last executing test programs: 6m22.726270263s ago: executing program 32 (id=378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3m4.821754927s ago: executing program 4 (id=3098): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0xa) 3m4.791732754s ago: executing program 4 (id=3099): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") 3m4.754488264s ago: executing program 4 (id=3100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 3m4.314294798s ago: executing program 4 (id=3101): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) 2m59.253719592s ago: executing program 4 (id=3102): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m59.169328981s ago: executing program 4 (id=3103): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="6b61d091989e6693ef82cc9c6a9849d347d6771890ff5409e7d98a113444785aefdf6e8abcee36f4b8e8502321213a512933a249e565b484dbf5430b35f83988d313fa6351b67df81bb0c34e2ffb49bb88ae87266dc324499b79d9147206c134cecf315888145d22d8caba8ddf619a556d83033dedafc9e5139232078969b63e84edf9536d4d23b1e5b27f1a6f15565dbbd9ffc0442dd1414e316acad2827d660ccf79c7d4307c2a32c96a2d93b0e9fc9a9d7cea78971ef3692da8c57cb7cc5b8282fd09acaacbe6"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="490301000000fedbdf251600000018000180130001006574683a53797a6b616c706572312000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x8000, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc0002, 0x2) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRES64=r5], 0x28) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000040)=@ccm_128={{0x304}, "095f94db4a976b99", "8c0d71c828ea2c25f4ef09e9d2a4d60f", "6ca8e9f1", "3e84414e5eb148ec"}, 0xfffffe3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000005700)={0x0, 0x1}, 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00!\n'], 0x38}}, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48b9, &(0x7f00000002c0)={0x0, 0xfffffffb, 0x20, 0x3, 0x21c}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000d1b000/0x1000)=nil, 0x1000}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 2m55.105995655s ago: executing program 33 (id=3074): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) listen(r0, 0x0) 2m53.047947368s ago: executing program 34 (id=3084): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 2m51.99889145s ago: executing program 35 (id=3093): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000001100)='numa_maps\x00') socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) 2m43.938337584s ago: executing program 36 (id=3103): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="6b61d091989e6693ef82cc9c6a9849d347d6771890ff5409e7d98a113444785aefdf6e8abcee36f4b8e8502321213a512933a249e565b484dbf5430b35f83988d313fa6351b67df81bb0c34e2ffb49bb88ae87266dc324499b79d9147206c134cecf315888145d22d8caba8ddf619a556d83033dedafc9e5139232078969b63e84edf9536d4d23b1e5b27f1a6f15565dbbd9ffc0442dd1414e316acad2827d660ccf79c7d4307c2a32c96a2d93b0e9fc9a9d7cea78971ef3692da8c57cb7cc5b8282fd09acaacbe6"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="490301000000fedbdf251600000018000180130001006574683a53797a6b616c706572312000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x8000, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc0002, 0x2) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='-', @ANYRES64=r5], 0x28) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x2a, &(0x7f0000000040)=@ccm_128={{0x304}, "095f94db4a976b99", "8c0d71c828ea2c25f4ef09e9d2a4d60f", "6ca8e9f1", "3e84414e5eb148ec"}, 0xfffffe3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000005700)={0x0, 0x1}, 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00!\n'], 0x38}}, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48b9, &(0x7f00000002c0)={0x0, 0xfffffffb, 0x20, 0x3, 0x21c}, &(0x7f0000000080), &(0x7f0000ff4000)) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000d1b000/0x1000)=nil, 0x1000}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 2m41.516041872s ago: executing program 5 (id=3104): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0, 0x28}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000)) 2m41.323666532s ago: executing program 5 (id=3108): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b", 0xd6}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd8", 0xf0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16", 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000", 0xce}], 0x3}}], 0x2, 0xc0) 2m41.176675306s ago: executing program 5 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8e0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") 2m41.034562811s ago: executing program 5 (id=3110): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}}}, 0x88) (async, rerun: 32) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x41) (rerun: 32) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x5) (async) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[&(0x7f00000001c0)='\x00', &(0x7f0000000200)=']]%/@)\x00', &(0x7f0000000240)='\\\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='#\x00', &(0x7f0000000300), &(0x7f0000000340)='\x00', &(0x7f0000000380)='(\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='\x00', &(0x7f0000000480)='\\\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00']}) r2 = syz_open_dev$cec(&(0x7f00000005c0), 0x0, 0x2082) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000600)={"5f21c5c3", 0x6, 0x9, 0x6, 0x8, 0xffffffff, "258ef2a3efcbb48797b0648b68304c", "a9510459", 'j.-U', "15a478ef", ["385fe2efa6820e9fdfe35642", "b7e6be0c8f7c4a1e9c61078b", "86f58b450f2c0af689d13eae", "189939714c3790687fea9fd6"]}) (async) r3 = syz_open_dev$dri(&(0x7f0000000680), 0x100, 0x6800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000006c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000700)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000740)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000780)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000007c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000880)={&(0x7f0000000800)=[r4, 0x0, r5, r6, r7, r8], &(0x7f0000000840)=[0x7, 0x3, 0x10000], 0x6, 0x1}) (async) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r9, 0xc008af12, &(0x7f0000000900)) (async) syz_open_dev$cec(&(0x7f0000000940), 0x0, 0x1) (async, rerun: 64) fallocate(r0, 0x6, 0x6, 0x7) (async, rerun: 64) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r10, &(0x7f0000000980)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000a80)={0x1, &(0x7f0000000a40)=[{0x1, 0x78, &(0x7f00000009c0)="2a7f1863bfe96dd84a366650165919d2cb694147eb829442b9a3c6911a56197db4ba3e86d9a66042971d4d20365423fa2f3d3d647372e9eee8bdc6a22b4b2c83ee422ebc2b5fda2fcbbebce7ded5fbf346e714974e9f94783bdd5d1fc55bf2c0a0864a704fcec63089c82d464988e7347907a3cb714d30a8", 0x1}]}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ac0)) (async) link(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000b80)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x6c38, 0x3, 0x2, 0x7, 0x2, 0x4}, {0x8, 0xb, 0x163, 0x83, 0x6, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) llistxattr(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)=""/221, 0xdd) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) write$binfmt_script(r11, &(0x7f0000000f80)={'#! ', './file1', [{0x20, '/dev/vhost-net\x00'}, {0x20, '(\x00'}], 0xa, "ec3a8df86ad11d029fceed17c3ea3af27bf58e496f5473247aa7cd713ac4c742a5747199c5405a712444e636dd8cb5baaf27c13e284fb632c8a9829ff4e4718e0450c7a87f9c887c9f0963f043afb65e92fd6cd4af52b97dc731d4d0ab7bf11a"}, 0x7e) write$UHID_INPUT(r11, &(0x7f0000001000)={0x8, {"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", 0x1000}}, 0x1006) 2m40.960209232s ago: executing program 5 (id=3111): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m40.882645138s ago: executing program 5 (id=3112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x8000) 2m37.715194511s ago: executing program 6 (id=3105): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") (fail_nth: 1) 2m37.210911497s ago: executing program 6 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (fail_nth: 1) 2m36.873071844s ago: executing program 6 (id=3117): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m36.638794107s ago: executing program 6 (id=3119): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m35.54103266s ago: executing program 8 (id=3107): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0xa) 2m35.426898036s ago: executing program 8 (id=3125): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04"], 0x7) 2m35.379156252s ago: executing program 8 (id=3126): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m35.293502903s ago: executing program 8 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r1, 0x801, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 2m32.138517383s ago: executing program 7 (id=3131): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b", 0xd6}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd8", 0xf0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16", 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000", 0xce}], 0x3}}], 0x2, 0xc0) 2m32.078343694s ago: executing program 7 (id=3132): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x512a4c2b}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x10881) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) fchdir(r1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) 2m31.912082606s ago: executing program 7 (id=3133): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0xa) 2m31.786682958s ago: executing program 7 (id=3134): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04"], 0x7) 2m31.743466278s ago: executing program 7 (id=3135): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m31.663091685s ago: executing program 7 (id=3136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b", 0xd6}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd8", 0xf0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16", 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000", 0xce}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 2m25.587146385s ago: executing program 37 (id=3112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x8000) 2m21.49407772s ago: executing program 38 (id=3119): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m19.391158367s ago: executing program 39 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r1, 0x801, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 2m16.532218695s ago: executing program 40 (id=3136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b", 0xd6}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd8", 0xf0}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16", 0x53}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000", 0x4c}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000", 0xce}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 1m41.879235259s ago: executing program 3 (id=3312): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r8], &(0x7f0000000200), &(0x7f0000000300)=[r9], &(0x7f0000000580)}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) r11 = dup3(r2, r3, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f00000003c0)={0x28, 0x5, r10, 0x0, &(0x7f0000f0b000/0x1000)=nil, 0x1000, 0x44}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="01002dbd7000fcdbdf254f00000008000300", @ANYRES32=r15, @ANYBLOB="ba10b5d94624313ff79a8dcab790dce7d7040000000c527189ea2c7a3c7b34fe1309052a11f3c8e218b85f8009798699cd97f858b1330cffdf342355f4c71b3ac35df7d031f40877fa6e9af13295f5e1ffe3cfb3d563e8ce9319eac9200d7bb5"], 0x1c}, 0x1, 0x0, 0x0, 0x4020}, 0x4000080) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r5, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) read(r1, 0x0, 0x0) fadvise64(r0, 0x5, 0x81, 0x1) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/220, 0xdc}], 0x1, 0xffeffffb, 0x1009) 1m41.690769205s ago: executing program 3 (id=3313): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a039d9d1e863b5432da00070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000c40000000080800034000000110"], 0x94}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000500)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 1m41.366683682s ago: executing program 3 (id=3314): r0 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1m41.25799596s ago: executing program 3 (id=3315): r0 = socket(0x10, 0x3, 0x9) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000007100004000000000018004"]) write$uinput_user_dev(r5, &(0x7f0000000900)={'syz1\x00', {0x9, 0x2, 0x2, 0xfff9}, 0x20, [0x92, 0x38e, 0xcfe8, 0x5e, 0x9, 0x7, 0xd, 0x3d, 0x0, 0x9, 0xc0000000, 0x1, 0x73, 0x200, 0x8, 0x10000, 0x1, 0x9, 0xb226, 0x6, 0x2, 0x7, 0xa7a4, 0xfffffffc, 0x1, 0x40, 0x4, 0x1009, 0x5, 0x2, 0x8, 0x10001, 0x7, 0x1fe0000, 0x6f50e3bb, 0x2, 0x4, 0x9, 0x2, 0x7fffffff, 0x3, 0xfffffffd, 0x1, 0x2, 0x8, 0x3, 0x6, 0x2, 0x1, 0x28b0, 0x1, 0x8000, 0x0, 0xffffffff, 0x2, 0x8, 0x8, 0x10000, 0x8, 0x3, 0x100, 0xfffffffe, 0x1, 0x2], [0xef, 0x81, 0xc, 0x2, 0x84, 0x200, 0x7, 0x3, 0x6, 0x800, 0x9, 0x83, 0x3, 0x4, 0x9, 0xfeea, 0x200, 0x6, 0x7ff, 0x81, 0xc, 0xffff, 0xfffff001, 0xfffffffc, 0xce9f, 0x4, 0x0, 0x0, 0x100, 0x400, 0x401, 0x6, 0x7, 0x4, 0x401, 0x2, 0xe20, 0x5, 0x0, 0x3, 0x40, 0x8, 0x80000000, 0x4c, 0x7, 0xfffffe00, 0x7, 0x6, 0xb, 0x5, 0x4a9, 0x3, 0x1, 0x4, 0x5, 0x6, 0x7, 0xd, 0xfffffff8, 0xfff, 0x400, 0xd, 0x0, 0x36f], [0x8, 0x5, 0x2, 0x9, 0x3, 0x7, 0x9, 0x7, 0x8, 0x1, 0x5, 0x800, 0x1b, 0x1, 0x5, 0x1, 0x8, 0xabc4, 0x7ff, 0xffffff1f, 0x5, 0x5, 0xc761, 0x4, 0x9, 0x200, 0x9, 0x40, 0x3ff, 0x8, 0x3, 0x7, 0xa, 0x95d3, 0x2, 0x8, 0x400, 0x2c34, 0x80000000, 0x0, 0xfbc, 0xfffffff9, 0xd, 0xfffffff0, 0x0, 0x534, 0x80, 0x8, 0x8, 0x3, 0x1, 0x2e, 0x8000, 0x6c2, 0x8, 0x0, 0x2, 0x8, 0x9, 0x80000000, 0xfd, 0x1, 0x1, 0x1], [0x6, 0x7, 0x5ff, 0x80000000, 0x6, 0x8, 0x8, 0x10000, 0x6, 0x319c, 0x0, 0x2, 0x2, 0x100, 0xff, 0x0, 0x8, 0xf9, 0x3, 0x800, 0x9, 0x5, 0x80000000, 0x7ff, 0x3, 0x9, 0x0, 0x4, 0x80000001, 0xffff, 0x5ab1, 0xfff, 0x1, 0xfffffff8, 0x5, 0x66, 0x3, 0x5783, 0x0, 0x7, 0x40, 0x3ff, 0x8, 0x7f, 0x9, 0x2, 0x4, 0x9, 0x3, 0x5a7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x66931a5c, 0x3, 0x81, 0x8, 0x6, 0x4, 0x9, 0x6, 0x9, 0x479b]}, 0x45c) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x5, r7, 0x1}) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x80) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="15000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000fedbdf252500000008000300", @ANYRES32=r11, @ANYBLOB="08003500000000000a0006000802110000000000050008000500000008003700000000000a0034000101010101010000080026006c090000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r10, @ANYBLOB="100026bd7000fedbdf254f00000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4048010}, 0x81) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1m41.126796181s ago: executing program 3 (id=3316): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async, rerun: 32) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="a92e8123df00"/17, 0x11}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="83f047e9529c"}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) r6 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) (rerun: 64) ioctl$EVIOCSCLOCKID(r6, 0x40084504, &(0x7f0000ffcffc)=0x2ff) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) (async) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000200)=0xa0000) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, 0x0) (async, rerun: 64) ppoll(&(0x7f0000000140)=[{r2}, {r7, 0x461}, {r1, 0x1011}, {r5, 0x4002}, {r7, 0x118}, {r3, 0x2000}], 0x6, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x8) (async, rerun: 64) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="01000000020000000000006bb55a06630bf7c045f94cd977", 0x18, 0xffffffffffffffff) (async) pwritev(r7, &(0x7f0000000000), 0x3, 0x0, 0x4) 1m40.865717731s ago: executing program 3 (id=3319): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/226, 0xe2}], 0x3, 0x2, 0x80000400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)={0x28, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@dev}]}]}, 0x28}], 0x1}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff]) (async) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './cgroup\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './cgroup\x00'}) 1m40.504279902s ago: executing program 41 (id=3319): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/226, 0xe2}], 0x3, 0x2, 0x80000400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)={0x28, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@dev}]}]}, 0x28}], 0x1}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff]) (async) getgroups(0x2, &(0x7f0000000140)=[0xee01, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './cgroup\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './cgroup\x00'}) 6.653488028s ago: executing program 0 (id=3920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)="473a08b0a6e5d41e9c473b71c7b8c52688edc477b61193e169bbc7050478b1541870e4a81ad9ef7deb81f1753629257f278905000000000000f8fe49d73a81000e0800", 0x43}], 0x1) r5 = socket$inet(0x2, 0x3, 0x2) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000940)={'IDLETIMER\x00'}, &(0x7f0000000980)=0x1e) keyctl$setperm(0x5, r6, 0x0) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) fsopen(&(0x7f0000000100)='fuse\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f0000000880)={0x0, 0x8, 0x1, 'queue1\x00'}) r9 = socket(0x40000000015, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x5, 0x0, &(0x7f0000000180)=0xfffffff4) connect$unix(r9, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r11, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r10, &(0x7f0000000180), 0x100000000000003c) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r2]) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000040d000300686173683a6d6163000000000900020073797a310000000014000780080013000000000008001240000000ab05000400000000000500010007000000050005"], 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) syz_usb_connect(0x4, 0x2c2, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xa0, 0x9b, 0x32, 0x10, 0x12d1, 0x9c86, 0x51b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b0, 0x1, 0x3, 0xd, 0x40, 0x40, [{{0x9, 0x4, 0x25, 0xfd, 0xe, 0xff, 0x1, 0xb, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x0, 0x3}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0xa, 0x81, "7eab09e3677c"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0xd}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "c7"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xffff, 0x5, 0xa}, {0x6, 0x24, 0x1a, 0x93, 0x1c}, [@acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x61, 0x5}]}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0xa9, 0x6, [@generic={0xce, 0x6, "a73e391575621a394bf8cf53e74a9be16024eafcc9a861d78e1d6e0aa1311b32013a69a1a0336761212a950407859defb00a4d4ce1c9a8b684b354bd816f073f9a358f84242732aa9de55cebd86be3216d16328bf7c9352d789e29bf50dca8eb1592e9c71022d8da4f86e0866b026f884b9eb03883de3884416788522ead578596d9c910b7ba8cbdf59967bb34b0af5426969d813fda94faa1b863383d723e3e43caaf9104764c22040fa20575baa8eb198fd81f501c2759b4056b8f0153fb6ed4399612f5b8f3033b651104"}, @generic={0x2e, 0x24, "b54dee64d043ba2f709b1d5be8f39c56b58121a2768ea71883f633c796f2ecb72465a25b2b8b588b05cd2a48"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x7f, 0x3, 0x2}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x4, 0x5, 0x7}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x3, 0xac, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x15, 0x40b8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x1, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd2, 0x200}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x7b, 0xbe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0xd}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x7, 0xf, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0xdf8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf9}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x5, 0x81, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}, @generic={0x4d, 0x8, "a978b5618def6bb6e9071f77e0f50e1c239f9dc60f9c268ac3054e541168582ab2b64ccea07fe53159964e5e1610f2251ce6e077a85f9521ca83c897729c76ca14e5dc41c9ed1f5b41b0c2"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x4, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}, @generic={0x33, 0x11, "f922ad9cef4ba21d0ab9d3c91731f3e6c93f8dc595ead29c98d111ac7a8c07e392d1c7f86ef44b01895ab99456ef545926"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1f4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8c, 0x7efd}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x35, 0x6, 0x3}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x8, 0x83, 0x8}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xfd, 0x2, 0xc, 0x40, 0x4}, 0x0, 0xfffffffffffffffc, 0x4, [{0xcc, &(0x7f0000000640)=@string={0xcc, 0x3, "21907be8748a5957d7d47b1bbd4abb7f4a9d516e940671253279fa41072b3bc8a961d305277d3ce797fc7c90c21248262ad8900f5df0643e82989e3c36f681344b02fa5829722f97212bd8704db320ef4dce3a3a3e5f5f56ef529e1dad16fcd3f2efb6dfe8cc4a6003e35a46c2cd44b0a31b1dea469c929a682f1c95983131846d4cd459055941dc161bbe5034e8d28c3ed5a69852888f1f8cf1f993d125df4d02f28122666f9e9ba866ac2f17dfa5a6a175bb5d0f945c976cd33cc575f35c2d32c9f8dda491917de752"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}, {0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="48034ed9d44a11f098205b70a8bba906aa5b0b5ffbdac460c1d6d8f97fc783192792e6f1944cfd39eb1066e6ca725c671878bfa67c9dab0980259cb3f7521d7f"]}]}) 5.825719008s ago: executing program 2 (id=3925): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (fail_nth: 9) 5.786879078s ago: executing program 0 (id=3926): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0xe4, 0x1, 0x0, r3, 0x0}]) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000d0b000/0x2000)=nil, 0x2000}) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.358661136s ago: executing program 2 (id=3928): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40082, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000280)={0x6000, 0x80600}) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0xfd}, 0x10) listen(r0, 0x1) listen(r0, 0x0) syz_usb_connect(0x2, 0x2a0, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0xe6, 0x6a, 0x1e, 0x40, 0x41e, 0x405b, 0xf71d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28e, 0x1, 0x5, 0x8, 0xb0, 0x5, [{{0x9, 0x4, 0xab, 0x8, 0x3, 0x1b, 0x3f, 0x56, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1c3e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x2000, 0x4}, {0x6, 0x24, 0x1a, 0xe, 0x22}, [@country_functional={0xe, 0x24, 0x7, 0x4d, 0x200, [0xc139, 0x80, 0x8001, 0x4]}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x48, 0xfa, 0x92, 0x5, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ef0c3a43d9"}, {0x5, 0x24, 0x0, 0x12}, {0xd, 0x24, 0xf, 0x1, 0x1fc000, 0x5, 0x6, 0xc}, {0x6, 0x24, 0x1a, 0x8000, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0xda, 0x6, 0xfa}, @country_functional={0x6, 0x24, 0x7, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0xfa, 0x6, 0x3, 0xa3}, @mdlm_detail={0x2a, 0x24, 0x13, 0x7, "8a90ffe6d18327c2d2014cc7a95f23147ec5438dfa4c14a4c4c8a5be3c80841daa844974c86c"}, @mdlm_detail={0xaf, 0x24, 0x13, 0xff, "9c9a04b5e4bd591027ed5c85be3b7f99ade65b8eb5f2e5d50e301aefe2f6371f5990f692307d30e7f5a00a76565f3372a89978afed8ff63820ff6e70a8de473ea90051c11f3469e0bfd935259a694510baab04378fea74aaec63d800696e05f2645ff05d07222a1370d8c1efbdd0af773e81d4c06092bcd0234578331e68d8c1b7d89bddaf580cb08141546255efe0f9b49abb41501f2fbdf3e36a90fe1bd155207860f923f82eff70d73f"}]}], [{{0x9, 0x5, 0xf, 0x8, 0x40, 0x6, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0xf, 0x3, 0x230, 0xf9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xa, 0x7, 0x7, [@generic={0xee, 0x21, "41746e282fff808f4d5ad110aa5bc98216b14144c3f27bf14176931f86dfdfb7239c38d90e94318cad014a78e5f39370144e685a520efe35decd832ee09ab8b8730c994c492a41554133b21a36e6854afe7f4339995f4ce30ed9b8626bc5e11344e6368f9a699562195cbee15561c972f920aad5f719a7598f0f7460e479dd282edd69757190fee158874a0d3d065948bb573207e7c8488aea0dccd34e0af0c44b1e8e2daf4cc5f203e97f3c3d0796c86fdac7340782ffe5af346a2acc299c286e8fbbd860517b85c95ba466cf922780b6c74b1eb9663682977d06ba605087f58f9ea2e1a5158fc7d8402d5e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x564}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xe5, 0x7b, 0x0, 0x20, 0x74}, 0xfd, &(0x7f0000000100)={0x5, 0xf, 0xfd, 0x1, [@generic={0xf8, 0x10, 0x4, "d0839468c4871762bb326568c7e9cb906ede5fec838b2e1dd46e8ea537faeb2b1ca512fb36b9388e6232208adec4cd88a78094fbb894b5c4ceb2ed88052f2723fe913bc72953090c05c096e1bfcfce645d7f9a33fe3cd26c00e8354fa14a8ca06c5e3d36d123bbb17ccdc3415b6f320a732fcee59720553a6c4f2036a4fad0bdffb94a6fff6bf5b0f6cdeacc3b22671d8f52282d2b7a2de51f0baac31b24d5834f5aef7df863ef0c25c79c8633685bab3831e8569681ebc439d07f71da0fb05f7258dc04893c9771c1ad749ea24b10d176434021d9679c54c7b4fe60dc299ea0f17eee63cc32e5562a81d7558868b0241633a615bd"}]}, 0x8, [{0x1f, &(0x7f0000000040)=@string={0x1f, 0x3, "a2cd1e9bc6334ae565eccbccccdfef316327fa5292db452d3156178b0b"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x81d}}, {0x86, &(0x7f0000000580)=@string={0x86, 0x3, "c79cc719135b085cda3c423b5f9944d5117bc607926072dd7c5360db7ecaec438776a9d52b57ee39cd67bc52c35cd8a0cff9b6000b577ea5897530e41dcdb7d2a832331aa0f02ec9cf075abe9939b8a868772764ee639703a9c6a66db14dacc82e317a2f2ef3cebae618b73eb6f48f53b4056285516fd7234b96ae1c88c8654a41d4840a"}}, {0x3a, &(0x7f0000000200)=@string={0x3a, 0x3, "a14352b2ecc5cc7f7cdabc77573304a2df7c23b2de4019b09f206bf8900d1f8a629e5acfeda00728ca7b4081f1fdeb7c346abbea99ab4bc2"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c05}}, {0x69, &(0x7f0000000680)=@string={0x69, 0x3, "51fb40fb9151697d081f777035ec0c4c40f0098d9048d62ac2ad396814f0faf4b4a40dfa3d25f937e19a1357659fa8526d2c610096c05f417b31175c8854737b60b06cc13ffb86a8586b285951e1cd7d7d2c4af3a95e933d2c238ecb0fe5ea374baa3e8f46937e"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3409}}]}) 5.189931995s ago: executing program 0 (id=3929): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) recvmsg$inet_nvme(r0, &(0x7f0000000780)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000005c0)=""/41, 0x29}], 0x9, &(0x7f00000006c0)=""/168, 0xa8}, 0x41) 5.026553735s ago: executing program 0 (id=3930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r3, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @mcast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0a0006002efdb6000f00a322b1cdc0357cc2669a0002110000a7e4020bff6567"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x7) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r11 = mq_open(&(0x7f0000000140)='/dev/uinput\x00', 0x800, 0x1, &(0x7f0000000180)={0x0, 0x4d, 0x3ff, 0x3}) mq_timedsend(r11, &(0x7f00000001c0)="e36b825beca3d1b8b52286e33733ce68", 0x10, 0xdff2, &(0x7f0000000200)={0x0, 0x3938700}) r12 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000002040)=""/4120, 0x1018}, {&(0x7f00000006c0)=""/297, 0x129}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000000440)=""/236, 0xec}], 0x6}, 0x0) sendmsg$inet(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r12, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r9, 0xc0389423, &(0x7f0000000100)={0x4, 0x8, [0x101, 0x1, 0x621, 0xfffffffffffffe01], &(0x7f0000000080)=[0x0]}) 4.396993103s ago: executing program 0 (id=3933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000280)=""/139) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@private1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x7fc, 0x33}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x9) 4.06039731s ago: executing program 0 (id=3937): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x79, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4004, 0x3}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x57, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfd, 0x4, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x8, 0x81, 0xfff9}, 0x20) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x137842, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1a}}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0xa6}}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '%^S:'}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@obj_user={'obj_user', 0x3d, '%_-'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/kvm\x00'}}, {@uid_lt={'uid<', r10}}, {@subj_role={'subj_role', 0x3d, ','}}, {@subj_user={'subj_user', 0x3d, 'veth1_to_bridge\x00'}}, {@smackfshat={'smackfshat', 0x3d, '%],'}}]}}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r13, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000", @ANYRES32]) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r14, 0x40015b19, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000080)='veth1_to_bridge\x00'}) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000240)) 3.335351159s ago: executing program 2 (id=3941): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, 0x8000) 3.086604753s ago: executing program 2 (id=3942): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x501000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x200, 0x0, 'client0\x00', 0x0, "058ef43800", "18ef33aa566b14f8466c38dff70e505b6ebb4c767730181617fefa3e50610b45", 0x0, 0x40002}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0xffff1000, 0x204000}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f00000011c0)={'lo\x00', 0x1, 0x22e3}) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hostfs\x00', 0x1330082, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000140)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r10, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r8, 0x3b80, &(0x7f0000001000)={0x8, r11}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r12, 0x5452, &(0x7f0000000580)=0x5d4) write$sndseq(r12, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @tick=0xfffffffb, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000380)="660fc773c80fc72ec4c17950e52e0f785f5b66baf80cb8ca669280ef66bafc0cb000ee66b872000f00d8c4c3616c25020000000b0ffb1bd9f9b9d00a00000f32", 0x40}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00fbcf0104a008ad4fa09aa0d4aa928bfd5a62f5654bae58a966cf3bef22ff9d20d59e3b811cf09d969b64703adef4a3bd848774d06e05e7637a62d06a7a1aafd742343f76bf8c8cc29b47e57ffee05b6b3f74744252428462abdf6ff99debb47377971fb5b92a67694026095a414e6ef8d797d349b2885a80fe98d0adf10a11288728a23d70ae4120c8189f00f31ac3bcf8e6a596e5911883e4f55317ce30e581b22bbc72b0d020b07248330b3f4b8a5b295e07abcc536c63df7251ac9d2e575e7b7dbb242100"/208], 0xcf, 0x2) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x1, 'veth0_macvtap\x00', {}, 0x100}) 2.22810161s ago: executing program 9 (id=3947): request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) 2.118574002s ago: executing program 9 (id=3948): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x59c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x578, 0x3, 0x0, 0x1, [{0x574, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x534, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "d91c2fe321e0f760b996999fb7e5236dabbdf5f2362b78b626d63127e771a58ed149745b20f775523ca0d3c2ac6a73430cb3dc454afe3acad33d65d74bfdd96ddd66be82f6288535522376d14d8a7cd0b5717b34f3a8064712f1540d2810e46bfd827097568c5ad33ee431eff50af8df7e051eb70f76cc1ef0c57b306037"}, @NFTA_DATA_VALUE={0xfb, 0x1, "08222e7869eca308a05e41b73899e5cfc374708f52f4114aedd27185d290d23831a0e9b9ff5e647d274b8d122985ba5a3f505a46ca3420f5bd3062a83a46d36a4fa0b3c965cc1518e774003d933f46c7c170e585b97fbe6e9e8ae3de2c77252fa879f7b284e36d067ba91f613c27d38d8d36cf25a5099ca6a861da4a0e21fced07586376be97a293afae79370cb06529dec55ad303a18fadef98a15609d72f6d0d431104c037608982394bc10e6d4369c88a202c57553d9ede4b84f16081becdd28e2cf16de34c0c8ad2354adba41b6a691310da1c120c4c55d5a9c321e7a14f609e7793b17171206ee3ea60a83d8b760b4bab4dcae787"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "0edace86ee8835de23a0719d7c895956086a138aa7f976e643ab1ad5e08de3df9da27b35531931ab9886c0788ad17bd4f7b1cb196b3bce4ac8e23905e6e3f120fd3b38eb2846d284cfa37b585fec43de2443d8a0c32b29a73848c589b333d7e7098b6a1a11349d45d6d76fdace06f5ace3874d693637e8a3ec04316fe30479c96e92992667eeae297f155cfde1d4241d46047f6cbc7abb41568dea857eb8519440c7fd87658fcdc85c3b00ff607c2ec99aed71c10bd73f0b9b8532d98d480106c04aa359552b510e670a873c4a6174ca70b5b2c4327942558116d9d77ad854"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "ed96c8d652aeb42b6b8e36bce0f30057aa28dc9a73c331d1950285ac1b106b59eb4f9ed5644682d06b475d773c9b8b657469b44270623b6022c3ce9270404bf8afb1b63dcfef56f06b9973e12c51f574886862da4227155c5a0da044d94a6afe0a1db5723fcdcf7b96d2368dc57234b1fb380b81f72a9dedd7466e0992659e46c6cb9132ae2a294cc0e0037c0b9999df23e9c06f811097cddf9584ab819a672c4269c5dd1d6ec65add9d05721df6a059e7b97bbd93ff756bd677aecd793184f009f030c98e3630a1d4d237941a22e6214d2d97733931f1bfc09e63de5308cf625ebfcc346602a534776cff63a15c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x30, 0x1, "3c887f3c724f6f5496a8e1dba5984edb4346b3294a334e43470386d40beda80fd101f1ba2e7ad2f0ee3502bd"}, @NFTA_DATA_VALUE={0xea, 0x1, "2085eb0db1f42b4ebb0d882a094b1ba01c212ee441b866b82f86a7c1502f6908161eb792a0e5fe86de6af46b35db2632627f4821ab8e53eec826268300e6c135bfe91af5a752e061840d7c8a79c1a35dac974ade4d8b09bc80a6fd4471ab1de84767e3a70623c5566401b8cb1bce6fd4c76debfce5e41e3c09b2a57e2075a535491f4792307f0570c6d65d7562e2c8deadcecac7e15f0b97952bdc845b20a0cb510b8a0e525f07573dabba2d5337894542b6f8e2731bca153b26c37b7beb6b201c171526d9173502a06d201edbd252d2ab5fa632bd29ede7dd655848e2afed485fbf480dd5a1"}, @NFTA_DATA_VALUE={0x69, 0x1, "e2f23498710538b13dd6809164fa9e7ba35ad3037b3310af91acc8680e575b806575100ffa9340952b49a19ace58f577c8b380d4210b0ec4ac170b156c5af236f70d0f5d086ec8df6f3b58c2b7b0fff6f0e1f7379dbb6a97c080f3997198926de078225cc1"}]}]}]}]}], {0x14, 0x10}}, 0x620}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000140)="470f230ff00fb142438ed066bad004b000669af16b66edbf4cbf4c0569b56400000006c744240200000000c7442406000000000f011c24670fc77507420f0765f3410f0966baf80cb8d2128189ef66bafc0c66b86815450fc79800000000", 0x5e}], 0x1, 0x33, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x3, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) (async) connect$can_j1939(r9, &(0x7f0000000280)={0x1d, r10, 0xfffffffffffffffd, {0x1, 0xf0, 0x2}, 0xff}, 0x18) (async) getpeername(r9, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2.028739036s ago: executing program 2 (id=3949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000080)='trusted\x00', &(0x7f0000000180)={'syz', 0x2}, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18100390000000015f0ffffff00000e001c000f000000028002002d1f", 0x2e}], 0x1}, 0x20) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000040)) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x6, 0x40000004}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 1.786724395s ago: executing program 9 (id=3951): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val, @void, @ipv6=@tipc_packet={0x9, 0x6, "b5a2bc", 0x3db, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@srh={0x5e, 0x14, 0x4, 0xa, 0xa6, 0x18, 0x731, [@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @private1, @remote, @local, @empty, @rand_addr=' \x01\x00', @empty]}, @routing={0x0, 0xa, 0x2, 0xf9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x26}, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @private1]}, @dstopts={0x3c, 0x47, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0xac, 0xec, "12aede76c56b47ea5d2c3f35791067665b595db25ea087593472b86d09a537862b7d0ec72f51e5630f78637d6b653baaf93d771f459e7dab386bf029a0b4a337773f0e8576f626a1e5a2fa4541e2d19d8d9fee645ef198a10d3c20feafc75759a1f4f8d2011b122c34487074e7485f38e549e08047581b620b9a076711bf6813449cd36cadc0260f5799f9805d558a4f8ef69811271901d2d69c4b1ad5d7ed3963b9d93666537948c115f6a3a3c58590bcc512de486093bda0e8fee15c5c9455d208c1805412c5dddbfb47540a919b6c311422d78f1bb8866c91b671ab77a451a08c6cae3e9d1bd9083dcfc0"}, @enc_lim={0x4, 0x1, 0xf0}, @generic={0x3, 0x9f, "9e43bd883a6b4c48a68d5e3dde7d75d947678eb6c1195b5699b218839289d71c7ec157bef0b038060c7700c38ef362c64b40d4b13b52a7d9e6320964b5d02e4f128261a0de5570007b2fb8d94aa79294b3e4166eaaddd036cbe73cb924df686c087610caa79d999a4391d91661970adfcc3ee22dfa3fac36fd837cc33d8d8003df7095de91088878260ebd1ee9173b8c23ce9158fbcfb884ec08d4a34d4777"}, @ra={0x5, 0x2, 0x9}, @generic={0xf7, 0x93, "5dda4e3bb80c52f635f4b55f0ee9f1e4545cf7e745f6bf9a9b8ebb6de146bcdc424c3c7bca0f7a466b6df245e4bd32415b7ae41446563cc490759118012f05bbf632a328f0d7baf210e2f8eecff88cf94fac62c43f24cba52e75734f83e2b13d745f2a92ed6d3ca5bb5dc4bde44c8bcd050e2db9ca88538ed5cba9da4fc70d24b6337f430cf2713159bd8daf921d276da88f39"}]}, @srh={0x89, 0xe, 0x4, 0x7, 0x2, 0x10, 0x8, [@remote, @private0, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x1, 0x1, 0x6, 0x1, 0x2, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, 0x7, 0x2, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0]}}}}, 0x407) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') r5 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 1.447835982s ago: executing program 1 (id=3954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x58, r1, 0x801, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) (fail_nth: 9) 1.334676948s ago: executing program 9 (id=3955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d0e, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="c0e17a7f9800f0000066b86d000f00d0660f388273330f01f2c4e1ededa2910000000f01df660ff274c50066ba4200ed0f01cf0f01c5", 0x36}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x2) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x204}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200d4}, 0xc000080) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r10, &(0x7f0000000140)='ns/mnt\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r9, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 1.334436641s ago: executing program 1 (id=3956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3007}}) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES64=r2, @ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x24048010) 1.204894579s ago: executing program 1 (id=3957): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x6404a814}, 0x600c010) r1 = dup2(r0, r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.204552224s ago: executing program 2 (id=3958): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000500)={0x7, 0x3, 0x4, 0x0, 0x9}) setuid(0xee00) ioperm(0x1000, 0x101, 0x3) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000090}, 0x20008910) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x1000000, 0x0, 0x34524742, 0x9}}) mount(&(0x7f0000000080)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='romfs\x00', 0x8ab98ce3d289b1bb, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf257300000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x2400c0a0}, 0x40450) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000080)={0x9, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000001600)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040d62017cb00000000000109df23000100000000090400000203000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @global=@item_4={0x3, 0x1, 0xb, "ec5d20ef"}]}}, 0x0}, 0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1dc, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0xc8, 0x19, "00c781fb2ec88c7c3a6ee16f1e8b50dc0be7b241b7d02df56f23224e711180a6f3db21d74ee15e821f6f759b7a0e200570e536b9c8ab56340af6ae6251c8b1cb6eddedbf68214eae4c9373cf32cce55dd1a911d5e5961ab64ce62f239e9e8e9704bc22ade043ff831901fc5c10917e800eb7ff136874e527354a538fef0ccd66a4aed5425f7dc741cec164ec5cb459c8847727e924e7ae3af2299cb9579c373ae836e1922ce1864c726be5ca4907472965427beb4f7c86b005311dcb5ef59bf1d09eca2b"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_APDU={0xe2, 0x19, "5981c6d1ad05867a18f8e5bdc4eb96e6cc4a5d627933300ae9c801e37935170858cb1b4662b1fb10132b45244999ffe784e254ade4fa7dac3b40e7d06ed9026c9a2d054fee4bf5d29432a876d68446628c504687cf02c96ffcfc45e966e1f73e99e99d626b7c188ba68a2409d678ddef56544a38f2fe9772fc64109bd28f567ff62fdfd9839b0b109503b0194a4efa063dd0b4bd0a2daf3f8edd091e644803b09a665996045de83974d406fbc8a1cc6d963d3a9e7c018440ffed395da666b9d0d7a6aa3c6e2199fa89730aacf3c730ec3af709bb9c4ec85fc315d0be747b"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x4}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) 1.087506966s ago: executing program 1 (id=3959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080006400000000308000800000000300500010006000000050005000a00000013000300686173683a6e65742c696661636500000900020073797a3100000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (fail_nth: 9) 476.748612ms ago: executing program 1 (id=3960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (fail_nth: 9) 476.386409ms ago: executing program 9 (id=3961): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bridge0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private=0xa010100, 0x0, 0x0, 0x30, 0x0, [{}, {@local}, {@broadcast}]}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) 79.342772ms ago: executing program 1 (id=3962): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/207, 0xcf}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3, 0x0, 0x180f}, 0x7}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004ac0)=""/4087, 0xff7}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000003a80)=""/4105, 0x1009}, {&(0x7f0000000380)=""/163, 0xa3}], 0x5}, 0x88a}, {{0x0, 0x0, 0x0}, 0x80000003}], 0x5, 0x40018042, 0x0) 0s ago: executing program 9 (id=3963): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x2400) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c089}, 0x40001) r2 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000004c0)='Y\'\x01\xfe\xac\xa4\x04W\x01?\x1f\x13\x14\x1cK}\x00\x82\xccg\xa8wF\xd5\xb5\xb0=-\xb3\x97x', &(0x7f00000003c0)='\xff\\\'X\x1bO\xc4\x9e\x98\n\x9a\xf0\x13\xd4\xbb\a\xce\a\xa7v\xe53\xee\x95\x9a\xb5\xc2\xe7\xa1\x93\x05\xc14\xe0\xa7\t\xfd\xe2!,\f\x84\xaf[\x93\x93\xc1\xa2\xa4a\x06<\xac\x1b\xe0\xf7\xfc\x8c\x15m\x9f\xbf!q\xb1\xdbt\xc5\nv+K Q(\v\x9e\xe6\x9a\xc5\xeb\x80\xd9\x82\xcfM\x91J\xcf\x9c\xe3I\x87\xd9\x98\xbb\x00\x12\x00\xc2@.\x8c\xe6\xff\x00z\xc4\xe8^\x1a\x00\xb9`h\xa1\x1a;\xde\xfcn\xee\r\xe6=v\xbe\x1c2\xe6\x13\xd4\xe8\xbcF~!Z\xbbH.\x9ei\x1aq\xf2t\x1b\xdb\xb3Q\x8fg\xf0nDC\xbf\xd8L!\x9d\xd2\xff\xdfG\xb8$\xc0~F\x15\xdb\n\x90N\nn\x85\x8f\x88O\x1d\xa2<\xab\xf2M\xbfpC\xf0\x14!\xa1k@\x83R\xa8', 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="0100000000000031ff000040"]) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x1f) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)="43210098ed") ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="02000400000000000b00000081000000050000007fd500005e070000000000000a0000000600000068e50000e30000000600000000000000"]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2}}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000001deb87b217859d239e9f1131ed533e935b307908f5226e301bea476dffd2579f774c386024c6fcc36bf39a68d89740200000000000000c31a149d6b76849dcfbc9fcef5279c90bed57ab45e8fa26f065f3ebb31a63f4e5d523ddf0f8e0cfe668db2a32d9529e5cb3e", @ANYRES16=r6, @ANYBLOB="210f28bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) kernel console output (not intermixed with test programs): c_node_noprof+0x76/0x3c0 [ 463.432520][T17524] ? __alloc_skb+0x112/0x2d0 [ 463.432545][T17524] __alloc_skb+0x112/0x2d0 [ 463.432571][T17524] netlink_ack+0x146/0xa50 [ 463.432591][T17524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.432607][T17524] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 463.432626][T17524] ? __pfx_nl802154_post_doit+0x10/0x10 [ 463.432660][T17524] netlink_rcv_skb+0x28c/0x470 [ 463.432683][T17524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.432702][T17524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.432739][T17524] ? down_read+0x1ad/0x2e0 [ 463.432765][T17524] genl_rcv+0x28/0x40 [ 463.432780][T17524] netlink_unicast+0x75b/0x8d0 [ 463.432812][T17524] netlink_sendmsg+0x805/0xb30 [ 463.432842][T17524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.432866][T17524] ? aa_sock_msg_perm+0xf1/0x1d0 [ 463.432889][T17524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.432911][T17524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.432934][T17524] __sock_sendmsg+0x219/0x270 [ 463.432957][T17524] ____sys_sendmsg+0x505/0x830 [ 463.432986][T17524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.433019][T17524] ? import_iovec+0x74/0xa0 [ 463.433041][T17524] ___sys_sendmsg+0x21f/0x2a0 [ 463.433067][T17524] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.433123][T17524] ? __fget_files+0x2a/0x420 [ 463.433143][T17524] ? __fget_files+0x3a0/0x420 [ 463.433179][T17524] __x64_sys_sendmsg+0x19b/0x260 [ 463.433196][T17524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.433230][T17524] ? __pfx_ksys_write+0x10/0x10 [ 463.433247][T17524] ? rcu_is_watching+0x15/0xb0 [ 463.433269][T17524] ? do_syscall_64+0xbe/0x3b0 [ 463.433294][T17524] do_syscall_64+0xfa/0x3b0 [ 463.433316][T17524] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.433336][T17524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.433353][T17524] ? clear_bhb_loop+0x60/0xb0 [ 463.433373][T17524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.433389][T17524] RIP: 0033:0x7fa279f8e929 [ 463.433406][T17524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.433420][T17524] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.433439][T17524] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 463.433452][T17524] RDX: 00000000000000c4 RSI: 0000200000000240 RDI: 0000000000000004 [ 463.433464][T17524] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 463.433475][T17524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.433485][T17524] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 463.433515][T17524] [ 463.985879][T17537] FAULT_INJECTION: forcing a failure. [ 463.985879][T17537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.028016][T17537] CPU: 0 UID: 0 PID: 17537 Comm: syz.2.3722 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 464.028038][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.028046][T17537] Call Trace: [ 464.028052][T17537] [ 464.028058][T17537] dump_stack_lvl+0x189/0x250 [ 464.028078][T17537] ? __pfx____ratelimit+0x10/0x10 [ 464.028094][T17537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.028116][T17537] ? __pfx__printk+0x10/0x10 [ 464.028129][T17537] ? __might_fault+0xb0/0x130 [ 464.028152][T17537] should_fail_ex+0x414/0x560 [ 464.028170][T17537] _copy_from_user+0x2d/0xb0 [ 464.028186][T17537] ___sys_sendmsg+0x158/0x2a0 [ 464.028207][T17537] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.028251][T17537] ? __fget_files+0x2a/0x420 [ 464.028267][T17537] ? __fget_files+0x3a0/0x420 [ 464.028289][T17537] __x64_sys_sendmsg+0x19b/0x260 [ 464.028304][T17537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.028328][T17537] ? __pfx_ksys_write+0x10/0x10 [ 464.028341][T17537] ? rcu_is_watching+0x15/0xb0 [ 464.028357][T17537] ? do_syscall_64+0xbe/0x3b0 [ 464.028376][T17537] do_syscall_64+0xfa/0x3b0 [ 464.028390][T17537] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.028406][T17537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.028418][T17537] ? clear_bhb_loop+0x60/0xb0 [ 464.028434][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.028447][T17537] RIP: 0033:0x7f4fccd8e929 [ 464.028460][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.028471][T17537] RSP: 002b:00007f4fcdb7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.028485][T17537] RAX: ffffffffffffffda RBX: 00007f4fccfb5fa0 RCX: 00007f4fccd8e929 [ 464.028494][T17537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 464.028503][T17537] RBP: 00007f4fcdb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.028511][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.028519][T17537] R13: 0000000000000000 R14: 00007f4fccfb5fa0 R15: 00007fffb94f9018 [ 464.028541][T17537] [ 464.341745][ T5839] tipc: Node number set to 2130706433 [ 464.483939][T17550] Mount JFS Failure: -22 [ 464.684323][T17560] FAULT_INJECTION: forcing a failure. [ 464.684323][T17560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.700661][T17560] CPU: 0 UID: 0 PID: 17560 Comm: syz.0.3728 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 464.700686][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.700698][T17560] Call Trace: [ 464.700706][T17560] [ 464.700714][T17560] dump_stack_lvl+0x189/0x250 [ 464.700739][T17560] ? __pfx____ratelimit+0x10/0x10 [ 464.700761][T17560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.700779][T17560] ? __pfx__printk+0x10/0x10 [ 464.700810][T17560] should_fail_ex+0x414/0x560 [ 464.700835][T17560] _copy_to_user+0x31/0xb0 [ 464.700856][T17560] simple_read_from_buffer+0xe1/0x170 [ 464.700883][T17560] proc_fail_nth_read+0x1df/0x250 [ 464.700911][T17560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.700937][T17560] ? rw_verify_area+0x258/0x650 [ 464.700956][T17560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 464.700981][T17560] vfs_read+0x200/0x980 [ 464.701006][T17560] ? __pfx___mutex_lock+0x10/0x10 [ 464.701035][T17560] ? __pfx_vfs_read+0x10/0x10 [ 464.701056][T17560] ? __fget_files+0x2a/0x420 [ 464.701082][T17560] ? __fget_files+0x3a0/0x420 [ 464.701102][T17560] ? __fget_files+0x2a/0x420 [ 464.701131][T17560] ksys_read+0x145/0x250 [ 464.701152][T17560] ? __pfx_ksys_read+0x10/0x10 [ 464.701175][T17560] ? do_syscall_64+0xbe/0x3b0 [ 464.701199][T17560] do_syscall_64+0xfa/0x3b0 [ 464.701218][T17560] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.701238][T17560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.701255][T17560] ? clear_bhb_loop+0x60/0xb0 [ 464.701275][T17560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.701291][T17560] RIP: 0033:0x7fb98738d33c [ 464.701307][T17560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 464.701322][T17560] RSP: 002b:00007fb988121030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 464.701341][T17560] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738d33c [ 464.701354][T17560] RDX: 000000000000000f RSI: 00007fb9881210a0 RDI: 0000000000000003 [ 464.701365][T17560] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 464.701376][T17560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.701386][T17560] R13: 0000000000000001 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 464.701415][T17560] [ 464.944818][T17563] ./cgroup: Can't lookup blockdev [ 464.945961][ T5839] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 465.084721][ T5839] usb 3-1: device descriptor read/64, error -71 [ 465.101764][T17568] FAULT_INJECTION: forcing a failure. [ 465.101764][T17568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.118415][T17568] CPU: 0 UID: 0 PID: 17568 Comm: syz.9.3732 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 465.118439][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.118450][T17568] Call Trace: [ 465.118458][T17568] [ 465.118466][T17568] dump_stack_lvl+0x189/0x250 [ 465.118490][T17568] ? __pfx____ratelimit+0x10/0x10 [ 465.118511][T17568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.118529][T17568] ? __pfx__printk+0x10/0x10 [ 465.118549][T17568] ? __might_fault+0xb0/0x130 [ 465.118578][T17568] should_fail_ex+0x414/0x560 [ 465.118600][T17568] _copy_from_user+0x2d/0xb0 [ 465.118618][T17568] ___sys_sendmsg+0x158/0x2a0 [ 465.118644][T17568] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.118702][T17568] ? __might_fault+0xb0/0x130 [ 465.118724][T17568] __sys_sendmmsg+0x227/0x430 [ 465.118744][T17568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 465.118757][T17568] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 465.118801][T17568] ? ksys_write+0x22a/0x250 [ 465.118824][T17568] ? __pfx_ksys_write+0x10/0x10 [ 465.118841][T17568] ? rcu_is_watching+0x15/0xb0 [ 465.118864][T17568] __x64_sys_sendmmsg+0xa0/0xc0 [ 465.118883][T17568] do_syscall_64+0xfa/0x3b0 [ 465.118903][T17568] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.118923][T17568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.118938][T17568] ? clear_bhb_loop+0x60/0xb0 [ 465.118958][T17568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.118973][T17568] RIP: 0033:0x7fa279f8e929 [ 465.118999][T17568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.119013][T17568] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.119030][T17568] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 465.119043][T17568] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 465.119054][T17568] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 465.119065][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.119075][T17568] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 465.119103][T17568] [ 465.534157][ T5839] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 465.664188][ T5839] usb 3-1: device descriptor read/64, error -71 [ 465.754187][ T44] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 465.774718][ T5839] usb usb3-port1: attempt power cycle [ 465.816134][T17593] XFS (rnullb0): Invalid superblock magic number [ 465.943682][ T44] usb 10-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 465.968168][ T44] usb 10-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 465.979576][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.988166][ T44] usb 10-1: Product: syz [ 465.992488][ T44] usb 10-1: Manufacturer: syz [ 465.997432][ T44] usb 10-1: SerialNumber: syz [ 466.024827][ T44] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 466.032659][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 466.033546][T17605] FAULT_INJECTION: forcing a failure. [ 466.033546][T17605] name failslab, interval 1, probability 0, space 0, times 0 [ 466.051629][T17605] CPU: 0 UID: 0 PID: 17605 Comm: syz.0.3739 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 466.051652][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.051664][T17605] Call Trace: [ 466.051675][T17605] [ 466.051684][T17605] dump_stack_lvl+0x189/0x250 [ 466.051708][T17605] ? __pfx____ratelimit+0x10/0x10 [ 466.051730][T17605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.051748][T17605] ? __pfx__printk+0x10/0x10 [ 466.051769][T17605] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 466.051796][T17605] should_fail_ex+0x414/0x560 [ 466.051820][T17605] should_failslab+0xa8/0x100 [ 466.051853][T17605] ? __pfx_ip6_dst_gc+0x10/0x10 [ 466.051872][T17605] kmem_cache_alloc_noprof+0x73/0x3c0 [ 466.051889][T17605] ? dst_alloc+0x105/0x170 [ 466.051912][T17605] ? __pfx_ip6_dst_gc+0x10/0x10 [ 466.051931][T17605] dst_alloc+0x105/0x170 [ 466.051951][T17605] ip6_pol_route+0xa21/0x1180 [ 466.051972][T17605] ? ip6_pol_route+0x162/0x1180 [ 466.051996][T17605] ? __pfx_ip6_pol_route+0x10/0x10 [ 466.052016][T17605] ? __lock_acquire+0xab9/0xd20 [ 466.052047][T17605] ? ip6t_do_table+0x1376/0x1560 [ 466.052073][T17605] fib6_rule_lookup+0x52f/0x6f0 [ 466.052096][T17605] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 466.052117][T17605] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 466.052149][T17605] ? ip6t_do_table+0x1db/0x1560 [ 466.052181][T17605] ip6_route_input+0x6ce/0xa50 [ 466.052209][T17605] ? __pfx_ip6_route_input+0x10/0x10 [ 466.052260][T17605] ? ip6_rcv_finish_core+0x222/0x420 [ 466.052280][T17605] ip6_rcv_finish+0x141/0x2d0 [ 466.052300][T17605] NF_HOOK+0x30c/0x3a0 [ 466.052314][T17605] ? skb_orphan+0x4f/0xd0 [ 466.052332][T17605] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 466.052347][T17605] ? NF_HOOK+0x9a/0x3a0 [ 466.052362][T17605] ? __pfx_NF_HOOK+0x10/0x10 [ 466.052381][T17605] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 466.052409][T17605] __netif_receive_skb+0xd3/0x380 [ 466.052435][T17605] ? netif_receive_skb+0x115/0x790 [ 466.052453][T17605] netif_receive_skb+0x1cb/0x790 [ 466.052472][T17605] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 466.052496][T17605] ? _copy_from_iter+0x24c/0x16f0 [ 466.052513][T17605] ? __pfx_netif_receive_skb+0x10/0x10 [ 466.052539][T17605] ? tun_rx_batched+0x160/0x730 [ 466.052559][T17605] tun_rx_batched+0x1b9/0x730 [ 466.052576][T17605] ? __lock_acquire+0xab9/0xd20 [ 466.052604][T17605] ? __pfx_tun_rx_batched+0x10/0x10 [ 466.052624][T17605] ? tun_get_user+0x2549/0x3ce0 [ 466.052654][T17605] tun_get_user+0x298e/0x3ce0 [ 466.052675][T17605] ? tun_get_user+0x2549/0x3ce0 [ 466.052694][T17605] ? aa_file_perm+0x13e/0x11b0 [ 466.052718][T17605] ? aa_file_perm+0x13e/0x11b0 [ 466.052740][T17605] ? aa_file_perm+0x3ed/0x11b0 [ 466.052765][T17605] ? __pfx_tun_get_user+0x10/0x10 [ 466.052791][T17605] ? __lock_acquire+0xab9/0xd20 [ 466.052821][T17605] ? ref_tracker_alloc+0x318/0x460 [ 466.052839][T17605] ? __lock_acquire+0xab9/0xd20 [ 466.052863][T17605] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 466.052889][T17605] ? tun_get+0x1c/0x2f0 [ 466.052920][T17605] ? tun_get+0x1c/0x2f0 [ 466.052936][T17605] ? tun_get+0x1c/0x2f0 [ 466.052958][T17605] tun_chr_write_iter+0x113/0x200 [ 466.052978][T17605] vfs_write+0x54b/0xa90 [ 466.053004][T17605] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 466.053022][T17605] ? __pfx_vfs_write+0x10/0x10 [ 466.053053][T17605] ? __fget_files+0x2a/0x420 [ 466.053085][T17605] ksys_write+0x145/0x250 [ 466.053108][T17605] ? __pfx_ksys_write+0x10/0x10 [ 466.053126][T17605] ? rcu_is_watching+0x15/0xb0 [ 466.053148][T17605] ? do_syscall_64+0xbe/0x3b0 [ 466.053173][T17605] do_syscall_64+0xfa/0x3b0 [ 466.053192][T17605] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.053211][T17605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.053227][T17605] ? clear_bhb_loop+0x60/0xb0 [ 466.053248][T17605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.053265][T17605] RIP: 0033:0x7fb98738e929 [ 466.053281][T17605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.053297][T17605] RSP: 002b:00007fb988121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.053316][T17605] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738e929 [ 466.053330][T17605] RDX: 00000000000000d2 RSI: 00002000000004c0 RDI: 0000000000000003 [ 466.053342][T17605] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 466.053353][T17605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.053362][T17605] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 466.053391][T17605] [ 466.507322][ T44] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 466.526422][ T44] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 466.565188][ T44] dvb_usb_umt_010 10-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 466.574182][ T5839] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 466.576129][T17608] netlink: 'syz.9.3735': attribute type 10 has an invalid length. [ 466.602422][T17608] team0: Port device dummy0 added [ 466.609402][ T5839] usb 3-1: device descriptor read/8, error -71 [ 466.624464][T17580] netlink: 'syz.9.3735': attribute type 10 has an invalid length. [ 466.710365][T17580] team0: Port device dummy0 removed [ 466.753981][T17580] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 466.775014][ T5897] usb 10-1: USB disconnect, device number 22 [ 466.855414][ T5839] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 466.878533][ T5839] usb 3-1: device descriptor read/8, error -71 [ 466.994545][ T5839] usb usb3-port1: unable to enumerate USB device [ 467.165627][T17629] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 467.184568][ T5897] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 467.187862][T17629] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 467.324213][ T5897] usb 2-1: device descriptor read/64, error -71 [ 467.571980][ T5897] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 467.670014][ T24] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 467.735108][ T5897] usb 2-1: device descriptor read/64, error -71 [ 467.854542][ T5897] usb usb2-port1: attempt power cycle [ 467.860781][ T24] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 467.894333][ T24] usb 1-1: config 0 has no interface number 0 [ 467.900456][ T24] usb 1-1: config 0 interface 106 has no altsetting 0 [ 468.135826][ T24] usb 1-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 468.164133][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.172190][ T24] usb 1-1: Product: syz [ 468.194168][ T24] usb 1-1: Manufacturer: syz [ 468.198787][ T24] usb 1-1: SerialNumber: syz [ 468.224158][ T5897] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 468.235027][ T24] usb 1-1: config 0 descriptor?? [ 468.256666][ T5897] usb 2-1: device descriptor read/8, error -71 [ 468.324744][ T30] audit: type=1326 audit(1751200167.525:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17656 comm="syz.2.3749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fccd8e929 code=0x0 [ 468.443009][T17629] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 468.465801][T17629] block nbd0: shutting down sockets [ 468.472043][ T5833] block nbd3: Receive control failed (result -32) [ 468.522693][ T5897] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 468.576937][ T5897] usb 2-1: device descriptor read/8, error -71 [ 468.707362][ T5897] usb usb2-port1: unable to enumerate USB device [ 468.851323][T17673] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 469.032129][ T24] usb 1-1: USB disconnect, device number 32 [ 469.214392][T17679] FAULT_INJECTION: forcing a failure. [ 469.214392][T17679] name failslab, interval 1, probability 0, space 0, times 0 [ 469.238268][T17679] CPU: 1 UID: 0 PID: 17679 Comm: syz.0.3753 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 469.238294][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 469.238306][T17679] Call Trace: [ 469.238314][T17679] [ 469.238323][T17679] dump_stack_lvl+0x189/0x250 [ 469.238347][T17679] ? __pfx____ratelimit+0x10/0x10 [ 469.238368][T17679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.238385][T17679] ? __pfx__printk+0x10/0x10 [ 469.238409][T17679] ? __pfx___might_resched+0x10/0x10 [ 469.238423][T17679] ? fs_reclaim_acquire+0x7d/0x100 [ 469.238450][T17679] should_fail_ex+0x414/0x560 [ 469.238474][T17679] should_failslab+0xa8/0x100 [ 469.238495][T17679] __kmalloc_cache_noprof+0x70/0x3d0 [ 469.238512][T17679] ? nbd_add_socket+0x37d/0x9a0 [ 469.238541][T17679] nbd_add_socket+0x37d/0x9a0 [ 469.238571][T17679] ? __pfx_nbd_add_socket+0x10/0x10 [ 469.238595][T17679] ? __nla_parse+0x40/0x60 [ 469.238625][T17679] nbd_genl_connect+0x1114/0x1930 [ 469.238656][T17679] ? __pfx_nbd_genl_connect+0x10/0x10 [ 469.238693][T17679] ? __nla_parse+0x40/0x60 [ 469.238716][T17679] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 469.238739][T17679] genl_family_rcv_msg_doit+0x215/0x300 [ 469.238763][T17679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 469.238806][T17679] genl_rcv_msg+0x60e/0x790 [ 469.238829][T17679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.238844][T17679] ? __pfx_nbd_genl_connect+0x10/0x10 [ 469.238881][T17679] netlink_rcv_skb+0x208/0x470 [ 469.238904][T17679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.238923][T17679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.238963][T17679] ? down_read+0x1ad/0x2e0 [ 469.238988][T17679] genl_rcv+0x28/0x40 [ 469.239002][T17679] netlink_unicast+0x75b/0x8d0 [ 469.239035][T17679] netlink_sendmsg+0x805/0xb30 [ 469.239067][T17679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.239093][T17679] ? aa_sock_msg_perm+0xf1/0x1d0 [ 469.239116][T17679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.239139][T17679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.239161][T17679] __sock_sendmsg+0x219/0x270 [ 469.239184][T17679] ____sys_sendmsg+0x505/0x830 [ 469.239216][T17679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.239252][T17679] ? import_iovec+0x74/0xa0 [ 469.239279][T17679] ___sys_sendmsg+0x21f/0x2a0 [ 469.239308][T17679] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.239373][T17679] ? __fget_files+0x2a/0x420 [ 469.239393][T17679] ? __fget_files+0x3a0/0x420 [ 469.239426][T17679] __x64_sys_sendmsg+0x19b/0x260 [ 469.239447][T17679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.239483][T17679] ? __pfx_ksys_write+0x10/0x10 [ 469.239501][T17679] ? rcu_is_watching+0x15/0xb0 [ 469.239525][T17679] ? do_syscall_64+0xbe/0x3b0 [ 469.239551][T17679] do_syscall_64+0xfa/0x3b0 [ 469.239571][T17679] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.239591][T17679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.239615][T17679] ? clear_bhb_loop+0x60/0xb0 [ 469.239638][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.239655][T17679] RIP: 0033:0x7fb98738e929 [ 469.239672][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.239688][T17679] RSP: 002b:00007fb988121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.239707][T17679] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738e929 [ 469.239720][T17679] RDX: 00000000040100c4 RSI: 0000200000000900 RDI: 0000000000000004 [ 469.239731][T17679] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 469.239742][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.239752][T17679] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 469.239783][T17679] [ 469.599809][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.124186][ T5897] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 470.274190][ T5897] usb 10-1: Using ep0 maxpacket: 32 [ 470.292188][ T5897] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 470.310210][ T5897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.342874][T17705] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 470.351958][T17704] loop3: detected capacity change from 0 to 1 [ 470.371543][ T5897] usb 10-1: config 0 descriptor?? [ 470.401085][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b [ 470.421810][T14543] Dev loop3: unable to read RDB block 1 [ 470.437424][T14543] loop3: unable to read partition table [ 470.469023][T14543] loop3: partition table beyond EOD, truncated [ 471.370425][T17736] FAULT_INJECTION: forcing a failure. [ 471.370425][T17736] name failslab, interval 1, probability 0, space 0, times 0 [ 471.397409][T17736] CPU: 1 UID: 0 PID: 17736 Comm: syz.0.3766 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 471.397456][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.397480][T17736] Call Trace: [ 471.397488][T17736] [ 471.397496][T17736] dump_stack_lvl+0x189/0x250 [ 471.397521][T17736] ? __pfx____ratelimit+0x10/0x10 [ 471.397543][T17736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.397562][T17736] ? __pfx__printk+0x10/0x10 [ 471.397588][T17736] ? __pfx___might_resched+0x10/0x10 [ 471.397611][T17736] should_fail_ex+0x414/0x560 [ 471.397635][T17736] should_failslab+0xa8/0x100 [ 471.397657][T17736] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 471.397677][T17736] ? __alloc_skb+0x112/0x2d0 [ 471.397705][T17736] __alloc_skb+0x112/0x2d0 [ 471.397731][T17736] netlink_dump+0x22b/0xe20 [ 471.397765][T17736] ? __pfx_netlink_dump+0x10/0x10 [ 471.397808][T17736] __netlink_dump_start+0x5cb/0x7e0 [ 471.397835][T17736] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 471.397854][T17736] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 471.397876][T17736] nf_tables_getset+0x599/0xa90 [ 471.397911][T17736] ? __pfx_nf_tables_getset+0x10/0x10 [ 471.397940][T17736] ? nfnl_pernet+0x23/0x240 [ 471.397956][T17736] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 471.397975][T17736] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 471.397993][T17736] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 471.398020][T17736] ? __nla_parse+0x40/0x60 [ 471.398040][T17736] ? __pfx_nf_tables_getset+0x10/0x10 [ 471.398066][T17736] nfnetlink_rcv_msg+0x80b/0x1130 [ 471.398086][T17736] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 471.398123][T17736] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.398140][T17736] ? kasan_save_free_info+0x46/0x50 [ 471.398210][T17736] netlink_rcv_skb+0x208/0x470 [ 471.398233][T17736] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 471.398254][T17736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.398288][T17736] ? bpf_lsm_capable+0x9/0x20 [ 471.398305][T17736] ? security_capable+0x7e/0x2e0 [ 471.398333][T17736] nfnetlink_rcv+0x26a/0x2520 [ 471.398355][T17736] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 471.398377][T17736] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 471.398402][T17736] ? __dev_queue_xmit+0x27e/0x3a70 [ 471.398421][T17736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.398448][T17736] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 471.398473][T17736] ? __pfx___dev_queue_xmit+0x10/0x10 [ 471.398504][T17736] ? ref_tracker_free+0x63a/0x7d0 [ 471.398522][T17736] ? __copy_skb_header+0xa7/0x550 [ 471.398541][T17736] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.398560][T17736] ? __skb_clone+0x63/0x7a0 [ 471.398582][T17736] ? __skb_clone+0x483/0x7a0 [ 471.398606][T17736] ? skb_clone+0x246/0x3a0 [ 471.398626][T17736] ? __netlink_deliver_tap+0x807/0x850 [ 471.398647][T17736] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.398675][T17736] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.398696][T17736] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.398723][T17736] netlink_unicast+0x75b/0x8d0 [ 471.398755][T17736] netlink_sendmsg+0x805/0xb30 [ 471.398786][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.398812][T17736] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.398835][T17736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.398858][T17736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.398881][T17736] __sock_sendmsg+0x219/0x270 [ 471.398904][T17736] ____sys_sendmsg+0x505/0x830 [ 471.398934][T17736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.398968][T17736] ? import_iovec+0x74/0xa0 [ 471.398991][T17736] ___sys_sendmsg+0x21f/0x2a0 [ 471.399017][T17736] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.399076][T17736] ? __fget_files+0x2a/0x420 [ 471.399097][T17736] ? __fget_files+0x3a0/0x420 [ 471.399129][T17736] __x64_sys_sendmsg+0x19b/0x260 [ 471.399149][T17736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.399183][T17736] ? __pfx_ksys_write+0x10/0x10 [ 471.399200][T17736] ? rcu_is_watching+0x15/0xb0 [ 471.399222][T17736] ? do_syscall_64+0xbe/0x3b0 [ 471.399247][T17736] do_syscall_64+0xfa/0x3b0 [ 471.399266][T17736] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.399286][T17736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.399303][T17736] ? clear_bhb_loop+0x60/0xb0 [ 471.399323][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.399340][T17736] RIP: 0033:0x7fb98738e929 [ 471.399356][T17736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.399372][T17736] RSP: 002b:00007fb988121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.399390][T17736] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738e929 [ 471.399404][T17736] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 471.399415][T17736] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 471.399426][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.399436][T17736] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 471.399464][T17736] [ 471.875913][ T5897] gspca_sunplus: reg_w_riv err -71 [ 471.882539][ T5897] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 471.952691][ T5897] usb 10-1: USB disconnect, device number 23 [ 472.207589][T17750] syzkaller1: entered promiscuous mode [ 472.229216][T17750] syzkaller1: entered allmulticast mode [ 472.283893][ T3551] Bluetooth: Error in BCSP hdr checksum [ 472.324602][T17754] netlink: 'syz.0.3769': attribute type 11 has an invalid length. [ 472.382794][T17758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3770'. [ 472.396179][T17758] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 472.923090][T17778] FAULT_INJECTION: forcing a failure. [ 472.923090][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 472.982883][T17778] CPU: 0 UID: 0 PID: 17778 Comm: syz.9.3774 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 472.982906][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.982915][T17778] Call Trace: [ 472.982923][T17778] [ 472.982930][T17778] dump_stack_lvl+0x189/0x250 [ 472.982953][T17778] ? __pfx____ratelimit+0x10/0x10 [ 472.982972][T17778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.982988][T17778] ? __pfx__printk+0x10/0x10 [ 472.983011][T17778] ? __pfx___might_resched+0x10/0x10 [ 472.983042][T17778] should_fail_ex+0x414/0x560 [ 472.983064][T17778] should_failslab+0xa8/0x100 [ 472.983082][T17778] __kmalloc_noprof+0xcb/0x4f0 [ 472.983097][T17778] ? ieee80211_key_alloc+0x52/0x24a0 [ 472.983123][T17778] ieee80211_key_alloc+0x52/0x24a0 [ 472.983150][T17778] ieee80211_add_key+0x347/0xbd0 [ 472.983176][T17778] rdev_add_key+0x144/0x300 [ 472.983199][T17778] nl80211_new_key+0x754/0x890 [ 472.983221][T17778] ? __pfx_nl80211_new_key+0x10/0x10 [ 472.983247][T17778] ? nl80211_pre_doit+0x4f1/0x930 [ 472.983270][T17778] genl_family_rcv_msg_doit+0x215/0x300 [ 472.983295][T17778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.983327][T17778] ? bpf_lsm_capable+0x9/0x20 [ 472.983344][T17778] ? security_capable+0x7e/0x2e0 [ 472.983369][T17778] genl_rcv_msg+0x60e/0x790 [ 472.983392][T17778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.983406][T17778] ? ref_tracker_free+0x63a/0x7d0 [ 472.983423][T17778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 472.983438][T17778] ? __pfx_nl80211_new_key+0x10/0x10 [ 472.983454][T17778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 472.983471][T17778] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.983498][T17778] netlink_rcv_skb+0x208/0x470 [ 472.983519][T17778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.983536][T17778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.983571][T17778] ? down_read+0x1ad/0x2e0 [ 472.983594][T17778] genl_rcv+0x28/0x40 [ 472.983608][T17778] netlink_unicast+0x75b/0x8d0 [ 472.983635][T17778] netlink_sendmsg+0x805/0xb30 [ 472.983664][T17778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.983686][T17778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.983709][T17778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.983730][T17778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.983753][T17778] __sock_sendmsg+0x219/0x270 [ 472.983775][T17778] ____sys_sendmsg+0x505/0x830 [ 472.983806][T17778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.983841][T17778] ? import_iovec+0x74/0xa0 [ 472.983863][T17778] ___sys_sendmsg+0x21f/0x2a0 [ 472.983889][T17778] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.983951][T17778] ? __fget_files+0x2a/0x420 [ 472.983972][T17778] ? __fget_files+0x3a0/0x420 [ 472.984004][T17778] __x64_sys_sendmsg+0x19b/0x260 [ 472.984034][T17778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.984073][T17778] ? __pfx_ksys_write+0x10/0x10 [ 472.984089][T17778] ? rcu_is_watching+0x15/0xb0 [ 472.984112][T17778] ? do_syscall_64+0xbe/0x3b0 [ 472.984136][T17778] do_syscall_64+0xfa/0x3b0 [ 472.984155][T17778] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.984175][T17778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.984192][T17778] ? clear_bhb_loop+0x60/0xb0 [ 472.984214][T17778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.984230][T17778] RIP: 0033:0x7fa279f8e929 [ 472.984247][T17778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.984261][T17778] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.984279][T17778] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 472.984292][T17778] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 472.984304][T17778] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 472.984314][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.984324][T17778] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 472.984353][T17778] [ 473.455717][T17790] FAULT_INJECTION: forcing a failure. [ 473.455717][T17790] name failslab, interval 1, probability 0, space 0, times 0 [ 473.498589][T17790] CPU: 1 UID: 0 PID: 17790 Comm: syz.9.3778 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 473.498613][T17790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.498622][T17790] Call Trace: [ 473.498630][T17790] [ 473.498637][T17790] dump_stack_lvl+0x189/0x250 [ 473.498662][T17790] ? __pfx____ratelimit+0x10/0x10 [ 473.498683][T17790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.498702][T17790] ? __pfx__printk+0x10/0x10 [ 473.498726][T17790] ? __pfx___might_resched+0x10/0x10 [ 473.498743][T17790] ? fs_reclaim_acquire+0x7d/0x100 [ 473.498768][T17790] should_fail_ex+0x414/0x560 [ 473.498792][T17790] should_failslab+0xa8/0x100 [ 473.498813][T17790] kmem_cache_alloc_noprof+0x73/0x3c0 [ 473.498831][T17790] ? skb_clone+0x212/0x3a0 [ 473.498852][T17790] skb_clone+0x212/0x3a0 [ 473.498868][T17790] ? nfnetlink_rcv+0x486/0x2520 [ 473.498889][T17790] nfnetlink_rcv+0x4b4/0x2520 [ 473.498910][T17790] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 473.498933][T17790] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 473.498953][T17790] ? __dev_queue_xmit+0x27e/0x3a70 [ 473.498971][T17790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.498996][T17790] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 473.499029][T17790] ? ref_tracker_free+0x63a/0x7d0 [ 473.499047][T17790] ? __copy_skb_header+0xa7/0x550 [ 473.499065][T17790] ? __pfx_ref_tracker_free+0x10/0x10 [ 473.499084][T17790] ? __skb_clone+0x63/0x7a0 [ 473.499101][T17790] ? __skb_clone+0x483/0x7a0 [ 473.499122][T17790] ? skb_clone+0x246/0x3a0 [ 473.499140][T17790] ? __netlink_deliver_tap+0x807/0x850 [ 473.499161][T17790] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.499185][T17790] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.499204][T17790] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.499233][T17790] netlink_unicast+0x75b/0x8d0 [ 473.499262][T17790] netlink_sendmsg+0x805/0xb30 [ 473.499293][T17790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.499317][T17790] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.499337][T17790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.499357][T17790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.499380][T17790] __sock_sendmsg+0x219/0x270 [ 473.499403][T17790] ____sys_sendmsg+0x505/0x830 [ 473.499431][T17790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.499457][T17790] ? import_iovec+0x74/0xa0 [ 473.499478][T17790] ___sys_sendmsg+0x21f/0x2a0 [ 473.499502][T17790] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.499554][T17790] ? __fget_files+0x2a/0x420 [ 473.499573][T17790] ? __fget_files+0x3a0/0x420 [ 473.499601][T17790] __x64_sys_sendmsg+0x19b/0x260 [ 473.499619][T17790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.499648][T17790] ? __pfx_ksys_write+0x10/0x10 [ 473.499663][T17790] ? rcu_is_watching+0x15/0xb0 [ 473.499682][T17790] ? do_syscall_64+0xbe/0x3b0 [ 473.499706][T17790] do_syscall_64+0xfa/0x3b0 [ 473.499724][T17790] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.499742][T17790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.499758][T17790] ? clear_bhb_loop+0x60/0xb0 [ 473.499776][T17790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.499791][T17790] RIP: 0033:0x7fa279f8e929 [ 473.499806][T17790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.499820][T17790] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.499838][T17790] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 473.499849][T17790] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 473.499861][T17790] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 473.499871][T17790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.499881][T17790] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 473.499906][T17790] [ 473.519539][T17786] input: syz1 as /devices/virtual/input/input11 [ 473.888258][T14104] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 474.044440][T14104] usb 1-1: Using ep0 maxpacket: 8 [ 474.052366][T14104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.069982][T17805] netlink: 'syz.9.3780': attribute type 11 has an invalid length. [ 474.075191][T14104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.094697][T17805] netlink: 'syz.9.3780': attribute type 11 has an invalid length. [ 474.106618][T14104] usb 1-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 474.115739][T17805] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.3780'. [ 474.132610][T14104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.155152][T14104] usb 1-1: config 0 descriptor?? [ 474.205435][T17809] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 474.212760][T17809] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 474.326663][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 474.402324][T17784] syz.0.3775: attempt to access beyond end of device [ 474.402324][T17784] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 474.431331][T17784] qnx4: unable to read the superblock [ 474.674798][T14104] wacom 0003:056A:033D.0005: unknown main item tag 0x0 [ 474.692202][T14104] wacom 0003:056A:033D.0005: unknown main item tag 0x0 [ 474.701719][T14104] wacom 0003:056A:033D.0005: unknown main item tag 0x0 [ 474.713036][T14104] wacom 0003:056A:033D.0005: unknown main item tag 0x0 [ 474.720201][T14104] wacom 0003:056A:033D.0005: unknown main item tag 0x0 [ 474.744429][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 474.868479][T14104] usb 1-1: USB disconnect, device number 33 [ 474.906649][ T5898] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 474.954234][T14655] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 474.961974][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 474.982583][ T24] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 474.997294][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.007948][ T24] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.022891][ T24] usb 10-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 475.033858][ T24] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 475.055919][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.074153][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 475.080505][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.093971][ T24] usb 10-1: Product: syz [ 475.098640][ T24] usb 10-1: Manufacturer: syz [ 475.103908][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.113639][ T24] usb 10-1: SerialNumber: syz [ 475.118541][ T5898] usb 2-1: config 0 has no interface number 0 [ 475.126932][T14655] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 475.140837][T14655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.159870][ T5898] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 475.169612][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.181038][T14655] usb 3-1: config 0 descriptor?? [ 475.187616][ T5898] usb 2-1: Product: syz [ 475.197197][ T5898] usb 2-1: Manufacturer: syz [ 475.201857][ T5898] usb 2-1: SerialNumber: syz [ 475.234890][ T5898] usb 2-1: config 0 descriptor?? [ 475.244705][ T5898] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 475.434832][ T24] usb 10-1: USB disconnect, device number 24 [ 475.452879][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 475.471205][ T5898] gspca_spca1528: reg_w err -71 [ 475.485755][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 475.526821][T14655] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 475.534419][ T5898] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 475.583629][ T5898] usb 2-1: USB disconnect, device number 26 [ 475.740193][T14655] [drm:udl_init] *ERROR* Selecting channel failed [ 475.808371][T17861] FAT-fs (rnullb0): bogus number of reserved sectors [ 475.813674][T14655] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 475.822137][T14655] [drm] Initialized udl on minor 2 [ 475.826820][T17861] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 475.851458][T14655] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.899349][T14655] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 475.929182][ T5898] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.937934][T14655] usb 3-1: USB disconnect, device number 20 [ 475.965018][ T5898] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 476.133287][T17875] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 476.161201][T17875] VFS: Can't find a romfs filesystem on dev nullb0. [ 476.161201][T17875] [ 476.493741][T17891] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 476.601977][T17893] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 476.689147][T17898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3800'. [ 477.054381][ T5897] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 477.217907][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 477.238046][ T5897] usb 2-1: config 7 has an invalid interface number: 20 but max is 0 [ 477.248058][ T5897] usb 2-1: config 7 has no interface number 0 [ 477.257837][ T5897] usb 2-1: config 7 interface 20 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1024 [ 477.270385][ T5897] usb 2-1: config 7 interface 20 has no altsetting 0 [ 477.284319][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=77.e6 [ 477.294274][T14655] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 477.297023][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.314795][ T5897] usb 2-1: Product: syz [ 477.319329][ T5897] usb 2-1: Manufacturer: syz [ 477.326006][ T5897] usb 2-1: SerialNumber: syz [ 477.340960][T17905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.454227][T14655] usb 10-1: Using ep0 maxpacket: 16 [ 477.474409][T14655] usb 10-1: config 5 has an invalid interface number: 133 but max is 0 [ 477.493101][T14655] usb 10-1: config 5 has an invalid interface number: 86 but max is 0 [ 477.512730][T14655] usb 10-1: config 5 has 2 interfaces, different from the descriptor's value: 1 [ 477.529472][T14655] usb 10-1: config 5 has no interface number 0 [ 477.538561][T14655] usb 10-1: config 5 has no interface number 1 [ 477.546415][T14655] usb 10-1: config 5 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 477.580666][T14655] usb 10-1: config 5 interface 133 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 477.601964][T14655] usb 10-1: config 5 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.621518][T14655] usb 10-1: config 5 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.643590][T14655] usb 10-1: config 5 interface 133 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 477.666033][T14655] usb 10-1: too many endpoints for config 5 interface 86 altsetting 34: 79, using maximum allowed: 30 [ 477.682175][T14655] usb 10-1: config 5 interface 86 altsetting 34 endpoint 0x9 has invalid wMaxPacketSize 0 [ 477.693788][T14655] usb 10-1: config 5 interface 86 altsetting 34 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 477.710147][T14655] usb 10-1: config 5 interface 86 altsetting 34 has a duplicate endpoint with address 0xD, skipping [ 477.737327][T14655] usb 10-1: config 5 interface 86 altsetting 34 has a duplicate endpoint with address 0xB, skipping [ 477.752421][ T5897] usbtest 2-1:7.20: couldn't get endpoints, -22 [ 477.760257][T14655] usb 10-1: config 5 interface 86 altsetting 34 has 4 endpoint descriptors, different from the interface descriptor's value: 79 [ 477.776782][ T5897] usbtest 2-1:7.20: probe with driver usbtest failed with error -22 [ 477.813276][T14655] usb 10-1: config 5 interface 86 has no altsetting 0 [ 477.825382][ T5897] usb 2-1: USB disconnect, device number 27 [ 477.861778][T17936] netlink: zone id is out of range [ 477.876702][T14655] usb 10-1: New USB device found, idVendor=13d3, idProduct=3365, bcdDevice=47.41 [ 477.908908][T14655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.932889][T14655] usb 10-1: Product: О [ 477.951789][T14655] usb 10-1: Manufacturer: ᰊ [ 477.967800][T14655] usb 10-1: SerialNumber: ⓤጺ⑘蝹穠벺삭៵룀隖帛俋搦绦Ꮽ斵귐瓸쓉웩숎㓯妇汶ヨ᷆橕螰恢ꊷ秉轄Њ䧟⍢-̪ঊ㾬⊲霃폍귰胡衠ᚧ如鄙椶쾭䃭脩讑։叒헦䙖⾊〒櫀멫驇Ҟᦀ兏㑰䥸왻䜎뾃퇩໽긢ࢾ췥۟䈤֊ﬠ⩣貛骿폅扂ᝀ㻎ￏ㩲賑栉㢵䚵Ẩ䱂癙⦶僝䄡윯 [ 478.131588][T17940] FAULT_INJECTION: forcing a failure. [ 478.131588][T17940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.146756][T17940] CPU: 1 UID: 0 PID: 17940 Comm: syz.0.3816 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 478.146810][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.146821][T17940] Call Trace: [ 478.146829][T17940] [ 478.146837][T17940] dump_stack_lvl+0x189/0x250 [ 478.146864][T17940] ? __pfx____ratelimit+0x10/0x10 [ 478.146886][T17940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.146905][T17940] ? __pfx__printk+0x10/0x10 [ 478.146937][T17940] should_fail_ex+0x414/0x560 [ 478.146962][T17940] _copy_to_user+0x31/0xb0 [ 478.146984][T17940] simple_read_from_buffer+0xe1/0x170 [ 478.147011][T17940] proc_fail_nth_read+0x1df/0x250 [ 478.147038][T17940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.147065][T17940] ? rw_verify_area+0x258/0x650 [ 478.147084][T17940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.147110][T17940] vfs_read+0x200/0x980 [ 478.147135][T17940] ? __pfx___mutex_lock+0x10/0x10 [ 478.147158][T17940] ? __pfx_vfs_read+0x10/0x10 [ 478.147179][T17940] ? __fget_files+0x2a/0x420 [ 478.147206][T17940] ? __fget_files+0x3a0/0x420 [ 478.147226][T17940] ? __fget_files+0x2a/0x420 [ 478.147257][T17940] ksys_read+0x145/0x250 [ 478.147275][T17940] ? __fget_files+0x3a0/0x420 [ 478.147298][T17940] ? __pfx_ksys_read+0x10/0x10 [ 478.147323][T17940] ? do_syscall_64+0xbe/0x3b0 [ 478.147349][T17940] do_syscall_64+0xfa/0x3b0 [ 478.147369][T17940] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.147389][T17940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.147406][T17940] ? clear_bhb_loop+0x60/0xb0 [ 478.147427][T17940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.147443][T17940] RIP: 0033:0x7fb98738d33c [ 478.147459][T17940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.147474][T17940] RSP: 002b:00007fb988121030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.147493][T17940] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738d33c [ 478.147506][T17940] RDX: 000000000000000f RSI: 00007fb9881210a0 RDI: 0000000000000004 [ 478.147517][T17940] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 478.147528][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.147538][T17940] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 478.147566][T17940] [ 478.529088][T14655] usb 10-1: USB disconnect, device number 25 [ 478.831086][T17949] bond0: (slave rose0): Releasing backup interface [ 478.832132][T14644] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 479.046810][T14644] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 479.080057][T14644] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 479.094324][T14644] usb 2-1: can't read configurations, error -61 [ 479.234369][T14644] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 479.445319][T14644] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 479.519746][T14644] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 479.528011][T14644] usb 2-1: can't read configurations, error -61 [ 479.538584][T14644] usb usb2-port1: attempt power cycle [ 479.894180][T14644] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 479.915401][T14644] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 479.925206][T14644] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 479.932784][T14644] usb 2-1: can't read configurations, error -61 [ 480.106592][T14644] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 480.169605][T14644] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 480.186256][T14644] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 480.215659][T14644] usb 2-1: can't read configurations, error -61 [ 480.226050][T14644] usb usb2-port1: unable to enumerate USB device [ 480.400677][T17996] zonefs (rnullb0) ERROR: Not a zoned block device [ 480.655442][T18005] FAULT_INJECTION: forcing a failure. [ 480.655442][T18005] name failslab, interval 1, probability 0, space 0, times 0 [ 480.684208][T18005] CPU: 1 UID: 0 PID: 18005 Comm: syz.0.3828 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 480.684232][T18005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 480.684242][T18005] Call Trace: [ 480.684249][T18005] [ 480.684257][T18005] dump_stack_lvl+0x189/0x250 [ 480.684279][T18005] ? __pfx____ratelimit+0x10/0x10 [ 480.684298][T18005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.684315][T18005] ? __pfx__printk+0x10/0x10 [ 480.684337][T18005] ? __pfx___might_resched+0x10/0x10 [ 480.684353][T18005] ? fs_reclaim_acquire+0x7d/0x100 [ 480.684375][T18005] should_fail_ex+0x414/0x560 [ 480.684396][T18005] should_failslab+0xa8/0x100 [ 480.684414][T18005] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 480.684433][T18005] ? __alloc_skb+0x112/0x2d0 [ 480.684459][T18005] __alloc_skb+0x112/0x2d0 [ 480.684484][T18005] tcp_stream_alloc_skb+0x3d/0x340 [ 480.684506][T18005] tcp_connect+0x1087/0x46f0 [ 480.684530][T18005] ? tcp_fastopen_defer_connect+0xf0/0x370 [ 480.684559][T18005] ? secure_tcp_ts_off+0xbd/0x180 [ 480.684594][T18005] ? sk_setup_caps+0x850/0xac0 [ 480.684618][T18005] tcp_v4_connect+0x1110/0x1a00 [ 480.684661][T18005] ? __pfx_tcp_v4_connect+0x10/0x10 [ 480.684691][T18005] __inet_stream_connect+0x298/0xf10 [ 480.684718][T18005] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.684733][T18005] ? __pfx___inet_stream_connect+0x10/0x10 [ 480.684753][T18005] ? __local_bh_enable_ip+0x12d/0x1c0 [ 480.684767][T18005] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 480.684789][T18005] inet_stream_connect+0x66/0xa0 [ 480.684810][T18005] __sys_connect+0x313/0x440 [ 480.684831][T18005] ? __fget_files+0x3a0/0x420 [ 480.684853][T18005] ? __pfx___sys_connect+0x10/0x10 [ 480.684887][T18005] ? __pfx_ksys_write+0x10/0x10 [ 480.684904][T18005] ? rcu_is_watching+0x15/0xb0 [ 480.684927][T18005] __x64_sys_connect+0x7a/0x90 [ 480.684950][T18005] do_syscall_64+0xfa/0x3b0 [ 480.684969][T18005] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.684990][T18005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.685007][T18005] ? clear_bhb_loop+0x60/0xb0 [ 480.685026][T18005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.685041][T18005] RIP: 0033:0x7fb98738e929 [ 480.685058][T18005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.685073][T18005] RSP: 002b:00007fb988121038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 480.685091][T18005] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738e929 [ 480.685105][T18005] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 480.685116][T18005] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 480.685127][T18005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.685138][T18005] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 480.685167][T18005] [ 481.576324][T18028] FAULT_INJECTION: forcing a failure. [ 481.576324][T18028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.589629][T18028] CPU: 0 UID: 0 PID: 18028 Comm: syz.9.3833 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 481.589653][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.589664][T18028] Call Trace: [ 481.589672][T18028] [ 481.589680][T18028] dump_stack_lvl+0x189/0x250 [ 481.589704][T18028] ? __pfx____ratelimit+0x10/0x10 [ 481.589726][T18028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.589745][T18028] ? __pfx__printk+0x10/0x10 [ 481.589764][T18028] ? __might_fault+0xb0/0x130 [ 481.589794][T18028] should_fail_ex+0x414/0x560 [ 481.589818][T18028] _copy_from_iter+0x1db/0x16f0 [ 481.589836][T18028] ? rcu_is_watching+0x15/0xb0 [ 481.589854][T18028] ? trace_kmalloc+0x1f/0xd0 [ 481.589870][T18028] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 481.589894][T18028] ? __pfx__copy_from_iter+0x10/0x10 [ 481.589910][T18028] ? __build_skb_around+0x257/0x3e0 [ 481.589938][T18028] ? skb_put+0x11b/0x210 [ 481.589960][T18028] ? tipc_msg_build+0x8c6/0xcf0 [ 481.589986][T18028] tipc_msg_build+0x72b/0xcf0 [ 481.590016][T18028] ? __pfx_tipc_msg_build+0x10/0x10 [ 481.590042][T18028] ? net_generic+0x1e/0x240 [ 481.590058][T18028] ? net_generic+0x1e/0x240 [ 481.590077][T18028] ? tipc_group_bc_cong+0x15f/0x210 [ 481.590104][T18028] tipc_send_group_bcast+0x76c/0xa70 [ 481.590143][T18028] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 481.590177][T18028] ? __pfx_woken_wake_function+0x10/0x10 [ 481.590213][T18028] __tipc_sendmsg+0x2d7/0x2960 [ 481.590242][T18028] ? process_measurement+0x72d/0x1a40 [ 481.590271][T18028] ? __pfx___tipc_sendmsg+0x10/0x10 [ 481.590295][T18028] ? aa_label_sk_perm+0x4d3/0x630 [ 481.590324][T18028] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 481.590369][T18028] ? __lock_acquire+0xab9/0xd20 [ 481.590404][T18028] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.590418][T18028] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.590438][T18028] ? __local_bh_enable_ip+0x12d/0x1c0 [ 481.590451][T18028] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.590474][T18028] tipc_sendmsg+0x55/0x70 [ 481.590500][T18028] ? __pfx_tipc_sendmsg+0x10/0x10 [ 481.590520][T18028] __sock_sendmsg+0x219/0x270 [ 481.590542][T18028] ____sys_sendmsg+0x52d/0x830 [ 481.590570][T18028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.590601][T18028] ? import_iovec+0x74/0xa0 [ 481.590624][T18028] ___sys_sendmsg+0x21f/0x2a0 [ 481.590651][T18028] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.590710][T18028] ? __fget_files+0x2a/0x420 [ 481.590731][T18028] ? __fget_files+0x3a0/0x420 [ 481.590764][T18028] __sys_sendmmsg+0x227/0x430 [ 481.590787][T18028] ? __pfx___sys_sendmmsg+0x10/0x10 [ 481.590801][T18028] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 481.590848][T18028] ? ksys_write+0x22a/0x250 [ 481.590871][T18028] ? __pfx_ksys_write+0x10/0x10 [ 481.590898][T18028] __x64_sys_sendmmsg+0xa0/0xc0 [ 481.590916][T18028] do_syscall_64+0xfa/0x3b0 [ 481.590935][T18028] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.590954][T18028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.590971][T18028] ? clear_bhb_loop+0x60/0xb0 [ 481.590991][T18028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.591005][T18028] RIP: 0033:0x7fa279f8e929 [ 481.591020][T18028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.591034][T18028] RSP: 002b:00007fa277df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 481.591052][T18028] RAX: ffffffffffffffda RBX: 00007fa27a1b6080 RCX: 00007fa279f8e929 [ 481.591065][T18028] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 481.591076][T18028] RBP: 00007fa277df6090 R08: 0000000000000000 R09: 0000000000000000 [ 481.591086][T18028] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.591097][T18028] R13: 0000000000000001 R14: 00007fa27a1b6080 R15: 00007ffc5f6e16c8 [ 481.591125][T18028] [ 481.961260][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.264319][T14644] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 482.418106][T14644] usb 1-1: Using ep0 maxpacket: 32 [ 482.433038][T14644] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 482.462007][T14644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.510529][T14644] usb 1-1: config 0 descriptor?? [ 482.545724][T14644] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 482.565044][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3836'. [ 482.964359][T18049] FAULT_INJECTION: forcing a failure. [ 482.964359][T18049] name failslab, interval 1, probability 0, space 0, times 0 [ 482.995694][T14644] gspca_nw80x: reg_r err -71 [ 482.998496][T18049] CPU: 0 UID: 0 PID: 18049 Comm: syz.9.3839 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 482.998518][T18049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.998530][T18049] Call Trace: [ 482.998538][T18049] [ 482.998546][T18049] dump_stack_lvl+0x189/0x250 [ 482.998570][T18049] ? __pfx____ratelimit+0x10/0x10 [ 482.998590][T18049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.998608][T18049] ? __pfx__printk+0x10/0x10 [ 482.998631][T18049] ? __pfx___might_resched+0x10/0x10 [ 482.998652][T18049] should_fail_ex+0x414/0x560 [ 482.998680][T18049] should_failslab+0xa8/0x100 [ 482.998700][T18049] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 482.998720][T18049] ? __alloc_skb+0x112/0x2d0 [ 482.998746][T18049] __alloc_skb+0x112/0x2d0 [ 482.998772][T18049] netlink_sendmsg+0x5c6/0xb30 [ 482.998801][T18049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.998826][T18049] ? aa_sock_msg_perm+0xf1/0x1d0 [ 482.998848][T18049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.998870][T18049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.998891][T18049] __sock_sendmsg+0x219/0x270 [ 482.998913][T18049] ____sys_sendmsg+0x505/0x830 [ 482.998943][T18049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.998974][T18049] ? import_iovec+0x74/0xa0 [ 482.998996][T18049] ___sys_sendmsg+0x21f/0x2a0 [ 482.999021][T18049] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.999078][T18049] ? __fget_files+0x2a/0x420 [ 482.999098][T18049] ? __fget_files+0x3a0/0x420 [ 482.999128][T18049] __x64_sys_sendmsg+0x19b/0x260 [ 482.999146][T18049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.999186][T18049] ? __pfx_ksys_write+0x10/0x10 [ 482.999202][T18049] ? rcu_is_watching+0x15/0xb0 [ 482.999223][T18049] ? do_syscall_64+0xbe/0x3b0 [ 482.999248][T18049] do_syscall_64+0xfa/0x3b0 [ 482.999266][T18049] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.999285][T18049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.999301][T18049] ? clear_bhb_loop+0x60/0xb0 [ 482.999321][T18049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.999337][T18049] RIP: 0033:0x7fa279f8e929 [ 482.999353][T18049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.999367][T18049] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.999385][T18049] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 482.999398][T18049] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 482.999409][T18049] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 482.999419][T18049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.999428][T18049] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 482.999456][T18049] [ 483.056840][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 483.124234][T14644] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 483.424468][T14644] usb 1-1: USB disconnect, device number 34 [ 483.923633][T18081] FAULT_INJECTION: forcing a failure. [ 483.923633][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 483.949548][T18077] hpfs: Bad magic ... probably not HPFS [ 483.975602][T18081] CPU: 1 UID: 0 PID: 18081 Comm: syz.0.3846 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 483.975626][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.975637][T18081] Call Trace: [ 483.975644][T18081] [ 483.975652][T18081] dump_stack_lvl+0x189/0x250 [ 483.975676][T18081] ? __pfx____ratelimit+0x10/0x10 [ 483.975697][T18081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.975716][T18081] ? __pfx__printk+0x10/0x10 [ 483.975741][T18081] ? __pfx___might_resched+0x10/0x10 [ 483.975763][T18081] should_fail_ex+0x414/0x560 [ 483.975788][T18081] should_failslab+0xa8/0x100 [ 483.975810][T18081] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 483.975830][T18081] ? __alloc_skb+0x112/0x2d0 [ 483.975857][T18081] __alloc_skb+0x112/0x2d0 [ 483.975883][T18081] __ip6_append_data+0x2adb/0x3c50 [ 483.975927][T18081] ? __pfx_raw6_getfrag+0x10/0x10 [ 483.975961][T18081] ? ip6_mtu+0x7d/0x3f0 [ 483.975986][T18081] ? __pfx___ip6_append_data+0x10/0x10 [ 483.976008][T18081] ? __pfx_ip6_mtu+0x10/0x10 [ 483.976040][T18081] ip6_append_data+0x1c4/0x380 [ 483.976068][T18081] ? __pfx_raw6_getfrag+0x10/0x10 [ 483.976089][T18081] rawv6_sendmsg+0x127a/0x1820 [ 483.976126][T18081] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 483.976166][T18081] ? __lock_acquire+0xab9/0xd20 [ 483.976189][T18081] ? __pfx_aa_sk_perm+0x10/0x10 [ 483.976213][T18081] ? sock_rps_record_flow+0x19/0x410 [ 483.976235][T18081] ? inet_sendmsg+0x2f4/0x370 [ 483.976253][T18081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.976279][T18081] __sock_sendmsg+0x19c/0x270 [ 483.976308][T18081] ____sys_sendmsg+0x52d/0x830 [ 483.976335][T18081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.976370][T18081] ? import_iovec+0x74/0xa0 [ 483.976392][T18081] ___sys_sendmsg+0x21f/0x2a0 [ 483.976420][T18081] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.976490][T18081] ? __might_fault+0xb0/0x130 [ 483.976512][T18081] __sys_sendmmsg+0x227/0x430 [ 483.976534][T18081] ? __pfx___sys_sendmmsg+0x10/0x10 [ 483.976548][T18081] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 483.976596][T18081] ? ksys_write+0x22a/0x250 [ 483.976619][T18081] ? __pfx_ksys_write+0x10/0x10 [ 483.976636][T18081] ? rcu_is_watching+0x15/0xb0 [ 483.976660][T18081] __x64_sys_sendmmsg+0xa0/0xc0 [ 483.976679][T18081] do_syscall_64+0xfa/0x3b0 [ 483.976699][T18081] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.976719][T18081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.976736][T18081] ? clear_bhb_loop+0x60/0xb0 [ 483.976757][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.976773][T18081] RIP: 0033:0x7fb98738e929 [ 483.976789][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.976804][T18081] RSP: 002b:00007fb988121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 483.976822][T18081] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738e929 [ 483.976835][T18081] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 483.976847][T18081] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 483.976858][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.976868][T18081] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 483.976897][T18081] [ 484.491632][T17932] Set syz1 is full, maxelem 65536 reached [ 484.714782][T18090] FAULT_INJECTION: forcing a failure. [ 484.714782][T18090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.782842][T18090] CPU: 1 UID: 0 PID: 18090 Comm: syz.9.3850 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 484.782868][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.782880][T18090] Call Trace: [ 484.782887][T18090] [ 484.782895][T18090] dump_stack_lvl+0x189/0x250 [ 484.782920][T18090] ? __pfx____ratelimit+0x10/0x10 [ 484.782941][T18090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.782969][T18090] ? __pfx__printk+0x10/0x10 [ 484.782988][T18090] ? __might_fault+0xb0/0x130 [ 484.783018][T18090] should_fail_ex+0x414/0x560 [ 484.783042][T18090] _copy_from_user+0x2d/0xb0 [ 484.783062][T18090] kstrtouint_from_user+0xc4/0x170 [ 484.783088][T18090] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 484.783129][T18090] proc_fail_nth_write+0x88/0x240 [ 484.783151][T18090] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 484.783180][T18090] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 484.783205][T18090] vfs_write+0x27e/0xa90 [ 484.783233][T18090] ? __pfx_vfs_write+0x10/0x10 [ 484.783255][T18090] ? __fget_files+0x2a/0x420 [ 484.783281][T18090] ? __fget_files+0x3a0/0x420 [ 484.783301][T18090] ? __fget_files+0x2a/0x420 [ 484.783330][T18090] ksys_write+0x145/0x250 [ 484.783353][T18090] ? __pfx_ksys_write+0x10/0x10 [ 484.783369][T18090] ? rcu_is_watching+0x15/0xb0 [ 484.783391][T18090] ? do_syscall_64+0xbe/0x3b0 [ 484.783416][T18090] do_syscall_64+0xfa/0x3b0 [ 484.783435][T18090] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.783455][T18090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.783471][T18090] ? clear_bhb_loop+0x60/0xb0 [ 484.783492][T18090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.783508][T18090] RIP: 0033:0x7fa279f8d3df [ 484.783525][T18090] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 484.783540][T18090] RSP: 002b:00007fa27ad11030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 484.783557][T18090] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa279f8d3df [ 484.783570][T18090] RDX: 0000000000000001 RSI: 00007fa27ad110a0 RDI: 0000000000000005 [ 484.783580][T18090] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 484.783591][T18090] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 484.783602][T18090] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 484.783630][T18090] [ 485.760262][T18117] /dev/nullb0: Can't open blockdev [ 486.108333][T18131] vxcan1: tx address claim with dlc 0 [ 486.308014][T18135] nbd: must specify a size in bytes for the device [ 486.492716][T18146] FAULT_INJECTION: forcing a failure. [ 486.492716][T18146] name failslab, interval 1, probability 0, space 0, times 0 [ 486.564194][T18146] CPU: 0 UID: 0 PID: 18146 Comm: syz.9.3861 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 486.564220][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.564230][T18146] Call Trace: [ 486.564238][T18146] [ 486.564245][T18146] dump_stack_lvl+0x189/0x250 [ 486.564268][T18146] ? __pfx____ratelimit+0x10/0x10 [ 486.564289][T18146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.564308][T18146] ? __pfx__printk+0x10/0x10 [ 486.564331][T18146] ? __pfx___might_resched+0x10/0x10 [ 486.564347][T18146] ? fs_reclaim_acquire+0x7d/0x100 [ 486.564370][T18146] should_fail_ex+0x414/0x560 [ 486.564392][T18146] should_failslab+0xa8/0x100 [ 486.564412][T18146] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 486.564429][T18146] ? __alloc_skb+0x112/0x2d0 [ 486.564454][T18146] __alloc_skb+0x112/0x2d0 [ 486.564475][T18146] netlink_ack+0x146/0xa50 [ 486.564513][T18146] netlink_rcv_skb+0x28c/0x470 [ 486.564535][T18146] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 486.564556][T18146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.564589][T18146] ? bpf_lsm_capable+0x9/0x20 [ 486.564606][T18146] ? security_capable+0x7e/0x2e0 [ 486.564633][T18146] nfnetlink_rcv+0x26a/0x2520 [ 486.564655][T18146] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 486.564678][T18146] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 486.564699][T18146] ? __dev_queue_xmit+0x27e/0x3a70 [ 486.564717][T18146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.564745][T18146] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 486.564763][T18146] ? __pfx___dev_queue_xmit+0x10/0x10 [ 486.564794][T18146] ? ref_tracker_free+0x63a/0x7d0 [ 486.564811][T18146] ? __copy_skb_header+0xa7/0x550 [ 486.564830][T18146] ? __pfx_ref_tracker_free+0x10/0x10 [ 486.564849][T18146] ? __skb_clone+0x63/0x7a0 [ 486.564869][T18146] ? __skb_clone+0x483/0x7a0 [ 486.564899][T18146] ? skb_clone+0x246/0x3a0 [ 486.564919][T18146] ? __netlink_deliver_tap+0x807/0x850 [ 486.564940][T18146] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.564968][T18146] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.564988][T18146] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.565015][T18146] netlink_unicast+0x75b/0x8d0 [ 486.565045][T18146] netlink_sendmsg+0x805/0xb30 [ 486.565076][T18146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.565102][T18146] ? aa_sock_msg_perm+0xf1/0x1d0 [ 486.565125][T18146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.565147][T18146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.565170][T18146] __sock_sendmsg+0x219/0x270 [ 486.565193][T18146] ____sys_sendmsg+0x505/0x830 [ 486.565223][T18146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.565255][T18146] ? import_iovec+0x74/0xa0 [ 486.565278][T18146] ___sys_sendmsg+0x21f/0x2a0 [ 486.565306][T18146] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.565364][T18146] ? __fget_files+0x2a/0x420 [ 486.565385][T18146] ? __fget_files+0x3a0/0x420 [ 486.565418][T18146] __x64_sys_sendmsg+0x19b/0x260 [ 486.565437][T18146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.565471][T18146] ? __pfx_ksys_write+0x10/0x10 [ 486.565487][T18146] ? rcu_is_watching+0x15/0xb0 [ 486.565509][T18146] ? do_syscall_64+0xbe/0x3b0 [ 486.565534][T18146] do_syscall_64+0xfa/0x3b0 [ 486.565553][T18146] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.565574][T18146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.565590][T18146] ? clear_bhb_loop+0x60/0xb0 [ 486.565611][T18146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.565628][T18146] RIP: 0033:0x7fa279f8e929 [ 486.565644][T18146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.565659][T18146] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.565678][T18146] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 486.565692][T18146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 486.565703][T18146] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 486.565714][T18146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.565725][T18146] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 486.565752][T18146] [ 487.021202][T18151] exFAT-fs (rnullb0): invalid boot record signature [ 487.027898][T18151] exFAT-fs (rnullb0): failed to read boot sector [ 487.034276][T18151] exFAT-fs (rnullb0): failed to recognize exfat type [ 487.574030][T18175] Can't find a SQUASHFS superblock on rnullb0 [ 487.674447][ T5898] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 487.845356][ T5898] usb 10-1: Using ep0 maxpacket: 16 [ 487.861985][ T5898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.884776][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.913166][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.934167][T14655] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 487.961336][T18191] FAULT_INJECTION: forcing a failure. [ 487.961336][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 487.964641][ T5898] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 487.979104][T18191] CPU: 0 UID: 0 PID: 18191 Comm: syz.2.3874 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 487.979127][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.979137][T18191] Call Trace: [ 487.979145][T18191] [ 487.979153][T18191] dump_stack_lvl+0x189/0x250 [ 487.979176][T18191] ? __pfx____ratelimit+0x10/0x10 [ 487.979197][T18191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.979215][T18191] ? __pfx__printk+0x10/0x10 [ 487.979239][T18191] ? __pfx___might_resched+0x10/0x10 [ 487.979260][T18191] should_fail_ex+0x414/0x560 [ 487.979283][T18191] should_failslab+0xa8/0x100 [ 487.979305][T18191] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 487.979324][T18191] ? __alloc_skb+0x112/0x2d0 [ 487.979350][T18191] __alloc_skb+0x112/0x2d0 [ 487.979376][T18191] netlink_dump+0x22b/0xe20 [ 487.979409][T18191] ? __pfx_netlink_dump+0x10/0x10 [ 487.979450][T18191] __netlink_dump_start+0x5cb/0x7e0 [ 487.979476][T18191] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 487.979499][T18191] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 487.979520][T18191] nf_tables_getset+0x599/0xa90 [ 487.979556][T18191] ? __pfx_nf_tables_getset+0x10/0x10 [ 487.979584][T18191] ? nfnl_pernet+0x23/0x240 [ 487.979600][T18191] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 487.979618][T18191] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 487.979636][T18191] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 487.979662][T18191] ? __nla_parse+0x40/0x60 [ 487.979681][T18191] ? __pfx_nf_tables_getset+0x10/0x10 [ 487.979705][T18191] nfnetlink_rcv_msg+0x80b/0x1130 [ 487.979724][T18191] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 487.979760][T18191] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.979776][T18191] ? kasan_save_free_info+0x46/0x50 [ 487.979844][T18191] netlink_rcv_skb+0x208/0x470 [ 487.979866][T18191] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.979885][T18191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.979923][T18191] ? bpf_lsm_capable+0x9/0x20 [ 487.979940][T18191] ? security_capable+0x7e/0x2e0 [ 487.979966][T18191] nfnetlink_rcv+0x26a/0x2520 [ 487.979987][T18191] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 487.980009][T18191] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 487.980028][T18191] ? __dev_queue_xmit+0x27e/0x3a70 [ 487.980045][T18191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.980071][T18191] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.980089][T18191] ? __pfx___dev_queue_xmit+0x10/0x10 [ 487.980119][T18191] ? ref_tracker_free+0x63a/0x7d0 [ 487.980137][T18191] ? __copy_skb_header+0xa7/0x550 [ 487.980154][T18191] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.980173][T18191] ? __skb_clone+0x63/0x7a0 [ 487.980193][T18191] ? __skb_clone+0x483/0x7a0 [ 487.980215][T18191] ? skb_clone+0x246/0x3a0 [ 487.980234][T18191] ? __netlink_deliver_tap+0x807/0x850 [ 487.980255][T18191] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.980281][T18191] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.980301][T18191] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.980328][T18191] netlink_unicast+0x75b/0x8d0 [ 487.980358][T18191] netlink_sendmsg+0x805/0xb30 [ 487.980388][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.980412][T18191] ? aa_sock_msg_perm+0xf1/0x1d0 [ 487.980435][T18191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.980456][T18191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.980478][T18191] __sock_sendmsg+0x219/0x270 [ 487.980500][T18191] ____sys_sendmsg+0x505/0x830 [ 487.980530][T18191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.980562][T18191] ? import_iovec+0x74/0xa0 [ 487.980584][T18191] ___sys_sendmsg+0x21f/0x2a0 [ 487.980610][T18191] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.980668][T18191] ? __fget_files+0x2a/0x420 [ 487.980688][T18191] ? __fget_files+0x3a0/0x420 [ 487.980719][T18191] __x64_sys_sendmsg+0x19b/0x260 [ 487.980738][T18191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.980771][T18191] ? __pfx_ksys_write+0x10/0x10 [ 487.980787][T18191] ? rcu_is_watching+0x15/0xb0 [ 487.980809][T18191] ? do_syscall_64+0xbe/0x3b0 [ 487.980833][T18191] do_syscall_64+0xfa/0x3b0 [ 487.980852][T18191] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.980871][T18191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.980886][T18191] ? clear_bhb_loop+0x60/0xb0 [ 487.980906][T18191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.980926][T18191] RIP: 0033:0x7f4fccd8e929 [ 487.980941][T18191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.980955][T18191] RSP: 002b:00007f4fcdb7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.980973][T18191] RAX: ffffffffffffffda RBX: 00007f4fccfb5fa0 RCX: 00007f4fccd8e929 [ 487.980985][T18191] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 487.980995][T18191] RBP: 00007f4fcdb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 487.981005][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.981016][T18191] R13: 0000000000000000 R14: 00007f4fccfb5fa0 R15: 00007fffb94f9018 [ 487.981043][T18191] [ 488.088459][T18194] FAULT_INJECTION: forcing a failure. [ 488.088459][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 488.095778][ T5898] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.231182][T18194] CPU: 0 UID: 0 PID: 18194 Comm: syz.1.3875 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 488.231206][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.231217][T18194] Call Trace: [ 488.231225][T18194] [ 488.231234][T18194] dump_stack_lvl+0x189/0x250 [ 488.231258][T18194] ? __pfx____ratelimit+0x10/0x10 [ 488.231279][T18194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.231297][T18194] ? __pfx__printk+0x10/0x10 [ 488.231323][T18194] ? ref_tracker_alloc+0x318/0x460 [ 488.231347][T18194] should_fail_ex+0x414/0x560 [ 488.231369][T18194] should_failslab+0xa8/0x100 [ 488.231391][T18194] kmem_cache_alloc_noprof+0x73/0x3c0 [ 488.231409][T18194] ? skb_clone+0x212/0x3a0 [ 488.231431][T18194] skb_clone+0x212/0x3a0 [ 488.231452][T18194] __netlink_deliver_tap+0x404/0x850 [ 488.231486][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.231509][T18194] netlink_deliver_tap+0x19c/0x1b0 [ 488.231544][T18194] __netlink_sendskb+0x47/0x90 [ 488.231564][T18194] netlink_dump+0xa12/0xe20 [ 488.231597][T18194] ? __pfx_netlink_dump+0x10/0x10 [ 488.231631][T18194] ? netlink_lookup+0x30/0x200 [ 488.231650][T18194] ? netlink_lookup+0x30/0x200 [ 488.231667][T18194] ? netlink_lookup+0x30/0x200 [ 488.231696][T18194] __netlink_dump_start+0x5cb/0x7e0 [ 488.231727][T18194] ip_set_dump+0x13e/0x1c0 [ 488.231745][T18194] ? __pfx_ip_set_dump+0x10/0x10 [ 488.231761][T18194] ? __pfx_ip_set_dump_start+0x10/0x10 [ 488.231778][T18194] ? __pfx_ip_set_dump_do+0x10/0x10 [ 488.231795][T18194] ? __pfx_ip_set_dump_done+0x10/0x10 [ 488.231828][T18194] nfnetlink_rcv_msg+0xb4a/0x1130 [ 488.231848][T18194] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 488.231885][T18194] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 488.231906][T18194] ? kasan_save_free_info+0x46/0x50 [ 488.231977][T18194] netlink_rcv_skb+0x208/0x470 [ 488.232000][T18194] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 488.232019][T18194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.232052][T18194] ? bpf_lsm_capable+0x9/0x20 [ 488.232068][T18194] ? security_capable+0x7e/0x2e0 [ 488.232095][T18194] nfnetlink_rcv+0x26a/0x2520 [ 488.232117][T18194] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 488.232140][T18194] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 488.232162][T18194] ? __dev_queue_xmit+0x27e/0x3a70 [ 488.232180][T18194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.232207][T18194] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 488.232225][T18194] ? __pfx___dev_queue_xmit+0x10/0x10 [ 488.232257][T18194] ? ref_tracker_free+0x63a/0x7d0 [ 488.232273][T18194] ? __copy_skb_header+0xa7/0x550 [ 488.232292][T18194] ? __pfx_ref_tracker_free+0x10/0x10 [ 488.232311][T18194] ? __skb_clone+0x63/0x7a0 [ 488.232332][T18194] ? __skb_clone+0x483/0x7a0 [ 488.232355][T18194] ? skb_clone+0x246/0x3a0 [ 488.232374][T18194] ? __netlink_deliver_tap+0x807/0x850 [ 488.232396][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.232423][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.232443][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.232469][T18194] netlink_unicast+0x75b/0x8d0 [ 488.232500][T18194] netlink_sendmsg+0x805/0xb30 [ 488.232531][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.232556][T18194] ? aa_sock_msg_perm+0xf1/0x1d0 [ 488.232579][T18194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.232600][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.232622][T18194] __sock_sendmsg+0x219/0x270 [ 488.232644][T18194] ____sys_sendmsg+0x505/0x830 [ 488.232674][T18194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.232708][T18194] ? import_iovec+0x74/0xa0 [ 488.232730][T18194] ___sys_sendmsg+0x21f/0x2a0 [ 488.232757][T18194] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.232818][T18194] ? __fget_files+0x2a/0x420 [ 488.232838][T18194] ? __fget_files+0x3a0/0x420 [ 488.232870][T18194] __x64_sys_sendmsg+0x19b/0x260 [ 488.232889][T18194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.232928][T18194] ? __pfx_ksys_write+0x10/0x10 [ 488.232944][T18194] ? rcu_is_watching+0x15/0xb0 [ 488.232966][T18194] ? do_syscall_64+0xbe/0x3b0 [ 488.232991][T18194] do_syscall_64+0xfa/0x3b0 [ 488.233010][T18194] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.233030][T18194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.233045][T18194] ? clear_bhb_loop+0x60/0xb0 [ 488.233066][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.233082][T18194] RIP: 0033:0x7ff5bb38e929 [ 488.233098][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.233112][T18194] RSP: 002b:00007ff5bc168038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.233130][T18194] RAX: ffffffffffffffda RBX: 00007ff5bb5b5fa0 RCX: 00007ff5bb38e929 [ 488.233142][T18194] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 488.233153][T18194] RBP: 00007ff5bc168090 R08: 0000000000000000 R09: 0000000000000000 [ 488.233164][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.233174][T18194] R13: 0000000000000000 R14: 00007ff5bb5b5fa0 R15: 00007fffb33c36f8 [ 488.233203][T18194] [ 488.355556][T18201] syzkaller1: entered promiscuous mode [ 488.402336][ T5898] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 488.451784][T18201] syzkaller1: entered allmulticast mode [ 488.483808][ T5898] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 488.483834][ T5898] usb 10-1: Manufacturer: syz [ 488.485044][T14655] usb 1-1: Using ep0 maxpacket: 32 [ 488.486640][T14655] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 489.045896][T14655] usb 1-1: config 0 has no interface number 0 [ 489.052267][T14655] usb 1-1: config 0 interface 184 has no altsetting 0 [ 489.088077][ T5898] usb 10-1: config 0 descriptor?? [ 489.097496][T14655] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.141479][T14655] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 489.154669][T14655] usb 1-1: Product: syz [ 489.158871][T14655] usb 1-1: Manufacturer: syz [ 489.183802][T14655] usb 1-1: SerialNumber: syz [ 489.210811][T14655] usb 1-1: config 0 descriptor?? [ 489.219913][T14655] smsc75xx v1.0.0 [ 489.294177][ T5897] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 489.420678][T18179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.430376][ T5898] rc_core: IR keymap rc-hauppauge not found [ 489.435027][ T5897] usb 3-1: device descriptor read/64, error -71 [ 489.445031][T18179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.450978][ T5898] Registered IR keymap rc-empty [ 489.468214][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.507103][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.545789][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 489.580711][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input12 [ 489.608512][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.634264][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.677903][ T5897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 489.686429][T14655] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 489.697669][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.712217][T14655] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 489.737471][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.757123][T14655] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 489.767611][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.788216][T14655] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 489.796875][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.834506][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.854587][ T5897] usb 3-1: device descriptor read/64, error -71 [ 489.866028][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.885005][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.917985][ T5898] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 489.948457][ T5898] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 489.973850][ T5898] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 489.982722][ T5897] usb usb3-port1: attempt power cycle [ 490.046785][ T5898] usb 10-1: USB disconnect, device number 26 [ 490.354223][ T5897] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 490.384951][ T5897] usb 3-1: device descriptor read/8, error -71 [ 490.634944][ T5897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 490.667950][ T5897] usb 3-1: device descriptor read/8, error -71 [ 490.722582][ T5839] usb 1-1: USB disconnect, device number 35 [ 490.765831][T14104] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 490.788616][ T5897] usb usb3-port1: unable to enumerate USB device [ 490.887079][T18273] FAULT_INJECTION: forcing a failure. [ 490.887079][T18273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.900439][T18273] CPU: 0 UID: 0 PID: 18273 Comm: syz.0.3886 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 490.900461][T18273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.900472][T18273] Call Trace: [ 490.900479][T18273] [ 490.900486][T18273] dump_stack_lvl+0x189/0x250 [ 490.900511][T18273] ? __pfx____ratelimit+0x10/0x10 [ 490.900533][T18273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.900552][T18273] ? __pfx__printk+0x10/0x10 [ 490.900584][T18273] should_fail_ex+0x414/0x560 [ 490.900609][T18273] _copy_to_user+0x31/0xb0 [ 490.900629][T18273] simple_read_from_buffer+0xe1/0x170 [ 490.900654][T18273] proc_fail_nth_read+0x1df/0x250 [ 490.900679][T18273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.900705][T18273] ? rw_verify_area+0x258/0x650 [ 490.900723][T18273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.900746][T18273] vfs_read+0x200/0x980 [ 490.900769][T18273] ? __pfx___mutex_lock+0x10/0x10 [ 490.900791][T18273] ? __pfx_vfs_read+0x10/0x10 [ 490.900810][T18273] ? __fget_files+0x2a/0x420 [ 490.900835][T18273] ? __fget_files+0x3a0/0x420 [ 490.900855][T18273] ? __fget_files+0x2a/0x420 [ 490.900884][T18273] ksys_read+0x145/0x250 [ 490.900915][T18273] ? __pfx_ksys_read+0x10/0x10 [ 490.900931][T18273] ? rcu_is_watching+0x15/0xb0 [ 490.900952][T18273] ? do_syscall_64+0xbe/0x3b0 [ 490.900975][T18273] do_syscall_64+0xfa/0x3b0 [ 490.900995][T18273] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.901015][T18273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.901032][T18273] ? clear_bhb_loop+0x60/0xb0 [ 490.901052][T18273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.901068][T18273] RIP: 0033:0x7fb98738d33c [ 490.901084][T18273] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 490.901100][T18273] RSP: 002b:00007fb988121030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.901117][T18273] RAX: ffffffffffffffda RBX: 00007fb9875b5fa0 RCX: 00007fb98738d33c [ 490.901130][T18273] RDX: 000000000000000f RSI: 00007fb9881210a0 RDI: 0000000000000003 [ 490.901139][T18273] RBP: 00007fb988121090 R08: 0000000000000000 R09: 0000000000000000 [ 490.901149][T18273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.901159][T18273] R13: 0000000000000000 R14: 00007fb9875b5fa0 R15: 00007fff7c524598 [ 490.901186][T18273] [ 491.142029][T14104] usb 10-1: device descriptor read/64, error -71 [ 491.384292][T14104] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 491.423523][T18285] tmpfs: Bad value for 'mpol' [ 491.514893][T14104] usb 10-1: device descriptor read/64, error -71 [ 491.554434][T18291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.574355][ T5897] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 491.625133][T14104] usb usb10-port1: attempt power cycle [ 491.725642][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 491.746069][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.762553][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.794228][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 491.823475][ T5897] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 491.847478][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.880271][ T5897] usb 1-1: Product: syz [ 491.888936][ T5897] usb 1-1: Manufacturer: syz [ 491.900479][ T5897] usb 1-1: SerialNumber: syz [ 491.923755][ T5897] usb 1-1: config 0 descriptor?? [ 491.948104][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.995092][T14104] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 492.045104][T14104] usb 10-1: device descriptor read/8, error -71 [ 492.059858][T18313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'. [ 492.099480][ T5897] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 492.156558][T18284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.213571][T18284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.228908][T14739] udevd[14739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.260093][T18321] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3896'. [ 492.314348][T14104] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 492.346930][ T5839] usb 1-1: USB disconnect, device number 36 [ 492.364030][T14104] usb 10-1: device descriptor read/8, error -71 [ 492.450388][T18329] syzkaller1: left promiscuous mode [ 492.458069][T18329] syzkaller1: left allmulticast mode [ 492.482285][T18329] afs: Unknown parameter 'dynkaller1' [ 492.502846][T14104] usb usb10-port1: unable to enumerate USB device [ 492.609461][T18335] FAULT_INJECTION: forcing a failure. [ 492.609461][T18335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.632194][T18335] CPU: 1 UID: 0 PID: 18335 Comm: syz.2.3900 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 492.632219][T18335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.632231][T18335] Call Trace: [ 492.632238][T18335] [ 492.632246][T18335] dump_stack_lvl+0x189/0x250 [ 492.632267][T18335] ? __pfx____ratelimit+0x10/0x10 [ 492.632287][T18335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.632304][T18335] ? __pfx__printk+0x10/0x10 [ 492.632334][T18335] should_fail_ex+0x414/0x560 [ 492.632356][T18335] _copy_to_user+0x31/0xb0 [ 492.632378][T18335] simple_read_from_buffer+0xe1/0x170 [ 492.632405][T18335] proc_fail_nth_read+0x1df/0x250 [ 492.632431][T18335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.632456][T18335] ? rw_verify_area+0x258/0x650 [ 492.632474][T18335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.632507][T18335] vfs_read+0x200/0x980 [ 492.632532][T18335] ? __pfx___mutex_lock+0x10/0x10 [ 492.632555][T18335] ? __pfx_vfs_read+0x10/0x10 [ 492.632575][T18335] ? __fget_files+0x2a/0x420 [ 492.632600][T18335] ? __fget_files+0x3a0/0x420 [ 492.632619][T18335] ? __fget_files+0x2a/0x420 [ 492.632646][T18335] ksys_read+0x145/0x250 [ 492.632671][T18335] ? __pfx_ksys_read+0x10/0x10 [ 492.632687][T18335] ? rcu_is_watching+0x15/0xb0 [ 492.632708][T18335] ? do_syscall_64+0xbe/0x3b0 [ 492.632732][T18335] do_syscall_64+0xfa/0x3b0 [ 492.632752][T18335] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.632770][T18335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.632786][T18335] ? clear_bhb_loop+0x60/0xb0 [ 492.632807][T18335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.632824][T18335] RIP: 0033:0x7f4fccd8d33c [ 492.632838][T18335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 492.632851][T18335] RSP: 002b:00007f4fcdb7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.632869][T18335] RAX: ffffffffffffffda RBX: 00007f4fccfb5fa0 RCX: 00007f4fccd8d33c [ 492.632882][T18335] RDX: 000000000000000f RSI: 00007f4fcdb7e0a0 RDI: 0000000000000003 [ 492.632892][T18335] RBP: 00007f4fcdb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.632901][T18335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.632910][T18335] R13: 0000000000000000 R14: 00007f4fccfb5fa0 R15: 00007fffb94f9018 [ 492.632937][T18335] [ 493.213872][T18352] netlink: 'syz.2.3905': attribute type 11 has an invalid length. [ 493.221778][T18352] FAULT_INJECTION: forcing a failure. [ 493.221778][T18352] name failslab, interval 1, probability 0, space 0, times 0 [ 493.263406][T18352] CPU: 1 UID: 0 PID: 18352 Comm: syz.2.3905 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 493.263436][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.263447][T18352] Call Trace: [ 493.263455][T18352] [ 493.263463][T18352] dump_stack_lvl+0x189/0x250 [ 493.263488][T18352] ? __pfx____ratelimit+0x10/0x10 [ 493.263509][T18352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.263528][T18352] ? __pfx__printk+0x10/0x10 [ 493.263553][T18352] ? __pfx___might_resched+0x10/0x10 [ 493.263569][T18352] ? fs_reclaim_acquire+0x7d/0x100 [ 493.263595][T18352] should_fail_ex+0x414/0x560 [ 493.263619][T18352] should_failslab+0xa8/0x100 [ 493.263640][T18352] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 493.263660][T18352] ? __alloc_skb+0x112/0x2d0 [ 493.263687][T18352] __alloc_skb+0x112/0x2d0 [ 493.263713][T18352] netlink_ack+0x146/0xa50 [ 493.263733][T18352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.263747][T18352] ? ref_tracker_free+0x63a/0x7d0 [ 493.263764][T18352] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 493.263781][T18352] ? __pfx_nl80211_post_doit+0x10/0x10 [ 493.263798][T18352] ? __pfx_ref_tracker_free+0x10/0x10 [ 493.263829][T18352] netlink_rcv_skb+0x28c/0x470 [ 493.263852][T18352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.263871][T18352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.263909][T18352] ? down_read+0x1ad/0x2e0 [ 493.263934][T18352] genl_rcv+0x28/0x40 [ 493.263949][T18352] netlink_unicast+0x75b/0x8d0 [ 493.263981][T18352] netlink_sendmsg+0x805/0xb30 [ 493.264012][T18352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.264038][T18352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.264061][T18352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.264082][T18352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.264103][T18352] __sock_sendmsg+0x219/0x270 [ 493.264126][T18352] ____sys_sendmsg+0x505/0x830 [ 493.264156][T18352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.264189][T18352] ? import_iovec+0x74/0xa0 [ 493.264221][T18352] ___sys_sendmsg+0x21f/0x2a0 [ 493.264248][T18352] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.264308][T18352] ? __fget_files+0x2a/0x420 [ 493.264330][T18352] ? __fget_files+0x3a0/0x420 [ 493.264361][T18352] __x64_sys_sendmsg+0x19b/0x260 [ 493.264381][T18352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.264415][T18352] ? __pfx_ksys_write+0x10/0x10 [ 493.264432][T18352] ? rcu_is_watching+0x15/0xb0 [ 493.264454][T18352] ? do_syscall_64+0xbe/0x3b0 [ 493.264479][T18352] do_syscall_64+0xfa/0x3b0 [ 493.264499][T18352] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.264519][T18352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.264536][T18352] ? clear_bhb_loop+0x60/0xb0 [ 493.264557][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.264574][T18352] RIP: 0033:0x7f4fccd8e929 [ 493.264590][T18352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.264605][T18352] RSP: 002b:00007f4fcdb7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.264624][T18352] RAX: ffffffffffffffda RBX: 00007f4fccfb5fa0 RCX: 00007f4fccd8e929 [ 493.264636][T18352] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 493.264647][T18352] RBP: 00007f4fcdb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 493.264659][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.264669][T18352] R13: 0000000000000000 R14: 00007f4fccfb5fa0 R15: 00007fffb94f9018 [ 493.264698][T18352] [ 493.878656][T18368] bond0: (slave rose0): Enslaving as an active interface with an up link [ 493.966976][T18375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.163986][T18375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.202857][T18375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.210791][T18387] fuseblk: Unknown parameter 'groupAA%?RU_id' [ 494.237002][T18375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.247186][ T3082] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 494.417958][ T3082] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.441996][ T3082] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.472153][ T3082] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.494832][ T3082] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.520848][ T3082] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.541899][ T3082] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.592515][ T3082] usb 10-1: config 0 descriptor?? [ 494.924187][T14655] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 495.009177][ T3082] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 495.099310][ T3082] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 495.138866][T14655] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 495.165138][T14655] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 495.203336][T14655] usb 2-1: config 1 interface 0 has no altsetting 0 [ 495.237591][T14655] usb 2-1: string descriptor 0 read error: -22 [ 495.247015][T14655] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.269811][T14655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.335335][T18400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.342635][T18400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.401991][T14655] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 495.533265][T18432] process 'syz.2.3921' launched '/dev/fd/5' with NULL argv: empty string added [ 495.590823][T18434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3921'. [ 495.611151][T18440] program syz.0.3920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.640059][T18434] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3921'. [ 495.678110][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 495.714721][T14655] usb 2-1: USB disconnect, device number 32 [ 496.030098][T18450] NILFS (rnullb0): couldn't find nilfs on the device [ 496.332203][T18457] FAULT_INJECTION: forcing a failure. [ 496.332203][T18457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.373785][T18457] CPU: 0 UID: 0 PID: 18457 Comm: syz.2.3925 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 496.373810][T18457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.373822][T18457] Call Trace: [ 496.373829][T18457] [ 496.373837][T18457] dump_stack_lvl+0x189/0x250 [ 496.373859][T18457] ? __pfx____ratelimit+0x10/0x10 [ 496.373879][T18457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.373898][T18457] ? __pfx__printk+0x10/0x10 [ 496.373926][T18457] ? __might_fault+0xb0/0x130 [ 496.373953][T18457] should_fail_ex+0x414/0x560 [ 496.373975][T18457] _copy_from_user+0x2d/0xb0 [ 496.373995][T18457] ___sys_sendmsg+0x158/0x2a0 [ 496.374021][T18457] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.374086][T18457] ? __might_fault+0xb0/0x130 [ 496.374107][T18457] __sys_sendmmsg+0x227/0x430 [ 496.374127][T18457] ? __pfx___sys_sendmmsg+0x10/0x10 [ 496.374140][T18457] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 496.374184][T18457] ? ksys_write+0x22a/0x250 [ 496.374204][T18457] ? __pfx_ksys_write+0x10/0x10 [ 496.374219][T18457] ? rcu_is_watching+0x15/0xb0 [ 496.374241][T18457] __x64_sys_sendmmsg+0xa0/0xc0 [ 496.374259][T18457] do_syscall_64+0xfa/0x3b0 [ 496.374277][T18457] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.374296][T18457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.374313][T18457] ? clear_bhb_loop+0x60/0xb0 [ 496.374332][T18457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.374347][T18457] RIP: 0033:0x7f4fccd8e929 [ 496.374362][T18457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.374377][T18457] RSP: 002b:00007f4fcdb7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 496.374396][T18457] RAX: ffffffffffffffda RBX: 00007f4fccfb5fa0 RCX: 00007f4fccd8e929 [ 496.374409][T18457] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 496.374421][T18457] RBP: 00007f4fcdb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 496.374432][T18457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.374442][T18457] R13: 0000000000000000 R14: 00007f4fccfb5fa0 R15: 00007fffb94f9018 [ 496.374468][T18457] [ 496.900070][T18471] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 497.087073][T18476] input: syz0 as /devices/virtual/input/input13 [ 497.088395][ T5877] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 497.183333][T18481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 497.214604][T18476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 497.231751][T18481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 497.260869][T18476] /dev/rnullb0: Can't open blockdev [ 497.424434][ T5897] usb 10-1: USB disconnect, device number 31 [ 497.456731][ T5877] usb 3-1: not running at top speed; connect to a high speed hub [ 497.481013][ T5877] usb 3-1: config 5 has an invalid interface number: 171 but max is 0 [ 497.499595][ T5877] usb 3-1: config 5 has no interface number 0 [ 497.509950][ T5877] usb 3-1: config 5 interface 171 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 497.527939][ T5877] usb 3-1: config 5 interface 171 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 497.542500][ T5877] usb 3-1: config 5 interface 171 has no altsetting 0 [ 497.587929][ T5877] usb 3-1: New USB device found, idVendor=041e, idProduct=405b, bcdDevice=f7.1d [ 497.600090][ T30] audit: type=1326 audit(1751200196.795:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18463 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5bb38e929 code=0x7fc00000 [ 497.600109][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.668359][ T5877] usb 3-1: Product: 鳇ᧇ嬓專㳚㭂饟필笑߆悒卼쩾䏬皇햩圫㧮柍劼峃ꃘ紐¶國ꕾ疉총튷㊨ᨳ줮ߏ빚㦙ꢸ睨搧揮Η용润䶱좬ㄮ⽺뫎ᣦ㺷厏ִ蕢潑⏗陋Ხ좈䩥푁઄ [ 497.719432][ T5877] usb 3-1: Manufacturer: ࠝ [ 497.724060][ T5877] usb 3-1: SerialNumber: 䎡뉒여翌瞼㍗ꈄ糟눣䃞뀙₟ඐ訟鹢콚ꃭ⠇篊腀ﷱ糫樴ꮙ쉋 [ 497.776601][T18466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.969249][ T5842] Bluetooth: hci1: unexpected event for opcode 0x203c [ 498.010936][ T5877] gspca_main: vc032x-2.14.0 probing 041e:405b [ 498.032902][ T5877] gspca_vc032x: reg_r err -71 [ 498.038512][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.043809][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.068131][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.073437][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.103158][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.119213][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.138202][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.143505][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.168450][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.173756][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.180155][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.188663][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.193956][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.221340][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.238117][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.243414][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.260576][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.284133][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.289435][ T5877] gspca_vc032x: I2c Bus Busy Wait 00 [ 498.304131][ T5877] gspca_vc032x: Unknown sensor... [ 498.317612][ T5877] vc032x 3-1:5.171: probe with driver vc032x failed with error -22 [ 498.337073][ T3082] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 498.358909][ T5877] usb 3-1: USB disconnect, device number 25 [ 498.504482][T18517] FAULT_INJECTION: forcing a failure. [ 498.504482][T18517] name failslab, interval 1, probability 0, space 0, times 0 [ 498.536298][ T3082] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 498.557440][T18517] CPU: 1 UID: 0 PID: 18517 Comm: syz.9.3940 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 498.557465][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.557476][T18517] Call Trace: [ 498.557484][T18517] [ 498.557493][T18517] dump_stack_lvl+0x189/0x250 [ 498.557516][T18517] ? __pfx____ratelimit+0x10/0x10 [ 498.557538][T18517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.557556][T18517] ? __pfx__printk+0x10/0x10 [ 498.557581][T18517] ? __pfx___might_resched+0x10/0x10 [ 498.557598][T18517] ? fs_reclaim_acquire+0x7d/0x100 [ 498.557624][T18517] should_fail_ex+0x414/0x560 [ 498.557649][T18517] should_failslab+0xa8/0x100 [ 498.557671][T18517] kmem_cache_alloc_noprof+0x73/0x3c0 [ 498.557689][T18517] ? __kernfs_new_node+0xd7/0x7e0 [ 498.557725][T18517] __kernfs_new_node+0xd7/0x7e0 [ 498.557747][T18517] ? __lock_acquire+0xab9/0xd20 [ 498.557778][T18517] ? __pfx___kernfs_new_node+0x10/0x10 [ 498.557803][T18517] ? kernfs_root+0x1c/0x230 [ 498.557832][T18517] ? kernfs_root+0x1c/0x230 [ 498.557854][T18517] ? kernfs_root+0x1c/0x230 [ 498.557873][T18517] ? kernfs_root+0x1c/0x230 [ 498.557901][T18517] kernfs_new_node+0x102/0x210 [ 498.557931][T18517] __kernfs_create_file+0x4b/0x2e0 [ 498.557954][T18517] sysfs_add_file_mode_ns+0x238/0x300 [ 498.557984][T18517] sysfs_create_file_ns+0x128/0x1a0 [ 498.558005][T18517] ? __pfx_set_disk_ro+0x10/0x10 [ 498.558025][T18517] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 498.558051][T18517] ? up_write+0x1c4/0x420 [ 498.558069][T18517] ? device_create_file+0xf4/0x1c0 [ 498.558090][T18517] nbd_start_device+0x250/0xac0 [ 498.558119][T18517] ? __nla_parse+0x40/0x60 [ 498.558145][T18517] nbd_genl_connect+0x1250/0x1930 [ 498.558179][T18517] ? __pfx_nbd_genl_connect+0x10/0x10 [ 498.558217][T18517] ? __nla_parse+0x40/0x60 [ 498.558242][T18517] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 498.558270][T18517] genl_family_rcv_msg_doit+0x215/0x300 [ 498.558296][T18517] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.558339][T18517] genl_rcv_msg+0x60e/0x790 [ 498.558363][T18517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.558380][T18517] ? __pfx_nbd_genl_connect+0x10/0x10 [ 498.558422][T18517] netlink_rcv_skb+0x208/0x470 [ 498.558446][T18517] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.558465][T18517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.558505][T18517] ? down_read+0x1ad/0x2e0 [ 498.558531][T18517] genl_rcv+0x28/0x40 [ 498.558546][T18517] netlink_unicast+0x75b/0x8d0 [ 498.558579][T18517] netlink_sendmsg+0x805/0xb30 [ 498.558611][T18517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.558637][T18517] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.558661][T18517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.558684][T18517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.558707][T18517] __sock_sendmsg+0x219/0x270 [ 498.558736][T18517] ____sys_sendmsg+0x505/0x830 [ 498.558767][T18517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.558801][T18517] ? import_iovec+0x74/0xa0 [ 498.558825][T18517] ___sys_sendmsg+0x21f/0x2a0 [ 498.558852][T18517] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.558915][T18517] ? __fget_files+0x2a/0x420 [ 498.558937][T18517] ? __fget_files+0x3a0/0x420 [ 498.558969][T18517] __x64_sys_sendmsg+0x19b/0x260 [ 498.558989][T18517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.559024][T18517] ? __pfx_ksys_write+0x10/0x10 [ 498.559042][T18517] ? rcu_is_watching+0x15/0xb0 [ 498.559064][T18517] ? do_syscall_64+0xbe/0x3b0 [ 498.559090][T18517] do_syscall_64+0xfa/0x3b0 [ 498.559109][T18517] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.559130][T18517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.559147][T18517] ? clear_bhb_loop+0x60/0xb0 [ 498.559168][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.559184][T18517] RIP: 0033:0x7fa279f8e929 [ 498.559200][T18517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.559215][T18517] RSP: 002b:00007fa27ad11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.559234][T18517] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8e929 [ 498.559248][T18517] RDX: 00000000040100c4 RSI: 0000200000000900 RDI: 0000000000000004 [ 498.559259][T18517] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 498.559270][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.559280][T18517] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 498.559310][T18517] [ 498.561939][T18517] block nbd0: device_create_file failed for pid! [ 499.005442][ T3082] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.024115][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.032122][ T3082] usb 1-1: Product: syz [ 499.044345][ T3082] usb 1-1: Manufacturer: syz [ 499.048958][ T3082] usb 1-1: SerialNumber: syz [ 499.054646][T18517] block nbd0: shutting down sockets [ 499.094212][T18506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.101501][T18506] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.140784][T18526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.301766][T18537] FAULT_INJECTION: forcing a failure. [ 499.301766][T18537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.329382][T18537] CPU: 0 UID: 0 PID: 18537 Comm: syz.9.3944 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 499.329408][T18537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.329419][T18537] Call Trace: [ 499.329427][T18537] [ 499.329435][T18537] dump_stack_lvl+0x189/0x250 [ 499.329460][T18537] ? __pfx____ratelimit+0x10/0x10 [ 499.329482][T18537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.329501][T18537] ? __pfx__printk+0x10/0x10 [ 499.329533][T18537] should_fail_ex+0x414/0x560 [ 499.329557][T18537] _copy_to_user+0x31/0xb0 [ 499.329579][T18537] simple_read_from_buffer+0xe1/0x170 [ 499.329606][T18537] proc_fail_nth_read+0x1df/0x250 [ 499.329633][T18537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.329666][T18537] ? rw_verify_area+0x258/0x650 [ 499.329686][T18537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.329711][T18537] vfs_read+0x200/0x980 [ 499.329736][T18537] ? __pfx___mutex_lock+0x10/0x10 [ 499.329758][T18537] ? __pfx_vfs_read+0x10/0x10 [ 499.329777][T18537] ? __fget_files+0x2a/0x420 [ 499.329802][T18537] ? __fget_files+0x3a0/0x420 [ 499.329821][T18537] ? __fget_files+0x2a/0x420 [ 499.329850][T18537] ksys_read+0x145/0x250 [ 499.329871][T18537] ? __pfx_ksys_read+0x10/0x10 [ 499.329887][T18537] ? rcu_is_watching+0x15/0xb0 [ 499.329910][T18537] ? do_syscall_64+0xbe/0x3b0 [ 499.329936][T18537] do_syscall_64+0xfa/0x3b0 [ 499.329955][T18537] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.329976][T18537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.329993][T18537] ? clear_bhb_loop+0x60/0xb0 [ 499.330014][T18537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.330030][T18537] RIP: 0033:0x7fa279f8d33c [ 499.330047][T18537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 499.330061][T18537] RSP: 002b:00007fa27ad11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.330080][T18537] RAX: ffffffffffffffda RBX: 00007fa27a1b5fa0 RCX: 00007fa279f8d33c [ 499.330093][T18537] RDX: 000000000000000f RSI: 00007fa27ad110a0 RDI: 0000000000000003 [ 499.330104][T18537] RBP: 00007fa27ad11090 R08: 0000000000000000 R09: 0000000000000000 [ 499.330115][T18537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.330125][T18537] R13: 0000000000000000 R14: 00007fa27a1b5fa0 R15: 00007ffc5f6e16c8 [ 499.330154][T18537] [ 499.363867][ T3082] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 499.609580][ T3082] usb 1-1: USB disconnect, device number 37 [ 499.944361][ T3082] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 500.119912][T18566] netlink: 'syz.2.3949': attribute type 28 has an invalid length. [ 500.154608][ T3082] usb 1-1: Using ep0 maxpacket: 8 [ 500.161894][ T3082] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 500.184233][ T3082] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.226600][ T3082] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.267002][ T3082] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 500.301643][ T3082] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 500.331749][ T3082] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.368299][ T3082] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 500.380021][ T3082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.419952][ T3082] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 501.015193][T18606] FAULT_INJECTION: forcing a failure. [ 501.015193][T18606] name failslab, interval 1, probability 0, space 0, times 0 [ 501.041034][T18606] CPU: 0 UID: 0 PID: 18606 Comm: syz.1.3959 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 501.041059][T18606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.041070][T18606] Call Trace: [ 501.041078][T18606] [ 501.041086][T18606] dump_stack_lvl+0x189/0x250 [ 501.041111][T18606] ? __pfx____ratelimit+0x10/0x10 [ 501.041132][T18606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.041152][T18606] ? __pfx__printk+0x10/0x10 [ 501.041186][T18606] should_fail_ex+0x414/0x560 [ 501.041210][T18606] should_failslab+0xa8/0x100 [ 501.041232][T18606] kmem_cache_alloc_noprof+0x73/0x3c0 [ 501.041251][T18606] ? skb_clone+0x212/0x3a0 [ 501.041272][T18606] skb_clone+0x212/0x3a0 [ 501.041292][T18606] __netlink_deliver_tap+0x404/0x850 [ 501.041328][T18606] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041348][T18606] netlink_deliver_tap+0x19c/0x1b0 [ 501.041370][T18606] netlink_sendskb+0x68/0x140 [ 501.041392][T18606] netlink_rcv_skb+0x28c/0x470 [ 501.041415][T18606] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 501.041436][T18606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.041469][T18606] ? bpf_lsm_capable+0x9/0x20 [ 501.041486][T18606] ? security_capable+0x7e/0x2e0 [ 501.041514][T18606] nfnetlink_rcv+0x26a/0x2520 [ 501.041535][T18606] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 501.041558][T18606] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 501.041579][T18606] ? __dev_queue_xmit+0x27e/0x3a70 [ 501.041597][T18606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.041625][T18606] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 501.041644][T18606] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.041675][T18606] ? ref_tracker_free+0x63a/0x7d0 [ 501.041693][T18606] ? __copy_skb_header+0xa7/0x550 [ 501.041712][T18606] ? __pfx_ref_tracker_free+0x10/0x10 [ 501.041738][T18606] ? __skb_clone+0x63/0x7a0 [ 501.041760][T18606] ? __skb_clone+0x483/0x7a0 [ 501.041784][T18606] ? skb_clone+0x246/0x3a0 [ 501.041804][T18606] ? __netlink_deliver_tap+0x807/0x850 [ 501.041824][T18606] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041852][T18606] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041873][T18606] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.041900][T18606] netlink_unicast+0x75b/0x8d0 [ 501.041932][T18606] netlink_sendmsg+0x805/0xb30 [ 501.041964][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.041990][T18606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.042013][T18606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.042035][T18606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.042058][T18606] __sock_sendmsg+0x219/0x270 [ 501.042082][T18606] ____sys_sendmsg+0x505/0x830 [ 501.042113][T18606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.042147][T18606] ? import_iovec+0x74/0xa0 [ 501.042170][T18606] ___sys_sendmsg+0x21f/0x2a0 [ 501.042197][T18606] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.042259][T18606] ? __fget_files+0x2a/0x420 [ 501.042280][T18606] ? __fget_files+0x3a0/0x420 [ 501.042312][T18606] __x64_sys_sendmsg+0x19b/0x260 [ 501.042332][T18606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.042367][T18606] ? __pfx_ksys_write+0x10/0x10 [ 501.042383][T18606] ? rcu_is_watching+0x15/0xb0 [ 501.042406][T18606] ? do_syscall_64+0xbe/0x3b0 [ 501.042431][T18606] do_syscall_64+0xfa/0x3b0 [ 501.042451][T18606] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.042472][T18606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.042488][T18606] ? clear_bhb_loop+0x60/0xb0 [ 501.042510][T18606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.042526][T18606] RIP: 0033:0x7ff5bb38e929 [ 501.042542][T18606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.042557][T18606] RSP: 002b:00007ff5bc168038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.042576][T18606] RAX: ffffffffffffffda RBX: 00007ff5bb5b5fa0 RCX: 00007ff5bb38e929 [ 501.042589][T18606] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 501.042600][T18606] RBP: 00007ff5bc168090 R08: 0000000000000000 R09: 0000000000000000 [ 501.042611][T18606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.042621][T18606] R13: 0000000000000000 R14: 00007ff5bb5b5fa0 R15: 00007fffb33c36f8 [ 501.042649][T18606] [ 501.456309][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.462691][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537841][T18612] FAULT_INJECTION: forcing a failure. [ 501.537841][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 501.581268][T18612] CPU: 1 UID: 0 PID: 18612 Comm: syz.1.3960 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 501.581294][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.581305][T18612] Call Trace: [ 501.581313][T18612] [ 501.581321][T18612] dump_stack_lvl+0x189/0x250 [ 501.581345][T18612] ? __pfx____ratelimit+0x10/0x10 [ 501.581367][T18612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.581386][T18612] ? __pfx__printk+0x10/0x10 [ 501.581412][T18612] ? __pfx___might_resched+0x10/0x10 [ 501.581429][T18612] ? fs_reclaim_acquire+0x7d/0x100 [ 501.581462][T18612] should_fail_ex+0x414/0x560 [ 501.581488][T18612] should_failslab+0xa8/0x100 [ 501.581511][T18612] __kmalloc_cache_noprof+0x70/0x3d0 [ 501.581531][T18612] ? nfnetlink_rcv+0xeff/0x2520 [ 501.581553][T18612] nfnetlink_rcv+0xeff/0x2520 [ 501.581603][T18612] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 501.581639][T18612] ? ref_tracker_free+0x63a/0x7d0 [ 501.581693][T18612] ? __netlink_deliver_tap+0x807/0x850 [ 501.581729][T18612] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.581750][T18612] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.581778][T18612] netlink_unicast+0x75b/0x8d0 [ 501.581811][T18612] netlink_sendmsg+0x805/0xb30 [ 501.581844][T18612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.581870][T18612] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.581893][T18612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.581915][T18612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.581936][T18612] __sock_sendmsg+0x219/0x270 [ 501.581959][T18612] ____sys_sendmsg+0x505/0x830 [ 501.581990][T18612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.582021][T18612] ? import_iovec+0x74/0xa0 [ 501.582044][T18612] ___sys_sendmsg+0x21f/0x2a0 [ 501.582069][T18612] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.582126][T18612] ? __fget_files+0x2a/0x420 [ 501.582146][T18612] ? __fget_files+0x3a0/0x420 [ 501.582177][T18612] __x64_sys_sendmsg+0x19b/0x260 [ 501.582197][T18612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.582230][T18612] ? __pfx_ksys_write+0x10/0x10 [ 501.582247][T18612] ? rcu_is_watching+0x15/0xb0 [ 501.582269][T18612] ? do_syscall_64+0xbe/0x3b0 [ 501.582294][T18612] do_syscall_64+0xfa/0x3b0 [ 501.582315][T18612] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.582335][T18612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.582352][T18612] ? clear_bhb_loop+0x60/0xb0 [ 501.582373][T18612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.582389][T18612] RIP: 0033:0x7ff5bb38e929 [ 501.582406][T18612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.582420][T18612] RSP: 002b:00007ff5bc168038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.582445][T18612] RAX: ffffffffffffffda RBX: 00007ff5bb5b5fa0 RCX: 00007ff5bb38e929 [ 501.582457][T18612] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 501.582467][T18612] RBP: 00007ff5bc168090 R08: 0000000000000000 R09: 0000000000000000 [ 501.582478][T18612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.582487][T18612] R13: 0000000000000000 R14: 00007ff5bb5b5fa0 R15: 00007fffb33c36f8 [ 501.582516][T18612] [ 502.005685][ T3082] ------------[ cut here ]------------ [ 502.011935][ T3082] WARNING: net/ipv6/ip6mr.c:2376 at ip6_mr_output+0xe0b/0x1040, CPU#1: kworker/1:2/3082 [ 502.021750][ T3082] Modules linked in: [ 502.026273][ T3082] CPU: 1 UID: 0 PID: 3082 Comm: kworker/1:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 502.037852][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.047939][ T3082] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 502.054027][ T3082] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 502.059529][ T3082] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 00 16 1b ff e9 a7 fd ff ff e8 76 3e 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 68 3e 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 502.079162][ T3082] RSP: 0018:ffffc9000c7bf4e0 EFLAGS: 00010293 [ 502.085273][ T3082] RAX: ffffffff8a39e3ea RBX: 0000000000000000 RCX: ffff88802f933c00 [ 502.093252][ T3082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.101262][ T3082] RBP: ffffc9000c7bf758 R08: ffffc9000c7bf6c7 R09: 0000000000000000 [ 502.109271][ T3082] R10: ffffc9000c7bf670 R11: fffff520018f7ed9 R12: 1ffff920018f7eac [ 502.117269][ T3082] R13: dffffc0000000000 R14: ffffc9000c7bf670 R15: ffff888052106c80 [ 502.125284][ T3082] FS: 0000000000000000(0000) GS:ffff888125ae6000(0000) knlGS:0000000000000000 [ 502.134238][ T3082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.140827][ T3082] CR2: 00007f87de73d250 CR3: 0000000066764000 CR4: 00000000003526f0 [ 502.148844][ T3082] Call Trace: [ 502.152127][ T3082] [ 502.155091][ T3082] ? __pfx_ip6t_do_table+0x10/0x10 [ 502.160221][ T3082] ? __pfx_ip6_mr_output+0x10/0x10 [ 502.165382][ T3082] ? __ip6_local_out+0x609/0x870 [ 502.170340][ T3082] ? __ip6_local_out+0x82c/0x870 [ 502.175320][ T3082] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 502.180702][ T3082] ? __ip6_local_out+0x609/0x870 [ 502.185699][ T3082] ? __lock_acquire+0xab9/0xd20 [ 502.190561][ T3082] ? udp6_set_csum+0x995/0xee0 [ 502.195360][ T3082] ? skb_dst+0x4f/0xd0 [ 502.199453][ T3082] ? dst_output+0x177/0x1c0 [ 502.203980][ T3082] udp_tunnel6_xmit_skb+0x640/0xad0 [ 502.209256][ T3082] send6+0x5ac/0x8d0 [ 502.213170][ T3082] ? send6+0x220/0x8d0 [ 502.217296][ T3082] ? __pfx_send6+0x10/0x10 [ 502.221728][ T3082] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 502.227606][ T3082] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 502.233349][ T3082] wg_packet_tx_worker+0x1c8/0x7c0 [ 502.238512][ T3082] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.243721][ T3082] ? process_scheduled_works+0x9ef/0x17b0 [ 502.249492][ T3082] process_scheduled_works+0xade/0x17b0 [ 502.255101][ T3082] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.261112][ T3082] worker_thread+0x8a0/0xda0 [ 502.265776][ T3082] kthread+0x711/0x8a0 [ 502.269865][ T3082] ? __pfx_worker_thread+0x10/0x10 [ 502.275015][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.279620][ T3082] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.284868][ T3082] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.290077][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.294713][ T3082] ret_from_fork+0x3fc/0x770 [ 502.299327][ T3082] ? __pfx_ret_from_fork+0x10/0x10 [ 502.304505][ T3082] ? __switch_to_asm+0x39/0x70 [ 502.309277][ T3082] ? __switch_to_asm+0x33/0x70 [ 502.314051][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.318694][ T3082] ret_from_fork_asm+0x1a/0x30 [ 502.323485][ T3082] [ 502.326546][ T3082] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.333825][ T3082] CPU: 1 UID: 0 PID: 3082 Comm: kworker/1:2 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 502.345352][ T3082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.355395][ T3082] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 502.361464][ T3082] Call Trace: [ 502.364728][ T3082] [ 502.367645][ T3082] dump_stack_lvl+0x99/0x250 [ 502.372222][ T3082] ? __asan_memcpy+0x40/0x70 [ 502.376808][ T3082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.381991][ T3082] ? __pfx__printk+0x10/0x10 [ 502.386577][ T3082] panic+0x2db/0x790 [ 502.390463][ T3082] ? __pfx_panic+0x10/0x10 [ 502.394873][ T3082] ? ret_from_fork_asm+0x1a/0x30 [ 502.399800][ T3082] __warn+0x334/0x4c0 [ 502.403764][ T3082] ? ip6_mr_output+0xe0b/0x1040 [ 502.408607][ T3082] ? ip6_mr_output+0xe0b/0x1040 [ 502.413452][ T3082] report_bug+0x2be/0x4f0 [ 502.417768][ T3082] ? ip6_mr_output+0xe0b/0x1040 [ 502.422606][ T3082] ? ip6_mr_output+0xe0b/0x1040 [ 502.427454][ T3082] ? ip6_mr_output+0xe0d/0x1040 [ 502.432295][ T3082] handle_bug+0x84/0x160 [ 502.436528][ T3082] exc_invalid_op+0x1a/0x50 [ 502.441021][ T3082] asm_exc_invalid_op+0x1a/0x20 [ 502.445855][ T3082] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 502.451301][ T3082] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 00 16 1b ff e9 a7 fd ff ff e8 76 3e 86 f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 68 3e 86 f7 90 0f 0b 90 43 80 3c 2e 00 [ 502.470889][ T3082] RSP: 0018:ffffc9000c7bf4e0 EFLAGS: 00010293 [ 502.476943][ T3082] RAX: ffffffff8a39e3ea RBX: 0000000000000000 RCX: ffff88802f933c00 [ 502.484898][ T3082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.492853][ T3082] RBP: ffffc9000c7bf758 R08: ffffc9000c7bf6c7 R09: 0000000000000000 [ 502.500805][ T3082] R10: ffffc9000c7bf670 R11: fffff520018f7ed9 R12: 1ffff920018f7eac [ 502.508760][ T3082] R13: dffffc0000000000 R14: ffffc9000c7bf670 R15: ffff888052106c80 [ 502.516723][ T3082] ? ip6_mr_output+0xe0a/0x1040 [ 502.521580][ T3082] ? __pfx_ip6t_do_table+0x10/0x10 [ 502.526707][ T3082] ? __pfx_ip6_mr_output+0x10/0x10 [ 502.531821][ T3082] ? __ip6_local_out+0x609/0x870 [ 502.536752][ T3082] ? __ip6_local_out+0x82c/0x870 [ 502.541680][ T3082] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 502.547044][ T3082] ? __ip6_local_out+0x609/0x870 [ 502.551982][ T3082] ? __lock_acquire+0xab9/0xd20 [ 502.556825][ T3082] ? udp6_set_csum+0x995/0xee0 [ 502.561574][ T3082] ? skb_dst+0x4f/0xd0 [ 502.565633][ T3082] ? dst_output+0x177/0x1c0 [ 502.570126][ T3082] udp_tunnel6_xmit_skb+0x640/0xad0 [ 502.575326][ T3082] send6+0x5ac/0x8d0 [ 502.579215][ T3082] ? send6+0x220/0x8d0 [ 502.583283][ T3082] ? __pfx_send6+0x10/0x10 [ 502.587686][ T3082] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 502.593497][ T3082] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 502.599209][ T3082] wg_packet_tx_worker+0x1c8/0x7c0 [ 502.604313][ T3082] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.609496][ T3082] ? process_scheduled_works+0x9ef/0x17b0 [ 502.615209][ T3082] process_scheduled_works+0xade/0x17b0 [ 502.620766][ T3082] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.626751][ T3082] worker_thread+0x8a0/0xda0 [ 502.631351][ T3082] kthread+0x711/0x8a0 [ 502.635409][ T3082] ? __pfx_worker_thread+0x10/0x10 [ 502.640504][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.645083][ T3082] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.650268][ T3082] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.655448][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.660026][ T3082] ret_from_fork+0x3fc/0x770 [ 502.664609][ T3082] ? __pfx_ret_from_fork+0x10/0x10 [ 502.669713][ T3082] ? __switch_to_asm+0x39/0x70 [ 502.674462][ T3082] ? __switch_to_asm+0x33/0x70 [ 502.679210][ T3082] ? __pfx_kthread+0x10/0x10 [ 502.683785][ T3082] ret_from_fork_asm+0x1a/0x30 [ 502.688551][ T3082] [ 502.691784][ T3082] Kernel Offset: disabled [ 502.696093][ T3082] Rebooting in 86400 seconds..