last executing test programs: 1m25.915992912s ago: executing program 4 (id=661): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x152) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x26100, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}}, 0x8820) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="080026006c0900000800a00033f4ffff0800270000000000050019010900000008002600800900"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) close_range(r0, r1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r4, 0x1) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00f4966620e39b0835ffb29be31cb4c8b4816a5d79a45ad809a414e6b918"], 0xc) write$vga_arbiter(r6, &(0x7f0000000080)=@other={'unlock', ' ', 'io+mem'}, 0xe) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 1m19.771803152s ago: executing program 4 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0xb, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) 1m19.007660692s ago: executing program 4 (id=674): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x4, 0x3}, 0x10) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 1m18.106059744s ago: executing program 4 (id=675): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)="caf628f80d3088b52cda049928b9fa990cd153fcdc999e976c3adfdfc2826459bd72d0e299559f697baec6755f6c738cdd18c0d178fe6a0db9046e2bb7aedf57bb1415a6e4b3421c46230b2baa623fb7ebc62d9614a4247c9c8344b4a7a44acbdd47f150b1eb5e81443ff59bb5934ac346cd0644fff837a3a666d8578241e54702822736148461d21af81a516d35cca5a8e88474b877a93dd37fdd2e77e228fb739cd6cdfea8e350882f9c2277949b3aa3fca7785a585a3b7a35a2f92c2bfbc1f8541f3458cb80c0fb2d6ef89cfdcd01f4ebb8e4eaaefe152b80a65fa07e4241de1868b377cab55a216e9c7a", 0xec) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m16.718449753s ago: executing program 4 (id=680): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x100000, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x200800, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)='2', 0x1}], 0x1}}], 0x1, 0x4000007) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000001a80)=ANY=[], 0x10}}], 0x1, 0x4004804) recvmsg(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000001640)=""/248, 0xf8}], 0x6}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f000001b700)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b434"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000017c0)={0x0, 0x6, 0x8, 0x7ff, 0x0, 0x80}, &(0x7f0000001800)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) remap_file_pages(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000000, 0x1, 0x4000) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000001940)={{&(0x7f0000001840)=""/180, 0xb4}, &(0x7f0000001900), 0xf49d9889c91120d5}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000340)) 1m15.296194556s ago: executing program 4 (id=684): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x20000, 0x10100, 0x400000, 0x239}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x800) 59.458402881s ago: executing program 32 (id=684): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x20000, 0x10100, 0x400000, 0x239}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r7, 0x0, 0x0, 0x800) 13.061337189s ago: executing program 2 (id=827): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x0, r4, 0x3d}, 0x10) 12.199515241s ago: executing program 3 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}]}]}, 0x1bc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x1021, r5, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x20, 0xffffffffffffffff, 0x0) 11.164872768s ago: executing program 2 (id=830): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000035327ae308fac2dd0b920003000000e75f00000002000004", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32, @ANYBLOB="010000000100000001000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xde60faf2e37d4d61, 0x2}, @generic={0xfe, 0x6, "76c9df40"}]}}}}}}}}, 0x0) accept4(r1, &(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000540)=0x80, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.540313219s ago: executing program 3 (id=831): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ac14141601000000000000009279cadf6f2fd87434afc59a46c3170a1d93b40a2493425f2f8a2e94d41bede1c640c0cabddc6de119c7977df2aaf9b860"], 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000400) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0xf4, 0x10, 0x8, 0x5de}, &(0x7f0000000640)=0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe8, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@delqdisc={0x34c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff2}, {0xfff3, 0xffff}, {0x4, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xb, 0xa}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x1fc, 0x2, {{0xb, [0x9, 0x4, 0xa, 0xe, 0x4, 0x7, 0x4, 0x5, 0x2, 0x0, 0x6, 0x1, 0x2, 0x8d, 0xd, 0xd], 0x0, [0x87, 0x77e0, 0xb3b, 0x5, 0x54e0, 0x0, 0x2, 0x7, 0x3ff, 0x9, 0x3, 0x1, 0x2, 0xfffc, 0xff, 0xbe6d], [0x6, 0x2, 0x7fff, 0x64, 0xb1, 0x0, 0x0, 0x7fff, 0xc8, 0x8, 0xa0, 0x5, 0x80, 0xfff8, 0x2, 0xfffe]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x5e330fc6}, {0xc, 0x4, 0x1002}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x9}, {0xc}, {0xc, 0x4, 0x137}]}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x1ff000000000}, {0xc, 0x3, 0xa765}, {0xc, 0x3, 0xd653}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xfffffffd}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0xb}, {0xc, 0x3, 0x60000000080}]}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x9}, {0xc, 0x4, 0x10000}, {0xc, 0x4, 0x860}, {0xc, 0x4, 0x10000}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x69e}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xfffffffffffffff4}, {0xc, 0x4, 0xd3b5}, {0xc, 0x4, 0xfffffffffffffff6}]}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffff0bc}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xc, 0x401, 0x4, 0x2, 0x2, 0x7, 0x5}}, {0xe, 0x2, [0xb79, 0x81, 0x89, 0xf, 0x5]}}, {{0x1c, 0x1, {0x4, 0x1, 0x6, 0x3, 0x0, 0xffffffff, 0x8, 0x9}}, {0x16, 0x2, [0x9, 0xb7, 0x3, 0x7, 0x80, 0x9, 0xea8, 0xc86e, 0x4]}}, {{0x1c, 0x1, {0xd, 0x5, 0x6, 0x9, 0x2, 0x0, 0x80, 0x2}}, {0x8, 0x2, [0x3, 0x3]}}, {{0x1c, 0x1, {0x6c, 0x9, 0x0, 0x1, 0x1, 0x6, 0x6, 0x8}}, {0x14, 0x2, [0xf1e6, 0xf4f8, 0x8, 0x3, 0x6, 0x3, 0x503, 0xff3a]}}, {{0x1c, 0x1, {0x9, 0x4, 0x34, 0x7fff, 0x1, 0x7, 0x5, 0x4}}, {0xc, 0x2, [0x1ff, 0xc, 0x9, 0x9]}}, {{0x1c, 0x1, {0x8, 0x8, 0x5, 0x2, 0x2, 0x80000000, 0x4, 0x4}}, {0xc, 0x2, [0x0, 0xe88, 0x7, 0x74f1]}}]}]}, 0xfffffffffffffe1b}, 0x1, 0x0, 0x0, 0x800}, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 9.064036115s ago: executing program 2 (id=833): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = semget(0x1, 0x5, 0x6b4) semop(r2, &(0x7f0000000180)=[{0x0, 0x3, 0x1000}, {0x4, 0xfffc}], 0x2) semtimedop(r2, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) semop(r2, &(0x7f0000003480)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf25803c6fd473797a300000000008004a007369770014003300776731000000000000000000000000003f40629ff8f069530ac9d57bfd190d98ebc50b52b057258f20e1635750be8343e257bb89ebf3"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) 8.171237913s ago: executing program 3 (id=834): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x1, 0x20000001) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x44a1}], 0x2f, &(0x7f0000000080), &(0x7f00000000c0)={[0x3]}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002200)={0x18, r5, 0xc8da923139bed765, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40810}, 0x200080c0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0xe, 0x2014}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.981519865s ago: executing program 5 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 7.212509955s ago: executing program 0 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d657461000000001400028008000140000000010800024000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000240)={0x8, 0xffffffffffffffff}) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) 7.202506044s ago: executing program 5 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r2) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x7, 0x101, 0xfffffffe, 0x10, 0x2, 0x2}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000400)={0x11, 0x1, 0x3, "33c500100000000040fcd817a45b729fd5085780ee0f00", 0x4f424752}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) close(r5) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) (async) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './cgroup/cgroup.procs\x00'}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r1, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x4040404}, 0x90) 6.949558942s ago: executing program 3 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00', 0x8}, 0x1c) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004032151d0100000000000109022400010000100209040000020300000009210020000122040009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"(\x00'], 0x0}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 6.820343284s ago: executing program 5 (id=841): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r2, &(0x7f0000000540), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28900, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0xb, r5, 0x0, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) r7 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101100) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f00000002c0)={0x3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r1}) 6.447927241s ago: executing program 0 (id=842): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES64], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000002018200000", @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="00000000010000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000f1ffffffffff0b0003800400038004000100"], 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) flock(r0, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r6}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 6.316254752s ago: executing program 5 (id=844): socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x80c0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x400c084) r3 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r7, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 5.281143226s ago: executing program 1 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xd) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) r2 = fanotify_init(0x200, 0x0) close(r2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000003400), 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="b647d2265c891a472523a00ffd41d40a91a99980c125eedc460b339521bf9efc6b29b7b619dba30b530a50f68f9fb5ebfa48d83f3d7144951a01023464084e5a3a79ca641a66ac84e960dfd07071bc302e52031d7e1d4bf5143741182a65b46c6d7ac160672d694ea4b92f399dbdddca9841d4ca360d00615f311d88483b4c6daf8fd1e5069ce55ee511ad4f8c716c94517c8e67989092f5340d9939fd19b2e44832330bfad6ff01b037072f906393a92a9a7d1d379f83c0b4a329292baf3fc1715d71eca7e466185727968b", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000700)=""/224, 0xe0}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000000000)=@ll, 0x80, &(0x7f00000009c0)=[{0x0}], 0x1, &(0x7f0000000340)=""/166, 0xa6}, 0xffffffff}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/70, 0x46}, 0xf}, {{0x0, 0x0, &(0x7f0000000d40), 0x0, &(0x7f0000003ec0)=""/180, 0xb4}, 0x7}], 0x5, 0x40000002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) 5.195894987s ago: executing program 2 (id=846): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x101, 0x1}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0xfcff, &(0x7f0000000700)="56623f5b80d9b1b130"}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000240)="6e37cf", 0x3}, {&(0x7f0000000e00)="5fdbd613", 0x4}, {&(0x7f0000000940)="1165b6", 0x3}, {&(0x7f0000000280)="0f1d547dfd01", 0x6}, {&(0x7f0000000d00)="7ab285d32f", 0x5}, {&(0x7f0000001700)="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", 0x902}, {&(0x7f0000001100)="156f35eda3eaf4031cfd47c8fcb457593de1fc6e333cc2f86d11cefa6387fed76e611ca44de9ed7fa9f1b85663b4edc3b5421dcddec26cc9364883aa6f289716b42062", 0x43}, {&(0x7f00000006c0)="163c7699", 0x4}, {&(0x7f0000000800)="4f7a08cb", 0x4}, {&(0x7f0000000300)="cc", 0x1}, {&(0x7f00000030c0)="9f7892793cc18fbb", 0x8}, {&(0x7f0000000380)="87288fd6", 0x4}, {&(0x7f00000004c0)="00bd443813", 0x5}, {&(0x7f0000000b00)='l\\', 0x2}, {&(0x7f0000000600)="68f2a042", 0x4}, {&(0x7f0000000640)="796bec", 0x3}, {&(0x7f0000000a80)="aa875a0284fb", 0x6}], 0x11}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x43}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x56}, {{0x0, 0x0, 0x0}, 0x9}], 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="3b7e010000f4ffffff0007f0b1b423", @ANYRES16=r8, @ANYBLOB="100025bd7000fedbdf250800000024000980080001004109861308000100c200000008000200040000000800010006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x20044801) 4.067282869s ago: executing program 5 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc7, 0xe5, 0x8c, 0x8, 0x6cb, 0x7, 0xe0df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xda, 0x0, 0x0, 0x4c, 0x3f, 0x4f}}]}}]}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000000140)) splice(r0, &(0x7f0000000000)=0x7, r0, &(0x7f00000000c0)=0x2, 0x7, 0xd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="1c005e8010000100ffffffff00000000100000000800020000000000"], 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x1407, 0x800, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x806) close(r4) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1218002, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, 0x0, 0x0) mq_timedreceive(r7, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000a50000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/26, 0x1a, 0x0, 0x0}, &(0x7f00000005c0)=0x44) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0xffffffb8, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="ac510016bc53d70bf629a39006a4128f08000000000000009b"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x20880, 0x0) 4.033744846s ago: executing program 2 (id=848): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x9, 0x1, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008"], 0x50}}, 0x4000850) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r5 = dup3(r0, r0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4002090) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x12, 0x4d, 0x52, 0x40, 0x16e3, 0xf9e9, 0x5558, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x1, 0x8f, 0xa6, 0x8d, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x7, 0x4, 0xa, 0x40, 0xb0a, 0x0, 0x8}) recvmmsg$unix(r0, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 3.719067406s ago: executing program 0 (id=849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 3.59948086s ago: executing program 0 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@getchain={0x34, 0x66, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x5, 0x8}, {0x5, 0x5}, {0xa, 0xffe0}}, [{0x8}, {0x8, 0xb, 0x3}]}, 0x34}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/248, 0xf8}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x0, 0xf0}, 0xff}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f6ffffffebffffff00000000000000b19cbe91cb8280b68b984200b604007bafe868adb1306e9c53ed1e670d25c58d48b087a0860000f99575affee59732004000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)}, 0x20) sendmsg$can_j1939(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0x1}, 0xfd}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)="01845114c39a477ae3", 0x9}, 0x1, 0x0, 0x0, 0x48000}, 0x2000c000) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000400)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x2b, 0x2, 0x4002c00, 0xfff8, 0x6, 0x6, 0xe, 0x0, 0x0, 0x80, 0x4}}, 0x50) 3.49661902s ago: executing program 3 (id=851): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r1, @in={{0x2, 0x4e22, @empty}}, 0x7f, 0x3}, 0x90) 3.402632633s ago: executing program 3 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r1, 0x0, 0x0, 0x92, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) setuid(0xee00) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000040)='./file0\x00', 0x2a8, 0x8001) mount(&(0x7f0000000580)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0xffff17f2, 0xc}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r8], &(0x7f00000001c0)=[0xfffffffffffffff7, 0x2], 0x1, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0xd0}, 0x1, 0x0, 0x0, 0x1000}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x0, 'wlan0\x00', {0x4}, 0x31d}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04fd0a20", @ANYRES64], 0xffffffffffffff78) 3.265922929s ago: executing program 1 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001300)=""/102392, 0x18ff8) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'rose0\x00', @ifru_mtu=0xd}) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000000)={0x2, 0x0, {&(0x7f0000000200)=""/152, 0x98, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000880)=""/142, 0xffffff32, 0x0, 0x0, 0x3}}, 0x48) 2.364652999s ago: executing program 1 (id=854): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.160193632s ago: executing program 0 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000002400)='contention_end\x00', r0, 0x0, 0x7}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x408, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [], @ipv4=@dev, [], @ipv6=@mcast1, [], @ipv4=@local}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40c1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000022c0)='./file0\x00', 0xd931d3864d39dc9e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) syz_fuse_handle_req(r6, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000002340)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x401b1010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4fa7, 0xfff, 0x10000, 0x10004, 0x1, 0xcc7, 0x8, 0x7, 0xa, 0x4100, 0x2, 0x4, 0x3, 0x1, 0x6, 0x7fff, 0x0, 0x1a449, 0x2003, 0x40000003, 0x87, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xe69, 0x3c, 0x7, 0x2, 0x0, 0xfffffff8]}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) socket$nl_netfilter(0x10, 0x3, 0xc) 2.159756429s ago: executing program 1 (id=856): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e22}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f00000022c0)='net/dev\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x3, 0xc, &(0x7f0000002580)=ANY=[@ANYRES16, @ANYRES32=r5, @ANYBLOB="34c393c8281fc153d17a486a71c572c17f806038f95e082d77c534b25a4c582d1f634623a4371cff0c0f5e7c5469d536165d1b7831281ede1ae1e221f4631eac066119ef6ec4a260b018e6f0d0d3598aa6881bc2b723ab094d6f27234295266dcfc58c4074fcf95e441847e8df9a5d1b645fe2b1504c03096933912a2189acfba41d1e20345ded5b861e0a55"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES8=r6, @ANYRES16=r5, @ANYBLOB='\x00\x00\x00\x00('], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000020300000000000000000000100c"], 0x0, 0x56}, 0x20) 665.551764ms ago: executing program 0 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000280)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 630.421847ms ago: executing program 5 (id=858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000008000000cc0a000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\r\x00\x00\x00\x00\x00\x00\x00\x00d', @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000001300"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f00000001c0), 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100003042cbd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="a10000000000000008000e00", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0xba01, 0x0, 0x4004}, 0x880) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x40000400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x10000007, 0x4, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x450800, 0x0) ioctl$FIONREAD(r8, 0x541b, &(0x7f00000003c0)) close(r7) socket$unix(0x1, 0x1, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) lseek(r9, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000000140)=0x6f79e82e, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) accept4(r12, 0x0, 0x0, 0x80800) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 350.336606ms ago: executing program 1 (id=859): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000003000000", @ANYRES64=r1, @ANYBLOB="dda49c"], 0x20) 256.291669ms ago: executing program 2 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="e11bbfe981e8daa2fd9470d0130a9ea802706268a8f9a77cc709b1f5be01e4cfa839688434dce49777035709e44f25fdc6a8062df578435b61dc4d1f8de9d2a2e632ebbd1b84e86e90b5f9b3454934a131a29d90ae3866a4deafab6b7125340357f562d22fb8c8da06b5dae5ed1456ff2d4761306ecb81ecb4dd9788d5caf4076eb5d5d9d4f5e9075bdc26fb20cf65ebeb0e0d2ecea491e95f6b5e18fe1f83f21b1df2a8a75c9c6c55afca96b80bfe1d984a33c4d5e4e29f74a4fcb9a4b3407508b94ab5", @ANYRES32=r6, @ANYBLOB="f183beba07000000", @ANYRESOCT=r6, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c946208a263892c280000", @ANYRES16=r1, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f00000001c0)={0x18, 0x0, {0x1003, @local, 'wg1\x00'}}, 0x1e) r11 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r11, 0x2, &(0x7f0000000000)=0x7) (async) sched_setscheduler(r11, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() 0s ago: executing program 1 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000080)="7957d404736da65f9d132319", 0xc}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec", 0x15}, {0x0}, {&(0x7f0000000c80)="c9730cacd7b487a5f1fcc788b619537a38659735adddc726f5ecaecf0aa9c274da3cbb81e6046b8a074da0f6b8de7cdbfca3fcc3aefb575f2dbcda57099dee80c1e643d5d5f9ec324389e08eb574325c84cc6f7aea615f276493371794259767cef9bb46e5da3cdbd7323c6bebfe6728f5d55d430cdf724552cafc99", 0x7c}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) dup2(0xffffffffffffffff, r3) sendmmsg$inet6(r3, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="c8100b8210e864858a792e43", 0xc}], 0x1}}], 0x1, 0x2604082c) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @local, 0x45209587}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x208080, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x4, @local, 0xf}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}], 0x38) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="030402000200050034cf45a5001400680000007390787f000001ac1414aa"], 0x1e) shutdown(r7, 0x2) sendmmsg$inet6(r5, &(0x7f0000000400)=[{{&(0x7f0000000bc0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x8}, 0x6}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000c00)='g', 0x1}], 0x1}}], 0x1, 0x840) (fail_nth: 3) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 81] __netlink_deliver_tap+0x404/0x850 [ 167.961847][ T6681] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.961879][ T6681] netlink_deliver_tap+0x19c/0x1b0 [ 167.961912][ T6681] netlink_unicast+0x730/0x8e0 [ 167.961952][ T6681] netlink_sendmsg+0x805/0xb30 [ 167.961995][ T6681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.962036][ T6681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.962058][ T6681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.962089][ T6681] __sock_sendmsg+0x21c/0x270 [ 167.962120][ T6681] ____sys_sendmsg+0x505/0x830 [ 167.962161][ T6681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.962204][ T6681] ? import_iovec+0x74/0xa0 [ 167.962240][ T6681] ___sys_sendmsg+0x21f/0x2a0 [ 167.962276][ T6681] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.962359][ T6681] ? __fget_files+0x2a/0x420 [ 167.962383][ T6681] ? __fget_files+0x3a0/0x420 [ 167.962420][ T6681] __x64_sys_sendmsg+0x19b/0x260 [ 167.962457][ T6681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.962511][ T6681] ? __pfx_ksys_write+0x10/0x10 [ 167.962529][ T6681] ? rcu_is_watching+0x15/0xb0 [ 167.962559][ T6681] ? do_syscall_64+0xbe/0x3b0 [ 167.962588][ T6681] do_syscall_64+0xfa/0x3b0 [ 167.962611][ T6681] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.962634][ T6681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.962656][ T6681] ? clear_bhb_loop+0x60/0xb0 [ 167.962683][ T6681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.962703][ T6681] RIP: 0033:0x7f97f238ebe9 [ 167.962723][ T6681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.962741][ T6681] RSP: 002b:00007f97f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.962764][ T6681] RAX: ffffffffffffffda RBX: 00007f97f25b5fa0 RCX: 00007f97f238ebe9 [ 167.962780][ T6681] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 167.962793][ T6681] RBP: 00007f97f05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.962806][ T6681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.962818][ T6681] R13: 00007f97f25b6038 R14: 00007f97f25b5fa0 R15: 00007ffd75c33f08 [ 167.962852][ T6681] [ 168.685375][ T6691] dummy0: entered promiscuous mode [ 168.705018][ T6691] bond0: entered promiscuous mode [ 168.710370][ T6691] bond_slave_0: entered promiscuous mode [ 168.720757][ T6691] bond_slave_1: entered promiscuous mode [ 168.742322][ T6691] hsr1: entered allmulticast mode [ 168.786450][ T6691] dummy0: entered allmulticast mode [ 168.813835][ T6691] bond0: entered allmulticast mode [ 168.854863][ T6691] bond_slave_0: entered allmulticast mode [ 168.865982][ T6691] bond_slave_1: entered allmulticast mode [ 169.019986][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 169.040083][ T6699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.433065][ T6708] 9pnet_virtio: no channels available for device syz [ 170.474689][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 171.003265][ T6721] process 'syz.2.195' launched '/dev/fd/5' with NULL argv: empty string added [ 172.995641][ T6743] bond_slave_0: entered promiscuous mode [ 173.001414][ T6743] bond_slave_1: entered promiscuous mode [ 173.012702][ T6743] macsec1: entered promiscuous mode [ 173.018384][ T6743] bond0: entered promiscuous mode [ 173.046226][ T6743] bond0: left promiscuous mode [ 173.056012][ T6743] bond_slave_0: left promiscuous mode [ 173.061539][ T6743] bond_slave_1: left promiscuous mode [ 174.259895][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 176.783863][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 176.851438][ T6786] Bluetooth: MGMT ver 1.23 [ 176.963962][ T6792] bond_slave_0: entered promiscuous mode [ 176.969752][ T6792] bond_slave_1: entered promiscuous mode [ 176.992569][ T6792] macsec1: entered promiscuous mode [ 177.023558][ T6792] bond0: entered promiscuous mode [ 177.117162][ T6792] bond0: left promiscuous mode [ 177.125489][ T6792] bond_slave_0: left promiscuous mode [ 177.131471][ T6792] bond_slave_1: left promiscuous mode [ 181.053792][ T2152] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.625005][ T6831] netlink: 292 bytes leftover after parsing attributes in process `syz.3.225'. [ 181.641597][ T6831] openvswitch: netlink: Key type 16144 is out of range max 32 [ 182.044945][ T5888] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 182.321493][ T5888] usb 3-1: descriptor type invalid, skip [ 182.339624][ T5888] usb 3-1: No LPM exit latency info found, disabling LPM. [ 182.414192][ T5888] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.451611][ T5888] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 183.104435][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.163632][ T5888] usb 3-1: string descriptor 0 read error: -22 [ 183.170303][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.206389][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.975619][ T5888] usb 3-1: 0:2 : does not exist [ 183.984349][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.000060][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.085378][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.122491][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.182173][ T2152] usb 5-1: device descriptor read/all, error -71 [ 184.212259][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.263701][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.331450][ T5888] usb 3-1: USB disconnect, device number 5 [ 184.626096][ T6848] bond_slave_0: entered promiscuous mode [ 184.631885][ T6848] bond_slave_1: entered promiscuous mode [ 185.404866][ T6848] macsec1: entered promiscuous mode [ 185.430600][ T6848] bond0: entered promiscuous mode [ 185.967523][ T6848] bond0: left promiscuous mode [ 185.981872][ T6848] bond_slave_0: left promiscuous mode [ 185.987548][ T6848] bond_slave_1: left promiscuous mode [ 186.776231][ T6874] netlink: 292 bytes leftover after parsing attributes in process `syz.4.236'. [ 186.887903][ T6874] openvswitch: netlink: Key type 16144 is out of range max 32 [ 188.168562][ T6887] netlink: 292 bytes leftover after parsing attributes in process `syz.4.239'. [ 188.208202][ T6887] openvswitch: netlink: Key type 16144 is out of range max 32 [ 189.134037][ T6895] netlink: 292 bytes leftover after parsing attributes in process `syz.4.241'. [ 189.174002][ T6895] openvswitch: netlink: Key type 16144 is out of range max 32 [ 189.598876][ T6896] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 189.980627][ T6901] FAULT_INJECTION: forcing a failure. [ 189.980627][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 189.999473][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.4.243 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 189.999501][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.999516][ T6901] Call Trace: [ 189.999524][ T6901] [ 189.999532][ T6901] dump_stack_lvl+0x189/0x250 [ 189.999563][ T6901] ? __pfx____ratelimit+0x10/0x10 [ 189.999580][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.999597][ T6901] ? __pfx__printk+0x10/0x10 [ 189.999621][ T6901] ? __pfx___might_resched+0x10/0x10 [ 189.999642][ T6901] should_fail_ex+0x414/0x560 [ 189.999662][ T6901] should_failslab+0xa8/0x100 [ 189.999681][ T6901] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.999695][ T6901] ? getname_flags+0xb8/0x540 [ 189.999717][ T6901] getname_flags+0xb8/0x540 [ 189.999738][ T6901] user_path_at+0x24/0x60 [ 189.999760][ T6901] __se_sys_mount+0x2d3/0x410 [ 189.999782][ T6901] ? __pfx___se_sys_mount+0x10/0x10 [ 189.999803][ T6901] ? do_syscall_64+0xbe/0x3b0 [ 189.999819][ T6901] ? __x64_sys_mount+0x20/0xc0 [ 189.999838][ T6901] do_syscall_64+0xfa/0x3b0 [ 189.999856][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.999870][ T6901] ? asm_sysvec_call_function_single+0x1a/0x20 [ 189.999886][ T6901] ? clear_bhb_loop+0x60/0xb0 [ 189.999904][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.999918][ T6901] RIP: 0033:0x7f067538ebe9 [ 189.999936][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.999949][ T6901] RSP: 002b:00007f0676293038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.999970][ T6901] RAX: ffffffffffffffda RBX: 00007f06755b6090 RCX: 00007f067538ebe9 [ 189.999981][ T6901] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 189.999991][ T6901] RBP: 00007f0676293090 R08: 0000200000000000 R09: 0000000000000000 [ 190.000001][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.000010][ T6901] R13: 00007f06755b6128 R14: 00007f06755b6090 R15: 00007fffbfb74448 [ 190.000033][ T6901] [ 190.211048][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.375184][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 192.578812][ T6919] sp0: Synchronizing with TNC [ 192.602037][ T6919] sp0: Found TNC [ 192.854165][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.013772][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 193.031368][ T5888] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 193.048853][ T5888] usb 5-1: config 4 has no interface number 0 [ 193.059277][ T5888] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 193.071150][ T5888] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.082152][ T5888] usb 5-1: config 4 interface 51 has no altsetting 0 [ 193.094319][ T5888] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 193.111498][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.121049][ T5888] usb 5-1: Product: syz [ 193.126547][ T5888] usb 5-1: Manufacturer: syz [ 193.131788][ T5888] usb 5-1: SerialNumber: syz [ 193.157393][ T6919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.192451][ T6919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.412440][ T6919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.442302][ T6919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.677316][ T5888] cdc_eem 5-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.4-1, CDC EEM Device, 66:d0:40:80:3c:79 [ 193.786349][ T6928] overlayfs: conflicting lowerdir path [ 194.225189][ T6934] futex_wake_op: syz.3.252 tries to shift op by -1; fix this program [ 194.238803][ T5888] usb 5-1: USB disconnect, device number 9 [ 194.284162][ T6934] netlink: 'syz.3.252': attribute type 11 has an invalid length. [ 194.358334][ T5888] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device [ 194.691298][ T6940] tipc: Started in network mode [ 194.734659][ T6940] tipc: Node identity 7f000001, cluster identity 4711 [ 194.785236][ T6940] tipc: Enabled bearer , priority 10 [ 194.945289][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.954686][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.125959][ T5921] tipc: Node number set to 2130706433 [ 196.199523][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.256'. [ 196.564928][ T5921] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.707997][ T6968] macsec1: entered allmulticast mode [ 196.713854][ T6968] macvlan1: entered allmulticast mode [ 196.719386][ T6968] veth1_vlan: entered allmulticast mode [ 196.777408][ T6968] macvlan1: left allmulticast mode [ 196.823973][ T6968] veth1_vlan: left allmulticast mode [ 196.923536][ T5921] usb 2-1: device descriptor read/64, error -71 [ 197.263490][ T5921] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 197.413437][ T5921] usb 2-1: device descriptor read/64, error -71 [ 197.545494][ T5921] usb usb2-port1: attempt power cycle [ 197.991821][ T6983] macsec1: entered allmulticast mode [ 197.997930][ T6983] macvlan1: entered allmulticast mode [ 198.003589][ T6983] veth1_vlan: entered allmulticast mode [ 198.033886][ T6983] macvlan1: left allmulticast mode [ 198.039480][ T6983] veth1_vlan: left allmulticast mode [ 198.701882][ T6994] rdma_rxe: rxe_newlink: failed to add lo [ 199.533569][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.540746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.556068][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 201.880189][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.077324][ T43] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=31.44 [ 202.107214][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.413461][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 203.288012][ T43] usb 3-1: config 0 descriptor?? [ 203.469819][ T43] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 204.385476][ T5956] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.500050][ T7043] macsec1: entered allmulticast mode [ 204.506560][ T7043] macvlan1: entered allmulticast mode [ 204.512358][ T7043] veth1_vlan: entered allmulticast mode [ 204.564128][ T5956] usb 1-1: device descriptor read/64, error -71 [ 204.703629][ T7043] macvlan1: left allmulticast mode [ 204.709113][ T7043] veth1_vlan: left allmulticast mode [ 205.281540][ T43] pwc: Failed to set LED on/off time (-71) [ 205.300470][ T5956] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.328093][ T43] pwc: send_video_command error -71 [ 205.371501][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 205.402695][ T7049] netlink: 'syz.4.274': attribute type 2 has an invalid length. [ 205.413356][ T43] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 205.438741][ T7049] netlink: 244 bytes leftover after parsing attributes in process `syz.4.274'. [ 205.472776][ T43] usb 3-1: USB disconnect, device number 6 [ 205.493238][ T5956] usb 1-1: device descriptor read/64, error -71 [ 205.647128][ T5956] usb usb1-port1: attempt power cycle [ 206.363290][ T5956] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.416343][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 206.804704][ T5956] usb 1-1: device not accepting address 12, error -71 [ 207.666280][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 207.666319][ T30] audit: type=1326 audit(1755301703.321:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 207.954194][ T7074] netlink: 292 bytes leftover after parsing attributes in process `syz.0.279'. [ 207.954382][ T7075] openvswitch: netlink: Key type 16144 is out of range max 32 [ 208.144725][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.663304][ T5921] usb 4-1: device descriptor read/64, error -71 [ 208.706698][ T30] audit: type=1326 audit(1755301703.321:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 208.732288][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.814012][ T30] audit: type=1326 audit(1755301703.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 208.887202][ T30] audit: type=1326 audit(1755301703.321:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 209.023951][ T30] audit: type=1326 audit(1755301703.321:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 209.050691][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.133270][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.251888][ T30] audit: type=1326 audit(1755301703.441:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 209.325825][ T30] audit: type=1326 audit(1755301703.441:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e558ebe9 code=0x7ffc0000 [ 209.358309][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.370968][ T5921] usb 4-1: device descriptor read/64, error -71 [ 209.484538][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 209.626109][ T5921] usb usb4-port1: attempt power cycle [ 210.375161][ T7084] netlink: 132 bytes leftover after parsing attributes in process `syz.1.282'. [ 210.602927][ T5921] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.716331][ T5921] usb 4-1: device descriptor read/8, error -71 [ 211.377203][ T7102] macsec1: entered allmulticast mode [ 211.484292][ T7102] macvlan1: entered allmulticast mode [ 211.583502][ T7102] veth1_vlan: entered allmulticast mode [ 211.721748][ T7102] macvlan1: left allmulticast mode [ 211.747757][ T7102] veth1_vlan: left allmulticast mode [ 211.924107][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 212.243582][ T5842] Bluetooth: hci2: command 0x0405 tx timeout [ 212.623566][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.799322][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 212.991631][ T5921] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 213.043301][ T5921] usb 5-1: config 2 has no interface number 0 [ 213.082979][ T5921] usb 5-1: config 2 interface 31 has no altsetting 0 [ 213.137920][ T5921] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 213.167405][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.229932][ T5921] usb 5-1: Product: syz [ 213.248058][ T5921] usb 5-1: Manufacturer: syz [ 213.273241][ T5921] usb 5-1: SerialNumber: syz [ 213.594497][ T7132] rdma_rxe: rxe_newlink: failed to add lo [ 213.761507][ T7143] bond_slave_0: entered promiscuous mode [ 213.768925][ T7143] bond_slave_1: entered promiscuous mode [ 213.777956][ T7116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.804275][ T7116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.907745][ T5921] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 213.924165][ T7143] macsec1: entered promiscuous mode [ 213.929517][ T7143] bond0: entered promiscuous mode [ 214.865730][ T5921] usb 5-1: USB disconnect, device number 10 [ 214.902651][ T7143] bond0: left promiscuous mode [ 214.909004][ T7143] bond_slave_0: left promiscuous mode [ 214.915912][ T7143] bond_slave_1: left promiscuous mode [ 215.273644][ T7154] fuse: Unknown parameter 'fv*0x0000000000000009' [ 223.276657][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.306'. [ 224.319068][ T7218] macsec1: entered allmulticast mode [ 224.319117][ T7218] macvlan1: entered allmulticast mode [ 224.319149][ T7218] veth1_vlan: entered allmulticast mode [ 224.415088][ T5914] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 224.784537][ T7218] macvlan1: left allmulticast mode [ 224.784559][ T7218] veth1_vlan: left allmulticast mode [ 224.825068][ T5914] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 224.825092][ T5914] usb 5-1: config 0 has no interface number 0 [ 224.825122][ T5914] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 224.825140][ T5914] usb 5-1: config 0 interface 200 has no altsetting 0 [ 224.827215][ T5914] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 224.827239][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.827254][ T5914] usb 5-1: Product: syz [ 224.827265][ T5914] usb 5-1: Manufacturer: syz [ 224.827277][ T5914] usb 5-1: SerialNumber: syz [ 224.829528][ T5914] usb 5-1: config 0 descriptor?? [ 225.224675][ T5914] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input10 [ 225.253488][ T5914] usb 5-1: USB disconnect, device number 11 [ 225.537436][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.539028][ T5840] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 225.539477][ T5840] Bluetooth: hci2: unexpected event for opcode 0x203e [ 225.548832][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 225.828925][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 225.838669][ T5888] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.838693][ T5888] usb 4-1: config 0 has no interface number 0 [ 225.838723][ T5888] usb 4-1: config 0 interface 184 has no altsetting 0 [ 225.845184][ T5888] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.845219][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.845241][ T5888] usb 4-1: Product: syz [ 225.845259][ T5888] usb 4-1: Manufacturer: syz [ 225.845288][ T5888] usb 4-1: SerialNumber: syz [ 225.987886][ T7237] netlink: 292 bytes leftover after parsing attributes in process `syz.1.316'. [ 226.045029][ T7237] openvswitch: netlink: Key type 16144 is out of range max 32 [ 226.323403][ T5888] usb 4-1: config 0 descriptor?? [ 226.526690][ T5888] smsc75xx v1.0.0 [ 227.277256][ T5888] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 227.289994][ T5888] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 227.364723][ T5888] usb 4-1: USB disconnect, device number 10 [ 227.549018][ T7251] ALSA: mixer_oss: invalid OSS volume '' [ 227.556395][ T7251] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 227.579206][ T7251] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 227.611272][ T7251] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 227.621963][ T7251] ALSA: mixer_oss: invalid OSS volume 'y' [ 227.631515][ T7251] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 227.643211][ T7251] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 228.168584][ T7251] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 228.214209][ T7251] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 228.261014][ T7251] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 228.279249][ T7251] ALSA: mixer_oss: invalid OSS volume '' [ 228.292896][ T7251] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 228.372689][ T7251] ALSA: mixer_oss: invalid OSS volume '^&8HLV^\LP&҉\' [ 228.891716][ T7251] ALSA: mixer_oss: invalid OSS volume '82p<2Iq܁¹UAԺ%A' [ 228.931024][ T7251] ALSA: mixer_oss: invalid OSS volume 'Q' [ 228.972956][ T7251] ALSA: mixer_oss: invalid OSS volume '$~i[r2LN' [ 229.007895][ T7251] ALSA: mixer_oss: invalid OSS volume 'U' [ 229.028997][ T7251] ALSA: mixer_oss: invalid OSS volume 'ѥvvcr^IjDw?q)' [ 229.044742][ T7251] ALSA: mixer_oss: invalid OSS volume '#yw܏#YqNȠ' [ 229.066081][ T7251] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 229.087665][ T7251] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 230.042064][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.052109][ T7251] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 230.063047][ T7251] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 230.907156][ T7283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.153322][ T5842] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 232.214056][ T9] usb 5-1: USB disconnect, device number 12 [ 233.190312][ T7313] ref_ctr_offset mismatch. inode: 0x19b offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 234.354513][ T2152] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.464844][ T7299] lo speed is unknown, defaulting to 1000 [ 234.548177][ T2152] usb 2-1: device descriptor read/64, error -71 [ 234.624436][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 235.263472][ T2152] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.450692][ T30] audit: type=1800 audit(1755301734.861:25): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.339" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 240.372777][ T7380] FAULT_INJECTION: forcing a failure. [ 240.372777][ T7380] name failslab, interval 1, probability 0, space 0, times 0 [ 240.480726][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.4.347 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 240.480755][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.480768][ T7380] Call Trace: [ 240.480776][ T7380] [ 240.480785][ T7380] dump_stack_lvl+0x189/0x250 [ 240.480813][ T7380] ? __pfx____ratelimit+0x10/0x10 [ 240.480836][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.480860][ T7380] ? __pfx__printk+0x10/0x10 [ 240.480893][ T7380] ? __pfx___might_resched+0x10/0x10 [ 240.480923][ T7380] should_fail_ex+0x414/0x560 [ 240.480950][ T7380] should_failslab+0xa8/0x100 [ 240.480976][ T7380] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 240.480998][ T7380] ? __alloc_skb+0x112/0x2d0 [ 240.481041][ T7380] __alloc_skb+0x112/0x2d0 [ 240.481075][ T7380] netlink_sendmsg+0x5c6/0xb30 [ 240.481117][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.481156][ T7380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.481177][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.481209][ T7380] __sock_sendmsg+0x21c/0x270 [ 240.481237][ T7380] ____sys_sendmsg+0x505/0x830 [ 240.481276][ T7380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.481319][ T7380] ? import_iovec+0x74/0xa0 [ 240.481354][ T7380] ___sys_sendmsg+0x21f/0x2a0 [ 240.481391][ T7380] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.481462][ T7380] ? __fget_files+0x2a/0x420 [ 240.481486][ T7380] ? __fget_files+0x3a0/0x420 [ 240.481522][ T7380] __x64_sys_sendmsg+0x19b/0x260 [ 240.481559][ T7380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.481613][ T7380] ? __pfx_ksys_write+0x10/0x10 [ 240.481632][ T7380] ? rcu_is_watching+0x15/0xb0 [ 240.481661][ T7380] ? do_syscall_64+0xbe/0x3b0 [ 240.481689][ T7380] do_syscall_64+0xfa/0x3b0 [ 240.481710][ T7380] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.481730][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.481756][ T7380] ? clear_bhb_loop+0x60/0xb0 [ 240.481781][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.481801][ T7380] RIP: 0033:0x7f067538ebe9 [ 240.481819][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.481837][ T7380] RSP: 002b:00007f06762b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.481859][ T7380] RAX: ffffffffffffffda RBX: 00007f06755b5fa0 RCX: 00007f067538ebe9 [ 240.481873][ T7380] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 240.481885][ T7380] RBP: 00007f06762b4090 R08: 0000000000000000 R09: 0000000000000000 [ 240.481897][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.481909][ T7380] R13: 00007f06755b6038 R14: 00007f06755b5fa0 R15: 00007fffbfb74448 [ 240.481941][ T7380] [ 240.747011][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.045209][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 242.019696][ T2152] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 242.221569][ T2152] usb 3-1: device descriptor read/64, error -71 [ 242.512856][ T2152] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.683365][ T2152] usb 3-1: device descriptor read/64, error -71 [ 242.810008][ T2152] usb usb3-port1: attempt power cycle [ 243.302303][ T2152] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 243.373893][ T2152] usb 3-1: device descriptor read/8, error -71 [ 243.655386][ T2152] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 243.661625][ T7418] macsec1: entered allmulticast mode [ 243.696277][ T7418] macvlan1: entered allmulticast mode [ 243.726219][ T7418] veth1_vlan: entered allmulticast mode [ 243.756606][ T2152] usb 3-1: device descriptor read/8, error -71 [ 243.793007][ T5956] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.022129][ T7418] macvlan1: left allmulticast mode [ 244.028773][ T7418] veth1_vlan: left allmulticast mode [ 244.075584][ T2152] usb usb3-port1: unable to enumerate USB device [ 244.250058][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 244.371271][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 244.919066][ T5956] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.930480][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.945326][ T5956] usb 5-1: Product: syz [ 244.967163][ T5956] usb 5-1: Manufacturer: syz [ 245.006873][ T5956] usb 5-1: SerialNumber: syz [ 245.036337][ T5956] usb 5-1: config 0 descriptor?? [ 245.057916][ T5956] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 246.126442][ T5956] usb 5-1: USB disconnect, device number 13 [ 246.857813][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 247.882728][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.111884][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 249.826440][ T7468] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.368'. [ 250.997406][ T5888] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 251.479769][ T5888] usb 1-1: device descriptor read/64, error -71 [ 251.691997][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 251.766186][ T5888] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.903267][ T5888] usb 1-1: device descriptor read/64, error -71 [ 252.024954][ T5888] usb usb1-port1: attempt power cycle [ 252.813501][ T5888] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 253.368894][ T5888] usb 1-1: device descriptor read/8, error -71 [ 254.183278][ T5888] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 254.244192][ T5888] usb 1-1: device descriptor read/8, error -71 [ 254.505622][ T5888] usb usb1-port1: unable to enumerate USB device [ 255.485159][ T7513] netlink: 52 bytes leftover after parsing attributes in process `syz.0.378'. [ 257.345335][ T7536] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 257.438748][ T7536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.617624][ T7543] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 258.247748][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 260.623327][ T5901] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 260.629485][ T7566] netlink: 292 bytes leftover after parsing attributes in process `syz.3.391'. [ 260.724481][ T7566] openvswitch: netlink: Key type 16144 is out of range max 32 [ 261.064985][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.071963][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.321874][ T5901] usb 5-1: device descriptor read/64, error -71 [ 261.565560][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 261.597150][ T7574] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.191044][ T5921] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 262.355080][ T5921] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.370300][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.393090][ T5921] usb 4-1: config 0 descriptor?? [ 262.777559][ T5921] cp210x 4-1:0.0: cp210x converter detected [ 264.353988][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 265.799162][ T5921] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 265.813323][ T5921] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 265.827642][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.866686][ T5921] usb 4-1: cp210x converter now attached to ttyUSB0 [ 265.884128][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.910922][ T5921] usb 4-1: USB disconnect, device number 11 [ 265.937965][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.938596][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 265.952619][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.010314][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.036891][ T5921] cp210x 4-1:0.0: device disconnected [ 266.066580][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.154739][ T9] usb 2-1: config 0 descriptor?? [ 266.199853][ T9] usb 2-1: can't set config #0, error -71 [ 266.286635][ T9] usb 2-1: USB disconnect, device number 17 [ 267.414430][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.703377][ T5921] usb 3-1: device descriptor read/64, error -71 [ 267.981775][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 268.018198][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 268.543277][ T5921] usb 3-1: device descriptor read/64, error -71 [ 268.807950][ T5921] usb usb3-port1: attempt power cycle [ 270.582132][ T7655] fuse: Bad value for 'fd' [ 270.613854][ T2152] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.793705][ T2152] usb 4-1: Using ep0 maxpacket: 16 [ 270.806932][ T2152] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.832401][ T2152] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.847978][ T2152] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.858481][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.869591][ T2152] usb 4-1: Product: syz [ 270.880828][ T2152] usb 4-1: Manufacturer: syz [ 270.887610][ T2152] usb 4-1: SerialNumber: syz [ 270.893288][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 271.111525][ T5921] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 271.151308][ T2152] usb 4-1: 0:2 : does not exist [ 271.173536][ T2152] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 271.258231][ T2152] usb 4-1: USB disconnect, device number 12 [ 271.278024][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 271.288208][ T5921] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.322030][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.332744][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.357294][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.378625][ T9] usb 5-1: config 0 has no interface number 0 [ 271.397159][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 271.454448][ T5921] usb 3-1: config 0 descriptor?? [ 271.463998][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.480445][ T9] usb 5-1: Product: syz [ 271.488636][ T5921] cp210x 3-1:0.0: cp210x converter detected [ 271.512987][ T9] usb 5-1: Manufacturer: syz [ 271.528665][ T9] usb 5-1: SerialNumber: syz [ 271.549594][ T9] usb 5-1: config 0 descriptor?? [ 271.567906][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 271.580958][ T9] usb 5-1: selecting invalid altsetting 1 [ 271.588225][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 271.760556][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.954472][ T5921] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 271.973436][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 272.104354][ T9] usb 5-1: media controller created [ 272.182612][ T5921] usb 3-1: cp210x converter now attached to ttyUSB0 [ 272.249974][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.528925][ T7672] ======================================================= [ 272.528925][ T7672] WARNING: The mand mount option has been deprecated and [ 272.528925][ T7672] and is ignored by this kernel. Remove the mand [ 272.528925][ T7672] option from the mount to silence this warning. [ 272.528925][ T7672] ======================================================= [ 273.113547][ T7657] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 273.305376][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 273.355861][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 273.395155][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 273.726662][ T9] usb 5-1: USB disconnect, device number 16 [ 274.244872][ T5901] usb 3-1: USB disconnect, device number 14 [ 274.252700][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.421'. [ 274.274792][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.310782][ T5901] cp210x 3-1:0.0: device disconnected [ 274.488533][ T7687] bond_slave_0: entered promiscuous mode [ 274.494384][ T7687] bond_slave_1: entered promiscuous mode [ 274.501531][ T7687] macsec1: entered promiscuous mode [ 274.550949][ T7687] bond0: entered promiscuous mode [ 275.646420][ T7687] bond0: left promiscuous mode [ 275.652200][ T7687] bond_slave_0: left promiscuous mode [ 275.657857][ T7687] bond_slave_1: left promiscuous mode [ 275.780818][ T7695] netlink: 128 bytes leftover after parsing attributes in process `syz.2.423'. [ 278.421191][ T7716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 278.743828][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 279.082116][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 279.180266][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 279.214371][ T24] usb 2-1: can't read configurations, error -22 [ 280.193355][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 280.363268][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 280.379255][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 280.387708][ T24] usb 2-1: can't read configurations, error -22 [ 280.422239][ T24] usb usb2-port1: attempt power cycle [ 280.793709][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 280.829546][ T7740] netlink: 292 bytes leftover after parsing attributes in process `syz.3.433'. [ 281.140562][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 281.157572][ T24] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 281.187956][ T24] usb 2-1: can't read configurations, error -22 [ 281.364464][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 281.406688][ T7745] vivid-000: disconnect [ 281.454926][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 281.464710][ T7743] vivid-000: reconnect [ 281.579828][ T24] usb 2-1: device descriptor read/all, error -71 [ 281.613472][ T24] usb usb2-port1: unable to enumerate USB device [ 283.829601][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'. [ 286.998965][ T7804] FAULT_INJECTION: forcing a failure. [ 286.998965][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.012303][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.0.452 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 287.012324][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.012333][ T7804] Call Trace: [ 287.012340][ T7804] [ 287.012346][ T7804] dump_stack_lvl+0x189/0x250 [ 287.012369][ T7804] ? __pfx____ratelimit+0x10/0x10 [ 287.012385][ T7804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.012402][ T7804] ? __pfx__printk+0x10/0x10 [ 287.012422][ T7804] ? __might_fault+0xb0/0x130 [ 287.012446][ T7804] should_fail_ex+0x414/0x560 [ 287.012465][ T7804] _copy_from_user+0x2d/0xb0 [ 287.012488][ T7804] __sys_bpf+0x1ed/0x860 [ 287.012512][ T7804] ? __pfx___sys_bpf+0x10/0x10 [ 287.012544][ T7804] ? ksys_write+0x22a/0x250 [ 287.012561][ T7804] ? __pfx_ksys_write+0x10/0x10 [ 287.012573][ T7804] ? rcu_is_watching+0x15/0xb0 [ 287.012596][ T7804] __x64_sys_bpf+0x7c/0x90 [ 287.012617][ T7804] do_syscall_64+0xfa/0x3b0 [ 287.012634][ T7804] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.012650][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.012665][ T7804] ? clear_bhb_loop+0x60/0xb0 [ 287.012684][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.012698][ T7804] RIP: 0033:0x7f22e098ebe9 [ 287.012712][ T7804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.012734][ T7804] RSP: 002b:00007f22e18b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.012751][ T7804] RAX: ffffffffffffffda RBX: 00007f22e0bb5fa0 RCX: 00007f22e098ebe9 [ 287.012762][ T7804] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 287.012772][ T7804] RBP: 00007f22e18b3090 R08: 0000000000000000 R09: 0000000000000000 [ 287.012781][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.012790][ T7804] R13: 00007f22e0bb6038 R14: 00007f22e0bb5fa0 R15: 00007ffd60855d88 [ 287.012813][ T7804] [ 287.203315][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.262532][ T7802] netlink: 136 bytes leftover after parsing attributes in process `syz.3.451'. [ 287.329225][ T7802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.683395][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 288.846666][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 288.899625][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 289.130979][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.455745][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.473372][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.488661][ T10] usb 4-1: Product: syz [ 289.513214][ T10] usb 4-1: Manufacturer: syz [ 289.519996][ T10] usb 4-1: SerialNumber: syz [ 291.068713][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 291.484109][ T10] usb 4-1: 0:2 : does not exist [ 292.888253][ T10] usb 4-1: USB disconnect, device number 13 [ 292.959786][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.243658][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 294.206233][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 294.215031][ T9] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 294.231344][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 294.374168][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 294.484061][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.518935][ T9] usb 5-1: Product: syz [ 294.703053][ T9] usb 5-1: Manufacturer: syz [ 294.713210][ T9] usb 5-1: SerialNumber: syz [ 295.770943][ T24] IPVS: starting estimator thread 0... [ 295.788688][ T7854] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.996450][ T7875] ip6gretap1: entered allmulticast mode [ 296.235049][ T7873] IPVS: using max 20 ests per chain, 48000 per kthread [ 296.629834][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 296.640820][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 296.673053][ T9] usb 5-1: USB disconnect, device number 17 [ 296.895482][ T30] audit: type=1400 audit(1755302304.563:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7879 comm="syz.3.471" src=1 dest=20000 netif=wpan0 [ 299.424155][ T7901] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 301.433367][ T5840] Bluetooth: hci5: command 0x1003 tx timeout [ 301.440301][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.422540][ T7914] rdma_rxe: rxe_newlink: failed to add lo [ 305.444697][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 305.636488][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 305.683406][ T2152] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 305.691680][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.934954][ T2152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.964145][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.974673][ T2152] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.989530][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.013571][ T2152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.033073][ T2152] usb 3-1: config 0 descriptor?? [ 306.042973][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 306.061612][ T2152] pwc: Askey VC010 type 2 USB webcam detected. [ 306.071525][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.117559][ T24] usb 1-1: config 0 descriptor?? [ 306.326644][ T24] appletouch 1-1:0.0: Failed to read mode from device. [ 306.335124][ T5956] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 306.343949][ T24] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 306.390854][ T24] usb 1-1: USB disconnect, device number 18 [ 306.480261][ T2152] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.499973][ T2152] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.508811][ T2152] pwc: recv_control_msg error -32 req 02 val 2c00 [ 306.516020][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 306.540451][ T5956] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 306.550440][ T2152] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.589523][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.669579][ T2152] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.949473][ T2152] pwc: recv_control_msg error -32 req 02 val 2000 [ 307.141641][ T2152] pwc: recv_control_msg error -32 req 02 val 2100 [ 307.155248][ T5956] pvrusb2: Hardware description: Terratec Grabster AV400 [ 307.325631][ T2152] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.347128][ T2152] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.354112][ T5956] pvrusb2: ********** [ 307.358324][ T5956] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 307.369664][ T5956] pvrusb2: Important functionality might not be entirely working. [ 307.386528][ T2152] pwc: recv_control_msg error -32 req 02 val 2400 [ 307.432767][ T5956] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 307.614808][ T2152] pwc: recv_control_msg error -71 req 02 val 2900 [ 307.693700][ T2152] pwc: recv_control_msg error -71 req 02 val 2800 [ 308.400538][ T5956] pvrusb2: ********** [ 308.418827][ T2152] pwc: recv_control_msg error -71 req 04 val 1100 [ 308.449627][ T2343] pvrusb2: Invalid write control endpoint [ 308.465175][ T2152] pwc: recv_control_msg error -71 req 04 val 1200 [ 308.501035][ T2152] pwc: Registered as video103. [ 308.542563][ T2152] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 308.617573][ T2152] usb 3-1: USB disconnect, device number 15 [ 309.312226][ T2343] pvrusb2: Invalid write control endpoint [ 309.506098][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 309.520184][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 309.550237][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 309.720237][ T2343] pvrusb2: Device being rendered inoperable [ 309.878969][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 310.343764][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 310.400686][ T2343] pvrusb2: Attached sub-driver cx25840 [ 310.993367][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.048436][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.324685][ T9] usb 4-1: USB disconnect, device number 14 [ 311.405619][ T7926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.777801][ T7968] loop7: detected capacity change from 0 to 524255232 [ 312.107003][ T7963] rdma_rxe: rxe_newlink: failed to add lo [ 312.160022][ T7960] netlink: 292 bytes leftover after parsing attributes in process `syz.4.492'. [ 312.186935][ T7960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 312.265980][ T7968] Dev loop7: unable to read RDB block 8 [ 312.272191][ T7968] loop7: unable to read partition table [ 312.360035][ T7968] loop_reread_partitions: partition scan of loop7 (3 ) failed (rc=-5) [ 312.411491][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 312.487076][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.495'. [ 312.536173][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 312.631138][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.497'. [ 313.449836][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.496'. [ 313.704974][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 313.764588][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.498'. [ 317.247024][ T8017] macsec1: entered allmulticast mode [ 317.252540][ T8017] macvlan1: entered allmulticast mode [ 317.260184][ T8017] veth1_vlan: entered allmulticast mode [ 317.578837][ T8017] macvlan1: left allmulticast mode [ 317.586577][ T8017] veth1_vlan: left allmulticast mode [ 317.640885][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 317.731723][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 317.772506][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 317.815148][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 317.991135][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.041889][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.065116][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.076554][ T8042] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 318.086408][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.096003][ T8042] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 318.109649][ T10] usb 4-1: SerialNumber: syz [ 318.146173][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 319.211739][ T10] usb 4-1: 0:2 : does not exist [ 319.336784][ T10] usb 4-1: USB disconnect, device number 15 [ 319.417132][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.633293][ T5921] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 319.893373][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 319.944502][ T5921] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.115576][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.331204][ T5921] usb 3-1: Product: syz [ 320.453213][ T5921] usb 3-1: Manufacturer: syz [ 320.465737][ T5921] usb 3-1: SerialNumber: syz [ 320.491953][ T5921] usb 3-1: config 0 descriptor?? [ 321.544986][ T5921] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 322.427154][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.435511][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.374471][ T5921] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 323.447023][ T5921] usb 3-1: USB disconnect, device number 16 [ 324.309395][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 326.603012][ T8130] vlan2: entered promiscuous mode [ 326.627511][ T8130] macvtap0: entered promiscuous mode [ 327.554630][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 327.563646][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 330.597649][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 331.543172][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 332.173441][ T5914] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 332.182598][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.200633][ T5914] usb 4-1: Product: syz [ 332.206179][ T5914] usb 4-1: Manufacturer: syz [ 332.210871][ T5914] usb 4-1: SerialNumber: syz [ 332.224431][ T5914] usb 4-1: config 0 descriptor?? [ 333.165096][ T8195] ALSA: mixer_oss: invalid OSS volume '' [ 333.171013][ T8195] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 333.179885][ T8195] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 333.189675][ T8195] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 333.196980][ T8195] ALSA: mixer_oss: invalid OSS volume 'y' [ 333.203419][ T8195] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 333.211858][ T8195] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 333.219771][ T8195] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 333.228248][ T8195] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 333.265406][ T8195] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 333.279097][ T8195] ALSA: mixer_oss: invalid OSS volume '' [ 333.288453][ T8195] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 333.302759][ T8195] ALSA: mixer_oss: invalid OSS volume '^&8HLV^\LP&҉\' [ 333.312560][ T8195] ALSA: mixer_oss: invalid OSS volume '82p<2Iq܁¹UAԺ%A' [ 333.326474][ T8195] ALSA: mixer_oss: invalid OSS volume 'Q' [ 333.343247][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 333.355643][ T8195] ALSA: mixer_oss: invalid OSS volume '$~i[r2LN' [ 333.363261][ T8195] ALSA: mixer_oss: invalid OSS volume 'U' [ 333.369360][ T8195] ALSA: mixer_oss: invalid OSS volume 'ѥvvcr^IjDw?q)' [ 333.385116][ T8195] ALSA: mixer_oss: invalid OSS volume '#yw܏#YqNȠ' [ 333.394324][ T8195] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 333.403021][ T8195] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 334.640210][ T8195] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 334.669814][ T8195] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 334.680491][ T5914] usb 4-1: f81604_read: reg: 200e failed: -EPROTO [ 334.703484][ T5914] usb 4-1: USB disconnect, device number 16 [ 334.930483][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.950083][ T5914] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 334.964263][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 336.783362][ T5888] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 337.275066][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 337.424193][ T5914] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 337.673979][ T5888] usb 5-1: device descriptor read/64, error -71 [ 337.720820][ T5921] usb 2-1: USB disconnect, device number 22 [ 338.041456][ T5888] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 338.213227][ T5888] usb 5-1: device descriptor read/64, error -71 [ 338.323689][ T5888] usb usb5-port1: attempt power cycle [ 338.346250][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.563'. [ 339.251313][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 340.004118][ T5888] usb 5-1: device descriptor read/8, error -71 [ 340.663562][ T5888] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 340.683712][ T5888] usb 5-1: device descriptor read/8, error -71 [ 340.816968][ T5888] usb usb5-port1: unable to enumerate USB device [ 342.446161][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 342.860329][ T8263] syz_tun: left promiscuous mode [ 342.950171][ T8263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.969665][ T5888] lo speed is unknown, defaulting to 1000 [ 343.885689][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 344.084618][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.576'. [ 345.573303][ T5914] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 346.457137][ T8304] macsec1: entered allmulticast mode [ 346.532365][ T5914] usb 3-1: device descriptor read/64, error -71 [ 346.596833][ T8304] macvlan1: entered allmulticast mode [ 346.726923][ T8304] veth1_vlan: entered allmulticast mode [ 346.783209][ T8304] macvlan1: left allmulticast mode [ 346.788476][ T8304] veth1_vlan: left allmulticast mode [ 346.876515][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 347.263449][ T5914] usb 3-1: device descriptor read/64, error -71 [ 347.383727][ T5914] usb usb3-port1: attempt power cycle [ 347.795213][ T5914] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 347.859149][ T5914] usb 3-1: device descriptor read/8, error -71 [ 348.866026][ T5914] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 349.064920][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 349.838800][ T8347] FAULT_INJECTION: forcing a failure. [ 349.838800][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.852618][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: syz.1.590 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 349.852647][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.852671][ T8347] Call Trace: [ 349.852681][ T8347] [ 349.852692][ T8347] dump_stack_lvl+0x189/0x250 [ 349.852724][ T8347] ? __pfx____ratelimit+0x10/0x10 [ 349.852748][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.852773][ T8347] ? __pfx__printk+0x10/0x10 [ 349.852801][ T8347] ? __might_fault+0xb0/0x130 [ 349.852837][ T8347] should_fail_ex+0x414/0x560 [ 349.852867][ T8347] _copy_from_user+0x2d/0xb0 [ 349.852899][ T8347] input_event_from_user+0xb2/0x280 [ 349.852925][ T8347] ? __pfx_input_event_from_user+0x10/0x10 [ 349.852950][ T8347] ? get_pid_task+0x20/0x1f0 [ 349.852989][ T8347] evdev_write+0x2a6/0x480 [ 349.853017][ T8347] ? __pfx_evdev_write+0x10/0x10 [ 349.853040][ T8347] ? bpf_lsm_file_permission+0x9/0x20 [ 349.853063][ T8347] ? security_file_permission+0x75/0x290 [ 349.853092][ T8347] ? rw_verify_area+0x258/0x650 [ 349.853124][ T8347] ? __pfx_evdev_write+0x10/0x10 [ 349.853146][ T8347] vfs_write+0x27e/0xa90 [ 349.853177][ T8347] ? __pfx_vfs_write+0x10/0x10 [ 349.853198][ T8347] ? __fget_files+0x2a/0x420 [ 349.853226][ T8347] ? __fget_files+0x2a/0x420 [ 349.853248][ T8347] ? __fget_files+0x3a0/0x420 [ 349.853270][ T8347] ? __fget_files+0x2a/0x420 [ 349.853302][ T8347] ksys_write+0x145/0x250 [ 349.853325][ T8347] ? __pfx_ksys_write+0x10/0x10 [ 349.853342][ T8347] ? rcu_is_watching+0x15/0xb0 [ 349.853372][ T8347] ? do_syscall_64+0xbe/0x3b0 [ 349.853400][ T8347] do_syscall_64+0xfa/0x3b0 [ 349.853421][ T8347] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.853444][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.853466][ T8347] ? clear_bhb_loop+0x60/0xb0 [ 349.853493][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.853514][ T8347] RIP: 0033:0x7f97f238ebe9 [ 349.853534][ T8347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.853561][ T8347] RSP: 002b:00007f97f05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.853583][ T8347] RAX: ffffffffffffffda RBX: 00007f97f25b5fa0 RCX: 00007f97f238ebe9 [ 349.853600][ T8347] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 349.853614][ T8347] RBP: 00007f97f05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.853628][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.853641][ T8347] R13: 00007f97f25b6038 R14: 00007f97f25b5fa0 R15: 00007ffd75c33f08 [ 349.853677][ T8347] [ 349.878009][ T5914] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 351.118833][ T8354] rdma_rxe: rxe_newlink: failed to add lo [ 351.517874][ T5914] usb 3-1: config 0 has no interface number 0 [ 351.525238][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.004900][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 352.097852][ T5914] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 352.129669][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 352.157653][ T5914] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 352.400707][ T8363] bond_slave_0: entered promiscuous mode [ 352.406483][ T8363] bond_slave_1: entered promiscuous mode [ 352.412263][ T8363] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 352.421245][ T8363] macsec1: entered promiscuous mode [ 352.426848][ T8363] bond0: entered promiscuous mode [ 352.542679][ T8365] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 353.504578][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.515072][ T5914] usb 3-1: config 0 descriptor?? [ 353.522556][ T5914] usb 3-1: can't set config #0, error -71 [ 353.532126][ T5914] usb 3-1: USB disconnect, device number 20 [ 353.571077][ T8363] bond0: left promiscuous mode [ 353.577803][ T8363] bond_slave_0: left promiscuous mode [ 353.583322][ T8363] bond_slave_1: left promiscuous mode [ 353.590002][ T8363] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 354.671487][ T8387] netlink: 'syz.3.600': attribute type 11 has an invalid length. [ 356.410093][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 356.683375][ T5901] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 356.916339][ T5901] usb 5-1: config index 0 descriptor too short (expected 61256, got 72) [ 356.997588][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 357.673270][ T5901] usb 5-1: config 1 has an invalid interface number: 0 but max is -1 [ 357.749696][ T5901] usb 5-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config [ 357.822725][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 357.848675][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 357.895873][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.948022][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.951481][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 358.005596][ T8430] tipc: Enabling of bearer rejected, already enabled [ 358.021102][ T5901] usb 5-1: SerialNumber: syz [ 358.087228][ T5901] cdc_acm 5-1:1.0: skipping garbage [ 358.119425][ T5901] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 358.146962][ T5901] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 358.197447][ T5901] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 358.411759][ T5901] usb 5-1: USB disconnect, device number 22 [ 359.206418][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 359.513295][ T8447] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.613'. [ 360.344070][ T8458] rdma_rxe: rxe_newlink: failed to add lo [ 365.461014][ T8486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.619'. [ 365.860315][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 367.668198][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 370.253857][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 370.580379][ T8532] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 370.660504][ T8530] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 372.509393][ T8556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.637'. [ 373.954779][ T8565] bond_slave_0: entered promiscuous mode [ 373.960611][ T8565] bond_slave_1: entered promiscuous mode [ 373.981871][ T8565] macsec1: entered promiscuous mode [ 373.987408][ T8565] bond0: entered promiscuous mode [ 374.026833][ T8565] bond0: left promiscuous mode [ 374.037277][ T8565] bond_slave_0: left promiscuous mode [ 374.042835][ T8565] bond_slave_1: left promiscuous mode [ 375.483444][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 376.440584][ T8584] netlink: 'syz.0.646': attribute type 11 has an invalid length. [ 376.443303][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 376.523390][ T5956] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 376.557154][ T5956] usb 2-1: config 0 has no interface number 0 [ 376.575532][ T5956] usb 2-1: config 0 interface 184 has no altsetting 0 [ 376.641894][ T8580] macsec1: entered allmulticast mode [ 376.647370][ T8580] macvlan1: entered allmulticast mode [ 376.652786][ T8580] veth1_vlan: entered allmulticast mode [ 376.663444][ T5956] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 376.679542][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.693750][ T8590] FAULT_INJECTION: forcing a failure. [ 376.693750][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 376.723540][ T8580] macvlan1: left allmulticast mode [ 376.728817][ T8580] veth1_vlan: left allmulticast mode [ 376.750622][ T5956] usb 2-1: Product: syz [ 376.791992][ T5956] usb 2-1: Manufacturer: syz [ 376.813151][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.3.648 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 376.813182][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.813200][ T8590] Call Trace: [ 376.813217][ T8590] [ 376.813226][ T8590] dump_stack_lvl+0x189/0x250 [ 376.813255][ T8590] ? __pfx____ratelimit+0x10/0x10 [ 376.813277][ T8590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.813298][ T8590] ? __pfx__printk+0x10/0x10 [ 376.813329][ T8590] ? __pfx___might_resched+0x10/0x10 [ 376.813349][ T8590] ? fs_reclaim_acquire+0x7d/0x100 [ 376.813379][ T8590] should_fail_ex+0x414/0x560 [ 376.813404][ T8590] should_failslab+0xa8/0x100 [ 376.813428][ T8590] __kmalloc_noprof+0xcb/0x4f0 [ 376.813446][ T8590] ? video_usercopy+0x18f/0x14f0 [ 376.813481][ T8590] video_usercopy+0x18f/0x14f0 [ 376.813516][ T8590] ? smk_tskacc+0x2fc/0x370 [ 376.813550][ T8590] ? __pfx___video_do_ioctl+0x10/0x10 [ 376.813582][ T8590] ? __pfx_video_usercopy+0x10/0x10 [ 376.813611][ T8590] ? smack_file_ioctl+0x2a9/0x340 [ 376.813649][ T8590] ? __fget_files+0x2a/0x420 [ 376.813671][ T8590] ? __fget_files+0x3a0/0x420 [ 376.813701][ T8590] v4l2_ioctl+0x18a/0x1e0 [ 376.813732][ T8590] ? __pfx_v4l2_ioctl+0x10/0x10 [ 376.813762][ T8590] __se_sys_ioctl+0xfc/0x170 [ 376.813791][ T8590] do_syscall_64+0xfa/0x3b0 [ 376.813810][ T8590] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.813828][ T8590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.813845][ T8590] ? clear_bhb_loop+0x60/0xb0 [ 376.813866][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.813882][ T8590] RIP: 0033:0x7f79e558ebe9 [ 376.813898][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.813913][ T8590] RSP: 002b:00007f79e63a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.813932][ T8590] RAX: ffffffffffffffda RBX: 00007f79e57b5fa0 RCX: 00007f79e558ebe9 [ 376.813945][ T8590] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 376.813957][ T8590] RBP: 00007f79e63a6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.813968][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.813979][ T8590] R13: 00007f79e57b6038 R14: 00007f79e57b5fa0 R15: 00007ffedd54ad38 [ 376.814006][ T8590] [ 376.814174][ T5956] usb 2-1: SerialNumber: syz [ 377.317230][ T5956] usb 2-1: config 0 descriptor?? [ 377.364337][ T5956] smsc75xx v1.0.0 [ 378.308097][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'. [ 378.619951][ T5956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 378.834288][ T5956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.120928][ T8612] netlink: 64 bytes leftover after parsing attributes in process `syz.3.654'. [ 379.793292][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 379.985699][ T24] usb 3-1: device descriptor read/64, error -71 [ 380.311931][ T5956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 380.336212][ T5956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 380.367324][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 380.390135][ T5956] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 380.410387][ T5956] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 380.430748][ T5956] usb 2-1: USB disconnect, device number 23 [ 380.543942][ T24] usb 3-1: device descriptor read/64, error -71 [ 380.787665][ T24] usb usb3-port1: attempt power cycle [ 382.998146][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 383.241661][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 383.262643][ T24] usb 3-1: device descriptor read/8, error -71 [ 383.533384][ T8652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.662'. [ 383.860509][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.870752][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.625090][ T8659] tipc: Failed to remove unknown binding: 66,1,1/0:2506223017/2506223019 [ 384.635551][ T8659] tipc: Failed to remove unknown binding: 66,1,1/0:2506223017/2506223019 [ 384.644451][ T8659] tipc: Failed to remove unknown binding: 66,1,1/0:2506223017/2506223019 [ 385.191405][ T8659] netlink: 'syz.1.664': attribute type 153 has an invalid length. [ 385.835452][ T8673] Cannot find add_set index 0 as target [ 386.938007][ T8675] FAULT_INJECTION: forcing a failure. [ 386.938007][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 387.003360][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.1.667 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 387.003392][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.003406][ T8675] Call Trace: [ 387.003415][ T8675] [ 387.003424][ T8675] dump_stack_lvl+0x189/0x250 [ 387.003456][ T8675] ? __pfx____ratelimit+0x10/0x10 [ 387.003480][ T8675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.003505][ T8675] ? __pfx__printk+0x10/0x10 [ 387.003536][ T8675] ? __pfx___might_resched+0x10/0x10 [ 387.003560][ T8675] ? fs_reclaim_acquire+0x7d/0x100 [ 387.003593][ T8675] should_fail_ex+0x414/0x560 [ 387.003621][ T8675] should_failslab+0xa8/0x100 [ 387.003648][ T8675] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 387.003671][ T8675] ? __alloc_skb+0x112/0x2d0 [ 387.003705][ T8675] __alloc_skb+0x112/0x2d0 [ 387.003738][ T8675] br_vlan_notify+0x281/0x750 [ 387.003768][ T8675] br_process_vlan_info+0x35b/0x890 [ 387.003797][ T8675] ? kasan_save_track+0x4f/0x80 [ 387.003827][ T8675] ? kasan_save_free_info+0x46/0x50 [ 387.003854][ T8675] ? __pfx_br_process_vlan_info+0x10/0x10 [ 387.003873][ T8675] ? dev_hard_start_xmit+0x2d7/0x830 [ 387.003892][ T8675] ? __dev_queue_xmit+0x1adf/0x3a70 [ 387.003913][ T8675] ? __netlink_deliver_tap+0x5ad/0x850 [ 387.003943][ T8675] ? netlink_deliver_tap+0x19c/0x1b0 [ 387.003971][ T8675] ? netlink_unicast+0x730/0x8e0 [ 387.003997][ T8675] ? __sock_sendmsg+0x21c/0x270 [ 387.004019][ T8675] ? ____sys_sendmsg+0x505/0x830 [ 387.004049][ T8675] ? ___sys_sendmsg+0x21f/0x2a0 [ 387.004095][ T8675] br_afspec+0x395/0x5f0 [ 387.004128][ T8675] ? __pfx_br_afspec+0x10/0x10 [ 387.004164][ T8675] br_setlink+0x280/0x800 [ 387.004193][ T8675] ? __pfx_br_setlink+0x10/0x10 [ 387.004257][ T8675] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 387.004288][ T8675] ? mutex_is_locked+0x17/0x50 [ 387.004317][ T8675] rtnl_bridge_setlink+0x5b2/0x7d0 [ 387.004356][ T8675] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 387.004396][ T8675] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 387.004426][ T8675] rtnetlink_rcv_msg+0x779/0xb70 [ 387.004458][ T8675] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 387.004485][ T8675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.004511][ T8675] ? ref_tracker_free+0x63a/0x7d0 [ 387.004533][ T8675] ? __copy_skb_header+0xa7/0x550 [ 387.004556][ T8675] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.004593][ T8675] netlink_rcv_skb+0x205/0x470 [ 387.004624][ T8675] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.004655][ T8675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.004701][ T8675] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.004731][ T8675] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.004768][ T8675] netlink_unicast+0x75c/0x8e0 [ 387.004809][ T8675] netlink_sendmsg+0x805/0xb30 [ 387.004852][ T8675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.004893][ T8675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.004915][ T8675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.004947][ T8675] __sock_sendmsg+0x21c/0x270 [ 387.004977][ T8675] ____sys_sendmsg+0x505/0x830 [ 387.005018][ T8675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.005074][ T8675] ? import_iovec+0x74/0xa0 [ 387.005108][ T8675] ___sys_sendmsg+0x21f/0x2a0 [ 387.005142][ T8675] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.005212][ T8675] ? __fget_files+0x2a/0x420 [ 387.005235][ T8675] ? __fget_files+0x3a0/0x420 [ 387.005271][ T8675] __x64_sys_sendmsg+0x19b/0x260 [ 387.005307][ T8675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.005352][ T8675] ? __pfx_ksys_write+0x10/0x10 [ 387.005370][ T8675] ? rcu_is_watching+0x15/0xb0 [ 387.005401][ T8675] ? do_syscall_64+0xbe/0x3b0 [ 387.005430][ T8675] do_syscall_64+0xfa/0x3b0 [ 387.005452][ T8675] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.005474][ T8675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.005495][ T8675] ? clear_bhb_loop+0x60/0xb0 [ 387.005521][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.005542][ T8675] RIP: 0033:0x7f97f238ebe9 [ 387.005562][ T8675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.005579][ T8675] RSP: 002b:00007f97f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.005602][ T8675] RAX: ffffffffffffffda RBX: 00007f97f25b5fa0 RCX: 00007f97f238ebe9 [ 387.005618][ T8675] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 387.005631][ T8675] RBP: 00007f97f05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.005644][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.005657][ T8675] R13: 00007f97f25b6038 R14: 00007f97f25b5fa0 R15: 00007ffd75c33f08 [ 387.005690][ T8675] [ 387.672922][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 387.680282][ T8689] netlink: 'syz.4.670': attribute type 11 has an invalid length. [ 387.803411][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 388.313445][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 388.461304][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.521778][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.693281][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.756194][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 388.797204][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.029175][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 389.541955][ T8709] rdma_rxe: rxe_newlink: failed to add lo [ 390.034720][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.042791][ T24] usb 3-1: Manufacturer: syz [ 390.159811][ T24] usb 3-1: config 0 descriptor?? [ 390.181464][ T8707] macsec1: entered allmulticast mode [ 390.187026][ T8707] macvlan1: entered allmulticast mode [ 390.192418][ T8707] veth1_vlan: entered allmulticast mode [ 390.220182][ T8707] macvlan1: left allmulticast mode [ 390.226570][ T8707] veth1_vlan: left allmulticast mode [ 390.242290][ T24] usb 3-1: can't set config #0, error -71 [ 390.597545][ T8721] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 390.669147][ T8723] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 390.720614][ T8723] bridge_slave_1: left allmulticast mode [ 390.726658][ T8723] bridge_slave_1: left promiscuous mode [ 390.734755][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.896251][ T24] usb 3-1: USB disconnect, device number 25 [ 391.257449][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.682'. [ 391.280330][ T8734] block nbd0: not configured, cannot reconfigure [ 391.291270][ T8723] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 391.725187][ T5921] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5921 comm: kworker/0:6) [ 393.359123][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 394.038293][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'. [ 396.661845][ T30] audit: type=1326 audit(1755302660.316:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 396.744247][ T30] audit: type=1326 audit(1755302660.346:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 396.807479][ T30] audit: type=1326 audit(1755302660.346:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 396.902263][ T30] audit: type=1326 audit(1755302660.346:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 396.923688][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.953034][ T8810] binder: BINDER_SET_CONTEXT_MGR already set [ 396.960264][ T8810] binder: 8807:8810 ioctl 4018620d 200000000040 returned -16 [ 396.974550][ T8812] autofs: Unknown parameter './file0' [ 396.993173][ T30] audit: type=1326 audit(1755302660.366:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 397.026249][ T8810] binder: 8807:8810 ioctl 3ba0 200000000240 returned -22 [ 397.089945][ T30] audit: type=1326 audit(1755302660.366:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 397.191756][ T8816] netlink: 'syz.0.699': attribute type 6 has an invalid length. [ 397.206829][ T30] audit: type=1326 audit(1755302660.366:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 397.341435][ T8817] input: syz0 as /devices/virtual/input/input13 [ 397.409257][ T30] audit: type=1326 audit(1755302660.366:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22e098d550 code=0x7ffc0000 [ 397.433294][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 397.560542][ T30] audit: type=1326 audit(1755302660.366:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22e098d550 code=0x7ffc0000 [ 397.709578][ T30] audit: type=1326 audit(1755302660.366:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.0.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e098ebe9 code=0x7ffc0000 [ 397.740295][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 397.815009][ T5901] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 397.881446][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.941492][ T5901] usb 4-1: config 0 has no interface number 0 [ 398.035865][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 398.096748][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.146925][ T5901] usb 4-1: Product: syz [ 398.188770][ T5901] usb 4-1: Manufacturer: syz [ 398.222337][ T5901] usb 4-1: SerialNumber: syz [ 398.320515][ T5901] usb 4-1: config 0 descriptor?? [ 398.374659][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'. [ 398.427891][ T5901] usb 4-1: Found UVC 0.00 device syz (046d:08c3) [ 398.450317][ T5901] usb 4-1: No valid video chain found. [ 401.556231][ T5921] usb 4-1: USB disconnect, device number 17 [ 403.660440][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 404.235127][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 404.866601][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 404.970901][ T8860] loop6: detected capacity change from 0 to 7 [ 405.018108][ T6013] Dev loop6: unable to read RDB block 7 [ 405.059728][ T6013] loop6: unable to read partition table [ 405.080407][ T6013] loop6: partition table beyond EOD, truncated [ 405.213866][ T8865] syz_tun: entered allmulticast mode [ 405.289806][ T8865] dvmrp1: entered allmulticast mode [ 405.399035][ T8866] netlink: 104 bytes leftover after parsing attributes in process `syz.1.714'. [ 406.026853][ T8864] syz_tun: left allmulticast mode [ 406.206224][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.218118][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.227488][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.237288][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.250383][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.261712][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.281634][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.296660][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.307472][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.317443][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.329024][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.341169][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.367565][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.377620][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.391754][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.401762][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.440961][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.450459][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.480894][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.531577][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.570613][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.592702][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.600901][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.692077][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 406.715709][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.033578][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.090737][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.149916][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.160103][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.168026][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.207248][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.223502][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.252672][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.273910][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.296867][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.384236][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.425975][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.466618][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.509735][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.554178][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.598698][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.623180][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.649558][ T977] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 407.751393][ T977] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.727735][ T8883] fido_id[8883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 409.213033][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 409.499350][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.538446][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.547150][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.555818][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.565676][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.620782][ T8890] lo speed is unknown, defaulting to 1000 [ 411.629184][ T5840] Bluetooth: hci5: command tx timeout [ 413.673397][ T977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 413.681945][ T5840] Bluetooth: hci5: command tx timeout [ 413.836035][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 413.846488][ T977] usb 3-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 413.857063][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.895077][ T977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.904611][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.927512][ T977] usb 3-1: Product: syz [ 413.936974][ T977] usb 3-1: Manufacturer: syz [ 413.946847][ T977] usb 3-1: SerialNumber: syz [ 415.016344][ T977] usb 3-1: 0:2 : does not exist [ 415.289025][ T977] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 415.563377][ T977] usb 3-1: USB disconnect, device number 26 [ 415.777190][ T5840] Bluetooth: hci5: command tx timeout [ 416.091595][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 416.340703][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.478299][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 417.626288][ T6037] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.671660][ T8959] FAULT_INJECTION: forcing a failure. [ 417.671660][ T8959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.685593][ T8959] CPU: 0 UID: 0 PID: 8959 Comm: syz.1.739 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 417.685623][ T8959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.685638][ T8959] Call Trace: [ 417.685647][ T8959] [ 417.685663][ T8959] dump_stack_lvl+0x189/0x250 [ 417.685694][ T8959] ? __pfx____ratelimit+0x10/0x10 [ 417.685718][ T8959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.685743][ T8959] ? __pfx__printk+0x10/0x10 [ 417.685771][ T8959] ? __might_fault+0xb0/0x130 [ 417.685805][ T8959] should_fail_ex+0x414/0x560 [ 417.685834][ T8959] _copy_from_user+0x2d/0xb0 [ 417.685865][ T8959] ___sys_recvmsg+0x12e/0x510 [ 417.685893][ T8959] ? __pfx____sys_recvmsg+0x10/0x10 [ 417.685942][ T8959] ? __fget_files+0x3a0/0x420 [ 417.685979][ T8959] do_recvmmsg+0x307/0x770 [ 417.686009][ T8959] ? __pfx_do_recvmmsg+0x10/0x10 [ 417.686044][ T8959] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.686091][ T8959] __x64_sys_recvmmsg+0x190/0x240 [ 417.686115][ T8959] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 417.686143][ T8959] ? do_syscall_64+0xbe/0x3b0 [ 417.686172][ T8959] do_syscall_64+0xfa/0x3b0 [ 417.686194][ T8959] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.686217][ T8959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.686238][ T8959] ? clear_bhb_loop+0x60/0xb0 [ 417.686265][ T8959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.686285][ T8959] RIP: 0033:0x7f97f238ebe9 [ 417.686304][ T8959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.686323][ T8959] RSP: 002b:00007f97f05d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 417.686346][ T8959] RAX: ffffffffffffffda RBX: 00007f97f25b6090 RCX: 00007f97f238ebe9 [ 417.686362][ T8959] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 417.686376][ T8959] RBP: 00007f97f05d5090 R08: 0000000000000000 R09: 0000000000000000 [ 417.686389][ T8959] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 417.686402][ T8959] R13: 00007f97f25b6128 R14: 00007f97f25b6090 R15: 00007ffd75c33f08 [ 417.686436][ T8959] [ 417.835215][ T5840] Bluetooth: hci5: command tx timeout [ 417.851604][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.191999][ T6037] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.358472][ T8964] ALSA: mixer_oss: invalid OSS volume '' [ 418.370965][ T8964] ALSA: mixer_oss: invalid OSS volume 'udFdsj@Jug0cd' [ 418.442083][ T6037] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.454340][ T8964] ALSA: mixer_oss: invalid OSS volume 'NW֓YZS%fV' [ 418.464388][ T8964] ALSA: mixer_oss: invalid OSS volume ''lȿDTBxN' [ 418.472603][ T8964] ALSA: mixer_oss: invalid OSS volume 'y' [ 418.480040][ T8964] ALSA: mixer_oss: invalid OSS volume '5y}9r~M+3' [ 418.490730][ T8964] ALSA: mixer_oss: invalid OSS volume '϶*kC9d7띦2;"' [ 418.499422][ T8964] ALSA: mixer_oss: invalid OSS volume '*ndV8mE5:4' [ 418.508734][ T8964] ALSA: mixer_oss: invalid OSS volume 'PKڵ1} {N&Ia 8*ʇ' [ 418.518123][ T8964] ALSA: mixer_oss: invalid OSS volume 'OC"['m/AO^G&-' [ 418.528215][ T8964] ALSA: mixer_oss: invalid OSS volume '' [ 418.534760][ T8964] ALSA: mixer_oss: invalid OSS volume '@HV-=f#o)U.N' [ 418.545200][ T8964] ALSA: mixer_oss: invalid OSS volume '^&8HLV^\LP&҉\' [ 418.555496][ T8964] ALSA: mixer_oss: invalid OSS volume '82p<2Iq܁¹UAԺ%A' [ 418.565000][ T8964] ALSA: mixer_oss: invalid OSS volume 'Q' [ 418.573612][ T8964] ALSA: mixer_oss: invalid OSS volume '$~i[r2LN' [ 418.592957][ T8964] ALSA: mixer_oss: invalid OSS volume 'U' [ 418.600883][ T8964] ALSA: mixer_oss: invalid OSS volume 'ѥvvcr^IjDw?q)' [ 418.610281][ T8964] ALSA: mixer_oss: invalid OSS volume '#yw܏#YqNȠ' [ 418.620514][ T8964] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 418.629803][ T8964] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 418.850969][ T8964] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 418.862977][ T8964] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 418.899160][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.910207][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.923945][ T8890] bridge_slave_0: entered allmulticast mode [ 418.999569][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.342314][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 419.373322][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.382133][ T8890] bridge_slave_0: entered promiscuous mode [ 419.499562][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.533516][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.554181][ T5888] usb 4-1: config 0 descriptor?? [ 419.583375][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.605387][ T8890] bridge_slave_1: entered allmulticast mode [ 419.618896][ T8890] bridge_slave_1: entered promiscuous mode [ 421.047668][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 421.718874][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.758898][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.783094][ T5888] usb 4-1: string descriptor 0 read error: -71 [ 421.804380][ T977] Process accounting resumed [ 421.828537][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 421.843555][ T5888] usb 4-1: USB disconnect, device number 18 [ 421.977510][ T8890] team0: Port device team_slave_0 added [ 422.132512][ T8890] team0: Port device team_slave_1 added [ 422.755919][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.767193][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.802096][ T8999] Process accounting resumed [ 422.832951][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.859296][ T6037] bridge_slave_0: left allmulticast mode [ 422.871669][ T6037] bridge_slave_0: left promiscuous mode [ 422.893313][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.903410][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 423.054660][ T5901] usb 4-1: device descriptor read/64, error -71 [ 423.364142][ T5901] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 423.513509][ T5901] usb 4-1: device descriptor read/64, error -71 [ 423.657904][ T5901] usb usb4-port1: attempt power cycle [ 424.013222][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 424.049309][ T5901] usb 4-1: device descriptor read/8, error -71 [ 424.313218][ T5901] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 424.328144][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.344380][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.357797][ T5901] usb 4-1: device descriptor read/8, error -71 [ 424.364704][ T6037] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 424.412806][ T6037] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 424.430373][ T6037] bond0 (unregistering): Released all slaves [ 424.483623][ T5901] usb usb4-port1: unable to enumerate USB device [ 424.568022][ T6037] bond1 (unregistering): Released all slaves [ 424.594352][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.601619][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.629282][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.051871][ T8890] hsr_slave_0: entered promiscuous mode [ 425.060570][ T8890] hsr_slave_1: entered promiscuous mode [ 425.080337][ T8890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.100703][ T8890] Cannot create hsr debugfs directory [ 426.153310][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 426.274184][ T9039] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 427.518861][ T6037] hsr_slave_0: left promiscuous mode [ 427.553171][ T6037] hsr_slave_1: left promiscuous mode [ 427.564293][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.572354][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.581721][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.591006][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.701653][ T6037] veth1_macvtap: left promiscuous mode [ 427.708304][ T6037] veth0_macvtap: left promiscuous mode [ 427.759507][ T6037] veth1_vlan: left promiscuous mode [ 427.793829][ T6037] veth0_vlan: left promiscuous mode [ 428.035986][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 429.608747][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 429.658134][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 430.846343][ T977] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 431.131289][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 431.186373][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 431.399463][ T8890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.015797][ T977] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 432.019433][ T8890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.079287][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.124369][ T977] usb 1-1: config 0 descriptor?? [ 432.264876][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 432.291716][ T8890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.333916][ T8890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.354236][ T9099] netlink: 68 bytes leftover after parsing attributes in process `syz.3.777'. [ 432.375274][ T6037] IPVS: stop unused estimator thread 0... [ 432.598640][ T977] holtek 0003:1241:5015.0003: item fetching failed at offset 0/11 [ 432.628295][ T977] holtek 0003:1241:5015.0003: parse failed [ 432.647480][ T977] holtek 0003:1241:5015.0003: probe with driver holtek failed with error -22 [ 432.651246][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.702378][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.715995][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.723516][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.783421][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.791021][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.930463][ T8890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 432.985117][ T8890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.191602][ T9119] FAULT_INJECTION: forcing a failure. [ 433.191602][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 433.205154][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.3.780 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.205184][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.205199][ T9119] Call Trace: [ 433.205208][ T9119] [ 433.205217][ T9119] dump_stack_lvl+0x189/0x250 [ 433.205248][ T9119] ? __pfx____ratelimit+0x10/0x10 [ 433.205272][ T9119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.205297][ T9119] ? __pfx__printk+0x10/0x10 [ 433.205332][ T9119] ? __pfx___might_resched+0x10/0x10 [ 433.205363][ T9119] should_fail_ex+0x414/0x560 [ 433.205391][ T9119] should_failslab+0xa8/0x100 [ 433.205417][ T9119] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 433.205441][ T9119] ? __alloc_skb+0x112/0x2d0 [ 433.205476][ T9119] __alloc_skb+0x112/0x2d0 [ 433.205511][ T9119] netlink_sendmsg+0x5c6/0xb30 [ 433.205543][ T9119] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.205581][ T9119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.205621][ T9119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.205644][ T9119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.205676][ T9119] __sock_sendmsg+0x21c/0x270 [ 433.205706][ T9119] ____sys_sendmsg+0x505/0x830 [ 433.205747][ T9119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.205792][ T9119] ? import_iovec+0x74/0xa0 [ 433.205826][ T9119] ___sys_sendmsg+0x21f/0x2a0 [ 433.205863][ T9119] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.205895][ T9119] ? preempt_schedule_common+0x83/0xd0 [ 433.205957][ T9119] ? __fget_files+0x2a/0x420 [ 433.205982][ T9119] ? __fget_files+0x3a0/0x420 [ 433.206018][ T9119] __x64_sys_sendmsg+0x19b/0x260 [ 433.206196][ T9119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.206258][ T9119] do_syscall_64+0xfa/0x3b0 [ 433.206285][ T9119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.206306][ T9119] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 433.206328][ T9119] ? clear_bhb_loop+0x60/0xb0 [ 433.206355][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.206377][ T9119] RIP: 0033:0x7f79e558ebe9 [ 433.206397][ T9119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.206416][ T9119] RSP: 002b:00007f79e6364038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.206439][ T9119] RAX: ffffffffffffffda RBX: 00007f79e57b6180 RCX: 00007f79e558ebe9 [ 433.206456][ T9119] RDX: 000000000400c014 RSI: 0000200000000340 RDI: 0000000000000009 [ 433.206470][ T9119] RBP: 00007f79e6364090 R08: 0000000000000000 R09: 0000000000000000 [ 433.206484][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.206497][ T9119] R13: 00007f79e57b6218 R14: 00007f79e57b6180 R15: 00007ffedd54ad38 [ 433.206532][ T9119] [ 433.465934][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.046071][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 434.329246][ T5901] usb 1-1: USB disconnect, device number 19 [ 434.643715][ T977] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 434.803457][ T977] usb 3-1: device descriptor read/64, error -71 [ 435.179012][ T977] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 435.495416][ T977] usb 3-1: device descriptor read/64, error -71 [ 436.035918][ T977] usb usb3-port1: attempt power cycle [ 436.753707][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.970785][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.786'. [ 438.130964][ T9152] openvswitch: netlink: Key type 16144 is out of range max 32 [ 438.371481][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 438.436781][ T9156] netlink: 68 bytes leftover after parsing attributes in process `syz.2.789'. [ 438.539433][ T9162] ubi31: attaching mtd0 [ 438.540724][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.791'. [ 438.570872][ T9162] ubi31: scanning is finished [ 438.585091][ T9163] fuse: Bad value for 'fd' [ 438.589259][ T9162] ubi31: empty MTD device detected [ 440.011487][ T8890] veth0_vlan: entered promiscuous mode [ 440.062198][ T8890] veth1_vlan: entered promiscuous mode [ 440.152703][ T8890] veth0_macvtap: entered promiscuous mode [ 440.239210][ T9162] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 440.249894][ T8890] veth1_macvtap: entered promiscuous mode [ 440.372120][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.422695][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.546590][ T8890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.561746][ T8890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.739528][ T8890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.896816][ T8890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.747109][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.834707][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.001609][ T9202] macsec1: entered allmulticast mode [ 444.013298][ T9202] macvlan1: entered allmulticast mode [ 444.039252][ T9202] veth1_vlan: entered allmulticast mode [ 444.081410][ T9202] macvlan1: left allmulticast mode [ 444.103609][ T9202] veth1_vlan: left allmulticast mode [ 445.012585][ T9213] nvme_fabrics: missing parameter 'transport=%s' [ 445.055531][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.058445][ T9213] nvme_fabrics: missing parameter 'nqn=%s' [ 445.105421][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.229756][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 445.278771][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.285469][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.493894][ T9228] FAULT_INJECTION: forcing a failure. [ 445.493894][ T9228] name failslab, interval 1, probability 0, space 0, times 0 [ 445.506708][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.2.807 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 445.506739][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.506752][ T9228] Call Trace: [ 445.506762][ T9228] [ 445.506772][ T9228] dump_stack_lvl+0x189/0x250 [ 445.506803][ T9228] ? __pfx____ratelimit+0x10/0x10 [ 445.506828][ T9228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.506854][ T9228] ? __pfx__printk+0x10/0x10 [ 445.506889][ T9228] ? __pfx___might_resched+0x10/0x10 [ 445.506922][ T9228] should_fail_ex+0x414/0x560 [ 445.506951][ T9228] should_failslab+0xa8/0x100 [ 445.506978][ T9228] __kmalloc_noprof+0xcb/0x4f0 [ 445.506999][ T9228] ? kfree+0x4d/0x440 [ 445.507029][ T9228] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.507075][ T9228] tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.507121][ T9228] tomoyo_check_open_permission+0x1c1/0x3b0 [ 445.507147][ T9228] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 445.507171][ T9228] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 445.507194][ T9228] ? preempt_schedule_irq+0xde/0x150 [ 445.507254][ T9228] ? preempt_schedule_thunk+0x16/0x30 [ 445.507286][ T9228] ? mnt_get_write_access+0x68/0x2a0 [ 445.507316][ T9228] ? mnt_get_write_access+0x23f/0x2a0 [ 445.507345][ T9228] ? tomoyo_file_open+0x166/0x220 [ 445.507381][ T9228] security_file_open+0xb1/0x270 [ 445.507409][ T9228] do_dentry_open+0x35e/0x1970 [ 445.507456][ T9228] vfs_open+0x3b/0x340 [ 445.507481][ T9228] ? path_openat+0x2ecd/0x3830 [ 445.507516][ T9228] path_openat+0x2ee5/0x3830 [ 445.507588][ T9228] ? __pfx_path_openat+0x10/0x10 [ 445.507633][ T9228] ? irqentry_exit+0x74/0x90 [ 445.507663][ T9228] do_filp_open+0x1fa/0x410 [ 445.507698][ T9228] ? __pfx_do_filp_open+0x10/0x10 [ 445.507728][ T9228] ? preempt_schedule_common+0x83/0xd0 [ 445.507771][ T9228] ? __pfx_kfree_link+0x10/0x10 [ 445.507805][ T9228] ? _raw_spin_unlock+0x3f/0x50 [ 445.507838][ T9228] ? alloc_fd+0x64c/0x6c0 [ 445.507875][ T9228] do_sys_openat2+0x121/0x1c0 [ 445.507908][ T9228] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.507953][ T9228] __x64_sys_openat+0x138/0x170 [ 445.507990][ T9228] do_syscall_64+0xfa/0x3b0 [ 445.508016][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.508037][ T9228] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 445.508068][ T9228] ? clear_bhb_loop+0x60/0xb0 [ 445.508095][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.508117][ T9228] RIP: 0033:0x7f1790f8d550 [ 445.508136][ T9228] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 445.508156][ T9228] RSP: 002b:00007f1791dcdf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 445.508179][ T9228] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1790f8d550 [ 445.508195][ T9228] RDX: 0000000000000002 RSI: 00007f1791dcdfa0 RDI: 00000000ffffff9c [ 445.508210][ T9228] RBP: 00007f1791dcdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 445.508224][ T9228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 445.508237][ T9228] R13: 00007f17911b6218 R14: 00007f17911b6180 R15: 00007fff406a45a8 [ 445.508272][ T9228] [ 445.508306][ T9228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.003439][ T9232] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.809'. [ 446.201767][ T9235] dlm: non-version read from control device 240 [ 448.851956][ T9237] mkiss: ax0: crc mode is auto. [ 450.411145][ T9275] bond_slave_0: entered promiscuous mode [ 450.417068][ T9275] bond_slave_1: entered promiscuous mode [ 450.422860][ T9275] syz_tun: entered promiscuous mode [ 450.471056][ T9275] macsec1: entered promiscuous mode [ 450.476741][ T9275] bond0: entered promiscuous mode [ 450.569276][ T9275] bond0: left promiscuous mode [ 450.616799][ T9275] bond_slave_0: left promiscuous mode [ 450.622300][ T9275] bond_slave_1: left promiscuous mode [ 450.627792][ T9275] syz_tun: left promiscuous mode [ 450.955991][ T9261] Bluetooth: hci5: command 0x0405 tx timeout [ 451.663240][ T9276] macsec1: entered allmulticast mode [ 451.668768][ T9276] macvlan1: entered allmulticast mode [ 451.674805][ T9276] veth1_vlan: entered allmulticast mode [ 451.750884][ T9276] macvlan1: left allmulticast mode [ 451.758300][ T9276] veth1_vlan: left allmulticast mode [ 452.036217][ T9284] macsec1: entered allmulticast mode [ 452.075660][ T9284] macvlan1: entered allmulticast mode [ 452.099051][ T9284] veth1_vlan: entered allmulticast mode [ 452.141966][ T9284] macvlan1: left allmulticast mode [ 452.174051][ T9284] veth1_vlan: left allmulticast mode [ 452.773421][ T9305] binfmt_misc: register: failed to install interpreter file ./file0 [ 453.210366][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 456.945698][ T9326] 9pnet_fd: Insufficient options for proto=fd [ 456.966925][ T9326] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.829' resets device [ 459.318407][ T9349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.833'. [ 459.616121][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 460.150876][ T9367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.206828][ T9365] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 460.230576][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 460.451578][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.485606][ T9369] bridge_slave_0: left allmulticast mode [ 460.641064][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.652227][ T9369] bridge_slave_0: left promiscuous mode [ 460.665257][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.676196][ T9369] bridge_slave_1: left allmulticast mode [ 460.682005][ T9369] bridge_slave_1: left promiscuous mode [ 460.688075][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.789260][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.457462][ T24] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 461.507859][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.731888][ T24] usb 4-1: config 0 descriptor?? [ 461.810518][ T9369] bond0: (slave bond_slave_0): Releasing backup interface [ 462.003584][ T9380] Cannot find add_set index 0 as target [ 462.201653][ T9369] bond0: (slave bond_slave_1): Releasing backup interface [ 462.250916][ T24] hid-rmi 0003:1532:011D.0004: unknown main item tag 0x0 [ 462.277538][ T24] hid-rmi 0003:1532:011D.0004: unknown main item tag 0x2 [ 462.301276][ T24] hid-rmi 0003:1532:011D.0004: item fetching failed at offset 3/4 [ 462.303233][ T9369] team0: Port device team_slave_0 removed [ 462.330927][ T24] hid-rmi 0003:1532:011D.0004: parse failed [ 462.353502][ T24] hid-rmi 0003:1532:011D.0004: probe with driver hid-rmi failed with error -22 [ 462.379465][ T9369] team0: Port device team_slave_1 removed [ 462.401473][ T9369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.424077][ T9369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.447004][ T9369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.474791][ T9369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.521421][ T9374] netlink: 3 bytes leftover after parsing attributes in process `syz.0.842'. [ 462.593156][ T5974] usb 4-1: USB disconnect, device number 23 [ 463.100860][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 463.181447][ T9401] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 463.255483][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 463.274848][ T9] usb 6-1: config 0 has an invalid interface number: 218 but max is 0 [ 463.293127][ T9] usb 6-1: config 0 has no interface number 0 [ 463.302223][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e0.df [ 463.313455][ T5956] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 463.322908][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.344451][ T9] usb 6-1: Product: syz [ 463.348748][ T9] usb 6-1: Manufacturer: syz [ 463.370391][ T9] usb 6-1: SerialNumber: syz [ 463.389846][ T9] usb 6-1: config 0 descriptor?? [ 463.417068][ T9] usb 6-1: selecting invalid altsetting 1 [ 463.433494][ T9] usb 6-1: Can not set alternate setting to 1, error: -22 [ 463.443180][ T9] synaptics_usb 6-1:0.218: probe with driver synaptics_usb failed with error -22 [ 463.519890][ T5956] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 463.545855][ T5956] usb 3-1: config 0 has no interface number 0 [ 463.552441][ T5956] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 463.577978][ T5956] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 463.714216][ T5956] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 463.761906][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.813715][ T5956] usb 3-1: Product: syz [ 463.856193][ T5956] usb 3-1: Manufacturer: syz [ 463.881641][ T5956] usb 3-1: SerialNumber: syz [ 464.062759][ T5956] usb 3-1: config 0 descriptor?? [ 464.074844][ T9393] netlink: 36 bytes leftover after parsing attributes in process `syz.5.847'. [ 464.200751][ T5956] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input14 [ 464.385143][ T9410] Can't find a SQUASHFS superblock on nullb0 [ 464.407394][ T5956] usb 3-1: USB disconnect, device number 30 [ 464.431213][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888143bf5400: rx timeout, send abort [ 464.441766][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888143bf5400: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 466.076917][ T977] usb 6-1: USB disconnect, device number 2 [ 466.337404][ T9424] syz.5.858: attempt to access beyond end of device [ 466.337404][ T9424] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 466.381713][ T9424] syz.5.858: attempt to access beyond end of device [ 466.381713][ T9424] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 466.410693][ T9425] tipc: Started in network mode [ 466.421316][ T9425] tipc: Node identity 4a7350ae0bcc, cluster identity 4711 [ 466.432242][ T9425] tipc: Enabled bearer , priority 0 [ 466.442224][ T9424] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 466.474204][ T9424] syz.5.858: attempt to access beyond end of device [ 466.474204][ T9424] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 466.518736][ T9424] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 466.547002][ T9424] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 466.572603][ T9424] UDF-fs: Scanning with blocksize 512 failed [ 466.603515][ T9424] syz.5.858: attempt to access beyond end of device [ 466.603515][ T9424] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 466.659358][ T9424] syz.5.858: attempt to access beyond end of device [ 466.659358][ T9424] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 466.689882][ T9424] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 466.710414][ T9424] syz.5.858: attempt to access beyond end of device [ 466.710414][ T9424] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 466.748683][ T9433] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 466.779516][ T9424] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 466.803397][ T9424] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 466.811251][ T9424] UDF-fs: Scanning with blocksize 1024 failed [ 466.818830][ T9424] syz.5.858: attempt to access beyond end of device [ 466.818830][ T9424] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 466.833935][ T9424] syz.5.858: attempt to access beyond end of device [ 466.833935][ T9424] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 466.848911][ T9424] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 466.874168][ T9424] syz.5.858: attempt to access beyond end of device [ 466.874168][ T9424] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 467.032381][ T9438] ------------[ cut here ]------------ [ 467.032476][ T9438] WARNING: CPU: 1 PID: 9438 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 467.032535][ T9438] Modules linked in: [ 467.032596][ T9438] CPU: 1 UID: 0 PID: 9438 Comm: syz.0.857 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 467.032625][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.032641][ T9438] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 467.032678][ T9438] Code: 42 80 3c 28 00 74 08 48 89 df e8 84 d3 38 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a eb d8 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 467.032702][ T9438] RSP: 0018:ffffc90003ac7148 EFLAGS: 00010283 [ 467.032726][ T9438] RAX: ffffffff85e73a86 RBX: ffffc90003ac72c0 RCX: 0000000000080000 [ 467.032746][ T9438] RDX: ffffc9000fa72000 RSI: 0000000000031112 RDI: 0000000000031113 [ 467.032764][ T9438] RBP: 1ffff92000758e58 R08: ffffc900037a9000 R09: 0000000000000000 [ 467.032784][ T9438] R10: ffffc900037a9000 R11: ffffffff85e73950 R12: 0000006cba15a0e9 [ 467.032804][ T9438] R13: dffffc0000000000 R14: ffff888142390028 R15: 0000006cba15a0e9 [ 467.032823][ T9438] FS: 00007f22e18716c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 467.032859][ T9438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.032877][ T9438] CR2: 00007f22e1850d58 CR3: 00000000790e6000 CR4: 00000000003526f0 [ 467.032899][ T9438] Call Trace: [ 467.032910][ T9438] [ 467.032923][ T9438] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 467.032962][ T9438] drm_crtc_next_vblank_start+0x223/0x470 [ 467.033561][ T9438] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 467.033610][ T9438] ? drm_gem_fb_vmap+0x230/0x8d0 [ 467.033645][ T9438] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 467.033696][ T9438] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 467.033736][ T9438] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 467.033778][ T9438] drm_atomic_helper_commit+0x5c7/0xb10 [ 467.033811][ T9438] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 467.033836][ T9438] drm_atomic_commit+0x25f/0x2c0 [ 467.033876][ T9438] ? __pfx_drm_atomic_commit+0x10/0x10 [ 467.033911][ T9438] ? __pfx___drm_printfn_info+0x10/0x10 [ 467.033952][ T9438] ? drm_client_rotation+0x47c/0x5b0 [ 467.033990][ T9438] drm_client_modeset_commit_atomic+0x620/0x760 [ 467.034040][ T9438] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 467.034098][ T9438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.034150][ T9438] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 467.034191][ T9438] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 467.034235][ T9438] fb_pan_display+0x39e/0x680 [ 467.034271][ T9438] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 467.034304][ T9438] bit_update_start+0x4d/0x1e0 [ 467.034344][ T9438] fbcon_switch+0x1565/0x2040 [ 467.034393][ T9438] ? __pfx_fbcon_switch+0x10/0x10 [ 467.034447][ T9438] ? __pfx_hide_cursor+0x10/0x10 [ 467.034481][ T9438] ? is_console_locked+0x9/0x20 [ 467.034510][ T9438] ? set_origin+0x346/0x480 [ 467.034541][ T9438] redraw_screen+0x56d/0xe90 [ 467.034570][ T9438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.034619][ T9438] ? __pfx_redraw_screen+0x10/0x10 [ 467.034653][ T9438] ? tty_do_resize+0xe1/0x130 [ 467.034692][ T9438] vc_do_resize+0x122d/0x1770 [ 467.034772][ T9438] ? __pfx_vc_do_resize+0x10/0x10 [ 467.034806][ T9438] ? vt_ioctl+0x1c42/0x1f00 [ 467.034834][ T9438] ? vt_ioctl+0x1c97/0x1f00 [ 467.034871][ T9438] vt_ioctl+0x1ca9/0x1f00 [ 467.034908][ T9438] ? __pfx_vt_ioctl+0x10/0x10 [ 467.034934][ T9438] ? __asan_memset+0x22/0x50 [ 467.034970][ T9438] ? smack_file_ioctl+0x24a/0x340 [ 467.034999][ T9438] ? __pfx_smack_file_ioctl+0x10/0x10 [ 467.035033][ T9438] ? __rcu_read_unlock+0x84/0xe0 [ 467.035072][ T9438] ? __fget_files+0x3a0/0x420 [ 467.035100][ T9438] ? __fget_files+0x2a/0x420 [ 467.035138][ T9438] tty_ioctl+0x926/0xde0 [ 467.035173][ T9438] ? __pfx_tty_ioctl+0x10/0x10 [ 467.035208][ T9438] __se_sys_ioctl+0xfc/0x170 [ 467.035249][ T9438] do_syscall_64+0xfa/0x3b0 [ 467.035279][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.035304][ T9438] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 467.035330][ T9438] ? clear_bhb_loop+0x60/0xb0 [ 467.035361][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.035386][ T9438] RIP: 0033:0x7f22e098ebe9 [ 467.035410][ T9438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.035433][ T9438] RSP: 002b:00007f22e1871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.035463][ T9438] RAX: ffffffffffffffda RBX: 00007f22e0bb6180 RCX: 00007f22e098ebe9 [ 467.035483][ T9438] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000005 [ 467.035501][ T9438] RBP: 00007f22e0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.035519][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.035535][ T9438] R13: 00007f22e0bb6218 R14: 00007f22e0bb6180 R15: 00007ffd60855d88 [ 467.035576][ T9438] [ 467.035598][ T9438] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 467.035617][ T9438] CPU: 1 UID: 0 PID: 9438 Comm: syz.0.857 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 467.035645][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.035660][ T9438] Call Trace: [ 467.035670][ T9438] [ 467.035680][ T9438] dump_stack_lvl+0x99/0x250 [ 467.035709][ T9438] ? __asan_memcpy+0x40/0x70 [ 467.035743][ T9438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.035771][ T9438] ? __pfx__printk+0x10/0x10 [ 467.035820][ T9438] panic+0x2db/0x790 [ 467.035853][ T9438] ? __pfx_panic+0x10/0x10 [ 467.035875][ T9438] ? show_trace_log_lvl+0x4fb/0x550 [ 467.035925][ T9438] __warn+0x31b/0x4b0 [ 467.035948][ T9438] ? vkms_get_vblank_timestamp+0x137/0x160 [ 467.035984][ T9438] ? vkms_get_vblank_timestamp+0x137/0x160 [ 467.036018][ T9438] report_bug+0x2be/0x4f0 [ 467.036040][ T9438] ? vkms_get_vblank_timestamp+0x137/0x160 [ 467.036075][ T9438] ? vkms_get_vblank_timestamp+0x137/0x160 [ 467.036207][ T9438] ? vkms_get_vblank_timestamp+0x139/0x160 [ 467.036240][ T9438] handle_bug+0x84/0x160 [ 467.036271][ T9438] exc_invalid_op+0x1a/0x50 [ 467.036301][ T9438] asm_exc_invalid_op+0x1a/0x20 [ 467.036324][ T9438] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 467.036357][ T9438] Code: 42 80 3c 28 00 74 08 48 89 df e8 84 d3 38 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a eb d8 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 467.036379][ T9438] RSP: 0018:ffffc90003ac7148 EFLAGS: 00010283 [ 467.036402][ T9438] RAX: ffffffff85e73a86 RBX: ffffc90003ac72c0 RCX: 0000000000080000 [ 467.036421][ T9438] RDX: ffffc9000fa72000 RSI: 0000000000031112 RDI: 0000000000031113 [ 467.036438][ T9438] RBP: 1ffff92000758e58 R08: ffffc900037a9000 R09: 0000000000000000 [ 467.036455][ T9438] R10: ffffc900037a9000 R11: ffffffff85e73950 R12: 0000006cba15a0e9 [ 467.036474][ T9438] R13: dffffc0000000000 R14: ffff888142390028 R15: 0000006cba15a0e9 [ 467.036499][ T9438] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 467.036534][ T9438] ? vkms_get_vblank_timestamp+0x136/0x160 [ 467.036576][ T9438] ? vkms_get_vblank_timestamp+0x136/0x160 [ 467.036607][ T9438] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 467.036644][ T9438] drm_crtc_next_vblank_start+0x223/0x470 [ 467.036690][ T9438] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 467.036731][ T9438] ? drm_gem_fb_vmap+0x230/0x8d0 [ 467.036762][ T9438] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 467.036811][ T9438] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 467.036848][ T9438] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 467.036887][ T9438] drm_atomic_helper_commit+0x5c7/0xb10 [ 467.036919][ T9438] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 467.036942][ T9438] drm_atomic_commit+0x25f/0x2c0 [ 467.036981][ T9438] ? __pfx_drm_atomic_commit+0x10/0x10 [ 467.037015][ T9438] ? __pfx___drm_printfn_info+0x10/0x10 [ 467.037053][ T9438] ? drm_client_rotation+0x47c/0x5b0 [ 467.037089][ T9438] drm_client_modeset_commit_atomic+0x620/0x760 [ 467.037154][ T9438] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 467.037212][ T9438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.037254][ T9438] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 467.037292][ T9438] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 467.037334][ T9438] fb_pan_display+0x39e/0x680 [ 467.037368][ T9438] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 467.037400][ T9438] bit_update_start+0x4d/0x1e0 [ 467.037439][ T9438] fbcon_switch+0x1565/0x2040 [ 467.037487][ T9438] ? __pfx_fbcon_switch+0x10/0x10 [ 467.037539][ T9438] ? __pfx_hide_cursor+0x10/0x10 [ 467.037572][ T9438] ? is_console_locked+0x9/0x20 [ 467.037600][ T9438] ? set_origin+0x346/0x480 [ 467.037630][ T9438] redraw_screen+0x56d/0xe90 [ 467.037658][ T9438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.037705][ T9438] ? __pfx_redraw_screen+0x10/0x10 [ 467.037739][ T9438] ? tty_do_resize+0xe1/0x130 [ 467.037776][ T9438] vc_do_resize+0x122d/0x1770 [ 467.037841][ T9438] ? __pfx_vc_do_resize+0x10/0x10 [ 467.037872][ T9438] ? vt_ioctl+0x1c42/0x1f00 [ 467.037899][ T9438] ? vt_ioctl+0x1c97/0x1f00 [ 467.037934][ T9438] vt_ioctl+0x1ca9/0x1f00 [ 467.037981][ T9438] ? __pfx_vt_ioctl+0x10/0x10 [ 467.038006][ T9438] ? __asan_memset+0x22/0x50 [ 467.038040][ T9438] ? smack_file_ioctl+0x24a/0x340 [ 467.038068][ T9438] ? __pfx_smack_file_ioctl+0x10/0x10 [ 467.038101][ T9438] ? __rcu_read_unlock+0x84/0xe0 [ 467.038152][ T9438] ? __fget_files+0x3a0/0x420 [ 467.038178][ T9438] ? __fget_files+0x2a/0x420 [ 467.038209][ T9438] tty_ioctl+0x926/0xde0 [ 467.038243][ T9438] ? __pfx_tty_ioctl+0x10/0x10 [ 467.038277][ T9438] __se_sys_ioctl+0xfc/0x170 [ 467.038316][ T9438] do_syscall_64+0xfa/0x3b0 [ 467.038345][ T9438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.038369][ T9438] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 467.038393][ T9438] ? clear_bhb_loop+0x60/0xb0 [ 467.038423][ T9438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.038447][ T9438] RIP: 0033:0x7f22e098ebe9 [ 467.038468][ T9438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.038489][ T9438] RSP: 002b:00007f22e1871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.038514][ T9438] RAX: ffffffffffffffda RBX: 00007f22e0bb6180 RCX: 00007f22e098ebe9 [ 467.038533][ T9438] RDX: 0000200000000040 RSI: 0000000000005609 RDI: 0000000000000005 [ 467.038549][ T9438] RBP: 00007f22e0a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.038565][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.038580][ T9438] R13: 00007f22e0bb6218 R14: 00007f22e0bb6180 R15: 00007ffd60855d88 [ 467.038620][ T9438] [ 467.038785][ T9438] Kernel Offset: disabled