last executing test programs: 7m24.605891831s ago: executing program 3 (id=1492): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000180)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r9) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, 0x0, 0x4000880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000ffdbcc250900000008000300", @ANYRES32=r10, @ANYBLOB="0a0006000802110000000000050008"], 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4000) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f00000002c0)=ANY=[@ANYBLOB="000f82000000050f8200030710021a7602000a1003020b0001d8f4ff6c1003288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077ebe0f65272ccf1ee1947201fecff11"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 7m18.527216546s ago: executing program 3 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@chsw_timing={0x68, 0x4, {0xa88, 0x8}}]}]]}, 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x9, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x1}, {0xf, 0x5}, {0x10, 0x3}]}]}, {0x0, [0x0, 0x0, 0x26, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000240)=""/240, 0x59, 0xf0, 0x0, 0x6}, 0x28) 7m15.789433175s ago: executing program 3 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 6) 7m13.860941279s ago: executing program 3 (id=1518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x30, 0x12, 0x200, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x2, 0x6c}, [@proto={0x5}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) 7m12.470953302s ago: executing program 3 (id=1522): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) (fail_nth: 7) 7m12.113120471s ago: executing program 3 (id=1526): socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711022000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r5}, 0x18) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) 7m9.12160454s ago: executing program 4 (id=1529): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000001eb, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = userfaultfd(0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffefe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRES32=r1], 0x44}}, 0x4000800) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r10 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r11, 0x0, 0x8) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/167, &(0x7f0000000100)=""/47}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000340)) dup(r8) 7m7.860583579s ago: executing program 4 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000540)={0x7, @sdr={0x32314d54, 0x7f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) r8 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05ff"], 0x3) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) socket(0x2a, 0x2, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000004000000020002", @ANYRES32=0x1, @ANYBLOB="fd0effff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x48) 7m6.620020149s ago: executing program 4 (id=1534): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2e00}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000050) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x9, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x121500) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x3) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 7m2.2149656s ago: executing program 4 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000040)={r6, 0x5}, &(0x7f0000000100)=0x8) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000400000000000000000000d85c8ae5f6370c001af151a7787c518c8ad77a9503a57fe246ccf54f1cc671895cb39bbacfdeac156cf4c5f2c4957ff50c414b9fd9279cf07180be887fc91f9fbc6dcabbc40c8c03f0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000023000000950627279219f171d531afe3d149702b005d55934941a1c40cb869179e3fb4067078a23cfcbb3e1f98acd7517382024d88fd452ee0dd110f0eee5642393f0b44d512d6ff3fe64164bc68eace06c3d9dec3bcf206bd80a63ec5a25ce3639e29ccc46d3f01dbd32a4dcfc86d5e16ae8da1d572f297f3d9300e38cc225450506c2a606188691f6620b3eb6e99530d67eb03c83ffa2752864fa44f221a3e7be69d50ac1821c38b516f6adad306f75b2a0a6e31d43f69a1856ecb8f81f5"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r15 = getpid() sendmsg$unix(r14, &(0x7f00000015c0)={&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, 0xee01}}}], 0x38, 0x65}, 0xc041) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2020002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0xe08, 0x9, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400000}]}, 0x1c}}, 0x80) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010000000000000000000200000000000009000000000c001680050002000200000006001c004e240000080010000180ffff08001e0022"], 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) 6m57.414164044s ago: executing program 4 (id=1543): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000145f405e04bd84b68901020301090224"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x228100) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) (fail_nth: 3) 6m56.817510791s ago: executing program 32 (id=1526): socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000800000000000000000000711022000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r5}, 0x18) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) 6m52.82288427s ago: executing program 4 (id=1553): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 6m36.441778075s ago: executing program 33 (id=1553): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 17.323105937s ago: executing program 5 (id=2338): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459d900000000e7ff0000"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0xa04) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0xfebd, &(0x7f00000001c0)=0xd) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e23, 0x2, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0xfffffffffffffee4) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r9, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 13.02145563s ago: executing program 1 (id=2341): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000020c0), &(0x7f0000002100)=0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000cc5000"/16], 0x28}}, 0x0) 11.813397406s ago: executing program 1 (id=2345): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}]}}, 0x0, 0x5a}, 0x20) socket$netlink(0x10, 0x3, 0x0) eventfd(0xffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0], 0x20) 11.695547791s ago: executing program 6 (id=2346): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "a43daeb4"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 11.671337596s ago: executing program 0 (id=2347): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setrlimit(0x5, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)=[{0x10, 0x111}, {0x10, 0x1, 0x7}], 0x20}}], 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240), 0xc, 0x0}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) (fail_nth: 9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x1}, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x890, &(0x7f00000001c0)={0xa, 0x4e22, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) r5 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) getsockname$inet6(r4, 0x0, &(0x7f00000005c0)) 11.185305969s ago: executing program 1 (id=2348): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0xffffffff, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0xb687, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0x6, 0x5, 0x3ff, 0x10000, 0x7ff, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0xb, 0x5]}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000901000000af8c96e9f8ce77c57e968e5deaf00530adfb338177bd1c05f8e914ed5aebe50cbd0b7c07dda2b86cb69e2f5050534fb36e56ac275292f8bb20b572a133a288ebe6bab7cead28ab5a8823459ef45e34e574235e6047927e83c28572666c98b9b4a1a1fcec789e78ce9596ee07affe4a4c92ffb51c732f1e4598"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x2, 0x2, {0x2, 0xc}}, 0x0}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000180)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000007c000000090a010400000000010000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f380011800e000100636f6e6e6c696d69740003002400028008000240000000010800014000000020080001400000000608000140000080010800034000000004"], 0xc4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}, 0x4e}]}) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x41) 10.491459637s ago: executing program 0 (id=2350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x30, 0x12, 0x200, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x2, 0x6c}, [@proto={0x5}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) 8.648031186s ago: executing program 0 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000002100)={0xb, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000002200)='net/dev_snmp6\x00') read$smackfs_cipsonum(r1, 0x0, 0xfffffffffffffefb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8845}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r8, &(0x7f00000000c0)={0x2020}, 0x12b7) listen(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r10, r9}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f0000000140)="df", 0x1}) 8.647476528s ago: executing program 5 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.290818733s ago: executing program 5 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000540)={0x7, @sdr={0x32314d54, 0x7f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) r8 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05ff"], 0x3) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) socket(0x2a, 0x2, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="fd0effff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x48) 6.525802519s ago: executing program 6 (id=2357): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x1, 0x64) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) fadvise64(r1, 0x8000000000000001, 0xffffffffffffffff, 0x5) 6.525339282s ago: executing program 5 (id=2358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000003c0)="d086a01900000f20e035000010000f22e0420f070f20e035000400000f22e066450f210e3e0f00910800000066baf80cb820e87c8bef66bafc0cb800800000ef3e460f01caf040ff4b0666b859008ed0", 0x50}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.509506441s ago: executing program 6 (id=2360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x81, 0x10200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.497214403s ago: executing program 1 (id=2361): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xff, 0xfffffdff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000084) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004850) sendmmsg$inet6(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4001c00) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x0) 5.324404607s ago: executing program 2 (id=2362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x30, 0x12, 0x200, 0x0, 0x0, {@in6=@mcast1, 0x0, 0x2, 0x6c}, [@proto={0x5}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) 5.257490248s ago: executing program 6 (id=2363): socket(0x1d, 0x2, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e657720646566617500002074727573746564aaaf7bb320303030303030303030303030303030303337323400e96d72917316b228108c56176cf9bf2cd0137293489cbd47963334da4d7268403a5c7c49b0e315ac98cb6e962ded0637c5be0f0b65160bf5d78fcfb63827a87f8acbe3dae71133e40d9eb3ce56a63648c255866523fc157388ba2c16b495126268d7afdb0eb74620769e1601"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 5.202858725s ago: executing program 5 (id=2364): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000091000040"]) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r5, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "2954d85866ffa7df", "4936ab074cb72d5e3ac22b437cd8096e", '\x00', "dfaee5116991f6a2"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x11a, 0x4, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x4, 0x1, 0xfffffdffffffffec, 0x0, 0x9, 0x4, {0x0, 0x5, 0x3, 0x6, 0x8, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x97e092f1f294850e, 0x7fffffff, 0x0, r5, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) 3.856330582s ago: executing program 6 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000002100)={0xb, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000002200)='net/dev_snmp6\x00') read$smackfs_cipsonum(r1, 0x0, 0xfffffffffffffefb) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8845}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r8, &(0x7f00000000c0)={0x2020}, 0x12b7) listen(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r9, r10, r9}, &(0x7f0000000080)=""/100, 0x64, &(0x7f0000000180)={&(0x7f0000000400)={'xxhash64-generic\x00'}, &(0x7f0000000140)="df", 0x1}) 3.809308079s ago: executing program 2 (id=2366): syz_io_uring_setup(0x21b1, &(0x7f0000000000)={0x0, 0x15d2, 0x200, 0x2, 0x309}, &(0x7f0000000b80), &(0x7f00000001c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x10, &(0x7f0000000180)={0x14, 0x0, 0x7}) 2.789437484s ago: executing program 2 (id=2367): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x400180) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) 2.670672068s ago: executing program 6 (id=2368): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x1, 0x0, 0x200, 0x0, 0x1, {0x3}}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x4) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, &(0x7f0000004b80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x25dfdbfe, {0x2, 0x40, 0x0, 0x0, r7}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x34}}, 0x80) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r10, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 2.612727602s ago: executing program 2 (id=2369): timerfd_create(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\v\x00'/11, @ANYRES32, @ANYBLOB="4766ba917ee69b7f665a385bdfee8a7538e5477938344017291d6198d6b273128b0c7c933441d644541eb9e13471b19b3dfb42fbf89ca020d20653283e5f74025f2b66153d5085e32694da875ba6b6a5071611cd16046d9046a78d3dcbbcb9895074d976defe5e2fa9a3127c78dc75389aee5b6d2b18e25cafbcacfc82eca200"/148, @ANYRES64=0x0], 0x20) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3, 0xdd}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private=0x4000, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffdc8, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8000061, 0x2}}]}, 0x20}}, 0x0) 2.50536315s ago: executing program 5 (id=2370): mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xd1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x10142, 0x24) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = socket(0x1, 0x4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000400)="e9834a48412503bea9da74e24f2971c38ba7029cb3ea1f92f5242dd3187182a238ccac26a7499733b45631e8b90816690f4801696e4c6502a907a30a579afb8477945dc33cd5945b3fab0e8a4aabcf6499d9a194ee655721885b7ede70fccaa14b1f1cf991ced1c0f9fa0bcef74f2dd039eb5c39a21d452cc896b838299fe3ff9e602411879c03f2e1092b618b0bbe58c9c9b5fb48f55516b22968c2bd427de1cf6d592a1752c9a0fc80e311f63156f9674eec23a57dfda435230f82", &(0x7f0000000180)=@tcp=r5, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000440), &(0x7f0000000380)=@tcp=r5, 0x1}, 0xfffffc62) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x40) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000180)=0xd3b) r9 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x1000) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}, 0x1c) 1.951894347s ago: executing program 0 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004881}, 0x80) (fail_nth: 9) 1.516108882s ago: executing program 2 (id=2372): syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0000000400000000000000000000000000702ff056ee36bd", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0xa0, 0x258, 0x690, 0x384, 0xda, 0x10000, 0x20, 0x0, {0x4, 0x7}, {0x5, 0x1}, {0xfffffffe, 0x2, 0x1}, {0x800, 0x5, 0x1}, 0x5, 0x1, 0x3ff, 0x1000, 0x1, 0x7, 0x63, 0x10002, 0x5, 0x7fff, 0x10001, 0x7, 0x24, 0x100, 0x0, 0x2}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) syz_emit_ethernet(0x4a, &(0x7f0000001600)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000740)={0x1f, @none}, 0x8) fcntl$dupfd(r0, 0x0, r2) accept4(r5, 0x0, 0x0, 0x80800) 1.404859435s ago: executing program 1 (id=2373): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) close(0x3) socket(0x25, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 817.507963ms ago: executing program 0 (id=2374): unshare(0x2a020480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$LINK_DETACH(0x22, &(0x7f00000008c0)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f026, 0xffff242d}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40000000906010800000000000000000a00fffe540008801c0007801800148014000240ec0100000000000000000000000000010c00078008000a40000000060c00078008000a40200000000c00078008000940000009ac100007800c0018400000000000000001400008801c0007801800168014000240ff020000000000000000000000000001100007800c00184000000000000000021000078009001a0073797a32000000000900020073797a32000000007ffee5218375005e61a1b69ab99ad83b62ce17f4"], 0xb4}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 73.684444ms ago: executing program 2 (id=2375): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0x0, r4, 0x0}]) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 4.890602ms ago: executing program 0 (id=2376): openat(0xffffffffffffff9c, 0x0, 0x3052c0, 0xff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(0x0, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x59, r5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x21) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rename(0x0, &(0x7f0000000280)='./file2\x00') 0s ago: executing program 1 (id=2377): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 7) kernel console output (not intermixed with test programs): val 1, probability 0, space 0, times 0 [ 894.283683][ T4939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.298131][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.2.1847 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 894.298161][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 894.298173][T12916] Call Trace: [ 894.298182][T12916] [ 894.298191][T12916] dump_stack_lvl+0x189/0x250 [ 894.298218][T12916] ? __pfx____ratelimit+0x10/0x10 [ 894.298249][T12916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.298271][T12916] ? __pfx__printk+0x10/0x10 [ 894.298302][T12916] ? __pfx___might_resched+0x10/0x10 [ 894.298328][T12916] should_fail_ex+0x414/0x560 [ 894.298362][T12916] should_failslab+0xa8/0x100 [ 894.298382][T12916] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 894.298411][T12916] ? __alloc_skb+0x112/0x2d0 [ 894.298438][T12916] __alloc_skb+0x112/0x2d0 [ 894.298465][T12916] netlink_sendmsg+0x5c6/0xb30 [ 894.298500][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.298532][T12916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 894.298560][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.298585][T12916] __sock_sendmsg+0x219/0x270 [ 894.298607][T12916] ____sys_sendmsg+0x505/0x830 [ 894.298639][T12916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.299736][T12916] ? import_iovec+0x74/0xa0 [ 894.299767][T12916] ___sys_sendmsg+0x21f/0x2a0 [ 894.299797][T12916] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.299859][T12916] ? __fget_files+0x2a/0x420 [ 894.299878][T12916] ? __fget_files+0x3a0/0x420 [ 894.299908][T12916] __x64_sys_sendmsg+0x19b/0x260 [ 894.299937][T12916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.299972][T12916] ? __pfx_ksys_write+0x10/0x10 [ 894.299997][T12916] ? rcu_is_watching+0x15/0xb0 [ 894.300024][T12916] ? do_syscall_64+0xbe/0x3b0 [ 894.300086][T12916] do_syscall_64+0xfa/0x3b0 [ 894.300105][T12916] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.300134][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.300152][T12916] ? clear_bhb_loop+0x60/0xb0 [ 894.300176][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.300196][T12916] RIP: 0033:0x7f96c9f8e929 [ 894.300214][T12916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.300231][T12916] RSP: 002b:00007f96caed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.300252][T12916] RAX: ffffffffffffffda RBX: 00007f96ca1b5fa0 RCX: 00007f96c9f8e929 [ 894.300267][T12916] RDX: 0000000000008040 RSI: 0000200000000300 RDI: 0000000000000004 [ 894.300281][T12916] RBP: 00007f96caed5090 R08: 0000000000000000 R09: 0000000000000000 [ 894.300294][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.300305][T12916] R13: 0000000000000000 R14: 00007f96ca1b5fa0 R15: 00007ffe64d29eb8 [ 894.300335][T12916] [ 894.363258][ T5912] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 894.477675][T12919] fuse: Bad value for 'fd' [ 894.571166][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.699932][T12615] veth0_vlan: entered promiscuous mode [ 894.755290][T12615] veth1_vlan: entered promiscuous mode [ 894.782014][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.914177][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 894.930069][ T5912] usb 1-1: config 0 has no interfaces? [ 894.957489][ T5912] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 894.995768][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.035141][ T5912] usb 1-1: Product: syz [ 895.040767][ T5912] usb 1-1: Manufacturer: syz [ 895.045712][T12615] veth0_macvtap: entered promiscuous mode [ 895.077483][ T5912] usb 1-1: SerialNumber: syz [ 895.113717][ T5912] usb 1-1: config 0 descriptor?? [ 895.307056][T12615] veth1_macvtap: entered promiscuous mode [ 896.141414][T12914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.254490][T12615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.280143][T12914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.428798][T10545] usb 1-1: USB disconnect, device number 82 [ 896.489710][T12615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.587770][T12615] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.629325][T12615] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.657971][T12615] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.713819][T12615] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.339336][T11935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 897.368142][T11935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 897.387288][T11935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 897.423230][T11935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 897.432163][T11935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 897.728423][T12941] lo speed is unknown, defaulting to 1000 [ 897.738316][T12942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1852'. [ 897.886211][ T4939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.922556][ T4939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.003370][T10545] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 898.468386][T10545] usb 1-1: device descriptor read/64, error -71 [ 899.821962][T11935] Bluetooth: hci5: command tx timeout [ 900.133132][T10545] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 900.581769][T10583] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.717449][T12963] netlink: 'syz.2.1858': attribute type 6 has an invalid length. [ 901.733676][T10424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.823148][T10424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.883458][T11935] Bluetooth: hci5: command tx timeout [ 901.954208][T10583] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.018866][T11935] Bluetooth: hci5: command tx timeout [ 904.133919][T12982] tty tty20: ldisc open failed (-12), clearing slot 19 [ 904.509648][T12989] fuse: Unknown parameter '01777777777777777777777' [ 904.577159][T10583] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.684545][T10583] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.803123][ T5947] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 905.053497][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 905.652467][ T5947] usb 3-1: config 0 has no interfaces? [ 905.664825][ T5947] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 905.674711][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.687122][ T5947] usb 3-1: Product: syz [ 905.692182][ T5947] usb 3-1: Manufacturer: syz [ 905.826557][ T5947] usb 3-1: SerialNumber: syz [ 906.053179][T11935] Bluetooth: hci5: command tx timeout [ 906.070001][ T5947] usb 3-1: config 0 descriptor?? [ 906.075454][T12941] chnl_net:caif_netlink_parms(): no params data found [ 906.472634][T12992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.528797][T12992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.600137][T13006] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 906.647335][ T5947] usb 3-1: USB disconnect, device number 78 [ 906.789130][T13006] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 907.285687][T13019] can0: slcan on ttyS3. [ 907.443548][ T5972] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 907.500306][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.561522][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.603349][T12941] bridge_slave_0: entered allmulticast mode [ 907.614700][T12941] bridge_slave_0: entered promiscuous mode [ 907.643212][ T5972] usb 1-1: device descriptor read/64, error -71 [ 907.697648][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.707603][T13010] can0 (unregistered): slcan off ttyS3. [ 907.714318][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.726548][T12941] bridge_slave_1: entered allmulticast mode [ 907.736979][T12941] bridge_slave_1: entered promiscuous mode [ 907.778256][T10583] bridge_slave_1: left allmulticast mode [ 907.793261][T10857] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 907.805539][T10583] bridge_slave_1: left promiscuous mode [ 907.822837][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.849868][T10583] bridge_slave_0: left allmulticast mode [ 907.893193][T10583] bridge_slave_0: left promiscuous mode [ 907.893232][ T5972] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 907.911949][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.950507][T10857] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 907.981682][T10857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.006097][T10857] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 908.027373][T10857] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 908.039759][T10857] usb 7-1: Manufacturer: syz [ 908.053232][ T5972] usb 1-1: device descriptor read/64, error -71 [ 908.077745][T10857] usb 7-1: config 0 descriptor?? [ 908.163716][ T5972] usb usb1-port1: attempt power cycle [ 908.213561][T10857] rc_core: IR keymap rc-hauppauge not found [ 908.221088][T10857] Registered IR keymap rc-empty [ 908.232968][T10857] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 908.270885][T10857] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input31 [ 908.355447][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.396872][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.503309][ T5972] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 908.559033][ T5972] usb 1-1: device descriptor read/8, error -71 [ 908.666389][T10857] usb 7-1: USB disconnect, device number 2 [ 908.823356][ T5972] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 908.886483][ T5972] usb 1-1: device descriptor read/8, error -71 [ 909.132876][ T5972] usb usb1-port1: unable to enumerate USB device [ 909.379508][ T978] kworker/0:2 (978) used greatest stack depth: 19480 bytes left [ 909.919788][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.983832][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.011910][T10583] bond0 (unregistering): Released all slaves [ 910.211614][T12941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.864507][T12941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.348629][T12941] team0: Port device team_slave_0 added [ 911.433941][T10312] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 911.703920][T10312] usb 7-1: Using ep0 maxpacket: 8 [ 911.792307][T10312] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 911.902487][T12941] team0: Port device team_slave_1 added [ 911.939114][T10312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.995785][T10312] usb 7-1: config 0 descriptor?? [ 912.253660][T10312] usb 7-1: string descriptor 0 read error: -71 [ 912.277134][T10312] hso 7-1:0.0: Can't find BULK IN endpoint [ 912.352754][T10312] usb 7-1: USB disconnect, device number 3 [ 912.542493][T12941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.546275][ T5912] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 912.577280][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.617583][T12941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.733183][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 912.854938][ T5912] usb 1-1: config 0 has no interfaces? [ 912.967599][ T5912] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=11.66 [ 913.050796][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.140296][ T5912] usb 1-1: Product: syz [ 913.178404][ T5972] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 913.192578][T13081] slcan: can't register candev [ 913.198699][T13081] Falling back ldisc for ttyS3. [ 913.205602][T12941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.222506][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.293225][T12941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.343074][ T5912] usb 1-1: Manufacturer: syz [ 913.353238][ T5912] usb 1-1: SerialNumber: syz [ 913.368911][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 913.372072][ T5912] usb 1-1: config 0 descriptor?? [ 913.386704][ T5972] usb 2-1: config 0 has no interfaces? [ 913.421391][ T5972] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 913.433624][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.433730][T10583] hsr_slave_0: left promiscuous mode [ 913.461869][ T5972] usb 2-1: Product: syz [ 913.468716][T10583] hsr_slave_1: left promiscuous mode [ 913.472288][ T5972] usb 2-1: Manufacturer: syz [ 913.481763][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.491763][T10583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.502157][T10583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.503875][ T5972] usb 2-1: SerialNumber: syz [ 913.511754][T10583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.001899][T10583] veth1_macvtap: left promiscuous mode [ 914.079552][T10583] veth0_macvtap: left promiscuous mode [ 914.127767][T10583] veth1_vlan: left promiscuous mode [ 914.196447][T10583] veth0_vlan: left promiscuous mode [ 914.578527][ T5972] usb 2-1: config 0 descriptor?? [ 914.795397][T13079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.818354][T13079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.833142][ T5972] usb 2-1: USB disconnect, device number 59 [ 916.363148][T10545] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 916.413322][T10312] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 916.513475][T10545] usb 3-1: Using ep0 maxpacket: 16 [ 916.548234][T10545] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 916.557856][T10312] usb 7-1: device descriptor read/64, error -71 [ 916.564442][T10545] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.575699][T10545] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.590424][T10545] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.600895][T10545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.609212][T10545] usb 3-1: Product: syz [ 916.613725][T10545] usb 3-1: Manufacturer: syz [ 916.618430][T10545] usb 3-1: SerialNumber: syz [ 916.646513][T10583] team0 (unregistering): Port device team_slave_1 removed [ 916.731777][T10583] team0 (unregistering): Port device team_slave_0 removed [ 916.853588][T10312] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 917.037613][T10545] usb 3-1: 0:2 : does not exist [ 917.042768][T10312] usb 7-1: device descriptor read/64, error -71 [ 917.149006][T10312] usb usb7-port1: attempt power cycle [ 917.528242][T10312] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 917.554457][T10312] usb 7-1: device descriptor read/8, error -71 [ 917.830477][T10312] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 918.107720][ T5912] usb 1-1: USB disconnect, device number 89 [ 918.277363][T10312] usb 7-1: device descriptor read/8, error -71 [ 918.290991][T12941] hsr_slave_0: entered promiscuous mode [ 918.333295][T10545] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 918.959885][T10312] usb usb7-port1: unable to enumerate USB device [ 918.969519][T12941] hsr_slave_1: entered promiscuous mode [ 919.003623][T12941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 919.046250][T12941] Cannot create hsr debugfs directory [ 919.062308][T10545] usb 3-1: USB disconnect, device number 79 [ 919.164475][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.311901][T13120] veth0_virt_wifi: renamed from veth0_macvtap [ 920.431731][T13130] slcan: can't register candev [ 920.437540][T13130] Falling back ldisc for ttyS3. [ 921.613343][ T5972] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 921.829849][ T5972] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 921.865193][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.887495][ T5972] usb 7-1: Product: syz [ 921.913276][ T5972] usb 7-1: Manufacturer: syz [ 921.935864][ T5972] usb 7-1: SerialNumber: syz [ 921.957796][T13152] x_tables: duplicate underflow at hook 1 [ 923.653013][ C1] hrtimer: interrupt took 40298 ns [ 923.802359][ T5972] gspca_main: pac207-2.14.0 probing 093a:2476 [ 923.872242][T12941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 923.934565][ T5972] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 923.941909][T12941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 923.944078][ T5972] usb 7-1: Found UVC 0.00 device syz (093a:2476) [ 923.955962][ T5972] usb 7-1: No valid video chain found. [ 923.978862][ T5972] usb 7-1: USB disconnect, device number 8 [ 924.032177][T12941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 924.106434][T12941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 924.205858][ T5947] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 924.875606][T13187] slcan: can't register candev [ 924.880795][T13187] Falling back ldisc for ttyS3. [ 925.016781][ T5947] usb 3-1: device descriptor read/64, error -71 [ 925.149959][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.251937][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.284483][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.291789][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.414558][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.421829][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.454790][ T5947] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 925.523267][ T5972] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 926.353159][ T5947] usb 3-1: device descriptor read/64, error -71 [ 926.683828][ T5947] usb usb3-port1: attempt power cycle [ 926.703221][ T5972] usb 7-1: Using ep0 maxpacket: 16 [ 926.733213][ T5972] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 926.769497][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.800288][ T5972] usb 7-1: Product: syz [ 926.813064][ T5972] usb 7-1: Manufacturer: syz [ 926.817713][ T5972] usb 7-1: SerialNumber: syz [ 926.934678][ T5972] usb 7-1: config 0 descriptor?? [ 926.958662][ T5972] cdc_acm 7-1:0.0: Zero length descriptor references [ 926.972939][ T5972] cdc_acm 7-1:0.0: probe with driver cdc_acm failed with error -22 [ 927.645282][ T5972] usb 7-1: USB disconnect, device number 9 [ 928.546350][ T5912] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 931.418647][T13236] can0: slcan on ttyS3. [ 931.587849][T12941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.730690][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.737388][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.213173][T13221] can0 (unregistered): slcan off ttyS3. [ 932.893205][T11935] Bluetooth: hci0: ISO packet too small [ 933.053264][T10312] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 933.214485][T10312] usb 2-1: device descriptor read/64, error -71 [ 933.349265][T12941] veth0_vlan: entered promiscuous mode [ 933.439321][T12941] veth1_vlan: entered promiscuous mode [ 933.463701][T10312] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 933.548924][T12941] veth0_macvtap: entered promiscuous mode [ 933.575792][T12941] veth1_macvtap: entered promiscuous mode [ 933.620849][T12941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.629231][T10312] usb 2-1: device descriptor read/64, error -71 [ 933.667614][T12941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.716639][T12941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.733849][T12941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.748534][T10312] usb usb2-port1: attempt power cycle [ 933.785832][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 933.823394][T12941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.845266][T12941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.318694][T13289] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 934.329641][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 934.369013][T10312] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 934.439870][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 934.886117][T10312] usb 2-1: device descriptor read/8, error -71 [ 934.915163][T13289] syzkaller1: Refused to change device type [ 934.935373][ T30] audit: type=1326 audit(2000000106.399:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 934.973628][ T30] audit: type=1326 audit(2000000106.409:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.002779][ T30] audit: type=1326 audit(2000000106.409:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.056994][ T30] audit: type=1326 audit(2000000106.409:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.113169][ T30] audit: type=1326 audit(2000000106.409:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.249120][T10312] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 935.264232][ T30] audit: type=1326 audit(2000000106.409:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.276756][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.286342][ T30] audit: type=1326 audit(2000000106.409:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.332348][ T30] audit: type=1326 audit(2000000106.409:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.382603][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.419789][ T30] audit: type=1326 audit(2000000106.419:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.451701][T10312] usb 2-1: device descriptor read/8, error -71 [ 935.514871][T13310] 8021q: VLANs not supported on gre0 [ 935.541243][ T30] audit: type=1326 audit(2000000106.419:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13288 comm="syz.0.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff33098e929 code=0x7ffc0000 [ 935.548827][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.575951][T10312] usb usb2-port1: unable to enumerate USB device [ 935.608501][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.668828][T13331] Bluetooth: MGMT ver 1.23 [ 938.019617][T13366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 940.529517][T13373] syz.5.1937: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 940.621424][T13373] CPU: 1 UID: 0 PID: 13373 Comm: syz.5.1937 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 940.621446][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.621455][T13373] Call Trace: [ 940.621460][T13373] [ 940.621466][T13373] dump_stack_lvl+0x189/0x250 [ 940.621487][T13373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.621500][T13373] ? __pfx__printk+0x10/0x10 [ 940.621515][T13373] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 940.621530][T13373] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 940.621546][T13373] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 940.621562][T13373] warn_alloc+0x214/0x310 [ 940.621584][T13373] ? __pfx_warn_alloc+0x10/0x10 [ 940.621600][T13373] ? __get_vm_area_node+0x28f/0x300 [ 940.621617][T13373] ? vb2_vmalloc_alloc+0xef/0x340 [ 940.621634][T13373] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 940.621661][T13373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 940.621674][T13373] ? __kasan_kmalloc+0x93/0xb0 [ 940.621693][T13373] vmalloc_user_noprof+0xad/0xf0 [ 940.621704][T13373] ? vb2_vmalloc_alloc+0xef/0x340 [ 940.621718][T13373] vb2_vmalloc_alloc+0xef/0x340 [ 940.621731][T13373] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 940.621745][T13373] __vb2_queue_alloc+0x9bf/0x15a0 [ 940.621772][T13373] vb2_core_reqbufs+0xc31/0x1420 [ 940.621793][T13373] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 940.621804][T13373] ? vb2_verify_memory_type+0x1fc/0x570 [ 940.621819][T13373] ? vb2_reqbufs+0x3a9/0x630 [ 940.621837][T13373] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 940.621855][T13373] __video_do_ioctl+0xc9b/0xdb0 [ 940.621874][T13373] ? __pfx___video_do_ioctl+0x10/0x10 [ 940.621894][T13373] video_usercopy+0x86e/0x14f0 [ 940.621913][T13373] ? __pfx___video_do_ioctl+0x10/0x10 [ 940.621926][T13373] ? __pfx_video_usercopy+0x10/0x10 [ 940.621938][T13373] ? smack_file_ioctl+0x2a9/0x340 [ 940.621962][T13373] ? __fget_files+0x2a/0x420 [ 940.621972][T13373] ? __fget_files+0x3a0/0x420 [ 940.621984][T13373] v4l2_ioctl+0x18a/0x1e0 [ 940.621998][T13373] ? __pfx_v4l2_ioctl+0x10/0x10 [ 940.622011][T13373] __se_sys_ioctl+0xf9/0x170 [ 940.622027][T13373] do_syscall_64+0xfa/0x3b0 [ 940.622038][T13373] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.622053][T13373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.622064][T13373] ? clear_bhb_loop+0x60/0xb0 [ 940.622077][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.622088][T13373] RIP: 0033:0x7fe72af8e929 [ 940.622099][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.622109][T13373] RSP: 002b:00007fe72be04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 940.622122][T13373] RAX: ffffffffffffffda RBX: 00007fe72b1b5fa0 RCX: 00007fe72af8e929 [ 940.622130][T13373] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 940.622138][T13373] RBP: 00007fe72b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 940.622145][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.622151][T13373] R13: 0000000000000000 R14: 00007fe72b1b5fa0 R15: 00007ffdec268f68 [ 940.622169][T13373] [ 940.622183][T13373] Mem-Info: [ 941.587953][T13373] active_anon:297 inactive_anon:7074 isolated_anon:0 [ 941.587953][T13373] active_file:17112 inactive_file:37729 isolated_file:0 [ 941.587953][T13373] unevictable:2304 dirty:126 writeback:0 [ 941.587953][T13373] slab_reclaimable:11239 slab_unreclaimable:101837 [ 941.587953][T13373] mapped:32653 shmem:1396 pagetables:1394 [ 941.587953][T13373] sec_pagetables:0 bounce:0 [ 941.587953][T13373] kernel_misc_reclaimable:0 [ 941.587953][T13373] free:1276910 free_pcp:15663 free_cma:0 [ 941.779106][T13373] Node 0 active_anon:1188kB inactive_anon:26304kB active_file:68240kB inactive_file:150916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130528kB dirty:632kB writeback:0kB shmem:4048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12184kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 941.826215][T13373] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 941.931725][T13373] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 942.211546][T13373] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 942.604898][T13373] Node 0 DMA32 free:1234536kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1184kB inactive_anon:26464kB active_file:66476kB inactive_file:150848kB unevictable:1536kB writepending:632kB present:3129332kB managed:2560900kB mlocked:0kB bounce:0kB free_pcp:39948kB local_pcp:15952kB free_cma:0kB [ 942.766837][T13373] lowmem_reserve[]: 0 0 1 1 1 [ 942.773232][T13373] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 942.984604][T13373] lowmem_reserve[]: 0 0 0 0 0 [ 942.989500][T13373] Node 1 Normal free:3856496kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:29304kB local_pcp:21844kB free_cma:0kB [ 943.174241][T13373] lowmem_reserve[]: 0 0 0 0 0 [ 943.868938][T13373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 943.909502][T13373] Node 0 DMA32: 817*4kB (UME) 339*8kB (ME) 288*16kB (ME) 19*32kB (UME) 188*64kB (UM) 94*128kB (UME) 148*256kB (UME) 144*512kB (UM) 84*1024kB (UM) 11*2048kB (UME) 239*4096kB (UM) = 1234364kB [ 943.986208][T13373] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 944.070249][T13373] Node 1 Normal: 3*4kB (UE) 6*8kB (UME) 9*16kB (UME) 5*32kB (ME) 6*64kB (ME) 3*128kB (UME) 3*256kB (ME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 939*4096kB (M) = 3856748kB [ 944.285121][T13373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 944.348862][T13373] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 944.432880][T13451] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 944.458631][T13373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 944.517002][T13373] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 944.683162][T13373] 56233 total pagecache pages [ 944.688663][T13373] 0 pages in swap cache [ 944.712597][T13373] Free swap = 124996kB [ 944.729029][T13373] Total swap = 124996kB [ 944.742621][T13373] 2097051 pages RAM [ 944.812089][T13373] 0 pages HighMem/MovableOnly [ 944.818104][T13373] 424719 pages reserved [ 944.827249][T13373] 0 pages cma reserved [ 946.404245][T13480] Cannot find set identified by id 3 to match [ 948.021612][T13493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1961'. [ 949.540365][T13511] x_tables: ip_tables: osf match: only valid for protocol 6 [ 949.997035][T13511] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 952.339743][ T5947] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 952.526093][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 952.538048][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 952.561754][T13546] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 952.591071][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 952.637794][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 952.663433][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.671499][ T5947] usb 2-1: Product: syz [ 952.713179][ T5947] usb 2-1: Manufacturer: syz [ 952.747582][ T5947] usb 2-1: SerialNumber: syz [ 952.803343][ T5947] usb 2-1: config 0 descriptor?? [ 952.854107][ T5947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 952.933114][ T5926] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 952.958833][ T5947] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 953.470703][ T5947] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 953.493266][ T5947] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 954.542427][ T5947] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 954.625537][T13558] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 954.642941][T13558] team0: Device ipvlan1 failed to register rx_handler [ 954.661616][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 955.787679][T11935] Bluetooth: hci5: command tx timeout [ 955.903110][ T5947] em28xx 2-1:0.0: AC97 command still being executed: not handled properly! [ 955.941935][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 956.160344][T13573] FAULT_INJECTION: forcing a failure. [ 956.160344][T13573] name failslab, interval 1, probability 0, space 0, times 0 [ 956.183228][T13573] CPU: 0 UID: 60929 PID: 13573 Comm: syz.0.1986 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 956.183258][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.183271][T13573] Call Trace: [ 956.183280][T13573] [ 956.183290][T13573] dump_stack_lvl+0x189/0x250 [ 956.183315][T13573] ? __pfx____ratelimit+0x10/0x10 [ 956.183345][T13573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.183366][T13573] ? __pfx__printk+0x10/0x10 [ 956.183394][T13573] ? __pfx___might_resched+0x10/0x10 [ 956.183423][T13573] should_fail_ex+0x414/0x560 [ 956.183455][T13573] ? traverse+0xd9/0x570 [ 956.183477][T13573] should_failslab+0xa8/0x100 [ 956.183497][T13573] __kvmalloc_node_noprof+0x161/0x5f0 [ 956.183531][T13573] ? traverse+0xd9/0x570 [ 956.183560][T13573] traverse+0xd9/0x570 [ 956.183583][T13573] ? get_pid_task+0x20/0x1f0 [ 956.183618][T13573] seq_read_iter+0xcfe/0xe10 [ 956.183661][T13573] vfs_read+0x4cd/0x980 [ 956.183697][T13573] ? __pfx_vfs_read+0x10/0x10 [ 956.183733][T13573] ? __fget_files+0x2a/0x420 [ 956.183761][T13573] __x64_sys_pread64+0x193/0x220 [ 956.183791][T13573] ? __pfx___x64_sys_pread64+0x10/0x10 [ 956.183817][T13573] ? rcu_is_watching+0x15/0xb0 [ 956.183845][T13573] ? do_syscall_64+0xbe/0x3b0 [ 956.183869][T13573] do_syscall_64+0xfa/0x3b0 [ 956.183888][T13573] ? lockdep_hardirqs_on+0x9c/0x150 [ 956.183914][T13573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.183932][T13573] ? clear_bhb_loop+0x60/0xb0 [ 956.183955][T13573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.183975][T13573] RIP: 0033:0x7ff33098e929 [ 956.183993][T13573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.184011][T13573] RSP: 002b:00007ff331728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 956.184030][T13573] RAX: ffffffffffffffda RBX: 00007ff330bb5fa0 RCX: 00007ff33098e929 [ 956.184044][T13573] RDX: 000000000000fecf RSI: 0000200000002240 RDI: 0000000000000003 [ 956.184057][T13573] RBP: 00007ff331728090 R08: 0000000000000000 R09: 0000000000000000 [ 956.184069][T13573] R10: 00000000000004eb R11: 0000000000000246 R12: 0000000000000001 [ 956.184080][T13573] R13: 0000000000000000 R14: 00007ff330bb5fa0 R15: 00007fff7e6534d8 [ 956.184110][T13573] [ 956.502160][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 956.509473][ T5972] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 956.568503][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 956.756590][ T5947] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 956.776842][ T5947] usb 2-1: USB disconnect, device number 64 [ 956.818616][ T5972] usb 3-1: device descriptor read/64, error -71 [ 956.974230][T13605] can0: slcan on ttyS3. [ 957.377193][T13607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.411147][ T5972] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 957.505352][T13606] bridge0: port 1(syz_tun) entered blocking state [ 957.512219][T13606] bridge0: port 1(syz_tun) entered disabled state [ 957.520310][T13606] syz_tun: entered allmulticast mode [ 957.529454][T13606] syz_tun: entered promiscuous mode [ 957.536234][T13606] bridge0: port 1(syz_tun) entered blocking state [ 957.543328][T13606] bridge0: port 1(syz_tun) entered forwarding state [ 957.585563][T13605] can0 (unregistered): slcan off ttyS3. [ 957.628538][ T5972] usb 3-1: device descriptor read/64, error -71 [ 957.754218][ T5972] usb usb3-port1: attempt power cycle [ 958.123337][ T5972] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 958.189413][ T5972] usb 3-1: device descriptor read/8, error -71 [ 959.055768][ T5972] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 959.150950][T13630] netlink: 'syz.6.2002': attribute type 10 has an invalid length. [ 959.161064][T13630] hsr0: entered promiscuous mode [ 959.509245][T13630] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 960.255104][ T5972] usb 3-1: device descriptor read/8, error -71 [ 960.435690][ T5972] usb usb3-port1: unable to enumerate USB device [ 961.622116][T13630] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 961.705616][T13630] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 962.157979][T13639] ubi31: attaching mtd0 [ 962.223327][T13639] ubi31: scanning is finished [ 962.278711][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2008'. [ 962.287973][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2008'. [ 962.364964][T13639] ubi31: empty MTD device detected [ 963.069712][T13658] lo speed is unknown, defaulting to 1000 [ 963.389626][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 963.398823][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 963.729409][T13662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 963.833110][ T5947] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 963.863741][T13639] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 963.959822][T13639] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 963.983597][T13639] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 963.983630][ T5893] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 964.015524][T13639] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 964.043392][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 964.065034][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 964.083028][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 964.096151][T13639] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 964.113247][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 964.118912][T13639] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 964.130548][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.152327][ T5947] usb 2-1: config 0 descriptor?? [ 964.161137][T13639] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 297227155 [ 964.171581][T13639] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 964.189827][T13666] ubi31: background thread "ubi_bgt31d" started, PID 13666 [ 964.190660][T13656] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 964.225377][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 964.236871][ T5947] hub 2-1:0.0: USB hub found [ 964.248515][ T5893] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 964.263709][ T5893] usb 3-1: config 0 has no interface number 0 [ 964.303453][ T5893] usb 3-1: config 0 interface 184 has no altsetting 0 [ 964.345498][ T5893] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 964.369005][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.399450][ T5893] usb 3-1: Product: syz [ 964.413188][ T5893] usb 3-1: Manufacturer: syz [ 964.418096][ T5893] usb 3-1: SerialNumber: syz [ 964.459940][ T5893] usb 3-1: config 0 descriptor?? [ 964.477650][ T5947] hub 2-1:0.0: 1 port detected [ 964.487950][ T5893] smsc75xx v1.0.0 [ 964.491839][ T5893] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 964.546913][ T5893] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 966.087380][T10857] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 966.728224][ T5947] usb 2-1: USB disconnect, device number 65 [ 966.816259][T10312] usb 3-1: USB disconnect, device number 87 [ 967.088687][T13687] netlink: 'syz.6.2018': attribute type 10 has an invalid length. [ 967.096761][T13687] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 967.108273][T13687] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 967.122320][T13687] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 969.374193][ T5926] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 969.876411][T13697] sg_write: data in/out 2268/14 bytes for SCSI command 0x0-- guessing data in; [ 969.876411][T13697] program syz.1.2020 not setting count and/or reply_len properly [ 970.337017][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.363056][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.413449][ T5926] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 970.438866][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.486985][ T5926] usb 6-1: config 0 descriptor?? [ 970.745262][T10857] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 971.005282][T13711] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 971.100409][T13712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2025'. [ 971.883966][ T5893] IPVS: starting estimator thread 0... [ 971.904731][T10857] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.932702][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 971.993136][T10857] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.003384][T10857] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 972.005118][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 972.027298][T10857] usb 7-1: config 0 interface 0 has no altsetting 0 [ 972.047610][T10857] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 972.101875][T10857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.123203][T13713] IPVS: using max 33 ests per chain, 79200 per kthread [ 972.144334][T10857] usb 7-1: config 0 descriptor?? [ 972.153369][ T5926] usb 6-1: USB disconnect, device number 3 [ 972.836011][T10857] usbhid 7-1:0.0: can't add hid device: -71 [ 972.842049][T10857] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 972.883576][ T5926] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 972.943886][T13724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.243513][T10857] usb 7-1: USB disconnect, device number 10 [ 973.405298][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.431025][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.451676][ T5926] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 973.481804][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.512922][ T5926] usb 3-1: config 0 descriptor?? [ 973.703332][ T5893] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 973.963542][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 974.218294][T13738] netlink: 'syz.5.2032': attribute type 10 has an invalid length. [ 974.231853][T13738] hsr0: entered promiscuous mode [ 974.267069][ T5893] usb 1-1: config 0 has no interfaces? [ 974.536620][ T5893] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 974.621267][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.621824][T13738] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 974.641710][T13738] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 974.655415][T13738] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 974.656067][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 974.675548][ T5893] usb 1-1: Product: syz [ 974.737715][ T5893] usb 1-1: Manufacturer: syz [ 974.778841][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 974.785320][ T5893] usb 1-1: SerialNumber: syz [ 974.790349][ T5926] usb 3-1: USB disconnect, device number 88 [ 974.894301][ T5893] usb 1-1: config 0 descriptor?? [ 975.075726][T13745] FAULT_INJECTION: forcing a failure. [ 975.075726][T13745] name failslab, interval 1, probability 0, space 0, times 0 [ 975.088781][T13745] CPU: 1 UID: 0 PID: 13745 Comm: syz.6.2036 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 975.088809][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 975.088823][T13745] Call Trace: [ 975.088831][T13745] [ 975.088841][T13745] dump_stack_lvl+0x189/0x250 [ 975.088868][T13745] ? __pfx____ratelimit+0x10/0x10 [ 975.088900][T13745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 975.088922][T13745] ? __pfx__printk+0x10/0x10 [ 975.088963][T13745] should_fail_ex+0x414/0x560 [ 975.089006][T13745] should_failslab+0xa8/0x100 [ 975.089028][T13745] kmem_cache_alloc_noprof+0x73/0x3c0 [ 975.089056][T13745] ? skb_clone+0x212/0x3a0 [ 975.089087][T13745] skb_clone+0x212/0x3a0 [ 975.089119][T13745] __netlink_deliver_tap+0x404/0x850 [ 975.089157][T13745] ? netlink_deliver_tap+0x2e/0x1b0 [ 975.089183][T13745] netlink_deliver_tap+0x19c/0x1b0 [ 975.089208][T13745] netlink_sendskb+0x68/0x140 [ 975.089231][T13745] netlink_rcv_skb+0x28c/0x470 [ 975.089256][T13745] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 975.089276][T13745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 975.089311][T13745] ? netlink_deliver_tap+0x2e/0x1b0 [ 975.089335][T13745] ? netlink_deliver_tap+0x2e/0x1b0 [ 975.089365][T13745] netlink_unicast+0x758/0x8d0 [ 975.089397][T13745] netlink_sendmsg+0x805/0xb30 [ 975.089431][T13745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.089465][T13745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 975.089494][T13745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 975.089520][T13745] __sock_sendmsg+0x219/0x270 [ 975.089542][T13745] ____sys_sendmsg+0x505/0x830 [ 975.089575][T13745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 975.089611][T13745] ? import_iovec+0x74/0xa0 [ 975.089639][T13745] ___sys_sendmsg+0x21f/0x2a0 [ 975.089668][T13745] ? __pfx____sys_sendmsg+0x10/0x10 [ 975.089734][T13745] ? __fget_files+0x2a/0x420 [ 975.089754][T13745] ? __fget_files+0x3a0/0x420 [ 975.089785][T13745] __x64_sys_sendmsg+0x19b/0x260 [ 975.089816][T13745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 975.089852][T13745] ? __pfx_ksys_write+0x10/0x10 [ 975.089878][T13745] ? rcu_is_watching+0x15/0xb0 [ 975.089905][T13745] ? do_syscall_64+0xbe/0x3b0 [ 975.089930][T13745] do_syscall_64+0xfa/0x3b0 [ 975.089949][T13745] ? lockdep_hardirqs_on+0x9c/0x150 [ 975.089984][T13745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.090004][T13745] ? clear_bhb_loop+0x60/0xb0 [ 975.090029][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.090049][T13745] RIP: 0033:0x7fe6bf38e929 [ 975.090068][T13745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.090086][T13745] RSP: 002b:00007fe6c014d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.090108][T13745] RAX: ffffffffffffffda RBX: 00007fe6bf5b5fa0 RCX: 00007fe6bf38e929 [ 975.090123][T13745] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 975.090137][T13745] RBP: 00007fe6c014d090 R08: 0000000000000000 R09: 0000000000000000 [ 975.090150][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.090163][T13745] R13: 0000000000000000 R14: 00007fe6bf5b5fa0 R15: 00007ffee83fcbe8 [ 975.090196][T13745] [ 975.458658][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.468189][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.486110][ T5893] usb 1-1: USB disconnect, device number 91 [ 975.495577][T13748] sg_write: process 1625 (syz.1.2037) changed security contexts after opening file descriptor, this is not allowed. [ 975.893172][T10545] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 976.121880][T13759] pim6reg: entered allmulticast mode [ 976.755245][T10545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.713034][T10545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.771751][T10545] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 977.808326][T10545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.861298][T10545] usb 6-1: config 0 descriptor?? [ 978.296013][T13779] block nbd6: NBD_DISCONNECT [ 978.965648][T10545] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 978.982682][T10545] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 979.007279][T13778] cgroup: Unknown subsys name 'noxattr' [ 979.015561][T10545] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000E/input/input32 [ 979.154278][T13782] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2047'. [ 979.190602][T13782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2047'. [ 979.213664][T10545] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 979.378155][T10545] usb 6-1: USB disconnect, device number 4 [ 979.405922][T13785] netlink: 'syz.6.2049': attribute type 7 has an invalid length. [ 979.601127][T13786] fido_id[13786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 980.017022][T13804] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 980.240036][T13808] sctp: [Deprecated]: syz.2.2055 (pid 13808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.240036][T13808] Use struct sctp_sack_info instead [ 981.092602][T13793] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 981.312250][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 981.349476][T13818] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 981.378698][T13818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.515942][T13820] can0: slcan on ttyS3. [ 981.718750][T13825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.566534][T13832] loop4: detected capacity change from 0 to 524255232 [ 982.684353][T13805] can0 (unregistered): slcan off ttyS3. [ 983.743171][ T5947] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 984.095401][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.621899][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.728254][ T5947] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 984.736046][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 984.763209][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 984.779548][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.830152][ T5947] usb 3-1: config 0 descriptor?? [ 984.859132][T13845] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2065'. [ 985.321253][ T5947] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 985.349387][ T5947] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 985.952127][ T5947] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000F/input/input33 [ 986.205302][ T5947] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 987.399981][ T5926] usb 3-1: reset high-speed USB device number 89 using dummy_hcd [ 988.563025][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 989.513642][T13873] xt_hashlimit: size too large, truncated to 1048576 [ 989.568601][T13878] : renamed from bridge_slave_0 (while UP) [ 989.766402][T10545] usb 3-1: USB disconnect, device number 89 [ 990.002172][T13883] FAULT_INJECTION: forcing a failure. [ 990.002172][T13883] name failslab, interval 1, probability 0, space 0, times 0 [ 990.066993][T13883] CPU: 0 UID: 0 PID: 13883 Comm: syz.1.2076 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 990.067024][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.067037][T13883] Call Trace: [ 990.067046][T13883] [ 990.067055][T13883] dump_stack_lvl+0x189/0x250 [ 990.067080][T13883] ? __pfx____ratelimit+0x10/0x10 [ 990.067108][T13883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.067129][T13883] ? __pfx__printk+0x10/0x10 [ 990.067158][T13883] ? __pfx___might_resched+0x10/0x10 [ 990.067180][T13883] ? fs_reclaim_acquire+0x7d/0x100 [ 990.067207][T13883] should_fail_ex+0x414/0x560 [ 990.067240][T13883] should_failslab+0xa8/0x100 [ 990.067261][T13883] __kmalloc_noprof+0xcb/0x4f0 [ 990.067289][T13883] ? sock_kmalloc+0xd6/0x160 [ 990.067322][T13883] sock_kmalloc+0xd6/0x160 [ 990.067351][T13883] hash_sendmsg+0x666/0x11d0 [ 990.067402][T13883] ? __pfx_hash_sendmsg+0x10/0x10 [ 990.067429][T13883] __sock_sendmsg+0x219/0x270 [ 990.067450][T13883] ____sys_sendmsg+0x52d/0x830 [ 990.067479][T13883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.067515][T13883] ? import_iovec+0x74/0xa0 [ 990.067542][T13883] ___sys_sendmsg+0x21f/0x2a0 [ 990.067571][T13883] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.067646][T13883] ? __fget_files+0x2a/0x420 [ 990.067665][T13883] ? __fget_files+0x3a0/0x420 [ 990.067697][T13883] __sys_sendmmsg+0x227/0x430 [ 990.067730][T13883] ? __pfx___sys_sendmmsg+0x10/0x10 [ 990.067753][T13883] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 990.067809][T13883] ? rcu_is_watching+0x15/0xb0 [ 990.067839][T13883] __x64_sys_sendmmsg+0xa0/0xc0 [ 990.067868][T13883] do_syscall_64+0xfa/0x3b0 [ 990.067887][T13883] ? lockdep_hardirqs_on+0x9c/0x150 [ 990.067916][T13883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.067939][T13883] ? clear_bhb_loop+0x60/0xb0 [ 990.067972][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.067991][T13883] RIP: 0033:0x7f8ff5f8e929 [ 990.068010][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.068028][T13883] RSP: 002b:00007f8ff6deb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 990.068050][T13883] RAX: ffffffffffffffda RBX: 00007f8ff61b5fa0 RCX: 00007f8ff5f8e929 [ 990.068066][T13883] RDX: 0000000000000001 RSI: 0000200000002040 RDI: 0000000000000004 [ 990.068088][T13883] RBP: 00007f8ff6deb090 R08: 0000000000000000 R09: 0000000000000000 [ 990.068101][T13883] R10: 0000000024008804 R11: 0000000000000246 R12: 0000000000000001 [ 990.068114][T13883] R13: 0000000000000000 R14: 00007f8ff61b5fa0 R15: 00007ffd1f5ee048 [ 990.068147][T13883] [ 990.588918][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2081'. [ 993.171363][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.183359][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.433091][T10545] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 994.207015][T10545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.490681][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 996.038052][T10545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.492419][T10545] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 996.501598][T10545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.512541][T10545] usb 2-1: config 0 descriptor?? [ 996.744831][T13915] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 996.753273][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 997.504518][ T5926] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 997.653116][ T5947] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 997.686257][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 997.718192][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.760428][ T5926] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 997.803261][ T5947] usb 3-1: device descriptor read/64, error -71 [ 997.812569][ T5926] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.864972][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.924491][T10545] usbhid 2-1:0.0: can't add hid device: -71 [ 997.933224][T10545] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 997.958916][ T5926] usb 1-1: config 0 descriptor?? [ 997.997778][T10545] usb 2-1: USB disconnect, device number 66 [ 998.065795][ T5947] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 998.211001][T13914] gre1: entered allmulticast mode [ 998.251331][T13927] FAULT_INJECTION: forcing a failure. [ 998.251331][T13927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.280763][ T5947] usb 3-1: device descriptor read/64, error -71 [ 998.333781][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.1.2090 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 998.333818][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.333831][T13927] Call Trace: [ 998.333840][T13927] [ 998.333849][T13927] dump_stack_lvl+0x189/0x250 [ 998.333877][T13927] ? __pfx____ratelimit+0x10/0x10 [ 998.333908][T13927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.333931][T13927] ? __pfx__printk+0x10/0x10 [ 998.333969][T13927] should_fail_ex+0x414/0x560 [ 998.334004][T13927] _copy_to_user+0x31/0xb0 [ 998.334030][T13927] simple_read_from_buffer+0xe1/0x170 [ 998.334067][T13927] proc_fail_nth_read+0x1df/0x250 [ 998.334092][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.334118][T13927] ? rw_verify_area+0x258/0x650 [ 998.334145][T13927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.334169][T13927] vfs_read+0x1fd/0x980 [ 998.334202][T13927] ? __pfx___mutex_lock+0x10/0x10 [ 998.334223][T13927] ? __pfx_vfs_read+0x10/0x10 [ 998.334252][T13927] ? __fget_files+0x2a/0x420 [ 998.334276][T13927] ? __fget_files+0x3a0/0x420 [ 998.334295][T13927] ? __fget_files+0x2a/0x420 [ 998.334324][T13927] ksys_read+0x145/0x250 [ 998.334354][T13927] ? __pfx_ksys_read+0x10/0x10 [ 998.334379][T13927] ? rcu_is_watching+0x15/0xb0 [ 998.334407][T13927] ? do_syscall_64+0xbe/0x3b0 [ 998.334432][T13927] do_syscall_64+0xfa/0x3b0 [ 998.334450][T13927] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.334479][T13927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.334499][T13927] ? clear_bhb_loop+0x60/0xb0 [ 998.334524][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.334541][T13927] RIP: 0033:0x7f8ff5f8d33c [ 998.334559][T13927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.334577][T13927] RSP: 002b:00007f8ff6deb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.334599][T13927] RAX: ffffffffffffffda RBX: 00007f8ff61b5fa0 RCX: 00007f8ff5f8d33c [ 998.334614][T13927] RDX: 000000000000000f RSI: 00007f8ff6deb0a0 RDI: 0000000000000004 [ 998.334628][T13927] RBP: 00007f8ff6deb090 R08: 0000000000000000 R09: 0000000000000000 [ 998.334641][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.334653][T13927] R13: 0000000000000000 R14: 00007f8ff61b5fa0 R15: 00007ffd1f5ee048 [ 998.334685][T13927] [ 998.567270][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.632037][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 998.637849][ T5947] usb usb3-port1: attempt power cycle [ 999.228691][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 999.299870][ T5926] usb 1-1: USB disconnect, device number 92 [ 999.653616][ T5947] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 999.697464][ T5947] usb 3-1: device descriptor read/8, error -71 [ 999.884119][T13939] kvm: Disabled LAPIC found during irq injection [ 1000.350361][ T5947] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1001.081544][ T5947] usb 3-1: device descriptor read/8, error -71 [ 1001.393503][ T5947] usb usb3-port1: unable to enumerate USB device [ 1001.967309][ T5893] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1002.296242][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.468284][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.700884][ T5893] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1002.991404][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.393327][ T5893] usb 2-1: config 0 descriptor?? [ 1004.313112][ T5893] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 1004.426726][ T5893] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 1004.502339][ T5893] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0010/input/input34 [ 1004.582474][ T5893] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1004.725142][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 1005.062220][T13976] can0: slcan on ttyS3. [ 1005.823057][T10312] usb 2-1: reset high-speed USB device number 67 using dummy_hcd [ 1006.379524][T13985] can0 (unregistered): slcan off ttyS3. [ 1006.951192][ T5926] usb 2-1: USB disconnect, device number 67 [ 1007.028089][T13998] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2109'. [ 1007.184031][T13993] FAULT_INJECTION: forcing a failure. [ 1007.184031][T13993] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.219388][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.2.2108 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1007.219418][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1007.219429][T13993] Call Trace: [ 1007.219437][T13993] [ 1007.219447][T13993] dump_stack_lvl+0x189/0x250 [ 1007.219475][T13993] ? __pfx____ratelimit+0x10/0x10 [ 1007.219506][T13993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.219549][T13993] ? __pfx__printk+0x10/0x10 [ 1007.219576][T13993] ? __pfx___might_resched+0x10/0x10 [ 1007.219596][T13993] ? fs_reclaim_acquire+0x7d/0x100 [ 1007.219630][T13993] should_fail_ex+0x414/0x560 [ 1007.219665][T13993] should_failslab+0xa8/0x100 [ 1007.219686][T13993] __kmalloc_noprof+0xcb/0x4f0 [ 1007.219714][T13993] ? ethnl_default_notify+0x1cd/0x990 [ 1007.219746][T13993] ethnl_default_notify+0x1cd/0x990 [ 1007.219779][T13993] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1007.219822][T13993] ? mutex_is_locked+0x17/0x50 [ 1007.219843][T13993] ? rtnl_is_locked+0x15/0x20 [ 1007.219872][T13993] ethnl_default_set_doit+0x64e/0xa20 [ 1007.219910][T13993] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1007.219941][T13993] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1007.219982][T13993] genl_family_rcv_msg_doit+0x215/0x300 [ 1007.220020][T13993] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1007.220065][T13993] ? bpf_lsm_capable+0x9/0x20 [ 1007.220087][T13993] ? security_capable+0x7e/0x2e0 [ 1007.220116][T13993] genl_rcv_msg+0x60e/0x790 [ 1007.220153][T13993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.220180][T13993] ? ref_tracker_free+0x63a/0x7d0 [ 1007.220210][T13993] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1007.220238][T13993] ? __pfx_ref_tracker_free+0x10/0x10 [ 1007.220280][T13993] netlink_rcv_skb+0x205/0x470 [ 1007.220305][T13993] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.220337][T13993] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1007.220380][T13993] ? down_read+0x1ad/0x2e0 [ 1007.220405][T13993] genl_rcv+0x28/0x40 [ 1007.220432][T13993] netlink_unicast+0x758/0x8d0 [ 1007.220467][T13993] netlink_sendmsg+0x805/0xb30 [ 1007.220501][T13993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.220536][T13993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1007.220565][T13993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.220591][T13993] __sock_sendmsg+0x219/0x270 [ 1007.220621][T13993] ____sys_sendmsg+0x505/0x830 [ 1007.220654][T13993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.220691][T13993] ? import_iovec+0x74/0xa0 [ 1007.220719][T13993] ___sys_sendmsg+0x21f/0x2a0 [ 1007.220748][T13993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.220805][T13993] ? __fget_files+0x2a/0x420 [ 1007.220823][T13993] ? __fget_files+0x3a0/0x420 [ 1007.220851][T13993] __x64_sys_sendmsg+0x19b/0x260 [ 1007.220878][T13993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.220916][T13993] ? __pfx_ksys_write+0x10/0x10 [ 1007.220942][T13993] ? rcu_is_watching+0x15/0xb0 [ 1007.220971][T13993] ? do_syscall_64+0xbe/0x3b0 [ 1007.220996][T13993] do_syscall_64+0xfa/0x3b0 [ 1007.221017][T13993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.221037][T13993] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1007.221056][T13993] ? clear_bhb_loop+0x60/0xb0 [ 1007.221081][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.221102][T13993] RIP: 0033:0x7f96c9f8e929 [ 1007.221121][T13993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.221140][T13993] RSP: 002b:00007f96caed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.221162][T13993] RAX: ffffffffffffffda RBX: 00007f96ca1b5fa0 RCX: 00007f96c9f8e929 [ 1007.221179][T13993] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1007.221192][T13993] RBP: 00007f96caed5090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.221206][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.221218][T13993] R13: 0000000000000000 R14: 00007f96ca1b5fa0 R15: 00007ffe64d29eb8 [ 1007.221253][T13993] [ 1009.604942][T14019] can0: slcan on ttyS3. [ 1011.027130][T14015] can0 (unregistered): slcan off ttyS3. [ 1011.221749][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 1011.344258][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 1013.310563][T14036] can0: slcan on ttyS3. [ 1013.350816][T14038] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2122'. [ 1013.504979][T14042] can0 (unregistered): slcan off ttyS3. [ 1016.404780][T14073] can0: slcan on ttyS3. [ 1019.129533][T14064] can0 (unregistered): slcan off ttyS3. [ 1019.401390][T14083] pim6reg: entered allmulticast mode [ 1028.493121][ T5926] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1028.679925][ T5926] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.706199][ T5926] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1028.740665][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.350498][T10312] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1029.359667][T14134] slcan: can't register candev [ 1029.360050][ T5926] usb 7-1: Product: syz [ 1029.366911][T14134] Falling back ldisc for ttyS3. [ 1029.371718][ T5926] usb 7-1: Manufacturer: syz [ 1029.378720][ T5926] usb 7-1: SerialNumber: syz [ 1029.548651][T10312] usb 3-1: Using ep0 maxpacket: 32 [ 1029.624174][T10312] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 1029.659216][T10312] usb 3-1: config 0 has no interface number 0 [ 1029.678976][T10312] usb 3-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1029.702422][ T5926] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1029.731623][T10312] usb 3-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1029.776050][T10312] usb 3-1: config 0 interface 92 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1029.849325][T10312] usb 3-1: config 0 interface 92 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1029.967466][T10312] usb 3-1: config 0 interface 92 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1030.260603][ T5893] usb 7-1: USB disconnect, device number 11 [ 1030.508533][T14142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.623199][T10312] usb 3-1: config 0 interface 92 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1030.680337][T10312] usb 3-1: New USB device found, idVendor=124a, idProduct=4025, bcdDevice=8a.42 [ 1030.697516][T14139] slcan: can't register candev [ 1030.722353][T10312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.740638][ T5893] usblp0: removed [ 1030.751366][T10312] usb 3-1: Product: syz [ 1030.771874][T10312] usb 3-1: Manufacturer: syz [ 1030.782253][T10312] usb 3-1: SerialNumber: syz [ 1030.805980][T10312] usb 3-1: config 0 descriptor?? [ 1030.812221][T14131] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1030.820343][T14131] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1031.250385][T14131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.262316][T14131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.086448][T14141] bridge0: port 3(syz_tun) entered blocking state [ 1032.093395][T14141] bridge0: port 3(syz_tun) entered disabled state [ 1032.101928][T14141] syz_tun: entered allmulticast mode [ 1032.109598][T14141] syz_tun: entered promiscuous mode [ 1032.116511][T14141] bridge0: port 3(syz_tun) entered blocking state [ 1032.123076][T14141] bridge0: port 3(syz_tun) entered forwarding state [ 1032.594082][T10312] usb 3-1: USB disconnect, device number 94 [ 1034.339434][T14170] can0: slcan on ttyS3. [ 1034.964718][T14165] can0 (unregistered): slcan off ttyS3. [ 1035.212895][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 1037.714154][T14197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1037.788046][T14194] can0: slcan on ttyS3. [ 1038.756359][T14195] can0 (unregistered): slcan off ttyS3. [ 1041.142983][T14225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1041.865681][ T5926] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1042.213187][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 1042.219888][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.247667][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.292852][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1042.538586][ T5926] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1043.172983][T14234] netlink: 'syz.5.2174': attribute type 10 has an invalid length. [ 1043.181440][T14234] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1043.193586][T14234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1043.206302][T14234] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1043.745968][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1043.779861][ T5926] usb 2-1: string descriptor 0 read error: -71 [ 1043.793042][ T5926] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.802156][ T5926] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.846033][ T5926] usb 2-1: config 0 descriptor?? [ 1043.863697][ T5926] usb 2-1: can't set config #0, error -71 [ 1043.884688][ T5926] usb 2-1: USB disconnect, device number 68 [ 1044.156828][T14238] FAULT_INJECTION: forcing a failure. [ 1044.156828][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.248926][T14243] smc: net device lo applied user defined pnetid SYZ1 [ 1044.256588][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.2.2178 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1044.256616][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.256629][T14238] Call Trace: [ 1044.256638][T14238] [ 1044.256648][T14238] dump_stack_lvl+0x189/0x250 [ 1044.256686][T14238] ? __pfx____ratelimit+0x10/0x10 [ 1044.256717][T14238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.256740][T14238] ? __pfx__printk+0x10/0x10 [ 1044.256766][T14238] ? __might_fault+0xb0/0x130 [ 1044.256806][T14238] should_fail_ex+0x414/0x560 [ 1044.256841][T14238] _copy_from_user+0x2d/0xb0 [ 1044.256866][T14238] ___sys_recvmsg+0x12e/0x510 [ 1044.256900][T14238] ? __pfx____sys_recvmsg+0x10/0x10 [ 1044.256957][T14238] ? __might_fault+0xb0/0x130 [ 1044.256989][T14238] do_recvmmsg+0x307/0x770 [ 1044.257025][T14238] ? __pfx_do_recvmmsg+0x10/0x10 [ 1044.257064][T14238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1044.257103][T14238] __x64_sys_recvmmsg+0x190/0x240 [ 1044.257133][T14238] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1044.257158][T14238] ? rcu_is_watching+0x15/0xb0 [ 1044.257185][T14238] ? do_syscall_64+0xbe/0x3b0 [ 1044.257209][T14238] do_syscall_64+0xfa/0x3b0 [ 1044.257227][T14238] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.257260][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.257280][T14238] ? clear_bhb_loop+0x60/0xb0 [ 1044.257305][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.257325][T14238] RIP: 0033:0x7f96c9f8e929 [ 1044.257343][T14238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.257362][T14238] RSP: 002b:00007f96caed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1044.257385][T14238] RAX: ffffffffffffffda RBX: 00007f96ca1b5fa0 RCX: 00007f96c9f8e929 [ 1044.257400][T14238] RDX: 0000000000000700 RSI: 0000200000001440 RDI: 0000000000000004 [ 1044.257414][T14238] RBP: 00007f96caed5090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.257427][T14238] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000001 [ 1044.257440][T14238] R13: 0000000000000000 R14: 00007f96ca1b5fa0 R15: 00007ffe64d29eb8 [ 1044.257472][T14238] [ 1044.561520][T14246] can0: slcan on ttyS3. [ 1044.702485][T14246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1044.783809][T14245] can0 (unregistered): slcan off ttyS3. [ 1045.134328][ T5947] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1046.426097][T14262] FAULT_INJECTION: forcing a failure. [ 1046.426097][T14262] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.444922][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.5.2181 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1046.444954][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.444968][T14262] Call Trace: [ 1046.444977][T14262] [ 1046.444987][T14262] dump_stack_lvl+0x189/0x250 [ 1046.445016][T14262] ? __pfx____ratelimit+0x10/0x10 [ 1046.445047][T14262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.445070][T14262] ? __pfx__printk+0x10/0x10 [ 1046.445103][T14262] ? __pfx___might_resched+0x10/0x10 [ 1046.445125][T14262] ? fs_reclaim_acquire+0x7d/0x100 [ 1046.445152][T14262] should_fail_ex+0x414/0x560 [ 1046.445187][T14262] should_failslab+0xa8/0x100 [ 1046.445209][T14262] __kmalloc_noprof+0xcb/0x4f0 [ 1046.445237][T14262] ? kfree+0x4d/0x440 [ 1046.445260][T14262] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1046.445290][T14262] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1046.445315][T14262] ? tomoyo_domain+0xda/0x130 [ 1046.445344][T14262] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1046.445374][T14262] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1046.445408][T14262] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1046.445456][T14262] ? __lock_acquire+0xab9/0xd20 [ 1046.445498][T14262] ? __fget_files+0x2a/0x420 [ 1046.445528][T14262] ? __fget_files+0x2a/0x420 [ 1046.445547][T14262] ? __fget_files+0x3a0/0x420 [ 1046.445565][T14262] ? __fget_files+0x2a/0x420 [ 1046.445590][T14262] security_file_ioctl+0xcb/0x2d0 [ 1046.445624][T14262] __se_sys_ioctl+0x47/0x170 [ 1046.445654][T14262] do_syscall_64+0xfa/0x3b0 [ 1046.445674][T14262] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.445703][T14262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.445724][T14262] ? clear_bhb_loop+0x60/0xb0 [ 1046.445749][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.445768][T14262] RIP: 0033:0x7fe72af8e929 [ 1046.445785][T14262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.445803][T14262] RSP: 002b:00007fe72be04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1046.445825][T14262] RAX: ffffffffffffffda RBX: 00007fe72b1b5fa0 RCX: 00007fe72af8e929 [ 1046.445840][T14262] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003 [ 1046.445854][T14262] RBP: 00007fe72be04090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.445868][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.445881][T14262] R13: 0000000000000000 R14: 00007fe72b1b5fa0 R15: 00007ffdec268f68 [ 1046.445914][T14262] [ 1046.445923][T14262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1046.582419][ T5947] usb 2-1: device descriptor read/64, error -71 [ 1047.063247][ T5926] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1047.246957][ T5926] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1047.277613][T14269] fuse: Invalid rootmode [ 1047.307000][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.416125][ T5926] usb 6-1: Product: syz [ 1047.470739][ T5926] usb 6-1: Manufacturer: syz [ 1047.531668][ T5926] usb 6-1: SerialNumber: syz [ 1047.704266][ T5926] usb 6-1: config 0 descriptor?? [ 1047.867955][T14273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.037127][ T5926] usb 6-1: f81604_read: reg: 100f failed: -EPIPE [ 1051.055850][ T5926] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 1051.071796][ T5926] usb 6-1: USB disconnect, device number 5 [ 1051.114440][ T5926] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1052.270857][T14297] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2194'. [ 1052.362569][T14304] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2195'. [ 1052.849132][T14297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.865566][T14297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.876352][T14297] bond0 (unregistering): Released all slaves [ 1052.902514][ T5926] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1053.056111][T14312] wireguard0: entered promiscuous mode [ 1053.078285][T14312] wireguard0: entered allmulticast mode [ 1053.411742][T10312] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1053.619884][T10312] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1054.007464][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'. [ 1054.361017][T10312] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1054.473077][T10312] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1054.501499][T10312] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1054.511575][T10312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.544948][T14317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1054.561355][T10312] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.610042][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.617027][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.717529][ T5926] usb 3-1: USB disconnect, device number 95 [ 1056.787162][T14345] can0: slcan on ttyS3. [ 1057.068199][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2208'. [ 1057.216035][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1057.363573][ T5947] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1057.473138][T10857] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1057.690486][ T5947] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1057.738877][ T5947] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1057.751075][ T5947] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1057.766172][ T5947] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1057.776792][T14314] can0 (unregistered): slcan off ttyS3. [ 1057.795500][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.805257][T10857] usb 6-1: Using ep0 maxpacket: 16 [ 1057.845653][T10857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.880311][T14359] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1057.900557][T10857] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1057.915489][ T5947] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.927417][T10857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.951329][T14366] FAULT_INJECTION: forcing a failure. [ 1057.951329][T14366] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.981383][T10857] usb 6-1: Product: syz [ 1057.997799][T10857] usb 6-1: Manufacturer: syz [ 1058.012241][T14366] CPU: 1 UID: 0 PID: 14366 Comm: syz.0.2212 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1058.012272][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.012285][T14366] Call Trace: [ 1058.012294][T14366] [ 1058.012303][T14366] dump_stack_lvl+0x189/0x250 [ 1058.012331][T14366] ? __pfx____ratelimit+0x10/0x10 [ 1058.012360][T14366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.012378][T14366] ? __pfx__printk+0x10/0x10 [ 1058.012408][T14366] ? __pfx___might_resched+0x10/0x10 [ 1058.012435][T14366] ? fs_reclaim_acquire+0x7d/0x100 [ 1058.012459][T14366] should_fail_ex+0x414/0x560 [ 1058.012492][T14366] should_failslab+0xa8/0x100 [ 1058.012513][T14366] __kmalloc_cache_noprof+0x70/0x3d0 [ 1058.012543][T14366] ? tcf_block_get_ext+0x8d4/0x17d0 [ 1058.012577][T14366] tcf_block_get_ext+0x8d4/0x17d0 [ 1058.012615][T14366] tcf_block_get+0x67/0xa0 [ 1058.012636][T14366] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1058.012664][T14366] cake_init+0x1cb/0x830 [ 1058.012691][T14366] ? qdisc_alloc+0x7a1/0xaa0 [ 1058.012720][T14366] ? __pfx_cake_init+0x10/0x10 [ 1058.012743][T14366] qdisc_create+0x7a9/0xea0 [ 1058.012769][T14366] tc_modify_qdisc+0x1426/0x2010 [ 1058.012799][T14366] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1058.012844][T14366] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1058.012861][T14366] rtnetlink_rcv_msg+0x77c/0xb70 [ 1058.012885][T14366] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1058.012905][T14366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1058.012922][T14366] ? ref_tracker_free+0x63a/0x7d0 [ 1058.012946][T14366] ? __copy_skb_header+0xa7/0x550 [ 1058.012974][T14366] ? __pfx_ref_tracker_free+0x10/0x10 [ 1058.013002][T14366] ? __skb_clone+0x63/0x7a0 [ 1058.013035][T14366] netlink_rcv_skb+0x205/0x470 [ 1058.013060][T14366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1058.013083][T14366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1058.013118][T14366] ? netlink_deliver_tap+0x2e/0x1b0 [ 1058.013139][T14366] ? netlink_deliver_tap+0x2e/0x1b0 [ 1058.013167][T14366] netlink_unicast+0x758/0x8d0 [ 1058.013199][T14366] netlink_sendmsg+0x805/0xb30 [ 1058.013229][T14366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.013258][T14366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1058.013285][T14366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.013308][T14366] __sock_sendmsg+0x219/0x270 [ 1058.013329][T14366] ____sys_sendmsg+0x505/0x830 [ 1058.013359][T14366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.013391][T14366] ? import_iovec+0x74/0xa0 [ 1058.013417][T14366] ___sys_sendmsg+0x21f/0x2a0 [ 1058.013444][T14366] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.013504][T14366] ? __fget_files+0x2a/0x420 [ 1058.013523][T14366] ? __fget_files+0x3a0/0x420 [ 1058.013550][T14366] __x64_sys_sendmsg+0x19b/0x260 [ 1058.013585][T14366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1058.013621][T14366] ? __pfx_ksys_write+0x10/0x10 [ 1058.013647][T14366] ? rcu_is_watching+0x15/0xb0 [ 1058.013675][T14366] ? do_syscall_64+0xbe/0x3b0 [ 1058.013699][T14366] do_syscall_64+0xfa/0x3b0 [ 1058.013716][T14366] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.013743][T14366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.013764][T14366] ? clear_bhb_loop+0x60/0xb0 [ 1058.013787][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.013806][T14366] RIP: 0033:0x7ff33098e929 [ 1058.013823][T14366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.013839][T14366] RSP: 002b:00007ff331728038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.013858][T14366] RAX: ffffffffffffffda RBX: 00007ff330bb5fa0 RCX: 00007ff33098e929 [ 1058.013874][T14366] RDX: 000000003000c88c RSI: 0000200000000080 RDI: 0000000000000003 [ 1058.013887][T14366] RBP: 00007ff331728090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.013900][T14366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.013913][T14366] R13: 0000000000000000 R14: 00007ff330bb5fa0 R15: 00007fff7e6534d8 [ 1058.013944][T14366] [ 1058.394772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.702837][T10857] usb 6-1: SerialNumber: syz [ 1058.730728][T10857] usb 6-1: config 0 descriptor?? [ 1058.909531][T14380] tmpfs: Unknown parameter 'h6ise7CېeTvÎ9Qy\Z' [ 1058.964814][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1058.987444][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1059.530249][ T5947] usb 6-1: USB disconnect, device number 6 [ 1061.487280][T10312] usb 7-1: USB disconnect, device number 12 [ 1061.530800][T14404] syz.5.2221 uses old SIOCAX25GETINFO [ 1062.394413][T14422] can0: slcan on ttyS3. [ 1063.261396][ T5972] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1063.456131][T14425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.593488][T14424] bridge0: port 2(syz_tun) entered blocking state [ 1063.600520][T14424] bridge0: port 2(syz_tun) entered disabled state [ 1063.608247][T14424] syz_tun: entered allmulticast mode [ 1063.624957][T14424] syz_tun: entered promiscuous mode [ 1063.632175][T14424] bridge0: port 2(syz_tun) entered blocking state [ 1063.638765][T14424] bridge0: port 2(syz_tun) entered forwarding state [ 1063.798933][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.814145][T14422] can0 (unregistered): slcan off ttyS3. [ 1063.828496][T14426] can0: slcan on ttyS3. [ 1063.973017][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 1063.980069][ T5972] usb 2-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 1063.990766][ T5972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.000178][T14418] can0 (unregistered): slcan off ttyS3. [ 1064.169566][ T5972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.218988][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.295580][ T5972] usb 2-1: Product: syz [ 1064.330474][ T5972] usb 2-1: Manufacturer: syz [ 1064.354083][ T5972] usb 2-1: SerialNumber: syz [ 1064.424504][ T5947] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1064.513031][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1064.513053][ T30] audit: type=1804 audit(2000000028.119:95): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2230" name="/newroot/501/file0" dev="tmpfs" ino=2636 res=1 errno=0 [ 1064.646733][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 1064.656508][ T5972] usb 2-1: 0:2 : does not exist [ 1064.667194][ T5947] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1064.679994][ T5947] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1064.688150][T14419] can0: slcan on ttyS3. [ 1064.702039][ T5972] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1064.713845][ T5947] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1064.836679][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1064.979003][ T5947] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1065.110876][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1065.340998][ T5947] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1065.471882][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.509501][ T5972] usb 2-1: USB disconnect, device number 71 [ 1066.540415][ T5947] usb 3-1: config 0 descriptor?? [ 1066.679067][T14132] udevd[14132]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.010841][ T5947] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1067.026934][ T5947] usb 3-1: USB disconnect, device number 96 [ 1067.035607][ T5947] usblp0: removed [ 1067.446806][T14416] can0 (unregistered): slcan off ttyS3. [ 1068.943055][ T5926] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1069.533430][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1069.574074][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.603783][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1069.633563][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.674030][ T5926] usb 3-1: config 0 descriptor?? [ 1070.587447][ T5926] mcp2221 0003:04D8:00DD.0011: item fetching failed at offset 0/1 [ 1070.599928][ T5926] mcp2221 0003:04D8:00DD.0011: can't parse reports [ 1070.606418][T14469] syz.1.2239: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1070.611209][ T5926] mcp2221 0003:04D8:00DD.0011: probe with driver mcp2221 failed with error -22 [ 1070.714225][T14469] CPU: 1 UID: 0 PID: 14469 Comm: syz.1.2239 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1070.714258][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1070.714273][T14469] Call Trace: [ 1070.714282][T14469] [ 1070.714292][T14469] dump_stack_lvl+0x189/0x250 [ 1070.714321][T14469] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1070.714354][T14469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.714378][T14469] ? __pfx__printk+0x10/0x10 [ 1070.714406][T14469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1070.714435][T14469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1070.714470][T14469] warn_alloc+0x214/0x310 [ 1070.714496][T14469] ? stack_depot_save_flags+0x40/0x900 [ 1070.714532][T14469] ? __pfx_warn_alloc+0x10/0x10 [ 1070.714556][T14469] ? kasan_save_track+0x4f/0x80 [ 1070.714585][T14469] ? xskq_create+0x56/0x170 [ 1070.714615][T14469] ? xsk_init_queue+0xb0/0x110 [ 1070.714642][T14469] ? xsk_setsockopt+0x43f/0x710 [ 1070.714668][T14469] ? do_sock_setsockopt+0x25a/0x3e0 [ 1070.714692][T14469] ? __x64_sys_setsockopt+0x18b/0x220 [ 1070.714716][T14469] ? do_syscall_64+0xfa/0x3b0 [ 1070.714735][T14469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.714765][T14469] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1070.714818][T14469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1070.714845][T14469] ? __kasan_kmalloc+0x93/0xb0 [ 1070.714879][T14469] vmalloc_user_noprof+0xad/0xf0 [ 1070.714896][T14469] ? xskq_create+0xbf/0x170 [ 1070.714928][T14469] xskq_create+0xbf/0x170 [ 1070.714962][T14469] xsk_init_queue+0xb0/0x110 [ 1070.714995][T14469] xsk_setsockopt+0x43f/0x710 [ 1070.715027][T14469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1070.715055][T14469] ? __lock_acquire+0xab9/0xd20 [ 1070.715086][T14469] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1070.715115][T14469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1070.715154][T14469] do_sock_setsockopt+0x25a/0x3e0 [ 1070.715189][T14469] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1070.715220][T14469] ? __fget_files+0x2a/0x420 [ 1070.715251][T14469] __x64_sys_setsockopt+0x18b/0x220 [ 1070.715284][T14469] do_syscall_64+0xfa/0x3b0 [ 1070.715304][T14469] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.715334][T14469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.715355][T14469] ? clear_bhb_loop+0x60/0xb0 [ 1070.715380][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.715401][T14469] RIP: 0033:0x7f8ff5f8e929 [ 1070.715419][T14469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.715438][T14469] RSP: 002b:00007f8ff6deb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1070.715460][T14469] RAX: ffffffffffffffda RBX: 00007f8ff61b5fa0 RCX: 00007f8ff5f8e929 [ 1070.715477][T14469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 1070.715491][T14469] RBP: 00007f8ff6010b39 R08: 0000000000000052 R09: 0000000000000000 [ 1070.715505][T14469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.715520][T14469] R13: 0000000000000000 R14: 00007f8ff61b5fa0 R15: 00007ffd1f5ee048 [ 1070.715554][T14469] [ 1070.718392][T14469] Mem-Info: [ 1071.163224][T14469] active_anon:3167 inactive_anon:9114 isolated_anon:0 [ 1071.163224][T14469] active_file:17261 inactive_file:37782 isolated_file:0 [ 1071.163224][T14469] unevictable:768 dirty:255 writeback:0 [ 1071.163224][T14469] slab_reclaimable:11281 slab_unreclaimable:104515 [ 1071.163224][T14469] mapped:36122 shmem:8778 pagetables:1256 [ 1071.163224][T14469] sec_pagetables:3 bounce:0 [ 1071.163224][T14469] kernel_misc_reclaimable:0 [ 1071.163224][T14469] free:1284255 free_pcp:20720 free_cma:0 [ 1072.412886][T14469] Node 0 active_anon:12668kB inactive_anon:27320kB active_file:68816kB inactive_file:151128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135512kB dirty:1056kB writeback:0kB shmem:24632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1073.163668][T14469] Node 1 active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1073.195394][T14469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1073.224774][T14469] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1073.230887][T14469] Node 0 DMA32 free:1256908kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21416kB inactive_anon:18716kB active_file:67044kB inactive_file:151068kB unevictable:1536kB writepending:1068kB present:3129332kB managed:2560900kB mlocked:0kB bounce:0kB free_pcp:38344kB local_pcp:18920kB free_cma:0kB [ 1073.265205][T14469] lowmem_reserve[]: 0 0 1 1 1 [ 1073.277265][T14469] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1073.343095][T10312] usb 3-1: USB disconnect, device number 97 [ 1073.357844][T14491] FAULT_INJECTION: forcing a failure. [ 1073.357844][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.407434][T14491] CPU: 0 UID: 0 PID: 14491 Comm: syz.6.2245 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1073.407469][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1073.407483][T14491] Call Trace: [ 1073.407492][T14491] [ 1073.407501][T14491] dump_stack_lvl+0x189/0x250 [ 1073.407530][T14491] ? __pfx____ratelimit+0x10/0x10 [ 1073.407561][T14491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1073.407584][T14491] ? __pfx__printk+0x10/0x10 [ 1073.407615][T14491] ? __pfx___might_resched+0x10/0x10 [ 1073.407637][T14491] ? fs_reclaim_acquire+0x7d/0x100 [ 1073.407664][T14491] should_fail_ex+0x414/0x560 [ 1073.407699][T14491] should_failslab+0xa8/0x100 [ 1073.407720][T14491] __kmalloc_noprof+0xcb/0x4f0 [ 1073.407748][T14491] ? kfree+0x4d/0x440 [ 1073.407772][T14491] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1073.407799][T14491] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1073.407823][T14491] ? tomoyo_domain+0xda/0x130 [ 1073.407849][T14491] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1073.407885][T14491] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1073.407917][T14491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1073.407963][T14491] ? __lock_acquire+0xab9/0xd20 [ 1073.408003][T14491] ? __fget_files+0x2a/0x420 [ 1073.408026][T14491] ? __fget_files+0x2a/0x420 [ 1073.408062][T14491] ? __fget_files+0x3a0/0x420 [ 1073.408079][T14491] ? __fget_files+0x2a/0x420 [ 1073.408103][T14491] security_file_ioctl+0xcb/0x2d0 [ 1073.408136][T14491] __se_sys_ioctl+0x47/0x170 [ 1073.408165][T14491] do_syscall_64+0xfa/0x3b0 [ 1073.408184][T14491] ? lockdep_hardirqs_on+0x9c/0x150 [ 1073.408213][T14491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.408233][T14491] ? clear_bhb_loop+0x60/0xb0 [ 1073.408257][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.408276][T14491] RIP: 0033:0x7fe6bf38e929 [ 1073.408294][T14491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.408313][T14491] RSP: 002b:00007fe6c014d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.408335][T14491] RAX: ffffffffffffffda RBX: 00007fe6bf5b5fa0 RCX: 00007fe6bf38e929 [ 1073.408352][T14491] RDX: 0000000000000000 RSI: 00000000400448c8 RDI: 0000000000000003 [ 1073.408365][T14491] RBP: 00007fe6c014d090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.408379][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1073.408391][T14491] R13: 0000000000000000 R14: 00007fe6bf5b5fa0 R15: 00007ffee83fcbe8 [ 1073.408423][T14491] [ 1073.408492][T14491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1073.443313][T14469] lowmem_reserve[]: 0 0 0 0 0 [ 1073.687844][T14469] Node 1 Normal free:3872120kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:236kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:46540kB local_pcp:22252kB free_cma:0kB [ 1073.769191][T14469] lowmem_reserve[]: 0 0 0 0 0 [ 1073.787404][T14469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1073.833159][T14469] Node 0 DMA32: 1078*4kB (UME) 779*8kB (UM) 379*16kB (U) 203*32kB (UME) 218*64kB (UM) 201*128kB (UM) 147*256kB (UME) 148*512kB (UM) 86*1024kB (UM) 12*2048kB (ME) 233*4096kB (UM) = 1243200kB [ 1073.940716][T14469] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1073.973618][T14469] Node 1 Normal: 212*4kB (UE) 49*8kB (UME) 52*16kB (UME) 135*32kB (UME) 42*64kB (UE) 8*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UE) 3*2048kB (UME) 940*4096kB (UM) = 3872120kB [ 1073.992367][T14469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.002554][T14469] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1074.012106][T14469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1074.021970][T14469] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1074.031525][T14469] 62167 total pagecache pages [ 1074.036490][T14469] 0 pages in swap cache [ 1074.040715][T14469] Free swap = 124996kB [ 1074.055923][T14469] Total swap = 124996kB [ 1074.060134][T14469] 2097051 pages RAM [ 1074.064688][T14469] 0 pages HighMem/MovableOnly [ 1074.069542][T14469] 424719 pages reserved [ 1074.143638][T14469] 0 pages cma reserved [ 1080.190828][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 1080.200099][T14539] netlink: 'syz.0.2260': attribute type 30 has an invalid length. [ 1080.223112][ T5926] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1080.257282][T14539] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.266318][T14539] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.275332][T14539] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.284852][T14539] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1080.387654][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 1080.397194][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1080.407439][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1080.423161][ T5926] usb 2-1: can't read configurations, error -61 [ 1080.429653][T14539] netlink: 'syz.0.2260': attribute type 30 has an invalid length. [ 1080.573022][ T5926] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1080.743300][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1080.770270][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1081.136551][ T5926] usb 2-1: can't read configurations, error -61 [ 1081.182147][ T5926] usb usb2-port1: attempt power cycle [ 1081.753858][ T5926] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1081.795305][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1081.815338][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1081.824218][ T5926] usb 2-1: can't read configurations, error -61 [ 1081.963199][ T5926] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1082.017252][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 1082.049958][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1082.128355][ T5926] usb 2-1: can't read configurations, error -61 [ 1082.197706][ T5926] usb usb2-port1: unable to enumerate USB device [ 1082.342524][T14540] Bluetooth: hci5: command 0x0406 tx timeout [ 1085.172218][T14582] vivid-000: kernel_thread() failed [ 1085.620900][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2277'. [ 1085.659980][T14597] netlink: 'syz.6.2277': attribute type 30 has an invalid length. [ 1085.699995][T14597] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.708917][T14597] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.717780][T14597] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.726596][T14597] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.777186][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2277'. [ 1085.810972][T14597] netlink: 'syz.6.2277': attribute type 30 has an invalid length. [ 1087.163371][T14578] can0: slcan on ttyS3. [ 1087.434564][T14577] can0 (unregistered): slcan off ttyS3. [ 1087.651863][T14619] syz.5.2282: attempt to access beyond end of device [ 1087.651863][T14619] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1087.743662][ T5925] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1088.370302][T14625] netlink: 'syz.6.2284': attribute type 10 has an invalid length. [ 1088.379252][T14625] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1088.392346][T14625] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1088.405471][T14625] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1088.965011][ T5925] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1088.974480][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.982513][ T5925] usb 1-1: Product: syz [ 1089.027850][ T5925] usb 1-1: Manufacturer: syz [ 1089.049635][T14632] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2287'. [ 1089.049903][ T5925] usb 1-1: SerialNumber: syz [ 1089.111297][ T5925] usb 1-1: config 0 descriptor?? [ 1090.172456][ T5925] ch341 1-1:0.0: ch341-uart converter detected [ 1091.507627][ T5925] usb 1-1: failed to receive control message: -110 [ 1091.623942][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1091.846913][ T5925] usb 1-1: USB disconnect, device number 93 [ 1092.121403][ T5925] ch341 1-1:0.0: device disconnected [ 1092.866192][ T30] audit: type=1326 audit(2000000056.389:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14644 comm="syz.0.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff33098e929 code=0x0 [ 1094.306153][T14651] netlink: 'syz.0.2291': attribute type 5 has an invalid length. [ 1094.389237][T14654] input: syz0 as /devices/virtual/input/input35 [ 1095.560381][T14671] netlink: 'syz.2.2300': attribute type 10 has an invalid length. [ 1095.568502][T14671] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1095.580603][T14671] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1095.593423][T14671] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1096.654849][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 1098.624308][T14676] FAULT_INJECTION: forcing a failure. [ 1098.624308][T14676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.637688][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.5.2301 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1098.637718][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1098.637731][T14676] Call Trace: [ 1098.637739][T14676] [ 1098.637748][T14676] dump_stack_lvl+0x189/0x250 [ 1098.637775][T14676] ? __pfx____ratelimit+0x10/0x10 [ 1098.637803][T14676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.637822][T14676] ? __pfx__printk+0x10/0x10 [ 1098.637844][T14676] ? __might_fault+0xb0/0x130 [ 1098.637878][T14676] should_fail_ex+0x414/0x560 [ 1098.637907][T14676] _copy_from_user+0x2d/0xb0 [ 1098.637929][T14676] ___sys_sendmsg+0x158/0x2a0 [ 1098.637954][T14676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.638006][T14676] ? __fget_files+0x2a/0x420 [ 1098.638022][T14676] ? __fget_files+0x3a0/0x420 [ 1098.638047][T14676] __x64_sys_sendmsg+0x19b/0x260 [ 1098.638072][T14676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1098.638102][T14676] ? __pfx_ksys_write+0x10/0x10 [ 1098.638127][T14676] ? __secure_computing+0xe2/0x2a0 [ 1098.638153][T14676] do_syscall_64+0xfa/0x3b0 [ 1098.638172][T14676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.638188][T14676] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1098.638205][T14676] ? clear_bhb_loop+0x60/0xb0 [ 1098.638226][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.638243][T14676] RIP: 0033:0x7fe72af8e929 [ 1098.638258][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.638275][T14676] RSP: 002b:00007fe72bde3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.638293][T14676] RAX: ffffffffffffffda RBX: 00007fe72b1b6080 RCX: 00007fe72af8e929 [ 1098.638316][T14676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1098.638327][T14676] RBP: 00007fe72bde3090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.638338][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.638349][T14676] R13: 0000000000000000 R14: 00007fe72b1b6080 R15: 00007ffdec268f68 [ 1098.638374][T14676] [ 1098.848022][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.428499][T14695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'. [ 1100.722070][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1100.830956][T14711] netlink: 'syz.6.2314': attribute type 10 has an invalid length. [ 1100.839542][T14711] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1100.851423][T14711] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1100.864410][T14711] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1101.291200][ T5947] usb 6-1: device descriptor read/64, error -71 [ 1101.691546][ T5947] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1103.283280][ T5947] usb 6-1: device descriptor read/64, error -71 [ 1103.988005][ T5947] usb usb6-port1: attempt power cycle [ 1104.034955][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 1105.771596][T10857] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1105.993420][T10857] usb 7-1: Using ep0 maxpacket: 32 [ 1106.034075][T10857] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1106.041880][T10857] usb 7-1: can't read configurations, error -61 [ 1106.203151][T10857] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1106.277157][T14749] netlink: 'syz.5.2326': attribute type 10 has an invalid length. [ 1107.133167][T10857] usb 7-1: Using ep0 maxpacket: 32 [ 1107.162780][T10857] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1107.459068][T10857] usb 7-1: can't read configurations, error -61 [ 1107.495557][T14755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2328'. [ 1107.544200][T14755] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1107.550296][T14755] syzkaller0: linktype set to 769 [ 1107.590815][T10857] usb usb7-port1: attempt power cycle [ 1108.782543][T14766] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1108.788450][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 1108.856337][T14766] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1109.007039][T14766] overlayfs: failed to set uuid (536/file1, err=-13); falling back to uuid=null. [ 1113.544162][T14792] 9pnet_fd: Insufficient options for proto=fd [ 1113.744230][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1114.617013][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1115.666166][T14815] FAULT_INJECTION: forcing a failure. [ 1115.666166][T14815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.679391][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.0.2347 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1115.679419][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1115.679431][T14815] Call Trace: [ 1115.679437][T14815] [ 1115.679442][T14815] dump_stack_lvl+0x189/0x250 [ 1115.679461][T14815] ? __pfx____ratelimit+0x10/0x10 [ 1115.679477][T14815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1115.679489][T14815] ? __pfx__printk+0x10/0x10 [ 1115.679509][T14815] should_fail_ex+0x414/0x560 [ 1115.679528][T14815] _copy_to_user+0x31/0xb0 [ 1115.679541][T14815] put_user_ifreq+0x6b/0xd0 [ 1115.679557][T14815] sock_do_ioctl+0x25b/0x300 [ 1115.679573][T14815] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1115.679587][T14815] ? __lock_acquire+0xab9/0xd20 [ 1115.679600][T14815] ? __asan_memset+0x22/0x50 [ 1115.679613][T14815] ? smack_file_ioctl+0x24a/0x340 [ 1115.679632][T14815] sock_ioctl+0x576/0x790 [ 1115.679648][T14815] ? __pfx_sock_ioctl+0x10/0x10 [ 1115.679663][T14815] ? __fget_files+0x2a/0x420 [ 1115.679673][T14815] ? __fget_files+0x3a0/0x420 [ 1115.679683][T14815] ? __fget_files+0x2a/0x420 [ 1115.679695][T14815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1115.679706][T14815] ? __pfx_sock_ioctl+0x10/0x10 [ 1115.679721][T14815] __se_sys_ioctl+0xf9/0x170 [ 1115.679736][T14815] do_syscall_64+0xfa/0x3b0 [ 1115.679746][T14815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1115.679761][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.679772][T14815] ? clear_bhb_loop+0x60/0xb0 [ 1115.679785][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.679795][T14815] RIP: 0033:0x7ff33098e929 [ 1115.679806][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1115.679816][T14815] RSP: 002b:00007ff331728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.679828][T14815] RAX: ffffffffffffffda RBX: 00007ff330bb5fa0 RCX: 00007ff33098e929 [ 1115.679836][T14815] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000008 [ 1115.679843][T14815] RBP: 00007ff331728090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.679850][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.679857][T14815] R13: 0000000000000000 R14: 00007ff330bb5fa0 R15: 00007fff7e6534d8 [ 1115.679873][T14815] [ 1115.722644][T14819] comedi comedi3: pcl726: I/O port conflict (0xffffffffffffffff,16) [ 1115.728243][ T5947] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1116.060633][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.067490][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.316434][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.489000][T14827] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1117.213424][ T5926] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1117.839763][ T5947] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.851323][ T5947] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.862028][ T5947] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1117.868908][ T5926] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1117.868941][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.868963][ T5926] usb 2-1: Product: syz [ 1117.868979][ T5926] usb 2-1: Manufacturer: syz [ 1117.868995][ T5926] usb 2-1: SerialNumber: syz [ 1117.876418][ T5926] usb 2-1: config 0 descriptor?? [ 1117.878702][ T5947] usb 7-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1117.914951][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.954082][ T5947] usb 7-1: config 0 descriptor?? [ 1118.027244][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1118.505774][T14838] can0: slcan on ttyS3. [ 1118.891818][T14839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.973074][ T5947] usbhid 7-1:0.0: can't add hid device: -71 [ 1118.979157][ T5947] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1119.003567][T14838] can0 (unregistered): slcan off ttyS3. [ 1119.173369][ T5947] usb 7-1: USB disconnect, device number 16 [ 1119.639160][ T5847] Bluetooth: hci5: ISO packet too small [ 1119.713524][T14846] FAULT_INJECTION: forcing a failure. [ 1119.713524][T14846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.727219][T14846] CPU: 0 UID: 0 PID: 14846 Comm: syz.2.2355 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1119.727247][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1119.727263][T14846] Call Trace: [ 1119.727272][T14846] [ 1119.727281][T14846] dump_stack_lvl+0x189/0x250 [ 1119.727310][T14846] ? __pfx____ratelimit+0x10/0x10 [ 1119.727342][T14846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.727365][T14846] ? __pfx__printk+0x10/0x10 [ 1119.727404][T14846] should_fail_ex+0x414/0x560 [ 1119.727439][T14846] _copy_to_user+0x31/0xb0 [ 1119.727465][T14846] simple_read_from_buffer+0xe1/0x170 [ 1119.727501][T14846] proc_fail_nth_read+0x1df/0x250 [ 1119.727527][T14846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.727552][T14846] ? rw_verify_area+0x258/0x650 [ 1119.727581][T14846] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.727603][T14846] vfs_read+0x1fd/0x980 [ 1119.727637][T14846] ? __pfx___mutex_lock+0x10/0x10 [ 1119.727658][T14846] ? __pfx_vfs_read+0x10/0x10 [ 1119.727687][T14846] ? __fget_files+0x2a/0x420 [ 1119.727713][T14846] ? __fget_files+0x3a0/0x420 [ 1119.727731][T14846] ? __fget_files+0x2a/0x420 [ 1119.727783][T14846] ksys_read+0x145/0x250 [ 1119.727813][T14846] ? __pfx_ksys_read+0x10/0x10 [ 1119.727838][T14846] ? rcu_is_watching+0x15/0xb0 [ 1119.727875][T14846] ? do_syscall_64+0xbe/0x3b0 [ 1119.727900][T14846] do_syscall_64+0xfa/0x3b0 [ 1119.727919][T14846] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.727948][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.727969][T14846] ? clear_bhb_loop+0x60/0xb0 [ 1119.727994][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.728014][T14846] RIP: 0033:0x7f96c9f8d33c [ 1119.728034][T14846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1119.728052][T14846] RSP: 002b:00007f96caed5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.728073][T14846] RAX: ffffffffffffffda RBX: 00007f96ca1b5fa0 RCX: 00007f96c9f8d33c [ 1119.728088][T14846] RDX: 000000000000000f RSI: 00007f96caed50a0 RDI: 0000000000000004 [ 1119.728101][T14846] RBP: 00007f96caed5090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.728113][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.728125][T14846] R13: 0000000000000000 R14: 00007f96ca1b5fa0 R15: 00007ffe64d29eb8 [ 1119.728163][T14846] [ 1120.332769][T14835] can0: slcan on ttyS3. [ 1120.434323][T14857] bridge0: port 3(syz_tun) entered blocking state [ 1120.441091][T14857] bridge0: port 3(syz_tun) entered disabled state [ 1120.525361][T14857] syz_tun: entered allmulticast mode [ 1120.532396][T14857] syz_tun: entered promiscuous mode [ 1120.532699][T14835] can0 (unregistered): slcan off ttyS3. [ 1120.540347][T14857] bridge0: port 3(syz_tun) entered blocking state [ 1120.549878][T14857] bridge0: port 3(syz_tun) entered forwarding state [ 1120.970023][ T5947] usb 2-1: USB disconnect, device number 76 [ 1121.090891][T14835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.163186][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1122.140403][T14879] trusted_key: encrypted_key: insufficient parameters specified [ 1122.903076][ T5925] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1123.251848][T14888] can0: slcan on ttyS3. [ 1123.419505][T14890] bridge0: port 3(syz_tun) entered blocking state [ 1123.426704][T14890] bridge0: port 3(syz_tun) entered disabled state [ 1123.436074][T14890] syz_tun: entered allmulticast mode [ 1123.451334][T14890] syz_tun: entered promiscuous mode [ 1123.458783][T14890] bridge0: port 3(syz_tun) entered blocking state [ 1123.465343][T14890] bridge0: port 3(syz_tun) entered forwarding state [ 1123.682810][T14890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1123.734060][T14888] can0 (unregistered): slcan off ttyS3. [ 1123.776737][ T5925] usb 2-1: device descriptor read/64, error -71 [ 1124.141512][ T5925] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1124.582995][ T5925] usb 2-1: device descriptor read/64, error -71 [ 1124.617896][T14900] netlink: 'syz.2.2369': attribute type 10 has an invalid length. [ 1124.626103][T14900] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1124.639035][T14900] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1124.651692][T14900] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1125.131211][ T5925] usb usb2-port1: attempt power cycle [ 1125.418177][T14912] FAULT_INJECTION: forcing a failure. [ 1125.418177][T14912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.490773][T14912] CPU: 1 UID: 0 PID: 14912 Comm: syz.0.2371 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1125.490806][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1125.490820][T14912] Call Trace: [ 1125.490829][T14912] [ 1125.490839][T14912] dump_stack_lvl+0x189/0x250 [ 1125.490869][T14912] ? __pfx____ratelimit+0x10/0x10 [ 1125.490901][T14912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.490924][T14912] ? __pfx__printk+0x10/0x10 [ 1125.490962][T14912] should_fail_ex+0x414/0x560 [ 1125.490997][T14912] _copy_to_user+0x31/0xb0 [ 1125.491024][T14912] simple_read_from_buffer+0xe1/0x170 [ 1125.491060][T14912] proc_fail_nth_read+0x1df/0x250 [ 1125.491086][T14912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.491112][T14912] ? rw_verify_area+0x258/0x650 [ 1125.491139][T14912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1125.491162][T14912] vfs_read+0x1fd/0x980 [ 1125.491195][T14912] ? __pfx___mutex_lock+0x10/0x10 [ 1125.491216][T14912] ? __pfx_vfs_read+0x10/0x10 [ 1125.491244][T14912] ? __fget_files+0x2a/0x420 [ 1125.491267][T14912] ? __fget_files+0x3a0/0x420 [ 1125.491286][T14912] ? __fget_files+0x2a/0x420 [ 1125.491315][T14912] ksys_read+0x145/0x250 [ 1125.491345][T14912] ? __pfx_ksys_read+0x10/0x10 [ 1125.491370][T14912] ? rcu_is_watching+0x15/0xb0 [ 1125.491399][T14912] ? do_syscall_64+0xbe/0x3b0 [ 1125.491423][T14912] do_syscall_64+0xfa/0x3b0 [ 1125.491442][T14912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1125.491472][T14912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.491498][T14912] ? clear_bhb_loop+0x60/0xb0 [ 1125.491524][T14912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.491544][T14912] RIP: 0033:0x7ff33098d33c [ 1125.491562][T14912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1125.491581][T14912] RSP: 002b:00007ff331728030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1125.491603][T14912] RAX: ffffffffffffffda RBX: 00007ff330bb5fa0 RCX: 00007ff33098d33c [ 1125.491619][T14912] RDX: 000000000000000f RSI: 00007ff3317280a0 RDI: 0000000000000004 [ 1125.491632][T14912] RBP: 00007ff331728090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.491646][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.491658][T14912] R13: 0000000000000000 R14: 00007ff330bb5fa0 R15: 00007fff7e6534d8 [ 1125.491690][T14912] [ 1125.869105][T14916] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1126.839281][T14929] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI [ 1126.851201][T14929] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 1126.859695][T14929] CPU: 1 UID: 0 PID: 14929 Comm: syz.1.2377 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 1126.871771][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1126.881859][T14929] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1126.887468][T14929] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 80 88 44 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 99 [ 1126.907205][T14929] RSP: 0018:ffffc90005187148 EFLAGS: 00010203 [ 1126.913294][T14929] RAX: 000000000000005d RBX: 0000000000000000 RCX: ffff88802a8ebc00 [ 1126.921343][T14929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888021afc000 [ 1126.929752][T14929] RBP: dffffc0000000000 R08: ffff88802a8ebc00 R09: 0000000000000002 [ 1126.937724][T14929] R10: 00000000ffffffff R11: ffffffff897bd4e0 R12: dffffc0000000000 [ 1126.945841][T14929] R13: ffff888021afc000 R14: 00000000000002ec R15: ffff888021afc000 [ 1126.953832][T14929] FS: 00007f8ff6deb6c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 1126.963031][T14929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.969715][T14929] CR2: 0000200000000240 CR3: 000000007c204000 CR4: 00000000003526f0 [ 1126.977746][T14929] Call Trace: [ 1126.981044][T14929] [ 1126.983988][T14929] qdisc_tree_reduce_backlog+0x299/0x480 [ 1126.989740][T14929] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1126.995569][T14929] sfq_init+0x1a0f/0x2530 [ 1126.999925][T14929] ? __pfx_sfq_init+0x10/0x10 [ 1127.004705][T14929] qdisc_create+0x7a9/0xea0 [ 1127.009217][T14929] tc_modify_qdisc+0x1426/0x2010 [ 1127.014169][T14929] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1127.019471][T14929] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1127.024765][T14929] rtnetlink_rcv_msg+0x77c/0xb70 [ 1127.029719][T14929] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1127.034839][T14929] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1127.040315][T14929] ? ref_tracker_free+0x63a/0x7d0 [ 1127.045363][T14929] ? __copy_skb_header+0xa7/0x550 [ 1127.050539][T14929] ? __pfx_ref_tracker_free+0x10/0x10 [ 1127.055943][T14929] ? __skb_clone+0x63/0x7a0 [ 1127.060468][T14929] netlink_rcv_skb+0x205/0x470 [ 1127.065247][T14929] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1127.070738][T14929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1127.076080][T14929] ? netlink_deliver_tap+0x2e/0x1b0 [ 1127.081323][T14929] ? netlink_deliver_tap+0x2e/0x1b0 [ 1127.086547][T14929] netlink_unicast+0x758/0x8d0 [ 1127.091328][T14929] netlink_sendmsg+0x805/0xb30 [ 1127.096107][T14929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1127.101415][T14929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1127.106737][T14929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1127.112072][T14929] __sock_sendmsg+0x219/0x270 [ 1127.117245][T14929] ____sys_sendmsg+0x505/0x830 [ 1127.122057][T14929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1127.127379][T14929] ? import_iovec+0x74/0xa0 [ 1127.131910][T14929] ___sys_sendmsg+0x21f/0x2a0 [ 1127.136619][T14929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1127.141858][T14929] ? __fget_files+0x2a/0x420 [ 1127.146472][T14929] ? __fget_files+0x3a0/0x420 [ 1127.151177][T14929] __x64_sys_sendmsg+0x19b/0x260 [ 1127.156162][T14929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1127.161669][T14929] ? rcu_is_watching+0x15/0xb0 [ 1127.166473][T14929] ? do_syscall_64+0xbe/0x3b0 [ 1127.169832][T14932] overlayfs: missing 'workdir' [ 1127.171177][T14929] do_syscall_64+0xfa/0x3b0 [ 1127.180513][T14929] ? lockdep_hardirqs_on+0x9c/0x150 [ 1127.185758][T14929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.191824][T14929] ? clear_bhb_loop+0x60/0xb0 [ 1127.196513][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.202408][T14929] RIP: 0033:0x7f8ff5f8e929 [ 1127.206816][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.226418][T14929] RSP: 002b:00007f8ff6deb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.234829][T14929] RAX: ffffffffffffffda RBX: 00007f8ff61b5fa0 RCX: 00007f8ff5f8e929 [ 1127.242987][T14929] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1127.250972][T14929] RBP: 00007f8ff6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1127.258969][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.266952][T14929] R13: 0000000000000000 R14: 00007f8ff61b5fa0 R15: 00007ffd1f5ee048 [ 1127.274953][T14929] [ 1127.277981][T14929] Modules linked in: [ 1127.282053][T14929] ---[ end trace 0000000000000000 ]--- [ 1127.287571][T14929] RIP: 0010:hfsc_qlen_notify+0x2e/0x160 [ 1127.293177][T14929] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 80 88 44 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 99 [ 1127.312854][T14929] RSP: 0018:ffffc90005187148 EFLAGS: 00010203 [ 1127.319149][T14929] RAX: 000000000000005d RBX: 0000000000000000 RCX: ffff88802a8ebc00 [ 1127.327219][T14929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888021afc000 [ 1127.335240][T14929] RBP: dffffc0000000000 R08: ffff88802a8ebc00 R09: 0000000000000002 [ 1127.343264][T14929] R10: 00000000ffffffff R11: ffffffff897bd4e0 R12: dffffc0000000000 [ 1127.351276][T14929] R13: ffff888021afc000 R14: 00000000000002ec R15: ffff888021afc000 [ 1127.359303][T14929] FS: 00007f8ff6deb6c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 1127.368380][T14929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.375003][T14929] CR2: 0000200000000240 CR3: 000000007c204000 CR4: 00000000003526f0 [ 1127.383457][T14929] Kernel panic - not syncing: Fatal exception in interrupt [ 1127.390924][T14929] Kernel Offset: disabled [ 1127.395244][T14929] Rebooting in 86400 seconds..