last executing test programs: 4m48.677806659s ago: executing program 4 (id=3013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r1, &(0x7f0000000000)='ethtool\x00', 0x15e8f15724d492d9) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 4m48.523881006s ago: executing program 4 (id=3014): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x203104, 0xc, 0x7, 0x401, 0x7, 0x0, 0x0, 0x80, 0x8}}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f6ecc35ecff6796100f236f757cafe08f02725ce04c090dbe747d4f5ce27aa6ea4f3f92515cc63e09c8467", 0x2b}, {&(0x7f00000006c0)="18f89e083e27335464a5949d5156aee5e53e38bd8afbacaabec07d4ff6c529ca56290639546170fcb3c964cd9a6ad2457e9faf7c5bb057e3a191569534b9", 0x3e}, {&(0x7f0000000580)="3af36ffe5ae18eefcc87a22877", 0xd}, {&(0x7f0000000600)="daf6a865dbdb0d44bfbe44ec87978e934809ec890a060a6fb55e1c0eec", 0x1d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)="7cfb74fafe0b9e8b30b676d3abdbc0549b80acb76934c3e8d06f4ac0f0d7dcef56f47a6add8f7718f363c0268e04d2ff1cf2c0cc0a5f74989ada9091559af4bc5ec45c82cfcc1cbeeac788f505a76727124ad9c506087c7ef86c640519ceb3729f9077c8b5a02dbaabae2a8cb7967598fac0f9e7f5e78a895908c51bd0958125d9b75db3dc99236260d8a16188d18ab7bbaee5b3aacea5", 0x97}], 0x1}}], 0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m48.294357253s ago: executing program 4 (id=3015): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000001c0)={0x1, 0x1}, 0x2) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$inet(r1, &(0x7f0000000a00)="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", 0x1000, 0x100, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000002b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x894, r3}, 0x38) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc, 0x40000000000}, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x7, 0x4, 0x0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xca}, 0x2) 4m45.744610293s ago: executing program 4 (id=3019): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) rseq(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ftruncate(r0, 0x65ec) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x4, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r6 = dup2(r5, r1) fallocate(r6, 0x10, 0x9, 0x3ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x0, 0x1000, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 4m44.653460018s ago: executing program 4 (id=3023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x404}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240040c8}, 0x840) (fail_nth: 6) 4m43.19278742s ago: executing program 4 (id=3028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x56) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) r3 = semget$private(0x0, 0x1, 0x8) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0xff]) 4m42.884676235s ago: executing program 32 (id=3028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x56) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0xccd4453e7e835cf8, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) r3 = semget$private(0x0, 0x1, 0x8) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0xff]) 2m48.692226328s ago: executing program 2 (id=3380): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x42000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, &(0x7f0000000ac0)) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010002000000000000000200000014000200d9816e643000000000000000000000000900010073"], 0x34}}, 0x800) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="100026bd7000fddbdf250100000005000400010000000900000000001400020064766d72703000"/54], 0x3c}}, 0x40010) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000005c0)) 2m45.614947747s ago: executing program 2 (id=3384): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1198, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1030, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xdd, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744", @nested={0x4, 0x4f}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8accb6683360dd814cd20a0"]}]}, 0x1198}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.019668052s ago: executing program 2 (id=3389): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x9, 0x203104, 0xc, 0x7, 0x401, 0x7, 0x0, 0x0, 0x80, 0x8}}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @random="7cf1e97c9e4f"}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="f6ecc35ecff6796100f236f757cafe08f02725ce04c090dbe747d4f5ce27aa6ea4f3f92515cc63e09c8467", 0x2b}, {&(0x7f00000006c0)="18f89e083e27335464a5949d5156aee5e53e38bd8afbacaabec07d4ff6c529ca56290639546170fcb3c964cd9a6ad2457e9faf7c5bb057e3a191569534b9", 0x3e}, {&(0x7f0000000580)="3af36ffe5ae18eefcc87a22877", 0xd}, {&(0x7f0000000600)="daf6a865dbdb0d44bfbe44ec87978e934809ec890a060a6fb55e1c0eec", 0x1d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000980)}], 0x1}}], 0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m44.941219767s ago: executing program 2 (id=3390): memfd_create(0x0, 0x0) eventfd2(0x7, 0x80800) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc0fa3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$inet(0x10, 0x3, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xd6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x48}}, 0x0) 2m43.932819936s ago: executing program 2 (id=3391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) io_setup(0xffff0bc2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x26, 0x0, @fd_index, 0x0, &(0x7f0000000040)}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0xe7b, 0x0, 0x86) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r6, r6, 0x0, 0xfffe82) 2m41.535623734s ago: executing program 2 (id=3403): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeeee8000, 0x80a0000}}, "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", "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"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 2m26.328327892s ago: executing program 33 (id=3403): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeeee8000, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) 7.544563379s ago: executing program 6 (id=3915): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x100) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x4404c800) getsockopt(r2, 0xff, 0x4, &(0x7f0000001300)=""/144, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x8, "000000000080"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.52731889s ago: executing program 3 (id=3916): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) nanosleep(&(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000200), 0x4001) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140073b1", @ANYRES32=r0], 0x14}}, 0x8000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x81044d03, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000300090908004149004001040800", 0x58}], 0x1) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(0x0, 0x7) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008001", @ANYRES32, @ANYBLOB="0000000000000000000000b733907f8c000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRESDEC=r4, @ANYRES8=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.870082475s ago: executing program 0 (id=3919): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x34, 0x13, 0x1, 0x270bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x1000, 0x76428}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14011}, 0x20040040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0xf98, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xda8, 0xfb, 0x0, 0x1, [@nested={0xd98, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xde, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744", @nested={0x4, 0x4f}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8accb6683360dd814cd20a05d"]}]}, 0xf98}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "5ac1a501"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x9, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x10, 0x4, 0x2f, 0x10, 0x9, 0x4}, @acm={0x4, 0x24, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xf4, 0x75, 0x80, 0x9}, @mdlm={0x15}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xce, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xe6, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0x4, 0x4, 0x10, 0x8}, 0xb1, &(0x7f0000000140)={0x5, 0xf, 0xb1, 0x1, [@generic={0xac, 0x10, 0x4, "fe4a07418fc8b68c00120ae716b739100efce2178db7b4965bdc5f3ec2f59d34f54d28649d0483cb278596bbc38d4d995d04b7b0e313e2ac286ca88d89782cf2b854979f588eb367d8587c40483d20b67eac606d917bec12c8d652be4b65af5b5736fa914aa171724e455bbecb7e9f61e15cbd648b59f3e20d9090ae5003028c8493087f1d617c019e7e9864f7a50cb297c1fcc7f84783321a6a941adaf088f6c43c436e42044b501e"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x240a}}, {0xae, &(0x7f0000000240)=@string={0xae, 0x3, "c56c366cf0687ad8139a25f99d36b2f079416634d5915cd273795cbc91277b720059936ca64ae4df1c8f7d0cc2b749416eb7f68ec82a4ff19416122e0387c16ab8cccf81c2189cdc365d2a041295f920d09159aa41d8f473e9a2eb36dc41452f23187ae6d9986936859d0b8765654452d1a87b4bc920b09f8ba79f03ae0ab5b2b6c709fe458d384f119947b2d87bf471110abbea9196206c17e0d0b6019127974663d01fa8cc4f8285b2807d"}}, {0x13, &(0x7f0000000300)=@string={0x13, 0x3, "d807887ec2b7c175fdc79870ac6dffcd57"}}]}) 6.554182326s ago: executing program 3 (id=3920): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x40408d0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) 6.130279799s ago: executing program 3 (id=3921): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x10b001, 0x0) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x400, 0x200000400000000, 0x5, 0x344}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2004401c) 5.96603445s ago: executing program 5 (id=3923): syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x16, 0x25, 0xdf, 0x8, 0xc45, 0x8003, 0x6c9a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x40, 0x0, 0x0, 0xa5, 0xae, 0xb3}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1101000073339ef7552eca36088dee1adb2361000000010902"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x20, 0x24, 0x78, {0x78, 0x22, "82322346b4a62f155a32d840f1d794b262bc4d4ddf5e3727f0c36fef00e02b42727aa1f65157b28e42cf8f9ded5423fae1bbd358e9b991d5c492ed968a2db1ae0355ddc220de6bf1c18e369ea5d10e7094da5cb8e37b3ae28e6e138036add93ade34ebecef47e084ec74334b110ffd3b3da583b225da"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xa, 0x29, "8c0284021b465e3f699755ca3a10146af70fc2c5f57b9799e44268663d193b177a0d6b7cfd6a76d0c2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xffff, 0xfffe, 0x8, 0x50e4, 0x3ff, 0x9, 0x9, 0x3, 0x5, 0x6}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000400)={{}, 0x1, 0x7, 0x0, {}, 0x0, 0x9ae}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xd}, {0x6, 0xfff1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x884) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000500)={@my=0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0x5501, 0x0) 5.882822138s ago: executing program 6 (id=3924): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x100) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="849c", 0x2}], 0x1}}], 0x1, 0x4404c800) getsockopt(0xffffffffffffffff, 0xff, 0x4, &(0x7f0000001300)=""/144, &(0x7f00000013c0)=0x90) syz_emit_ethernet(0xaa, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x8, "000000000080"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000200)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x8}, 0x1c) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000012c0)={'veth0_to_bridge\x00', 0x2}) 5.087926229s ago: executing program 3 (id=3925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) mknod$loop(0x0, 0x8fff, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) execve(0x0, 0x0, &(0x7f0000000340)={[&(0x7f0000000300)='/#\x00']}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 4.2073213s ago: executing program 6 (id=3929): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x4000000000000083, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x8c5f49850670a6da, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) 4.121241576s ago: executing program 1 (id=3930): r0 = socket(0x1a, 0x3, 0x400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x9, 0x2}, {}, {0x0, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x1010, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\xa4\xf4\xe0\xe8\xed\xf4\x1eM\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x8}, 0x8) 3.488417453s ago: executing program 0 (id=3932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.325606378s ago: executing program 1 (id=3933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x10000080000008, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102377, 0xfffffffffffffe3b) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8b21, 0x0) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 3.29454298s ago: executing program 5 (id=3934): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x0}], 0x1, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x100) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x4404c800) getsockopt(r2, 0xff, 0x4, &(0x7f0000001300)=""/144, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0x8, "000000000080"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.135658284s ago: executing program 1 (id=3935): r0 = socket(0x1a, 0x3, 0x400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x9, 0x2}, {}, {0x0, 0xfff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0x1010, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = memfd_create(&(0x7f0000000680)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\xa4\xf4\xe0\xe8\xed\xf4\x1eM\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.581254915s ago: executing program 1 (id=3937): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r2 = gettid() rt_sigtimedwait(0x0, &(0x7f0000005c80), 0x0, 0x0) tkill(r2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES8=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) 2.132889683s ago: executing program 3 (id=3938): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f2e1c301f4c43f5996bbd0f", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (fail_nth: 1) 2.099638049s ago: executing program 6 (id=3939): unshare(0x26020480) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.063458966s ago: executing program 1 (id=3940): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1.783698882s ago: executing program 5 (id=3941): memfd_create(&(0x7f0000000040)='\x02A\x06\x00\x00\x00\x1b$M\x87\x00\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a50c0000e4ff00006111600000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000001a40)={0x7, 0xc000c, "7c58573dbe3614943d387a4a0ca4e9034926afc599545120", {0xfffffffb, 0x2}, 0x5}) openat$rtc(0xffffffffffffff9c, 0x0, 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) gettid() socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) setsockopt$MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0xfffffffc}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xffff, 0x101, 0x4, 0x1, 0xffffff26, 0xff, 0x1, 0x101]}}, 0x5c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000e649a1473c3cebc025d286081400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) socket(0x11, 0x3, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r7, 0x0, 0x0) 1.68845091s ago: executing program 3 (id=3942): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x34, 0x13, 0x1, 0x270bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x1000, 0x76428}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14011}, 0x20040040) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0xf98, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xda8, 0xfb, 0x0, 0x1, [@nested={0xd98, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0xde, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744", @nested={0x4, 0x4f}, @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8accb6683360dd814cd20a05d"]}]}, 0xf98}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES16], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x9, 0x24, 0x6, 0x0, 0x0, "5ac1a501"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x9, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x10, 0x4, 0x2f, 0x10, 0x9, 0x4}, @acm={0x4, 0x24, 0x2, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xf4, 0x75, 0x80, 0x9}, @mdlm={0x15}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xce, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xe6, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x4, 0x4, 0x4, 0x10, 0x8}, 0xb2, &(0x7f0000000140)={0x5, 0xf, 0xb2, 0x1, [@generic={0xad, 0x10, 0x4, "fe4a07418fc8b68c00120ae716b739100efce2178db7b4965bdc5f3ec2f59d34f54d28649d0483cb278596bbc38d4d995d04b7b0e313e2ac286ca88d89782cf2b854979f588eb367d8587c40483d20b67eac606d917bec12c8d652be4b65af5b5736fa914aa171724e455bbecb7e9f61e15cbd648b59f3e20d9090ae5003028c8493087f1d617c019e7e9864f7a50cb297c1fcc7f84783321a6a941adaf088f6c43c436e42044b501e0e"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x240a}}, {0xae, &(0x7f0000000240)=@string={0xae, 0x3, "c56c366cf0687ad8139a25f99d36b2f079416634d5915cd273795cbc91277b720059936ca64ae4df1c8f7d0cc2b749416eb7f68ec82a4ff19416122e0387c16ab8cccf81c2189cdc365d2a041295f920d09159aa41d8f473e9a2eb36dc41452f23187ae6d9986936859d0b8765654452d1a87b4bc920b09f8ba79f03ae0ab5b2b6c709fe458d384f119947b2d87bf471110abbea9196206c17e0d0b6019127974663d01fa8cc4f8285b2807d"}}, {0x13, &(0x7f0000000300)=@string={0x13, 0x3, "d807887ec2b7c175fdc79870ac6dffcd57"}}]}) 1.325385597s ago: executing program 6 (id=3943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) (fail_nth: 1) 1.313172018s ago: executing program 0 (id=3944): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0xdd8, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc30, 0xfb, 0x0, 0x1, [@nested={0xc1e, 0x13, 0x0, 0x1, [@generic="783cabcf3de8f3c211caac293bfba1f6c66248e2705bfdeaf3e518701e75b6870e949c9efe541264de467766dfe253da80bc4601fddfb29d68a356ca39cba5bb876bdee1d1f6640bb64e313f030da7715e4e5f282235c21405e318614f33083a4b615d83fbc2757362a21e81598dd1c94f416f7fe0291ee066acb78990917d93450dc091617b2b9b856b762e98782567c7ae32d25d68ac22ba4415ab4e9411b60459b5fe04a16c83cb50e70b539e77b39213d9c96b5f0eaa04346eb659528defaefebc201f6fd8a70ef275ffc1ccaf61d56015c4bb63039c3b5db172b76ef8c834ae9df36f8764c27785f4098f8bbe8190e92a2f53d0e17cbd0e3150c8839cfd779a96807dfb84d6d424978b1060dc0fe13a00d526681c018bd90b954e1dd4f36787f6cf693c4a428c8cc5a6c0c77a940f5911f6191babbb44ddb0874a2e573d9a4c41cc89134dc1498259ae3da6f5e2bb40631050a2b28b86f43fa397c8cb73698f2625d966e2695db75c2d719077e59f4278644ce09c0b5cd873f4ce68a6d88819c0caf1c3b58612897c74636701d99260c2ed0e29392f96e6b46a5d8e4797d49f7db2400f81bbdfe7fedab277d090a977eb6d3143e34ab570975d403d9d5975d8a1b373d0322e954d8921cca83c962e55959bb2b82ab789e617a67200d503f89c88d6e8f04deb2773349669e22cdc62f0d6037bc11334f3b7f3c203866d39f6f2f15215fa9a707960c2f6d5229ee00a879a842724c9f633dcb55114d5b4ae228f59001fdea972a1e2893ca0f1855a3918dda375af22d6531cf30c28f84ab3f45d7893f65a9ac09cca966c896c79172b1f8b8da2af3c82ad641eb3db53966e1f670fa1f94465c356331e7a9e39be91d6b2719780d650d54e75277ba22818857a3ce176b85f447a52d43e52d621422695ce1bbeaaa3611d296953b63f08238844704293e37334ef7dc826b87704ffa5e634c89fe70223869ef8484d0dbab21bf206fae62fa6b645ecd4f1f0ea1107ec9ae55882dd92b099da4cd71ab2493b81a3eee6f617dd53af22ff15b01e97689db12b6fe53f941207303d1e822a7b98303617efdaa4e844df85dac246617b3aff4cd0bb5db224a59fa4e7161c4862114cdec7a7b9f4ffcbd7e8a9dc761dc3368a0f37541463227ae5cf525441ab99b9ba09d70b4c2ad9719a5c48258398e77adb9d1f8dcc64d8d658cfcd1b5fef2669f1b2c19f0988268611a644f02f13b86377a9203c36091545f09d62c96c98732c2619cc81dbd4ca19dd62141ce8421dbc28de8b32fa91631b8957025c89812d5fdd72d79aa5d1f765aaa08317915d35ebdfc8a880923596ffbbe4bc6bbd81427869350d59a206c96c813efb25bade849f515e6b6a47c6ccb2131e60c8c05891ea8f065baf49459218c32257c13a82b423cee266dbf51f500ce996d76a723e662f3c3d2fddaff5c050f2ef2e17d0fafb0c42a82184201d8732fa4f1c370384fed4b0d8ee842f2de5523aed2e09e2c484f940a1736359711eb655bd00504e76f3c72f26970d3c05b00ea25803e8be24d7751baadfda870d3e0e64514f0b290a052071cd8f71a2c6ff4850b891c3f1818e0774794c46c62d511db9ee5b960404c866850602205b15b287e6d3279e6a5d1dce653ef770f68af6a16dfa552145e18dd0b185571f29542c24b753ee6ee5f5fb448afcfe643d540e7a120ebf36f2e4f3a30b46d8497ad69b5a55ee023709f640d44e1ba6a4da79579fbaf66676c8e2f60a1a8e3fe123a70b4604e75db29ee19bb8805e22195aeda6b0412c750e0043a53c673e24f9bf68544089b1bc8fe1763e0b157106cec5b21847eeea377c258bac16ff48a208b4c7d3cd1fcf410d22148beb6f95317061c1de7e2d87c448bc2c00069d2e886a7a37c4ced954d2b06ee6de91785a967d4dd117b83fdf7786133abd08ac3399ba7e6f521d933e14966ca444056c4289ec24c76b9eed38ceae0c5493dbe53c20063ac6f9290663cad2b4c73b5276bc5a17847e9098563928694a0316d7d73c4a439bd0fb91fdb520d9b92c5c686ed1122383012b84f4846f4d5e0c5fedf74c9c07ec64da1f2157feee49aa476a4d2b830f528f1c8bf8b7b76ecf7d2266ed1b9d8278a5923501cf134fb9e59f1ee9a5c1397387c2959e0743e634cc41782b57f8c7ea51525150c443066b352f84050fbfb72f55680f24461c791024efa74022caa8d58f1e9985e910f25aa92bfe756ab3eacf8079e7eb7f970165b3ff1bf1ca457ab5f4d9a1a08448ffca704fcee8030a7d8aca43ae64b0be45efd5151bcea83845720d210aa76ef748810e46ffb0cdb7bad706a24d6cb076171a6b79f5de5ac6b8190919a68b1b41b173914dd37d599f7a78587c4ee606b31949a88e6a790eca971c348d32f05a22e68d22793282b716d151d9de60e24cc049e3bf4cce36fe43b5ea824a7b3c854860ceed13d466439263353e81940e7ded03f31211cc714f4cdf240516025f1f5621cced4b88a4e48c940d6f46ff2f57f0583046b650a440c4ea8e9fab79e98d7529db2f11cc7529bb361cf8cb65600ffb36eb5fd93acbdd58398ecbb0befd277e267051f93dc3e7c6a5212c2ed990eb60d9d451b4458cb44cd691dac77ece483236e3006b7f7913e39f685ca41bcd1692494370acb70d0cfdc9e6de0bcd602040a0bc2de02a8cd477fef88b5410f5dfea1cd32d25464853d56c82abd3c11caebd992ca656e88a10ca2779f887472d5064fddd7397eb0205c419b23c2756a3b9b722ff273907c50f8b176834edcc1268e036214a2a25651c719541a4f7729ef7e32dee27c5b910bfea677c562138b30b3355b462c8f910874acc292f6787f8d94fa1cb2e648789cc67d05eb49d6d3c8788a024e3c523c4ee282764090044b44f30a9848daf2522b76448ecb9249ffe58dad4363b1d08181131a89af718ecbd5ffe44e032ca26664eecabc9aa57a875b5964ea492b7e759606a3f4ab36130a8a43a19be74709dea4eeebf5e53706685122e6603247996d672dacdf1bbadf5df111cfe7e72f5b2c6cdc32c1e4eed30147c9a51c5abd4214c577c4c8d1725daf906d145c6ff2c9ab0fc3da4edfb92be40b4af234c2bc147b2d08a801b539928cb754f2f6d2d4280ee0c834ee4f5eb8b0662ffa6f7154307b0fe55fe248a3f953a09b06244674adbf31dd7489be3f26423140ffe98671ca413d678047096fcad53f5bca7e602354553af02c225a67e4e8eabf298495a99de9653638405ebe78dc75e6d16c39e1547dadbc07a014369e39175991368d05be623656c4ecb3735612546b9a9c1490f834cab7567e61c8b2669aa62f156f2ff3b76b32e11b0e0acb6c7ccd6623bef1a5ccbe5f477ae90b3918899fc6b6075c514deaf387d5f09cd59f3fb3c0a9614f1eec092a8f7c6bd200e04da47085d58adc08f1f0651f7ce0cea5792a30aa2bee9970913fc9e79bcf0b5c55adfa6967a44b84ffcd3ce7fb47a610773eb9323b8ab3b5b9670f3ddc06e673e5ebe929f1ae4508decd56a2cefc34bab4703bbd3d83fcfdc27fc4e8a799a34742526848f6aae932ec98959f46ea50f12e0ad3ba4ef50a7b4defdf2fcf8dd2afdb8f29a1b7eed384b17c8b4ff4cfc220745cef2c083615eee226bccb8f2b7faf5a8948e60edc37a644b70011ff8b608da74a3873b2d8a6ba50dcce8a5ed6fe96c599c6d0b8a431f0b96789e974ea48400b94c2d1fbb7a8908de838cc64d4de93d506dfb450012df4af40d5980aed567e0b94281f8109ae7cb42f8253783a9ccb1cdd07245b31c0a00f13b42eedea9dd6d031f283a277f140f7ccacffc4e76829fede0479d59a542f873524651dbed995a00749e1b06182f073ebc3122ef1b007436d9eeb89d4f82ad366361ae8bb54e795b5c3d0594ccab1d5019f4b9191fd7c84598c866a8f98b2759738a65af53943b466aec83bb055e8f6c6e7755862de6c4c203fa67663702783f5f19459620a99f4de75fc85efedc44cf65adaaead7038406ebc507048b115c44209057f887f204a60ad9f6abc9b7983b930be5115cd91de9723bef58d29e421e123c7fa19ac3de2900827041d096ce0d589d45159c322ff3529687b89a10dd6c628977aedb1547ab6630995b48edba0a6f0e9ce99166dd7acdab5253f6bd4c3891c45d6ce4cf136a7791bc553769b57559215f79051388cff4761a3a63f6c73d8d7aafa8053e4f764f1c37b8b57128ecea00d7046c7532576bd413e01bf6df40bb1c3bf0480efbb1407003a98b1014552d2a1ecf99ba29c063ba96b3555cca24a211c2c604766a6b503a875040039f23f7ed46566519ee1aed0167c774", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028a", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x95, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @generic="48f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744cc49b4", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c450"]}]}, 0xdd8}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.23991262s ago: executing program 5 (id=3945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x10000080000008, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102377, 0xfffffffffffffe3b) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8b21, 0x0) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 1.00057795s ago: executing program 1 (id=3946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x2], [0x0, 0x1], [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0x10000000, 0x10000000, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1}, {}, {0x0, 0x4}, {}, {0x2}, {}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000240), 0xf) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 1.000290102s ago: executing program 6 (id=3947): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x7, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r5, r4, 0x0, 0x40008) 974.953871ms ago: executing program 5 (id=3948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) mknod$loop(0x0, 0x8fff, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) execve(0x0, 0x0, &(0x7f0000000340)={[&(0x7f0000000300)='/#\x00']}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 932.07817ms ago: executing program 0 (id=3949): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xdb86}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000002300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="04002abd7000fbdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="0c009902ff0f01001b0000000800b70012000000b93db0a81cc0ca509175754c00"/54], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000b13000/0x3000)=nil, 0x3000, 0x4) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0xfecf) 0s ago: executing program 0 (id=3950): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r2 = gettid() rt_sigtimedwait(0x0, &(0x7f0000005c80), 0x0, 0x0) tkill(r2, 0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES8=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) kernel console output (not intermixed with test programs): 223.843917][T19804] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1224.115070][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.806343][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.985674][T19809] FAULT_INJECTION: forcing a failure. [ 1224.985674][T19809] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.063686][T19811] FAULT_INJECTION: forcing a failure. [ 1225.063686][T19811] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.095320][T19809] CPU: 0 UID: 0 PID: 19809 Comm: syz.6.3598 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1225.095345][T19809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1225.095355][T19809] Call Trace: [ 1225.095360][T19809] [ 1225.095367][T19809] dump_stack_lvl+0x16c/0x1f0 [ 1225.095397][T19809] should_fail_ex+0x512/0x640 [ 1225.095415][T19809] should_failslab+0xc2/0x120 [ 1225.095436][T19809] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1225.095455][T19809] ? skb_clone+0x190/0x3f0 [ 1225.095488][T19809] skb_clone+0x190/0x3f0 [ 1225.095513][T19809] netlink_deliver_tap+0xabd/0xd30 [ 1225.095544][T19809] netlink_unicast+0x64c/0x870 [ 1225.095574][T19809] ? __pfx_netlink_unicast+0x10/0x10 [ 1225.095599][T19809] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1225.095631][T19809] netlink_sendmsg+0x8d1/0xdd0 [ 1225.095661][T19809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.095697][T19809] ____sys_sendmsg+0xa95/0xc70 [ 1225.095717][T19809] ? copy_msghdr_from_user+0x10a/0x160 [ 1225.095740][T19809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.095771][T19809] ___sys_sendmsg+0x134/0x1d0 [ 1225.095797][T19809] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.095844][T19809] ? __mutex_unlock_slowpath+0x100/0x800 [ 1225.095878][T19809] __sys_sendmsg+0x16d/0x220 [ 1225.095903][T19809] ? __pfx___sys_sendmsg+0x10/0x10 [ 1225.095945][T19809] do_syscall_64+0xcd/0x4c0 [ 1225.095972][T19809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.095989][T19809] RIP: 0033:0x7efcb298eb69 [ 1225.096004][T19809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.096020][T19809] RSP: 002b:00007efcb3885038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.096036][T19809] RAX: ffffffffffffffda RBX: 00007efcb2bb5fa0 RCX: 00007efcb298eb69 [ 1225.096047][T19809] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1225.096057][T19809] RBP: 00007efcb3885090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.096066][T19809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.096076][T19809] R13: 0000000000000000 R14: 00007efcb2bb5fa0 R15: 00007ffda1b7cd78 [ 1225.096100][T19809] [ 1225.100156][T19811] CPU: 1 UID: 0 PID: 19811 Comm: syz.3.3599 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1225.100180][T19811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1225.100190][T19811] Call Trace: [ 1225.100196][T19811] [ 1225.100203][T19811] dump_stack_lvl+0x16c/0x1f0 [ 1225.100230][T19811] should_fail_ex+0x512/0x640 [ 1225.100251][T19811] should_failslab+0xc2/0x120 [ 1225.100271][T19811] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1225.100289][T19811] ? skb_clone+0x190/0x3f0 [ 1225.100319][T19811] skb_clone+0x190/0x3f0 [ 1225.100344][T19811] netlink_deliver_tap+0xabd/0xd30 [ 1225.100374][T19811] netlink_unicast+0x64c/0x870 [ 1225.100404][T19811] ? __pfx_netlink_unicast+0x10/0x10 [ 1225.100430][T19811] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1225.100463][T19811] netlink_sendmsg+0x8d1/0xdd0 [ 1225.100493][T19811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.100529][T19811] ____sys_sendmsg+0xa95/0xc70 [ 1225.100548][T19811] ? copy_msghdr_from_user+0x10a/0x160 [ 1225.100572][T19811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.100603][T19811] ___sys_sendmsg+0x134/0x1d0 [ 1225.100629][T19811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.100676][T19811] ? __mutex_unlock_slowpath+0x100/0x800 [ 1225.100711][T19811] __sys_sendmsg+0x16d/0x220 [ 1225.100740][T19811] ? __pfx___sys_sendmsg+0x10/0x10 [ 1225.100782][T19811] do_syscall_64+0xcd/0x4c0 [ 1225.100809][T19811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.100826][T19811] RIP: 0033:0x7f8c3db8eb69 [ 1225.100840][T19811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.100856][T19811] RSP: 002b:00007f8c3e9b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.100872][T19811] RAX: ffffffffffffffda RBX: 00007f8c3ddb5fa0 RCX: 00007f8c3db8eb69 [ 1225.100883][T19811] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 1225.100893][T19811] RBP: 00007f8c3e9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.100904][T19811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.100914][T19811] R13: 0000000000000000 R14: 00007f8c3ddb5fa0 R15: 00007fffa6303178 [ 1225.100938][T19811] [ 1225.542356][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.559713][T14725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.570905][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.582531][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.025303][ T30] audit: type=1400 audit(1754413999.045:799): avc: denied { create } for pid=19812 comm="syz.6.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1226.154417][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.174924][ T30] audit: type=1400 audit(1754413999.045:800): avc: denied { bind } for pid=19812 comm="syz.6.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1226.316481][ T30] audit: type=1400 audit(1754413999.435:801): avc: denied { read write } for pid=19822 comm="syz.0.3606" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1226.407923][T19829] /dev/nullb0: Can't open blockdev [ 1226.624473][ T30] audit: type=1400 audit(1754413999.435:802): avc: denied { open } for pid=19822 comm="syz.0.3606" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1226.628777][T16443] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1226.652071][ T30] audit: type=1400 audit(1754413999.465:803): avc: denied { append } for pid=19825 comm="syz.1.3605" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1226.680484][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.869351][T19833] binder: 19832:19833 unknown command 0 [ 1226.892520][T16443] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1226.907408][T19833] binder: 19832:19833 ioctl c0306201 200000000080 returned -22 [ 1226.908386][ T30] audit: type=1400 audit(1754413999.515:804): avc: denied { ioctl } for pid=19823 comm="syz.3.3604" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1226.940662][T19833] binder: 19832:19833 ioctl c0306201 200000000280 returned -11 [ 1227.011371][T19831] hsr0: entered promiscuous mode [ 1227.018174][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1227.187206][T19831] hsr_slave_0: left promiscuous mode [ 1227.254389][ T30] audit: type=1400 audit(1754413999.935:805): avc: denied { bind } for pid=19825 comm="syz.1.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1227.398540][T19831] hsr_slave_1: left promiscuous mode [ 1227.635989][T19831] hsr0 (unregistering): left promiscuous mode [ 1227.689690][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.709580][ T30] audit: type=1400 audit(1754414000.105:806): avc: denied { read } for pid=19825 comm="syz.1.3605" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1227.845735][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.836915][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.853329][ T30] audit: type=1400 audit(1754414000.105:807): avc: denied { open } for pid=19825 comm="syz.1.3605" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1228.939041][ T30] audit: type=1400 audit(1754414000.105:808): avc: denied { ioctl } for pid=19825 comm="syz.1.3605" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1229.653497][ T30] audit: type=1400 audit(1754414000.135:809): avc: denied { ioctl } for pid=19825 comm="syz.1.3605" path="socket:[72089]" dev="sockfs" ino=72089 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1229.826968][ T30] audit: type=1400 audit(1754414000.645:810): avc: denied { create } for pid=19839 comm="syz.5.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1229.858589][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.219744][ T30] audit: type=1326 audit(1754414000.655:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.305515][ T30] audit: type=1326 audit(1754414000.655:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.331866][ T30] audit: type=1326 audit(1754414000.775:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.365446][ T30] audit: type=1326 audit(1754414000.775:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.393905][ T30] audit: type=1326 audit(1754414000.775:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.691993][ T30] audit: type=1326 audit(1754414000.785:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19839 comm="syz.5.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fd620b8eb69 code=0x7ffc0000 [ 1230.894658][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.928790][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.201441][T19888] FAULT_INJECTION: forcing a failure. [ 1231.201441][T19888] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.255678][T19888] CPU: 0 UID: 0 PID: 19888 Comm: syz.6.3621 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1231.255705][T19888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1231.255716][T19888] Call Trace: [ 1231.255722][T19888] [ 1231.255730][T19888] dump_stack_lvl+0x16c/0x1f0 [ 1231.255760][T19888] should_fail_ex+0x512/0x640 [ 1231.255782][T19888] should_failslab+0xc2/0x120 [ 1231.255803][T19888] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1231.255823][T19888] ? skb_clone+0x190/0x3f0 [ 1231.255852][T19888] skb_clone+0x190/0x3f0 [ 1231.255878][T19888] netlink_deliver_tap+0xabd/0xd30 [ 1231.255909][T19888] netlink_unicast+0x64c/0x870 [ 1231.255939][T19888] ? __pfx_netlink_unicast+0x10/0x10 [ 1231.255974][T19888] netlink_sendmsg+0x8d1/0xdd0 [ 1231.256005][T19888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1231.256040][T19888] ____sys_sendmsg+0xa95/0xc70 [ 1231.256060][T19888] ? copy_msghdr_from_user+0x10a/0x160 [ 1231.256084][T19888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1231.256116][T19888] ___sys_sendmsg+0x134/0x1d0 [ 1231.256141][T19888] ? __pfx____sys_sendmsg+0x10/0x10 [ 1231.256189][T19888] ? __mutex_unlock_slowpath+0x100/0x800 [ 1231.256223][T19888] __sys_sendmsg+0x16d/0x220 [ 1231.256247][T19888] ? __pfx___sys_sendmsg+0x10/0x10 [ 1231.256289][T19888] do_syscall_64+0xcd/0x4c0 [ 1231.256317][T19888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.256335][T19888] RIP: 0033:0x7efcb298eb69 [ 1231.256350][T19888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1231.256366][T19888] RSP: 002b:00007efcb3885038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.256384][T19888] RAX: ffffffffffffffda RBX: 00007efcb2bb5fa0 RCX: 00007efcb298eb69 [ 1231.256395][T19888] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1231.256406][T19888] RBP: 00007efcb3885090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.256416][T19888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.256426][T19888] R13: 0000000000000000 R14: 00007efcb2bb5fa0 R15: 00007ffda1b7cd78 [ 1231.256450][T19888] [ 1232.030184][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.086425][T19898] /dev/nullb0: Can't open blockdev [ 1233.406718][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.608339][T19914] FAULT_INJECTION: forcing a failure. [ 1233.608339][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.622570][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.6.3627 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1233.622593][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1233.622602][T19914] Call Trace: [ 1233.622606][T19914] [ 1233.622611][T19914] dump_stack_lvl+0x16c/0x1f0 [ 1233.622630][T19914] should_fail_ex+0x512/0x640 [ 1233.622642][T19914] should_failslab+0xc2/0x120 [ 1233.622656][T19914] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1233.622669][T19914] ? sidtab_sid2str_get+0x17a/0x680 [ 1233.622687][T19914] kmemdup_noprof+0x29/0x60 [ 1233.622699][T19914] sidtab_sid2str_get+0x17a/0x680 [ 1233.622715][T19914] sidtab_entry_to_string+0x33/0x110 [ 1233.622729][T19914] security_sid_to_context_core+0x35c/0x640 [ 1233.622744][T19914] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 1233.622758][T19914] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 1233.622772][T19914] ? map_id_range_up+0x2ce/0x3b0 [ 1233.622787][T19914] security_lsmprop_to_secctx+0x94/0x260 [ 1233.622802][T19914] audit_log_task_context+0x122/0x190 [ 1233.622818][T19914] ? __pfx_audit_log_task_context+0x10/0x10 [ 1233.622836][T19914] ? from_kuid+0x8d/0xd0 [ 1233.622847][T19914] ? __pfx_from_kuid+0x10/0x10 [ 1233.622859][T19914] ? __pfx_audit_log_start+0x10/0x10 [ 1233.622876][T19914] audit_log_task+0x1c2/0x3f0 [ 1233.622889][T19914] ? __pfx_audit_log_task+0x10/0x10 [ 1233.622902][T19914] ? __pfx_migrate_enable+0x10/0x10 [ 1233.622917][T19914] audit_seccomp+0x79/0x290 [ 1233.622933][T19914] __seccomp_filter+0x7b6/0xea0 [ 1233.622949][T19914] ? __pfx___seccomp_filter+0x10/0x10 [ 1233.622967][T19914] ? fput+0x9b/0xd0 [ 1233.622981][T19914] ? ksys_write+0x1ac/0x250 [ 1233.622993][T19914] __secure_computing+0x287/0x3b0 [ 1233.623009][T19914] syscall_trace_enter+0x89/0x240 [ 1233.623022][T19914] do_syscall_64+0x347/0x4c0 [ 1233.623040][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.623050][T19914] RIP: 0033:0x7efcb298eb69 [ 1233.623059][T19914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.623069][T19914] RSP: 002b:00007efcb3843038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 1233.623080][T19914] RAX: ffffffffffffffda RBX: 00007efcb2bb6160 RCX: 00007efcb298eb69 [ 1233.623086][T19914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1233.623093][T19914] RBP: 00007efcb3843090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.623099][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.623105][T19914] R13: 0000000000000000 R14: 00007efcb2bb6160 R15: 00007ffda1b7cd78 [ 1233.623119][T19914] [ 1234.109402][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1234.109413][ T30] audit: type=1326 audit(1754414007.005:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19905 comm="syz.6.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efcb298d61f code=0x7ffc0000 [ 1234.145568][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.151335][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.501082][ T30] audit: type=1400 audit(1754414008.615:845): avc: denied { setopt } for pid=19928 comm="syz.6.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1235.746413][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.777779][ T30] audit: type=1400 audit(1754414008.895:846): avc: denied { read } for pid=19930 comm="syz.1.3635" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1236.259932][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.277586][T19941] tmpfs: Unknown parameter 'usrquota0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.277586][T19941] 0 [ 1236.466789][ T30] audit: type=1400 audit(1754414008.895:847): avc: denied { ioctl } for pid=19930 comm="syz.1.3635" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1236.662702][ T30] audit: type=1400 audit(1754414009.705:848): avc: denied { write } for pid=19928 comm="syz.6.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1236.720141][T19937] fuse: Bad value for 'group_id' [ 1236.725189][T19937] fuse: Bad value for 'group_id' [ 1236.734230][T19937] overlayfs: missing 'lowerdir' [ 1237.069636][T19951] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3638'. [ 1237.451433][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.460974][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.652545][ T30] audit: type=1400 audit(1754414010.765:849): avc: denied { connect } for pid=19954 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1237.865602][T19959] mkiss: ax0: crc mode is auto. [ 1237.887719][ T30] audit: type=1400 audit(1754414010.955:850): avc: denied { write } for pid=19954 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1238.258224][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.264938][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.330671][ T1215] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1238.496534][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.651275][ T1215] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1238.661921][ T1215] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 1238.681199][ T1215] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 1238.707919][T19967] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1238.730553][ T30] audit: type=1400 audit(1754414011.825:851): avc: denied { bind } for pid=19966 comm="syz.6.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1238.795497][T19967] audit: out of memory in audit_log_start [ 1238.859883][T19967] Bluetooth: MGMT ver 1.23 [ 1239.721409][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.485035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.879191][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.039151][ T30] audit: type=1400 audit(1754414014.145:852): avc: denied { getopt } for pid=19989 comm="syz.6.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1241.673647][T19990] bio_check_eod: 2 callbacks suppressed [ 1241.673685][T19990] syz.5.3647: attempt to access beyond end of device [ 1241.673685][T19990] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1241.795505][T19990] syz.5.3647: attempt to access beyond end of device [ 1241.795505][T19990] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1241.811219][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1241.821443][T19990] syz.5.3647: attempt to access beyond end of device [ 1241.821443][T19990] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1241.909902][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1241.930114][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.949120][T19990] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1241.974253][ T4541] Bluetooth: hci6: Frame reassembly failed (-84) [ 1241.984695][T19990] UDF-fs: Scanning with blocksize 512 failed [ 1241.990779][ T5926] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1242.004647][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.004647][T19990] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1242.022061][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.022061][T19990] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1242.037808][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1242.050188][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.050188][T19990] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1242.066645][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1242.076537][T19990] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1242.084106][T19990] UDF-fs: Scanning with blocksize 1024 failed [ 1242.092897][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.092897][T19990] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1242.106983][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.106983][T19990] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1242.122124][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1242.134990][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.134990][T19990] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1242.148161][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 1242.159591][ T5926] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1242.171793][ T5926] usb 4-1: config 0 has no interface number 0 [ 1242.178467][ T5926] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.190671][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1242.200376][ T5926] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.244335][ T5926] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1242.253805][T19990] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1242.265339][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.281777][T19990] UDF-fs: Scanning with blocksize 2048 failed [ 1242.299241][ T5926] usb 4-1: config 0 descriptor?? [ 1242.304435][T19990] syz.5.3647: attempt to access beyond end of device [ 1242.304435][T19990] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1242.343690][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1242.372477][T19990] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1242.388318][T19990] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1242.397680][T19990] UDF-fs: Scanning with blocksize 4096 failed [ 1242.406802][T19990] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1242.533626][ T30] audit: type=1400 audit(1754414015.635:853): avc: denied { shutdown } for pid=19996 comm="syz.3.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1242.587177][ T30] audit: type=1400 audit(1754414015.635:854): avc: denied { name_connect } for pid=19996 comm="syz.3.3649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1242.815324][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1242.965269][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1242.969493][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1242.981393][ T9] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 1242.990891][ T9] usb 6-1: config 0 has no interface number 0 [ 1242.997781][ T9] usb 6-1: config 0 interface 224 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.011670][ T9] usb 6-1: config 0 interface 224 has no altsetting 0 [ 1243.022018][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1243.032473][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.040997][ T9] usb 6-1: Product: syz [ 1243.045733][ T9] usb 6-1: Manufacturer: syz [ 1243.050339][ T9] usb 6-1: SerialNumber: syz [ 1243.057737][ T9] usb 6-1: config 0 descriptor?? [ 1243.525596][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.130641][ T5845] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1244.137448][T19354] Bluetooth: hci6: command 0x1003 tx timeout [ 1244.165570][T20004] mkiss: ax0: crc mode is auto. [ 1244.360530][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.733655][ T5926] usbhid 4-1:0.1: can't add hid device: -71 [ 1244.752828][ T5926] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1244.780907][ T5926] usb 4-1: USB disconnect, device number 101 [ 1245.125170][ T5926] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1245.288530][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.305003][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1245.418082][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.422616][ T30] audit: type=1400 audit(1754414018.535:855): avc: denied { write } for pid=20013 comm="syz.5.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1245.437656][ T5926] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1245.460833][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.482490][T20050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.482999][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1245.664235][ T30] audit: type=1400 audit(1754414018.575:856): avc: denied { read } for pid=20013 comm="syz.5.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1245.700182][ T5926] pvrusb2: ********** [ 1245.704318][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1245.754383][ T5926] pvrusb2: Important functionality might not be entirely working. [ 1245.837338][T20043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.849218][T20050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.889917][T20043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.891551][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1246.480344][ T5926] pvrusb2: ********** [ 1246.485288][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.494764][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 1246.505482][ T2337] pvrusb2: Invalid write control endpoint [ 1246.566889][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.603784][ T2337] pvrusb2: Invalid write control endpoint [ 1246.610426][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1246.620258][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1246.629136][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1246.649432][ T2337] pvrusb2: Device being rendered inoperable [ 1246.655837][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1246.663706][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1246.675640][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1246.681235][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1246.691741][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1246.914593][ T9] usb 6-1: USB disconnect, device number 20 [ 1247.633836][ T30] audit: type=1400 audit(1754414020.305:857): avc: denied { write } for pid=20068 comm="syz.6.3667" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1247.662580][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.729691][T20070] FAULT_INJECTION: forcing a failure. [ 1247.729691][T20070] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.742843][T20070] CPU: 0 UID: 0 PID: 20070 Comm: syz.6.3667 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1247.742866][T20070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1247.742876][T20070] Call Trace: [ 1247.742882][T20070] [ 1247.742889][T20070] dump_stack_lvl+0x16c/0x1f0 [ 1247.742919][T20070] should_fail_ex+0x512/0x640 [ 1247.742939][T20070] should_failslab+0xc2/0x120 [ 1247.742961][T20070] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1247.742980][T20070] ? skb_clone+0x190/0x3f0 [ 1247.743008][T20070] skb_clone+0x190/0x3f0 [ 1247.743034][T20070] netlink_deliver_tap+0xabd/0xd30 [ 1247.743065][T20070] netlink_unicast+0x64c/0x870 [ 1247.743095][T20070] ? __pfx_netlink_unicast+0x10/0x10 [ 1247.743122][T20070] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1247.743156][T20070] netlink_sendmsg+0x8d1/0xdd0 [ 1247.743195][T20070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.743226][T20070] ? ____sys_sendmsg+0x929/0xc70 [ 1247.743249][T20070] ____sys_sendmsg+0xa95/0xc70 [ 1247.743268][T20070] ? copy_msghdr_from_user+0x10a/0x160 [ 1247.743293][T20070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.743324][T20070] ___sys_sendmsg+0x134/0x1d0 [ 1247.743352][T20070] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.743400][T20070] ? __mutex_unlock_slowpath+0x100/0x800 [ 1247.743434][T20070] __sys_sendmsg+0x16d/0x220 [ 1247.743460][T20070] ? __pfx___sys_sendmsg+0x10/0x10 [ 1247.743502][T20070] do_syscall_64+0xcd/0x4c0 [ 1247.743530][T20070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.743549][T20070] RIP: 0033:0x7efcb298eb69 [ 1247.743563][T20070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.743580][T20070] RSP: 002b:00007efcb3864038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.743597][T20070] RAX: ffffffffffffffda RBX: 00007efcb2bb6080 RCX: 00007efcb298eb69 [ 1247.743608][T20070] RDX: 0000000000001004 RSI: 0000200000000100 RDI: 000000000000000a [ 1247.743619][T20070] RBP: 00007efcb3864090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.743630][T20070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.743640][T20070] R13: 0000000000000000 R14: 00007efcb2bb6080 R15: 00007ffda1b7cd78 [ 1247.743670][T20070] [ 1247.987445][ T30] audit: type=1400 audit(1754414020.835:858): avc: denied { setopt } for pid=20068 comm="syz.6.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1248.139774][ T9] usb 4-1: USB disconnect, device number 102 [ 1248.231954][T20076] hfsplus: unable to find HFS+ superblock [ 1248.256219][T20075] geneve3: entered promiscuous mode [ 1248.261442][T20075] geneve3: entered allmulticast mode [ 1248.816490][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.653992][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.856825][T20090] hfsplus: unable to find HFS+ superblock [ 1250.065172][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.395249][ T30] audit: type=1400 audit(1754414023.365:859): avc: denied { nlmsg_write } for pid=20091 comm="syz.3.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1250.885641][T16443] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1251.105542][T16443] usb 4-1: Using ep0 maxpacket: 16 [ 1251.142193][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.159990][T16443] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.385438][T16443] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1251.576684][T16443] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.603998][T16443] usb 4-1: config 0 descriptor?? [ 1252.376517][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.445775][T16443] usbhid 4-1:0.0: can't add hid device: -71 [ 1252.456476][T16443] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1252.530536][T16443] usb 4-1: USB disconnect, device number 103 [ 1252.738422][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.778010][T20133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3686'. [ 1253.593044][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.421457][T20157] /dev/nullb0: Can't open blockdev [ 1254.666337][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.978765][T16443] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1255.175882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.314889][T16443] usb 2-1: Using ep0 maxpacket: 8 [ 1255.940991][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.026119][T16443] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1256.085860][T16443] usb 2-1: config 7 has an invalid interface number: 59 but max is 0 [ 1256.088723][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.093945][T16443] usb 2-1: config 7 has no interface number 0 [ 1256.093982][T16443] usb 2-1: config 7 interface 59 has no altsetting 0 [ 1256.127220][T16443] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 1256.136699][T16443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.144658][T16443] usb 2-1: Product: syz [ 1256.175401][T16443] usb 2-1: Manufacturer: syz [ 1256.185712][T16443] usb 2-1: SerialNumber: syz [ 1256.585465][T16443] kobil_sct 2-1:7.59: KOBIL USB smart card terminal converter detected [ 1256.663741][T16443] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1256.848777][T16443] usb 2-1: USB disconnect, device number 87 [ 1257.348221][T16443] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1257.360171][T16443] kobil_sct 2-1:7.59: device disconnected [ 1257.438677][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.670967][T16443] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1258.106909][T16443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.147196][T16443] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1258.162143][T16443] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 1258.172278][T16443] usb 2-1: Manufacturer: syz [ 1258.179722][T16443] usb 2-1: SerialNumber: syz [ 1258.195570][T16443] usb 2-1: config 0 descriptor?? [ 1258.228024][T16443] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 1258.528992][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.688052][ T6002] usb 2-1: USB disconnect, device number 88 [ 1258.749947][T20194] geneve3: entered allmulticast mode [ 1258.965550][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.466432][T20204] FAULT_INJECTION: forcing a failure. [ 1259.466432][T20204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.485657][T20204] CPU: 0 UID: 0 PID: 20204 Comm: syz.1.3707 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1259.485684][T20204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1259.485695][T20204] Call Trace: [ 1259.485701][T20204] [ 1259.485708][T20204] dump_stack_lvl+0x16c/0x1f0 [ 1259.485738][T20204] should_fail_ex+0x512/0x640 [ 1259.485758][T20204] _copy_to_user+0x32/0xd0 [ 1259.485779][T20204] simple_read_from_buffer+0xcb/0x170 [ 1259.485800][T20204] proc_fail_nth_read+0x197/0x240 [ 1259.485821][T20204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.485843][T20204] ? rw_verify_area+0xcf/0x6c0 [ 1259.485869][T20204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1259.485889][T20204] vfs_read+0x1e4/0xc60 [ 1259.485910][T20204] ? __pfx___mutex_lock+0x10/0x10 [ 1259.485936][T20204] ? __pfx_vfs_read+0x10/0x10 [ 1259.485960][T20204] ? __fget_files+0x20e/0x3c0 [ 1259.485986][T20204] ksys_read+0x12a/0x250 [ 1259.486004][T20204] ? __pfx_ksys_read+0x10/0x10 [ 1259.486036][T20204] do_syscall_64+0xcd/0x4c0 [ 1259.486064][T20204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.486082][T20204] RIP: 0033:0x7fef1338d57c [ 1259.486097][T20204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1259.486114][T20204] RSP: 002b:00007fef14208030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1259.486130][T20204] RAX: ffffffffffffffda RBX: 00007fef135b5fa0 RCX: 00007fef1338d57c [ 1259.486141][T20204] RDX: 000000000000000f RSI: 00007fef142080a0 RDI: 0000000000000004 [ 1259.486152][T20204] RBP: 00007fef14208090 R08: 0000000000000000 R09: 0000000000000000 [ 1259.486162][T20204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.486172][T20204] R13: 0000000000000000 R14: 00007fef135b5fa0 R15: 00007fff68923688 [ 1259.486196][T20204] [ 1259.851990][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.525296][T20224] netlink: 'syz.3.3714': attribute type 1 has an invalid length. [ 1260.555905][T20224] bridge1: entered promiscuous mode [ 1260.809086][T17192] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1260.930632][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1261.094906][T17192] usb 4-1: Using ep0 maxpacket: 16 [ 1261.101089][T17192] usb 4-1: too many configurations: 97, using maximum allowed: 8 [ 1261.123323][T17192] usb 4-1: string descriptor 0 read error: -71 [ 1261.134457][T17192] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 1261.144077][T17192] usb 4-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 1261.578338][T17192] usb 4-1: rejected 8 configurations due to insufficient available bus power [ 1261.590369][T17192] usb 4-1: no configuration chosen from 8 choices [ 1261.645056][T17192] usb 4-1: USB disconnect, device number 104 [ 1262.351076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.409478][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.439762][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.458541][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.525911][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.595873][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.608937][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.622628][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.630383][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.639170][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.647340][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.655589][ T5926] hid-generic 0001:0000:0000.0012: unknown main item tag 0x0 [ 1262.831048][ T5926] hid-generic 0001:0000:0000.0012: hidraw0: HID va0000.00 Device [syz1] on [ 1262.897686][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1262.907009][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.914479][T20244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.129796][ T30] audit: type=1400 audit(1754414036.235:860): avc: denied { read } for pid=20248 comm="syz.0.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1263.197950][T20244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.304493][T20244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.326451][ T30] audit: type=1400 audit(1754414036.275:861): avc: denied { create } for pid=20249 comm="syz.3.3721" name="#4b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1263.382806][ T30] audit: type=1400 audit(1754414036.285:862): avc: denied { link } for pid=20249 comm="syz.3.3721" name="#4b" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1263.456056][ T30] audit: type=1400 audit(1754414036.295:863): avc: denied { rename } for pid=20249 comm="syz.3.3721" name="#4c" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1263.465603][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.733253][ T30] audit: type=1400 audit(1754414036.845:864): avc: denied { read } for pid=20258 comm="syz.0.3722" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1263.820551][T20263] openvswitch: netlink: Flow key attr not present in new flow. [ 1264.096852][ T30] audit: type=1400 audit(1754414036.845:865): avc: denied { open } for pid=20258 comm="syz.0.3722" path="/181/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1264.214751][ T30] audit: type=1400 audit(1754414036.845:866): avc: denied { ioctl } for pid=20258 comm="syz.0.3722" path="/181/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1264.567915][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.576025][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.633222][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1265.459426][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1265.467668][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.641361][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.641847][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.763020][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.787069][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1265.808790][T20292] /dev/nullb0: Can't open blockdev [ 1265.860200][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1265.925816][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.941080][ T9] usb 7-1: config 0 descriptor?? [ 1266.645133][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.697999][T11938] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1266.721946][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1266.897342][T11938] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1267.005717][T11938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 1267.054380][T11938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 1267.070705][T11938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1267.086599][T11938] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.103503][T11938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.134066][T11938] usb 6-1: config 0 descriptor?? [ 1267.452495][T20315] bio_check_eod: 2 callbacks suppressed [ 1267.452526][T20315] syz.0.3738: attempt to access beyond end of device [ 1267.452526][T20315] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1267.471728][T20315] syz.0.3738: attempt to access beyond end of device [ 1267.471728][T20315] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1267.484853][T20315] Mount JFS Failure: -5 [ 1267.814078][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1267.816921][ T9] usb 7-1: USB disconnect, device number 4 [ 1267.904095][T20317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3739'. [ 1268.063981][T11938] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1268.751346][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.810673][T20332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.837302][T20332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.904282][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.084438][T20336] cgroup: noprefix used incorrectly [ 1269.095139][T20336] netlink: 'syz.1.3744': attribute type 11 has an invalid length. [ 1269.112585][T17192] usb 6-1: USB disconnect, device number 21 [ 1269.147047][ T30] audit: type=1400 audit(1754414042.265:867): avc: denied { map } for pid=20335 comm="syz.1.3744" path="socket:[73808]" dev="sockfs" ino=73808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1269.474570][ T9] hid_parser_main: 6 callbacks suppressed [ 1269.474583][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1269.508699][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1269.935081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.056457][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.981010][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.122326][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.685488][T11938] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1272.771250][ T30] audit: type=1400 audit(1754414045.885:868): avc: denied { name_bind } for pid=20384 comm="syz.1.3758" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1272.891665][T11938] usb 6-1: Using ep0 maxpacket: 32 [ 1273.024717][T11938] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1273.062720][T11938] usb 6-1: config 0 has no interface number 0 [ 1273.134475][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.609279][T11938] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1273.622581][T11938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.631163][T11938] usb 6-1: Product: syz [ 1273.635885][T11938] usb 6-1: Manufacturer: syz [ 1273.640472][T11938] usb 6-1: SerialNumber: syz [ 1273.664530][T11938] usb 6-1: config 0 descriptor?? [ 1273.674460][T11938] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1273.771833][T20399] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1273.784359][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1273.804654][T20399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1273.891843][T11938] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1273.912262][T11938] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1274.087824][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.116554][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.179017][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.187554][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.496314][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1274.499383][ T5926] usb 6-1: USB disconnect, device number 22 [ 1274.665170][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1274.711279][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1275.381036][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.401221][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.542404][ T5926] quatech2 6-1:0.51: device disconnected [ 1276.558142][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.923201][ T30] audit: type=1326 audit(1754414050.015:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1276.955518][T20429] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1276.996250][ T30] audit: type=1326 audit(1754414050.025:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.029165][ T5926] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1277.074116][ T30] audit: type=1326 audit(1754414050.025:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.105465][ T30] audit: type=1326 audit(1754414050.025:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.130186][ T30] audit: type=1326 audit(1754414050.025:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.163714][ T30] audit: type=1326 audit(1754414050.035:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.190566][ T30] audit: type=1326 audit(1754414050.035:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.304906][ T30] audit: type=1326 audit(1754414050.035:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.329659][ T30] audit: type=1326 audit(1754414050.035:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.817271][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.817274][ T30] audit: type=1326 audit(1754414050.035:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20428 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21c8f8eb69 code=0x7ffc0000 [ 1277.882693][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 1277.993819][T20429] raw_sendmsg: syz.0.3771 forgot to set AF_INET. Fix it! [ 1278.015785][ T5926] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1278.037151][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.084739][ T5926] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1278.102918][ T5926] pvrusb2: ********** [ 1278.120606][ T5926] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1278.155399][ T5926] pvrusb2: Important functionality might not be entirely working. [ 1278.163599][ T5926] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1278.259004][ T5926] pvrusb2: ********** [ 1278.286390][T20431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.300455][T20431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.374873][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1278.437274][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.771940][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1278.950390][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.958866][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1278.964335][ T2337] pvrusb2: Invalid write control endpoint [ 1278.973454][ T24] usb 6-1: config index 0 descriptor too short (expected 59397, got 125) [ 1279.023827][ T24] usb 6-1: config 4 has too many interfaces: 75, using maximum allowed: 32 [ 1279.071681][ T2337] pvrusb2: Invalid write control endpoint [ 1279.086825][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1279.093626][ T24] usb 6-1: config 4 has an invalid descriptor of length 169, skipping remainder of the config [ 1279.125616][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1279.497571][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1279.504833][ T24] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 75 [ 1279.513672][ T2337] pvrusb2: Device being rendered inoperable [ 1279.524653][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1279.535993][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1279.546041][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1279.551536][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1279.602841][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1279.631888][T20453] /dev/nullb0: Can't open blockdev [ 1279.646412][ T24] usb 6-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 1279.684061][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.701629][ T24] usb 6-1: Product: syz [ 1279.710977][ T24] usb 6-1: Manufacturer: syz [ 1279.715636][ T24] usb 6-1: SerialNumber: syz [ 1279.949511][ T24] usb 6-1: USB disconnect, device number 23 [ 1280.005468][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.040468][T11938] usb 7-1: USB disconnect, device number 5 [ 1281.158638][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.254236][T20478] binder: 20477:20478 unknown command 0 [ 1281.275858][T20478] binder: 20477:20478 ioctl c0306201 200000000080 returned -22 [ 1281.475588][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.003923][ T5925] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1282.068276][T20494] /dev/nullb0: Can't open blockdev [ 1282.256934][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.435624][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 1282.456904][ T5925] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1282.585068][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1282.585085][ T30] audit: type=1400 audit(1754414055.645:897): avc: denied { write } for pid=20496 comm="syz.5.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1282.837661][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.867128][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1282.883824][ T5925] pvrusb2: ********** [ 1282.892001][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1282.923203][ T5925] pvrusb2: Important functionality might not be entirely working. [ 1282.945411][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1282.971663][ T5925] pvrusb2: ********** [ 1283.064364][T20482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.074405][T20482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.288772][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.256014][ T2337] pvrusb2: Invalid write control endpoint [ 1284.648718][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3785'. [ 1284.667366][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.865878][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.874243][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.244464][ T2337] pvrusb2: Invalid write control endpoint [ 1285.255427][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1285.269851][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1285.278062][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1285.288726][ T2337] pvrusb2: Device being rendered inoperable [ 1285.374253][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1285.474480][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1285.488234][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1285.496167][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1285.506890][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1285.619676][T20523] netlink: 'syz.5.3795': attribute type 10 has an invalid length. [ 1285.675363][T20523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.700437][T20523] bond0: (slave team0): Enslaving as an active interface with an up link [ 1285.766657][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.825459][T17192] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1285.962784][ T5926] usb 2-1: USB disconnect, device number 89 [ 1286.006304][T17192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.019639][T17192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.333406][T17192] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1286.414981][T17192] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1286.424398][T17192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.480545][T17192] usb 7-1: config 0 descriptor?? [ 1286.598989][T20537] input: syz1 as /devices/virtual/input/input120 [ 1286.644849][ T5926] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1286.645403][ T30] audit: type=1400 audit(1754414059.705:898): avc: denied { read write } for pid=20531 comm="syz.0.3799" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1286.676067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1286.711005][ T30] audit: type=1400 audit(1754414059.705:899): avc: denied { open } for pid=20531 comm="syz.0.3799" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1286.806318][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.853423][ T30] audit: type=1400 audit(1754414059.715:900): avc: denied { ioctl } for pid=20531 comm="syz.0.3799" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1286.878456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1286.905002][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 1286.911578][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1286.958316][T17192] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1287.100339][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1287.668870][ T5926] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1287.703919][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.735602][ T5926] usb 2-1: Product: syz [ 1287.748932][ T5926] usb 2-1: Manufacturer: syz [ 1287.763826][ T5926] usb 2-1: SerialNumber: syz [ 1287.789882][ T5926] usb 2-1: config 0 descriptor?? [ 1287.808740][ T5926] omninet 2-1:0.0: required endpoints missing [ 1287.868396][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.928628][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.022970][ T5926] usb 2-1: USB disconnect, device number 90 [ 1288.410530][T20553] block device autoloading is deprecated and will be removed. [ 1288.928826][T17192] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 1289.224558][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.611765][ T30] audit: type=1400 audit(1754414062.715:901): avc: denied { write } for pid=20561 comm="syz.5.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1289.774302][T20567] /dev/nullb0: Can't open blockdev [ 1290.208246][ T5926] usb 7-1: USB disconnect, device number 6 [ 1290.259820][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.019955][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.529991][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.565540][T20576] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1291.866246][T20586] block nbd3: NBD_DISCONNECT [ 1291.872174][T20586] block nbd3: Disconnected due to user request. [ 1291.895839][T20586] block nbd3: shutting down sockets [ 1292.431169][T20590] syz.6.3815: attempt to access beyond end of device [ 1292.431169][T20590] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1292.472728][T20590] syz.6.3815: attempt to access beyond end of device [ 1292.472728][T20590] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1292.488332][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1292.499975][T20590] syz.6.3815: attempt to access beyond end of device [ 1292.499975][T20590] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1292.514208][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1292.524918][T20590] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1292.532681][T20590] UDF-fs: Scanning with blocksize 512 failed [ 1292.616860][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.654014][T20590] syz.6.3815: attempt to access beyond end of device [ 1292.654014][T20590] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1292.965729][T20590] syz.6.3815: attempt to access beyond end of device [ 1292.965729][T20590] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1293.035871][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1293.047639][T20590] syz.6.3815: attempt to access beyond end of device [ 1293.047639][T20590] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1293.072904][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1293.089448][T20590] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1293.099952][T20590] UDF-fs: Scanning with blocksize 1024 failed [ 1293.114638][T20590] syz.6.3815: attempt to access beyond end of device [ 1293.114638][T20590] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1293.132848][T20590] syz.6.3815: attempt to access beyond end of device [ 1293.132848][T20590] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1293.192389][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1293.207139][T20590] syz.6.3815: attempt to access beyond end of device [ 1293.207139][T20590] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1293.230381][ T30] audit: type=1400 audit(1754414066.305:902): avc: denied { ioctl } for pid=20602 comm="syz.3.3819" path="socket:[75249]" dev="sockfs" ino=75249 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1293.307726][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1293.320430][T20590] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1293.328952][T20590] UDF-fs: Scanning with blocksize 2048 failed [ 1293.500479][T20590] syz.6.3815: attempt to access beyond end of device [ 1293.500479][T20590] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1293.517896][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1293.528194][T20590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1293.538205][T20590] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1293.546224][T20590] UDF-fs: Scanning with blocksize 4096 failed [ 1293.555039][ T30] audit: type=1400 audit(1754414066.325:903): avc: denied { ioctl } for pid=20602 comm="syz.3.3819" path="socket:[75250]" dev="sockfs" ino=75250 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1293.704986][T20590] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1293.725368][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.811328][ T30] audit: type=1400 audit(1754414066.345:904): avc: denied { create } for pid=20602 comm="syz.3.3819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 1293.925607][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.946532][ T30] audit: type=1400 audit(1754414066.345:905): avc: denied { write } for pid=20602 comm="syz.3.3819" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1294.110346][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.803292][ T30] audit: type=1400 audit(1754414066.345:906): avc: denied { open } for pid=20602 comm="syz.3.3819" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1294.827473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.844593][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.870698][ T30] audit: type=1400 audit(1754414066.345:907): avc: denied { connect } for pid=20602 comm="syz.3.3819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1294.890439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.285473][T16443] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1295.648998][T16443] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1295.666690][T16443] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1295.693263][T16443] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.707792][T16443] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1295.723426][T16443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.775683][T16443] usbtmc 2-1:16.0: bulk endpoints not found [ 1295.845703][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.000869][T20641] FAULT_INJECTION: forcing a failure. [ 1296.000869][T20641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1296.044213][T20641] CPU: 0 UID: 0 PID: 20641 Comm: syz.6.3831 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1296.044240][T20641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1296.044250][T20641] Call Trace: [ 1296.044257][T20641] [ 1296.044263][T20641] dump_stack_lvl+0x16c/0x1f0 [ 1296.044292][T20641] should_fail_ex+0x512/0x640 [ 1296.044311][T20641] _copy_to_user+0x32/0xd0 [ 1296.044331][T20641] simple_read_from_buffer+0xcb/0x170 [ 1296.044351][T20641] proc_fail_nth_read+0x197/0x240 [ 1296.044371][T20641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.044392][T20641] ? rw_verify_area+0xcf/0x6c0 [ 1296.044416][T20641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1296.044434][T20641] vfs_read+0x1e4/0xc60 [ 1296.044454][T20641] ? __pfx___mutex_lock+0x10/0x10 [ 1296.044479][T20641] ? __pfx_vfs_read+0x10/0x10 [ 1296.044502][T20641] ? __fget_files+0x20e/0x3c0 [ 1296.044528][T20641] ksys_read+0x12a/0x250 [ 1296.044545][T20641] ? __pfx_ksys_read+0x10/0x10 [ 1296.044570][T20641] do_syscall_64+0xcd/0x4c0 [ 1296.044603][T20641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.044621][T20641] RIP: 0033:0x7efcb298d57c [ 1296.044635][T20641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1296.044652][T20641] RSP: 002b:00007efcb3885030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1296.044669][T20641] RAX: ffffffffffffffda RBX: 00007efcb2bb5fa0 RCX: 00007efcb298d57c [ 1296.044680][T20641] RDX: 000000000000000f RSI: 00007efcb38850a0 RDI: 0000000000000004 [ 1296.044690][T20641] RBP: 00007efcb3885090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.044700][T20641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.044710][T20641] R13: 0000000000000000 R14: 00007efcb2bb5fa0 R15: 00007ffda1b7cd78 [ 1296.044734][T20641] [ 1296.225048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1296.661953][T20656] FAULT_INJECTION: forcing a failure. [ 1296.661953][T20656] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.676455][T20656] CPU: 0 UID: 0 PID: 20656 Comm: syz.3.3837 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1296.676481][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1296.676490][T20656] Call Trace: [ 1296.676496][T20656] [ 1296.676502][T20656] dump_stack_lvl+0x16c/0x1f0 [ 1296.676532][T20656] should_fail_ex+0x512/0x640 [ 1296.676546][T20656] ? fs_reclaim_acquire+0xae/0x150 [ 1296.676570][T20656] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1296.676596][T20656] should_failslab+0xc2/0x120 [ 1296.676616][T20656] __kmalloc_noprof+0xd2/0x510 [ 1296.676640][T20656] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1296.676664][T20656] ? tomoyo_profile+0x47/0x60 [ 1296.676691][T20656] tomoyo_path_number_perm+0x245/0x580 [ 1296.676708][T20656] ? tomoyo_path_number_perm+0x237/0x580 [ 1296.676728][T20656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1296.676747][T20656] ? find_held_lock+0x2b/0x80 [ 1296.676790][T20656] ? find_held_lock+0x2b/0x80 [ 1296.676809][T20656] ? hook_file_ioctl_common+0x145/0x410 [ 1296.676838][T20656] ? __fget_files+0x20e/0x3c0 [ 1296.676862][T20656] security_file_ioctl+0x9b/0x240 [ 1296.676884][T20656] __x64_sys_ioctl+0xb7/0x210 [ 1296.676910][T20656] do_syscall_64+0xcd/0x4c0 [ 1296.676939][T20656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.676956][T20656] RIP: 0033:0x7f8c3db8eb69 [ 1296.676970][T20656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1296.676986][T20656] RSP: 002b:00007f8c3e9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1296.677005][T20656] RAX: ffffffffffffffda RBX: 00007f8c3ddb5fa0 RCX: 00007f8c3db8eb69 [ 1296.677016][T20656] RDX: 0000200000001040 RSI: 00000000c0205648 RDI: 0000000000000003 [ 1296.677027][T20656] RBP: 00007f8c3e9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.677038][T20656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.677048][T20656] R13: 0000000000000000 R14: 00007f8c3ddb5fa0 R15: 00007fffa6303178 [ 1296.677072][T20656] [ 1296.677080][T20656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1296.895599][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.125817][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.855532][T20665] bio_check_eod: 2 callbacks suppressed [ 1297.855548][T20665] syz.3.3839: attempt to access beyond end of device [ 1297.855548][T20665] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1297.914971][T20665] syz.3.3839: attempt to access beyond end of device [ 1297.914971][T20665] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1297.928681][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.945551][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1297.967109][ T5926] usb 2-1: USB disconnect, device number 91 [ 1297.978283][T20665] syz.3.3839: attempt to access beyond end of device [ 1297.978283][T20665] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1298.077883][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1298.459111][T20665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1298.468680][T20665] UDF-fs: Scanning with blocksize 1024 failed [ 1298.565452][T20665] syz.3.3839: attempt to access beyond end of device [ 1298.565452][T20665] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1298.594136][T20665] syz.3.3839: attempt to access beyond end of device [ 1298.594136][T20665] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1298.610620][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1298.623732][T20665] syz.3.3839: attempt to access beyond end of device [ 1298.623732][T20665] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1298.770255][T20682] syz.5.3845: attempt to access beyond end of device [ 1298.770255][T20682] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1298.793831][T20682] syz.5.3845: attempt to access beyond end of device [ 1298.793831][T20682] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1298.810518][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1298.827305][T20665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1298.827538][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1298.855333][ T5926] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1298.876909][T20665] UDF-fs: Scanning with blocksize 2048 failed [ 1298.898040][T20682] syz.5.3845: attempt to access beyond end of device [ 1298.898040][T20682] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1298.898720][T20665] syz.3.3839: attempt to access beyond end of device [ 1298.898720][T20665] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1298.947442][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1298.947702][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1298.967058][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.989167][T20665] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1298.999192][T20665] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1298.999219][T20682] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1299.015071][T20665] UDF-fs: Scanning with blocksize 4096 failed [ 1299.022582][T20682] UDF-fs: Scanning with blocksize 512 failed [ 1299.022694][T20665] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1299.031055][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1299.048909][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.062261][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.075766][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1299.086522][T20682] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1299.100091][T20682] UDF-fs: Scanning with blocksize 1024 failed [ 1299.130883][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1299.150232][ T5926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1299.166982][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.185463][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1299.203044][ T5926] usb 2-1: config 0 descriptor?? [ 1299.294259][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1299.304184][T20682] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1299.312080][T20682] UDF-fs: Scanning with blocksize 2048 failed [ 1299.323306][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1299.349347][T20682] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1299.369256][T20682] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1299.378948][T20682] UDF-fs: Scanning with blocksize 4096 failed [ 1299.386736][T20682] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1299.713883][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.722639][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.731654][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.738377][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.748302][ T1215] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1299.790674][ T1215] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 1299.853493][ T5926] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1299.865568][ T1215] usb 1-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 1299.874158][ T1215] usb 1-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 1300.006347][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.062344][T20696] nfs: Unknown parameter 'sm' [ 1300.646892][ T5925] usb 2-1: USB disconnect, device number 92 [ 1300.665281][ T5926] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1301.045060][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.145854][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1301.156845][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1301.167082][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.184929][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1301.194923][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.249906][ T5926] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 1301.645055][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1301.700223][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1301.838516][T20722] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1301.851250][T20722] UDF-fs: Scanning with blocksize 512 failed [ 1301.942559][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1301.958603][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1301.969478][T20722] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1301.978977][T20722] UDF-fs: Scanning with blocksize 1024 failed [ 1301.993556][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1302.022713][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1302.033074][T20722] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1302.041101][T20722] UDF-fs: Scanning with blocksize 2048 failed [ 1302.057353][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1302.072965][T20722] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1302.086797][T20722] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 1302.098357][T20722] UDF-fs: Scanning with blocksize 4096 failed [ 1302.107427][T20722] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1302.258934][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.725425][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.786943][ T30] audit: type=1400 audit(1754414075.895:908): avc: denied { mounton } for pid=20731 comm="syz.3.3860" path="/file0" dev="ramfs" ino=75554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1303.006287][ T30] audit: type=1400 audit(1754414076.065:909): avc: denied { accept } for pid=20732 comm="syz.0.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1303.085432][T11938] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1303.210868][T20744] binder: 20743:20744 unknown command 0 [ 1303.220895][T20744] binder: 20743:20744 ioctl c0306201 200000000080 returned -22 [ 1303.235098][T20744] binder: 20743:20744 ioctl c0306201 0 returned -14 [ 1303.235424][T11938] usb 4-1: Using ep0 maxpacket: 16 [ 1303.242724][T20744] binder: 20743:20744 ioctl c0306201 200000000280 returned -11 [ 1303.277178][T11938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.291086][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.319375][T11938] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1303.369419][ T6002] usb 6-1: USB disconnect, device number 24 [ 1303.415354][T11938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.561171][T20750] /dev/nullb0: Can't open blockdev [ 1303.878686][T11938] usb 4-1: config 0 descriptor?? [ 1304.168563][T11938] usbhid 4-1:0.0: can't add hid device: -71 [ 1304.174561][T11938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1304.445817][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.482093][T11938] usb 4-1: USB disconnect, device number 105 [ 1304.577507][ T30] audit: type=1400 audit(1754414077.695:910): avc: denied { read } for pid=20755 comm="syz.6.3867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1304.806095][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.898763][ T30] audit: type=1400 audit(1754414078.135:911): avc: denied { ioctl } for pid=20755 comm="syz.6.3867" path="socket:[75577]" dev="sockfs" ino=75577 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1306.005485][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.022524][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.164850][ T6002] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1306.466921][ T6002] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1306.475776][ T6002] usb 7-1: config 0 has no interface number 0 [ 1306.482520][ T6002] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.501646][ T6002] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1306.530913][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.676083][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1306.685410][T20767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.692964][T20767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.891985][T19354] Bluetooth: hci4: command 0x0406 tx timeout [ 1306.926398][ T6002] usb 7-1: Product: syz [ 1306.945419][ T6002] usb 7-1: Manufacturer: syz [ 1306.951781][ T6002] usb 7-1: SerialNumber: syz [ 1306.991703][T20767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.006193][T20767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.049391][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.121510][ T6002] usb 7-1: config 0 descriptor?? [ 1307.356042][ T30] audit: type=1400 audit(1754414080.465:912): avc: denied { create } for pid=20774 comm="syz.1.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1307.841796][ T6002] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1308.057671][ T6002] usb 7-1: USB disconnect, device number 7 [ 1308.122700][T20783] binder: 20782:20783 unknown command 0 [ 1308.158852][T20783] binder: 20782:20783 ioctl c0306201 200000000080 returned -22 [ 1308.159687][ T6002] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1308.186909][T20783] binder: 20782:20783 ioctl c0306201 0 returned -14 [ 1308.214129][T20783] binder: 20782:20783 ioctl c0306201 200000000280 returned -11 [ 1308.215055][T20784] FAULT_INJECTION: forcing a failure. [ 1308.215055][T20784] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.245271][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.263995][T20784] CPU: 1 UID: 0 PID: 20784 Comm: syz.1.3874 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1308.264021][T20784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1308.264031][T20784] Call Trace: [ 1308.264038][T20784] [ 1308.264045][T20784] dump_stack_lvl+0x16c/0x1f0 [ 1308.264076][T20784] should_fail_ex+0x512/0x640 [ 1308.264091][T20784] ? fs_reclaim_acquire+0xae/0x150 [ 1308.264116][T20784] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1308.264139][T20784] should_failslab+0xc2/0x120 [ 1308.264160][T20784] __kmalloc_noprof+0xd2/0x510 [ 1308.264185][T20784] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1308.264210][T20784] ? tomoyo_profile+0x47/0x60 [ 1308.264239][T20784] tomoyo_path_number_perm+0x245/0x580 [ 1308.264257][T20784] ? tomoyo_path_number_perm+0x237/0x580 [ 1308.264278][T20784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1308.264298][T20784] ? find_held_lock+0x2b/0x80 [ 1308.264342][T20784] ? find_held_lock+0x2b/0x80 [ 1308.264368][T20784] ? hook_file_ioctl_common+0x145/0x410 [ 1308.264400][T20784] ? __fget_files+0x20e/0x3c0 [ 1308.264424][T20784] security_file_ioctl+0x9b/0x240 [ 1308.264448][T20784] __x64_sys_ioctl+0xb7/0x210 [ 1308.264475][T20784] do_syscall_64+0xcd/0x4c0 [ 1308.264503][T20784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.264521][T20784] RIP: 0033:0x7fef1338eb69 [ 1308.264535][T20784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1308.264552][T20784] RSP: 002b:00007fef141e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.264568][T20784] RAX: ffffffffffffffda RBX: 00007fef135b6080 RCX: 00007fef1338eb69 [ 1308.264580][T20784] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1308.264590][T20784] RBP: 00007fef141e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.264601][T20784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.264611][T20784] R13: 0000000000000000 R14: 00007fef135b6080 R15: 00007fff68923688 [ 1308.264636][T20784] [ 1308.264643][T20784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1308.885085][ T6002] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1309.045728][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.315069][T17192] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1309.346772][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.426808][ T6002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1309.446626][ T6002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1309.463823][ T6002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.480211][ T6002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1309.490303][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.498398][T17192] usb 2-1: Using ep0 maxpacket: 16 [ 1309.506438][T17192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.583317][ T6002] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 1309.605545][T17192] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1309.616632][T17192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.641625][T17192] usb 2-1: config 0 descriptor?? [ 1309.864962][T17192] usbhid 2-1:0.0: can't add hid device: -71 [ 1309.927833][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.949738][T17192] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1309.972010][T17192] usb 2-1: USB disconnect, device number 93 [ 1310.086122][T20806] bio_check_eod: 23 callbacks suppressed [ 1310.086138][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.086138][T20806] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1310.108496][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.108496][T20806] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1310.123187][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1310.136717][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.136717][T20806] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1310.157063][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1310.168147][T20806] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1310.177459][T20806] UDF-fs: Scanning with blocksize 512 failed [ 1310.190318][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.190318][T20806] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1310.207006][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.207006][T20806] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1310.221719][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1310.233213][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.233213][T20806] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1310.248056][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1310.263330][T20806] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1310.272488][T20806] UDF-fs: Scanning with blocksize 1024 failed [ 1310.283832][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.283832][T20806] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1310.298861][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.298861][T20806] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1310.313676][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1310.327285][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.327285][T20806] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1310.342125][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1310.353009][T20806] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1310.365534][T20806] UDF-fs: Scanning with blocksize 2048 failed [ 1310.373483][T20806] syz.0.3882: attempt to access beyond end of device [ 1310.373483][T20806] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1310.389052][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1310.400717][T20806] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1310.412039][T20806] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1310.421204][T20806] UDF-fs: Scanning with blocksize 4096 failed [ 1310.429043][T20806] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1310.595676][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.056172][T20817] lo speed is unknown, defaulting to 1000 [ 1311.071129][T20817] lo speed is unknown, defaulting to 1000 [ 1311.081908][T20817] lo speed is unknown, defaulting to 1000 [ 1311.515753][T20817] infiniband sz1: set active [ 1311.520657][T20817] infiniband sz1: added lo [ 1311.561946][T20817] RDS/IB: sz1: added [ 1311.566404][T20817] smc: adding ib device sz1 with port count 1 [ 1311.572600][T20817] smc: ib device sz1 port 1 has pnetid [ 1311.579480][T20817] lo speed is unknown, defaulting to 1000 [ 1311.670182][T20817] lo speed is unknown, defaulting to 1000 [ 1311.758177][T20817] lo speed is unknown, defaulting to 1000 [ 1311.844067][T20817] lo speed is unknown, defaulting to 1000 [ 1311.955300][ T5926] lo speed is unknown, defaulting to 1000 [ 1311.965521][ T5926] lo speed is unknown, defaulting to 1000 [ 1311.972027][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.996951][T20817] lo speed is unknown, defaulting to 1000 [ 1312.079687][T20817] lo speed is unknown, defaulting to 1000 [ 1312.160064][T20817] lo speed is unknown, defaulting to 1000 [ 1312.313967][T17192] usb 7-1: USB disconnect, device number 8 [ 1312.411700][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1312.422882][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1312.434208][T20816] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1312.451033][T20816] UDF-fs: Scanning with blocksize 512 failed [ 1312.468425][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1312.491897][T20829] binder: 20826:20829 unknown command 0 [ 1312.498397][T20829] binder: 20826:20829 ioctl c0306201 200000000080 returned -22 [ 1312.509665][T20829] binder: BINDER_SET_CONTEXT_MGR already set [ 1312.516085][T20829] binder: 20826:20829 ioctl 4018620d 200000000040 returned -16 [ 1312.525008][T20829] binder: 20826:20829 ioctl c0306201 0 returned -14 [ 1312.532654][T20829] binder: 20826:20829 ioctl c0306201 200000000280 returned -11 [ 1312.580865][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1312.791603][T20816] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1312.819815][T20816] UDF-fs: Scanning with blocksize 1024 failed [ 1312.831067][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1312.919966][ T30] audit: type=1400 audit(1754414085.995:913): avc: denied { read } for pid=20830 comm="syz.1.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1312.955320][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1312.965571][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.974001][T20816] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1312.989980][ T30] audit: type=1400 audit(1754414085.995:914): avc: denied { listen } for pid=20830 comm="syz.1.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1313.023877][T20816] UDF-fs: Scanning with blocksize 2048 failed [ 1313.034469][ T30] audit: type=1400 audit(1754414086.005:915): avc: denied { accept } for pid=20830 comm="syz.1.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1313.035561][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1313.057841][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.065482][T11938] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1313.093270][T20816] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1313.106404][T20816] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1313.114022][T20816] UDF-fs: Scanning with blocksize 4096 failed [ 1313.123947][T20816] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1313.247506][T11938] usb 7-1: Using ep0 maxpacket: 16 [ 1313.257950][T11938] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1313.266478][T11938] usb 7-1: config 0 has no interface number 0 [ 1313.278913][T11938] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1313.324436][T11938] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1313.343495][T11938] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1313.353844][T11938] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1313.363393][T11938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.388373][T11938] usb 7-1: Product: syz [ 1313.403943][T11938] usb 7-1: Manufacturer: syz [ 1313.433127][T11938] usb 7-1: SerialNumber: syz [ 1313.445438][T11938] usb 7-1: config 0 descriptor?? [ 1313.457980][T20836] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1313.465617][T20836] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1313.509597][ T30] audit: type=1400 audit(1754414086.595:916): avc: denied { connect } for pid=20840 comm="syz.5.3892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1313.539332][ T30] audit: type=1400 audit(1754414086.595:917): avc: denied { write } for pid=20840 comm="syz.5.3892" path="socket:[75760]" dev="sockfs" ino=75760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1313.867106][T20836] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1313.971330][T20836] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1314.085376][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.341614][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1314.352403][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1314.362281][T20852] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1314.370155][T20852] UDF-fs: Scanning with blocksize 1024 failed [ 1314.376946][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1314.386801][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1314.396593][T20852] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1314.404119][T20852] UDF-fs: Scanning with blocksize 2048 failed [ 1314.410953][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1314.420831][T20852] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1314.430680][T20852] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1314.438715][T20852] UDF-fs: Scanning with blocksize 4096 failed [ 1314.444765][T20852] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1314.676951][T11938] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1314.825264][T16443] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1315.039227][T16443] usb 6-1: Using ep0 maxpacket: 16 [ 1315.134954][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.143063][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.236241][T16443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.257571][T16443] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1315.363800][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1315.394130][T16443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.423373][T16443] usb 6-1: config 0 descriptor?? [ 1315.561531][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.613847][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1315.624694][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.639185][T16443] usbhid 6-1:0.0: can't add hid device: -71 [ 1315.649035][T16443] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1315.669250][ T9] usb 4-1: config 0 descriptor?? [ 1315.718294][T16443] usb 6-1: USB disconnect, device number 25 [ 1315.938817][T20859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.960793][T20859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.970957][ T9] ath6kl: Failed to submit usb control message: -71 [ 1315.979072][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1316.004406][ T9] ath6kl: Unable to send get target info: -71 [ 1316.012695][T16443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.030496][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1316.043225][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1316.064689][ T9] usb 4-1: USB disconnect, device number 106 [ 1316.067673][T20871] binder: 20870:20871 unknown command 0 [ 1316.081459][T20871] binder: 20870:20871 ioctl c0306201 200000000080 returned -22 [ 1316.094272][T20871] binder: 20870:20871 ioctl c0306201 200000000280 returned -11 [ 1316.248370][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.777122][T11938] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 1316.817540][T11938] usb 7-1: USB disconnect, device number 9 [ 1316.849569][T20887] FAULT_INJECTION: forcing a failure. [ 1316.849569][T20887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.015101][T20887] CPU: 0 UID: 0 PID: 20887 Comm: syz.6.3905 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1317.015129][T20887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1317.015140][T20887] Call Trace: [ 1317.015146][T20887] [ 1317.015154][T20887] dump_stack_lvl+0x16c/0x1f0 [ 1317.015184][T20887] should_fail_ex+0x512/0x640 [ 1317.015204][T20887] _copy_from_user+0x2e/0xd0 [ 1317.015224][T20887] copy_msghdr_from_user+0x98/0x160 [ 1317.015250][T20887] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1317.015285][T20887] ___sys_sendmsg+0xfe/0x1d0 [ 1317.015310][T20887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.015357][T20887] ? __mutex_unlock_slowpath+0x100/0x800 [ 1317.015392][T20887] __sys_sendmsg+0x16d/0x220 [ 1317.015417][T20887] ? __pfx___sys_sendmsg+0x10/0x10 [ 1317.015459][T20887] do_syscall_64+0xcd/0x4c0 [ 1317.015488][T20887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.015506][T20887] RIP: 0033:0x7efcb298eb69 [ 1317.015527][T20887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.015543][T20887] RSP: 002b:00007efcb3885038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.015560][T20887] RAX: ffffffffffffffda RBX: 00007efcb2bb5fa0 RCX: 00007efcb298eb69 [ 1317.015571][T20887] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1317.015582][T20887] RBP: 00007efcb3885090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.015592][T20887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.015602][T20887] R13: 0000000000000000 R14: 00007efcb2bb5fa0 R15: 00007ffda1b7cd78 [ 1317.015625][T20887] [ 1317.386843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.689593][T20893] FAULT_INJECTION: forcing a failure. [ 1317.689593][T20893] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.835041][T20901] bio_check_eod: 23 callbacks suppressed [ 1317.835057][T20901] syz.3.3908: attempt to access beyond end of device [ 1317.835057][T20901] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1317.854195][T20901] syz.3.3908: attempt to access beyond end of device [ 1317.854195][T20901] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1317.867374][T20901] Mount JFS Failure: -5 [ 1318.139490][T20883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'. [ 1318.405003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.045257][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.343956][T20883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1319.351431][T20893] CPU: 0 UID: 0 PID: 20893 Comm: syz.5.3906 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1319.351455][T20893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1319.351466][T20893] Call Trace: [ 1319.351474][T20893] [ 1319.351481][T20893] dump_stack_lvl+0x16c/0x1f0 [ 1319.351510][T20893] should_fail_ex+0x512/0x640 [ 1319.351524][T20893] ? fs_reclaim_acquire+0xae/0x150 [ 1319.351544][T20893] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1319.351562][T20893] should_failslab+0xc2/0x120 [ 1319.351577][T20893] __kmalloc_noprof+0xd2/0x510 [ 1319.351595][T20893] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1319.351614][T20893] ? tomoyo_profile+0x47/0x60 [ 1319.351635][T20893] tomoyo_path_number_perm+0x245/0x580 [ 1319.351649][T20893] ? tomoyo_path_number_perm+0x237/0x580 [ 1319.351666][T20893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1319.351681][T20893] ? lockdep_hardirqs_on+0x7c/0x110 [ 1319.351718][T20893] ? find_held_lock+0x2b/0x80 [ 1319.351734][T20893] ? hook_file_ioctl_common+0x145/0x410 [ 1319.351758][T20893] ? __fget_files+0x20e/0x3c0 [ 1319.351780][T20893] security_file_ioctl+0x9b/0x240 [ 1319.351799][T20893] __x64_sys_ioctl+0xb7/0x210 [ 1319.351820][T20893] do_syscall_64+0xcd/0x4c0 [ 1319.351841][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.351856][T20893] RIP: 0033:0x7fd620b8eb69 [ 1319.351868][T20893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.351881][T20893] RSP: 002b:00007fd6219ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.351895][T20893] RAX: ffffffffffffffda RBX: 00007fd620db5fa0 RCX: 00007fd620b8eb69 [ 1319.351904][T20893] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1319.351912][T20893] RBP: 00007fd6219ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.351920][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.351928][T20893] R13: 0000000000000000 R14: 00007fd620db5fa0 R15: 00007ffcfa744758 [ 1319.351947][T20893] [ 1319.351971][T20893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1319.455055][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.583479][ T30] audit: type=1400 audit(1754414092.685:918): avc: denied { cmd } for pid=20899 comm="syz.6.3909" path="socket:[76223]" dev="sockfs" ino=76223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1319.613152][T20883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1319.629657][ T30] audit: type=1400 audit(1754414092.735:919): avc: denied { read } for pid=20903 comm="syz.3.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1319.683927][ T30] audit: type=1400 audit(1754414092.795:920): avc: denied { connect } for pid=20903 comm="syz.3.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1319.718404][T20909] binder: 20907:20909 unknown command 0 [ 1319.724153][T20909] binder: 20907:20909 ioctl c0306201 200000000080 returned -22 [ 1319.726299][T20883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1319.739900][T20883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1319.741640][T20909] binder: BINDER_SET_CONTEXT_MGR already set [ 1319.873786][T20909] binder: 20907:20909 ioctl 4018620d 200000000040 returned -16 [ 1320.498382][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.392197][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.392197][T20931] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1321.405325][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.405325][T20931] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1321.418771][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1321.428372][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.428372][T20931] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1321.441235][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1321.450694][T20931] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1321.458222][T20931] UDF-fs: Scanning with blocksize 512 failed [ 1321.464576][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.464576][T20931] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1321.477503][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.477503][T20931] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1321.490412][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1321.499990][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.499990][T20931] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1321.512946][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1321.523003][T20931] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1321.530586][T20931] UDF-fs: Scanning with blocksize 1024 failed [ 1321.536948][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.536948][T20931] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1321.549785][T20931] syz.0.3918: attempt to access beyond end of device [ 1321.549785][T20931] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1321.562738][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1321.572267][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1321.581718][T20931] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1321.589241][T20931] UDF-fs: Scanning with blocksize 2048 failed [ 1321.595645][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1321.605371][T20931] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1321.614832][T20931] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 1321.622935][T20931] UDF-fs: Scanning with blocksize 4096 failed [ 1321.628998][T20931] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1321.641365][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.686563][T19354] Bluetooth: hci4: command 0x0406 tx timeout [ 1322.086360][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.106140][T20946] FAULT_INJECTION: forcing a failure. [ 1322.106140][T20946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1322.163413][T20946] CPU: 0 UID: 0 PID: 20946 Comm: syz.3.3920 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1322.163440][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1322.163450][T20946] Call Trace: [ 1322.163456][T20946] [ 1322.163463][T20946] dump_stack_lvl+0x16c/0x1f0 [ 1322.163498][T20946] should_fail_ex+0x512/0x640 [ 1322.163518][T20946] _copy_from_user+0x2e/0xd0 [ 1322.163538][T20946] copy_msghdr_from_user+0x98/0x160 [ 1322.163563][T20946] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1322.163592][T20946] ? __pfx__kstrtoull+0x10/0x10 [ 1322.163620][T20946] ___sys_sendmsg+0xfe/0x1d0 [ 1322.163647][T20946] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.163684][T20946] ? find_held_lock+0x2b/0x80 [ 1322.163723][T20946] __sys_sendmmsg+0x200/0x420 [ 1322.163750][T20946] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1322.163782][T20946] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1322.163819][T20946] ? fput+0x9b/0xd0 [ 1322.163842][T20946] ? ksys_write+0x1ac/0x250 [ 1322.163858][T20946] ? __pfx_ksys_write+0x10/0x10 [ 1322.163880][T20946] __x64_sys_sendmmsg+0x9c/0x100 [ 1322.163903][T20946] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.163927][T20946] do_syscall_64+0xcd/0x4c0 [ 1322.163955][T20946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.163973][T20946] RIP: 0033:0x7f8c3db8eb69 [ 1322.163987][T20946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1322.164004][T20946] RSP: 002b:00007f8c3e9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1322.164021][T20946] RAX: ffffffffffffffda RBX: 00007f8c3ddb5fa0 RCX: 00007f8c3db8eb69 [ 1322.164033][T20946] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1322.164043][T20946] RBP: 00007f8c3e9b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.164053][T20946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.164063][T20946] R13: 0000000000000000 R14: 00007f8c3ddb5fa0 R15: 00007fffa6303178 [ 1322.164086][T20946] [ 1322.530242][T20951] binder: 20949:20951 unknown command 0 [ 1322.536671][T20951] binder: 20949:20951 ioctl c0306201 200000000080 returned -22 [ 1322.546454][T20951] binder: BINDER_SET_CONTEXT_MGR already set [ 1322.552412][T20951] binder: 20949:20951 ioctl 4018620d 200000000040 returned -16 [ 1322.560663][T20951] binder: 20949:20951 ioctl c0306201 200000000280 returned -11 [ 1322.656260][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.915141][T11938] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1323.155203][T11938] usb 6-1: Using ep0 maxpacket: 8 [ 1323.182638][T11938] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1323.208816][T11938] usb 6-1: config 0 has no interface number 0 [ 1323.241231][T11938] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=6c.9a [ 1323.253484][T11938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.467694][T11938] usb 6-1: Product: syz [ 1323.485415][T11938] usb 6-1: Manufacturer: syz [ 1323.515797][T11938] usb 6-1: SerialNumber: syz [ 1323.546321][T11938] usb 6-1: config 0 descriptor?? [ 1323.721401][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.757755][T20967] /dev/nullb0: Can't open blockdev [ 1323.808632][T20954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.827052][T20954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.853877][T11938] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1323.867685][T11938] gspca_sn9c2028: read1 error -71 [ 1323.874731][T11938] gspca_sn9c2028: read1 error -71 [ 1323.880412][T11938] gspca_sn9c2028: read1 error -71 [ 1323.906275][T11938] sn9c2028 6-1:0.64: probe with driver sn9c2028 failed with error -71 [ 1323.929637][T11938] usb 6-1: USB disconnect, device number 26 [ 1324.601106][T20982] netlink: 'syz.1.3930': attribute type 10 has an invalid length. [ 1324.641212][T20982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.655050][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1324.655434][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.665963][T20983] loop7: detected capacity change from 0 to 16384 [ 1324.671848][T20982] bond0: (slave team0): Enslaving as an active interface with an up link [ 1324.758095][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.854930][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1324.871810][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.893019][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1324.931300][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.175322][T11938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.267530][ T24] usb 7-1: config 0 descriptor?? [ 1325.287286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.391878][T20988] tipc: Started in network mode [ 1325.403499][T20988] tipc: Node identity 8a46598dfcef, cluster identity 4711 [ 1325.413359][T20988] tipc: Enabled bearer , priority 0 [ 1325.423272][T20988] syzkaller0: entered promiscuous mode [ 1325.428827][T20988] syzkaller0: entered allmulticast mode [ 1325.484732][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1325.630054][T21000] netlink: 'syz.1.3935': attribute type 10 has an invalid length. [ 1325.708851][T20998] tipc: Resetting bearer [ 1325.778378][T17192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.792558][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1325.832789][T20987] tipc: Resetting bearer [ 1325.855477][ T24] usb 7-1: USB disconnect, device number 10 [ 1325.880340][T20987] tipc: Disabling bearer [ 1326.463492][T21010] FAULT_INJECTION: forcing a failure. [ 1326.463492][T21010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.504195][T21010] CPU: 1 UID: 0 PID: 21010 Comm: syz.3.3938 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1326.504220][T21010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1326.504230][T21010] Call Trace: [ 1326.504237][T21010] [ 1326.504244][T21010] dump_stack_lvl+0x16c/0x1f0 [ 1326.504273][T21010] should_fail_ex+0x512/0x640 [ 1326.504294][T21010] _copy_from_user+0x2e/0xd0 [ 1326.504315][T21010] move_addr_to_kernel+0x65/0x170 [ 1326.504336][T21010] __sys_sendto+0x1be/0x520 [ 1326.504359][T21010] ? __pfx___sys_sendto+0x10/0x10 [ 1326.504402][T21010] ? ksys_write+0x1ac/0x250 [ 1326.504420][T21010] ? __pfx_ksys_write+0x10/0x10 [ 1326.504441][T21010] __x64_sys_sendto+0xe0/0x1c0 [ 1326.504470][T21010] ? do_syscall_64+0x91/0x4c0 [ 1326.504496][T21010] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.504520][T21010] do_syscall_64+0xcd/0x4c0 [ 1326.504548][T21010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.504566][T21010] RIP: 0033:0x7f8c3db8eb69 [ 1326.504580][T21010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.504595][T21010] RSP: 002b:00007f8c3e9b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1326.504613][T21010] RAX: ffffffffffffffda RBX: 00007f8c3ddb5fa0 RCX: 00007f8c3db8eb69 [ 1326.504624][T21010] RDX: 0000000000000014 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1326.504634][T21010] RBP: 00007f8c3e9b3090 R08: 0000200000000040 R09: 0000000000000010 [ 1326.504645][T21010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.504655][T21010] R13: 0000000000000000 R14: 00007f8c3ddb5fa0 R15: 00007fffa6303178 [ 1326.504679][T21010] [ 1326.775472][ T30] audit: type=1400 audit(1754414099.875:921): avc: denied { write } for pid=21008 comm="syz.6.3939" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1326.814126][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.834098][T21015] sp0: Synchronizing with TNC [ 1327.279905][T21022] FAULT_INJECTION: forcing a failure. [ 1327.279905][T21022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.317555][T21022] CPU: 0 UID: 0 PID: 21022 Comm: syz.6.3943 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1327.317582][T21022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1327.317592][T21022] Call Trace: [ 1327.317599][T21022] [ 1327.317606][T21022] dump_stack_lvl+0x16c/0x1f0 [ 1327.317636][T21022] should_fail_ex+0x512/0x640 [ 1327.317655][T21022] _copy_from_user+0x2e/0xd0 [ 1327.317675][T21022] copy_msghdr_from_user+0x98/0x160 [ 1327.317700][T21022] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1327.317737][T21022] ___sys_sendmsg+0xfe/0x1d0 [ 1327.317763][T21022] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.317809][T21022] ? __mutex_unlock_slowpath+0x100/0x800 [ 1327.317843][T21022] __sys_sendmsg+0x16d/0x220 [ 1327.317868][T21022] ? __pfx___sys_sendmsg+0x10/0x10 [ 1327.317910][T21022] do_syscall_64+0xcd/0x4c0 [ 1327.317938][T21022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.317955][T21022] RIP: 0033:0x7efcb298eb69 [ 1327.317969][T21022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.317987][T21022] RSP: 002b:00007efcb3885038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.318003][T21022] RAX: ffffffffffffffda RBX: 00007efcb2bb5fa0 RCX: 00007efcb298eb69 [ 1327.318015][T21022] RDX: 0000000020040840 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1327.318025][T21022] RBP: 00007efcb3885090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.318036][T21022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.318046][T21022] R13: 0000000000000000 R14: 00007efcb2bb5fa0 R15: 00007ffda1b7cd78 [ 1327.318070][T21022] [ 1327.655413][T11938] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1327.820402][T11938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1328.208111][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.245536][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.253818][T11938] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1328.265806][T11938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.294385][T11938] usb 4-1: config 0 descriptor?? [ 1328.311728][ T30] audit: type=1400 audit(1754414101.425:922): avc: denied { read write } for pid=21027 comm="syz.1.3946" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1328.458023][T21042] lo speed is unknown, defaulting to 1000 [ 1328.534980][ T31] INFO: task syz.2.3403:19092 blocked for more than 143 seconds. [ 1328.607199][ T31] Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 [ 1328.642564][ T30] audit: type=1400 audit(1754414101.425:923): avc: denied { open } for pid=21027 comm="syz.1.3946" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1328.686427][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.696889][ T31] task:syz.2.3403 state:D stack:27656 pid:19092 tgid:19089 ppid:17553 task_flags:0x400040 flags:0x00004004 [ 1328.709243][ T31] Call Trace: [ 1328.712522][ T31] [ 1328.715789][ T31] __schedule+0x1190/0x5de0 [ 1328.720335][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1328.725672][ T31] ? __pfx___schedule+0x10/0x10 [ 1328.731503][T21020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.740390][T21020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.749261][T11938] ath6kl: Failed to submit usb control message: -71 [ 1328.756255][T11938] ath6kl: unable to send the bmi data to the device: -71 [ 1328.769792][T11938] ath6kl: Unable to send get target info: -71 [ 1328.797582][ T31] ? find_held_lock+0x2b/0x80 [ 1329.120220][T11938] ath6kl: Failed to init ath6kl core: -71 [ 1329.133069][ T31] ? schedule+0x2d7/0x3a0 [ 1329.142524][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1329.149546][T11938] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1329.169247][ T31] schedule+0xe7/0x3a0 [ 1329.179644][ T31] schedule_preempt_disabled+0x13/0x30 [ 1329.190334][T11938] usb 4-1: USB disconnect, device number 107 [ 1329.202964][ T31] __mutex_lock+0x82a/0x10b0 [ 1329.215411][ T31] ? klist_put+0xc7/0x1b0 [ 1329.224522][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1329.234688][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1329.246640][ T31] ? kobject_put+0xab/0x5a0 [ 1329.256329][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 1329.294063][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1329.317757][ T31] ? usbdev_open+0x1b6/0x8b0 [ 1329.344352][ T31] usbdev_open+0x1b6/0x8b0 [ 1329.361037][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1329.383532][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1329.402750][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.407456][ T31] ? chrdev_open+0x58c/0x6a0 [ 1329.432522][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1329.446741][ T31] chrdev_open+0x231/0x6a0 [ 1329.470991][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1329.489713][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1329.514607][ T31] do_dentry_open+0x982/0x1530 [ 1329.529199][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1329.545421][ T31] vfs_open+0x82/0x3f0 [ 1329.553871][ T31] path_openat+0x1de4/0x2cb0 [ 1329.568954][ T31] ? __pfx_path_openat+0x10/0x10 [ 1329.588744][ T31] do_filp_open+0x20b/0x470 [ 1329.608065][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1329.615922][ T31] ? alloc_fd+0x471/0x7d0 [ 1329.624675][ T31] do_sys_openat2+0x11b/0x1d0 [ 1329.630025][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1329.635936][ T31] ? find_held_lock+0x2b/0x80 [ 1329.640677][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 1329.646359][ T31] __x64_sys_openat+0x174/0x210 [ 1329.651275][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1329.661567][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1329.667538][ T31] do_syscall_64+0xcd/0x4c0 [ 1329.675237][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.682303][ T31] RIP: 0033:0x7f5b1db8d4d0 [ 1329.687779][ T31] RSP: 002b:00007f5b1eaadb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1329.697718][ T31] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f5b1db8d4d0 [ 1329.706175][ T31] RDX: 0000000000101301 RSI: 00007f5b1eaadc10 RDI: 00000000ffffff9c [ 1329.715674][ T31] RBP: 00007f5b1eaadc10 R08: 0000000000000000 R09: 0000000000000000 [ 1329.723710][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1329.731805][ T31] R13: 0000000000000001 R14: 00007f5b1ddb5fa0 R15: 00007ffe39993638 [ 1329.744585][ T31] [ 1329.748297][ T31] [ 1329.748297][ T31] Showing all locks held in the system: [ 1329.757319][ T31] 1 lock held by pool_workqueue_/3: [ 1329.775998][ T31] #0: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1329.787584][ T31] 1 lock held by khungtaskd/31: [ 1329.793551][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1329.804186][ T31] 6 locks held by kworker/0:3/1215: [ 1329.812787][ T31] #0: ffff88814529a948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1329.824397][ T31] #1: ffffc9000465fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1329.836354][ T31] #2: ffff8881453f8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1329.845941][ T31] #3: ffff88807c60b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1329.855863][ T31] #4: ffff888029f5d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1329.866788][ T31] #5: ffffffff8e4752b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 1329.877910][ T31] 2 locks held by kworker/u8:9/4541: [ 1329.883245][ T31] 1 lock held by syz.2.3403/19092: [ 1329.889056][ T31] #0: ffff8881453f8198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 1329.898635][ T31] 2 locks held by getty/19599: [ 1329.903494][ T31] #0: ffff8880360d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1329.916829][ T31] #1: ffffc900044252f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1329.932024][ T31] 1 lock held by syz.3.3942/21019: [ 1329.937590][ T31] #0: ffffffff8e5cc5c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1329.948189][ T31] 1 lock held by syz.6.3947/21035: [ 1329.955429][ T31] [ 1329.963489][ T31] ============================================= [ 1329.963489][ T31] [ 1329.986632][ T31] NMI backtrace for cpu 0 [ 1329.986647][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1329.986669][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1329.986678][ T31] Call Trace: [ 1329.986684][ T31] [ 1329.986691][ T31] dump_stack_lvl+0x116/0x1f0 [ 1329.986721][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1329.986740][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1329.986765][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1329.986794][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1329.986817][ T31] watchdog+0xf0e/0x1260 [ 1329.986841][ T31] ? __pfx_watchdog+0x10/0x10 [ 1329.986858][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1329.986884][ T31] ? __kthread_parkme+0x19e/0x250 [ 1329.986910][ T31] ? __pfx_watchdog+0x10/0x10 [ 1329.986928][ T31] kthread+0x3c2/0x780 [ 1329.986945][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.986963][ T31] ? rcu_is_watching+0x12/0xc0 [ 1329.986985][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.987002][ T31] ret_from_fork+0x5d7/0x6f0 [ 1329.987019][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.987036][ T31] ret_from_fork_asm+0x1a/0x30 [ 1329.987069][ T31] [ 1329.987075][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1330.115570][ C1] NMI backtrace for cpu 1 [ 1330.115584][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1330.115600][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1330.115608][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1330.115630][ C1] Code: 5c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 92 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1330.115642][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1330.115654][ C1] RAX: 0000000008cf67ab RBX: 0000000000000001 RCX: ffffffff8b927c29 [ 1330.115663][ C1] RDX: 0000000000000000 RSI: ffffffff8de4d213 RDI: ffffffff8c160d00 [ 1330.115671][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1330.115679][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1330.115687][ C1] R13: ffff88801e2b2440 R14: ffffffff90aaec90 R15: 0000000000000000 [ 1330.115696][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 1330.115710][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.115719][ C1] CR2: 0000200000339000 CR3: 00000000749c0000 CR4: 00000000003526f0 [ 1330.115728][ C1] Call Trace: [ 1330.115733][ C1] [ 1330.115738][ C1] default_idle+0x13/0x20 [ 1330.115751][ C1] default_idle_call+0x6d/0xb0 [ 1330.115763][ C1] do_idle+0x391/0x510 [ 1330.115782][ C1] ? __pfx_do_idle+0x10/0x10 [ 1330.115801][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1330.115817][ C1] cpu_startup_entry+0x4f/0x60 [ 1330.115832][ C1] start_secondary+0x21d/0x2b0 [ 1330.115851][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1330.115871][ C1] common_startup_64+0x13e/0x148 [ 1330.115890][ C1] [ 1330.118133][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1330.296161][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11699-g7e161a991ea7 #0 PREEMPT(full) [ 1330.307582][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1330.317605][ T31] Call Trace: [ 1330.320860][ T31] [ 1330.323775][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1330.328344][ T31] vpanic+0x6e8/0x7a0 [ 1330.332304][ T31] ? __pfx_vpanic+0x10/0x10 [ 1330.336782][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1330.342648][ T31] panic+0xca/0xd0 [ 1330.346347][ T31] ? __pfx_panic+0x10/0x10 [ 1330.350750][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1330.356095][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1330.362225][ T31] ? watchdog+0xd78/0x1260 [ 1330.366613][ T31] ? watchdog+0xd6b/0x1260 [ 1330.371001][ T31] watchdog+0xd89/0x1260 [ 1330.375216][ T31] ? __pfx_watchdog+0x10/0x10 [ 1330.379861][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1330.385034][ T31] ? __kthread_parkme+0x19e/0x250 [ 1330.390033][ T31] ? __pfx_watchdog+0x10/0x10 [ 1330.394679][ T31] kthread+0x3c2/0x780 [ 1330.398719][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.403287][ T31] ? rcu_is_watching+0x12/0xc0 [ 1330.408041][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.412620][ T31] ret_from_fork+0x5d7/0x6f0 [ 1330.417183][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.421742][ T31] ret_from_fork_asm+0x1a/0x30 [ 1330.426487][ T31] [ 1330.429664][ T31] Kernel Offset: disabled [ 1330.433961][ T31] Rebooting in 86400 seconds..