last executing test programs: 3m57.522083727s ago: executing program 1 (id=3591): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x80000009, 0x4) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b391f, 0x0) 3m56.833288144s ago: executing program 1 (id=3600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xfff2}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "6d12a2f01ea04e612f843ca74a3d4c4d111edea455d4aa16213e1bb8eba3148169171c1ba582fbe86800c882af7decb17d101b65b0211a42bf46ff3c46ddf91cc2095ef7d38cfc7da50a3f589bfb17006e09a423a4c6e8ff3c50924a82e9391139e6d58d5fe705961d90378dfca2f6f1a9adcce717bd54cf089893d48c65e17c351acd420938b806889b20e9023b07b095d36fe8880c9f626e0fce464aec746746c83a739a487f20a7f70393a186216b8b18d77d0c6ee5fb752216ceee5086d0f83a5668eef27258f247011a60a7616c058e00565ba00924d30c323a19f4be740fbf119af1cc60825e55ef05a2df802aa973b53fdacc043f4a2af1cd31181244"}, @TCA_GRED_DPS={0x10, 0x3, {0x6, 0x10}}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0xff, 0xfffffff7, 0x5, 0x1, 0x3, 0xc05a, 0x2, 0x0, 0xfffffffd, 0x5, 0x10, 0xb, 0x7f, 0x1, 0x10000}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3m56.517775727s ago: executing program 1 (id=3605): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m52.905978714s ago: executing program 1 (id=3638): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a310000000009"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 3m52.746921042s ago: executing program 1 (id=3641): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 3m52.624818605s ago: executing program 1 (id=3644): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket(0xa, 0x3, 0x3a) 3m37.096927327s ago: executing program 32 (id=3644): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x8, 0x8001}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket(0xa, 0x3, 0x3a) 6.142051358s ago: executing program 5 (id=5327): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xc}, 0x40010102) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 5.67563463s ago: executing program 5 (id=5332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffe75, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000000010104000000ce511a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008000) (async) syz_usb_connect(0x3, 0x710, &(0x7f0000000380)=ANY=[@ANYBLOB="120100035919c720c60502903db2010203010902fe06030901300809040300035b6c2b0609050d004000090807072501010508005f0323aee3e6f84881ea81e25935d67b887b2e8f664bb451a08743ccacc3a3b3f968b9cd322d92a1170844e0df41dd7e6552bccf2c298129bc503d5d989ff39b2326705979b1feae0584f795ece180a561bf9f99dc538619cb5ae910246d4209050500080003030107250181000dffd002fd4e6f57070fe29eceeb12303b8cd7fd17f3e125bc8d06cad0f55ba5bc4e7626a35b964f4879933b585c444359cef3da8dd77f4666853495b6e174bd9e552a681ff35268058038cd87a6a64b37fbc68fca5dc139535ac970dc06dad8e79c1f0a37b1d7cbd8e5cbcef9c6d1020c672b0477f425dc38e691e3b00785d2e80f760860c4409dbb1685ada107d951b2a775736ca1162b8c3696d3617a0beb37e773694e454150abd169f5719b5e861f445a98093109a800560f05abd2d6dc1355d152a2d26e46c10080ff03e52c27165d09050e01ff030c9308b50efed86670fb469a99d5c88a0d1a71f552fe9561ee493c5736027c0db0bc062104e2f0c8a906c3fb3e9ffc55c6d43b9da43b2a8ddb9219a6be5b8c9d24265e91bab043864a62ce2fb654246c55d17b658a63af77027667be3624569ad9ed568286b46b75a5018659640bdc967756cd0440826f3faeaff4ba2ceda72637d9808b566f10e5c8a69743e08f74c557429cb348d808cd2817edc42f52dfcff2325b7f7e209bbcdc1c4b82fb6d395a70cc96f0c04d63f5bb0bc2ccb4d540297d76347dea86dfa886c3b9300416e74a8e2b79bde991ca1f5dfdd7b3acd7a9e9cf3c2f10654f9a7dc89da011385425cf686bde526fd417032c1bce26860accfba39a157c6e523f6433b02f856d025bf721fed7ca75f79848db4c82a2065376f860550087258fdd4fced7f7c0e07464719c7597808157cc42b5b84b96275cfc8b0f0b85cbe6a1de267d6c0f51d9bed2bc61ecd1f519d71cda2bb55a36754e32c0099a187b78b1874eb57595d73cc6da8ec44d13090496fd07ffffff050724010f0a04000e240201070280078964c2f2ce330b2402010202b000b2c730072401010401100724010a1f0500092402024f4200000109050a1010004efc0507250100075400650ce36cdfccfb601485a49944e4bd4daf8a22183d18a54172b835bcaa23d1e8178fb3ace56538cfcb2cc84dc821f7e354d2aeb4045c66329bf840a8ca576d54d76f2b3886f55f88cf2ceeea548aec08232563abec856145ac6cefc71f253206ef4fb931ab09050d0010000500040923e057b73e69da9a6400460482e80c1f85d4fbb2fed6efdc71234cfeb067f564e36d02fbed5a37fdeff5c14482210662b7f70e1021dc70365313acdba7960aa7fe739ce4a79bacf1d8ef028a7b0ef7755f2262be4d509ec13986c7eeee14676b3209050108000207018709050e04"], &(0x7f0000000140)={0x0, 0x0, 0x35, 0x0}) 5.301805078s ago: executing program 0 (id=5333): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video4linux(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.056003886s ago: executing program 2 (id=5336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000000c0)='q', 0x1}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 3.677477153s ago: executing program 2 (id=5337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.454726713s ago: executing program 2 (id=5339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.021785498s ago: executing program 4 (id=5340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f000000", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.008975417s ago: executing program 0 (id=5341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x6c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="3d169accd35dfaed678028f2e7a0cea76b1baec77e3497e9b89bdf9a458b68dd"}, {0x1c, 0x0, @random="f6e55262e2bda5281d786c1ef56c4e4e49e6708008899594"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 2.936066907s ago: executing program 5 (id=5342): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xea}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xc}, 0x40010102) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2.907205658s ago: executing program 0 (id=5343): r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100, 0x1000}, 0x4, 0x0, 0x5, 0x0, 0x1, 0x1e, 0x0, 0x1d, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xb3a20fa31d08024b, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x10000, 0x2, 0x4, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}) io_uring_enter(r8, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 2.878749623s ago: executing program 2 (id=5344): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000036c0)={0xa, 0x4e01, 0x800, @remote}, 0x1c, 0x0}}], 0x1, 0x24004040) (fail_nth: 2) 2.851869074s ago: executing program 4 (id=5345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x80}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f0377431d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349d", 0x36}, {&(0x7f0000001880)="371f6caa2f6c27730337", 0xa}], 0x4}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x10001) 2.357634435s ago: executing program 2 (id=5347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xa) dup(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}]]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000001c0)=0x1ff) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in=@private}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) 2.343332584s ago: executing program 5 (id=5348): unshare(0x62040200) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x28}}, 0x4080) 2.323642533s ago: executing program 4 (id=5349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2.320626268s ago: executing program 3 (id=5350): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="fff8ffffffffaaaaaaaaaa2d0800452000200001e00000011100907800000000489d0000"], 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x1812c09}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$dir(0xffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101200, 0x8) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000d40)={&(0x7f00000003c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x29, 0x7, 0x2000000, 0x5, 0x2, 0xffff, 0xa04, 0x0, 0x0, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.221775408s ago: executing program 2 (id=5351): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video4linux(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) eventfd(0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.152459875s ago: executing program 3 (id=5352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x10004, 0x8}, {0x0, 0xff, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0xfffff001, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x1b8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x400003, 0x8}, {0x4, 0x220000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0x7ff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0x2, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x8, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x1, 0x8000, 0x6, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xfb, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x0, 0xd, 0x7fff, 0xb, 0x880}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x102, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x9, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x2, 0x8, 0x401, 0x5, 0xffff15fb, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x400007b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x2, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fde, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x3}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0xfffffff9, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x4004, 0x3}, {0x0, 0x8, 0x1389, 0x6, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x0, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7b, 0x5, 0x8, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0xfffffffb, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x9, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x8}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0x400000e8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0x10010}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0x9, 0x7}, {0xc57d, 0x1, 0x5, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x1, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x2000007f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x6, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0xe06, 0x0, 0x1, 0x6, 0x1000}, {0x2004, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x8, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61b, 0x2e1a, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x9, 0x4000, 0x6, 0x10000}, {0x57b, 0x2, 0x7, 0x80, 0x7, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x3}, {0x5}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f00000018c0)="2c17", 0x2}], 0x100000000000030d}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000e0160a0108000000000073797a30000000007c8f010073797a30000000000000000000b5a2cb86c55b04b7b607af000000000000090574688ce57deffb09b3dc3f091be87b661059b0e673214aba290183ca9c5578a5044cd151d6487487dca35c98da03457fd584812e9d5f72"], 0x2c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000002c80)={0x0, 0x47524247, 0x3, @stepwise={0x0, 0x60, 0x400, 0x0, 0xe4, 0x19ed05bc}}) r7 = getpid() r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0x7d, 0x0, &(0x7f0000000340)) r9 = syz_pidfd_open(r7, 0x0) r10 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x6a, 0x3, 0x0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff01, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.127506421s ago: executing program 4 (id=5353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x6c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="3d169accd35dfaed678028f2e7a0cea76b1baec77e3497e9b89bdf9a458b68dd"}, {0x1c, 0x0, @random="f6e55262e2bda5281d786c1ef56c4e4e49e6708008899594"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 1.928423935s ago: executing program 0 (id=5354): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'bridge_slave_0\x00', 0x400}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="85aa"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) futex(0xfffffffffffffffc, 0x3, 0x2, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000340)=@hci, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.927797568s ago: executing program 4 (id=5355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f000000", @ANYRES32=r3, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f0032"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.735803323s ago: executing program 3 (id=5356): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x100, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.73475863s ago: executing program 4 (id=5357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x40, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048011}, 0xc855) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000001, 0x13}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ab3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/29, 0x1d, 0x1, &(0x7f0000000300)=""/96, 0x60}, &(0x7f0000000400)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7660, &(0x7f0000000040)={0x0, 0x766b, 0x2, 0x1, 0x138}, &(0x7f0000000100), &(0x7f00000001c0)) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r8, 0x0, 0xff2e) ioctl$TCFLSH(r8, 0x540b, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000082505a89c1bfa7902030109021b00010100a000090400000107010100090501020002"], 0x0) 1.241821745s ago: executing program 5 (id=5358): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xa000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = open_tree(r3, &(0x7f00000003c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x89901) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000380)=0x40, 0x4) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) epoll_create(0x8) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0xfffffffffffffcf7, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e2203000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x404c0dc}, 0x8080) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @acquire_done, @dead_binder_done], 0x79, 0x0, &(0x7f0000000240)="83869c4c00e4bf3058a1c6c3810e42415452535f25e85fdfb3ccdefc8aa69fdd4146f027349d1d3fba08226d5e3ab68f68b6baca777ab3d0e4876eee44d87e5d9538d3fcf9f407c733e63c38541f3b51db71db903a71f75e9e474c834ae7c00349e570e897aad1c0e157522d3817c9e9d29f605f53ec33adcf"}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) openat$cgroup_ro(r10, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000300)={0xffffffffffffffb9, 0x5, r2, 0x0, &(0x7f0000000200), 0x0, 0x7a}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r2, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0xffffffffffffffc6, &(0x7f00000006c0)=[{&(0x7f0000000480)="161ee709adeabf51f289e4986953df1bf56f763c1e006519fd0000000098cdb559c8b4bf16b5314f5f221672c46f0211798efcd6a841a96a", 0x38}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) 1.105364425s ago: executing program 3 (id=5359): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xea}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xc}, 0x40010102) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 814.551772ms ago: executing program 3 (id=5360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x7c}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "12df4e8241"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "05d14f9653f17fddef71af633f"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x40801) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) 293.83159ms ago: executing program 3 (id=5361): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x18a01, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x3, 0xfd}, 0x8) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x22000, 0x0) (async) r2 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x1e20, &(0x7f0000000200)={0x0, 0x86f7, 0x2000, 0x0, 0x2000014f}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) (async) syz_io_uring_submit(r6, r3, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x38, 0x0, @fd=r5, 0x8, {0x0, r0}, 0x6, 0x8, 0x0, {0x0, r4, r1}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) io_uring_enter(r2, 0x7052, 0x0, 0x4d, 0x0, 0x0) write$rfkill(r1, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8) 127.515714ms ago: executing program 0 (id=5362): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x31}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x40) 91.788787ms ago: executing program 5 (id=5363): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000114d8800010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 0s ago: executing program 0 (id=5364): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003d000001ffffffff000000000100000004001f000c00018008006100ac1414bb08000b00", @ANYRES32=r0, @ANYBLOB="952d7ff39fe1595f3a97e1cea3fa9f46fc2c18bf80e306146e7b24304ad389f21d4c6478153882efbb911810c02327f8f5433a6f39ca8187c6ed19cb1d040e6d7908ff44d6e2f3219639f825dbebdbcf932e825e2b0ac517689f48b8e98cb9d56bb8a9e5a2d63cb190d17bf8d0351cb0903adc3d14c6125244e3a6d6a3339752d3a98a09730700"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x6}, {0xfff3, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)}, {&(0x7f00000005c0)="63659fbf67ada579e90ad963fe7ce0a62fb57bb30cb8168afc6c442ec534e72f633a103e5e39c809bbea456d41e98aea096870ac3dddf8012c4b09452c942c50c5db737a9616010776df4f5a0c8db50bea4d9b", 0x53}, {&(0x7f0000000640)}, {&(0x7f0000001000)="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", 0x40e}], 0x4}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000006c0)="ed4d928de1ad94c9796ef8d9141643bb104c20bd93b0c1558f7a2fde05584aad78b6dee38b9fc462d5c4ba90f038b732af44bf1e80f7c3c7b347b59a680c085d96db543378fe44db214f09eb4a9b8a75eb7f43d7f428d65f3bcfa39fbf7238f367b5e54901004638ef4abd38d09b04278b4cbe225cfa3654e422f495571dde1963425ead2efb56082ccbb5ac7c70fc25187f67e17f", 0x95}, {&(0x7f00000008c0)="55616e647e14f923c0e66e0b20c22a00e02e5b1b7691f8f041e2ea9069a659f9b39cadad8b6d4b5789831325255f4eb3191add843bf88d21da10ae5ac5a2ac233462f470c2a38c66a46bd29863182ddfdeac2ab5d0bf9564bb237f0091278f40354e443640921a7e60d6390d1f76eda2f7bc0e721c28a162d4b43f1ed98117bfa5a8b82d38d6643cfc", 0x89}, {&(0x7f0000000a40)="6c1ace6f0c25cc6f7f47a9db088a19d75082a31db8fbd1f8e833c822d08c663dbdbf249f24e1427bb37a77fd4e27c1d2b39abcaaec09dcf9cb4e572dfb72363d4c694278ecd164e88f8d3d93083a50bd1f3d2652792c6f85c5c5cac81c71eb3b7df52701d4ddd7fe1a223a76f19f6737db00d6737e04bb0318fd492eabf90cb3cf5f890b62e3a620e67689b4d99410cb6aa448495f24b97f163efa3d0cfeabd1c3960be8ce600ec962654ec37ab69a2a40bf858e682656a9364e", 0xba}, {&(0x7f0000000b00)="67b05aa64895ef1e9e0d13554742eb87e260e3a515494e1e77532b2d8c059c89396f6c8270102d790f1ff930edb244bc8f20b57ce8df9ccd63abf9b1c9656b5c3c704087b0fa", 0x46}, {&(0x7f0000003040)="bde8ff6f3c7cfaf158fb69f12b2de96d040d893e5b48dfdf028c3badaab0ca592f5440344f622f7f781fe087b40f4931144bc4320f654ae1b4a38047633518e4e2f10f0e09677a1b2fcaed0dbed2f21caf6a41d93ab549e61ddc5ce3a0fc1734bc5fbe7cf87a0cdb906c3241bcda488978400b2280d15146d3e03620dbf8c287ef069ea27234adeed001dba5bfc4db058366921f6af169bede12cbb1dd37941c5c8a1a1b668689ca2008cbf9ebef0bc3f666e6407eb206d864c92596c7b15a1dd2d21a3374a1", 0xc6}, {&(0x7f0000003140)="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", 0xef0}, {&(0x7f0000004140)="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", 0xc00}], 0x7, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x120}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000005340)="5247d15247d3de2f043371a6a391e28e5e2c8f8bfafbe301e5845cd82bba6cec775e28a344dbc826cac696b52cebcb5ae50f6ba8a280c5f899817e5d79f79db4ec11bef78eba39f06b1ed51b48fc2e94a02d", 0x52}, {&(0x7f0000000340)="97f9fa790482fd4ceff6b0950cf3e31c6cbe7a22", 0x14}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f0000000980)="4c64b0ddb30a9d6c3fdeaa3b255143ef8260036d4a8e5bfb291a9b5dc627519a486c6181b0a6ffc79a97c2fc7cb906b9335647e65d20b5ee", 0x38}, {&(0x7f00000063c0)="7682123a1474c84ccc44ff06cb14b1ca914cc11c7379fce254bf8a8b32e9c3f72941cbfa4dba78d846aaebc2a7f9370eca59f9899036f7dff9434e41e41744317aeb4332d1133a6a1c537f76da8c8d9171461ced8ff3ded809c7742766e6407abcd92bcb368e187c8fc49069fe3782e9bdb9f947e666c59f9ac44628a6fb99bfa7614f90b90ed8c0f42a21f0c99f289c2d9d10fc34020e5057c7b52947280a9f05913a1300", 0xa5}], 0x5, &(0x7f0000006500)=[@hopopts_2292={{0xe0, 0x29, 0x36, {0x4, 0x18, '\x00', [@generic={0x8, 0x76, "2958e3397c1c2e46c6d1c258577349b24bab2d3f50f3f9fabaf2da514afc2bf75a76fe085c76047635bd295cdc1d736c654499db36617e9e2575a4a0f9836894af2ef7a06ca611363e767b29b80a259a20abfc8e22361fb96159c0abe0b7db0934235e6890bc58dfcc7ebba8ab8da199d54a51623fc3"}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0xd050}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x7fff, [0x81, 0x0, 0x0, 0x7, 0x8, 0xbe2]}}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0xac, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x130}}], 0x4, 0x44) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) (async) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) (async) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file1\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000703000000000000000000000000000900010073797a316ec968af"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 30.847460][T19477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.851263][T19479] CPU: 0 UID: 0 PID: 19479 Comm: syz.3.5179 Not tainted syzkaller #0 PREEMPT(full) [ 630.851295][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.851309][T19479] Call Trace: [ 630.851321][T19479] [ 630.851332][T19479] dump_stack_lvl+0x189/0x250 [ 630.851367][T19479] ? __pfx____ratelimit+0x10/0x10 [ 630.851391][T19479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.851427][T19479] ? __pfx__printk+0x10/0x10 [ 630.851468][T19479] ? __pfx___might_resched+0x10/0x10 [ 630.851496][T19479] should_fail_ex+0x414/0x560 [ 630.851545][T19479] should_failslab+0xa8/0x100 [ 630.851582][T19479] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 630.851627][T19479] ? __alloc_skb+0x112/0x2d0 [ 630.851656][T19479] __alloc_skb+0x112/0x2d0 [ 630.851683][T19479] netlink_sendmsg+0x5c6/0xb30 [ 630.851721][T19479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.851749][T19479] ? aa_sock_msg_perm+0xf1/0x1d0 [ 630.851773][T19479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.851799][T19479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.851826][T19479] __sock_sendmsg+0x21c/0x270 [ 630.851864][T19479] ____sys_sendmsg+0x505/0x830 [ 630.851899][T19479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.851938][T19479] ? import_iovec+0x74/0xa0 [ 630.851972][T19479] ___sys_sendmsg+0x21f/0x2a0 [ 630.852002][T19479] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.852070][T19479] ? __fget_files+0x2a/0x420 [ 630.852089][T19479] ? __fget_files+0x3a0/0x420 [ 630.852121][T19479] __x64_sys_sendmsg+0x19b/0x260 [ 630.852153][T19479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.852195][T19479] ? __pfx_ksys_write+0x10/0x10 [ 630.852224][T19479] ? rcu_is_watching+0x15/0xb0 [ 630.852252][T19479] ? do_syscall_64+0xbe/0x3b0 [ 630.852280][T19479] do_syscall_64+0xfa/0x3b0 [ 630.852303][T19479] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.852324][T19479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.852346][T19479] ? clear_bhb_loop+0x60/0xb0 [ 630.852374][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.852395][T19479] RIP: 0033:0x7f322c78ebe9 [ 630.852415][T19479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.852461][T19479] RSP: 002b:00007f322d699038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.852486][T19479] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78ebe9 [ 630.852504][T19479] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 630.852519][T19479] RBP: 00007f322d699090 R08: 0000000000000000 R09: 0000000000000000 [ 630.852533][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.852548][T19479] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 630.852584][T19479] [ 631.172641][T19477] CPU: 0 UID: 0 PID: 19477 Comm: syz.0.5180 Not tainted syzkaller #0 PREEMPT(full) [ 631.172673][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.172683][T19477] Call Trace: [ 631.172689][T19477] [ 631.172695][T19477] dump_stack_lvl+0x189/0x250 [ 631.172723][T19477] ? __pfx____ratelimit+0x10/0x10 [ 631.172744][T19477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.172768][T19477] ? __pfx__printk+0x10/0x10 [ 631.172795][T19477] ? __might_fault+0xb0/0x130 [ 631.172845][T19477] should_fail_ex+0x414/0x560 [ 631.172877][T19477] _copy_from_user+0x2d/0xb0 [ 631.172906][T19477] ___sys_sendmsg+0x158/0x2a0 [ 631.172934][T19477] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.172987][T19477] ? __fget_files+0x2a/0x420 [ 631.173001][T19477] ? __fget_files+0x3a0/0x420 [ 631.173025][T19477] __x64_sys_sendmsg+0x19b/0x260 [ 631.173055][T19477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.173089][T19477] ? __pfx_ksys_write+0x10/0x10 [ 631.173115][T19477] ? rcu_is_watching+0x15/0xb0 [ 631.173134][T19477] ? do_syscall_64+0xbe/0x3b0 [ 631.173152][T19477] do_syscall_64+0xfa/0x3b0 [ 631.173167][T19477] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.173188][T19477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.173211][T19477] ? clear_bhb_loop+0x60/0xb0 [ 631.173235][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.173254][T19477] RIP: 0033:0x7fbf6098ebe9 [ 631.173283][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.173296][T19477] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.173311][T19477] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 631.173322][T19477] RDX: 0000000004000010 RSI: 0000200000000d00 RDI: 0000000000000004 [ 631.173338][T19477] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 631.173351][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.173364][T19477] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 631.173395][T19477] [ 631.386921][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.626742][ T44] usbhid 5-1:1.0: can't add hid device: -71 [ 631.653498][ T44] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 631.693940][T19483] FAULT_INJECTION: forcing a failure. [ 631.693940][T19483] name failslab, interval 1, probability 0, space 0, times 0 [ 631.722483][T19483] CPU: 1 UID: 0 PID: 19483 Comm: syz.3.5181 Not tainted syzkaller #0 PREEMPT(full) [ 631.722518][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.722531][T19483] Call Trace: [ 631.722540][T19483] [ 631.722549][T19483] dump_stack_lvl+0x189/0x250 [ 631.722580][T19483] ? __pfx____ratelimit+0x10/0x10 [ 631.722601][T19483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.722624][T19483] ? __pfx__printk+0x10/0x10 [ 631.722659][T19483] ? __pfx___might_resched+0x10/0x10 [ 631.722685][T19483] should_fail_ex+0x414/0x560 [ 631.722723][T19483] should_failslab+0xa8/0x100 [ 631.722766][T19483] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 631.722791][T19483] ? __alloc_skb+0x112/0x2d0 [ 631.722816][T19483] __alloc_skb+0x112/0x2d0 [ 631.722839][T19483] netlink_sendmsg+0x5c6/0xb30 [ 631.722879][T19483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.722904][T19483] ? aa_sock_msg_perm+0xf1/0x1d0 [ 631.722927][T19483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.722949][T19483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.722971][T19483] __sock_sendmsg+0x21c/0x270 [ 631.723005][T19483] ____sys_sendmsg+0x505/0x830 [ 631.723036][T19483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.723071][T19483] ? import_iovec+0x74/0xa0 [ 631.723101][T19483] ___sys_sendmsg+0x21f/0x2a0 [ 631.723128][T19483] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.723189][T19483] ? __fget_files+0x2a/0x420 [ 631.723206][T19483] ? __fget_files+0x3a0/0x420 [ 631.723234][T19483] __x64_sys_sendmsg+0x19b/0x260 [ 631.723262][T19483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.723296][T19483] ? __pfx_ksys_write+0x10/0x10 [ 631.723318][T19483] ? rcu_is_watching+0x15/0xb0 [ 631.723351][T19483] ? do_syscall_64+0xbe/0x3b0 [ 631.723374][T19483] do_syscall_64+0xfa/0x3b0 [ 631.723394][T19483] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.723413][T19483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.723434][T19483] ? clear_bhb_loop+0x60/0xb0 [ 631.723458][T19483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.723478][T19483] RIP: 0033:0x7f322c78ebe9 [ 631.723496][T19483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.723514][T19483] RSP: 002b:00007f322d699038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.723535][T19483] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78ebe9 [ 631.723550][T19483] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 631.723563][T19483] RBP: 00007f322d699090 R08: 0000000000000000 R09: 0000000000000000 [ 631.723576][T19483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.723588][T19483] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 631.723620][T19483] [ 632.082559][ T44] usb 5-1: USB disconnect, device number 33 [ 632.315185][T19491] netdevsim netdevsim5: Direct firmware load for x failed with error -2 [ 632.324228][T19491] netdevsim netdevsim5: Falling back to sysfs fallback for: x [ 632.598566][T19496] FAULT_INJECTION: forcing a failure. [ 632.598566][T19496] name failslab, interval 1, probability 0, space 0, times 0 [ 632.632588][ T44] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 632.636264][T19496] CPU: 0 UID: 0 PID: 19496 Comm: syz.0.5185 Not tainted syzkaller #0 PREEMPT(full) [ 632.636300][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.636313][T19496] Call Trace: [ 632.636324][T19496] [ 632.636334][T19496] dump_stack_lvl+0x189/0x250 [ 632.636365][T19496] ? __pfx____ratelimit+0x10/0x10 [ 632.636387][T19496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.636412][T19496] ? __pfx__printk+0x10/0x10 [ 632.636449][T19496] ? __pfx___might_resched+0x10/0x10 [ 632.636475][T19496] should_fail_ex+0x414/0x560 [ 632.636511][T19496] should_failslab+0xa8/0x100 [ 632.636543][T19496] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 632.636572][T19496] ? __alloc_skb+0x112/0x2d0 [ 632.636600][T19496] __alloc_skb+0x112/0x2d0 [ 632.636626][T19496] netlink_sendmsg+0x5c6/0xb30 [ 632.636660][T19496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.636687][T19496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 632.636728][T19496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.636764][T19496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.636787][T19496] __sock_sendmsg+0x21c/0x270 [ 632.636821][T19496] ____sys_sendmsg+0x505/0x830 [ 632.636853][T19496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.636890][T19496] ? import_iovec+0x74/0xa0 [ 632.636921][T19496] ___sys_sendmsg+0x21f/0x2a0 [ 632.636951][T19496] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.637017][T19496] ? __fget_files+0x2a/0x420 [ 632.637034][T19496] ? __fget_files+0x3a0/0x420 [ 632.637065][T19496] __x64_sys_sendmsg+0x19b/0x260 [ 632.637093][T19496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.637130][T19496] ? __pfx_ksys_write+0x10/0x10 [ 632.637156][T19496] ? rcu_is_watching+0x15/0xb0 [ 632.637182][T19496] ? do_syscall_64+0xbe/0x3b0 [ 632.637209][T19496] do_syscall_64+0xfa/0x3b0 [ 632.637229][T19496] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.637250][T19496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.637271][T19496] ? clear_bhb_loop+0x60/0xb0 [ 632.637302][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.637342][T19496] RIP: 0033:0x7fbf6098ebe9 [ 632.637362][T19496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.637381][T19496] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.637406][T19496] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 632.637423][T19496] RDX: 0000000008018040 RSI: 0000200000000300 RDI: 0000000000000003 [ 632.637438][T19496] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 632.637453][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.637467][T19496] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 632.637502][T19496] [ 632.714307][T19501] tipc: Enabled bearer , priority 0 [ 632.862479][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 632.939714][T19504] syzkaller0: entered promiscuous mode [ 632.950250][T19504] syzkaller0: entered allmulticast mode [ 632.954373][ T44] usb 5-1: not running at top speed; connect to a high speed hub [ 632.969413][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 632.980680][ T44] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 633.001416][ T44] usb 5-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.40 [ 633.011289][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.021000][ T44] usb 5-1: Product: 쌅籦逬Ȁ䴲泔⭾軭䊗カἇ苜ꟓ먚扎ꎷ姄蔤꯳ꆯ쟜啈栘䍠떉綏쉩麌亖ᓧ੹ꈱ綣ᣝ뙆生跟售鉞䭌 [ 633.038821][ T44] usb 5-1: Manufacturer: О [ 633.046610][ T44] usb 5-1: SerialNumber: 뛤쟒뿳㘎薬ᮢ찁㼙氲緂萁뺯⢽㵼팚㾩䜨鎬ⷄ园꾕ࣻ恒握♷봘減᨞ꏪ牎圸싺勄뮵ﲃኣ죒☛攞谟ᯭ냰並Ũ꿫ꀚḮ嬦突믒겊࿩ﻥ蒶瓿鮐ﲗ鬾苛肄㉶䢷뿵ঢ়܈媚㲣ᔊ쑝鉐㋁㾧䌻醒羯㥬啭퍏篝얀撐㿢ኅޤ虸俕伀맫풓ꆈ᦬Ċ頓鱶禵⤥ﶬ [ 633.098806][T19501] tipc: Resetting bearer [ 633.112434][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 633.119983][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.141991][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 633.164123][T19497] tipc: Resetting bearer [ 633.200260][T19497] tipc: Disabling bearer [ 633.212403][ T44] usb 5-1: can't set config #1, error -71 [ 633.220629][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.247021][ T44] usb 5-1: USB disconnect, device number 34 [ 633.265280][ T24] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 633.304482][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.324269][ T24] usb 3-1: Product: syz [ 633.341440][ T24] usb 3-1: Manufacturer: syz [ 633.354366][ T24] usb 3-1: SerialNumber: syz [ 633.403552][ T24] usb 3-1: config 0 descriptor?? [ 633.425725][ T24] imon_raw 3-1:0.0: IR endpoint missing [ 633.455824][T19508] netlink: 'syz.3.5189': attribute type 29 has an invalid length. [ 633.505532][T19508] netlink: 'syz.3.5189': attribute type 29 has an invalid length. [ 633.536667][T19508] netlink: 'syz.3.5189': attribute type 29 has an invalid length. [ 633.557834][T19508] netlink: 'syz.3.5189': attribute type 29 has an invalid length. [ 634.319280][T19529] FAULT_INJECTION: forcing a failure. [ 634.319280][T19529] name failslab, interval 1, probability 0, space 0, times 0 [ 634.354480][T19529] CPU: 0 UID: 0 PID: 19529 Comm: syz.0.5196 Not tainted syzkaller #0 PREEMPT(full) [ 634.354509][T19529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.354521][T19529] Call Trace: [ 634.354529][T19529] [ 634.354537][T19529] dump_stack_lvl+0x189/0x250 [ 634.354565][T19529] ? __pfx____ratelimit+0x10/0x10 [ 634.354585][T19529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.354608][T19529] ? __pfx__printk+0x10/0x10 [ 634.354640][T19529] ? __pfx___might_resched+0x10/0x10 [ 634.354662][T19529] should_fail_ex+0x414/0x560 [ 634.354695][T19529] should_failslab+0xa8/0x100 [ 634.354724][T19529] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 634.354751][T19529] ? __alloc_skb+0x112/0x2d0 [ 634.354776][T19529] __alloc_skb+0x112/0x2d0 [ 634.354801][T19529] netlink_sendmsg+0x5c6/0xb30 [ 634.354831][T19529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.354854][T19529] ? aa_sock_msg_perm+0xf1/0x1d0 [ 634.354875][T19529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.354897][T19529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.354918][T19529] __sock_sendmsg+0x21c/0x270 [ 634.354950][T19529] ____sys_sendmsg+0x505/0x830 [ 634.354979][T19529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.355011][T19529] ? import_iovec+0x74/0xa0 [ 634.355039][T19529] ___sys_sendmsg+0x21f/0x2a0 [ 634.355065][T19529] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.355121][T19529] ? __fget_files+0x2a/0x420 [ 634.355138][T19529] ? __fget_files+0x3a0/0x420 [ 634.355165][T19529] __x64_sys_sendmsg+0x19b/0x260 [ 634.355192][T19529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.355224][T19529] ? __pfx_ksys_write+0x10/0x10 [ 634.355247][T19529] ? rcu_is_watching+0x15/0xb0 [ 634.355271][T19529] ? do_syscall_64+0xbe/0x3b0 [ 634.355295][T19529] do_syscall_64+0xfa/0x3b0 [ 634.355314][T19529] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.355332][T19529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.355357][T19529] ? clear_bhb_loop+0x60/0xb0 [ 634.355380][T19529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.355398][T19529] RIP: 0033:0x7fbf6098ebe9 [ 634.355416][T19529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.355432][T19529] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.355452][T19529] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 634.355471][T19529] RDX: 0000000000040040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 634.355483][T19529] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 634.355495][T19529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.355507][T19529] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 634.355536][T19529] [ 634.627315][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.837943][T19538] FAULT_INJECTION: forcing a failure. [ 634.837943][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 634.851091][T19538] CPU: 0 UID: 0 PID: 19538 Comm: syz.3.5200 Not tainted syzkaller #0 PREEMPT(full) [ 634.851118][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.851132][T19538] Call Trace: [ 634.851140][T19538] [ 634.851150][T19538] dump_stack_lvl+0x189/0x250 [ 634.851181][T19538] ? __pfx____ratelimit+0x10/0x10 [ 634.851203][T19538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.851228][T19538] ? __pfx__printk+0x10/0x10 [ 634.851270][T19538] should_fail_ex+0x414/0x560 [ 634.851315][T19538] should_failslab+0xa8/0x100 [ 634.851347][T19538] __kmalloc_cache_noprof+0x70/0x3d0 [ 634.851375][T19538] ? j1939_ecu_create_locked+0xcf/0x310 [ 634.851402][T19538] j1939_ecu_create_locked+0xcf/0x310 [ 634.851423][T19538] ? j1939_ecu_get_by_name_locked+0x139/0x230 [ 634.851450][T19538] j1939_local_ecu_get+0xbe/0x3f0 [ 634.851478][T19538] j1939_sk_bind+0x692/0xbf0 [ 634.851514][T19538] __sys_bind+0x2c3/0x3e0 [ 634.851538][T19538] ? __pfx___sys_bind+0x10/0x10 [ 634.851570][T19538] ? __pfx_ksys_write+0x10/0x10 [ 634.851596][T19538] ? rcu_is_watching+0x15/0xb0 [ 634.851625][T19538] __x64_sys_bind+0x7a/0x90 [ 634.851648][T19538] do_syscall_64+0xfa/0x3b0 [ 634.851681][T19538] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.851699][T19538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.851719][T19538] ? clear_bhb_loop+0x60/0xb0 [ 634.851743][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.851762][T19538] RIP: 0033:0x7f322c78ebe9 [ 634.851780][T19538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.851797][T19538] RSP: 002b:00007f322d699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 634.851818][T19538] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78ebe9 [ 634.851833][T19538] RDX: 0000000000000018 RSI: 00002000000002c0 RDI: 0000000000000004 [ 634.851845][T19538] RBP: 00007f322d699090 R08: 0000000000000000 R09: 0000000000000000 [ 634.851858][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.851869][T19538] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 634.851901][T19538] [ 635.063356][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.355742][T19548] binder: 19520:19548 ioctl 4018620d 0 returned -22 [ 635.509195][ T9] usb 3-1: USB disconnect, device number 45 [ 635.549582][T19551] netlink: 'syz.2.5203': attribute type 29 has an invalid length. [ 635.563752][T19548] binder: 19520:19548 ioctl c0306201 200000000040 returned -22 [ 635.572251][T19548] binder: 19520:19548 ioctl c0306201 200000000640 returned -22 [ 635.633738][T19551] netlink: 'syz.2.5203': attribute type 29 has an invalid length. [ 635.643916][T19551] netlink: 'syz.2.5203': attribute type 29 has an invalid length. [ 635.695102][T19551] netlink: 'syz.2.5203': attribute type 29 has an invalid length. [ 635.772318][ T5926] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 635.839674][T19555] FAULT_INJECTION: forcing a failure. [ 635.839674][T19555] name failslab, interval 1, probability 0, space 0, times 0 [ 635.881813][T19555] CPU: 1 UID: 0 PID: 19555 Comm: syz.0.5205 Not tainted syzkaller #0 PREEMPT(full) [ 635.881843][T19555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.881856][T19555] Call Trace: [ 635.881865][T19555] [ 635.881893][T19555] dump_stack_lvl+0x189/0x250 [ 635.881924][T19555] ? __pfx____ratelimit+0x10/0x10 [ 635.881945][T19555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.881970][T19555] ? __pfx__printk+0x10/0x10 [ 635.882004][T19555] ? __pfx___might_resched+0x10/0x10 [ 635.882029][T19555] should_fail_ex+0x414/0x560 [ 635.882064][T19555] should_failslab+0xa8/0x100 [ 635.882096][T19555] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 635.882127][T19555] ? __alloc_skb+0x112/0x2d0 [ 635.882154][T19555] __alloc_skb+0x112/0x2d0 [ 635.882182][T19555] netlink_sendmsg+0x5c6/0xb30 [ 635.882217][T19555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.882242][T19555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 635.882271][T19555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.882295][T19555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.882318][T19555] __sock_sendmsg+0x21c/0x270 [ 635.882353][T19555] ____sys_sendmsg+0x505/0x830 [ 635.882385][T19555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.882421][T19555] ? import_iovec+0x74/0xa0 [ 635.882452][T19555] ___sys_sendmsg+0x21f/0x2a0 [ 635.882481][T19555] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.882555][T19555] ? __fget_files+0x2a/0x420 [ 635.882573][T19555] ? __fget_files+0x3a0/0x420 [ 635.882602][T19555] __x64_sys_sendmsg+0x19b/0x260 [ 635.882629][T19555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.882663][T19555] ? __pfx_ksys_write+0x10/0x10 [ 635.882688][T19555] ? rcu_is_watching+0x15/0xb0 [ 635.882714][T19555] ? do_syscall_64+0xbe/0x3b0 [ 635.882740][T19555] do_syscall_64+0xfa/0x3b0 [ 635.882760][T19555] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.882779][T19555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.882799][T19555] ? clear_bhb_loop+0x60/0xb0 [ 635.882824][T19555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.882844][T19555] RIP: 0033:0x7fbf6098ebe9 [ 635.882863][T19555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.882880][T19555] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.882901][T19555] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 635.882916][T19555] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 635.882929][T19555] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 635.882942][T19555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.882954][T19555] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 635.882986][T19555] [ 636.160837][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 636.601010][T19561] FAULT_INJECTION: forcing a failure. [ 636.601010][T19561] name failslab, interval 1, probability 0, space 0, times 0 [ 636.677597][T19563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5206'. [ 636.718669][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.743676][T19561] CPU: 1 UID: 0 PID: 19561 Comm: syz.0.5207 Not tainted syzkaller #0 PREEMPT(full) [ 636.743713][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.743726][T19561] Call Trace: [ 636.743735][T19561] [ 636.743745][T19561] dump_stack_lvl+0x189/0x250 [ 636.743775][T19561] ? __pfx____ratelimit+0x10/0x10 [ 636.743796][T19561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.743821][T19561] ? __pfx__printk+0x10/0x10 [ 636.743856][T19561] ? __pfx___might_resched+0x10/0x10 [ 636.743892][T19561] should_fail_ex+0x414/0x560 [ 636.743929][T19561] should_failslab+0xa8/0x100 [ 636.743967][T19561] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 636.743997][T19561] ? __alloc_skb+0x112/0x2d0 [ 636.744025][T19561] __alloc_skb+0x112/0x2d0 [ 636.744050][T19561] netlink_sendmsg+0x5c6/0xb30 [ 636.744082][T19561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.744107][T19561] ? aa_sock_msg_perm+0xf1/0x1d0 [ 636.744130][T19561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.744152][T19561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.744175][T19561] __sock_sendmsg+0x21c/0x270 [ 636.744208][T19561] ____sys_sendmsg+0x505/0x830 [ 636.744238][T19561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.744271][T19561] ? import_iovec+0x74/0xa0 [ 636.744302][T19561] ___sys_sendmsg+0x21f/0x2a0 [ 636.744329][T19561] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.744393][T19561] ? __fget_files+0x2a/0x420 [ 636.744411][T19561] ? __fget_files+0x3a0/0x420 [ 636.744441][T19561] __x64_sys_sendmsg+0x19b/0x260 [ 636.744468][T19561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.744512][T19561] ? __pfx_ksys_write+0x10/0x10 [ 636.744537][T19561] ? rcu_is_watching+0x15/0xb0 [ 636.744564][T19561] ? do_syscall_64+0xbe/0x3b0 [ 636.744589][T19561] do_syscall_64+0xfa/0x3b0 [ 636.744609][T19561] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.744629][T19561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.744649][T19561] ? clear_bhb_loop+0x60/0xb0 [ 636.744675][T19561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.744699][T19561] RIP: 0033:0x7fbf6098ebe9 [ 636.744718][T19561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.744735][T19561] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.744757][T19561] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 636.744772][T19561] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 636.744786][T19561] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 636.744798][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.744810][T19561] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 636.744843][T19561] [ 636.932576][ T5949] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 637.245288][T19569] IPVS: lc: FWM 3 0x00000003 - no destination available [ 637.252524][ T5926] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 637.272408][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 637.284459][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.302275][ T5926] usb 5-1: Product: syz [ 637.327039][ T5926] usb 5-1: Manufacturer: syz [ 637.336979][ T5926] usb 5-1: SerialNumber: syz [ 637.373014][ T5926] usb 5-1: config 0 descriptor?? [ 637.395207][ T5926] hub 5-1:0.0: bad descriptor, ignoring hub [ 637.401413][ T5926] hub 5-1:0.0: probe with driver hub failed with error -5 [ 637.472497][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 637.654041][T19575] FAULT_INJECTION: forcing a failure. [ 637.654041][T19575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.672212][T19575] CPU: 1 UID: 0 PID: 19575 Comm: syz.3.5212 Not tainted syzkaller #0 PREEMPT(full) [ 637.672239][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.672252][T19575] Call Trace: [ 637.672260][T19575] [ 637.672269][T19575] dump_stack_lvl+0x189/0x250 [ 637.672298][T19575] ? __pfx____ratelimit+0x10/0x10 [ 637.672319][T19575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.672330][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 637.672343][T19575] ? __pfx__printk+0x10/0x10 [ 637.672381][T19575] should_fail_ex+0x414/0x560 [ 637.672420][T19575] _copy_to_user+0x31/0xb0 [ 637.672455][T19575] simple_read_from_buffer+0xe1/0x170 [ 637.672513][T19575] proc_fail_nth_read+0x1b3/0x220 [ 637.672544][T19575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.672577][T19575] ? rw_verify_area+0x2a6/0x4d0 [ 637.672605][T19575] ? __lock_acquire+0xab9/0xd20 [ 637.672636][T19575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 637.672666][T19575] vfs_read+0x200/0xa30 [ 637.672711][T19575] ? fdget_pos+0x247/0x320 [ 637.672739][T19575] ? __pfx___mutex_lock+0x10/0x10 [ 637.672765][T19575] ? __pfx_vfs_read+0x10/0x10 [ 637.672797][T19575] ? __fget_files+0x2a/0x420 [ 637.672822][T19575] ? __fget_files+0x3a0/0x420 [ 637.672841][T19575] ? __fget_files+0x2a/0x420 [ 637.672874][T19575] ksys_read+0x145/0x250 [ 637.672906][T19575] ? __pfx_ksys_read+0x10/0x10 [ 637.672933][T19575] ? rcu_is_watching+0x15/0xb0 [ 637.672964][T19575] ? do_syscall_64+0xbe/0x3b0 [ 637.672993][T19575] do_syscall_64+0xfa/0x3b0 [ 637.673016][T19575] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.673039][T19575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.673061][T19575] ? clear_bhb_loop+0x60/0xb0 [ 637.673097][T19575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.673121][T19575] RIP: 0033:0x7f322c78d5fc [ 637.673142][T19575] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 637.673164][T19575] RSP: 002b:00007f322d699030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 637.673188][T19575] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78d5fc [ 637.673205][T19575] RDX: 000000000000000f RSI: 00007f322d6990a0 RDI: 0000000000000004 [ 637.673221][T19575] RBP: 00007f322d699090 R08: 0000000000000000 R09: 000000000000001c [ 637.673236][T19575] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 637.673250][T19575] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 637.673287][T19575] [ 637.686972][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 637.948540][ T5949] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 637.957071][ T5949] usb 3-1: config 0 has no interface number 0 [ 637.963450][ T5949] usb 3-1: config 0 interface 184 has no altsetting 0 [ 637.973016][ T5949] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 637.982154][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.992331][ T5949] usb 3-1: Product: syz [ 637.999317][ T5949] usb 3-1: Manufacturer: syz [ 638.004254][ T5949] usb 3-1: SerialNumber: syz [ 638.051915][ T5949] usb 3-1: config 0 descriptor?? [ 638.094515][ T5949] smsc75xx v1.0.0 [ 638.098193][ T5949] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 638.129153][ T5949] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 638.181495][T19585] netlink: 'syz.5.5213': attribute type 15 has an invalid length. [ 638.190838][T19585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5213'. [ 638.202765][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 638.223353][ T24] usb 1-1: config 7 has an invalid interface number: 79 but max is 0 [ 638.238085][ T24] usb 1-1: config 7 has no interface number 0 [ 638.250611][T19586] IPVS: lc: FWM 3 0x00000003 - no destination available [ 638.257863][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 638.266362][ T24] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 638.305175][T19558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.323757][ T24] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 638.346087][T19558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.373864][T19558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.382003][ T24] usb 1-1: config 7 interface 79 has no altsetting 0 [ 638.394767][T19558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.409460][ T24] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 638.426392][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.455219][ T24] usb 1-1: Product: syz [ 638.465088][ T24] usb 1-1: Manufacturer: syz [ 638.485270][ T24] usb 1-1: SerialNumber: syz [ 638.666639][T19592] netlink: 'syz.3.5216': attribute type 29 has an invalid length. [ 638.677939][T19592] netlink: 'syz.3.5216': attribute type 29 has an invalid length. [ 638.687503][T19592] netlink: 'syz.3.5216': attribute type 29 has an invalid length. [ 638.696413][T19592] netlink: 'syz.3.5216': attribute type 29 has an invalid length. [ 638.910583][ T24] usb 1-1: USB disconnect, device number 47 [ 639.383943][T19605] FAULT_INJECTION: forcing a failure. [ 639.383943][T19605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.398966][T19605] CPU: 1 UID: 0 PID: 19605 Comm: syz.5.5220 Not tainted syzkaller #0 PREEMPT(full) [ 639.398995][T19605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.399007][T19605] Call Trace: [ 639.399016][T19605] [ 639.399025][T19605] dump_stack_lvl+0x189/0x250 [ 639.399056][T19605] ? __pfx____ratelimit+0x10/0x10 [ 639.399077][T19605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.399101][T19605] ? __pfx__printk+0x10/0x10 [ 639.399142][T19605] should_fail_ex+0x414/0x560 [ 639.399177][T19605] _copy_to_user+0x31/0xb0 [ 639.399206][T19605] simple_read_from_buffer+0xe1/0x170 [ 639.399241][T19605] proc_fail_nth_read+0x1b3/0x220 [ 639.399267][T19605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.399293][T19605] ? rw_verify_area+0x2a6/0x4d0 [ 639.399318][T19605] ? __lock_acquire+0xab9/0xd20 [ 639.399345][T19605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.399369][T19605] vfs_read+0x200/0xa30 [ 639.399394][T19605] ? fdget_pos+0x247/0x320 [ 639.399417][T19605] ? __pfx___mutex_lock+0x10/0x10 [ 639.399440][T19605] ? __pfx_vfs_read+0x10/0x10 [ 639.399467][T19605] ? __fget_files+0x2a/0x420 [ 639.399488][T19605] ? __fget_files+0x3a0/0x420 [ 639.399504][T19605] ? __fget_files+0x2a/0x420 [ 639.399530][T19605] ksys_read+0x145/0x250 [ 639.399559][T19605] ? __pfx_ksys_read+0x10/0x10 [ 639.399582][T19605] ? rcu_is_watching+0x15/0xb0 [ 639.399608][T19605] ? do_syscall_64+0xbe/0x3b0 [ 639.399633][T19605] do_syscall_64+0xfa/0x3b0 [ 639.399653][T19605] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.399673][T19605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.399693][T19605] ? clear_bhb_loop+0x60/0xb0 [ 639.399716][T19605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.399736][T19605] RIP: 0033:0x7f42ddd8d5fc [ 639.399753][T19605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 639.399771][T19605] RSP: 002b:00007f42decc0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.399792][T19605] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8d5fc [ 639.399807][T19605] RDX: 000000000000000f RSI: 00007f42decc00a0 RDI: 0000000000000004 [ 639.399820][T19605] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 639.399833][T19605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.399845][T19605] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 639.399877][T19605] [ 639.743079][ T24] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 639.756310][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 639.776144][ T24] usb 5-1: USB disconnect, device number 35 [ 640.202286][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 640.227657][ T5926] usb 3-1: USB disconnect, device number 46 [ 640.262847][T19618] FAULT_INJECTION: forcing a failure. [ 640.262847][T19618] name failslab, interval 1, probability 0, space 0, times 0 [ 640.300088][T19618] CPU: 0 UID: 0 PID: 19618 Comm: syz.5.5226 Not tainted syzkaller #0 PREEMPT(full) [ 640.300119][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.300132][T19618] Call Trace: [ 640.300141][T19618] [ 640.300151][T19618] dump_stack_lvl+0x189/0x250 [ 640.300182][T19618] ? __pfx____ratelimit+0x10/0x10 [ 640.300204][T19618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.300229][T19618] ? __pfx__printk+0x10/0x10 [ 640.300264][T19618] ? __pfx___might_resched+0x10/0x10 [ 640.300289][T19618] should_fail_ex+0x414/0x560 [ 640.300325][T19618] should_failslab+0xa8/0x100 [ 640.300356][T19618] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 640.300386][T19618] ? __alloc_skb+0x112/0x2d0 [ 640.300412][T19618] __alloc_skb+0x112/0x2d0 [ 640.300439][T19618] netlink_sendmsg+0x5c6/0xb30 [ 640.300472][T19618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.300497][T19618] ? aa_sock_msg_perm+0xf1/0x1d0 [ 640.300520][T19618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.300542][T19618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.300565][T19618] __sock_sendmsg+0x21c/0x270 [ 640.300607][T19618] ____sys_sendmsg+0x505/0x830 [ 640.300638][T19618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.300673][T19618] ? import_iovec+0x74/0xa0 [ 640.300704][T19618] ___sys_sendmsg+0x21f/0x2a0 [ 640.300732][T19618] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.300796][T19618] ? __fget_files+0x2a/0x420 [ 640.300813][T19618] ? __fget_files+0x3a0/0x420 [ 640.300843][T19618] __x64_sys_sendmsg+0x19b/0x260 [ 640.300872][T19618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.300907][T19618] ? __pfx_ksys_write+0x10/0x10 [ 640.300932][T19618] ? rcu_is_watching+0x15/0xb0 [ 640.300959][T19618] ? do_syscall_64+0xbe/0x3b0 [ 640.300985][T19618] do_syscall_64+0xfa/0x3b0 [ 640.301006][T19618] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.301026][T19618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.301047][T19618] ? clear_bhb_loop+0x60/0xb0 [ 640.301072][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.301092][T19618] RIP: 0033:0x7f42ddd8ebe9 [ 640.301111][T19618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.301128][T19618] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.301149][T19618] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 640.301164][T19618] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 640.301177][T19618] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 640.301190][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.301203][T19618] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 640.301234][T19618] [ 640.566721][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.572965][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 640.579914][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 640.583673][T19621] netlink: 'syz.2.5227': attribute type 29 has an invalid length. [ 640.588412][ T24] usb 5-1: config 0 has no interface number 0 [ 640.598423][T19621] netlink: 'syz.2.5227': attribute type 29 has an invalid length. [ 640.610302][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 640.611511][T19621] netlink: 'syz.2.5227': attribute type 29 has an invalid length. [ 640.620013][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.629686][T19621] netlink: 'syz.2.5227': attribute type 29 has an invalid length. [ 640.636062][ T24] usb 5-1: Product: syz [ 640.647681][ T24] usb 5-1: Manufacturer: syz [ 640.652553][ T24] usb 5-1: SerialNumber: syz [ 640.713944][ T24] usb 5-1: config 0 descriptor?? [ 640.747224][ T24] smsc95xx v2.0.0 [ 640.937203][T19635] netlink: 'syz.2.5229': attribute type 15 has an invalid length. [ 640.945142][T19635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5229'. [ 640.973695][T19634] FAULT_INJECTION: forcing a failure. [ 640.973695][T19634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.001959][T19634] CPU: 0 UID: 0 PID: 19634 Comm: syz.5.5231 Not tainted syzkaller #0 PREEMPT(full) [ 641.002000][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.002012][T19634] Call Trace: [ 641.002021][T19634] [ 641.002030][T19634] dump_stack_lvl+0x189/0x250 [ 641.002060][T19634] ? __pfx____ratelimit+0x10/0x10 [ 641.002080][T19634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.002104][T19634] ? __pfx__printk+0x10/0x10 [ 641.002132][T19634] ? __might_fault+0xb0/0x130 [ 641.002173][T19634] should_fail_ex+0x414/0x560 [ 641.002208][T19634] _copy_from_user+0x2d/0xb0 [ 641.002236][T19634] ___sys_sendmsg+0x158/0x2a0 [ 641.002264][T19634] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.002327][T19634] ? __fget_files+0x2a/0x420 [ 641.002344][T19634] ? __fget_files+0x3a0/0x420 [ 641.002373][T19634] __x64_sys_sendmsg+0x19b/0x260 [ 641.002401][T19634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.002437][T19634] ? __pfx_ksys_write+0x10/0x10 [ 641.002461][T19634] ? rcu_is_watching+0x15/0xb0 [ 641.002488][T19634] ? do_syscall_64+0xbe/0x3b0 [ 641.002513][T19634] do_syscall_64+0xfa/0x3b0 [ 641.002533][T19634] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.002560][T19634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.002581][T19634] ? clear_bhb_loop+0x60/0xb0 [ 641.002605][T19634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.002625][T19634] RIP: 0033:0x7f42ddd8ebe9 [ 641.002643][T19634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.002661][T19634] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.002682][T19634] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 641.002697][T19634] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 641.002711][T19634] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 641.002736][T19634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.002747][T19634] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 641.002777][T19634] [ 641.207632][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.476258][T19640] binder: 19613:19640 ioctl c0306201 200000000040 returned -22 [ 641.489251][T19640] binder: 19613:19640 ioctl c0306201 200000000640 returned -22 [ 641.500774][T19598] batman_adv: batadv0: Adding interface: dummy0 [ 641.523322][T19598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.548574][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.678478][T19598] batman_adv: batadv0: Interface activated: dummy0 [ 642.048982][T19641] batadv0: mtu less than device minimum [ 642.063808][T19641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.075620][T19641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.086969][T19641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.098317][T19641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.109672][T19641] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 642.259027][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 642.323847][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 642.350606][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 642.414672][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 642.429578][T19650] FAULT_INJECTION: forcing a failure. [ 642.429578][T19650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.475412][ T24] usb 5-1: USB disconnect, device number 36 [ 642.476545][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.5.5236 Not tainted syzkaller #0 PREEMPT(full) [ 642.476581][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.476596][T19650] Call Trace: [ 642.476606][T19650] [ 642.476616][T19650] dump_stack_lvl+0x189/0x250 [ 642.476663][T19650] ? __pfx____ratelimit+0x10/0x10 [ 642.476695][T19650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.476721][T19650] ? __pfx__printk+0x10/0x10 [ 642.476763][T19650] should_fail_ex+0x414/0x560 [ 642.476801][T19650] _copy_to_user+0x31/0xb0 [ 642.476833][T19650] simple_read_from_buffer+0xe1/0x170 [ 642.476869][T19650] proc_fail_nth_read+0x1b3/0x220 [ 642.476916][T19650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.476945][T19650] ? rw_verify_area+0x2a6/0x4d0 [ 642.476972][T19650] ? __lock_acquire+0xab9/0xd20 [ 642.477005][T19650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 642.477032][T19650] vfs_read+0x200/0xa30 [ 642.477062][T19650] ? fdget_pos+0x247/0x320 [ 642.477087][T19650] ? __pfx___mutex_lock+0x10/0x10 [ 642.477114][T19650] ? __pfx_vfs_read+0x10/0x10 [ 642.477145][T19650] ? __fget_files+0x2a/0x420 [ 642.477169][T19650] ? __fget_files+0x3a0/0x420 [ 642.477189][T19650] ? __fget_files+0x2a/0x420 [ 642.477219][T19650] ksys_read+0x145/0x250 [ 642.477252][T19650] ? __pfx_ksys_read+0x10/0x10 [ 642.477287][T19650] ? do_syscall_64+0xbe/0x3b0 [ 642.477315][T19650] do_syscall_64+0xfa/0x3b0 [ 642.477337][T19650] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.477360][T19650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.477383][T19650] ? clear_bhb_loop+0x60/0xb0 [ 642.477420][T19650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.477438][T19650] RIP: 0033:0x7f42ddd8d5fc [ 642.477457][T19650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 642.477474][T19650] RSP: 002b:00007f42decc0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 642.477497][T19650] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8d5fc [ 642.477514][T19650] RDX: 000000000000000f RSI: 00007f42decc00a0 RDI: 0000000000000005 [ 642.477546][T19650] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 642.477559][T19650] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 642.477574][T19650] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 642.477610][T19650] [ 642.561875][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5235'. [ 643.054357][T19657] FAULT_INJECTION: forcing a failure. [ 643.054357][T19657] name failslab, interval 1, probability 0, space 0, times 0 [ 643.090945][T19657] CPU: 0 UID: 0 PID: 19657 Comm: syz.2.5239 Not tainted syzkaller #0 PREEMPT(full) [ 643.090976][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.090990][T19657] Call Trace: [ 643.090998][T19657] [ 643.091008][T19657] dump_stack_lvl+0x189/0x250 [ 643.091037][T19657] ? __pfx____ratelimit+0x10/0x10 [ 643.091059][T19657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.091084][T19657] ? __pfx__printk+0x10/0x10 [ 643.091119][T19657] ? __pfx___might_resched+0x10/0x10 [ 643.091143][T19657] should_fail_ex+0x414/0x560 [ 643.091179][T19657] should_failslab+0xa8/0x100 [ 643.091211][T19657] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 643.091241][T19657] ? __alloc_skb+0x112/0x2d0 [ 643.091267][T19657] __alloc_skb+0x112/0x2d0 [ 643.091294][T19657] netlink_sendmsg+0x5c6/0xb30 [ 643.091327][T19657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.091352][T19657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 643.091375][T19657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.091398][T19657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.091421][T19657] __sock_sendmsg+0x21c/0x270 [ 643.091455][T19657] ____sys_sendmsg+0x505/0x830 [ 643.091487][T19657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.091523][T19657] ? import_iovec+0x74/0xa0 [ 643.091553][T19657] ___sys_sendmsg+0x21f/0x2a0 [ 643.091581][T19657] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.091663][T19657] ? __fget_files+0x2a/0x420 [ 643.091679][T19657] ? __fget_files+0x3a0/0x420 [ 643.091708][T19657] __x64_sys_sendmsg+0x19b/0x260 [ 643.091739][T19657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.091774][T19657] ? __pfx_ksys_write+0x10/0x10 [ 643.091798][T19657] ? rcu_is_watching+0x15/0xb0 [ 643.091825][T19657] ? do_syscall_64+0xbe/0x3b0 [ 643.091850][T19657] do_syscall_64+0xfa/0x3b0 [ 643.091869][T19657] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.091888][T19657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.091908][T19657] ? clear_bhb_loop+0x60/0xb0 [ 643.091937][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.091958][T19657] RIP: 0033:0x7fdbbd98ebe9 [ 643.091976][T19657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.091993][T19657] RSP: 002b:00007fdbbe8d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.092014][T19657] RAX: ffffffffffffffda RBX: 00007fdbbdbc5fa0 RCX: 00007fdbbd98ebe9 [ 643.092029][T19657] RDX: 0000000000000840 RSI: 0000200000004100 RDI: 0000000000000004 [ 643.092042][T19657] RBP: 00007fdbbe8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 643.092055][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.092067][T19657] R13: 00007fdbbdbc6038 R14: 00007fdbbdbc5fa0 R15: 00007fdbbdcefa28 [ 643.092099][T19657] [ 643.356703][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.469145][T19662] FAULT_INJECTION: forcing a failure. [ 643.469145][T19662] name failslab, interval 1, probability 0, space 0, times 0 [ 643.493490][T19662] CPU: 1 UID: 0 PID: 19662 Comm: syz.4.5238 Not tainted syzkaller #0 PREEMPT(full) [ 643.493519][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.493532][T19662] Call Trace: [ 643.493540][T19662] [ 643.493550][T19662] dump_stack_lvl+0x189/0x250 [ 643.493578][T19662] ? __pfx____ratelimit+0x10/0x10 [ 643.493599][T19662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.493624][T19662] ? __pfx__printk+0x10/0x10 [ 643.493658][T19662] ? __pfx___might_resched+0x10/0x10 [ 643.493682][T19662] should_fail_ex+0x414/0x560 [ 643.493716][T19662] should_failslab+0xa8/0x100 [ 643.493746][T19662] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 643.493774][T19662] ? __alloc_skb+0x112/0x2d0 [ 643.493800][T19662] __alloc_skb+0x112/0x2d0 [ 643.493825][T19662] netlink_sendmsg+0x5c6/0xb30 [ 643.493856][T19662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.493881][T19662] ? aa_sock_msg_perm+0xf1/0x1d0 [ 643.493903][T19662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.493925][T19662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.493947][T19662] __sock_sendmsg+0x21c/0x270 [ 643.493980][T19662] ____sys_sendmsg+0x505/0x830 [ 643.494009][T19662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.494042][T19662] ? import_iovec+0x74/0xa0 [ 643.494071][T19662] ___sys_sendmsg+0x21f/0x2a0 [ 643.494096][T19662] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.494152][T19662] ? __fget_files+0x2a/0x420 [ 643.494169][T19662] ? __fget_files+0x3a0/0x420 [ 643.494195][T19662] __x64_sys_sendmsg+0x19b/0x260 [ 643.494221][T19662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.494254][T19662] ? __pfx_ksys_write+0x10/0x10 [ 643.494285][T19662] ? rcu_is_watching+0x15/0xb0 [ 643.494309][T19662] ? do_syscall_64+0xbe/0x3b0 [ 643.494335][T19662] do_syscall_64+0xfa/0x3b0 [ 643.494353][T19662] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.494371][T19662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.494391][T19662] ? clear_bhb_loop+0x60/0xb0 [ 643.494413][T19662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.494432][T19662] RIP: 0033:0x7fa43e78ebe9 [ 643.494449][T19662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.494466][T19662] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.494486][T19662] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 643.494500][T19662] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 643.494513][T19662] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 643.494525][T19662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.494537][T19662] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 643.494568][T19662] [ 644.016723][T19671] FAULT_INJECTION: forcing a failure. [ 644.016723][T19671] name failslab, interval 1, probability 0, space 0, times 0 [ 644.046017][T19671] CPU: 0 UID: 0 PID: 19671 Comm: syz.5.5245 Not tainted syzkaller #0 PREEMPT(full) [ 644.046044][T19671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.046056][T19671] Call Trace: [ 644.046065][T19671] [ 644.046073][T19671] dump_stack_lvl+0x189/0x250 [ 644.046101][T19671] ? __pfx____ratelimit+0x10/0x10 [ 644.046138][T19671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.046162][T19671] ? __pfx__printk+0x10/0x10 [ 644.046196][T19671] ? __pfx___might_resched+0x10/0x10 [ 644.046221][T19671] should_fail_ex+0x414/0x560 [ 644.046256][T19671] should_failslab+0xa8/0x100 [ 644.046286][T19671] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 644.046315][T19671] ? __alloc_skb+0x112/0x2d0 [ 644.046341][T19671] __alloc_skb+0x112/0x2d0 [ 644.046368][T19671] netlink_sendmsg+0x5c6/0xb30 [ 644.046400][T19671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.046426][T19671] ? aa_sock_msg_perm+0xf1/0x1d0 [ 644.046448][T19671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.046471][T19671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.046500][T19671] __sock_sendmsg+0x21c/0x270 [ 644.046533][T19671] ____sys_sendmsg+0x505/0x830 [ 644.046564][T19671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.046598][T19671] ? import_iovec+0x74/0xa0 [ 644.046628][T19671] ___sys_sendmsg+0x21f/0x2a0 [ 644.046655][T19671] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.046718][T19671] ? __fget_files+0x2a/0x420 [ 644.046735][T19671] ? __fget_files+0x3a0/0x420 [ 644.046764][T19671] __x64_sys_sendmsg+0x19b/0x260 [ 644.046791][T19671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.046830][T19671] ? __pfx_ksys_write+0x10/0x10 [ 644.046855][T19671] ? rcu_is_watching+0x15/0xb0 [ 644.046881][T19671] ? do_syscall_64+0xbe/0x3b0 [ 644.046906][T19671] do_syscall_64+0xfa/0x3b0 [ 644.046926][T19671] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.046945][T19671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.046965][T19671] ? clear_bhb_loop+0x60/0xb0 [ 644.046990][T19671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.047009][T19671] RIP: 0033:0x7f42ddd8ebe9 [ 644.047028][T19671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.047046][T19671] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.047068][T19671] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 644.047083][T19671] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 644.047097][T19671] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 644.047109][T19671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.047121][T19671] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 644.047152][T19671] [ 644.316676][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.683147][T19685] netlink: 'syz.3.5249': attribute type 29 has an invalid length. [ 644.696411][T19688] FAULT_INJECTION: forcing a failure. [ 644.696411][T19688] name failslab, interval 1, probability 0, space 0, times 0 [ 644.710400][T19685] netlink: 'syz.3.5249': attribute type 29 has an invalid length. [ 644.728759][T19688] CPU: 0 UID: 0 PID: 19688 Comm: syz.2.5250 Not tainted syzkaller #0 PREEMPT(full) [ 644.728781][T19688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.728791][T19688] Call Trace: [ 644.728797][T19688] [ 644.728804][T19688] dump_stack_lvl+0x189/0x250 [ 644.728825][T19688] ? __pfx____ratelimit+0x10/0x10 [ 644.728840][T19688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.728857][T19688] ? __pfx__printk+0x10/0x10 [ 644.728882][T19688] ? __pfx___might_resched+0x10/0x10 [ 644.728894][T19688] ? fs_reclaim_acquire+0x7d/0x100 [ 644.728921][T19688] should_fail_ex+0x414/0x560 [ 644.728946][T19688] should_failslab+0xa8/0x100 [ 644.728969][T19688] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 644.728989][T19688] ? __alloc_skb+0x112/0x2d0 [ 644.729008][T19688] __alloc_skb+0x112/0x2d0 [ 644.729027][T19688] sock_wmalloc+0xb2/0x130 [ 644.729048][T19688] pppoe_sendmsg+0x2a8/0x790 [ 644.729068][T19688] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 644.729083][T19688] ? aa_sock_msg_perm+0xf1/0x1d0 [ 644.729099][T19688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 644.729115][T19688] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 644.729130][T19688] __sock_sendmsg+0x21c/0x270 [ 644.729154][T19688] ____sys_sendmsg+0x52d/0x830 [ 644.729183][T19688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.729208][T19688] ? import_iovec+0x74/0xa0 [ 644.729229][T19688] ___sys_sendmsg+0x21f/0x2a0 [ 644.729249][T19688] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.729293][T19688] ? __fget_files+0x2a/0x420 [ 644.729305][T19688] ? __fget_files+0x3a0/0x420 [ 644.729325][T19688] __sys_sendmmsg+0x227/0x430 [ 644.729347][T19688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 644.729363][T19688] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 644.729398][T19688] ? ksys_write+0x22a/0x250 [ 644.729421][T19688] ? __pfx_ksys_write+0x10/0x10 [ 644.729438][T19688] ? rcu_is_watching+0x15/0xb0 [ 644.729457][T19688] __x64_sys_sendmmsg+0xa0/0xc0 [ 644.729476][T19688] do_syscall_64+0xfa/0x3b0 [ 644.729491][T19688] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.729505][T19688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.729519][T19688] ? clear_bhb_loop+0x60/0xb0 [ 644.729536][T19688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.729550][T19688] RIP: 0033:0x7fdbbd98ebe9 [ 644.729563][T19688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.729576][T19688] RSP: 002b:00007fdbbe8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 644.729591][T19688] RAX: ffffffffffffffda RBX: 00007fdbbdbc5fa0 RCX: 00007fdbbd98ebe9 [ 644.729602][T19688] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000003 [ 644.729611][T19688] RBP: 00007fdbbe8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 644.729620][T19688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.729629][T19688] R13: 00007fdbbdbc6038 R14: 00007fdbbdbc5fa0 R15: 00007fdbbdcefa28 [ 644.729651][T19688] [ 645.015450][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.076510][T19685] netlink: 'syz.3.5249': attribute type 29 has an invalid length. [ 645.086967][T19685] netlink: 'syz.3.5249': attribute type 29 has an invalid length. [ 645.150257][T19690] FAULT_INJECTION: forcing a failure. [ 645.150257][T19690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.163783][T19692] FAULT_INJECTION: forcing a failure. [ 645.163783][T19692] name failslab, interval 1, probability 0, space 0, times 0 [ 645.172411][T19690] CPU: 1 UID: 0 PID: 19690 Comm: syz.2.5251 Not tainted syzkaller #0 PREEMPT(full) [ 645.172443][T19690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.172458][T19690] Call Trace: [ 645.172468][T19690] [ 645.172477][T19690] dump_stack_lvl+0x189/0x250 [ 645.172512][T19690] ? __pfx____ratelimit+0x10/0x10 [ 645.172534][T19690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.172563][T19690] ? __pfx__printk+0x10/0x10 [ 645.172593][T19690] ? __might_fault+0xb0/0x130 [ 645.172637][T19690] should_fail_ex+0x414/0x560 [ 645.172678][T19690] _copy_from_user+0x2d/0xb0 [ 645.172708][T19690] ___sys_recvmsg+0x12e/0x510 [ 645.172746][T19690] ? __pfx____sys_recvmsg+0x10/0x10 [ 645.172802][T19690] ? __fget_files+0x3a0/0x420 [ 645.172836][T19690] do_recvmmsg+0x307/0x770 [ 645.172875][T19690] ? __pfx_do_recvmmsg+0x10/0x10 [ 645.172917][T19690] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 645.172964][T19690] __x64_sys_recvmmsg+0x190/0x240 [ 645.172996][T19690] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 645.173022][T19690] ? rcu_is_watching+0x15/0xb0 [ 645.173052][T19690] ? do_syscall_64+0xbe/0x3b0 [ 645.173080][T19690] do_syscall_64+0xfa/0x3b0 [ 645.173103][T19690] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.173123][T19690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.173144][T19690] ? clear_bhb_loop+0x60/0xb0 [ 645.173173][T19690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.173194][T19690] RIP: 0033:0x7fdbbd98ebe9 [ 645.173213][T19690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.173234][T19690] RSP: 002b:00007fdbbe8d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 645.173257][T19690] RAX: ffffffffffffffda RBX: 00007fdbbdbc5fa0 RCX: 00007fdbbd98ebe9 [ 645.173273][T19690] RDX: 0000000004000032 RSI: 0000200000004c00 RDI: 0000000000000004 [ 645.173289][T19690] RBP: 00007fdbbe8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 645.173303][T19690] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 645.173316][T19690] R13: 00007fdbbdbc6038 R14: 00007fdbbdbc5fa0 R15: 00007fdbbdcefa28 [ 645.173351][T19690] [ 645.222361][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 645.294464][T19692] CPU: 0 UID: 0 PID: 19692 Comm: syz.3.5252 Not tainted syzkaller #0 PREEMPT(full) [ 645.294496][T19692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.294510][T19692] Call Trace: [ 645.294522][T19692] [ 645.294533][T19692] dump_stack_lvl+0x189/0x250 [ 645.294568][T19692] ? __pfx____ratelimit+0x10/0x10 [ 645.294590][T19692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.294617][T19692] ? __pfx__printk+0x10/0x10 [ 645.294655][T19692] ? __pfx___might_resched+0x10/0x10 [ 645.294682][T19692] should_fail_ex+0x414/0x560 [ 645.294718][T19692] should_failslab+0xa8/0x100 [ 645.294753][T19692] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 645.294785][T19692] ? __alloc_skb+0x112/0x2d0 [ 645.294815][T19692] __alloc_skb+0x112/0x2d0 [ 645.294844][T19692] netlink_sendmsg+0x5c6/0xb30 [ 645.294880][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.294908][T19692] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.294933][T19692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.294958][T19692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.294983][T19692] __sock_sendmsg+0x21c/0x270 [ 645.295021][T19692] ____sys_sendmsg+0x505/0x830 [ 645.295055][T19692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.295093][T19692] ? import_iovec+0x74/0xa0 [ 645.295127][T19692] ___sys_sendmsg+0x21f/0x2a0 [ 645.295167][T19692] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.295235][T19692] ? __fget_files+0x2a/0x420 [ 645.295255][T19692] ? __fget_files+0x3a0/0x420 [ 645.295292][T19692] __x64_sys_sendmsg+0x19b/0x260 [ 645.295322][T19692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.295360][T19692] ? __pfx_ksys_write+0x10/0x10 [ 645.295386][T19692] ? rcu_is_watching+0x15/0xb0 [ 645.295413][T19692] ? do_syscall_64+0xbe/0x3b0 [ 645.295442][T19692] do_syscall_64+0xfa/0x3b0 [ 645.295466][T19692] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.295488][T19692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.295512][T19692] ? clear_bhb_loop+0x60/0xb0 [ 645.295539][T19692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.295562][T19692] RIP: 0033:0x7f322c78ebe9 [ 645.295583][T19692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.295602][T19692] RSP: 002b:00007f322d699038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.295626][T19692] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78ebe9 [ 645.295643][T19692] RDX: 0000000004040084 RSI: 0000200000000000 RDI: 0000000000000003 [ 645.295658][T19692] RBP: 00007f322d699090 R08: 0000000000000000 R09: 0000000000000000 [ 645.295671][T19692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.295685][T19692] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 645.295720][T19692] [ 645.936224][T19699] syzkaller0: entered promiscuous mode [ 645.951948][T19699] syzkaller0: entered allmulticast mode [ 645.980515][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5255'. [ 646.018854][T19699] netem: invalid attributes len -11 [ 646.039415][T19699] netem: change failed [ 646.376196][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 646.384435][T19705] binder: 19693:19705 ioctl c0306201 200000000040 returned -22 [ 646.392698][T19705] binder: 19693:19705 ioctl c0306201 200000000640 returned -22 [ 646.444944][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.456342][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.466313][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.480658][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 646.552540][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.565154][ T24] usb 5-1: config 0 descriptor?? [ 646.978869][ T24] wacom 0003:056A:0317.0021: unbalanced delimiter at end of report description [ 647.022947][ T24] wacom 0003:056A:0317.0021: parse failed [ 647.044550][ T24] wacom 0003:056A:0317.0021: probe with driver wacom failed with error -22 [ 647.129018][T19715] binder: 19714:19715 ioctl 4018620d 0 returned -22 [ 647.151481][T19715] binder: 19714:19715 ioctl c00c620f 2000000000c0 returned -22 [ 647.189872][ T44] usb 5-1: USB disconnect, device number 37 [ 647.260578][T19719] FAULT_INJECTION: forcing a failure. [ 647.260578][T19719] name failslab, interval 1, probability 0, space 0, times 0 [ 647.282502][T19719] CPU: 0 UID: 0 PID: 19719 Comm: syz.3.5260 Not tainted syzkaller #0 PREEMPT(full) [ 647.282530][T19719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.282543][T19719] Call Trace: [ 647.282552][T19719] [ 647.282560][T19719] dump_stack_lvl+0x189/0x250 [ 647.282590][T19719] ? __pfx____ratelimit+0x10/0x10 [ 647.282611][T19719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.282635][T19719] ? __pfx__printk+0x10/0x10 [ 647.282668][T19719] ? __pfx___might_resched+0x10/0x10 [ 647.282692][T19719] should_fail_ex+0x414/0x560 [ 647.282728][T19719] should_failslab+0xa8/0x100 [ 647.282758][T19719] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 647.282786][T19719] ? __alloc_skb+0x112/0x2d0 [ 647.282813][T19719] __alloc_skb+0x112/0x2d0 [ 647.282844][T19719] netlink_sendmsg+0x5c6/0xb30 [ 647.282876][T19719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.282901][T19719] ? aa_sock_msg_perm+0xf1/0x1d0 [ 647.282922][T19719] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.282944][T19719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.282966][T19719] __sock_sendmsg+0x21c/0x270 [ 647.282998][T19719] ____sys_sendmsg+0x505/0x830 [ 647.283030][T19719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.283064][T19719] ? import_iovec+0x74/0xa0 [ 647.283093][T19719] ___sys_sendmsg+0x21f/0x2a0 [ 647.283119][T19719] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.283180][T19719] ? __fget_files+0x2a/0x420 [ 647.283197][T19719] ? __fget_files+0x3a0/0x420 [ 647.283250][T19719] __x64_sys_sendmsg+0x19b/0x260 [ 647.283279][T19719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.283327][T19719] ? __pfx_ksys_write+0x10/0x10 [ 647.283352][T19719] ? rcu_is_watching+0x15/0xb0 [ 647.283378][T19719] ? do_syscall_64+0xbe/0x3b0 [ 647.283403][T19719] do_syscall_64+0xfa/0x3b0 [ 647.283424][T19719] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.283443][T19719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.283463][T19719] ? clear_bhb_loop+0x60/0xb0 [ 647.283487][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.283506][T19719] RIP: 0033:0x7f322c78ebe9 [ 647.283525][T19719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.283548][T19719] RSP: 002b:00007f322d699038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.283574][T19719] RAX: ffffffffffffffda RBX: 00007f322c9c5fa0 RCX: 00007f322c78ebe9 [ 647.283590][T19719] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 647.283603][T19719] RBP: 00007f322d699090 R08: 0000000000000000 R09: 0000000000000000 [ 647.283616][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.283628][T19719] R13: 00007f322c9c6038 R14: 00007f322c9c5fa0 R15: 00007f322caefa28 [ 647.283660][T19719] [ 647.444988][T19463] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 647.445644][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.570323][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.576321][ C0] hrtimer: interrupt took 284140405 ns [ 647.676362][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.687512][T19463] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.745408][ T5926] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 647.751388][T19463] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 647.770594][T19724] netlink: 'syz.4.5263': attribute type 29 has an invalid length. [ 647.779692][T19724] netlink: 'syz.4.5263': attribute type 29 has an invalid length. [ 647.782766][T19463] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 647.788656][T19724] netlink: 'syz.4.5263': attribute type 29 has an invalid length. [ 647.814788][T19724] netlink: 'syz.4.5263': attribute type 29 has an invalid length. [ 647.845522][T19463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.846909][T19726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.882560][ T5926] usb 1-1: device descriptor read/64, error -71 [ 647.891471][T19463] usb 6-1: config 0 descriptor?? [ 647.910707][T19463] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 647.946284][T19463] dvb-usb: bulk message failed: -22 (3/0) [ 647.977477][T19463] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 647.992793][T19463] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 648.000079][T19463] usb 6-1: media controller created [ 648.009669][T19463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.057307][T19463] dvb-usb: bulk message failed: -22 (6/0) [ 648.082045][T19463] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 648.120028][T19463] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 648.122337][ T5926] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 648.144279][T19463] dvb-usb: schedule remote query interval to 150 msecs. [ 648.151269][T19463] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 648.304558][T19463] dvb-usb: bulk message failed: -22 (1/0) [ 648.312488][T19463] dvb-usb: error while querying for an remote control event. [ 648.362860][ T5926] usb 1-1: device descriptor read/64, error -71 [ 648.472276][T19463] dvb-usb: bulk message failed: -22 (1/0) [ 648.483084][ T5926] usb usb1-port1: attempt power cycle [ 648.495775][T19463] dvb-usb: error while querying for an remote control event. [ 648.696791][T19463] dvb-usb: bulk message failed: -22 (1/0) [ 648.717056][T19463] dvb-usb: error while querying for an remote control event. [ 648.910343][ T5926] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 648.952526][ T5926] usb 1-1: device descriptor read/8, error -71 [ 648.969123][T19754] FAULT_INJECTION: forcing a failure. [ 648.969123][T19754] name failslab, interval 1, probability 0, space 0, times 0 [ 648.979462][T19720] dvb-usb: bulk message failed: -22 (1/0) [ 648.998601][T19720] dvb-usb: error while querying for an remote control event. [ 649.019150][T19754] CPU: 0 UID: 0 PID: 19754 Comm: syz.4.5273 Not tainted syzkaller #0 PREEMPT(full) [ 649.019170][T19754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.019183][T19754] Call Trace: [ 649.019189][T19754] [ 649.019195][T19754] dump_stack_lvl+0x189/0x250 [ 649.019216][T19754] ? __pfx____ratelimit+0x10/0x10 [ 649.019231][T19754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.019248][T19754] ? __pfx__printk+0x10/0x10 [ 649.019272][T19754] ? __pfx___might_resched+0x10/0x10 [ 649.019289][T19754] should_fail_ex+0x414/0x560 [ 649.019315][T19754] should_failslab+0xa8/0x100 [ 649.019337][T19754] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 649.019358][T19754] ? __alloc_skb+0x112/0x2d0 [ 649.019376][T19754] __alloc_skb+0x112/0x2d0 [ 649.019394][T19754] netlink_sendmsg+0x5c6/0xb30 [ 649.019418][T19754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.019435][T19754] ? aa_sock_msg_perm+0xf1/0x1d0 [ 649.019451][T19754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.019467][T19754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.019482][T19754] __sock_sendmsg+0x21c/0x270 [ 649.019506][T19754] ____sys_sendmsg+0x505/0x830 [ 649.019528][T19754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.019552][T19754] ? import_iovec+0x74/0xa0 [ 649.019573][T19754] ___sys_sendmsg+0x21f/0x2a0 [ 649.019592][T19754] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.019634][T19754] ? __fget_files+0x2a/0x420 [ 649.019647][T19754] ? __fget_files+0x3a0/0x420 [ 649.019667][T19754] __x64_sys_sendmsg+0x19b/0x260 [ 649.019687][T19754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.019712][T19754] ? __pfx_ksys_write+0x10/0x10 [ 649.019729][T19754] ? rcu_is_watching+0x15/0xb0 [ 649.019748][T19754] ? do_syscall_64+0xbe/0x3b0 [ 649.019766][T19754] do_syscall_64+0xfa/0x3b0 [ 649.019780][T19754] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.019793][T19754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.019808][T19754] ? clear_bhb_loop+0x60/0xb0 [ 649.019825][T19754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.019839][T19754] RIP: 0033:0x7fa43e78ebe9 [ 649.019851][T19754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.019864][T19754] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.019879][T19754] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 649.019890][T19754] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 649.019900][T19754] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 649.019909][T19754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.019918][T19754] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 649.019940][T19754] [ 649.287305][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.472543][T19720] dvb-usb: bulk message failed: -22 (1/0) [ 649.478487][T19720] dvb-usb: error while querying for an remote control event. [ 649.642271][T19720] dvb-usb: bulk message failed: -22 (1/0) [ 649.649004][T19720] dvb-usb: error while querying for an remote control event. [ 649.729008][ T5926] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 649.731222][T19762] netlink: 'syz.3.5275': attribute type 29 has an invalid length. [ 649.754113][ T5926] usb 1-1: device descriptor read/8, error -71 [ 649.804678][T19762] netlink: 'syz.3.5275': attribute type 29 has an invalid length. [ 649.830408][T19762] netlink: 'syz.3.5275': attribute type 29 has an invalid length. [ 649.832454][T19720] dvb-usb: bulk message failed: -22 (1/0) [ 649.843091][T19764] FAULT_INJECTION: forcing a failure. [ 649.843091][T19764] name failslab, interval 1, probability 0, space 0, times 0 [ 649.845539][T19720] dvb-usb: error while querying for an remote control event. [ 649.864705][T19762] netlink: 'syz.3.5275': attribute type 29 has an invalid length. [ 649.876525][ T5926] usb usb1-port1: unable to enumerate USB device [ 649.897304][T19764] CPU: 0 UID: 0 PID: 19764 Comm: syz.4.5276 Not tainted syzkaller #0 PREEMPT(full) [ 649.897331][T19764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.897344][T19764] Call Trace: [ 649.897352][T19764] [ 649.897361][T19764] dump_stack_lvl+0x189/0x250 [ 649.897391][T19764] ? __pfx____ratelimit+0x10/0x10 [ 649.897412][T19764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.897436][T19764] ? __pfx__printk+0x10/0x10 [ 649.897471][T19764] ? __pfx___might_resched+0x10/0x10 [ 649.897495][T19764] should_fail_ex+0x414/0x560 [ 649.897530][T19764] should_failslab+0xa8/0x100 [ 649.897562][T19764] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 649.897591][T19764] ? __alloc_skb+0x112/0x2d0 [ 649.897617][T19764] __alloc_skb+0x112/0x2d0 [ 649.897643][T19764] netlink_sendmsg+0x5c6/0xb30 [ 649.897675][T19764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.897701][T19764] ? aa_sock_msg_perm+0xf1/0x1d0 [ 649.897723][T19764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.897745][T19764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.897768][T19764] __sock_sendmsg+0x21c/0x270 [ 649.897801][T19764] ____sys_sendmsg+0x505/0x830 [ 649.897832][T19764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.897867][T19764] ? import_iovec+0x74/0xa0 [ 649.897897][T19764] ___sys_sendmsg+0x21f/0x2a0 [ 649.897925][T19764] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.897986][T19764] ? __fget_files+0x2a/0x420 [ 649.898003][T19764] ? __fget_files+0x3a0/0x420 [ 649.898032][T19764] __x64_sys_sendmsg+0x19b/0x260 [ 649.898068][T19764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.898104][T19764] ? __pfx_ksys_write+0x10/0x10 [ 649.898128][T19764] ? rcu_is_watching+0x15/0xb0 [ 649.898154][T19764] ? do_syscall_64+0xbe/0x3b0 [ 649.898179][T19764] do_syscall_64+0xfa/0x3b0 [ 649.898199][T19764] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.898219][T19764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.898239][T19764] ? clear_bhb_loop+0x60/0xb0 [ 649.898263][T19764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.898283][T19764] RIP: 0033:0x7fa43e78ebe9 [ 649.898302][T19764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.898320][T19764] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.898345][T19764] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 649.898360][T19764] RDX: 0000000020004804 RSI: 00002000000000c0 RDI: 0000000000000005 [ 649.898373][T19764] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 649.898386][T19764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.898398][T19764] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 649.898448][T19764] [ 650.167356][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.174062][T19720] dvb-usb: bulk message failed: -22 (1/0) [ 650.180030][T19720] dvb-usb: error while querying for an remote control event. [ 650.342491][T19463] dvb-usb: bulk message failed: -22 (1/0) [ 650.348426][T19463] dvb-usb: error while querying for an remote control event. [ 650.387157][T19769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5278'. [ 650.391130][ T5926] usb 6-1: USB disconnect, device number 13 [ 650.515347][ T5926] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 650.701934][T19780] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5282'. [ 650.882489][T19463] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 651.162579][T19463] usb 1-1: Using ep0 maxpacket: 8 [ 651.170942][T19791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5286'. [ 651.732062][T19463] usb 1-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=de.7b [ 651.762781][T19463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.942858][T19788] mmap: syz.3.5283 (19788) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 651.994000][T19788] pim6reg: entered allmulticast mode [ 652.013146][T19788] pim6reg: left allmulticast mode [ 652.023049][T19463] gspca_main: spca501-2.14.0 probing 040a:0002 [ 652.634510][T19776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5281'. [ 652.744151][T19463] gspca_spca501: reg write: error -71 [ 652.749711][T19463] spca501 1-1:2.0: Reg write failed for 0x00,0x02,0x01 [ 652.757860][T19463] spca501 1-1:2.0: probe with driver spca501 failed with error -22 [ 652.919156][T19463] usb 1-1: USB disconnect, device number 52 [ 653.119842][T19799] netlink: 'syz.5.5288': attribute type 29 has an invalid length. [ 653.140954][T19799] netlink: 'syz.5.5288': attribute type 29 has an invalid length. [ 653.164678][T19799] netlink: 'syz.5.5288': attribute type 29 has an invalid length. [ 653.188302][T19799] netlink: 'syz.5.5288': attribute type 29 has an invalid length. [ 653.613112][ T44] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 653.766712][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 653.792397][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.965623][ T44] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 654.025269][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.224066][T19819] FAULT_INJECTION: forcing a failure. [ 654.224066][T19819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.230732][ T44] usb 6-1: config 0 descriptor?? [ 654.242656][T19819] CPU: 1 UID: 0 PID: 19819 Comm: syz.3.5294 Not tainted syzkaller #0 PREEMPT(full) [ 654.242683][T19819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.242696][T19819] Call Trace: [ 654.242705][T19819] [ 654.242714][T19819] dump_stack_lvl+0x189/0x250 [ 654.242750][T19819] ? __pfx____ratelimit+0x10/0x10 [ 654.242771][T19819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.242797][T19819] ? __pfx__printk+0x10/0x10 [ 654.242826][T19819] ? __might_fault+0xb0/0x130 [ 654.242867][T19819] should_fail_ex+0x414/0x560 [ 654.242904][T19819] _copy_from_user+0x2d/0xb0 [ 654.242932][T19819] kstrtouint_from_user+0xc4/0x170 [ 654.242958][T19819] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 654.243000][T19819] proc_fail_nth_write+0x88/0x200 [ 654.243024][T19819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 654.243054][T19819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 654.243079][T19819] vfs_write+0x27b/0xb30 [ 654.243118][T19819] ? __pfx_vfs_write+0x10/0x10 [ 654.243147][T19819] ? __fget_files+0x2a/0x420 [ 654.243171][T19819] ? __fget_files+0x3a0/0x420 [ 654.243188][T19819] ? __fget_files+0x2a/0x420 [ 654.243223][T19819] ksys_write+0x145/0x250 [ 654.243253][T19819] ? __pfx_ksys_write+0x10/0x10 [ 654.243287][T19819] ? do_syscall_64+0xbe/0x3b0 [ 654.243314][T19819] do_syscall_64+0xfa/0x3b0 [ 654.243335][T19819] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.243355][T19819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.243376][T19819] ? clear_bhb_loop+0x60/0xb0 [ 654.243402][T19819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.243422][T19819] RIP: 0033:0x7f322c78d69f [ 654.243440][T19819] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 654.243460][T19819] RSP: 002b:00007f322d678030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 654.243482][T19819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f322c78d69f [ 654.243497][T19819] RDX: 0000000000000001 RSI: 00007f322d6780a0 RDI: 0000000000000003 [ 654.243510][T19819] RBP: 00007f322d678090 R08: 0000000000000000 R09: 0000000000000000 [ 654.243523][T19819] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 654.243535][T19819] R13: 00007f322c9c6128 R14: 00007f322c9c6090 R15: 00007f322caefa28 [ 654.243575][T19819] [ 654.686884][ T44] isku 0003:1E7D:319C.0022: item fetching failed at offset 5/7 [ 654.700679][ T44] isku 0003:1E7D:319C.0022: parse failed [ 654.706424][ T44] isku 0003:1E7D:319C.0022: probe with driver isku failed with error -22 [ 654.796736][T19828] netlink: 'syz.3.5295': attribute type 10 has an invalid length. [ 654.850439][T19828] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 654.901226][ T44] usb 6-1: USB disconnect, device number 14 [ 654.914855][T19828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5295'. [ 655.662880][T19838] netlink: 'syz.4.5300': attribute type 29 has an invalid length. [ 655.693415][T19838] netlink: 'syz.4.5300': attribute type 29 has an invalid length. [ 655.703005][T19838] netlink: 'syz.4.5300': attribute type 29 has an invalid length. [ 655.722947][T19838] netlink: 'syz.4.5300': attribute type 29 has an invalid length. [ 656.039515][T19847] net_ratelimit: 14 callbacks suppressed [ 656.039537][T19847] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.076276][T19849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5302'. [ 656.147253][T19851] FAULT_INJECTION: forcing a failure. [ 656.147253][T19851] name failslab, interval 1, probability 0, space 0, times 0 [ 656.245664][T19851] CPU: 0 UID: 0 PID: 19851 Comm: syz.4.5304 Not tainted syzkaller #0 PREEMPT(full) [ 656.245695][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.245709][T19851] Call Trace: [ 656.245718][T19851] [ 656.245728][T19851] dump_stack_lvl+0x189/0x250 [ 656.245758][T19851] ? __pfx____ratelimit+0x10/0x10 [ 656.245780][T19851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.245806][T19851] ? __pfx__printk+0x10/0x10 [ 656.245838][T19851] ? __pfx___might_resched+0x10/0x10 [ 656.245858][T19851] ? fs_reclaim_acquire+0x7d/0x100 [ 656.245896][T19851] should_fail_ex+0x414/0x560 [ 656.245932][T19851] should_failslab+0xa8/0x100 [ 656.245966][T19851] __kmalloc_noprof+0xcb/0x4f0 [ 656.245993][T19851] ? tomoyo_encode+0x28b/0x550 [ 656.246020][T19851] tomoyo_encode+0x28b/0x550 [ 656.246048][T19851] tomoyo_realpath_from_path+0x58d/0x5d0 [ 656.246083][T19851] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 656.246119][T19851] tomoyo_path_number_perm+0x1e8/0x5a0 [ 656.246151][T19851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 656.246221][T19851] ? __lock_acquire+0xab9/0xd20 [ 656.246272][T19851] ? __fget_files+0x2a/0x420 [ 656.246295][T19851] ? __fget_files+0x2a/0x420 [ 656.246312][T19851] ? __fget_files+0x3a0/0x420 [ 656.246328][T19851] ? __fget_files+0x2a/0x420 [ 656.246350][T19851] security_file_ioctl+0xcb/0x2d0 [ 656.246380][T19851] __se_sys_ioctl+0x47/0x170 [ 656.246408][T19851] do_syscall_64+0xfa/0x3b0 [ 656.246430][T19851] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.246450][T19851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.246470][T19851] ? clear_bhb_loop+0x60/0xb0 [ 656.246495][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.246515][T19851] RIP: 0033:0x7fa43e78ebe9 [ 656.246533][T19851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.246551][T19851] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.246572][T19851] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 656.246588][T19851] RDX: 00002000000024c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 656.246602][T19851] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 656.246615][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.246627][T19851] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 656.246660][T19851] [ 656.247280][T19851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.739900][T19859] FAULT_INJECTION: forcing a failure. [ 656.739900][T19859] name failslab, interval 1, probability 0, space 0, times 0 [ 656.753874][T19859] CPU: 1 UID: 0 PID: 19859 Comm: syz.5.5306 Not tainted syzkaller #0 PREEMPT(full) [ 656.753902][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.753973][T19859] Call Trace: [ 656.753982][T19859] [ 656.754002][T19859] dump_stack_lvl+0x189/0x250 [ 656.754032][T19859] ? __pfx____ratelimit+0x10/0x10 [ 656.754053][T19859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.754085][T19859] ? __pfx__printk+0x10/0x10 [ 656.754119][T19859] ? __pfx___might_resched+0x10/0x10 [ 656.754145][T19859] should_fail_ex+0x414/0x560 [ 656.754179][T19859] should_failslab+0xa8/0x100 [ 656.754211][T19859] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 656.754240][T19859] ? __alloc_skb+0x112/0x2d0 [ 656.754267][T19859] __alloc_skb+0x112/0x2d0 [ 656.754294][T19859] netlink_sendmsg+0x5c6/0xb30 [ 656.754327][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.754353][T19859] ? aa_sock_msg_perm+0xf1/0x1d0 [ 656.754377][T19859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.754407][T19859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.754430][T19859] __sock_sendmsg+0x21c/0x270 [ 656.754462][T19859] ____sys_sendmsg+0x505/0x830 [ 656.754493][T19859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.754528][T19859] ? import_iovec+0x74/0xa0 [ 656.754559][T19859] ___sys_sendmsg+0x21f/0x2a0 [ 656.754588][T19859] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.754647][T19859] ? __fget_files+0x2a/0x420 [ 656.754666][T19859] ? __fget_files+0x3a0/0x420 [ 656.754693][T19859] __x64_sys_sendmsg+0x19b/0x260 [ 656.754722][T19859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.754757][T19859] ? __pfx_ksys_write+0x10/0x10 [ 656.754782][T19859] ? rcu_is_watching+0x15/0xb0 [ 656.754807][T19859] ? do_syscall_64+0xbe/0x3b0 [ 656.754832][T19859] do_syscall_64+0xfa/0x3b0 [ 656.754851][T19859] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.754872][T19859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.754892][T19859] ? clear_bhb_loop+0x60/0xb0 [ 656.754918][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.754938][T19859] RIP: 0033:0x7f42ddd8ebe9 [ 656.754956][T19859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.754975][T19859] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.754997][T19859] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 656.755013][T19859] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 656.755026][T19859] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 656.755038][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.755051][T19859] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 656.755082][T19859] [ 657.127827][T19858] FAULT_INJECTION: forcing a failure. [ 657.127827][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 657.140929][T19858] CPU: 1 UID: 0 PID: 19858 Comm: syz.2.5307 Not tainted syzkaller #0 PREEMPT(full) [ 657.140958][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.140973][T19858] Call Trace: [ 657.140981][T19858] [ 657.140991][T19858] dump_stack_lvl+0x189/0x250 [ 657.141022][T19858] ? __pfx____ratelimit+0x10/0x10 [ 657.141044][T19858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.141069][T19858] ? __pfx__printk+0x10/0x10 [ 657.141104][T19858] ? __pfx___might_resched+0x10/0x10 [ 657.141130][T19858] should_fail_ex+0x414/0x560 [ 657.141166][T19858] should_failslab+0xa8/0x100 [ 657.141199][T19858] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 657.141228][T19858] ? __alloc_skb+0x112/0x2d0 [ 657.141256][T19858] __alloc_skb+0x112/0x2d0 [ 657.141283][T19858] netlink_sendmsg+0x5c6/0xb30 [ 657.141316][T19858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.141350][T19858] ? aa_sock_msg_perm+0xf1/0x1d0 [ 657.141373][T19858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.141396][T19858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.141419][T19858] __sock_sendmsg+0x21c/0x270 [ 657.141453][T19858] ____sys_sendmsg+0x505/0x830 [ 657.141485][T19858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.141522][T19858] ? import_iovec+0x74/0xa0 [ 657.141553][T19858] ___sys_sendmsg+0x21f/0x2a0 [ 657.141581][T19858] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.141651][T19858] ? __fget_files+0x2a/0x420 [ 657.141667][T19858] ? __fget_files+0x3a0/0x420 [ 657.141693][T19858] __x64_sys_sendmsg+0x19b/0x260 [ 657.141719][T19858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.141752][T19858] ? __pfx_ksys_write+0x10/0x10 [ 657.141774][T19858] ? rcu_is_watching+0x15/0xb0 [ 657.141798][T19858] ? do_syscall_64+0xbe/0x3b0 [ 657.141821][T19858] do_syscall_64+0xfa/0x3b0 [ 657.141839][T19858] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.141857][T19858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.141875][T19858] ? clear_bhb_loop+0x60/0xb0 [ 657.141898][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.141916][T19858] RIP: 0033:0x7fdbbd98ebe9 [ 657.141932][T19858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.141948][T19858] RSP: 002b:00007fdbbe8d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.141968][T19858] RAX: ffffffffffffffda RBX: 00007fdbbdbc5fa0 RCX: 00007fdbbd98ebe9 [ 657.141982][T19858] RDX: 0000000000000800 RSI: 0000200000000580 RDI: 0000000000000004 [ 657.141994][T19858] RBP: 00007fdbbe8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 657.142006][T19858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.142017][T19858] R13: 00007fdbbdbc6038 R14: 00007fdbbdbc5fa0 R15: 00007fdbbdcefa28 [ 657.142047][T19858] [ 657.407992][ T44] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 657.416392][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 657.861868][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.881690][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 657.908783][ T44] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 657.923879][ T44] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 658.287693][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.315878][T19867] FAULT_INJECTION: forcing a failure. [ 658.315878][T19867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.380815][T19867] CPU: 1 UID: 0 PID: 19867 Comm: syz.5.5309 Not tainted syzkaller #0 PREEMPT(full) [ 658.380838][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 658.380847][T19867] Call Trace: [ 658.380854][T19867] [ 658.380861][T19867] dump_stack_lvl+0x189/0x250 [ 658.380883][T19867] ? __pfx____ratelimit+0x10/0x10 [ 658.380902][T19867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.380920][T19867] ? __pfx__printk+0x10/0x10 [ 658.380948][T19867] ? __might_fault+0xb0/0x130 [ 658.380977][T19867] should_fail_ex+0x414/0x560 [ 658.381003][T19867] _copy_from_user+0x2d/0xb0 [ 658.381023][T19867] do_ip_getsockopt+0x25f/0x1b60 [ 658.381045][T19867] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 658.381058][T19867] ? aa_label_sk_perm+0x4cd/0x630 [ 658.381083][T19867] ? __lock_acquire+0xab9/0xd20 [ 658.381107][T19867] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 658.381156][T19867] ? __lock_acquire+0xab9/0xd20 [ 658.381187][T19867] ip_getsockopt+0xbb/0x220 [ 658.381208][T19867] ? __pfx_ip_getsockopt+0x10/0x10 [ 658.381226][T19867] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 658.381251][T19867] do_sock_getsockopt+0x36f/0x450 [ 658.381271][T19867] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 658.381289][T19867] ? write_ibpb+0x30/0x40 [ 658.381303][T19867] ? __fget_files+0x3a0/0x420 [ 658.381316][T19867] ? __fget_files+0x2a/0x420 [ 658.381334][T19867] __x64_sys_getsockopt+0x1a5/0x250 [ 658.381352][T19867] ? write_ibpb+0x30/0x40 [ 658.381367][T19867] ? write_ibpb+0x30/0x40 [ 658.381385][T19867] do_syscall_64+0xfa/0x3b0 [ 658.381399][T19867] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.381413][T19867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.381428][T19867] ? clear_bhb_loop+0x60/0xb0 [ 658.381446][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.381460][T19867] RIP: 0033:0x7f42ddd8ebe9 [ 658.381474][T19867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.381487][T19867] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 658.381502][T19867] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 658.381513][T19867] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000003 [ 658.381523][T19867] RBP: 00007f42decc0090 R08: 0000200000000280 R09: 0000000000000000 [ 658.381533][T19867] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 658.381542][T19867] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 658.381565][T19867] [ 658.897436][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.906706][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.915138][ T44] usb 1-1: Product: syz [ 658.919325][ T44] usb 1-1: Manufacturer: syz [ 658.926680][ T44] usb 1-1: SerialNumber: syz [ 659.032513][ T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 659.113000][T19877] syzkaller1: entered promiscuous mode [ 659.118624][T19877] syzkaller1: entered allmulticast mode [ 659.192358][ T10] usb 3-1: device descriptor read/64, error -71 [ 659.305190][T19879] openvswitch: netlink: Flow actions attr not present in new flow. [ 659.470648][ T44] usb 1-1: 0:2 : does not exist [ 659.512705][ T10] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 659.565294][ T44] usb 1-1: USB disconnect, device number 53 [ 659.656009][ T10] usb 3-1: device descriptor read/64, error -71 [ 659.819467][T19891] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 659.832141][ T10] usb usb3-port1: attempt power cycle [ 659.837952][T19891] bond0: (slave lo): Error: Device can not be enslaved while up [ 660.182382][ T10] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 660.224339][ T10] usb 3-1: device descriptor read/8, error -71 [ 660.622330][ T10] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 660.627728][T19900] FAULT_INJECTION: forcing a failure. [ 660.627728][T19900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.643160][ T10] usb 3-1: device descriptor read/8, error -71 [ 660.650963][T19900] CPU: 1 UID: 0 PID: 19900 Comm: syz.4.5320 Not tainted syzkaller #0 PREEMPT(full) [ 660.650993][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.651014][T19900] Call Trace: [ 660.651025][T19900] [ 660.651035][T19900] dump_stack_lvl+0x189/0x250 [ 660.651069][T19900] ? __pfx____ratelimit+0x10/0x10 [ 660.651094][T19900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.651122][T19900] ? __pfx__printk+0x10/0x10 [ 660.651155][T19900] ? __might_fault+0xb0/0x130 [ 660.651201][T19900] should_fail_ex+0x414/0x560 [ 660.651240][T19900] _copy_from_iter+0x1de/0x1790 [ 660.651275][T19900] ? __lock_acquire+0xab9/0xd20 [ 660.651315][T19900] ? __pfx__copy_from_iter+0x10/0x10 [ 660.651361][T19900] tun_get_user+0x488/0x3e20 [ 660.651411][T19900] ? aa_file_perm+0x44d/0x1550 [ 660.651437][T19900] ? __pfx_tun_get_user+0x10/0x10 [ 660.651463][T19900] ? _parse_integer_limit+0x1ae/0x1f0 [ 660.651496][T19900] ? __lock_acquire+0xab9/0xd20 [ 660.651537][T19900] ? ref_tracker_alloc+0x318/0x460 [ 660.651556][T19900] ? __lock_acquire+0xab9/0xd20 [ 660.651591][T19900] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 660.651620][T19900] ? tun_get+0x1c/0x2f0 [ 660.651652][T19900] ? tun_get+0x1c/0x2f0 [ 660.651676][T19900] ? tun_get+0x1c/0x2f0 [ 660.651708][T19900] tun_chr_write_iter+0x113/0x200 [ 660.651738][T19900] vfs_write+0x5c6/0xb30 [ 660.651774][T19900] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 660.651802][T19900] ? __pfx_vfs_write+0x10/0x10 [ 660.651843][T19900] ? __fget_files+0x2a/0x420 [ 660.651876][T19900] ksys_write+0x145/0x250 [ 660.651912][T19900] ? __pfx_ksys_write+0x10/0x10 [ 660.651939][T19900] ? rcu_is_watching+0x15/0xb0 [ 660.651970][T19900] ? do_syscall_64+0xbe/0x3b0 [ 660.652007][T19900] do_syscall_64+0xfa/0x3b0 [ 660.652030][T19900] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.652052][T19900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.652076][T19900] ? clear_bhb_loop+0x60/0xb0 [ 660.652104][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.652127][T19900] RIP: 0033:0x7fa43e78ebe9 [ 660.652152][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.652172][T19900] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 660.652197][T19900] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 660.652214][T19900] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 660.652230][T19900] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 660.652243][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.652258][T19900] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 660.652294][T19900] [ 661.212842][ T10] usb usb3-port1: unable to enumerate USB device [ 661.295081][T19902] FAULT_INJECTION: forcing a failure. [ 661.295081][T19902] name failslab, interval 1, probability 0, space 0, times 0 [ 661.372482][T19902] CPU: 1 UID: 0 PID: 19902 Comm: syz.4.5321 Not tainted syzkaller #0 PREEMPT(full) [ 661.372512][T19902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.372526][T19902] Call Trace: [ 661.372534][T19902] [ 661.372543][T19902] dump_stack_lvl+0x189/0x250 [ 661.372573][T19902] ? __pfx____ratelimit+0x10/0x10 [ 661.372593][T19902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.372617][T19902] ? __pfx__printk+0x10/0x10 [ 661.372651][T19902] ? __pfx___might_resched+0x10/0x10 [ 661.372681][T19902] should_fail_ex+0x414/0x560 [ 661.372716][T19902] should_failslab+0xa8/0x100 [ 661.372747][T19902] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 661.372776][T19902] ? __alloc_skb+0x112/0x2d0 [ 661.372794][T19902] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 661.372829][T19902] __alloc_skb+0x112/0x2d0 [ 661.372854][T19902] pfkey_sendmsg+0x1dd/0x1090 [ 661.372884][T19902] ? __pfx___might_resched+0x10/0x10 [ 661.372902][T19902] ? __lock_acquire+0xab9/0xd20 [ 661.372937][T19902] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 661.372967][T19902] ? aa_sk_perm+0x81e/0x950 [ 661.373001][T19902] ? __pfx_aa_sk_perm+0x10/0x10 [ 661.373028][T19902] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 661.373054][T19902] ? aa_sock_msg_perm+0xf1/0x1d0 [ 661.373076][T19902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.373091][T19902] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 661.373108][T19902] __sock_sendmsg+0x21c/0x270 [ 661.373132][T19902] ____sys_sendmsg+0x505/0x830 [ 661.373153][T19902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.373177][T19902] ? import_iovec+0x74/0xa0 [ 661.373198][T19902] ___sys_sendmsg+0x21f/0x2a0 [ 661.373218][T19902] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.373260][T19902] ? __fget_files+0x2a/0x420 [ 661.373273][T19902] ? __fget_files+0x3a0/0x420 [ 661.373292][T19902] __x64_sys_sendmsg+0x19b/0x260 [ 661.373312][T19902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.373337][T19902] ? __pfx_ksys_write+0x10/0x10 [ 661.373360][T19902] ? do_syscall_64+0xbe/0x3b0 [ 661.373378][T19902] do_syscall_64+0xfa/0x3b0 [ 661.373392][T19902] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.373405][T19902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.373420][T19902] ? clear_bhb_loop+0x60/0xb0 [ 661.373437][T19902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.373451][T19902] RIP: 0033:0x7fa43e78ebe9 [ 661.373464][T19902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.373477][T19902] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.373492][T19902] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 661.373503][T19902] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 661.373512][T19902] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 661.373521][T19902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.373530][T19902] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 661.373552][T19902] [ 662.186640][T19910] tipc: Enabled bearer , priority 0 [ 662.195091][T19910] syzkaller0: entered promiscuous mode [ 662.202077][T19914] FAULT_INJECTION: forcing a failure. [ 662.202077][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 662.226877][T19910] syzkaller0: entered allmulticast mode [ 662.237507][T19914] CPU: 0 UID: 0 PID: 19914 Comm: syz.5.5325 Not tainted syzkaller #0 PREEMPT(full) [ 662.237534][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.237547][T19914] Call Trace: [ 662.237567][T19914] [ 662.237582][T19914] dump_stack_lvl+0x189/0x250 [ 662.237610][T19914] ? __pfx____ratelimit+0x10/0x10 [ 662.237631][T19914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.237654][T19914] ? __pfx__printk+0x10/0x10 [ 662.237686][T19914] ? __pfx___might_resched+0x10/0x10 [ 662.237708][T19914] should_fail_ex+0x414/0x560 [ 662.237742][T19914] should_failslab+0xa8/0x100 [ 662.237771][T19914] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 662.237799][T19914] ? __alloc_skb+0x112/0x2d0 [ 662.237823][T19914] __alloc_skb+0x112/0x2d0 [ 662.237848][T19914] netlink_sendmsg+0x5c6/0xb30 [ 662.237878][T19914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.237902][T19914] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.237923][T19914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.237944][T19914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.237966][T19914] __sock_sendmsg+0x21c/0x270 [ 662.237997][T19914] ____sys_sendmsg+0x505/0x830 [ 662.238027][T19914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.238060][T19914] ? import_iovec+0x74/0xa0 [ 662.238088][T19914] ___sys_sendmsg+0x21f/0x2a0 [ 662.238114][T19914] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.238172][T19914] ? __fget_files+0x2a/0x420 [ 662.238189][T19914] ? __fget_files+0x3a0/0x420 [ 662.238219][T19914] __x64_sys_sendmsg+0x19b/0x260 [ 662.238246][T19914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.238280][T19914] ? __pfx_ksys_write+0x10/0x10 [ 662.238302][T19914] ? rcu_is_watching+0x15/0xb0 [ 662.238326][T19914] ? do_syscall_64+0xbe/0x3b0 [ 662.238351][T19914] do_syscall_64+0xfa/0x3b0 [ 662.238370][T19914] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.238388][T19914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.238407][T19914] ? clear_bhb_loop+0x60/0xb0 [ 662.238430][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.238449][T19914] RIP: 0033:0x7f42ddd8ebe9 [ 662.238466][T19914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.238483][T19914] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.238503][T19914] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 662.238517][T19914] RDX: 0000000004000804 RSI: 0000200000000400 RDI: 0000000000000003 [ 662.238529][T19914] RBP: 00007f42decc0090 R08: 0000000000000000 R09: 0000000000000000 [ 662.238542][T19914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.238553][T19914] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 662.238591][T19914] [ 662.959816][T19916] sch_tbf: burst 325 is lower than device syzkaller0 mtu (1514) ! [ 663.035617][T19929] FAULT_INJECTION: forcing a failure. [ 663.035617][T19929] name failslab, interval 1, probability 0, space 0, times 0 [ 663.051445][T19929] CPU: 0 UID: 0 PID: 19929 Comm: syz.0.5331 Not tainted syzkaller #0 PREEMPT(full) [ 663.051474][T19929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.051487][T19929] Call Trace: [ 663.051496][T19929] [ 663.051515][T19929] dump_stack_lvl+0x189/0x250 [ 663.051545][T19929] ? __pfx____ratelimit+0x10/0x10 [ 663.051567][T19929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.051592][T19929] ? __pfx__printk+0x10/0x10 [ 663.051628][T19929] ? __pfx___might_resched+0x10/0x10 [ 663.051652][T19929] should_fail_ex+0x414/0x560 [ 663.051701][T19929] should_failslab+0xa8/0x100 [ 663.051731][T19929] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 663.051759][T19929] ? __alloc_skb+0x112/0x2d0 [ 663.051786][T19929] __alloc_skb+0x112/0x2d0 [ 663.051812][T19929] netlink_sendmsg+0x5c6/0xb30 [ 663.051843][T19929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.051868][T19929] ? aa_sock_msg_perm+0xf1/0x1d0 [ 663.051890][T19929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.051912][T19929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.051945][T19929] __sock_sendmsg+0x21c/0x270 [ 663.051976][T19929] ____sys_sendmsg+0x505/0x830 [ 663.052005][T19929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.052038][T19929] ? import_iovec+0x74/0xa0 [ 663.052067][T19929] ___sys_sendmsg+0x21f/0x2a0 [ 663.052092][T19929] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.052148][T19929] ? __fget_files+0x2a/0x420 [ 663.052164][T19929] ? __fget_files+0x3a0/0x420 [ 663.052195][T19929] __x64_sys_sendmsg+0x19b/0x260 [ 663.052221][T19929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.052252][T19929] ? __pfx_ksys_write+0x10/0x10 [ 663.052274][T19929] ? rcu_is_watching+0x15/0xb0 [ 663.052298][T19929] ? do_syscall_64+0xbe/0x3b0 [ 663.052322][T19929] do_syscall_64+0xfa/0x3b0 [ 663.052339][T19929] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.052358][T19929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.052377][T19929] ? clear_bhb_loop+0x60/0xb0 [ 663.052401][T19929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.052420][T19929] RIP: 0033:0x7fbf6098ebe9 [ 663.052437][T19929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.052453][T19929] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.052473][T19929] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 663.052486][T19929] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 663.052497][T19929] RBP: 00007fbf618b0090 R08: 0000000000000000 R09: 0000000000000000 [ 663.052517][T19929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.052528][T19929] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 663.052558][T19929] [ 663.318334][ T44] tipc: Node number set to 997965547 [ 663.369570][T19935] FAULT_INJECTION: forcing a failure. [ 663.369570][T19935] name failslab, interval 1, probability 0, space 0, times 0 [ 663.382305][T19935] CPU: 0 UID: 0 PID: 19935 Comm: syz.4.5329 Not tainted syzkaller #0 PREEMPT(full) [ 663.382331][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.382343][T19935] Call Trace: [ 663.382352][T19935] [ 663.382361][T19935] dump_stack_lvl+0x189/0x250 [ 663.382390][T19935] ? __pfx____ratelimit+0x10/0x10 [ 663.382410][T19935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.382433][T19935] ? __pfx__printk+0x10/0x10 [ 663.382474][T19935] ? __pfx___might_resched+0x10/0x10 [ 663.382499][T19935] should_fail_ex+0x414/0x560 [ 663.382533][T19935] should_failslab+0xa8/0x100 [ 663.382565][T19935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 663.382593][T19935] ? __alloc_skb+0x112/0x2d0 [ 663.382619][T19935] __alloc_skb+0x112/0x2d0 [ 663.382645][T19935] netlink_sendmsg+0x5c6/0xb30 [ 663.382677][T19935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.382702][T19935] ? aa_sock_msg_perm+0xf1/0x1d0 [ 663.382724][T19935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.382746][T19935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.382768][T19935] __sock_sendmsg+0x21c/0x270 [ 663.382802][T19935] ____sys_sendmsg+0x505/0x830 [ 663.382831][T19935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.382865][T19935] ? import_iovec+0x74/0xa0 [ 663.382895][T19935] ___sys_sendmsg+0x21f/0x2a0 [ 663.382922][T19935] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.382984][T19935] ? __fget_files+0x2a/0x420 [ 663.383001][T19935] ? __fget_files+0x3a0/0x420 [ 663.383030][T19935] __x64_sys_sendmsg+0x19b/0x260 [ 663.383058][T19935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.383094][T19935] ? __pfx_ksys_write+0x10/0x10 [ 663.383118][T19935] ? rcu_is_watching+0x15/0xb0 [ 663.383144][T19935] ? do_syscall_64+0xbe/0x3b0 [ 663.383169][T19935] do_syscall_64+0xfa/0x3b0 [ 663.383197][T19935] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.383217][T19935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.383237][T19935] ? clear_bhb_loop+0x60/0xb0 [ 663.383261][T19935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.383281][T19935] RIP: 0033:0x7fa43e78ebe9 [ 663.383299][T19935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.383317][T19935] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.383338][T19935] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 663.383353][T19935] RDX: 0000000020040040 RSI: 0000200000000080 RDI: 0000000000000003 [ 663.383366][T19935] RBP: 00007fa43f5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 663.383379][T19935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.383392][T19935] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 663.383430][T19935] [ 664.092344][ T5952] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 664.446430][T19918] tipc: Resetting bearer [ 664.463654][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 664.481554][ T5952] usb 6-1: unable to get BOS descriptor or descriptor too short [ 664.490697][ T5952] usb 6-1: config 9 has an invalid interface number: 3 but max is 2 [ 664.542214][ T5952] usb 6-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 664.553303][T19918] tipc: Disabling bearer [ 664.662994][ T5952] usb 6-1: config 9 has an invalid interface number: 150 but max is 2 [ 664.688730][ T5952] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 664.722254][ T5952] usb 6-1: config 9 has no interface number 1 [ 664.743446][ T5952] usb 6-1: config 9 has no interface number 2 [ 664.965278][ T5952] usb 6-1: config 9 interface 150 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 665.008477][ T5952] usb 6-1: config 9 interface 150 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 665.056019][ T5952] usb 6-1: config 9 interface 150 has no altsetting 0 [ 665.068991][ T5952] usb 6-1: New USB device found, idVendor=05c6, idProduct=9002, bcdDevice=b2.3d [ 665.079078][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.089204][ T5952] usb 6-1: Product: syz [ 665.118663][ T5952] usb 6-1: Manufacturer: syz [ 665.154334][T19932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.165576][ T5952] usb 6-1: SerialNumber: syz [ 665.472562][ T5952] usb 6-1: USB disconnect, device number 15 [ 665.576455][T19960] FAULT_INJECTION: forcing a failure. [ 665.576455][T19960] name failslab, interval 1, probability 0, space 0, times 0 [ 665.600382][T19960] CPU: 0 UID: 0 PID: 19960 Comm: syz.4.5338 Not tainted syzkaller #0 PREEMPT(full) [ 665.600411][T19960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.600424][T19960] Call Trace: [ 665.600432][T19960] [ 665.600441][T19960] dump_stack_lvl+0x189/0x250 [ 665.600488][T19960] ? __pfx____ratelimit+0x10/0x10 [ 665.600508][T19960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.600533][T19960] ? __pfx__printk+0x10/0x10 [ 665.600565][T19960] ? __pfx___might_resched+0x10/0x10 [ 665.600586][T19960] ? fs_reclaim_acquire+0x7d/0x100 [ 665.600623][T19960] should_fail_ex+0x414/0x560 [ 665.600663][T19960] should_failslab+0xa8/0x100 [ 665.600696][T19960] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 665.600724][T19960] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 665.600752][T19960] ? __alloc_skb+0x112/0x2d0 [ 665.600779][T19960] __alloc_skb+0x112/0x2d0 [ 665.600806][T19960] alloc_skb_with_frags+0xca/0x890 [ 665.600831][T19960] ? __lock_acquire+0xab9/0xd20 [ 665.600867][T19960] ? __lock_acquire+0xab9/0xd20 [ 665.600899][T19960] sock_alloc_send_pskb+0x857/0x990 [ 665.600946][T19960] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 665.600978][T19960] ? dev_get_by_index+0x22/0x2e0 [ 665.601006][T19960] ? dev_get_by_index+0x22/0x2e0 [ 665.601040][T19960] packet_sendmsg+0x33a0/0x5080 [ 665.601078][T19960] ? match_mnt_path_str+0x160/0xb40 [ 665.601125][T19960] ? __pfx___might_resched+0x10/0x10 [ 665.601144][T19960] ? __lock_acquire+0xab9/0xd20 [ 665.601187][T19960] ? __pfx_packet_sendmsg+0x10/0x10 [ 665.601212][T19960] ? aa_sk_perm+0x81e/0x950 [ 665.601250][T19960] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 665.601280][T19960] ? aa_sock_msg_perm+0xf1/0x1d0 [ 665.601359][T19960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 665.601381][T19960] ? __pfx_packet_sendmsg+0x10/0x10 [ 665.601411][T19960] __sock_sendmsg+0x21c/0x270 [ 665.601445][T19960] __sys_sendto+0x3bd/0x520 [ 665.601471][T19960] ? __pfx___sys_sendto+0x10/0x10 [ 665.601490][T19960] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 665.601526][T19960] ? __fget_files+0x3a0/0x420 [ 665.601557][T19960] ? ksys_write+0x22a/0x250 [ 665.601587][T19960] ? __pfx_ksys_write+0x10/0x10 [ 665.601610][T19960] ? rcu_is_watching+0x15/0xb0 [ 665.601647][T19960] __x64_sys_sendto+0xde/0x100 [ 665.601672][T19960] do_syscall_64+0xfa/0x3b0 [ 665.601704][T19960] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.601721][T19960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.601740][T19960] ? clear_bhb_loop+0x60/0xb0 [ 665.601762][T19960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.601781][T19960] RIP: 0033:0x7fa43e78ebe9 [ 665.601797][T19960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.601813][T19960] RSP: 002b:00007fa43f5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 665.601834][T19960] RAX: ffffffffffffffda RBX: 00007fa43e9c5fa0 RCX: 00007fa43e78ebe9 [ 665.601848][T19960] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 665.601860][T19960] RBP: 00007fa43f5e4090 R08: 0000200000000200 R09: 0000000000000014 [ 665.601872][T19960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.601883][T19960] R13: 00007fa43e9c6038 R14: 00007fa43e9c5fa0 R15: 00007fa43eaefa28 [ 665.601913][T19960] [ 665.919470][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.066003][T19964] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5340'. [ 666.268357][T19969] netlink: 'syz.5.5342': attribute type 29 has an invalid length. [ 666.279395][T19969] netlink: 'syz.5.5342': attribute type 29 has an invalid length. [ 666.313123][T19969] netlink: 'syz.5.5342': attribute type 29 has an invalid length. [ 666.324257][T19974] FAULT_INJECTION: forcing a failure. [ 666.324257][T19974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.342381][T19974] CPU: 0 UID: 0 PID: 19974 Comm: syz.2.5344 Not tainted syzkaller #0 PREEMPT(full) [ 666.342430][T19974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.342445][T19974] Call Trace: [ 666.342465][T19974] [ 666.342476][T19974] dump_stack_lvl+0x189/0x250 [ 666.342509][T19974] ? __pfx____ratelimit+0x10/0x10 [ 666.342533][T19974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 666.342561][T19974] ? __pfx__printk+0x10/0x10 [ 666.342610][T19974] should_fail_ex+0x414/0x560 [ 666.342650][T19974] _copy_from_user+0x2d/0xb0 [ 666.342682][T19974] __copy_msghdr+0x3c5/0x5b0 [ 666.342717][T19974] ___sys_sendmsg+0x1a5/0x2a0 [ 666.342748][T19974] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.342820][T19974] ? __fget_files+0x2a/0x420 [ 666.342840][T19974] ? __fget_files+0x3a0/0x420 [ 666.342873][T19974] __sys_sendmmsg+0x227/0x430 [ 666.342908][T19974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 666.342934][T19974] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 666.342991][T19974] ? ksys_write+0x22a/0x250 [ 666.343025][T19974] ? __pfx_ksys_write+0x10/0x10 [ 666.343052][T19974] ? rcu_is_watching+0x15/0xb0 [ 666.343084][T19974] __x64_sys_sendmmsg+0xa0/0xc0 [ 666.343115][T19974] do_syscall_64+0xfa/0x3b0 [ 666.343138][T19974] ? lockdep_hardirqs_on+0x9c/0x150 [ 666.343161][T19974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.343183][T19974] ? clear_bhb_loop+0x60/0xb0 [ 666.343212][T19974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.343234][T19974] RIP: 0033:0x7fdbbd98ebe9 [ 666.343254][T19974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.343275][T19974] RSP: 002b:00007fdbbe8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 666.343311][T19974] RAX: ffffffffffffffda RBX: 00007fdbbdbc5fa0 RCX: 00007fdbbd98ebe9 [ 666.343329][T19974] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 666.343344][T19974] RBP: 00007fdbbe8d3090 R08: 0000000000000000 R09: 0000000000000000 [ 666.343358][T19974] R10: 0000000024004040 R11: 0000000000000246 R12: 0000000000000001 [ 666.343372][T19974] R13: 00007fdbbdbc6038 R14: 00007fdbbdbc5fa0 R15: 00007fdbbdcefa28 [ 666.343408][T19974] [ 666.566125][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.211402][T20005] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5355'. [ 667.319195][ T30] audit: type=1326 audit(1757301793.950:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.341547][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.419403][ T30] audit: type=1326 audit(1757301793.950:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.441741][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.832499][ T30] audit: type=1326 audit(1757301793.950:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.854874][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.907128][ T30] audit: type=1326 audit(1757301793.950:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907173][ T30] audit: type=1326 audit(1757301793.950:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907207][ T30] audit: type=1326 audit(1757301793.950:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907239][ T30] audit: type=1326 audit(1757301793.950:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907270][ T30] audit: type=1326 audit(1757301793.950:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907301][ T30] audit: type=1326 audit(1757301793.950:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.907338][ T30] audit: type=1326 audit(1757301793.950:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20002 comm="syz.0.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbf6098ebe9 code=0x7ffc0000 [ 667.956474][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.187208][T20019] netlink: 'syz.3.5359': attribute type 29 has an invalid length. [ 668.187934][T20019] netlink: 'syz.3.5359': attribute type 29 has an invalid length. [ 668.188472][T20019] netlink: 'syz.3.5359': attribute type 29 has an invalid length. [ 668.257272][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.045885][T20025] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 669.052568][T20025] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.099950][T20025] vhci_hcd vhci_hcd.0: Device attached [ 669.104867][T20032] [ 669.107879][T20032] ===================================================== [ 669.109615][T20037] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 669.114819][T20032] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 669.114841][T20032] syzkaller #0 Not tainted [ 669.114853][T20032] ----------------------------------------------------- [ 669.141454][T20032] syz.5.5363/20032 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 669.149207][T20032] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 669.158022][T20032] [ 669.158022][T20032] and this task is already holding: [ 669.165399][T20032] ffff8880793c63a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 669.174101][T20032] which would create a new lock dependency: [ 669.179989][T20032] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 669.187570][T20032] [ 669.187570][T20032] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 669.197146][T20032] (&client->buffer_lock){..-.}-{3:3} [ 669.197172][T20032] [ 669.197172][T20032] ... which became SOFTIRQ-irq-safe at: [ 669.210265][T20032] lock_acquire+0x120/0x360 [ 669.214867][T20032] _raw_spin_lock+0x2e/0x40 [ 669.219457][T20032] evdev_pass_values+0xb9/0xbd0 [ 669.224398][T20032] evdev_events+0x1e6/0x340 [ 669.228986][T20032] input_pass_values+0x288/0x890 [ 669.234027][T20032] input_event_dispose+0x330/0x6b0 [ 669.239226][T20032] input_event+0x89/0xe0 [ 669.243558][T20032] hidinput_report_event+0xa1/0x100 [ 669.248860][T20032] hid_report_raw_event+0x148b/0x16d0 [ 669.254322][T20032] hid_input_report+0x43e/0x520 [ 669.259272][T20032] hid_irq_in+0x47e/0x6d0 [ 669.263690][T20032] __usb_hcd_giveback_urb+0x376/0x540 [ 669.269148][T20032] dummy_timer+0x862/0x4550 [ 669.273734][T20032] __hrtimer_run_queues+0x529/0xc60 [ 669.279032][T20032] hrtimer_run_softirq+0x187/0x2b0 [ 669.284225][T20032] handle_softirqs+0x283/0x870 [ 669.289086][T20032] __irq_exit_rcu+0xca/0x1f0 [ 669.293760][T20032] irq_exit_rcu+0x9/0x30 [ 669.298084][T20032] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 669.303812][T20032] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.309900][T20032] lock_acquire+0x175/0x360 [ 669.314494][T20032] unwind_next_frame+0xc2/0x2390 [ 669.319523][T20032] __unwind_start+0x5b9/0x760 [ 669.324280][T20032] arch_stack_walk+0xe4/0x150 [ 669.329054][T20032] stack_trace_save+0x9c/0xe0 [ 669.333828][T20032] kasan_save_track+0x3e/0x80 [ 669.338589][T20032] __kasan_kmalloc+0x93/0xb0 [ 669.343290][T20032] __kmalloc_cache_noprof+0x230/0x3d0 [ 669.348750][T20032] kobject_uevent_env+0x27c/0x8c0 [ 669.353860][T20032] really_probe+0x745/0x9e0 [ 669.358453][T20032] __driver_probe_device+0x18c/0x2f0 [ 669.363839][T20032] driver_probe_device+0x4f/0x430 [ 669.368958][T20032] __device_attach_driver+0x2ce/0x530 [ 669.374414][T20032] bus_for_each_drv+0x24e/0x2e0 [ 669.379357][T20032] __device_attach+0x2b8/0x400 [ 669.384236][T20032] bus_probe_device+0x185/0x260 [ 669.389163][T20032] device_add+0x7b6/0xb50 [ 669.393575][T20032] hid_add_device+0x398/0x540 [ 669.398333][T20032] usbhid_probe+0xe13/0x12a0 [ 669.403008][T20032] usb_probe_interface+0x665/0xc30 [ 669.408210][T20032] really_probe+0x26d/0x9e0 [ 669.412802][T20032] __driver_probe_device+0x18c/0x2f0 [ 669.418187][T20032] driver_probe_device+0x4f/0x430 [ 669.423297][T20032] __device_attach_driver+0x2ce/0x530 [ 669.428756][T20032] bus_for_each_drv+0x24e/0x2e0 [ 669.433685][T20032] __device_attach+0x2b8/0x400 [ 669.438532][T20032] bus_probe_device+0x185/0x260 [ 669.443458][T20032] device_add+0x7b6/0xb50 [ 669.447867][T20032] usb_set_configuration+0x1a87/0x20e0 [ 669.452327][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 669.453414][T20032] usb_generic_driver_probe+0x8d/0x150 [ 669.466331][T20032] usb_probe_device+0x1c4/0x390 [ 669.471298][T20032] really_probe+0x26d/0x9e0 [ 669.475906][T20032] __driver_probe_device+0x18c/0x2f0 [ 669.481299][T20032] driver_probe_device+0x4f/0x430 [ 669.486414][T20032] __device_attach_driver+0x2ce/0x530 [ 669.491891][T20032] bus_for_each_drv+0x24e/0x2e0 [ 669.496867][T20032] __device_attach+0x2b8/0x400 [ 669.501718][T20032] bus_probe_device+0x185/0x260 [ 669.506664][T20032] device_add+0x7b6/0xb50 [ 669.511083][T20032] usb_new_device+0xa39/0x16f0 [ 669.515932][T20032] hub_event+0x2958/0x4a20 [ 669.520465][T20032] process_scheduled_works+0xae1/0x17b0 [ 669.526098][T20032] worker_thread+0x8a0/0xda0 [ 669.530775][T20032] kthread+0x70e/0x8a0 [ 669.535002][T20032] ret_from_fork+0x3fc/0x770 [ 669.539675][T20032] ret_from_fork_asm+0x1a/0x30 [ 669.544607][T20032] [ 669.544607][T20032] to a SOFTIRQ-irq-unsafe lock: [ 669.551623][T20032] (tasklist_lock){.+.+}-{3:3} [ 669.551646][T20032] [ 669.551646][T20032] ... which became SOFTIRQ-irq-unsafe at: [ 669.564256][T20032] ... [ 669.564264][T20032] lock_acquire+0x120/0x360 [ 669.571420][T20032] _raw_read_lock+0x36/0x50 [ 669.576010][T20032] __do_wait+0xde/0x740 [ 669.580245][T20032] do_wait+0x1f8/0x520 [ 669.584409][T20032] kernel_wait+0xab/0x170 [ 669.588823][T20032] call_usermodehelper_exec_work+0xbe/0x230 [ 669.594817][T20032] process_scheduled_works+0xae1/0x17b0 [ 669.600445][T20032] worker_thread+0x8a0/0xda0 [ 669.605159][T20032] kthread+0x70e/0x8a0 [ 669.609308][T20032] ret_from_fork+0x3fc/0x770 [ 669.613975][T20032] ret_from_fork_asm+0x1a/0x30 [ 669.618820][T20032] [ 669.618820][T20032] other info that might help us debug this: [ 669.618820][T20032] [ 669.629048][T20032] Chain exists of: [ 669.629048][T20032] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 669.629048][T20032] [ 669.642249][T20032] Possible interrupt unsafe locking scenario: [ 669.642249][T20032] [ 669.650559][T20032] CPU0 CPU1 [ 669.655941][T20032] ---- ---- [ 669.661334][T20032] lock(tasklist_lock); [ 669.665581][T20032] local_irq_disable(); [ 669.672331][T20032] lock(&client->buffer_lock); [ 669.679715][T20032] lock(&f_owner->lock); [ 669.686552][T20032] [ 669.689995][T20032] lock(&client->buffer_lock); [ 669.695010][T20032] [ 669.695010][T20032] *** DEADLOCK *** [ 669.695010][T20032] [ 669.703142][T20032] 2 locks held by syz.5.5363/20032: [ 669.708332][T20032] #0: ffff888023a4b9c8 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 669.716856][T20032] #1: ffff8880793c63a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 669.725993][T20032] [ 669.725993][T20032] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 669.736386][T20032] -> (&client->buffer_lock){..-.}-{3:3} { [ 669.742281][T20032] IN-SOFTIRQ-W at: [ 669.746427][T20032] lock_acquire+0x120/0x360 [ 669.752927][T20032] _raw_spin_lock+0x2e/0x40 [ 669.759431][T20032] evdev_pass_values+0xb9/0xbd0 [ 669.766273][T20032] evdev_events+0x1e6/0x340 [ 669.772769][T20032] input_pass_values+0x288/0x890 [ 669.779695][T20032] input_event_dispose+0x330/0x6b0 [ 669.786801][T20032] input_event+0x89/0xe0 [ 669.793034][T20032] hidinput_report_event+0xa1/0x100 [ 669.800222][T20032] hid_report_raw_event+0x148b/0x16d0 [ 669.807594][T20032] hid_input_report+0x43e/0x520 [ 669.814436][T20032] hid_irq_in+0x47e/0x6d0 [ 669.820757][T20032] __usb_hcd_giveback_urb+0x376/0x540 [ 669.828120][T20032] dummy_timer+0x862/0x4550 [ 669.834618][T20032] __hrtimer_run_queues+0x529/0xc60 [ 669.841806][T20032] hrtimer_run_softirq+0x187/0x2b0 [ 669.848909][T20032] handle_softirqs+0x283/0x870 [ 669.855680][T20032] __irq_exit_rcu+0xca/0x1f0 [ 669.862262][T20032] irq_exit_rcu+0x9/0x30 [ 669.868495][T20032] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 669.876215][T20032] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 669.884195][T20032] lock_acquire+0x175/0x360 [ 669.890715][T20032] unwind_next_frame+0xc2/0x2390 [ 669.897646][T20032] __unwind_start+0x5b9/0x760 [ 669.904315][T20032] arch_stack_walk+0xe4/0x150 [ 669.910989][T20032] stack_trace_save+0x9c/0xe0 [ 669.917660][T20032] kasan_save_track+0x3e/0x80 [ 669.924328][T20032] __kasan_kmalloc+0x93/0xb0 [ 669.930954][T20032] __kmalloc_cache_noprof+0x230/0x3d0 [ 669.938327][T20032] kobject_uevent_env+0x27c/0x8c0 [ 669.945353][T20032] really_probe+0x745/0x9e0 [ 669.951854][T20032] __driver_probe_device+0x18c/0x2f0 [ 669.959142][T20032] driver_probe_device+0x4f/0x430 [ 669.966163][T20032] __device_attach_driver+0x2ce/0x530 [ 669.973528][T20032] bus_for_each_drv+0x24e/0x2e0 [ 669.980379][T20032] __device_attach+0x2b8/0x400 [ 669.987136][T20032] bus_probe_device+0x185/0x260 [ 669.993973][T20032] device_add+0x7b6/0xb50 [ 670.000293][T20032] hid_add_device+0x398/0x540 [ 670.006959][T20032] usbhid_probe+0xe13/0x12a0 [ 670.013543][T20032] usb_probe_interface+0x665/0xc30 [ 670.020649][T20032] really_probe+0x26d/0x9e0 [ 670.027149][T20032] __driver_probe_device+0x18c/0x2f0 [ 670.034425][T20032] driver_probe_device+0x4f/0x430 [ 670.041443][T20032] __device_attach_driver+0x2ce/0x530 [ 670.048808][T20032] bus_for_each_drv+0x24e/0x2e0 [ 670.055649][T20032] __device_attach+0x2b8/0x400 [ 670.062425][T20032] bus_probe_device+0x185/0x260 [ 670.069265][T20032] device_add+0x7b6/0xb50 [ 670.075587][T20032] usb_set_configuration+0x1a87/0x20e0 [ 670.083039][T20032] usb_generic_driver_probe+0x8d/0x150 [ 670.090514][T20032] usb_probe_device+0x1c4/0x390 [ 670.097360][T20032] really_probe+0x26d/0x9e0 [ 670.103864][T20032] __driver_probe_device+0x18c/0x2f0 [ 670.111154][T20032] driver_probe_device+0x4f/0x430 [ 670.118170][T20032] __device_attach_driver+0x2ce/0x530 [ 670.125540][T20032] bus_for_each_drv+0x24e/0x2e0 [ 670.132383][T20032] __device_attach+0x2b8/0x400 [ 670.139143][T20032] bus_probe_device+0x185/0x260 [ 670.145995][T20032] device_add+0x7b6/0xb50 [ 670.152322][T20032] usb_new_device+0xa39/0x16f0 [ 670.159097][T20032] hub_event+0x2958/0x4a20 [ 670.165507][T20032] process_scheduled_works+0xae1/0x17b0 [ 670.173041][T20032] worker_thread+0x8a0/0xda0 [ 670.179621][T20032] kthread+0x70e/0x8a0 [ 670.185677][T20032] ret_from_fork+0x3fc/0x770 [ 670.192273][T20032] ret_from_fork_asm+0x1a/0x30 [ 670.199046][T20032] INITIAL USE at: [ 670.203121][T20032] lock_acquire+0x120/0x360 [ 670.209533][T20032] _raw_spin_lock+0x2e/0x40 [ 670.215953][T20032] evdev_handle_get_val+0x70/0x9f0 [ 670.222977][T20032] evdev_ioctl_handler+0x1202/0x1f10 [ 670.230180][T20032] __se_sys_ioctl+0xfc/0x170 [ 670.236683][T20032] do_syscall_64+0xfa/0x3b0 [ 670.243092][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.250919][T20032] } [ 670.253588][T20032] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 670.261902][T20032] -> (&new->fa_lock){...-}-{3:3} { [ 670.267115][T20032] IN-SOFTIRQ-R at: [ 670.271173][T20032] lock_acquire+0x120/0x360 [ 670.277501][T20032] _raw_read_lock_irqsave+0xaf/0x100 [ 670.284627][T20032] kill_fasync+0x199/0x4d0 [ 670.290861][T20032] sock_wake_async+0x137/0x160 [ 670.297455][T20032] sock_def_readable+0x3bb/0x550 [ 670.304229][T20032] packet_rcv+0x1098/0x1590 [ 670.310586][T20032] __netif_receive_skb_core+0x7a2/0x4020 [ 670.318229][T20032] __netif_receive_skb+0x72/0x380 [ 670.325103][T20032] process_backlog+0x60e/0x14f0 [ 670.331784][T20032] __napi_poll+0xc4/0x360 [ 670.337944][T20032] net_rx_action+0x707/0xe30 [ 670.344363][T20032] handle_softirqs+0x283/0x870 [ 670.350958][T20032] do_softirq+0xec/0x180 [ 670.357027][T20032] __local_bh_enable_ip+0x17d/0x1c0 [ 670.364059][T20032] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 670.371612][T20032] wg_packet_tx_worker+0x1c8/0x7c0 [ 670.378553][T20032] process_scheduled_works+0xae1/0x17b0 [ 670.385921][T20032] worker_thread+0x8a0/0xda0 [ 670.392335][T20032] kthread+0x70e/0x8a0 [ 670.398233][T20032] ret_from_fork+0x3fc/0x770 [ 670.404663][T20032] ret_from_fork_asm+0x1a/0x30 [ 670.411264][T20032] INITIAL USE at: [ 670.415247][T20032] lock_acquire+0x120/0x360 [ 670.421493][T20032] _raw_write_lock_irq+0xa2/0xf0 [ 670.428172][T20032] fasync_remove_entry+0xf1/0x1c0 [ 670.434939][T20032] lease_modify+0x1ca/0x3c0 [ 670.441180][T20032] locks_remove_file+0x4bf/0xea0 [ 670.447861][T20032] __fput+0x3ab/0xa70 [ 670.453584][T20032] task_work_run+0x1d1/0x260 [ 670.459921][T20032] exit_to_user_mode_loop+0xec/0x110 [ 670.466954][T20032] do_syscall_64+0x2bd/0x3b0 [ 670.473280][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.480914][T20032] INITIAL READ USE at: [ 670.485327][T20032] lock_acquire+0x120/0x360 [ 670.492003][T20032] _raw_read_lock_irqsave+0xaf/0x100 [ 670.499553][T20032] kill_fasync+0x199/0x4d0 [ 670.506157][T20032] evdev_pass_values+0x627/0xbd0 [ 670.513297][T20032] evdev_events+0x1e6/0x340 [ 670.519973][T20032] input_pass_values+0x288/0x890 [ 670.527080][T20032] input_event_dispose+0x330/0x6b0 [ 670.534367][T20032] input_inject_event+0x1dd/0x340 [ 670.541586][T20032] evdev_write+0x2fc/0x480 [ 670.548182][T20032] vfs_write+0x27b/0xb30 [ 670.554607][T20032] ksys_write+0x145/0x250 [ 670.561135][T20032] do_syscall_64+0xfa/0x3b0 [ 670.567817][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.575877][T20032] } [ 670.578477][T20032] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 670.587249][T20032] ... acquired at: [ 670.591142][T20032] lock_acquire+0x120/0x360 [ 670.595840][T20032] _raw_read_lock_irqsave+0xaf/0x100 [ 670.601309][T20032] kill_fasync+0x199/0x4d0 [ 670.605906][T20032] evdev_pass_values+0x627/0xbd0 [ 670.611045][T20032] evdev_events+0x1e6/0x340 [ 670.615725][T20032] input_pass_values+0x288/0x890 [ 670.620843][T20032] input_event_dispose+0x330/0x6b0 [ 670.626145][T20032] input_inject_event+0x1dd/0x340 [ 670.631344][T20032] evdev_write+0x2fc/0x480 [ 670.635940][T20032] vfs_write+0x27b/0xb30 [ 670.640349][T20032] ksys_write+0x145/0x250 [ 670.644851][T20032] do_syscall_64+0xfa/0x3b0 [ 670.649527][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.655590][T20032] [ 670.657907][T20032] -> (&f_owner->lock){....}-{3:3} { [ 670.663115][T20032] INITIAL USE at: [ 670.666998][T20032] lock_acquire+0x120/0x360 [ 670.673063][T20032] _raw_write_lock_irq+0xa2/0xf0 [ 670.679554][T20032] __f_setown+0x67/0x370 [ 670.685355][T20032] f_setown+0x23a/0x300 [ 670.691065][T20032] sock_ioctl+0x5c5/0x790 [ 670.696955][T20032] __se_sys_ioctl+0xfc/0x170 [ 670.703107][T20032] do_syscall_64+0xfa/0x3b0 [ 670.709166][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.716613][T20032] INITIAL READ USE at: [ 670.720952][T20032] lock_acquire+0x120/0x360 [ 670.727456][T20032] _raw_read_lock_irqsave+0xaf/0x100 [ 670.734744][T20032] send_sigio+0x38/0x370 [ 670.740980][T20032] kill_fasync+0x24d/0x4d0 [ 670.747386][T20032] sock_wake_async+0x137/0x160 [ 670.754153][T20032] sk_wake_async+0x184/0x280 [ 670.760740][T20032] unix_release_sock+0x78c/0xd50 [ 670.767677][T20032] unix_release+0x92/0xd0 [ 670.774000][T20032] sock_close+0xc0/0x240 [ 670.780239][T20032] __fput+0x449/0xa70 [ 670.786212][T20032] task_work_run+0x1d1/0x260 [ 670.792799][T20032] get_signal+0x11ed/0x1340 [ 670.799313][T20032] arch_do_signal_or_restart+0x9a/0x750 [ 670.806863][T20032] exit_to_user_mode_loop+0x75/0x110 [ 670.814148][T20032] do_syscall_64+0x2bd/0x3b0 [ 670.820732][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.828615][T20032] } [ 670.831104][T20032] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 670.839954][T20032] ... acquired at: [ 670.843750][T20032] lock_acquire+0x120/0x360 [ 670.848425][T20032] _raw_read_lock_irqsave+0xaf/0x100 [ 670.853885][T20032] send_sigio+0x38/0x370 [ 670.858306][T20032] kill_fasync+0x24d/0x4d0 [ 670.862893][T20032] sock_wake_async+0x137/0x160 [ 670.867835][T20032] sk_wake_async+0x184/0x280 [ 670.872602][T20032] unix_release_sock+0x78c/0xd50 [ 670.877728][T20032] unix_release+0x92/0xd0 [ 670.882227][T20032] sock_close+0xc0/0x240 [ 670.886639][T20032] __fput+0x449/0xa70 [ 670.890791][T20032] task_work_run+0x1d1/0x260 [ 670.895566][T20032] get_signal+0x11ed/0x1340 [ 670.900322][T20032] arch_do_signal_or_restart+0x9a/0x750 [ 670.906042][T20032] exit_to_user_mode_loop+0x75/0x110 [ 670.911498][T20032] do_syscall_64+0x2bd/0x3b0 [ 670.916258][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.922327][T20032] [ 670.924640][T20032] [ 670.924640][T20032] the dependencies between the lock to be acquired [ 670.924649][T20032] and SOFTIRQ-irq-unsafe lock: [ 670.938156][T20032] -> (tasklist_lock){.+.+}-{3:3} { [ 670.943302][T20032] HARDIRQ-ON-R at: [ 670.947388][T20032] lock_acquire+0x120/0x360 [ 670.953704][T20032] _raw_read_lock+0x36/0x50 [ 670.960076][T20032] __do_wait+0xde/0x740 [ 670.965898][T20032] do_wait+0x1f8/0x520 [ 670.971616][T20032] kernel_wait+0xab/0x170 [ 670.977594][T20032] call_usermodehelper_exec_work+0xbe/0x230 [ 670.985141][T20032] process_scheduled_works+0xae1/0x17b0 [ 670.992335][T20032] worker_thread+0x8a0/0xda0 [ 670.998574][T20032] kthread+0x70e/0x8a0 [ 671.004288][T20032] ret_from_fork+0x3fc/0x770 [ 671.010541][T20032] ret_from_fork_asm+0x1a/0x30 [ 671.016956][T20032] SOFTIRQ-ON-R at: [ 671.020932][T20032] lock_acquire+0x120/0x360 [ 671.027089][T20032] _raw_read_lock+0x36/0x50 [ 671.033261][T20032] __do_wait+0xde/0x740 [ 671.039068][T20032] do_wait+0x1f8/0x520 [ 671.044793][T20032] kernel_wait+0xab/0x170 [ 671.050773][T20032] call_usermodehelper_exec_work+0xbe/0x230 [ 671.058332][T20032] process_scheduled_works+0xae1/0x17b0 [ 671.065532][T20032] worker_thread+0x8a0/0xda0 [ 671.071768][T20032] kthread+0x70e/0x8a0 [ 671.077507][T20032] ret_from_fork+0x3fc/0x770 [ 671.083744][T20032] ret_from_fork_asm+0x1a/0x30 [ 671.090185][T20032] INITIAL USE at: [ 671.094082][T20032] lock_acquire+0x120/0x360 [ 671.100161][T20032] _raw_write_lock_irq+0xa2/0xf0 [ 671.106658][T20032] copy_process+0x224f/0x3c00 [ 671.112899][T20032] kernel_clone+0x21e/0x840 [ 671.118962][T20032] user_mode_thread+0xdd/0x140 [ 671.125289][T20032] rest_init+0x23/0x300 [ 671.131009][T20032] start_kernel+0x3a9/0x410 [ 671.137077][T20032] x86_64_start_reservations+0x24/0x30 [ 671.144094][T20032] x86_64_start_kernel+0x143/0x1c0 [ 671.150776][T20032] common_startup_64+0x13e/0x147 [ 671.157336][T20032] INITIAL READ USE at: [ 671.161663][T20032] lock_acquire+0x120/0x360 [ 671.168170][T20032] _raw_read_lock+0x36/0x50 [ 671.174670][T20032] __do_wait+0xde/0x740 [ 671.180826][T20032] do_wait+0x1f8/0x520 [ 671.186895][T20032] kernel_wait+0xab/0x170 [ 671.193244][T20032] call_usermodehelper_exec_work+0xbe/0x230 [ 671.201154][T20032] process_scheduled_works+0xae1/0x17b0 [ 671.208705][T20032] worker_thread+0x8a0/0xda0 [ 671.215291][T20032] kthread+0x70e/0x8a0 [ 671.221374][T20032] ret_from_fork+0x3fc/0x770 [ 671.227964][T20032] ret_from_fork_asm+0x1a/0x30 [ 671.234734][T20032] } [ 671.237225][T20032] ... key at: [] tasklist_lock+0x18/0x40 [ 671.244939][T20032] ... acquired at: [ 671.248734][T20032] lock_acquire+0x120/0x360 [ 671.253414][T20032] _raw_read_lock+0x36/0x50 [ 671.258091][T20032] send_sigurg+0x12b/0x420 [ 671.262693][T20032] sk_send_sigurg+0x6c/0x2e0 [ 671.267455][T20032] queue_oob+0x420/0x4f0 [ 671.271867][T20032] unix_stream_sendmsg+0xc3f/0xdf0 [ 671.277150][T20032] __sock_sendmsg+0x21c/0x270 [ 671.282013][T20032] ____sys_sendmsg+0x52d/0x830 [ 671.286950][T20032] ___sys_sendmsg+0x21f/0x2a0 [ 671.291796][T20032] __sys_sendmmsg+0x227/0x430 [ 671.296636][T20032] __x64_sys_sendmmsg+0xa0/0xc0 [ 671.301665][T20032] do_syscall_64+0xfa/0x3b0 [ 671.306332][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.312388][T20032] [ 671.314720][T20032] [ 671.314720][T20032] stack backtrace: [ 671.320597][T20032] CPU: 1 UID: 0 PID: 20032 Comm: syz.5.5363 Not tainted syzkaller #0 PREEMPT(full) [ 671.320616][T20032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.320627][T20032] Call Trace: [ 671.320635][T20032] [ 671.320642][T20032] dump_stack_lvl+0x189/0x250 [ 671.320663][T20032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.320681][T20032] ? __pfx__printk+0x10/0x10 [ 671.320706][T20032] validate_chain+0x1f05/0x2140 [ 671.320731][T20032] __lock_acquire+0xab9/0xd20 [ 671.320764][T20032] ? send_sigurg+0x12b/0x420 [ 671.320781][T20032] lock_acquire+0x120/0x360 [ 671.320802][T20032] ? send_sigurg+0x12b/0x420 [ 671.320819][T20032] ? _raw_read_lock_irqsave+0xbb/0x100 [ 671.320846][T20032] _raw_read_lock+0x36/0x50 [ 671.320868][T20032] ? send_sigurg+0x12b/0x420 [ 671.320884][T20032] send_sigurg+0x12b/0x420 [ 671.320902][T20032] sk_send_sigurg+0x6c/0x2e0 [ 671.320925][T20032] queue_oob+0x420/0x4f0 [ 671.320949][T20032] ? __pfx_queue_oob+0x10/0x10 [ 671.320973][T20032] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 671.320993][T20032] unix_stream_sendmsg+0xc3f/0xdf0 [ 671.321016][T20032] ? rcu_is_watching+0x15/0xb0 [ 671.321032][T20032] ? __schedule+0x17ae/0x4cc0 [ 671.321057][T20032] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 671.321085][T20032] ? aa_sock_msg_perm+0xda/0x1d0 [ 671.321101][T20032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.321117][T20032] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 671.321139][T20032] __sock_sendmsg+0x21c/0x270 [ 671.321163][T20032] ____sys_sendmsg+0x52d/0x830 [ 671.321184][T20032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.321205][T20032] ? import_iovec+0x74/0xa0 [ 671.321226][T20032] ___sys_sendmsg+0x21f/0x2a0 [ 671.321245][T20032] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.321275][T20032] ? __fget_files+0x2a/0x420 [ 671.321288][T20032] ? __fget_files+0x3a0/0x420 [ 671.321304][T20032] __sys_sendmmsg+0x227/0x430 [ 671.321325][T20032] ? __pfx___sys_sendmmsg+0x10/0x10 [ 671.321343][T20032] ? do_futex+0x333/0x420 [ 671.321372][T20032] ? rcu_is_watching+0x15/0xb0 [ 671.321389][T20032] __x64_sys_sendmmsg+0xa0/0xc0 [ 671.321408][T20032] do_syscall_64+0xfa/0x3b0 [ 671.321424][T20032] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.321438][T20032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.321453][T20032] ? clear_bhb_loop+0x60/0xb0 [ 671.321470][T20032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.321485][T20032] RIP: 0033:0x7f42ddd8ebe9 [ 671.321501][T20032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.321515][T20032] RSP: 002b:00007f42decc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 671.321532][T20032] RAX: ffffffffffffffda RBX: 00007f42ddfc5fa0 RCX: 00007f42ddd8ebe9 [ 671.321544][T20032] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000004 [ 671.321554][T20032] RBP: 00007f42dde11e19 R08: 0000000000000000 R09: 0000000000000000 [ 671.321564][T20032] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 671.321574][T20032] R13: 00007f42ddfc6038 R14: 00007f42ddfc5fa0 R15: 00007f42de0efa28 [ 671.321591][T20032] [ 671.679444][T20042] FAULT_INJECTION: forcing a failure. [ 671.679444][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.692594][T20042] CPU: 1 UID: 0 PID: 20042 Comm: syz.0.5365 Not tainted syzkaller #0 PREEMPT(full) [ 671.692621][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.692634][T20042] Call Trace: [ 671.692643][T20042] [ 671.692651][T20042] dump_stack_lvl+0x189/0x250 [ 671.692678][T20042] ? __pfx____ratelimit+0x10/0x10 [ 671.692696][T20042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.692716][T20042] ? __pfx__printk+0x10/0x10 [ 671.692737][T20042] ? __might_fault+0xb0/0x130 [ 671.692763][T20042] ? rcu_is_watching+0x15/0xb0 [ 671.692781][T20042] should_fail_ex+0x414/0x560 [ 671.692808][T20042] _copy_to_iter+0x404/0x1790 [ 671.692833][T20042] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 671.692852][T20042] ? do_raw_spin_unlock+0x122/0x240 [ 671.692876][T20042] ? __pfx__copy_to_iter+0x10/0x10 [ 671.692893][T20042] ? traverse+0x537/0x570 [ 671.692917][T20042] seq_read_iter+0x2e4/0xe10 [ 671.692938][T20042] ? lock_acquire+0x5f/0x360 [ 671.692961][T20042] ? __asan_memset+0x22/0x50 [ 671.692981][T20042] seq_read+0x369/0x480 [ 671.693003][T20042] ? __pfx_seq_read+0x10/0x10 [ 671.693025][T20042] ? common_file_perm+0x1b5/0x230 [ 671.693045][T20042] ? __pfx_seq_read+0x10/0x10 [ 671.693062][T20042] proc_reg_read+0x1e6/0x2e0 [ 671.693086][T20042] vfs_readv+0x5aa/0x850 [ 671.693103][T20042] ? __pfx_proc_reg_read+0x10/0x10 [ 671.693124][T20042] ? __pfx_vfs_readv+0x10/0x10 [ 671.693138][T20042] ? vfs_write+0x956/0xb30 [ 671.693163][T20042] ? lock_release+0x4b/0x3e0 [ 671.693190][T20042] ? __fget_files+0x3a0/0x420 [ 671.693206][T20042] ? __fget_files+0x2a/0x420 [ 671.693226][T20042] __x64_sys_preadv+0x197/0x2a0 [ 671.693254][T20042] ? __pfx___x64_sys_preadv+0x10/0x10 [ 671.693277][T20042] ? rcu_is_watching+0x15/0xb0 [ 671.693295][T20042] ? rcu_is_watching+0x15/0xb0 [ 671.693312][T20042] do_syscall_64+0xfa/0x3b0 [ 671.693331][T20042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.693348][T20042] ? clear_bhb_loop+0x60/0xb0 [ 671.693366][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.693383][T20042] RIP: 0033:0x7fbf6098ebe9 [ 671.693399][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.693414][T20042] RSP: 002b:00007fbf618b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 671.693433][T20042] RAX: ffffffffffffffda RBX: 00007fbf60bc5fa0 RCX: 00007fbf6098ebe9 [ 671.693446][T20042] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 671.693457][T20042] RBP: 00007fbf618b0090 R08: 000000000000e3d0 R09: 0000000000000000 [ 671.693469][T20042] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 671.693479][T20042] R13: 00007fbf60bc6038 R14: 00007fbf60bc5fa0 R15: 00007fbf60cefa28 [ 671.693498][T20042] [ 671.994771][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5363'. [ 672.066773][T20026] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 672.247196][ T5952] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 672.431032][T20033] vhci_hcd: connection reset by peer [ 672.438212][ T75] vhci_hcd: stop threads [ 672.444948][ T75] vhci_hcd: release socket [ 672.449505][ T75] vhci_hcd: disconnect device [ 672.652247][ T5952] usb 5-1: device not accepting address 38, error -71 [ 674.583774][ T10] vhci_hcd: vhci_device speed not set [ 675.633222][ C1] syz_tun: tun_net_xmit 70 [ 678.437436][ T5235] udevd[5235]: worker [18011] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time