last executing test programs: 9m27.91536132s ago: executing program 4 (id=501): getpid() epoll_create1(0x0) epoll_create1(0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r4, 0x1, 0x57, &(0x7f0000000300)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40), 0x0, 0x0, 0x0) 9m21.572936231s ago: executing program 4 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001dc0)=@newtfilter={0x176c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x3}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1734, 0x2, [@TCA_CGROUP_ACT={0x1714, 0x1, [@m_mirred={0xf0, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x9, 0x5, 0x10001, 0x3a7}, 0x3, r3}}]}, {0xa2, 0x6, "70a59b765895326655b026d217723940728010a21033bba376f9aa8e03ec0f6b3a45ca773893dab7e6575fe7fa82d7043ae8deef9f0e6bf84a66b7897d587eadbfee53529c627e9fa1400891c10ea619ff3554cd65e885f4af670e074f515089595bc2771ea05590840a2b9aafcbcd9003f0b9a3700e1112bf258510de69cf20cedb8aa0882628662b83f83e8ab832bab3682e6d19764abc9b9c31f7ca17"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x4c, 0x15, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x10, 0x6, "c9921e373e2b4471efe2f978"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xac, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x97e, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x774, 0x6}}]}, {0x68, 0x6, "d2c029a3f3270cb1abee360d9b243b5c9fd2df23dfd858066ebebac3fe6cbe59c7535b5c9ac5cee96484fdcc37d97aacef89b4b95ba074158247c6dd0d07f3e6881dc4df37351f18f89131a5821ce621ff7c9def0dd1e52ce229661352c56b9e86f0fef3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_sample={0x114, 0x5, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff5, 0x7ff, 0x0, 0x18000, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x23c9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x9, 0x0, 0x10000}}]}, {0xa0, 0x6, "c5b311502cfbf5adbf425cf5a7da635957f9c81499c3820a41219d634b4a0e74110c209660e9fa17a2795e39f8164d5cb362c697df904522f75fb4b28e3862a77161b9f3437f63b590b3be2873bf7d63e19c719e268872b45b10d147c32578e30d22b6ef4226b391cbae5bc2bad473eed841874d092688745ed5cd3a9a2715270d2bc78f82b0d7ad891adc71733c645b0ba821d3b9f28100206fb3f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x1070, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x7, 0x20000000, 0x1000, 0x9}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x1, 0x1e, 0x2f}, 0x4, r3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xa0, 0x5, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x106, 0x6, 0x8, 0x5}}]}, {0x56, 0x6, "6063b5dbfe309c9ab16c4f8fbbdd8148ebd29f7948603288e6ab3283832fde86a4bd8f2f2e6cce4a936f57137e8eafcb741fa60da78787628b79a09259b6b9d1da9b8b67883df8b9f30899de235e0ec50a3d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xa8, 0x7, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x7ff, 0x0, 0x4, 0x7fffffff}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x8, 0x74, 0xab}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x23, 0x6, "1c6497a7bbdc0c0083b3af0a1f33476c7dc6562858918d32689e770336d6d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x128, 0x5, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x100, 0x4, 0x1000, 0x7fff}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x1, 0x3, 0x30e, 0x3}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x2da0, 0x20000000, 0x200, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x891}]}, {0x75, 0x6, "8f08030df199d4fe8ada8555e5e06bbf6f825ecf210499f59657c739f237f884f83301564fd9e930a2d61338cb742db6f586bb0bc373bbee59d443e73ed2613c3a0c6163d82cedcfafa301a406ca930a8c654c657a9483664bd223d41f62c1a1c81aa0403435fc4c64d344d358d3759504"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x134, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x10000, 0x20000000, 0xeb0, 0x10}}]}, {0xed, 0x6, "4bc19ce32d2d6a9b9f539be0c76b0446b1a8eb0002b61e0f5ffdbc540e5b42ff0ae5eedf58388447324b1a618f032b6128bbf16724c0b3627b1f32701c6d25acf48a170b029a120a36fd70fc13ccf5d46634a4755938f2508c2d8e2fb874c8bd8b6f4409c83cd855c92d7acea5e3df2b8c37340d3d85944a1a8d2d76e7cf733fa109df631b853ede039135b9f5665f556d26a7387bda23b17fb0962a3cd0a78cc6420965fdf06291ba78b8a8f7ed31fc95d88b5f2c7812a66873d5ce1d9c2e449d8556c9dcf7f877acf6f4b4da726483e38841a12aa6cd7aca679e1fffe17eb333d8b8fd8063ec39f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xff, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x176c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 9m21.334182524s ago: executing program 4 (id=526): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x131480) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') lseek(r1, 0x38, 0x0) lseek(r1, 0x100, 0x1) syz_clone3(&(0x7f0000000300)={0x208000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x12}, &(0x7f00000001c0), 0xa, &(0x7f0000002400)=""/226, &(0x7f0000000180), 0x3}, 0x58) capset(&(0x7f0000000080)={0x19980330, r2}, &(0x7f0000000040)={0x1fffff, 0x200000, 0x0, 0x0, 0x5989}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 9m21.188628374s ago: executing program 4 (id=527): r0 = inotify_init1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r1, 0xfff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000000fff500"], 0x8) accept(r1, 0xfffffffffffffffd, &(0x7f0000000680)) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x52000775) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x3, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 9m20.054202424s ago: executing program 4 (id=532): r0 = syz_clone(0x80400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f00000010c0)={0x0}) 9m19.749214256s ago: executing program 4 (id=534): getpid() epoll_create1(0x0) epoll_create1(0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r4, 0x1, 0x57, &(0x7f0000000300)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40), 0x0, 0x0, 0x0) 9m4.465141965s ago: executing program 32 (id=534): getpid() epoll_create1(0x0) epoll_create1(0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r4, 0x1, 0x57, &(0x7f0000000300)={0x0, 0xea60}, 0x10) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40), 0x0, 0x0, 0x0) 3m2.304015058s ago: executing program 1 (id=1474): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x2, 0x0, 0x4e22}, 0x6e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0xc800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.001310759s ago: executing program 1 (id=1478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (fail_nth: 8) 3m0.607590368s ago: executing program 1 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(0x0, 0x6f5e, 0x202) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f000068e000/0x3000)=nil, 0x3000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = mq_open(&(0x7f0000000800)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\xb4\xc6\xeePa\x8d\x90\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x92, &(0x7f0000000440)={0x8, 0x1, 0x56, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x1, 0x400003}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000740)="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", 0x1000, 0x800, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2m57.355058943s ago: executing program 1 (id=1488): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x224, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x1, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x70}}}}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 2m54.973010179s ago: executing program 1 (id=1496): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) 2m53.736809308s ago: executing program 1 (id=1500): clock_nanosleep(0xb, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x5a, 0xa, 0x0, "3205c5460400000000000000022c1e04f4bf40070700000200"}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc4}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x6f, &(0x7f0000000540)=""/111, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x4, 0x5}, 0x10, 0x13af5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0x2}, {0x0, 0x3, 0x8, 0x8}, {0x2, 0x3, 0xf, 0x5}, {0x0, 0x3, 0xe}, {0x3, 0x2, 0x4, 0x6}], 0x10, 0x4fab}, 0x94) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, r4) r5 = getpgid(r4) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572a80076806974792e2f6465762f766964"]) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) 2m37.6474087s ago: executing program 33 (id=1500): clock_nanosleep(0xb, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x5a, 0xa, 0x0, "3205c5460400000000000000022c1e04f4bf40070700000200"}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc4}, {}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x6f, &(0x7f0000000540)=""/111, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x4, 0x5}, 0x10, 0x13af5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000009c0)=[{0x2, 0x1, 0x2}, {0x0, 0x3, 0x8, 0x8}, {0x2, 0x3, 0xf, 0x5}, {0x0, 0x3, 0xe}, {0x3, 0x2, 0x4, 0x6}], 0x10, 0x4fab}, 0x94) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, r4) r5 = getpgid(r4) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572a80076806974792e2f6465762f766964"]) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) 2m22.139230381s ago: executing program 2 (id=1555): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x4533, 0x10000, 0x1, 0x200}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x48, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002300), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) 2m21.558163692s ago: executing program 2 (id=1557): unshare(0x22020600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047458, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$smack_xattr_label(r2, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="2805274000"], 0x5, 0x2) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='sit0\x00') syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x503403) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2m19.869260561s ago: executing program 2 (id=1560): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) unshare(0xc000400) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x5, 0xf9, 0x2, 0x5f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0xfffffff1, 0xffffff0f}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r6, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r10}, &(0x7f0000000100), &(0x7f0000001400)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00012626bd70edaedbdf2507000000", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x57, 0x5, 0x0, 0x79d505200ac07fb8, @mcast2, @dev={0xfe, 0x80, '\x00', 0xc2}, 0x80, 0x7800, 0x3, 0xfffffff5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x6, 0x400, 0x40, @loopback, @private1, 0x8000, 0x700, 0x6, 0xd}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000000640)=@deltfilter={0xc08, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x1}, {0x5, 0xf}, {0xfff1, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0x638, 0x2, [@TCA_FW_ACT={0x634, 0x4, [@m_mirred={0x144, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x3, 0xffffffffdffffffe, 0x9, 0x8}, 0x1, r6}}]}, {0xf6, 0x6, "d144350a94943bb6a5ffa73e0e8c9f675b84781e891eb3eb4f893017136462cd738a45864e3be1ee05c8fb912c3509196472b379919391b0c239219fae9335b7fa16db01c656a630455a5ec4177c7fea9d6c85baf5e2ab1d6aed2680997c96d8881e904344bbb7596e0b4a8000c39e235ef542d57627d68e1b47776504b44d84234cd1409c074e667e02fdebe50072d4ef1e3bbaa21aa6f5dede67e2eee9e4faa7cda72b1f219532b5cb06c6f97a6cc2528bc8a5039e9c6a3dd096c11d9230c6f62ff3d26910c0fa53b2656622ccadab3560babcd555164c342a48e6041b4258191880e19fe830bda26ff167e8cb38ae8e8b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_ife={0x130, 0xe, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xe6, 0x6, "f65621c089debac69f2ea7e8e02d0ec7be493c2ab6cfda1594400e904c87dc8186b4ca89653b1f3887e6fe4812e5d665b84c67d883265df3468862bc699a5e1799fe6fc3b07ee0b00c2974e3344a4c33a91605362aa0011d0f6349d90eb3c5539d9b97bd80dfd702708c4a435a693cd17ffed5c69d992adacfdc9be2fb4ab7c489df2ca4b81c71c0726cac4d31a7b8d7bc1ef2a31b05bc30ce4d85adbb3f16201e1bd9c522821ae01374ac93d54b9afc1283dfb915dafc17fbc2a3e1a36341f6b0335a0e2191071c6abfca7f06d1da2ea69be22564a1d9ab6f1063c65d7b0884e5a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x1a4, 0xe, 0x0, 0x0, {{0x9}, {0xe8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xff, 0x5, 0x9, 0x1ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x3eb, 0x20000007}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8a, 0x2, 0x4, 0xfffffffe}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x2, 0x7, 0x3, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x40, 0x1, 0x4000000, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe1, 0x0, 0x3, 0x0, 0xffffc705}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4d, 0x0, 0x10000000, 0xbd, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe, 0x853, 0x4, 0x1, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0x3, 0x6, 0x24a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x29, 0x9, 0x20000000, 0x3, 0x1}}]}, {0x92, 0x6, "d2624fbd77c2b49c921ef39a6a0835f54dfded84f1390c18430734503fd667f122334fc75c5f2de9fd39f3506bf99be10b35d88f8638ca832726b317888d6bae418caca0736fd8ee2fbcf29c28aa6bd3ad3567bd537e9fe36f5a79f5894a890ee3b1297045a8160203f1eeefa9517a470703174489db940c1d7608136a28d8efe12641a1d7a53462687a5dde3a54"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x104, 0x1c, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0xa4, 0x6, "3130a39f374a76dc100eba8d3f48862d99296885d37d93b7c42a0a9e03b2c18a7b59c27337f96a7621d5212d79b6e5670fc55f042afc4cc29891db5dc0e83ce242c53b824e2f1ff23ed8829e6c56d23986980e602ceb7eaec8fc446086bfbfc8e245daf01fd235acd130442541550202c44a256968e947044fd6501fababe3af9cbe607a524aeefd87fe53cb44c641b60b174caff9d492d309d1c4be8177aea9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}]}, {0xdb, 0x6, "88a4ba8f133f04e628f0fa83b98abf71ea632fa7e08a75a6a669d2461278fb0b76b89170658d649f48fcfaf8280a91d9d2b5dc7db7f0bf09669cead0ff4d6a6576de41b7613a724953e0e4c317c9a6301b69170a9e26ef45c9b062fff3160ee44d167d2ce3e9e2f4c816b420a72defd940c3bc38c922a006d5c6d0310b1bc4fb5f64ce70f5cf303de557018944188e538712ad74bb0f4cf8eeb94f824f9f9038d3f7a3a4bf7986fec1fb87dde16f570b456ca99867a0d5ca79be5a7f3f3d5e6544ed781509126a4435ad33c7e23f026ca5cab6503d2f5c"}, {0xc, 0x7, {0xe26904376d4058fb, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4d8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8bbb40052df3e56b, 0xd}}, @TCA_MATCHALL_ACT={0x49c, 0x2, [@m_sample={0xfc, 0x1f, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x3, 0x2, 0x3, 0x1}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x989, 0x1, 0x2, 0xc, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4, 0x4, 0x5, 0xcecb}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10001, 0x2, 0xadfdd9a074daec6a, 0x1, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x3e, 0x6, "ceb4347d2f0d5bfcaf0c70de3d21fa6f3e98ac7ec84a9afe133843c3c1963e51f6d5e35e0a7651b0c9392688bbedbcd79ae7fb7fe6938a21fc4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x164, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xd, 0x7, 0x1, 0x6, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0xed, 0x6, "6782141e61a00bb580ccdf062372aa70fa1f320a75a1da448e7f7bf906391fefe4998ce870f4abd82b84daa8fe67f8a76c24fbfb02eaee73dba47fad3c898d9a390e72b4ccb5360481a9dde22cfb127d3d15a5e98d78e67c8052a0adcaa2ae74811d48d89f6b264d98345e2efdde10a38772e5cc70e56b684a07ff683d9f1468397aa300d3305bbe6eeb042b9967cc93cb820136f3820b084c4a10485e5b3f1337250489973308ea1a6a2ee5b6c8545b68abc719eac6e4e1a08f969342d5b8782d6b011072ec0a9de5da2faadf54f3ea7bd4e1fdf0cb6dd2bc2580a985efddd2ba643b0839181e53a8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x110, 0x11, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x4, 0x5, 0x80000000}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5ef1, 0x1, 0x7, 0x7f, 0x1}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x3, 0x1}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x0, 0xa}, 0x4, r12}}]}, {0x62, 0x6, "a6789d17be4b58ca551bad8a4692178296bbb8ccf61b9cab7b173151ad329306bf37c74e8806d6f2240aa3df960d2151339e1b9fcf2c636c60429c7c78e2780cf76b2c667636b6f0fae642b048f3f244f51887fca496c51af65df1153c96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x70, 0x20000005, 0x6, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffff1d75, 0x6, 0x3, 0x5, 0xfffffb9e}}]}, {0xb2, 0x6, "3e175da3caab398d4df5b40e509ffb206787ea9126be613c8e8cde38a07f5e195e8fdbb947368a51767c4e667c31646f3561267b69eb64513836a7c8daac3f1bd23a1e09c27c89b3b715db5f91382e00fbde8636f4c951ce517172c46061aa030c8d6a4479591fde971eef4cc5a8d26de23504c5ddc60e7145a2f40de52433e925a84f2ca7e31fc55ec74ae1aa92af61e28199d11b0d31fdbbf2ae24f8dc9c9ff02e5d50d92a5a1441975e1f976b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x4, 0x4, 0x0, "3238b48d"}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x40}, "b917b1d691dcb59a4febe66861544d841487b1f870cdcea80df17c13bb1758"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x101, 0x7, 0x3}, {{0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x5}, {0x1, 0x3, 0x0, "abe649"}}}]}]}]}}]}, 0xc08}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000328bd7000fbdbdf25440000000c0099000001000025000000040008010400bf000400bf0008006b00c76700000400cc005ee0c9e77ed7ff5b34c00c2598cdb98f89b2c5ce2d87ea1c66dc539bbbbb30e6167edf1b9ba886f7f29a7976aed22d5ace6b436c662b"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) 2m18.438118688s ago: executing program 2 (id=1562): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 2m18.044165104s ago: executing program 2 (id=1564): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x817}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r6, &(0x7f0000000000)=""/25, 0x19) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6a17ec1d0000000000000000000000000000000000000001ff"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x737, 0x739, &(0x7f0000000000)="ff", 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x4, 0x1000, {{0x1a, 0x4, 0x2, 0x2c, 0x68, 0x64, 0x0, 0xc, 0x29, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0xf, "9d5598cfc6463cdf32ed45b334"}, @generic={0x94, 0x2}, @rr={0x7, 0x23, 0xc9, [@private=0xa010101, @multicast1, @local, @multicast2, @remote, @empty, @remote, @local]}, @ssrr={0x89, 0x17, 0x87, [@rand_addr=0x64010102, @broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x20}]}, @ra={0x94, 0x4}, @end]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7ff, 0xa, 0x4, 0x0, 0xffffffffffffffff, 0x14a0, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x2, 0x0, 0xa}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r10}, 0x38) acct(&(0x7f0000000080)='./file0\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r12, r11, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x9}}, 0x20) connect$unix(r11, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x2, 0x3, 0x0, 0x8, 0x3, 0x100, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x24, &(0x7f00000000c0)=""/36, 0x41000, 0x8, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xb, 0x9c, 0x7fff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10], &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0x8}, {0x1, 0x5, 0x5, 0xc}, {0x2, 0x2, 0x4, 0x7}, {0x2, 0x2, 0x7, 0xc}], 0x10, 0xff}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'lRRA'}, {0x20, '\xd2\xd7L\'$\x88\x8d\xce(\xa7k(\x1a\xc5\x84\xean\xdaC]g\xde\xad\xa5\x8d\xe5j[\xb0m\xda\x0e\x81\xd3\x93zo}2*\x91Z\x8c\xa0;\x84\xbe\xb6-\xa8\xe3\xdfP\xcf\xd7\xcf~\xd0k?\x10yB\xf9\x1c@1d\x9a\b\xe9\xdb_\xf8\n\xc8\xe8A,|I\xc2*\b\xdb\x12D\x1a\x06\xed(\x93\x18\xb6X\xbc}\x1e\xd9\x93\x128I>\xb72\x81X\x7f@\xe7\xa2\xfa\xeb5\xa9+\x06\x8d\xc1<\xdf1\x9f\xd7\xf0\xd5q\x0e#\xd0)\xf2\x9d\xb0\x12e\xb9~\a\xcf\xeb\xa3\xc3`\xbd3\x1e\x8f\x8d^3H\xea\xe8\xd3\x8b\xccN\xb7\xd5P\x8c\xfe\xf4_`\xb9\b]\x8c,\x1d\x1f'}]}, 0xbf) 2m14.927271514s ago: executing program 2 (id=1568): prlimit64(0x0, 0x9, &(0x7f0000000140)={0x200000000, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m59.862306962s ago: executing program 34 (id=1568): prlimit64(0x0, 0x9, &(0x7f0000000140)={0x200000000, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 17.078562652s ago: executing program 7 (id=1862): r0 = syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet6(0xa, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000340)={0x0, 0x2, &(0x7f00000001c0)=[0x409, 0x4], &(0x7f0000000200)=[0x4], &(0x7f0000000240)=[0xbb]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r4, 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r6 = memfd_create(&(0x7f0000000280)='/dev0loop#\x00', 0x3) fallocate(r6, 0x0, 0x0, 0x200401) fcntl$addseals(r6, 0x409, 0x4) fallocate(r6, 0x0, 0x10000000001, 0x4) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r7, &(0x7f0000000a80), 0x12) r8 = signalfd(r1, &(0x7f0000000140)={[0xb]}, 0x8) inotify_add_watch(r8, &(0x7f0000000100)='./file0\x00', 0x20000008) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.024072562s ago: executing program 0 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x280000a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xa, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0441b613a31ed707e2"}, @timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb6fb0a2beaa6920ddb0700000000007f0000000000000080", 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000101000ed90355f00", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163766c616e000400028008001f0003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40004085}, 0x4000894) 11.975141782s ago: executing program 7 (id=1873): unshare(0x22020600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$smack_xattr_label(r2, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="2805274000"], 0x5, 0x2) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='sit0\x00') syz_open_dev$sndpcmp(&(0x7f0000000000), 0xbf, 0x503403) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 11.842377126s ago: executing program 0 (id=1874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x4b, 0x1, 0x3, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x50313134}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x8, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000900)={0xfffffff7, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 10.839374805s ago: executing program 6 (id=1876): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) (async) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r11}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x6610}, 0x1}) (async) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x80, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x11) (async) syz_io_uring_setup(0x6ded, &(0x7f00000002c0)={0x0, 0x476d, 0xd000, 0x0, 0x347, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000380)) (async) syz_io_uring_setup(0x49c0, &(0x7f00000003c0)={0x0, 0x2c7, 0x28008, 0x0, 0x172}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) (async) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000680)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000640)='./file0\x00', 0x20, 0x6000, 0x1, {0x0, r15}}) 10.179410037s ago: executing program 7 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x4, &(0x7f0000000140)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800cd2fdf12b20000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0x9, 0xf23beb037cd5cac1, 0x8, 0x20, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7, 0x0, 0x4}, 0x18) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e24fa32500000010004"], 0x14}, 0x1, 0x40030000000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x4, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r8, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001670cab26fd0418244f70fd668c8403bc3d2042ff3235e36860fc6b41d50602bc65c21a0964611f4f7e2c9d70c4213e74ecfaef0ad8dd67190fc7d0b08b0ee6c1823e08c863a6756df177d1300000000000000e5b25de1baec119c5c0ed585dd9066f35b5863b65bba9bc8af33518211a66aefb019226aefce6f6d5f4ee8242d4b48877bcc5bf3c7d5e4dfb7b39f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 10.0265431s ago: executing program 6 (id=1880): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x3, 0x67, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0xb, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x2, 0x6, 0x0, 0xb, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x1, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @obex={0x5, 0x24, 0x15, 0x8000}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x49, 0x7, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x9, 0xc2}}}}}]}}]}}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @initdev, 0x0}, &(0x7f00000002c0)=0xc) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async, rerun: 32) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r0, r1, 0x1, 0x0, 0x5}, 0x50) (async, rerun: 64) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='virtiofs\x00', 0x10420, &(0x7f00000000c0)='^)\x00') (async, rerun: 64) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000003c0)={0x4, @raw_data="5e80162b36dd10d72eaa3abd2690f9ddacbd93fb5c2a9eab5b526b2c9d49145723d1f5560833f87d92ce9740eb26cec161c13a3af4be277791e33aec72793a1689dcd9bfcddf2e6fbaf964a314df18546f99d57b115fc2d72fd16802fb4128643d2308520e4accd42e2cefb938100a031cc7388e501f2f70365dc7851ae20c21899d802925b90d223e492c80ff648fa0f41248f23ca2c9544fae658a31d6af35d1e3fb28df7d2f1ebc640a3aed807d355eadff42e6808d142d2fca5d6abb120dc5d847a077e15f54"}) (async, rerun: 64) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x4, 0x6, 0x10, 0x38}, 0x2e, &(0x7f0000000180)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xa, 0x3, 0x8, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3b, 0x18, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7fc044418aba93f2e30cff04bca948dc"}]}, 0x1, [{0x13, &(0x7f00000001c0)=@string={0x13, 0x3, "22db7e051a5a018db98183570feade035f"}}]}) (rerun: 64) 9.469164463s ago: executing program 6 (id=1881): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={r6, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r6, 0x3, 0x1, 0x8e3, 0x1, 0xff, 0x4, 0x9, {r7, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x2, 0x4, 0xf, 0xae5, 0x9}}, &(0x7f00000003c0)=0xb0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0xab) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7d) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.139871664s ago: executing program 7 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000059c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x20}, 0x8000) 8.737973002s ago: executing program 3 (id=1886): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="10"], 0x5c, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2}) 8.711283826s ago: executing program 7 (id=1887): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x93) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0xff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x2c0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000240)={0x400000000000007, 0x10000, 0x0, r7}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xe138, 0x198, 0x108, 0x198, 0x1c0, 0x358, 0x358, 0x1c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'vxcan1\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x8, {0xffffffffffffff00}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r9 = fanotify_init(0xf00, 0x40000) readv(r9, &(0x7f0000000940)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fanotify_mark(r9, 0x105, 0x4000997d, r0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x2) 8.564779205s ago: executing program 3 (id=1888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ed5ec60}]}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r2, 0x1e, 0x0, @void}, 0x10) 8.460655198s ago: executing program 3 (id=1889): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000000000000000000000a60000000060a090400000000000000000200000a34000480300001800a00010072616e676500000020000280080001400000000008000240000000030200048008000380040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000300)=@newtaction={0x58, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x44, 0x1, [@m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "0a12d4454354e56ae446f27b1961bd94069bab"}, {0xc}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_gettime(r3, &(0x7f0000000100)) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000280)='./file0\x00', 0xc8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x62ff, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x5830, 0x0, 0x41, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x400000f, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r7}, 0x94) 8.043387766s ago: executing program 7 (id=1890): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) pwritev(r2, &(0x7f0000000600)=[{0x0}], 0x1, 0xfa2c, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r4 = dup(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r7, &(0x7f0000000000)='-0', 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') 7.737134506s ago: executing program 0 (id=1891): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000"], 0x80}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x28, 0x0, &(0x7f0000000040)) mprotect(&(0x7f00004a3000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000084e000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 7.357412159s ago: executing program 6 (id=1892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000020000006d0500000200000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x4, {0xffffffffffffffff}, {0xee01}, 0x8000, 0x8000000000000000}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r4 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000080)={r4, r1, 0x8}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000009060102000000000000000003001c000900020073797a310000000005000100070000001c0007800c00018008000140dfffffff0c00028008000140640101012fc98583afff5c2906394db76333b178f70fd7d04aa11bce358479b92e7a60e84a02740c2a8bbfc07233be6d3ad00ec3525330fd1641486a6e4154a7f4fca90eafca1ab8ba81eed6fc21a85785294794e193ac1a1a76070fa2de659aa37cb8353fdb5753401668ba2948"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5.784527165s ago: executing program 3 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x4, &(0x7f0000000140)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800cd2fdf12b20000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0x9, 0xf23beb037cd5cac1, 0x8, 0x20, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7, 0x0, 0x4}, 0x18) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e24fa32500000010004"], 0x14}, 0x1, 0x40030000000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x4, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r8, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001670cab26fd0418244f70fd668c8403bc3d2042ff3235e36860fc6b41d50602bc65c21a0964611f4f7e2c9d70c4213e74ecfaef0ad8dd67190fc7d0b08b0ee6c1823e08c863a6756df177d1300000000000000e5b25de1baec119c5c0ed585dd9066f35b5863b65bba9bc8af33518211a66aefb019226aefce6f6d5f4ee8242d4b48877bcc5bf3c7d5e4dfb7b39f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.999140794s ago: executing program 0 (id=1894): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x619, 0xffff, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x67, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xea, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010101, 0x7ff}, {@broadcast, 0x8}, {@broadcast, 0x7}, {@loopback, 0x6}, {@broadcast, 0x7ff}, {@multicast1, 0x10001}]}, @generic={0x86, 0xa, "9e682a4c4b2f9a04"}, @timestamp_prespec={0x44, 0x4, 0x88, 0x3, 0x7}, @timestamp={0x44, 0x20, 0x1f, 0x0, 0x1, [0x5, 0x3, 0x7, 0xfffffff7, 0x8, 0x10000, 0x1]}, @cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x0, [{@multicast2, 0x9}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0xa, [@const={0x8, 0x0, 0x0, 0xa, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x9, 0x4}, {0xb}, {0x0, 0x1}, {0xc, 0x4}]}, @enum64={0x7, 0x8, 0x0, 0x13, 0x0, 0x6, [{0x5, 0x7, 0x304da6b2}, {0x3, 0xfffffffe}, {0xe, 0x79b, 0x3a}, {0x1, 0x40, 0x3}, {0xe, 0x2, 0x1}, {0x6, 0x8, 0xc0b6}, {0x4, 0xc589, 0x3}, {0x6, 0xfd2, 0xa764}]}, @enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x4, 0x4, 0x1}, {0x10, 0xab6, 0x3}, {0xe, 0x3, 0x96}, {0x10, 0xffffff81, 0x3}, {0x2, 0xf, 0xfffffffb}, {0xd, 0xffffff80, 0x7}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x61, 0x6f, 0x51, 0x61, 0x61]}}, &(0x7f00000002c0)=""/184, 0x13a, 0xb8, 0x1, 0x75}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x400, 0xc43d, 0x895f, 0x2080, r1, 0x1, '\x00', r2, r3, 0x3, 0x4, 0x3, 0xf}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x41, 0xf0, 0x1}, 0x28) syz_usb_connect(0x0, 0x34, &(0x7f0000001dc0)={{0x12, 0x1, 0x0, 0x4e, 0x2a, 0xa6, 0x10, 0x582, 0x87d1, 0xf8e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x56, 0x65, 0x0, [@generic={0x7, 0x0, "e5c922b9b5"}], [{{0x9, 0x5, 0x2, 0x3}}]}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x6, 0x0, &(0x7f0000000000)="219a53f271a7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023689, 0x100400, 0x4800013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.109606083s ago: executing program 3 (id=1895): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1a) open(&(0x7f0000000100)='./file1\x00', 0x141242, 0x1b4) (async) r2 = open(&(0x7f0000000100)='./file1\x00', 0x141242, 0x1b4) write$tcp_mem(r2, &(0x7f00000002c0)={0x101, 0x20, 0x17fffffff, 0x20, 0xfffffffffffffff9}, 0x48) (async) write$tcp_mem(r2, &(0x7f00000002c0)={0x101, 0x20, 0x17fffffff, 0x20, 0xfffffffffffffff9}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) 4.106796451s ago: executing program 5 (id=1896): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x2080, 0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0xc53c, 0x55, 0x0, 0x2, 0x3, 0xbd, 0x7fffffff, 0xb98, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={r3, 0x5, 0x80000000000002b5, [0x76]}, 0xa) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) creat(0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x37) ioctl$RTC_PIE_ON(r4, 0x7005) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 3.922249604s ago: executing program 6 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)='X', 0x1}], 0x1) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab980900070000006c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 3.920765076s ago: executing program 5 (id=1898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="10"], 0x5c, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2}) 3.39566271s ago: executing program 5 (id=1899): socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r2, &(0x7f0000002e40)={0x2020}, 0x2020) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) listen(0xffffffffffffffff, 0x2) r5 = socket(0x2b, 0x80801, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x1c, 0x1b, 0x1, 0x40000000, 0x0, "", [@generic="9171accc148498ce476898cb"]}, 0x1c}], 0x1, 0x0, 0x0, 0x89}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r8, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="060000000000000018"], 0x44}}, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0xf3) connect$inet6(r5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x2}}}, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x1a, 0x0, 0x0) 2.749223889s ago: executing program 6 (id=1900): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$isdn(0x22, 0x2, 0x22) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x4}) socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) 2.362856572s ago: executing program 3 (id=1901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000013000000080000000b"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000000c0)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="09000000010000", 0x7) syz_usb_control_io(r2, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x248) syz_emit_ethernet(0x32, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x800, 0x17, @loopback, @rand_addr=' \x01\x00', 0x10, 0x8000, 0x0, 0x752}}) syz_usb_control_io$hid(r2, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r2, &(0x7f0000000880)={0x2c, &(0x7f00000005c0)={0x20, 0x11, 0x67, {0x67, 0x21, "d3a91e767417d006b1c1545b6603aed755d204be83e78ff41d3531a63400b963366aa37ef45da2f1899042ce7aca40f99b73d64328c211a300088e70caba93070346c989a4d5f2baeb3af9d34bfb714c5efbe086a4eb31e849b50b409b1839476f35627f75"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000d80)={0x0, 0xf, 0x102, {0x5, 0xf, 0x102, 0x5, [@generic={0x3, 0x10, 0xb}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0xff, 0x0, 0x1, 0x6}, @generic={0xd0, 0x10, 0x1, "02447d08334bea7b1d94d35f8620b1a756e793ca3a663e4917f621b68f2e0b08b094da0a25f2d4c19ef1c368e16c11bd31d59bbe0dfcc0fb33291a7f013e709db7e6fea962557c49564b1796302aeac716b688cd12f18e817195551902b1a63bf397a3fa45810978807fd215b7a0e6753ae6908963c66b5cd85de553b3f56068c126ed6d832999b776b625c4c5e65c2118cda377a10873bd5a461df95eaf30e3de5c36f623c957cd5d6cdd353ac71eae4f2b91999eb9bd8f5f48f9b8810b7f3c4b04c83f564b36aac8a61842b0"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x1, 0xe01}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x9, 0x780, 0x1ae3, [0xc000, 0xff0000, 0xc00f]}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x5, 0x9, "f29df053", "871f4628"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x8, 0x9, 0x4, 0x0, 0x9, 0x7}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="0af771ce0000000000fc51e69242543c1956"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x1000, 0x10, [0x0]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "3bc8"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @random="ed30b532b1bc"}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @random="c1af5482199c"}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "3aab"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0xd5}, &(0x7f0000000c40)={0x40, 0x1e, 0x1}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0xf1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r8, 0x25, 0x2, @void}, 0x10) syz_usb_ep_write(r2, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.164140358s ago: executing program 5 (id=1902): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x40880) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[]) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.144670358s ago: executing program 5 (id=1903): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400000000000000000000000a60000000060a090400000000000000000200000a34000480300001800a00010072616e676500000020000280080001400000000008000240000000030200048008000380040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00000000000000"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000300)=@newtaction={0x58, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x44, 0x1, [@m_ct={0x40, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x17, 0x6, "0a12d4454354e56ae446f27b1961bd94069bab"}, {0xc}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_gettime(r3, &(0x7f0000000100)) socket$kcm(0x23, 0x5, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xc8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x62ff, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x5830, 0x0, 0x41, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r7, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x400000f, 0x13, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r8}, 0x94) 520.246008ms ago: executing program 0 (id=1904): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000340)=@dstopts={0xff, 0x29, '\x00', [@hao={0xc9, 0x10, @private1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x7ff, [0x7f, 0x5]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x6, [0x3, 0x0]}}, @ra={0x5, 0x2, 0x9fa0}, @pad1, @hao={0xc9, 0x10, @mcast2}, @generic={0x9, 0xdf, "b7041f116f3b7cbef00ad5448e502a9e37f95e2f4565849e9117e423887e2853c28319d96eae4ed812b739036bbbab9e0dd8ad5087ec781c389aa38de8f5e3185821e7bcb8f17bf49cd3617f3b71c704a06d55f66affb10d5effa7ce2eb9c36379dd9b4109ec59bcbeb2139240326a1b36c20b230a0de19b44beb4dba9b914a7e43d81c33893ae432db3d999023669991c58acccfca674c91bbe9a4e4d1d145fae60035084069659ff4cf00c69ce65e2e7eb16cb8d8be206d23db90717f92a5da6e100611be77e9a2afa9bc2e732a4ec68c09de061983fd226549ecc0488d9"}, @jumbo={0xc2, 0x4, 0x6}]}, 0x158) socket(0x2, 0xa, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xb8, 0x2, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x44}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffff8ad8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5b}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8000}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x44, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x64e7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x56d6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x9}]}}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4040080}, 0xc010) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 66.774296ms ago: executing program 0 (id=1905): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x6}, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYRES64=r5, @ANYRES64=0x0, @ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@l2={0x1f, 0x4, @none, 0x8, 0x2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)}, 0x404c811) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f00000000c0)={0x10000, 0x2, 0x5, 0x1, 0x7, 0x0, [{0x3, 0x9, 0xfffffffffffff000, '\x00', 0xd03}, {0xfffffffffffffffd, 0x2, 0x49, '\x00', 0x200}, {0x3, 0x9, 0x0, '\x00', 0x2001}, {0x0, 0x81, 0x1576}, {0x9, 0x5, 0xfffffffffffffffb, '\x00', 0x2002}, {0x4a76, 0x0, 0x8, '\x00', 0x1000}, {0x400, 0x13a96000000, 0xfffffffffffffffb, '\x00', 0x586}]}) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffffffff8dbaac70) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffe4) 0s ago: executing program 5 (id=1906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x4, &(0x7f0000000140)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800cd2fdf12b20000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x10, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0x9, 0xf23beb037cd5cac1, 0x8, 0x20, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e24fa32500000010004"], 0x14}, 0x1, 0x40030000000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x4, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r8, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001670cab26fd0418244f70fd668c8403bc3d2042ff3235e36860fc6b41d50602bc65c21a0964611f4f7e2c9d70c4213e74ecfaef0ad8dd67190fc7d0b08b0ee6c1823e08c863a6756df177d1300000000000000e5b25de1baec119c5c0ed585dd9066f35b5863b65bba9bc8af33518211a66aefb019226aefce6f6d5f4ee8242d4b48877bcc5bf3c7d5e4dfb7b39f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) kernel console output (not intermixed with test programs): left allmulticast mode [ 689.508141][ T49] bridge_slave_1: left promiscuous mode [ 689.534105][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.567518][ T49] bridge_slave_0: left allmulticast mode [ 689.591438][ T49] bridge_slave_0: left promiscuous mode [ 689.617142][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.989295][ T51] Bluetooth: hci3: command tx timeout [ 690.165869][T11512] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1541'. [ 690.261699][ T49] dvmrp8 (unregistering): left allmulticast mode [ 691.115034][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.182982][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.226349][ T49] bond0 (unregistering): (slave bond1): Releasing backup interface [ 691.267512][ T49] bond0 (unregistering): Released all slaves [ 691.633520][ T49] bond1 (unregistering): Released all slaves [ 691.729339][T11513] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 691.784550][T11513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 692.133651][ T51] Bluetooth: hci3: command tx timeout [ 692.366605][T11513] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 692.679428][ T5911] delete_channel: no stack [ 692.765685][T11471] hsr_slave_0: entered promiscuous mode [ 692.775871][T11471] hsr_slave_1: entered promiscuous mode [ 692.786940][T11471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.815124][T11471] Cannot create hsr debugfs directory [ 692.834969][ T49] : left promiscuous mode [ 692.854929][T11521] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 692.971130][T11521] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 693.048638][ T49] : left promiscuous mode [ 693.065357][T11521] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 693.280738][ T49] tipc: Disabling bearer [ 693.317209][ T49] tipc: Left network mode [ 693.866511][T11533] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 693.916349][T11471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 693.947295][T11471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.012320][T11471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.150550][T11471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.246729][ T51] Bluetooth: hci3: command tx timeout [ 694.679237][ T30] audit: type=1326 audit(1752690281.476:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 695.079423][ T30] audit: type=1326 audit(1752690281.476:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 695.107498][T11537] tc_dump_action: action bad kind [ 695.120826][ T49] hsr_slave_0: left promiscuous mode [ 695.126919][ T49] hsr_slave_1: left promiscuous mode [ 695.136129][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.145952][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.192580][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.202945][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.274182][ T30] audit: type=1326 audit(1752690281.476:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 695.416207][ T49] veth1_macvtap: left promiscuous mode [ 695.462387][ T49] veth0_macvtap: left promiscuous mode [ 695.477503][ T49] veth1_vlan: left promiscuous mode [ 695.585496][T11553] trusted_key: encrypted_key: insufficient parameters specified [ 695.954342][ T30] audit: type=1326 audit(1752690281.476:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 695.978707][ T30] audit: type=1326 audit(1752690281.476:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.056894][ T30] audit: type=1326 audit(1752690281.476:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.136959][ T30] audit: type=1326 audit(1752690281.476:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.214376][ T30] audit: type=1326 audit(1752690281.476:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.277364][ T30] audit: type=1326 audit(1752690281.476:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.332142][ T30] audit: type=1326 audit(1752690281.476:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11534 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9bdb8e929 code=0x7ffc0000 [ 696.980226][ T49] team0 (unregistering): Port device team_slave_1 removed [ 697.126435][ T49] team0 (unregistering): Port device team_slave_0 removed [ 697.215163][T11558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1551'. [ 698.377831][ T8746] smc: removing ib device syz0 [ 698.453442][ T9565] lo speed is unknown, defaulting to 1000 [ 698.509198][ T9565] syz0: Port: 1 Link DOWN [ 700.196854][T11471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.426445][T11471] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.532104][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.539342][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.616273][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.623594][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.725025][T11586] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 701.749398][T11586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 701.837927][T11586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 701.926361][ T1209] delete_channel: no stack [ 701.926645][T11471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.450792][T11600] tc_dump_action: action bad kind [ 702.597474][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 702.597495][ T30] audit: type=1326 audit(1752690290.533:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 702.870272][ T30] audit: type=1326 audit(1752690290.533:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.048026][ T30] audit: type=1326 audit(1752690290.533:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.079577][ T30] audit: type=1326 audit(1752690290.543:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.430155][ T30] audit: type=1326 audit(1752690290.543:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.482782][ T30] audit: type=1326 audit(1752690290.543:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.541249][ T30] audit: type=1326 audit(1752690290.543:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.716013][ T30] audit: type=1326 audit(1752690290.543:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 703.910517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.969114][ T30] audit: type=1326 audit(1752690290.543:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 704.099240][ T30] audit: type=1326 audit(1752690290.543:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11595 comm="syz.0.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062618e929 code=0x7ffc0000 [ 704.257708][T11471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.346952][T11616] trusted_key: encrypted_key: insufficient parameters specified [ 705.852279][T11626] tc_dump_action: action bad kind [ 707.905167][T11644] trusted_key: encrypted_key: insufficient parameters specified [ 709.408942][ T5842] delete_channel: no stack [ 709.486230][T11471] veth0_vlan: entered promiscuous mode [ 709.598703][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1570'. [ 709.622394][T11471] veth1_vlan: entered promiscuous mode [ 709.674500][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 709.816785][T11471] veth0_macvtap: entered promiscuous mode [ 709.828615][T11471] veth1_macvtap: entered promiscuous mode [ 709.857623][T11471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.030134][T11471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.138318][T11471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.183768][T11471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.248975][T11471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.258668][T11471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.419163][ T24] delete_channel: no stack [ 710.707198][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.734799][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.407650][T11672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.589280][T11675] trusted_key: encrypted_key: insufficient parameters specified [ 712.013704][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.116102][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.619242][ T1209] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 714.809023][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 714.821680][ T1209] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 714.849072][ T1209] usb 6-1: config 0 has no interface number 0 [ 714.865676][ T1209] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.897746][ T1209] usb 6-1: config 0 interface 85 has no altsetting 0 [ 714.914257][ T1209] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 714.937385][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.959165][ T1209] usb 6-1: Product: syz [ 714.969566][ T1209] usb 6-1: Manufacturer: syz [ 714.981198][ T1209] usb 6-1: SerialNumber: syz [ 715.003647][ T1209] usb 6-1: config 0 descriptor?? [ 715.170995][T11714] FAULT_INJECTION: forcing a failure. [ 715.170995][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.228188][T11714] CPU: 0 UID: 0 PID: 11714 Comm: syz.3.1587 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 715.228220][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.228236][T11714] Call Trace: [ 715.228245][T11714] [ 715.228254][T11714] dump_stack_lvl+0x189/0x250 [ 715.228284][T11714] ? __pfx____ratelimit+0x10/0x10 [ 715.228316][T11714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.228337][T11714] ? __pfx__printk+0x10/0x10 [ 715.228375][T11714] should_fail_ex+0x414/0x560 [ 715.228411][T11714] _copy_to_user+0x31/0xb0 [ 715.228436][T11714] simple_read_from_buffer+0xe1/0x170 [ 715.228471][T11714] proc_fail_nth_read+0x1df/0x250 [ 715.228495][T11714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.228519][T11714] ? rw_verify_area+0x258/0x650 [ 715.228551][T11714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.228567][T11714] vfs_read+0x200/0x980 [ 715.228590][T11714] ? __pfx___mutex_lock+0x10/0x10 [ 715.228606][T11714] ? __pfx_vfs_read+0x10/0x10 [ 715.228627][T11714] ? __fget_files+0x2a/0x420 [ 715.228643][T11714] ? __fget_files+0x3a0/0x420 [ 715.228656][T11714] ? __fget_files+0x2a/0x420 [ 715.228676][T11714] ksys_read+0x145/0x250 [ 715.228697][T11714] ? __pfx_ksys_read+0x10/0x10 [ 715.228715][T11714] ? rcu_is_watching+0x15/0xb0 [ 715.228736][T11714] ? do_syscall_64+0xbe/0x3b0 [ 715.228753][T11714] do_syscall_64+0xfa/0x3b0 [ 715.228766][T11714] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.228787][T11714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.228804][T11714] ? clear_bhb_loop+0x60/0xb0 [ 715.228829][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.228848][T11714] RIP: 0033:0x7fd0c058d33c [ 715.228866][T11714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 715.228883][T11714] RSP: 002b:00007fd0be3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 715.228904][T11714] RAX: ffffffffffffffda RBX: 00007fd0c07b5fa0 RCX: 00007fd0c058d33c [ 715.228918][T11714] RDX: 000000000000000f RSI: 00007fd0be3f60a0 RDI: 0000000000000004 [ 715.228930][T11714] RBP: 00007fd0be3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.228942][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.228952][T11714] R13: 0000000000000000 R14: 00007fd0c07b5fa0 R15: 00007ffef156f748 [ 715.228984][T11714] [ 715.809131][ T5842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 715.877063][ T1209] appletouch 6-1:0.85: Geyser mode initialized. [ 715.914320][ T1209] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input25 [ 715.972183][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 716.013586][ T5842] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 716.048170][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 716.081306][ T1209] usb 6-1: USB disconnect, device number 28 [ 716.120672][ T1209] appletouch 6-1:0.85: input: appletouch disconnected [ 716.146257][ T5842] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 716.197161][ T5842] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 716.206636][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.214863][ T5842] usb 7-1: Product: syz [ 716.257888][ T5842] usb 7-1: Manufacturer: syz [ 716.273155][ T5842] usb 7-1: SerialNumber: syz [ 716.283482][ T5842] usb 7-1: config 0 descriptor?? [ 716.289405][T11713] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 716.733494][ T5842] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 716.733610][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 716.746919][ C1] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 716.999097][ T5968] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 717.016341][ T5842] usb 7-1: USB disconnect, device number 2 [ 717.040465][ T5842] mcba_usb 7-1:0.0 can0: device disconnected [ 717.175742][ T5968] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.218098][ T5968] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.230554][ T5968] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 717.241224][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 717.251458][ T5968] usb 1-1: SerialNumber: syz [ 717.624705][ T5968] usb 1-1: 0:2 : does not exist [ 717.630462][ T5968] usb 1-1: unit 5 not found! [ 717.646955][ T5968] usb 1-1: USB disconnect, device number 38 [ 723.806186][T11777] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1601'. [ 723.955001][T10187] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 724.231866][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.283042][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.363441][T10187] usb 7-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 724.405251][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 724.418948][T10187] usb 7-1: config 1 interface 0 has no altsetting 0 [ 724.431505][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 724.462167][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 724.487657][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 724.495918][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.510172][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.528975][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.742490][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.814072][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1603'. [ 724.849393][T11788] loop2: detected capacity change from 0 to 7 [ 724.856775][T11788] Dev loop2: unable to read RDB block 7 [ 724.867112][T11788] loop2: AHDI p1 p2 p3 [ 724.875425][T11788] loop2: partition table partially beyond EOD, truncated [ 724.896580][T11788] loop2: p1 start 1601398130 is beyond EOD, truncated [ 724.928176][T11788] loop2: p2 start 1702059890 is beyond EOD, truncated [ 725.246390][ T8746] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.428159][ T8746] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.549202][ T5842] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 725.586731][T10187] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 725.596854][T10187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.603262][ T8746] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.646646][T10187] usb 7-1: can't set config #1, error -71 [ 725.662162][T10187] usb 7-1: USB disconnect, device number 3 [ 725.720929][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 725.769408][ T5842] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 725.782568][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 725.828184][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 725.869132][ T5911] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 725.934436][ T5842] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 725.947153][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.956873][ T5842] usb 1-1: Product: syz [ 726.003454][ T5842] usb 1-1: Manufacturer: syz [ 726.008422][ T5842] usb 1-1: SerialNumber: syz [ 726.035250][T11781] chnl_net:caif_netlink_parms(): no params data found [ 726.043552][ T5842] usb 1-1: config 0 descriptor?? [ 726.050289][ T5911] usb 6-1: device descriptor read/64, error -71 [ 726.067194][T11792] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 726.126016][ T5842] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 726.126130][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 726.139474][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 726.178931][ T1209] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 726.223145][ T8746] dummy0: left allmulticast mode [ 726.232436][ T8746] bridge0: port 3(dummy0) entered disabled state [ 726.244973][ T8746] bridge_slave_0: left allmulticast mode [ 726.252212][ T8746] bridge_slave_0: left promiscuous mode [ 726.267249][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.291140][ T2028] usb 1-1: USB disconnect, device number 39 [ 726.299918][ T2028] mcba_usb 1-1:0.0 can0: device disconnected [ 726.319074][ T5911] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 726.362462][ T1209] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 726.375451][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.386329][ T1209] usb 7-1: config 0 descriptor?? [ 726.459007][ T5911] usb 6-1: device descriptor read/64, error -71 [ 726.516166][ T5842] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 726.588879][ T5911] usb usb6-port1: attempt power cycle [ 726.617171][ T8746] dvmrp8 (unregistering): left allmulticast mode [ 726.630188][ T51] Bluetooth: hci4: command tx timeout [ 726.695343][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 726.723164][ T5842] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 726.734994][ T5842] usb 4-1: config 0 has no interface number 0 [ 726.741946][ T8746] bridge0 (unregistering): left promiscuous mode [ 726.759720][ T5842] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 726.770940][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.779105][ T5842] usb 4-1: Product: syz [ 726.783308][ T5842] usb 4-1: Manufacturer: syz [ 726.787938][ T5842] usb 4-1: SerialNumber: syz [ 726.819072][ T5842] usb 4-1: config 0 descriptor?? [ 726.987249][ T5842] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 726.996946][ T5911] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 727.061625][ T5911] usb 6-1: device descriptor read/8, error -71 [ 728.349428][T11807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.369387][T11807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.709436][ T51] Bluetooth: hci4: command tx timeout [ 730.268476][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 730.268494][ T30] audit: type=1326 audit(1752690317.353:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.370032][ T30] audit: type=1326 audit(1752690317.353:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.379331][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 730.427764][ T5842] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 730.490987][ T30] audit: type=1326 audit(1752690317.353:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.518201][ T5842] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 730.602883][ T30] audit: type=1326 audit(1752690317.353:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.665333][ T30] audit: type=1326 audit(1752690317.353:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.690862][ T5842] usb 4-1: USB disconnect, device number 38 [ 730.738427][ T30] audit: type=1326 audit(1752690317.353:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.840699][ T30] audit: type=1326 audit(1752690318.523:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.863466][ T30] audit: type=1326 audit(1752690318.523:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11802 comm="syz.6.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 730.950540][ T51] Bluetooth: hci4: command tx timeout [ 730.963827][ T1209] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 730.989440][ T1209] asix 7-1:0.0: probe with driver asix failed with error -71 [ 731.007241][ T1209] usb 7-1: USB disconnect, device number 4 [ 731.042603][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 731.071000][ T8746] bond0 (unregistering): left promiscuous mode [ 731.081107][ T8746] bond_slave_0: left promiscuous mode [ 731.086943][ T8746] bond_slave_1: left promiscuous mode [ 731.093170][ T8746] batadv0: left promiscuous mode [ 731.095679][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 731.098471][ T8746] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 731.156538][ T5842] quatech2 4-1:0.51: device disconnected [ 731.188709][ T8746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.220487][ T8746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.256541][ T8746] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 731.298486][ T8746] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 731.318497][T11827] FAULT_INJECTION: forcing a failure. [ 731.318497][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 731.333828][ T8746] bond0 (unregistering): Released all slaves [ 731.358050][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.6.1615 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 731.358082][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.358095][T11827] Call Trace: [ 731.358104][T11827] [ 731.358113][T11827] dump_stack_lvl+0x189/0x250 [ 731.358143][T11827] ? __pfx____ratelimit+0x10/0x10 [ 731.358175][T11827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.358198][T11827] ? __pfx__printk+0x10/0x10 [ 731.358228][T11827] ? __pfx___might_resched+0x10/0x10 [ 731.358250][T11827] ? fs_reclaim_acquire+0x7d/0x100 [ 731.358275][T11827] should_fail_ex+0x414/0x560 [ 731.358310][T11827] should_failslab+0xa8/0x100 [ 731.358342][T11827] __kmalloc_noprof+0xcb/0x4f0 [ 731.358375][T11827] ? ip_options_get+0x51/0x4c0 [ 731.358407][T11827] ip_options_get+0x51/0x4c0 [ 731.358442][T11827] ip_cmsg_send+0x591/0xa70 [ 731.358478][T11827] udp_sendmsg+0xc6b/0x2300 [ 731.358495][T11827] ? preempt_schedule_thunk+0x16/0x30 [ 731.358541][T11827] ? __pfx_udplite_getfrag+0x10/0x10 [ 731.358561][T11827] ? __pfx_udp_sendmsg+0x10/0x10 [ 731.358599][T11827] ? __lock_acquire+0xab9/0xd20 [ 731.358630][T11827] ? __might_fault+0xb0/0x130 [ 731.358663][T11827] ? sock_rps_record_flow+0x19/0x410 [ 731.358686][T11827] ? inet_sendmsg+0x29c/0x370 [ 731.358710][T11827] sock_sendmsg_nosec+0x128/0x1d0 [ 731.358747][T11827] ____sys_sendmsg+0x6c5/0x830 [ 731.358779][T11827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.358813][T11827] ? import_iovec+0x74/0xa0 [ 731.358840][T11827] ___sys_sendmsg+0x21f/0x2a0 [ 731.358869][T11827] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.358943][T11827] ? __might_fault+0xb0/0x130 [ 731.358976][T11827] __sys_sendmmsg+0x227/0x430 [ 731.359009][T11827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 731.359041][T11827] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 731.359090][T11827] ? ksys_write+0x22a/0x250 [ 731.359120][T11827] ? __pfx_ksys_write+0x10/0x10 [ 731.359145][T11827] ? rcu_is_watching+0x15/0xb0 [ 731.359175][T11827] __x64_sys_sendmmsg+0xa0/0xc0 [ 731.359204][T11827] do_syscall_64+0xfa/0x3b0 [ 731.359222][T11827] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.359249][T11827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.359267][T11827] ? clear_bhb_loop+0x60/0xb0 [ 731.359291][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.359310][T11827] RIP: 0033:0x7fa18378e929 [ 731.359328][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.359346][T11827] RSP: 002b:00007fa1845ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 731.359367][T11827] RAX: ffffffffffffffda RBX: 00007fa1839b5fa0 RCX: 00007fa18378e929 [ 731.359381][T11827] RDX: 0000000000000002 RSI: 0000200000001600 RDI: 0000000000000003 [ 731.359394][T11827] RBP: 00007fa1845ae090 R08: 0000000000000000 R09: 0000000000000000 [ 731.359406][T11827] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001 [ 731.359418][T11827] R13: 0000000000000000 R14: 00007fa1839b5fa0 R15: 00007ffd8e490948 [ 731.359450][T11827] [ 731.899000][ T5842] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 732.115101][ T5842] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 732.201422][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.396630][ T5842] usb 4-1: config 0 descriptor?? [ 732.675603][ T5842] cp210x 4-1:0.0: cp210x converter detected [ 733.011320][T11843] FAULT_INJECTION: forcing a failure. [ 733.011320][T11843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.024577][T11843] CPU: 1 UID: 0 PID: 11843 Comm: syz.0.1618 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 733.024610][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.024624][T11843] Call Trace: [ 733.024633][T11843] [ 733.024643][T11843] dump_stack_lvl+0x189/0x250 [ 733.024672][T11843] ? __pfx____ratelimit+0x10/0x10 [ 733.024704][T11843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.024728][T11843] ? __pfx__printk+0x10/0x10 [ 733.024761][T11843] ? __might_fault+0xb0/0x130 [ 733.024816][T11843] should_fail_ex+0x414/0x560 [ 733.024871][T11843] _copy_from_user+0x2d/0xb0 [ 733.024901][T11843] ___sys_sendmsg+0x158/0x2a0 [ 733.024937][T11843] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.025018][T11843] ? __fget_files+0x2a/0x420 [ 733.025035][T11843] ? __fget_files+0x3a0/0x420 [ 733.025067][T11843] __x64_sys_sendmsg+0x19b/0x260 [ 733.025097][T11843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.025134][T11843] ? __pfx_ksys_write+0x10/0x10 [ 733.025165][T11843] ? rcu_is_watching+0x15/0xb0 [ 733.025193][T11843] ? do_syscall_64+0xbe/0x3b0 [ 733.025218][T11843] do_syscall_64+0xfa/0x3b0 [ 733.025245][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.025264][T11843] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 733.025284][T11843] ? clear_bhb_loop+0x60/0xb0 [ 733.025310][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.025331][T11843] RIP: 0033:0x7f062618e929 [ 733.025349][T11843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.025366][T11843] RSP: 002b:00007f0626fbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.025393][T11843] RAX: ffffffffffffffda RBX: 00007f06263b6160 RCX: 00007f062618e929 [ 733.025408][T11843] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 733.025421][T11843] RBP: 00007f0626fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 733.025434][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.025446][T11843] R13: 0000000000000000 R14: 00007f06263b6160 R15: 00007ffe35cb09f8 [ 733.025478][T11843] [ 733.417693][ T51] Bluetooth: hci4: command tx timeout [ 733.600716][ T5842] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 733.642383][ T5842] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 733.657156][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.666077][ T5842] usb 4-1: cp210x converter now attached to ttyUSB0 [ 733.674005][T11848] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 733.676002][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.680567][T11848] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 733.699388][T11848] vhci_hcd vhci_hcd.0: Device attached [ 733.712687][T11781] bridge_slave_0: entered allmulticast mode [ 733.723219][T11781] bridge_slave_0: entered promiscuous mode [ 733.770911][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.797399][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.834705][T11850] vhci_hcd: connection closed [ 733.837783][ T3075] vhci_hcd: stop threads [ 733.839351][T11781] bridge_slave_1: entered allmulticast mode [ 733.844408][ T3075] vhci_hcd: release socket [ 733.864689][T11857] input: syz1 as /devices/virtual/input/input26 [ 733.884230][ T3075] vhci_hcd: disconnect device [ 733.887721][T11781] bridge_slave_1: entered promiscuous mode [ 733.899151][T10187] vhci_hcd: vhci_device speed not set [ 734.039107][ T5842] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 734.041526][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.065016][ T8746] hsr_slave_0: left promiscuous mode [ 734.071770][ T8746] hsr_slave_1: left promiscuous mode [ 734.077787][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.085830][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.094088][ T8746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.102314][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.131003][ T8746] veth1_macvtap: left promiscuous mode [ 734.136599][ T8746] veth0_macvtap: left promiscuous mode [ 734.143015][ T8746] veth1_vlan: left promiscuous mode [ 734.220716][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 734.230354][ T5842] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 734.237828][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 734.251416][ T5842] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 734.266022][ T5842] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 734.276482][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.285654][ T5842] usb 6-1: Product: syz [ 734.291288][ T5842] usb 6-1: Manufacturer: syz [ 734.291743][ T8746] pim6reg (unregistering): left allmulticast mode [ 734.295913][ T5842] usb 6-1: SerialNumber: syz [ 734.311040][ T5842] usb 6-1: config 0 descriptor?? [ 734.316824][T11855] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 734.997990][ T2028] usb 4-1: USB disconnect, device number 39 [ 735.018644][ T2028] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 735.054620][ T2028] cp210x 4-1:0.0: device disconnected [ 735.174164][T11867] netlink: 'syz.6.1625': attribute type 11 has an invalid length. [ 735.186160][T11867] IPVS: length: 129 != 8 [ 735.379194][ T2028] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 735.520339][ T1209] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 735.727371][T11879] FAULT_INJECTION: forcing a failure. [ 735.727371][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 735.740364][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.0.1628 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 735.740393][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.740407][T11879] Call Trace: [ 735.740418][T11879] [ 735.740429][T11879] dump_stack_lvl+0x189/0x250 [ 735.740458][T11879] ? __pfx____ratelimit+0x10/0x10 [ 735.740490][T11879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.740514][T11879] ? __pfx__printk+0x10/0x10 [ 735.740548][T11879] ? __pfx___might_resched+0x10/0x10 [ 735.740569][T11879] ? fs_reclaim_acquire+0x7d/0x100 [ 735.740596][T11879] should_fail_ex+0x414/0x560 [ 735.740643][T11879] should_failslab+0xa8/0x100 [ 735.740678][T11879] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 735.740708][T11879] ? ovs_flow_alloc+0x103/0x1f0 [ 735.740739][T11879] ovs_flow_alloc+0x103/0x1f0 [ 735.740769][T11879] ovs_flow_cmd_new+0x1ee/0xd80 [ 735.740815][T11879] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 735.740904][T11879] ? irqentry_exit+0x74/0x90 [ 735.740936][T11879] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.740976][T11879] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 735.741019][T11879] genl_family_rcv_msg_doit+0x215/0x300 [ 735.741060][T11879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.741107][T11879] ? bpf_lsm_capable+0x9/0x20 [ 735.741127][T11879] ? security_capable+0x7e/0x2e0 [ 735.741157][T11879] genl_rcv_msg+0x60e/0x790 [ 735.741196][T11879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.741226][T11879] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 735.741260][T11879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.741289][T11879] ? netlink_rcv_skb+0x1e0/0x470 [ 735.741321][T11879] netlink_rcv_skb+0x208/0x470 [ 735.741346][T11879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.741378][T11879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.741423][T11879] ? down_read+0x1ad/0x2e0 [ 735.741448][T11879] genl_rcv+0x28/0x40 [ 735.741485][T11879] netlink_unicast+0x75c/0x8e0 [ 735.741520][T11879] netlink_sendmsg+0x805/0xb30 [ 735.741544][T11879] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.741584][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.741619][T11879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.741652][T11879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.741679][T11879] __sock_sendmsg+0x219/0x270 [ 735.741716][T11879] ____sys_sendmsg+0x505/0x830 [ 735.741749][T11879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.741794][T11879] ? import_iovec+0x74/0xa0 [ 735.741822][T11879] ___sys_sendmsg+0x21f/0x2a0 [ 735.741852][T11879] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.741886][T11879] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 735.741948][T11879] ? __fget_files+0x2a/0x420 [ 735.741967][T11879] ? __fget_files+0x3a0/0x420 [ 735.741998][T11879] __x64_sys_sendmsg+0x19b/0x260 [ 735.742028][T11879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.742077][T11879] ? do_syscall_64+0xbe/0x3b0 [ 735.742101][T11879] do_syscall_64+0xfa/0x3b0 [ 735.742123][T11879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.742143][T11879] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 735.742163][T11879] ? clear_bhb_loop+0x60/0xb0 [ 735.742188][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.742209][T11879] RIP: 0033:0x7f062618e929 [ 735.742227][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.742245][T11879] RSP: 002b:00007f0626fbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.742268][T11879] RAX: ffffffffffffffda RBX: 00007f06263b6160 RCX: 00007f062618e929 [ 735.742283][T11879] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000007 [ 735.742296][T11879] RBP: 00007f0626fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 735.742309][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.742321][T11879] R13: 0000000000000000 R14: 00007f06263b6160 R15: 00007ffe35cb09f8 [ 735.742354][T11879] [ 736.143498][ T2028] usb 4-1: Using ep0 maxpacket: 8 [ 736.168347][ T2028] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 736.178765][ T1209] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.191498][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 736.202859][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.214352][ T1209] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.227657][ T1209] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.237544][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.248758][ T1209] usb 7-1: config 0 descriptor?? [ 736.254831][T11871] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 736.396246][ T8746] team0 (unregistering): Port device team_slave_1 removed [ 736.511153][ T2028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.532174][ T2028] usb 4-1: Product: syz [ 736.536409][ T2028] usb 4-1: Manufacturer: syz [ 736.541192][ T2028] usb 4-1: SerialNumber: syz [ 736.552900][ T2028] usb 4-1: config 0 descriptor?? [ 736.561890][ T2028] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 736.665098][ T8746] team0 (unregistering): Port device team_slave_0 removed [ 736.683894][ T1209] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 736.691986][ T1209] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 736.700535][ T1209] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 736.708295][ T1209] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 736.717351][ T1209] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 736.754141][ T1209] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 736.768979][ T9565] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 736.943318][ T9565] usb 1-1: too many configurations: 70, using maximum allowed: 8 [ 736.953750][ T9565] usb 1-1: config index 0 descriptor too short (expected 40611, got 133) [ 736.962866][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.985295][ T9565] usb 1-1: config index 1 descriptor too short (expected 40611, got 133) [ 736.994359][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.009964][ T9565] usb 1-1: config index 2 descriptor too short (expected 40611, got 133) [ 737.029322][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.046414][ T9565] usb 1-1: config index 3 descriptor too short (expected 40611, got 133) [ 737.055489][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.067611][ T9565] usb 1-1: config index 4 descriptor too short (expected 40611, got 133) [ 737.076525][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.091812][ T9565] usb 1-1: config index 5 descriptor too short (expected 40611, got 133) [ 737.100695][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.113719][ T9565] usb 1-1: config index 6 descriptor too short (expected 40611, got 133) [ 737.124603][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.139904][ T9565] usb 1-1: config index 7 descriptor too short (expected 40611, got 133) [ 737.148977][ T9565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.162554][ T9565] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 737.172127][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.180986][ T9565] usb 1-1: Product: syz [ 737.185391][ T9565] usb 1-1: Manufacturer: syz [ 737.203536][ T9565] usb 1-1: SerialNumber: syz [ 737.230127][ T9565] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 737.258193][ T5968] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 737.284640][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.362815][ T5842] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 737.362920][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 737.376254][ C1] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 737.385131][T11863] ptrace attach of "./syz-executor exec"[5836] was attempted by ""[11863] [ 737.433980][ T5842] usb 6-1: USB disconnect, device number 33 [ 737.456213][ T5842] mcba_usb 6-1:0.0 can0: device disconnected [ 737.472706][T11781] team0: Port device team_slave_0 added [ 737.529232][T11781] team0: Port device team_slave_1 added [ 737.683273][ T2028] gspca_sonixj: reg_r err -110 [ 737.688215][ T2028] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 737.700775][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.710059][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.720662][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.729926][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.748886][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.790411][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.798966][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.828511][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.852812][ T8746] IPVS: stop unused estimator thread 0... [ 737.940613][T11781] hsr_slave_0: entered promiscuous mode [ 737.949993][T11781] hsr_slave_1: entered promiscuous mode [ 737.970259][ T2028] usb 1-1: USB disconnect, device number 40 [ 737.980495][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 738.015210][T11871] usb 7-1: string descriptor 0 read error: -71 [ 738.197499][T11890] vcan0: entered promiscuous mode [ 738.203399][T11890] vcan0: entered allmulticast mode [ 738.232445][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1632'. [ 738.559005][ T5968] usb 1-1: Service connection timeout for: 256 [ 738.582647][ T5968] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 738.616818][ T5968] ath9k_htc: Failed to initialize the device [ 738.626213][T10187] usb 4-1: USB disconnect, device number 40 [ 738.632803][ T2028] usb 1-1: ath9k_htc: USB layer deinitialized [ 738.832038][T11895] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 739.330438][ T5842] usb 7-1: USB disconnect, device number 5 [ 740.389810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.698886][T10187] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 742.309621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.373908][T10187] usb 1-1: Using ep0 maxpacket: 16 [ 742.398124][T10187] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 742.425794][T10187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 742.461971][T10187] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 742.528169][T10187] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 742.546416][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1640'. [ 742.624735][T10187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.632957][T10187] usb 1-1: Product: syz [ 743.175914][T10187] usb 1-1: Manufacturer: syz [ 743.200955][T10187] usb 1-1: SerialNumber: syz [ 743.213615][T10187] usb 1-1: config 0 descriptor?? [ 743.229521][T11909] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 743.296652][T11781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 743.315587][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 743.324750][T11781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 743.332420][T10187] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 743.339707][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 743.353450][T11781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 743.413966][T11781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 743.450071][ T5911] usb 1-1: USB disconnect, device number 41 [ 743.459856][ T5911] mcba_usb 1-1:0.0 can0: device disconnected [ 743.594030][T11922] netlink: 'syz.3.1641': attribute type 10 has an invalid length. [ 743.621671][T11922] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 743.925424][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.971432][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.015766][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.023085][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.057095][ T3073] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.064408][ T3073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.138981][ T10] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 744.311258][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 744.343050][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.378590][ T10] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 744.408493][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.463865][ T10] usb 6-1: config 0 descriptor?? [ 744.962707][ T10] samsung 0003:0419:0001.000A: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 745.038728][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.230229][T11946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 745.237033][T11946] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 745.253004][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 745.317490][ T2028] usb 6-1: USB disconnect, device number 34 [ 745.409134][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 745.432920][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.462057][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 745.486598][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 745.519024][T11946] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 745.526171][T11946] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 745.541815][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.562889][ T10] usb 4-1: config 0 descriptor?? [ 745.836443][T11946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 745.866162][T11946] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 746.007926][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1650'. [ 746.033088][T11781] veth0_vlan: entered promiscuous mode [ 746.051386][T11781] veth1_vlan: entered promiscuous mode [ 746.186964][T11968] trusted_key: encrypted_key: insufficient parameters specified [ 747.015591][T11946] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 747.032060][T11946] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 747.080539][T11781] veth0_macvtap: entered promiscuous mode [ 747.099758][T11974] overlayfs: overlapping lowerdir path [ 747.105604][T11781] veth1_macvtap: entered promiscuous mode [ 747.138896][ T5918] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 747.161440][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.196340][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.217005][T11781] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.234857][T11781] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.244255][T11781] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.254112][T11781] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.321835][ T5918] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 747.339040][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 747.348165][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.371300][T11978] binder: 11977:11978 unknown command 0 [ 747.377035][T11978] binder: 11977:11978 ioctl c0306201 200000000080 returned -22 [ 747.382252][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 747.399054][ T8746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.414767][ T5918] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 747.424938][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.426008][ T8746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.436053][ T5918] usb 6-1: config 0 descriptor?? [ 747.437651][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.437749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.469214][ T5842] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 747.513467][T11587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.528572][T11587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.660768][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 747.668120][ T5842] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 747.676141][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 747.698294][ T5842] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 747.896102][ T2028] usb 4-1: USB disconnect, device number 41 [ 748.148211][ T5842] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 749.537082][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.941714][ T5842] usb 1-1: Product: syz [ 749.946041][ T5842] usb 1-1: Manufacturer: syz [ 749.950814][ T5842] usb 1-1: SerialNumber: syz [ 749.957818][T11989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.969608][ T5842] usb 1-1: config 0 descriptor?? [ 750.035412][T11976] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 750.070126][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 750.092602][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 750.119816][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 750.138535][ T5918] usb 6-1: USB disconnect, device number 35 [ 750.147873][ T5842] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 750.155170][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 750.237670][ T9565] usb 1-1: USB disconnect, device number 42 [ 750.251057][ T9565] mcba_usb 1-1:0.0 can0: device disconnected [ 750.278706][T11997] binder: 11996:11997 unknown command 0 [ 750.284410][T11997] binder: 11996:11997 ioctl c0306201 200000000080 returned -22 [ 751.026518][T12008] binder: 12007:12008 unknown command 0 [ 751.034507][T12008] binder: 12007:12008 ioctl c0306201 200000000080 returned -22 [ 751.133306][T12011] loop2: detected capacity change from 0 to 7 [ 751.149334][T12011] Dev loop2: unable to read RDB block 7 [ 751.300832][T12011] loop2: AHDI p1 p2 p3 [ 751.305126][T12011] loop2: partition table partially beyond EOD, truncated [ 751.317656][T12011] loop2: p1 start 1601398130 is beyond EOD, truncated [ 751.346907][T12011] loop2: p2 start 1702059890 is beyond EOD, truncated [ 751.479890][T12014] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1665'. [ 751.848588][T12026] trusted_key: encrypted_key: insufficient parameters specified [ 752.908250][T12003] trusted_key: syz.6.1661 sent an empty control message without MSG_MORE. [ 753.126919][ T5918] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 753.408315][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 753.424338][ T5918] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 753.435925][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 753.529088][ T5918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 753.549239][ T5918] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 753.559069][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.567101][ T5918] usb 1-1: Product: syz [ 753.571541][ T5918] usb 1-1: Manufacturer: syz [ 753.576183][ T5918] usb 1-1: SerialNumber: syz [ 753.588197][ T5918] usb 1-1: config 0 descriptor?? [ 753.595860][T12031] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 753.850642][ T5918] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 753.850758][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 753.864080][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 753.873995][ T5918] usb 1-1: USB disconnect, device number 43 [ 753.881411][ T5918] mcba_usb 1-1:0.0 can0: device disconnected [ 754.796464][T12051] batadv_slave_1: entered promiscuous mode [ 757.608434][T12051] batadv_slave_1: left promiscuous mode [ 757.620034][ T9565] delete_channel: no stack [ 757.763691][T12066] binder: 12062:12066 unknown command 0 [ 757.785388][T12066] binder: 12062:12066 ioctl c0306201 200000000080 returned -22 [ 757.809325][ T5842] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 757.949208][ T9565] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 758.002785][ T5842] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 758.022233][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.040653][ T5842] usb 6-1: Product: syz [ 758.044889][ T5842] usb 6-1: Manufacturer: syz [ 758.063461][ T5842] usb 6-1: SerialNumber: syz [ 758.081742][ T5842] usb 6-1: config 0 descriptor?? [ 758.101809][ T5842] ch341 6-1:0.0: ch341-uart converter detected [ 758.143301][ T9565] usb 1-1: Using ep0 maxpacket: 16 [ 758.150547][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 758.164685][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.164965][ T30] audit: type=1326 audit(1752690346.233:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.190754][ T9565] usb 1-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 758.219592][ T9565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.225666][ T30] audit: type=1326 audit(1752690346.233:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa183745647 code=0x7ff00000 [ 758.227675][ T9565] usb 1-1: Product: syz [ 758.261367][ T9565] usb 1-1: Manufacturer: syz [ 758.261988][ T30] audit: type=1326 audit(1752690346.233:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa1837456a6 code=0x7ff00000 [ 758.266136][ T9565] usb 1-1: SerialNumber: syz [ 758.295989][ T9565] usb 1-1: config 0 descriptor?? [ 758.304520][ T30] audit: type=1326 audit(1752690346.243:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.333645][ T30] audit: type=1326 audit(1752690346.243:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.360252][ T30] audit: type=1326 audit(1752690346.243:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.392661][ T30] audit: type=1326 audit(1752690346.243:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.419601][ T30] audit: type=1326 audit(1752690346.243:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.449613][ T30] audit: type=1326 audit(1752690346.243:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.479227][ T30] audit: type=1326 audit(1752690346.243:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12075 comm="syz.6.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ff00000 [ 758.506512][ T5842] usb 6-1: failed to receive control message: -121 [ 758.513824][ T5842] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 758.728442][ T10] usb 6-1: USB disconnect, device number 36 [ 758.739504][ T10] ch341 6-1:0.0: device disconnected [ 759.565951][T12090] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1687'. [ 759.580562][T12090] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1687'. [ 761.144422][ T9565] usb 1-1: USB disconnect, device number 44 [ 761.863252][T12109] binder: 12107:12109 unknown command 0 [ 761.872029][T12109] binder: 12107:12109 ioctl c0306201 200000000080 returned -22 [ 763.971081][T12124] tc_dump_action: action bad kind [ 764.012697][ T30] kauditd_printk_skb: 3043 callbacks suppressed [ 764.012758][ T30] audit: type=1326 audit(1752690352.093:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 764.040878][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.549660][ T30] audit: type=1326 audit(1752690352.283:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 764.777643][ T30] audit: type=1326 audit(1752690352.283:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 764.845033][ T30] audit: type=1326 audit(1752690352.283:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.219851][ T30] audit: type=1326 audit(1752690352.303:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.493762][ T30] audit: type=1326 audit(1752690352.303:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.709105][ T30] audit: type=1326 audit(1752690352.313:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.815457][ T30] audit: type=1326 audit(1752690352.763:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.888376][ T30] audit: type=1326 audit(1752690352.763:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 765.985208][ T30] audit: type=1326 audit(1752690352.763:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12120 comm="syz.5.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 766.507960][ T5918] delete_channel: no stack [ 769.355630][T12169] binder: 12168:12169 ioctl 4018620d 0 returned -22 [ 769.450359][T12171] trusted_key: encrypted_key: insufficient parameters specified [ 770.214323][ T2028] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 770.379056][ T2028] usb 7-1: Using ep0 maxpacket: 16 [ 770.406032][ T2028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 770.444079][ T2028] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 770.553749][ T2028] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 770.659035][ T2028] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 770.669894][ T2028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.678065][ T2028] usb 7-1: Product: syz [ 770.682706][ T2028] usb 7-1: Manufacturer: syz [ 770.687525][ T2028] usb 7-1: SerialNumber: syz [ 770.757236][ T2028] usb 7-1: config 0 descriptor?? [ 770.771810][T12163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 771.093650][ T2028] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 771.185262][ T2028] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 771.231777][ T2028] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 771.257840][ T2028] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 771.287138][ T2028] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 771.372207][ T2028] usb 7-1: USB disconnect, device number 6 [ 771.381348][ T2028] mcba_usb 7-1:0.0 can0: device disconnected [ 772.229596][ T5842] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 772.400434][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 772.420457][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.449527][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.473146][ T5842] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 772.483929][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.549354][ T2028] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 772.591463][ T5842] usb 6-1: config 0 descriptor?? [ 772.822867][T12202] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 772.834602][ T10] IPVS: starting estimator thread 0... [ 772.916545][ T2028] usb 7-1: Using ep0 maxpacket: 32 [ 772.940291][T12203] IPVS: using max 29 ests per chain, 69600 per kthread [ 772.958585][ T2028] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 772.981647][ T2028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.008916][ T2028] usb 7-1: Product: syz [ 773.013271][ T2028] usb 7-1: Manufacturer: syz [ 773.018946][ T2028] usb 7-1: SerialNumber: syz [ 773.059841][ T5842] apple 0003:05AC:0246.000B: unknown global tag 0xc [ 773.069316][ T2028] usb 7-1: config 0 descriptor?? [ 773.074385][ T5842] apple 0003:05AC:0246.000B: item 0 2 1 12 parsing failed [ 773.097277][ T2028] ums_eneub6250 7-1:0.0: USB Mass Storage device detected [ 773.105498][ T5842] apple 0003:05AC:0246.000B: parse failed [ 773.112881][ T5842] apple 0003:05AC:0246.000B: probe with driver apple failed with error -22 [ 773.373723][T12193] random: crng reseeded on system resumption [ 773.402749][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 773.402763][ T30] audit: type=1400 audit(1752690361.483:4528): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=12183 comm="syz.5.1716" name="214" dev="tmpfs" ino=1148 [ 773.440285][ T5842] usb 7-1: USB disconnect, device number 7 [ 773.456734][ T30] audit: type=1400 audit(1752690361.513:4529): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=rw pid=12183 comm="syz.5.1716" name="raw-gadget" dev="devtmpfs" ino=820 [ 773.530906][ T9565] usb 6-1: USB disconnect, device number 37 [ 775.626890][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1724'. [ 775.636177][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 776.686130][T12232] block device autoloading is deprecated and will be removed. [ 777.366682][T12236] tc_dump_action: action bad kind [ 777.429313][ T30] audit: type=1326 audit(1752690365.493:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 777.870421][ T30] audit: type=1326 audit(1752690365.503:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 777.963088][ T30] audit: type=1326 audit(1752690365.573:4532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.489055][ T30] audit: type=1326 audit(1752690365.573:4533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.511890][ T30] audit: type=1326 audit(1752690365.573:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.539142][ T30] audit: type=1326 audit(1752690365.583:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.654938][ T30] audit: type=1326 audit(1752690365.583:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.731649][ T30] audit: type=1326 audit(1752690365.583:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 778.894571][ T30] audit: type=1326 audit(1752690365.593:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 779.109544][ T30] audit: type=1326 audit(1752690365.593:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 779.148974][ T30] audit: type=1326 audit(1752690365.593:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18378e929 code=0x7ffc0000 [ 779.185804][ T30] audit: type=1326 audit(1752690365.613:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa183790847 code=0x7ffc0000 [ 779.267824][ T30] audit: type=1326 audit(1752690365.613:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12231 comm="syz.6.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa1837907bc code=0x7ffc0000 [ 779.308913][ T9565] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 779.563277][ T9565] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 779.605932][ T9565] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 779.636455][ T9565] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.716207][ T9565] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.044564][ T9565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.324188][ T9565] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.385459][ T9565] usb 6-1: invalid MIDI out EP 0 [ 781.580416][T12278] loop2: detected capacity change from 0 to 7 [ 781.588410][ T9565] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 781.599709][T12278] Dev loop2: unable to read RDB block 7 [ 781.605424][T12278] loop2: AHDI p1 p2 p3 [ 781.613876][T12278] loop2: partition table partially beyond EOD, truncated [ 781.637361][T12278] loop2: p1 start 1601398130 is beyond EOD, truncated [ 781.644432][T12278] loop2: p2 start 1702059890 is beyond EOD, truncated [ 781.864607][T12288] binder: 12286:12288 ioctl c01064c2 200000000040 returned -22 [ 782.003346][T12285] tmpfs: Cannot retroactively limit inodes [ 783.735296][ T2028] usb 6-1: USB disconnect, device number 38 [ 784.322038][T12329] FAULT_INJECTION: forcing a failure. [ 784.322038][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.335468][T12329] CPU: 1 UID: 0 PID: 12329 Comm: syz.7.1752 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 784.335498][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.335511][T12329] Call Trace: [ 784.335519][T12329] [ 784.335529][T12329] dump_stack_lvl+0x189/0x250 [ 784.335556][T12329] ? __pfx____ratelimit+0x10/0x10 [ 784.335589][T12329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.335612][T12329] ? __pfx__printk+0x10/0x10 [ 784.335639][T12329] ? __might_fault+0xb0/0x130 [ 784.335682][T12329] should_fail_ex+0x414/0x560 [ 784.335717][T12329] _copy_from_user+0x2d/0xb0 [ 784.335739][T12329] snd_pcm_oss_write+0x84f/0x11a0 [ 784.335792][T12329] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 784.335824][T12329] ? bpf_lsm_file_permission+0x9/0x20 [ 784.335843][T12329] ? security_file_permission+0x75/0x290 [ 784.335875][T12329] ? rw_verify_area+0x258/0x650 [ 784.335904][T12329] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 784.335933][T12329] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 784.335973][T12329] vfs_write+0x27e/0xa90 [ 784.336011][T12329] ? __pfx_vfs_write+0x10/0x10 [ 784.336049][T12329] ? __rcu_read_unlock+0x84/0xe0 [ 784.336079][T12329] ? __fget_files+0x2a/0x420 [ 784.336097][T12329] ? __fget_files+0x3a0/0x420 [ 784.336114][T12329] ? __fget_files+0x2a/0x420 [ 784.336147][T12329] ksys_write+0x145/0x250 [ 784.336179][T12329] ? __pfx_ksys_write+0x10/0x10 [ 784.336213][T12329] ? do_syscall_64+0xbe/0x3b0 [ 784.336237][T12329] do_syscall_64+0xfa/0x3b0 [ 784.336257][T12329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.336278][T12329] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 784.336298][T12329] ? clear_bhb_loop+0x60/0xb0 [ 784.336324][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.336344][T12329] RIP: 0033:0x7fc877b8e929 [ 784.336362][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.336381][T12329] RSP: 002b:00007fc8759b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 784.336403][T12329] RAX: ffffffffffffffda RBX: 00007fc877db6160 RCX: 00007fc877b8e929 [ 784.336419][T12329] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000006 [ 784.336432][T12329] RBP: 00007fc8759b4090 R08: 0000000000000000 R09: 0000000000000000 [ 784.336445][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.336457][T12329] R13: 0000000000000000 R14: 00007fc877db6160 R15: 00007ffda761f2e8 [ 784.336492][T12329] [ 784.613369][T12321] ptm ptm18: ldisc open failed (-12), clearing slot 18 [ 784.673691][ T2028] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 784.858974][ T2028] usb 6-1: Using ep0 maxpacket: 16 [ 784.873788][ T2028] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 784.886019][ T2028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 785.028815][ T2028] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 785.038229][ T2028] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.055203][ T2028] usb 6-1: Product: syz [ 785.063182][ T2028] usb 6-1: Manufacturer: syz [ 785.067935][ T2028] usb 6-1: SerialNumber: syz [ 785.281636][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 785.310091][ T2028] usb 6-1: config 0 descriptor?? [ 785.327990][ T2028] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 785.337550][ T2028] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 786.151500][ T2028] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 786.160307][ T2028] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 786.167958][ T2028] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 786.175077][ T2028] em28xx 6-1:0.0: No AC97 audio processor [ 786.185467][ T2028] usb 6-1: USB disconnect, device number 39 [ 786.193130][ T2028] em28xx 6-1:0.0: Disconnecting em28xx [ 786.248225][ T2028] em28xx 6-1:0.0: Freeing device [ 787.809250][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 787.809272][ T30] audit: type=1326 audit(1752690376.806:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12354 comm="syz.7.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7fc00000 [ 788.139395][ T9565] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 788.168173][ T30] audit: type=1326 audit(1752690377.236:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12354 comm="syz.7.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc877b8e929 code=0x7fc00000 [ 788.379353][ T9565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.399063][ T9565] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 788.438895][ T9565] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 788.448081][ T9565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.489866][ T9565] usb 1-1: config 0 descriptor?? [ 788.747045][T12365] IPVS: Unknown mcast interface: pimreg1 [ 789.098748][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.109323][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.957954][T12384] trusted_key: encrypted_key: insufficient parameters specified [ 790.887732][ T9565] usbhid 1-1:0.0: can't add hid device: -71 [ 790.902447][ T9565] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 790.925233][ T9565] usb 1-1: USB disconnect, device number 45 [ 792.180811][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 792.898883][ T9565] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 792.936416][T12407] CIFS mount error: No usable UNC path provided in device string! [ 792.936416][T12407] [ 792.946992][T12407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 793.838913][ T9565] usb 6-1: Using ep0 maxpacket: 16 [ 793.852089][ T9565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 794.043878][ T9565] usb 6-1: config 7 has an invalid interface number: 48 but max is 0 [ 794.059227][ T9565] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 794.074241][ T9565] usb 6-1: config 7 has no interface number 0 [ 794.080515][ T9565] usb 6-1: config 7 interface 48 has no altsetting 0 [ 794.091263][ T9565] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 794.354749][ T9565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.362936][ T9565] usb 6-1: Product: syz [ 794.367142][ T9565] usb 6-1: Manufacturer: syz [ 794.371831][ T9565] usb 6-1: SerialNumber: syz [ 795.959516][ T9565] cdc_phonet 6-1:7.48: probe with driver cdc_phonet failed with error -22 [ 795.981808][ T9565] usb 6-1: USB disconnect, device number 40 [ 796.323917][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1782'. [ 797.687820][T12447] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1786'. [ 797.768914][ T5911] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 798.018915][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 798.025028][ T5911] usb 1-1: no configurations [ 798.029767][ T5911] usb 1-1: can't read configurations, error -22 [ 798.066280][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1787'. [ 798.184462][ T5911] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 798.543035][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 798.568877][ T5911] usb 1-1: no configurations [ 798.573558][ T5911] usb 1-1: can't read configurations, error -22 [ 798.629990][ T5911] usb usb1-port1: attempt power cycle [ 798.901938][T10187] delete_channel: no stack [ 799.011143][ T5911] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 799.100716][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 799.107680][ T30] audit: type=1326 audit(1752690388.186:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 799.152395][ T5911] usb 1-1: no configurations [ 799.157081][ T5911] usb 1-1: can't read configurations, error -22 [ 799.253060][ T30] audit: type=1326 audit(1752690388.186:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 799.349111][ T5911] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 799.369311][ T5842] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 799.751675][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 799.790259][ T30] audit: type=1326 audit(1752690388.186:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f305278d290 code=0x7ffc0000 [ 799.822373][ T5842] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 799.845346][ T30] audit: type=1326 audit(1752690388.186:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 799.849421][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.896754][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 799.916971][ T30] audit: type=1326 audit(1752690388.186:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 800.568976][ T5842] usb 6-1: config 0 descriptor?? [ 800.601480][ T30] audit: type=1326 audit(1752690388.276:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 800.635103][ T5842] gspca_main: sunplus-2.14.0 probing 041e:400b [ 800.643541][ T5911] usb 1-1: device descriptor read/all, error -71 [ 800.652123][ T5911] usb usb1-port1: unable to enumerate USB device [ 800.659995][ T30] audit: type=1326 audit(1752690388.276:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 800.816867][ T30] audit: type=1326 audit(1752690388.326:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 800.875664][ T30] audit: type=1326 audit(1752690388.396:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 800.921930][ T30] audit: type=1326 audit(1752690388.546:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12462 comm="syz.5.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f305278e52b code=0x7ffc0000 [ 801.139265][ T5968] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 801.300726][ T5968] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 801.310151][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.334643][ T5968] usb 4-1: config 0 descriptor?? [ 801.413797][ T5842] gspca_sunplus: reg_w_riv err -71 [ 801.433600][ T5842] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 801.468525][ T5842] usb 6-1: USB disconnect, device number 41 [ 801.490118][ T5968] cp210x 4-1:0.0: cp210x converter detected [ 801.706476][ T5968] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 801.722844][ T5968] cp210x 4-1:0.0: querying part number failed [ 801.751507][ T5968] usb 4-1: cp210x converter now attached to ttyUSB0 [ 801.777670][ T5968] usb 4-1: USB disconnect, device number 42 [ 801.801324][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 801.854482][ T5968] cp210x 4-1:0.0: device disconnected [ 803.237917][T12506] trusted_key: encrypted_key: insufficient parameters specified [ 803.410813][T12505] trusted_key: encrypted_key: insufficient parameters specified [ 803.505214][T12501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1801'. [ 803.722435][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1801'. [ 803.885996][T12501] ip6gretap1: entered allmulticast mode [ 805.409035][ T5911] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 805.910904][T12536] netlink: 'syz.7.1811': attribute type 13 has an invalid length. [ 805.929616][T12536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1811'. [ 805.941661][ T5911] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.956333][ T5911] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.990990][T12536] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 806.024683][ T5911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.054651][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.085072][ T5911] usb 6-1: Product: syz [ 806.104640][ T5911] usb 6-1: Manufacturer: syz [ 806.121653][ T5911] usb 6-1: SerialNumber: syz [ 806.433279][T12550] trusted_key: encrypted_key: insufficient parameters specified [ 806.598561][ T10] delete_channel: no stack [ 807.645144][T12525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.791910][T12525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.319017][T12565] FAULT_INJECTION: forcing a failure. [ 808.319017][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 808.332537][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.3.1818 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 808.332569][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 808.332583][T12565] Call Trace: [ 808.332593][T12565] [ 808.332604][T12565] dump_stack_lvl+0x189/0x250 [ 808.332633][T12565] ? __pfx____ratelimit+0x10/0x10 [ 808.332672][T12565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.332697][T12565] ? __pfx__printk+0x10/0x10 [ 808.332733][T12565] ? __pfx___might_resched+0x10/0x10 [ 808.332756][T12565] ? fs_reclaim_acquire+0x7d/0x100 [ 808.332784][T12565] should_fail_ex+0x414/0x560 [ 808.332821][T12565] should_failslab+0xa8/0x100 [ 808.332855][T12565] __kmalloc_cache_noprof+0x70/0x3d0 [ 808.332887][T12565] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 808.332917][T12565] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 808.332948][T12565] alloc_netdev_mqs+0xbd5/0x11e0 [ 808.332987][T12565] register_vlan_device+0x24f/0x4c0 [ 808.333013][T12565] ? cap_capable+0x11f/0x460 [ 808.333059][T12565] ? __pfx_register_vlan_device+0x10/0x10 [ 808.333094][T12565] ? security_capable+0x7e/0x2e0 [ 808.333125][T12565] vlan_ioctl_handler+0x281/0x650 [ 808.333152][T12565] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 808.333180][T12565] ? hook_file_ioctl+0xaa/0x530 [ 808.333212][T12565] ? __asan_memset+0x22/0x50 [ 808.333238][T12565] ? smack_file_ioctl+0x24a/0x340 [ 808.333272][T12565] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 808.333298][T12565] sock_ioctl+0x60d/0x790 [ 808.333332][T12565] ? __pfx_sock_ioctl+0x10/0x10 [ 808.333364][T12565] ? __fget_files+0x2a/0x420 [ 808.333387][T12565] ? __fget_files+0x3a0/0x420 [ 808.333402][T12565] ? __fget_files+0x2a/0x420 [ 808.333422][T12565] ? bpf_lsm_file_ioctl+0x9/0x20 [ 808.333444][T12565] ? __pfx_sock_ioctl+0x10/0x10 [ 808.333474][T12565] __se_sys_ioctl+0xfc/0x170 [ 808.333509][T12565] do_syscall_64+0xfa/0x3b0 [ 808.333529][T12565] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.333560][T12565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.333582][T12565] ? clear_bhb_loop+0x60/0xb0 [ 808.333608][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.333630][T12565] RIP: 0033:0x7fd0c058e929 [ 808.333649][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.333668][T12565] RSP: 002b:00007fd0be3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.333690][T12565] RAX: ffffffffffffffda RBX: 00007fd0c07b6080 RCX: 00007fd0c058e929 [ 808.333707][T12565] RDX: 0000200000000400 RSI: 0000000000008982 RDI: 000000000000000b [ 808.333721][T12565] RBP: 00007fd0be3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 808.333734][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.333747][T12565] R13: 0000000000000000 R14: 00007fd0c07b6080 R15: 00007ffef156f748 [ 808.333782][T12565] [ 808.338022][T12565] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 808.640787][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.655618][T12565] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 808.875651][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.930020][T12525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.012287][T12525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.289486][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.687322][ T5911] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 810.761245][ T5911] cdc_ncm 6-1:1.0: dwNtbInMaxSize=256 is too small. Using 2048 [ 810.771691][ T5911] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 810.901631][T12572] tc_dump_action: action bad kind [ 810.979507][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 810.979609][ T30] audit: type=1326 audit(1752690400.006:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 811.007525][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.076739][T12576] trusted_key: encrypted_key: insufficient parameters specified [ 811.731898][ T5911] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 811.868727][ T30] audit: type=1326 audit(1752690400.006:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 811.944523][ T5911] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 812.133546][ T30] audit: type=1326 audit(1752690400.006:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 812.158991][ T30] audit: type=1326 audit(1752690400.006:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 812.181417][ T30] audit: type=1326 audit(1752690400.016:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 812.203273][ T30] audit: type=1326 audit(1752690400.016:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 812.209583][ T5911] usb 6-1: USB disconnect, device number 42 [ 812.240938][ T30] audit: type=1326 audit(1752690400.016:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 812.278964][ T30] audit: type=1326 audit(1752690400.026:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc877b90847 code=0x7ffc0000 [ 812.354563][ T5911] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 812.385080][ T30] audit: type=1326 audit(1752690400.026:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc877b907bc code=0x7ffc0000 [ 812.513551][ T30] audit: type=1326 audit(1752690400.036:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12567 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc877b906f4 code=0x7ffc0000 [ 813.734513][T12597] FAULT_INJECTION: forcing a failure. [ 813.734513][T12597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.754782][T12597] CPU: 0 UID: 0 PID: 12597 Comm: syz.6.1828 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 813.754814][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.754829][T12597] Call Trace: [ 813.754838][T12597] [ 813.754847][T12597] dump_stack_lvl+0x189/0x250 [ 813.754878][T12597] ? __pfx____ratelimit+0x10/0x10 [ 813.754910][T12597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.754934][T12597] ? __pfx__printk+0x10/0x10 [ 813.754976][T12597] should_fail_ex+0x414/0x560 [ 813.755012][T12597] _copy_to_user+0x31/0xb0 [ 813.755039][T12597] simple_read_from_buffer+0xe1/0x170 [ 813.755075][T12597] proc_fail_nth_read+0x1df/0x250 [ 813.755102][T12597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.755127][T12597] ? rw_verify_area+0x258/0x650 [ 813.755154][T12597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.755178][T12597] vfs_read+0x200/0x980 [ 813.755212][T12597] ? __pfx___mutex_lock+0x10/0x10 [ 813.755233][T12597] ? __pfx_vfs_read+0x10/0x10 [ 813.755262][T12597] ? __fget_files+0x2a/0x420 [ 813.755286][T12597] ? __fget_files+0x3a0/0x420 [ 813.755304][T12597] ? __fget_files+0x2a/0x420 [ 813.755334][T12597] ksys_read+0x145/0x250 [ 813.755371][T12597] ? __pfx_ksys_read+0x10/0x10 [ 813.755395][T12597] ? rcu_is_watching+0x15/0xb0 [ 813.755425][T12597] ? do_syscall_64+0xbe/0x3b0 [ 813.755450][T12597] do_syscall_64+0xfa/0x3b0 [ 813.755468][T12597] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.755499][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.755519][T12597] ? clear_bhb_loop+0x60/0xb0 [ 813.755545][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.755565][T12597] RIP: 0033:0x7fa18378d33c [ 813.755584][T12597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 813.755602][T12597] RSP: 002b:00007fa1845ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 813.755623][T12597] RAX: ffffffffffffffda RBX: 00007fa1839b5fa0 RCX: 00007fa18378d33c [ 813.755639][T12597] RDX: 000000000000000f RSI: 00007fa1845ae0a0 RDI: 0000000000000003 [ 813.755652][T12597] RBP: 00007fa1845ae090 R08: 0000000000000000 R09: 0000000000000000 [ 813.755665][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.755677][T12597] R13: 0000000000000000 R14: 00007fa1839b5fa0 R15: 00007ffd8e490948 [ 813.755710][T12597] [ 814.033631][T12600] loop2: detected capacity change from 0 to 7 [ 814.043747][T12600] Dev loop2: unable to read RDB block 7 [ 814.049517][T12600] loop2: AHDI p1 p2 p3 [ 814.053766][T12600] loop2: partition table partially beyond EOD, truncated [ 814.061193][T12600] loop2: p1 start 1601398130 is beyond EOD, truncated [ 814.068060][T12600] loop2: p2 start 1702059890 is beyond EOD, truncated [ 814.400015][T12606] gfs2: not a GFS2 filesystem [ 816.735040][T12624] tc_dump_action: action bad kind [ 817.173553][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 817.173577][ T30] audit: type=1326 audit(1752690405.926:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 817.428906][ T30] audit: type=1326 audit(1752690405.926:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 817.658312][ T30] audit: type=1326 audit(1752690405.926:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 817.812541][ T30] audit: type=1326 audit(1752690405.926:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 817.896748][ T30] audit: type=1326 audit(1752690405.926:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 818.098097][ T30] audit: type=1326 audit(1752690405.936:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 818.253146][ T30] audit: type=1326 audit(1752690405.956:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 818.337142][ T30] audit: type=1326 audit(1752690405.966:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc877b8e929 code=0x7ffc0000 [ 818.374952][T12636] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 818.381629][T12636] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 818.389664][T12636] vhci_hcd vhci_hcd.0: Device attached [ 818.392349][ T30] audit: type=1326 audit(1752690405.966:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc877b90847 code=0x7ffc0000 [ 818.426643][T12637] vhci_hcd: connection closed [ 818.427055][ T8746] vhci_hcd: stop threads [ 818.658932][T10187] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 819.120382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.394522][ T8746] vhci_hcd: release socket [ 819.399021][ T30] audit: type=1326 audit(1752690405.976:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12620 comm="syz.7.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc877b907bc code=0x7ffc0000 [ 819.431990][ T8746] vhci_hcd: disconnect device [ 819.698942][ T5968] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 821.098883][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 821.121042][ T5968] usb 6-1: config 64 has an invalid interface number: 203 but max is 0 [ 821.138952][ T5968] usb 6-1: config 64 has no interface number 0 [ 821.146122][ T5968] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=54.91 [ 821.155364][ T5968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.172583][ T5968] imon 6-1:64.203: unable to register, err -19 [ 821.373310][T12647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.392800][T12647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.415785][ T5968] usb 6-1: USB disconnect, device number 43 [ 821.556788][T12667] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1850'. [ 821.650601][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1851'. [ 821.684545][T12670] team_slave_0: entered promiscuous mode [ 821.690812][T12670] team_slave_1: entered promiscuous mode [ 821.753539][T12674] trusted_key: encrypted_key: insufficient parameters specified [ 822.437696][T12670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 823.730517][T12697] loop2: detected capacity change from 0 to 7 [ 823.741826][T12697] Dev loop2: unable to read RDB block 7 [ 823.747467][T12697] loop2: AHDI p1 p2 p3 [ 823.771059][T12697] loop2: partition table partially beyond EOD, truncated [ 823.778264][T12697] loop2: p1 start 1601398130 is beyond EOD, truncated [ 823.801168][T12697] loop2: p2 start 1702059890 is beyond EOD, truncated [ 824.481018][T10187] vhci_hcd: vhci_device speed not set [ 824.614621][T12706] FAULT_INJECTION: forcing a failure. [ 824.614621][T12706] name failslab, interval 1, probability 0, space 0, times 0 [ 824.693364][T12706] CPU: 1 UID: 0 PID: 12706 Comm: syz.6.1861 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 824.693398][T12706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 824.693412][T12706] Call Trace: [ 824.693421][T12706] [ 824.693431][T12706] dump_stack_lvl+0x189/0x250 [ 824.693460][T12706] ? __pfx____ratelimit+0x10/0x10 [ 824.693492][T12706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.693516][T12706] ? __pfx__printk+0x10/0x10 [ 824.693556][T12706] ? __pfx___might_resched+0x10/0x10 [ 824.693579][T12706] ? fs_reclaim_acquire+0x7d/0x100 [ 824.693606][T12706] should_fail_ex+0x414/0x560 [ 824.693642][T12706] should_failslab+0xa8/0x100 [ 824.693675][T12706] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 824.693705][T12706] ? __d_alloc+0x31/0x6f0 [ 824.693733][T12706] __d_alloc+0x31/0x6f0 [ 824.693755][T12706] ? inode_set_ctime_current+0x277/0xb40 [ 824.693783][T12706] d_alloc_pseudo+0x1f/0xb0 [ 824.693809][T12706] alloc_file_pseudo+0xcc/0x210 [ 824.693835][T12706] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 824.693867][T12706] ? alloc_anon_inode+0x1c1/0x360 [ 824.693903][T12706] aio_setup_ring+0x1e7/0xd80 [ 824.693939][T12706] ? pcpu_memcg_post_alloc_hook+0xb8/0x520 [ 824.693976][T12706] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 824.694006][T12706] ? __pfx_aio_setup_ring+0x10/0x10 [ 824.694052][T12706] ioctx_alloc+0x32f/0x7a0 [ 824.694093][T12706] __se_sys_io_setup+0x7b/0x1a0 [ 824.694123][T12706] do_syscall_64+0xfa/0x3b0 [ 824.694143][T12706] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.694173][T12706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.694194][T12706] ? clear_bhb_loop+0x60/0xb0 [ 824.694220][T12706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.694239][T12706] RIP: 0033:0x7fa18378e929 [ 824.694257][T12706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.694275][T12706] RSP: 002b:00007fa18458d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 824.694297][T12706] RAX: ffffffffffffffda RBX: 00007fa1839b6080 RCX: 00007fa18378e929 [ 824.694313][T12706] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 00000000000000ff [ 824.694326][T12706] RBP: 00007fa18458d090 R08: 0000000000000000 R09: 0000000000000000 [ 824.694339][T12706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.694351][T12706] R13: 0000000000000001 R14: 00007fa1839b6080 R15: 00007ffd8e490948 [ 824.694389][T12706] [ 825.252931][ T5911] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 825.348584][T12715] trusted_key: encrypted_key: insufficient parameters specified [ 825.526445][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1863'. [ 825.996506][T12713] FAULT_INJECTION: forcing a failure. [ 825.996506][T12713] name failslab, interval 1, probability 0, space 0, times 0 [ 826.103979][T12713] CPU: 1 UID: 0 PID: 12713 Comm: syz.5.1863 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 826.104012][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.104025][T12713] Call Trace: [ 826.104034][T12713] [ 826.104044][T12713] dump_stack_lvl+0x189/0x250 [ 826.104074][T12713] ? __pfx____ratelimit+0x10/0x10 [ 826.104107][T12713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.104131][T12713] ? __pfx__printk+0x10/0x10 [ 826.104175][T12713] should_fail_ex+0x414/0x560 [ 826.104211][T12713] should_failslab+0xa8/0x100 [ 826.104246][T12713] kmem_cache_alloc_noprof+0x73/0x3c0 [ 826.104274][T12713] ? skb_clone+0x212/0x3a0 [ 826.104308][T12713] skb_clone+0x212/0x3a0 [ 826.104339][T12713] __netlink_deliver_tap+0x404/0x850 [ 826.104387][T12713] ? netlink_deliver_tap+0x2e/0x1b0 [ 826.104414][T12713] netlink_deliver_tap+0x19c/0x1b0 [ 826.104440][T12713] netlink_sendskb+0x68/0x140 [ 826.104464][T12713] netlink_rcv_skb+0x28c/0x470 [ 826.104485][T12713] ? rcu_is_watching+0x15/0xb0 [ 826.104509][T12713] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 826.104533][T12713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.104573][T12713] ? netlink_deliver_tap+0x2e/0x1b0 [ 826.104607][T12713] netlink_unicast+0x75c/0x8e0 [ 826.104641][T12713] netlink_sendmsg+0x805/0xb30 [ 826.104677][T12713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.104712][T12713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.104741][T12713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.104768][T12713] __sock_sendmsg+0x219/0x270 [ 826.104804][T12713] ____sys_sendmsg+0x505/0x830 [ 826.104838][T12713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.104875][T12713] ? import_iovec+0x74/0xa0 [ 826.104903][T12713] ___sys_sendmsg+0x21f/0x2a0 [ 826.104933][T12713] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.105002][T12713] ? __fget_files+0x2a/0x420 [ 826.105020][T12713] ? __fget_files+0x3a0/0x420 [ 826.105051][T12713] __x64_sys_sendmsg+0x19b/0x260 [ 826.105081][T12713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.105120][T12713] ? rcu_is_watching+0x15/0xb0 [ 826.105149][T12713] ? do_syscall_64+0xbe/0x3b0 [ 826.105174][T12713] do_syscall_64+0xfa/0x3b0 [ 826.105195][T12713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.105214][T12713] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 826.105235][T12713] ? clear_bhb_loop+0x60/0xb0 [ 826.105260][T12713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.105281][T12713] RIP: 0033:0x7f305278e929 [ 826.105299][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.105318][T12713] RSP: 002b:00007f30536ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.105341][T12713] RAX: ffffffffffffffda RBX: 00007f30529b5fa0 RCX: 00007f305278e929 [ 826.105356][T12713] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 826.105376][T12713] RBP: 00007f30536ce090 R08: 0000000000000000 R09: 0000000000000000 [ 826.105389][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.105401][T12713] R13: 0000000000000000 R14: 00007f30529b5fa0 R15: 00007ffd3585f858 [ 826.105434][T12713] [ 826.428309][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 826.474462][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.485148][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 826.496248][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 826.506110][ T5911] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 826.515889][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.540126][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 826.549374][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 826.557457][ T5911] usb 4-1: Manufacturer: syz [ 826.575954][ T5911] usb 4-1: config 0 descriptor?? [ 826.597956][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 826.607161][T12717] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1865'. [ 826.616374][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 827.469167][T12734] trusted_key: encrypted_key: insufficient parameters specified [ 828.059763][ T5911] rc_core: IR keymap rc-hauppauge not found [ 828.065837][ T5911] Registered IR keymap rc-empty [ 828.074306][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.130786][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 828.606908][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 828.684130][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 829.013431][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 829.031101][T12747] FAULT_INJECTION: forcing a failure. [ 829.031101][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 829.049012][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 829.188933][T12748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1869'. [ 829.799877][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 829.799940][T12747] CPU: 0 UID: 0 PID: 12747 Comm: syz.3.1871 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 829.799969][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.799983][T12747] Call Trace: [ 829.799995][T12747] [ 829.800006][T12747] dump_stack_lvl+0x189/0x250 [ 829.800040][T12747] ? __pfx____ratelimit+0x10/0x10 [ 829.800075][T12747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 829.800102][T12747] ? __pfx__printk+0x10/0x10 [ 829.800137][T12747] ? __pfx___might_resched+0x10/0x10 [ 829.800163][T12747] ? fs_reclaim_acquire+0x7d/0x100 [ 829.800193][T12747] should_fail_ex+0x414/0x560 [ 829.800233][T12747] should_failslab+0xa8/0x100 [ 829.800271][T12747] __kmalloc_noprof+0xcb/0x4f0 [ 829.800310][T12747] ? kfree+0x4d/0x440 [ 829.800337][T12747] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 829.800371][T12747] tomoyo_realpath_from_path+0xe3/0x5d0 [ 829.800410][T12747] ? tomoyo_mount_permission+0x27a/0x970 [ 829.800435][T12747] tomoyo_mount_permission+0x377/0x970 [ 829.800463][T12747] ? tomoyo_mount_permission+0x27a/0x970 [ 829.800488][T12747] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 829.800584][T12747] security_sb_mount+0xec/0x350 [ 829.800618][T12747] path_mount+0xbc/0xfe0 [ 829.800651][T12747] ? user_path_at+0x44/0x60 [ 829.800675][T12747] ? kmem_cache_free+0x18f/0x400 [ 829.800720][T12747] __se_sys_mount+0x317/0x410 [ 829.800750][T12747] ? __pfx___se_sys_mount+0x10/0x10 [ 829.800771][T12747] ? rcu_is_watching+0x15/0xb0 [ 829.800803][T12747] ? do_syscall_64+0xbe/0x3b0 [ 829.800823][T12747] ? __x64_sys_mount+0x20/0xc0 [ 829.800849][T12747] do_syscall_64+0xfa/0x3b0 [ 829.800869][T12747] ? lockdep_hardirqs_on+0x9c/0x150 [ 829.800904][T12747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.800928][T12747] ? clear_bhb_loop+0x60/0xb0 [ 829.800957][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.800985][T12747] RIP: 0033:0x7fd0c058e929 [ 829.801006][T12747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.801028][T12747] RSP: 002b:00007fd0be3f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 829.801052][T12747] RAX: ffffffffffffffda RBX: 00007fd0c07b5fa0 RCX: 00007fd0c058e929 [ 829.801070][T12747] RDX: 0000200000000200 RSI: 0000200000000340 RDI: 0000000000000000 [ 829.801085][T12747] RBP: 00007fd0be3f6090 R08: 0000200000000380 R09: 0000000000000000 [ 829.801108][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.801122][T12747] R13: 0000000000000000 R14: 00007fd0c07b5fa0 R15: 00007ffef156f748 [ 829.801160][T12747] [ 829.801304][T12747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.085067][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.128953][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.231319][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.329355][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.444451][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.514695][T12754] netlink: 'syz.5.1872': attribute type 1 has an invalid length. [ 830.522773][T12754] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1872'. [ 830.566822][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.682651][ T5911] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.880105][ T5911] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 831.014015][ T5911] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 831.569106][ T5911] usb 4-1: USB disconnect, device number 43 [ 831.616321][T12764] FAULT_INJECTION: forcing a failure. [ 831.616321][T12764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.646090][T12764] CPU: 0 UID: 0 PID: 12764 Comm: syz.3.1875 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 831.646124][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.646138][T12764] Call Trace: [ 831.646148][T12764] [ 831.646158][T12764] dump_stack_lvl+0x189/0x250 [ 831.646187][T12764] ? __pfx____ratelimit+0x10/0x10 [ 831.646220][T12764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.646244][T12764] ? __pfx__printk+0x10/0x10 [ 831.646271][T12764] ? __might_fault+0xb0/0x130 [ 831.646313][T12764] should_fail_ex+0x414/0x560 [ 831.646349][T12764] _copy_from_user+0x2d/0xb0 [ 831.646375][T12764] sock_do_ioctl+0x182/0x300 [ 831.646410][T12764] ? __pfx_sock_do_ioctl+0x10/0x10 [ 831.646438][T12764] ? __lock_acquire+0xab9/0xd20 [ 831.646462][T12764] ? __asan_memset+0x22/0x50 [ 831.646488][T12764] ? smack_file_ioctl+0x24a/0x340 [ 831.646523][T12764] sock_ioctl+0x576/0x790 [ 831.646556][T12764] ? __pfx_sock_ioctl+0x10/0x10 [ 831.646586][T12764] ? __fget_files+0x2a/0x420 [ 831.646605][T12764] ? __fget_files+0x3a0/0x420 [ 831.646622][T12764] ? __fget_files+0x2a/0x420 [ 831.646646][T12764] ? bpf_lsm_file_ioctl+0x9/0x20 [ 831.646665][T12764] ? __pfx_sock_ioctl+0x10/0x10 [ 831.646694][T12764] __se_sys_ioctl+0xfc/0x170 [ 831.646724][T12764] do_syscall_64+0xfa/0x3b0 [ 831.646744][T12764] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.646774][T12764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.646795][T12764] ? clear_bhb_loop+0x60/0xb0 [ 831.646821][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.646841][T12764] RIP: 0033:0x7fd0c058e929 [ 831.646861][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.646917][T12764] RSP: 002b:00007fd0be3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.646940][T12764] RAX: ffffffffffffffda RBX: 00007fd0c07b5fa0 RCX: 00007fd0c058e929 [ 831.646955][T12764] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 831.646969][T12764] RBP: 00007fd0be3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 831.646982][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.646995][T12764] R13: 0000000000000000 R14: 00007fd0c07b5fa0 R15: 00007ffef156f748 [ 831.647029][T12764] [ 832.017114][ T5968] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 832.069617][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 832.069637][ T30] audit: type=1326 audit(1752690421.156:4750): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=12773 comm="syz.5.1877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f305278e929 code=0x0 [ 832.158325][T12783] trusted_key: encrypted_key: insufficient parameters specified [ 832.219018][ T5968] usb 1-1: Using ep0 maxpacket: 16 [ 832.317713][ T5968] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 832.435767][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.583716][ T5968] usb 1-1: Product: syz [ 832.644340][ T5968] usb 1-1: Manufacturer: syz [ 832.708234][ T5968] usb 1-1: SerialNumber: syz [ 832.788054][ T5968] usb 1-1: config 0 descriptor?? [ 832.813664][ T5968] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 833.210514][T12796] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 833.229784][ T5968] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 833.237226][T12796] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1885'. [ 833.351349][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 833.370946][T12801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 833.432237][ T5911] usb 1-1: USB disconnect, device number 50 [ 833.442733][ T5911] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 833.451560][ T5842] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 833.463387][ T5911] visor 1-1:0.0: device disconnected [ 833.608878][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 833.630286][ T5842] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 833.675667][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 833.726345][ T5842] usb 6-1: Product: syz [ 833.750186][T12811] tc_dump_action: action bad kind [ 833.848095][ T30] audit: type=1326 audit(1752690422.846:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 833.888398][ T5842] usb 6-1: Manufacturer: syz [ 833.938312][ T5842] usb 6-1: SerialNumber: syz [ 833.954671][ T30] audit: type=1326 audit(1752690422.846:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 833.980989][ T5842] r8152-cfgselector 6-1: Unknown version 0x0000 [ 834.024932][ T5842] r8152-cfgselector 6-1: config 0 descriptor?? [ 834.239101][ T30] audit: type=1326 audit(1752690422.916:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 834.299054][ T30] audit: type=1326 audit(1752690422.916:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 834.548998][ T30] audit: type=1326 audit(1752690422.916:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 834.605422][ T30] audit: type=1326 audit(1752690422.976:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 835.768995][ T30] audit: type=1326 audit(1752690423.026:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 836.162584][ T30] audit: type=1326 audit(1752690423.066:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 836.998831][ T30] audit: type=1326 audit(1752690423.536:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12807 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c058e929 code=0x7ffc0000 [ 837.180334][T12822] trusted_key: encrypted_key: insufficient parameters specified [ 837.953505][ T9565] r8152-cfgselector 6-1: USB disconnect, device number 44 [ 838.224278][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1898'. [ 838.248848][ T5911] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 838.259856][T12834] team_slave_0: entered promiscuous mode [ 838.265642][T12834] team_slave_1: entered promiscuous mode [ 838.290222][T12834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 838.638946][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 838.888656][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 839.152144][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.203740][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=87d1, bcdDevice=f8.e7 [ 839.250238][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.424162][T12842] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 839.577031][ T5911] usb 1-1: Product: syz [ 839.581426][ T5911] usb 1-1: Manufacturer: syz [ 839.586139][ T5911] usb 1-1: SerialNumber: syz [ 839.598098][ T5911] usb 1-1: config 0 descriptor?? [ 839.917005][ T5911] usb 1-1: USB disconnect, device number 51 [ 840.099029][ T5842] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 841.134855][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.229235][ T5842] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 841.237381][T12854] tc_dump_action: action bad kind [ 841.368915][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 841.368974][ T30] audit: type=1326 audit(1752690430.376:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.410011][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.500126][ T5842] usb 4-1: config 0 descriptor?? [ 841.505371][ T30] audit: type=1326 audit(1752690430.386:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.537990][ T30] audit: type=1326 audit(1752690430.406:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.602343][ T30] audit: type=1326 audit(1752690430.416:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.628988][ T30] audit: type=1326 audit(1752690430.426:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.655110][ T30] audit: type=1326 audit(1752690430.436:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.783119][ T30] audit: type=1326 audit(1752690430.436:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.833985][ T30] audit: type=1326 audit(1752690430.436:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.863123][ T30] audit: type=1326 audit(1752690430.436:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 841.926297][ T30] audit: type=1326 audit(1752690430.436:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12852 comm="syz.5.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f305278e929 code=0x7ffc0000 [ 842.033944][ T5842] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 842.046233][ T5842] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input30 [ 842.780815][ T5842] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 842.802492][ T5936] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 842.814820][ T5918] [ 842.814831][ T5918] ====================================================== [ 842.814838][ T5918] WARNING: possible circular locking dependency detected [ 842.814850][ T5918] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 842.814860][ T5918] ------------------------------------------------------ [ 842.814867][ T5918] kworker/1:6/5918 is trying to acquire lock: [ 842.814876][ T5918] ffff88801a4a10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 842.814925][ T5918] [ 842.814925][ T5918] but task is already holding lock: [ 842.814930][ T5918] ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 842.814961][ T5918] [ 842.814961][ T5918] which lock already depends on the new lock. [ 842.814961][ T5918] [ 842.814967][ T5918] [ 842.814967][ T5918] the existing dependency chain (in reverse order) is: [ 842.814973][ T5918] [ 842.814973][ T5918] -> #2 (console_lock){+.+.}-{0:0}: [ 842.814995][ T5918] lock_acquire+0x120/0x360 [ 842.815008][ T5918] console_lock+0x164/0x1b0 [ 842.815025][ T5918] con_flush_chars+0x70/0x280 [ 842.815062][ T5918] n_tty_write+0xee1/0x11d0 [ 842.815081][ T5918] file_tty_write+0x503/0x990 [ 842.815095][ T5918] vfs_write+0x54b/0xa90 [ 842.815115][ T5918] ksys_write+0x145/0x250 [ 842.815133][ T5918] do_syscall_64+0xfa/0x3b0 [ 842.815146][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.815161][ T5918] [ 842.815161][ T5918] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 842.815183][ T5918] lock_acquire+0x120/0x360 [ 842.815195][ T5918] down_write+0x96/0x1f0 [ 842.815209][ T5918] n_tty_flush_buffer+0x30/0x230 [ 842.815228][ T5918] tty_buffer_flush+0x1ec/0x2b0 [ 842.815243][ T5918] tty_ldisc_flush+0x6b/0xc0 [ 842.815257][ T5918] tty_port_close_start+0x2da/0x550 [ 842.815277][ T5918] tty_port_close+0x2a/0x150 [ 842.815295][ T5918] tty_release+0x389/0x1640 [ 842.815315][ T5918] __fput+0x449/0xa70 [ 842.815330][ T5918] task_work_run+0x1d4/0x260 [ 842.815350][ T5918] exit_to_user_mode_loop+0xec/0x110 [ 842.815363][ T5918] do_syscall_64+0x2bd/0x3b0 [ 842.815375][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.815389][ T5918] [ 842.815389][ T5918] -> #0 (&buf->lock){+.+.}-{4:4}: [ 842.815410][ T5918] validate_chain+0xb9b/0x2140 [ 842.815425][ T5918] __lock_acquire+0xab9/0xd20 [ 842.815437][ T5918] lock_acquire+0x120/0x360 [ 842.815448][ T5918] __mutex_lock+0x182/0xe80 [ 842.815460][ T5918] tty_buffer_flush+0x74/0x2b0 [ 842.815476][ T5918] tty_ldisc_flush+0x6b/0xc0 [ 842.815490][ T5918] __do_SAK+0x138/0x6d0 [ 842.815505][ T5918] vc_SAK+0x78/0x220 [ 842.815516][ T5918] process_scheduled_works+0xade/0x17b0 [ 842.815530][ T5918] worker_thread+0x8a0/0xda0 [ 842.815544][ T5918] kthread+0x711/0x8a0 [ 842.815562][ T5918] ret_from_fork+0x3fc/0x770 [ 842.815574][ T5918] ret_from_fork_asm+0x1a/0x30 [ 842.815593][ T5918] [ 842.815593][ T5918] other info that might help us debug this: [ 842.815593][ T5918] [ 842.815598][ T5918] Chain exists of: [ 842.815598][ T5918] &buf->lock --> &tty->termios_rwsem --> console_lock [ 842.815598][ T5918] [ 842.815624][ T5918] Possible unsafe locking scenario: [ 842.815624][ T5918] [ 842.815629][ T5918] CPU0 CPU1 [ 842.815634][ T5918] ---- ---- [ 842.815639][ T5918] lock(console_lock); [ 842.815650][ T5918] lock(&tty->termios_rwsem); [ 842.815663][ T5918] lock(console_lock); [ 842.815674][ T5918] lock(&buf->lock); [ 842.815685][ T5918] [ 842.815685][ T5918] *** DEADLOCK *** [ 842.815685][ T5918] [ 842.815690][ T5918] 4 locks held by kworker/1:6/5918: [ 842.815699][ T5918] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 842.815736][ T5918] #1: ffffc9000448fbc0 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 842.815774][ T5918] #2: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 842.815806][ T5918] #3: ffff88807bb220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 842.815847][ T5918] [ 842.815847][ T5918] stack backtrace: [ 842.815860][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: kworker/1:6 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 842.815885][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 842.815900][ T5918] Workqueue: events vc_SAK [ 842.815919][ T5918] Call Trace: [ 842.815928][ T5918] [ 842.815940][ T5918] dump_stack_lvl+0x189/0x250 [ 842.815958][ T5918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.815995][ T5918] ? __pfx__printk+0x10/0x10 [ 842.816015][ T5918] ? print_lock_name+0xde/0x100 [ 842.816034][ T5918] print_circular_bug+0x2ee/0x310 [ 842.816053][ T5918] check_noncircular+0x134/0x160 [ 842.816075][ T5918] validate_chain+0xb9b/0x2140 [ 842.816101][ T5918] __lock_acquire+0xab9/0xd20 [ 842.816117][ T5918] ? tty_buffer_flush+0x74/0x2b0 [ 842.816133][ T5918] lock_acquire+0x120/0x360 [ 842.816146][ T5918] ? tty_buffer_flush+0x74/0x2b0 [ 842.816168][ T5918] __mutex_lock+0x182/0xe80 [ 842.816180][ T5918] ? tty_buffer_flush+0x74/0x2b0 [ 842.816196][ T5918] ? __lock_acquire+0xab9/0xd20 [ 842.816212][ T5918] ? tty_buffer_flush+0x74/0x2b0 [ 842.816230][ T5918] ? __pfx___mutex_lock+0x10/0x10 [ 842.816242][ T5918] ? do_raw_spin_lock+0x121/0x290 [ 842.816265][ T5918] ? ldsem_down_read_trylock+0x137/0x1a0 [ 842.816285][ T5918] ? tty_ldisc_flush+0x20/0xc0 [ 842.816300][ T5918] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 842.816328][ T5918] tty_buffer_flush+0x74/0x2b0 [ 842.816347][ T5918] tty_ldisc_flush+0x6b/0xc0 [ 842.816363][ T5918] __do_SAK+0x138/0x6d0 [ 842.816384][ T5918] vc_SAK+0x78/0x220 [ 842.816396][ T5918] ? process_scheduled_works+0x9ef/0x17b0 [ 842.816412][ T5918] process_scheduled_works+0xade/0x17b0 [ 842.816438][ T5918] ? __pfx_process_scheduled_works+0x10/0x10 [ 842.816460][ T5918] worker_thread+0x8a0/0xda0 [ 842.816477][ T5918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 842.816502][ T5918] ? __kthread_parkme+0x7b/0x200 [ 842.816523][ T5918] kthread+0x711/0x8a0 [ 842.816543][ T5918] ? __pfx_worker_thread+0x10/0x10 [ 842.816558][ T5918] ? __pfx_kthread+0x10/0x10 [ 842.816578][ T5918] ? _raw_spin_unlock_irq+0x23/0x50 [ 842.816598][ T5918] ? lockdep_hardirqs_on+0x9c/0x150 [ 842.816620][ T5918] ? __pfx_kthread+0x10/0x10 [ 842.816640][ T5918] ret_from_fork+0x3fc/0x770 [ 842.816655][ T5918] ? __pfx_ret_from_fork+0x10/0x10 [ 842.816671][ T5918] ? __switch_to_asm+0x39/0x70 [ 842.816689][ T5918] ? __switch_to_asm+0x33/0x70 [ 842.816707][ T5918] ? __pfx_kthread+0x10/0x10 [ 842.816726][ T5918] ret_from_fork_asm+0x1a/0x30 [ 842.816750][ T5918] [ 842.818947][ T5918] tty tty1: SAK: killed process 12847 (syz.3.1901): by fd#12 [ 842.818998][ T5918] tty tty1: SAK: killed process 12848 (syz.3.1901): by fd#12 [ 842.819013][ T5918] tty tty1: SAK: killed process 12863 (syz.3.1901): by fd#12 [ 842.991114][T12867] trusted_key: encrypted_key: insufficient parameters specified [ 843.558607][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 843.558642][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 843.558678][ T5936] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 843.558702][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.560355][ T5936] usb 1-1: config 0 descriptor?? [ 844.050730][ T5911] delete_channel: no stack [ 844.771577][ T5842] usb 4-1: USB disconnect, device number 44