.3.2250': attribute type 1 has an invalid length. [ 946.162287][ T2152] usb 2-1: config 0 descriptor?? [ 946.562103][ T8983] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 946.728243][ T2152] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 947.391834][T14873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2251'. [ 947.393516][ T2152] [drm:udl_init] *ERROR* Selecting channel failed [ 947.432644][ T2152] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 947.440638][ T2152] [drm] Initialized udl on minor 2 [ 948.029333][ T2152] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 948.090100][ T2152] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 948.144676][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 948.266929][ T8983] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 948.282737][ T2152] usb 2-1: USB disconnect, device number 35 [ 948.291847][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 948.342442][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 948.399979][ T8983] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:4a:a2:23:1a:bf [ 949.205979][ T8983] usb 3-1: USB disconnect, device number 43 [ 949.227481][ T8983] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 949.339624][T14894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.839592][T14899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 949.886797][ T8983] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 949.923475][ T8983] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 949.956129][ T8983] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 950.191735][ T977] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 950.244224][T14906] set match dimension is over the limit! [ 950.533639][ T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.583998][ T977] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 950.602113][ T977] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.618136][ T977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 950.633878][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.722390][ T977] usb 2-1: Product: syz [ 950.729910][ T977] usb 2-1: Manufacturer: syz [ 950.735111][ T977] usb 2-1: SerialNumber: syz [ 950.748409][ T977] hub 2-1:1.0: bad descriptor, ignoring hub [ 950.755708][ T977] hub 2-1:1.0: probe with driver hub failed with error -5 [ 950.886761][ T30] audit: type=1400 audit(950.833:132): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14912 comm="syz.3.2262" daddr=fe80::bb dest=20003 [ 951.062029][ T977] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 952.230670][ T977] usb 2-1: USB disconnect, device number 36 [ 952.373062][ T977] usblp0: removed [ 954.039575][T14930] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 954.667131][T14936] trusted_key: encrypted_key: insufficient parameters specified [ 955.890391][T14944] input: syz1 as /devices/virtual/input/input35 [ 956.435504][T14955] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 956.446587][T14955] overlayfs: missing 'lowerdir' [ 956.499643][T14927] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 956.520629][ T30] audit: type=1400 audit(956.423:133): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14948 comm="syz.3.2272" daddr=fe80::bb dest=5 [ 956.969814][T14959] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 959.221639][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 959.421727][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 959.437081][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 959.484071][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.532787][ T9] usb 3-1: Product: syz [ 959.547642][ T9] usb 3-1: Manufacturer: syz [ 959.937314][ T9] usb 3-1: SerialNumber: syz [ 959.959659][ T9] usb 3-1: config 0 descriptor?? [ 960.367758][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 960.393721][ T9] usb 3-1: Detected FT232H [ 960.567219][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2277'. [ 960.638094][T14971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.653008][T14984] FAULT_INJECTION: forcing a failure. [ 960.653008][T14984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.687802][T14971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.700120][T14984] CPU: 0 UID: 0 PID: 14984 Comm: syz.1.2282 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 960.700149][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.700162][T14984] Call Trace: [ 960.700173][T14984] [ 960.700182][T14984] dump_stack_lvl+0x189/0x250 [ 960.700211][T14984] ? __pfx____ratelimit+0x10/0x10 [ 960.700233][T14984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.700254][T14984] ? __pfx__printk+0x10/0x10 [ 960.700295][T14984] should_fail_ex+0x414/0x560 [ 960.700321][T14984] _copy_to_user+0x31/0xb0 [ 960.700350][T14984] do_insn_ioctl+0x2b8/0x580 [ 960.700379][T14984] comedi_unlocked_ioctl+0xa1d/0xfc0 [ 960.700409][T14984] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 960.700430][T14984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 960.700459][T14984] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 960.700478][T14984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 960.700500][T14984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 960.700519][T14984] ? smack_log+0xef/0x3f0 [ 960.700548][T14984] ? __pfx_smack_log+0x10/0x10 [ 960.700575][T14984] ? smk_access+0x14c/0x4e0 [ 960.700609][T14984] ? smk_tskacc+0x2fc/0x370 [ 960.700642][T14984] ? smack_file_ioctl+0x2a9/0x340 [ 960.700664][T14984] ? __pfx_smack_file_ioctl+0x10/0x10 [ 960.700695][T14984] ? __fget_files+0x2a/0x420 [ 960.700716][T14984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 960.700737][T14984] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 960.700757][T14984] __se_sys_ioctl+0xfc/0x170 [ 960.700788][T14984] do_syscall_64+0xfa/0x3b0 [ 960.700809][T14984] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.700830][T14984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.700850][T14984] ? clear_bhb_loop+0x60/0xb0 [ 960.700874][T14984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.700893][T14984] RIP: 0033:0x7f020b78ebe9 [ 960.700911][T14984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.700929][T14984] RSP: 002b:00007f020c596038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 960.700952][T14984] RAX: ffffffffffffffda RBX: 00007f020b9b5fa0 RCX: 00007f020b78ebe9 [ 960.700966][T14984] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 960.700979][T14984] RBP: 00007f020c596090 R08: 0000000000000000 R09: 0000000000000000 [ 960.700991][T14984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.701003][T14984] R13: 00007f020b9b6038 R14: 00007f020b9b5fa0 R15: 00007fff24c8eb28 [ 960.701036][T14984] [ 960.959822][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 960.973782][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 960.982659][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 960.990433][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 961.006333][ T9] usb 3-1: USB disconnect, device number 44 [ 961.018043][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 961.033898][ T9] ftdi_sio 3-1:0.0: device disconnected [ 961.081916][ T977] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 961.237204][ T977] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 961.270390][T14991] xt_hashlimit: size too large, truncated to 1048576 [ 961.278730][ T977] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 961.288406][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.324401][ T977] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 961.684922][T15001] tipc: Enabling of bearer rejected, failed to enable media [ 962.055604][T15001] syzkaller0: entered promiscuous mode [ 962.086158][T15001] syzkaller0: entered allmulticast mode [ 962.372698][ T977] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 962.530943][T15017] netlink: 'syz.0.2288': attribute type 16 has an invalid length. [ 962.601644][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 962.654017][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 962.697560][ T977] stv0680 5-1:4.0: last error: 80, command = 0xfb [ 962.722424][ T977] usb 5-1: USB disconnect, device number 41 [ 962.771744][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 962.779526][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.804115][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 962.829174][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 962.859470][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 962.881284][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.905360][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 962.918780][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 962.931109][ T9] usb 2-1: Manufacturer: syz [ 962.939591][ T9] usb 2-1: config 0 descriptor?? [ 963.266136][T15026] --map-set only usable from mangle table [ 963.354223][ T9] rc_core: IR keymap rc-hauppauge not found [ 963.458341][ T9] Registered IR keymap rc-empty [ 963.612522][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 963.721697][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 963.744509][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 963.767656][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 963.862336][T15030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.896510][T15030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.010127][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.031825][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.071890][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.103091][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.145737][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.169899][ T30] audit: type=1400 audit(964.083:134): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15029 comm="syz.0.2291" daddr=fc01::6 dest=20011 [ 964.242365][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.342471][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.424365][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.504057][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.592369][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.621501][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 964.635061][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.759994][ T9] usb 2-1: USB disconnect, device number 37 [ 964.811714][ T977] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 964.973346][ T977] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 964.992400][ T977] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 965.021708][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.047726][ T977] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 965.184091][T15046] block nbd1: shutting down sockets [ 966.059477][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.068697][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.141708][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 966.150814][ T977] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 966.242152][T15054] block nbd1: shutting down sockets [ 966.677710][T15064] FAULT_INJECTION: forcing a failure. [ 966.677710][T15064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.691215][T15064] CPU: 1 UID: 0 PID: 15064 Comm: syz.4.2300 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 966.691242][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 966.691253][T15064] Call Trace: [ 966.691262][T15064] [ 966.691269][T15064] dump_stack_lvl+0x189/0x250 [ 966.691297][T15064] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.691319][T15064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.691342][T15064] ? __pfx__printk+0x10/0x10 [ 966.691381][T15064] should_fail_ex+0x414/0x560 [ 966.691407][T15064] _copy_to_user+0x31/0xb0 [ 966.691437][T15064] simple_read_from_buffer+0xe1/0x170 [ 966.691463][T15064] proc_fail_nth_read+0x1df/0x250 [ 966.691491][T15064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.691519][T15064] ? rw_verify_area+0x258/0x650 [ 966.691547][T15064] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 966.691570][T15064] vfs_read+0x200/0x980 [ 966.691606][T15064] ? __pfx___mutex_lock+0x10/0x10 [ 966.691628][T15064] ? __pfx_vfs_read+0x10/0x10 [ 966.691659][T15064] ? __fget_files+0x2a/0x420 [ 966.691686][T15064] ? __fget_files+0x3a0/0x420 [ 966.691711][T15064] ? __fget_files+0x2a/0x420 [ 966.691743][T15064] ksys_read+0x145/0x250 [ 966.691764][T15064] ? __pfx_ksys_read+0x10/0x10 [ 966.691789][T15064] ? do_syscall_64+0xbe/0x3b0 [ 966.691816][T15064] do_syscall_64+0xfa/0x3b0 [ 966.691836][T15064] ? lockdep_hardirqs_on+0x9c/0x150 [ 966.691855][T15064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.691874][T15064] ? clear_bhb_loop+0x60/0xb0 [ 966.691898][T15064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.691917][T15064] RIP: 0033:0x7fe4cef8d5fc [ 966.691935][T15064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 966.691952][T15064] RSP: 002b:00007fe4cfdc3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 966.691973][T15064] RAX: ffffffffffffffda RBX: 00007fe4cf1b6180 RCX: 00007fe4cef8d5fc [ 966.691988][T15064] RDX: 000000000000000f RSI: 00007fe4cfdc30a0 RDI: 0000000000000006 [ 966.692000][T15064] RBP: 00007fe4cfdc3090 R08: 0000000000000000 R09: 0000000000000000 [ 966.692013][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.692025][T15064] R13: 00007fe4cf1b6218 R14: 00007fe4cf1b6180 R15: 00007fffffe728b8 [ 966.692059][T15064] [ 967.479655][ T977] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 967.554908][ T977] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 967.571128][ T977] usb 4-1: USB disconnect, device number 54 [ 968.687238][T15081] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 973.591664][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 973.661780][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 973.791238][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 973.812298][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 973.835953][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.855183][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 973.887135][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.892828][T15123] fuse: Unknown parameter 'user_i00000000000000000000' [ 973.909043][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 973.931370][ T9] usb 2-1: Product: syz [ 974.121309][ T9] usb 2-1: Manufacturer: syz [ 974.127044][ T9] usb 2-1: SerialNumber: syz [ 974.141147][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 974.167026][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 975.053718][ C0] usb 2-1: ath: unknown panic pattern! [ 975.257312][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.267793][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.785332][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 975.937172][ T10] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 976.184938][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 976.305015][ T5911] ath9k_htc: Failed to initialize the device [ 976.319030][ T2152] usb 2-1: USB disconnect, device number 38 [ 976.499723][ T2152] usb 2-1: ath9k_htc: USB layer deinitialized [ 976.692733][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 976.701054][ T10] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 976.907530][ T2152] usb 4-1: USB disconnect, device number 55 [ 977.046469][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 977.214974][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.257333][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.361762][ T5960] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 977.483894][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 977.503068][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.512631][ T9] usb 3-1: Product: syz [ 977.517153][ T9] usb 3-1: Manufacturer: syz [ 977.523108][ T30] audit: type=1400 audit(977.463:135): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15146 comm="syz.3.2325" daddr=fe80::bb dest=5 [ 977.532229][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 977.541013][ T9] usb 3-1: SerialNumber: syz [ 978.197007][ T5960] usb 5-1: config 0 has an invalid descriptor of length 238, skipping remainder of the config [ 978.239507][ T5960] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 978.325692][ T5960] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 978.370027][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 978.380152][ T30] audit: type=1400 audit(978.323:136): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15155 comm="syz.0.2327" dest=20000 [ 978.435919][ T5960] usb 5-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 978.462987][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.505111][ T5960] usb 5-1: config 0 descriptor?? [ 978.562793][ T5960] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 978.658998][ T9] usb 3-1: 0:2 : does not exist [ 978.676679][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 978.721857][ T9] usb 3-1: USB disconnect, device number 45 [ 978.804455][T13828] udevd[13828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.037663][T15167] input: syz0 as /devices/virtual/input/input37 [ 980.169874][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.183052][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.214152][T15176] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2323'. [ 980.552452][T15182] fuse: Bad value for 'rootmode' [ 982.067163][ T5960] usb 5-1: USB disconnect, device number 42 [ 982.500921][ T30] audit: type=1400 audit(982.443:137): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15195 comm="syz.3.2338" daddr=fe80::bb dest=5 [ 982.651663][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 982.835961][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.402609][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.416782][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 983.429914][T15214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 983.560787][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.571944][ T43] usb 2-1: config 0 descriptor?? [ 983.932085][T15220] syz.2.2345: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 983.947058][T15220] CPU: 1 UID: 0 PID: 15220 Comm: syz.2.2345 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 983.947150][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.947162][T15220] Call Trace: [ 983.947174][T15220] [ 983.947183][T15220] dump_stack_lvl+0x189/0x250 [ 983.947211][T15220] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.947234][T15220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.947274][T15220] warn_alloc+0x214/0x310 [ 983.947296][T15220] ? stack_depot_save_flags+0x40/0x900 [ 983.947322][T15220] ? __pfx_warn_alloc+0x10/0x10 [ 983.947346][T15220] ? kasan_save_track+0x4f/0x80 [ 983.947375][T15220] ? xskq_create+0x56/0x170 [ 983.947392][T15220] ? xsk_init_queue+0xb0/0x110 [ 983.947408][T15220] ? xsk_setsockopt+0x43f/0x710 [ 983.947435][T15220] ? do_sock_setsockopt+0x179/0x1b0 [ 983.947460][T15220] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 983.947486][T15220] ? do_syscall_64+0xfa/0x3b0 [ 983.947505][T15220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.947533][T15220] __vmalloc_node_range_noprof+0x125/0x12f0 [ 983.947589][T15220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 983.947613][T15220] ? xskq_create+0x56/0x170 [ 983.947633][T15220] ? __kasan_kmalloc+0x93/0xb0 [ 983.947656][T15220] vmalloc_user_noprof+0xad/0xf0 [ 983.947678][T15220] ? xskq_create+0xbf/0x170 [ 983.947697][T15220] xskq_create+0xbf/0x170 [ 983.947720][T15220] xsk_init_queue+0xb0/0x110 [ 983.947742][T15220] xsk_setsockopt+0x43f/0x710 [ 983.947774][T15220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 983.947807][T15220] ? __fget_files+0x2a/0x420 [ 983.947832][T15220] ? __fget_files+0x2a/0x420 [ 983.947852][T15220] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 983.947870][T15220] ? __pfx_xsk_setsockopt+0x10/0x10 [ 983.947901][T15220] do_sock_setsockopt+0x179/0x1b0 [ 983.947933][T15220] __x64_sys_setsockopt+0x13f/0x1b0 [ 983.947967][T15220] do_syscall_64+0xfa/0x3b0 [ 983.947987][T15220] ? lockdep_hardirqs_on+0x9c/0x150 [ 983.948006][T15220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.948024][T15220] ? clear_bhb_loop+0x60/0xb0 [ 983.948048][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.948066][T15220] RIP: 0033:0x7f1c6278ebe9 [ 983.948090][T15220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.948107][T15220] RSP: 002b:00007f1c63541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 983.948128][T15220] RAX: ffffffffffffffda RBX: 00007f1c629b6090 RCX: 00007f1c6278ebe9 [ 983.948143][T15220] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 983.948154][T15220] RBP: 00007f1c63541090 R08: 0000000000000004 R09: 0000000000000000 [ 983.948166][T15220] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.948179][T15220] R13: 00007f1c629b6128 R14: 00007f1c629b6090 R15: 00007ffe3dd4d5a8 [ 983.948211][T15220] [ 983.948289][T15220] Mem-Info: [ 984.240959][T15220] active_anon:6013 inactive_anon:11591 isolated_anon:0 [ 984.240959][T15220] active_file:9467 inactive_file:50263 isolated_file:0 [ 984.240959][T15220] unevictable:768 dirty:238 writeback:0 [ 984.240959][T15220] slab_reclaimable:10609 slab_unreclaimable:104815 [ 984.240959][T15220] mapped:36916 shmem:12843 pagetables:1385 [ 984.240959][T15220] sec_pagetables:0 bounce:0 [ 984.240959][T15220] kernel_misc_reclaimable:0 [ 984.240959][T15220] free:1285856 free_pcp:13152 free_cma:0 [ 984.287559][T15220] Node 0 active_anon:24052kB inactive_anon:46364kB active_file:37668kB inactive_file:201052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147664kB dirty:948kB writeback:0kB shmem:49836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13096kB pagetables:5240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 984.321609][T15220] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:64kB pagetables:300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 984.353317][T15220] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.382577][T15220] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 984.389329][T15220] Node 0 DMA32 free:1213024kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24048kB inactive_anon:46324kB active_file:35892kB inactive_file:200992kB unevictable:1536kB writepending:948kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:47600kB local_pcp:15684kB free_cma:0kB [ 984.422646][T15220] lowmem_reserve[]: 0 0 1 1 1 [ 984.428201][T15220] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 984.457624][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 984.467682][T15220] Node 1 Normal free:3915032kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4992kB local_pcp:1056kB free_cma:0kB [ 984.499444][T15220] lowmem_reserve[]: 0 0 0 0 0 [ 984.504640][T15220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 984.518691][T15220] Node 0 DMA32: 584*4kB (UME) 604*8kB (UM) 274*16kB (UM) 478*32kB (UME) 156*64kB (UE) 30*128kB (UM) 38*256kB (UM) 27*512kB (UM) 18*1024kB (UME) 4*2048kB (UM) 274*4096kB (UM) = 1213152kB [ 984.538910][T15220] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 984.551583][T15220] Node 1 Normal: 174*4kB (UME) 66*8kB (UME) 39*16kB (UME) 243*32kB (UME) 90*64kB (UME) 26*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3915032kB [ 984.571155][T15220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.581037][T15220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.590431][T15220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.600197][T15220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.609734][T15220] 72570 total pagecache pages [ 984.614711][T15220] 1 pages in swap cache [ 984.618962][T15220] Free swap = 124992kB [ 984.623204][T15220] Total swap = 124996kB [ 984.627403][T15220] 2097051 pages RAM [ 984.631288][T15220] 0 pages HighMem/MovableOnly [ 984.636184][T15220] 424695 pages reserved [ 984.640464][T15220] 0 pages cma reserved [ 984.646114][T15220] FAULT_INJECTION: forcing a failure. [ 984.646114][T15220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.659306][T15220] CPU: 1 UID: 0 PID: 15220 Comm: syz.2.2345 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 984.659331][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.659344][T15220] Call Trace: [ 984.659354][T15220] [ 984.659363][T15220] dump_stack_lvl+0x189/0x250 [ 984.659395][T15220] ? __pfx____ratelimit+0x10/0x10 [ 984.659417][T15220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.659438][T15220] ? __pfx__printk+0x10/0x10 [ 984.659477][T15220] should_fail_ex+0x414/0x560 [ 984.659508][T15220] _copy_to_user+0x31/0xb0 [ 984.659538][T15220] simple_read_from_buffer+0xe1/0x170 [ 984.659564][T15220] proc_fail_nth_read+0x1df/0x250 [ 984.659592][T15220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.659619][T15220] ? rw_verify_area+0x258/0x650 [ 984.659647][T15220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.659672][T15220] vfs_read+0x200/0x980 [ 984.659707][T15220] ? __pfx___mutex_lock+0x10/0x10 [ 984.659730][T15220] ? __pfx_vfs_read+0x10/0x10 [ 984.659760][T15220] ? __fget_files+0x2a/0x420 [ 984.659787][T15220] ? __fget_files+0x3a0/0x420 [ 984.659807][T15220] ? __fget_files+0x2a/0x420 [ 984.659838][T15220] ksys_read+0x145/0x250 [ 984.659859][T15220] ? __pfx_ksys_read+0x10/0x10 [ 984.659890][T15220] do_syscall_64+0xfa/0x3b0 [ 984.659913][T15220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.659932][T15220] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 984.659951][T15220] ? clear_bhb_loop+0x60/0xb0 [ 984.659973][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.659992][T15220] RIP: 0033:0x7f1c6278d5fc [ 984.660009][T15220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 984.660026][T15220] RSP: 002b:00007f1c63541030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.660045][T15220] RAX: ffffffffffffffda RBX: 00007f1c629b6090 RCX: 00007f1c6278d5fc [ 984.660060][T15220] RDX: 000000000000000f RSI: 00007f1c635410a0 RDI: 000000000000000d [ 984.660072][T15220] RBP: 00007f1c63541090 R08: 0000000000000000 R09: 0000000000000000 [ 984.660084][T15220] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.660097][T15220] R13: 00007f1c629b6128 R14: 00007f1c629b6090 R15: 00007ffe3dd4d5a8 [ 984.660130][T15220] [ 985.041660][ T30] audit: type=1400 audit(984.973:138): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15216 comm="syz.4.2346" daddr=fe80::bb dest=5 [ 985.122981][T15206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.124557][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.138606][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.145704][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.152740][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.159883][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.160491][T15206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.167305][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.182446][ T43] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 985.206160][ T43] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 985.282061][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'. [ 985.406249][ T43] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 985.546390][T15236] binder: BINDER_SET_CONTEXT_MGR already set [ 985.557748][T15236] binder: 15235:15236 ioctl 4018620d 200000000040 returned -16 [ 985.609295][T15206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.618389][T15206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.632935][ T43] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 985.713215][ T43] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 985.766017][ T43] usb 2-1: USB disconnect, device number 39 [ 985.992146][T15242] [ 985.994624][T15242] ====================================================== [ 986.001645][T15242] WARNING: possible circular locking dependency detected [ 986.008684][T15242] 6.16.0-syzkaller #0 Not tainted [ 986.013710][T15242] ------------------------------------------------------ [ 986.020731][T15242] syz.2.2351/15242 is trying to acquire lock: [ 986.026805][T15242] ffff888142367358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 986.036266][T15242] [ 986.036266][T15242] but task is already holding lock: [ 986.043728][T15242] ffff888142366368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 986.053434][T15242] [ 986.053434][T15242] which lock already depends on the new lock. [ 986.053434][T15242] [ 986.063935][T15242] [ 986.063935][T15242] the existing dependency chain (in reverse order) is: [ 986.072959][T15242] [ 986.072959][T15242] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 986.081510][T15242] lock_acquire+0x120/0x360 [ 986.086541][T15242] down_write+0x96/0x1f0 [ 986.091317][T15242] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 986.097664][T15242] nbd_start_device+0x16c/0xac0 [ 986.103053][T15242] nbd_genl_connect+0x135b/0x18f0 [ 986.108703][T15242] genl_family_rcv_msg_doit+0x215/0x300 [ 986.114933][T15242] genl_rcv_msg+0x60e/0x790 [ 986.119964][T15242] netlink_rcv_skb+0x205/0x470 [ 986.125618][T15242] genl_rcv+0x28/0x40 [ 986.130143][T15242] netlink_unicast+0x75c/0x8e0 [ 986.135536][T15242] netlink_sendmsg+0x805/0xb30 [ 986.140935][T15242] __sock_sendmsg+0x21c/0x270 [ 986.146146][T15242] ____sys_sendmsg+0x505/0x830 [ 986.151448][T15242] ___sys_sendmsg+0x21f/0x2a0 [ 986.156666][T15242] __x64_sys_sendmsg+0x19b/0x260 [ 986.162235][T15242] do_syscall_64+0xfa/0x3b0 [ 986.167376][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.173820][T15242] [ 986.173820][T15242] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 986.181666][T15242] lock_acquire+0x120/0x360 [ 986.186780][T15242] __mutex_lock+0x182/0xe80 [ 986.191820][T15242] refcount_dec_and_mutex_lock+0x30/0xa0 [ 986.198285][T15242] nbd_config_put+0x2c/0x790 [ 986.203409][T15242] nbd_release+0xfe/0x140 [ 986.208449][T15242] bdev_release+0x533/0x650 [ 986.213752][T15242] blkdev_release+0x15/0x20 [ 986.218961][T15242] __fput+0x449/0xa70 [ 986.223467][T15242] fput_close_sync+0x119/0x200 [ 986.229019][T15242] __x64_sys_close+0x7f/0x110 [ 986.234419][T15242] do_syscall_64+0xfa/0x3b0 [ 986.239532][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.245952][T15242] [ 986.245952][T15242] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 986.254300][T15242] validate_chain+0xb9b/0x2140 [ 986.259678][T15242] __lock_acquire+0xab9/0xd20 [ 986.264971][T15242] lock_acquire+0x120/0x360 [ 986.270009][T15242] __mutex_lock+0x182/0xe80 [ 986.275124][T15242] __del_gendisk+0x129/0x9e0 [ 986.280234][T15242] del_gendisk+0xe8/0x160 [ 986.285080][T15242] loop_remove+0x42/0xc0 [ 986.289871][T15242] loop_control_ioctl+0x4ac/0x5a0 [ 986.295418][T15242] __se_sys_ioctl+0xfc/0x170 [ 986.300707][T15242] do_syscall_64+0xfa/0x3b0 [ 986.305733][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.312143][T15242] [ 986.312143][T15242] other info that might help us debug this: [ 986.312143][T15242] [ 986.322711][T15242] Chain exists of: [ 986.322711][T15242] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 986.322711][T15242] [ 986.336983][T15242] Possible unsafe locking scenario: [ 986.336983][T15242] [ 986.344425][T15242] CPU0 CPU1 [ 986.349781][T15242] ---- ---- [ 986.355255][T15242] rlock(&set->update_nr_hwq_lock); [ 986.360538][T15242] lock(&nbd->config_lock); [ 986.367656][T15242] lock(&set->update_nr_hwq_lock); [ 986.375550][T15242] lock(&disk->open_mutex); [ 986.380142][T15242] [ 986.380142][T15242] *** DEADLOCK *** [ 986.380142][T15242] [ 986.388361][T15242] 1 lock held by syz.2.2351/15242: [ 986.393471][T15242] #0: ffff888142366368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 986.403582][T15242] [ 986.403582][T15242] stack backtrace: [ 986.409478][T15242] CPU: 0 UID: 0 PID: 15242 Comm: syz.2.2351 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 986.409498][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 986.409510][T15242] Call Trace: [ 986.409518][T15242] [ 986.409528][T15242] dump_stack_lvl+0x189/0x250 [ 986.409551][T15242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 986.409570][T15242] ? __pfx__printk+0x10/0x10 [ 986.409592][T15242] ? print_lock_name+0xde/0x100 [ 986.409614][T15242] print_circular_bug+0x2ee/0x310 [ 986.409636][T15242] check_noncircular+0x134/0x160 [ 986.409658][T15242] validate_chain+0xb9b/0x2140 [ 986.409678][T15242] ? __schedule+0x16c8/0x4c90 [ 986.409697][T15242] ? finish_task_switch+0x18b/0x950 [ 986.409726][T15242] __lock_acquire+0xab9/0xd20 [ 986.409744][T15242] ? __del_gendisk+0x129/0x9e0 [ 986.409764][T15242] lock_acquire+0x120/0x360 [ 986.409779][T15242] ? __del_gendisk+0x129/0x9e0 [ 986.409805][T15242] __mutex_lock+0x182/0xe80 [ 986.409823][T15242] ? __del_gendisk+0x129/0x9e0 [ 986.409848][T15242] ? __del_gendisk+0x129/0x9e0 [ 986.409868][T15242] ? lockdep_hardirqs_on+0x9c/0x150 [ 986.409886][T15242] ? __pfx___mutex_lock+0x10/0x10 [ 986.409904][T15242] ? __pfx___might_resched+0x10/0x10 [ 986.409925][T15242] ? __lock_acquire+0xab9/0xd20 [ 986.409940][T15242] ? disk_del_events+0xb5/0x210 [ 986.409963][T15242] ? __del_gendisk+0xc1/0x9e0 [ 986.409984][T15242] __del_gendisk+0x129/0x9e0 [ 986.410005][T15242] ? del_gendisk+0xe0/0x160 [ 986.410028][T15242] ? __pfx___del_gendisk+0x10/0x10 [ 986.410056][T15242] ? down_read+0x1ad/0x2e0 [ 986.410076][T15242] del_gendisk+0xe8/0x160 [ 986.410098][T15242] loop_remove+0x42/0xc0 [ 986.410124][T15242] loop_control_ioctl+0x4ac/0x5a0 [ 986.410143][T15242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 986.410157][T15242] ? __fget_files+0x2a/0x420 [ 986.410178][T15242] ? bpf_lsm_file_ioctl+0x9/0x20 [ 986.410197][T15242] ? __pfx_loop_control_ioctl+0x10/0x10 [ 986.410212][T15242] __se_sys_ioctl+0xfc/0x170 [ 986.410238][T15242] do_syscall_64+0xfa/0x3b0 [ 986.410257][T15242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.410275][T15242] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 986.410292][T15242] ? clear_bhb_loop+0x60/0xb0 [ 986.410310][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.410328][T15242] RIP: 0033:0x7f1c6278ebe9 [ 986.410344][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.410360][T15242] RSP: 002b:00007f1c63520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.410379][T15242] RAX: ffffffffffffffda RBX: 00007f1c629b6180 RCX: 00007f1c6278ebe9 [ 986.410393][T15242] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 986.410404][T15242] RBP: 00007f1c62811e19 R08: 0000000000000000 R09: 0000000000000000 [ 986.410415][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.410426][T15242] R13: 00007f1c629b6218 R14: 00007f1c629b6180 R15: 00007ffe3dd4d5a8 [ 986.410445][T15242] [ 986.734541][T15239] netlink: 'syz.2.2351': attribute type 21 has an invalid length. [ 986.742625][T15239] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2351'. [ 986.751771][T15239] netlink: 'syz.2.2351': attribute type 5 has an invalid length. [ 986.759825][T15239] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2351'. [ 986.786720][ T30] audit: type=1400 audit(986.733:139): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15240 comm="syz.0.2352" daddr=ff01::1 dest=20000 [ 986.925635][T15244] 9pnet_fd: Insufficient options for proto=fd [ 987.099957][ T30] audit: type=1326 audit(987.043:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.261586][ T30] audit: type=1326 audit(987.193:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.283816][ T30] audit: type=1326 audit(987.193:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.305334][ T30] audit: type=1326 audit(987.193:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.326901][ T30] audit: type=1326 audit(987.193:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.349906][ T30] audit: type=1326 audit(987.193:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.371678][ T30] audit: type=1326 audit(987.193:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000 [ 987.394422][ T30] audit: type=1326 audit(987.193:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15240 comm="syz.0.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a238ebe9 code=0x7fc00000