last executing test programs: 3m44.325624235s ago: executing program 3 (id=2874): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) 3m43.78453783s ago: executing program 3 (id=2878): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/204, 0xcc}], &(0x7f0000000100)=[0x18, 0x966, 0x9, 0xf4], 0x4}, 0x20) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 3m41.094516945s ago: executing program 3 (id=2886): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5800}, 0x4) bind$alg(r3, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x10, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmmsg(r6, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="6dd1d20ea33b64dbe6df735b9074eb86e9a529a699a96487493109f2801696a5425c51cb5072d9f04d9c543f26e945afa51b569b4f914ff985667c169e73e024227211247d6dcb6e73e4ab396d78cefa4ba4dcf264719c73331cc7", 0x5b}, {&(0x7f0000000380)="921c9e65615110daa76091b3a1565773b980939c14df3f4cab15dbaee58017ecc78959698882f1f850a3a5ad1579717477b2801b6b63eea2b01f3832e455b684d099d12bef4dcf1ba51c3ddc2a6d38df71a30c1368f368707de1a8489451b42d0202a7c03c5a4f487a880f36354e4331f1205cb8d1f4b3a8aa663edc586a9d303d90f7c3a73ddeda7e63942716527926bc542a4adbc5416c539bc0c0bf2c5c04c1f1192a1488424659099c7b8ed8f792f34477801cd05cfd96cb52e1294414d9794835bf827428bd5851be7a2e3dc4ec39921c588098eb53cb5cd0116b955c20", 0xe0}, {&(0x7f0000000200)="d04da7328b056c5d892e6936447a2df76831", 0x12}, {&(0x7f0000000480)="0d6a2cf672e1062fd84f908e58ac9337bc441bef40de382c7d130e55c0cf23e3e94a9bf68f8835cbcf49f47e23fe8568f345bf40362eb121de489ff00ecadf43c4a0167f9d6216c6b39d", 0x4a}, {&(0x7f0000000540)="553ec8b992b4", 0x6}], 0x5}}], 0x1, 0x40004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x5, 0x9, 0x2, 0x1}, 0x9, 0x0, 0x3, 0x3, 0xc, 0x1a, 0x12, 0x7, 0x5, 0x3ff, {0xe, 0x9, 0xfffffffe, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x70, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r10}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m36.929643486s ago: executing program 3 (id=2897): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) setxattr$security_ima(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x5, 0x3, 0xe, 0x4, 0x40, "45d96e432949dde828f9f4c9bd3d73ebbe17ebe18b3883c3d05ddf070933bcd28e2bcfc8e813bdc17e0be8ae63705571cf00afe41d3f68edc9ead85864c23dd8"}, 0x49, 0x1) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') unlink(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00') 3m36.766602119s ago: executing program 3 (id=2898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 3m36.236216916s ago: executing program 3 (id=2900): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003e000000", 0x10) 3m35.584873352s ago: executing program 32 (id=2900): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003e000000", 0x10) 10.784145804s ago: executing program 1 (id=3475): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@loopback, @remote, @remote, 0x6, 0x3, 0xf, 0x500, 0x0, 0x200}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd700000000000040000001303178010"], 0x328}}, 0x84) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="a30a0000", @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf2503000000"], 0x14}}, 0x40001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000071f111cdd5cfc11600000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000f9ff0000010000000900010073797a30000000000900030073797a32000000001c000000060a010400000000000000000100000008000b"], 0x90}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x1c, r5, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0x13c}]}, 0x1c}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) listen(r2, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 10.111037481s ago: executing program 2 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x46) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c8, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.003017695s ago: executing program 4 (id=3479): r0 = io_uring_setup(0x70c3, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x1, 0xfffffffc}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000280)={0x0, 0x83ae, 0x8, 0x1000004, 0x1800, 0x0, r0}, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xae383) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x84, 0x0, 0xd}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x801) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) getrandom(0x0, 0x0, 0xe8cfc90f813f7d48) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.833391355s ago: executing program 2 (id=3481): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x242b], [0x0, 0x0, 0x74e2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 8.637335444s ago: executing program 1 (id=3482): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f40)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000100)=[@rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0, r2, r0, r2, r2]}}], 0x30, 0x80}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)="4cfd4afac5789cdfde048d65f040fe30449e03e0b4680277ca56bce17efca57de3a4e8b976a0c35e8bdee1d81d97ff49de9e1591a3fd38a9cef0fee701b4bfef27e69f42b00bd65270ec994e936832648c", 0x51}, {&(0x7f0000000800)="bdab7753478ea45ed52674f72717b48d62e5cf93b5fe85d6b1d404f0eb45db8cf4e081b8b83b", 0x26}, {&(0x7f0000000fc0)="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", 0x108}], 0x3, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r2, r2, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x4c, 0x24000004}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b40)="02325c3bc0c793615d9543fe3290c80784017fffdc999766000323c5b87a93df531e104b72445795e925fbc98761c39d3bf9436137ba32c64445a25e8ac6d0022f525c45447535f1f22776515e58e1e9b0a24273c23bb1fba29663cba6fa790572cbb5bfde0ee76cf8a0b43fbcab97d8cb19f5ded8a342349cdf1384acb7bd2765bc625dfa36e62c72c2abe7011632dbe9df8dd785843d0329e309ac7b5629cd9a95e5839e9d98c326619ddef7e7266f2900f0faf4d1", 0xb6}, {&(0x7f0000000c00)}, {&(0x7f0000000c80)="ffeeb859e0224b1335554934ff579f00c3bfc1ec9f754a23bf6896f184c6", 0x1e}, {&(0x7f0000000cc0)="0cc829ebd327729be4a510cb62c4813223228aac22a93ad86962eaf6619ac751bd52e805281ab8043c769180ebda1733d94ec6f642834b674f3b5338b55d48721aec312817cace425e39d601ef329a6a07181b2a172a73fe522fc69ceb129c3954db217a4c6ab9a47cf99e2dc8661363bac568", 0x73}], 0x4, 0x0, 0x0, 0x4}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000040), 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) 8.554971075s ago: executing program 2 (id=3483): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7517482d}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}}, 0x20000800) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x3, 0xf8, 0x5bc, 0x6, 0x25, 'syz1\x00', "56cfa8e741a331137a68c174f118a8cbf08434d2794f3e6c58b107b02769e1cd", "d790da6bdface06b47a167fcdaef79f9ded5e7cf93877103a0c7a898125cb799", [{0xdda, 0xe290, {0x0, 0x8}}, {0x1ff, 0xcd86, {0x3, 0xfffffff7}}, {0x9eba, 0x1, {0xc6147e1af737dd8f, 0x7ff}}, {0x40, 0xe, {0x1, 0x7f}}, {0x9, 0x7, {0x2, 0x6}}, {0xf75, 0x0, {0x2, 0x100}}, {0x3, 0x40, {0x0, 0xff}}, {0x7fff, 0x7, {0x2, 0x7}}, {0x101, 0x0, {0x2, 0x8}}, {0x4, 0x8, {0x1, 0x7}}, {0xe, 0x7, {0x2, 0x6}}, {0x5, 0x1000, {0x2, 0x6}}, {0x1, 0x0, {0x1, 0x9}}, {0x1, 0x8000, {0x3, 0x2}}, {0xb, 0x7da9, {0x3, 0x8}}, {0xe, 0x0, {0x0, 0x8001}}, {0xacc9, 0x8, {0x0, 0x5eca}}, {0x1, 0x8, {0x1, 0x10001}}, {0x8, 0x6aa1, {0x0, 0xce8}}, {0x5, 0xf, {0x3, 0xf}}, {0xff01, 0x9787, {0x1, 0x3}}, {0x9, 0xd9b, {0x0, 0x7}}, {0x400, 0x1, {0x3, 0x1}}, {0x7, 0x8, {0x3, 0xffffff28}}, {0x6, 0x8, {0x1, 0x7}}, {0x18, 0x3, {0x1, 0x6}}, {0x5, 0xddfb, {0x3, 0x1}}, {0xa9, 0x2, {0x2, 0x1}}, {0x4e8, 0x4, {0x3, 0x2631ef13}}, {0x9e1, 0x3, {0x2, 0x2}}, {0x103, 0x1000, {0x3, 0x6}}, {0x2, 0xe, {0xdb51c75dbac93008, 0x1}}, {0x5, 0x6, {0x0, 0xffff7fff}}, {0x8, 0x1, {0x3, 0x40fb}}, {0x8, 0x8, {0x0, 0x9}}, {0x7, 0x8001, {0x3, 0x6}}, {0x2153, 0x0, {0x3, 0x1}}, {0x200, 0xb5, {0x0, 0x7}}, {0x2, 0xfc, {0x0, 0xb}}, {0x0, 0x3, {0x2, 0x7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x48040) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000080) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000006c0), 0x4000, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4000091) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x32}, {0x8, 0x13, 0x1ad2749b}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xf8, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmsg(r1, &(0x7f0000001e80)={&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000c00)=""/55, 0x37}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/207, 0xcf}, {&(0x7f0000001d40)=""/52, 0x34}], 0x4, &(0x7f0000001dc0)=""/141, 0x8d}, 0x40010041) (async) r6 = fcntl$dupfd(r1, 0x0, r3) setsockopt$inet6_buf(r6, 0x29, 0xcd, &(0x7f0000001ec0)="6a0c2609664b4b44718dc8d524359804052cc8b261fcab9c64a19336eef1838a6127a8e7af2e002d55ae8b84aa13e153e6e480a0ca627db837cc1cfa3c725e019cf1823b4f21a3e5b103252c48509adaf3e9efc299d9cb43cb03f1a76fe1c52123b01bbe938a04c8b4958e7e46f321", 0x6f) r7 = request_key(&(0x7f0000001f40)='.dead\x00', &(0x7f0000001f80)={'syz', 0x1}, &(0x7f0000001fc0)='devlink\x00', 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002000)={r7, 0x0, 0x77}, &(0x7f0000002040)={'enc=', 'raw', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f00000020c0), &(0x7f0000002100)=""/119) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x30, 0x1405, 0x200, 0x70bd27, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) r8 = openat$dlm_control(0xffffff9c, &(0x7f0000002280), 0xc4042, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000022c0)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}) syz_usb_connect(0x2, 0x659, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x44, 0x9c, 0x97, 0x8, 0x16d8, 0x7253, 0xe7f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x647, 0x2, 0x2, 0x6, 0x10, 0x1, [{{0x9, 0x4, 0x8, 0x2, 0x8, 0x5b, 0x32, 0xf4, 0x8, [@hid_hid={0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0x2f2}}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x3, 0x88, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0xd, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}, @generic={0xdb, 0x5, "3abed6b4b5f95e3b5b43f66a1d9e395f4f8ace414637bfffc5cee08a05e304ddb8615cbad8628b84761e0070f3781623d909fe24b3bbeaca90eddfa228509126d166f90d3fd6dc5b3739616463cb55855399961e08a4e783e983daae346740e02b1058cb94fcf203489602c08b4b44479de282c4468991098ac322ce6d7dcd4c049fe86e8de0390c569b93bf1172a86f6c6e55844abafa3d42f329e81924478907225a9dba1288a00351dd296afb15abac40cbf2765281e9a94169db3980bf889ff61a21544aa2481d8c3abbff986d841deca653ea4e3c79a2"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x42, 0x40, 0x8}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x3, 0xa, 0x4, [@generic={0xd1, 0x24, "d79248045fb95deeaf2d761beee01c6976343c630193bdd92e4a32977b3ce0c2b515c84d304282839ab0bced3f0f675a64d9591520f417e6e80826fe1e415ab8e214a67f5898e29a74c05114e1e7e8c42f2493f8f6d66498106ff237db8b914515257afffab481b7938e7570c96d953b8e17888efd42ed1017b8b228e0bcaf9f6904b7b28c1d50c15bd77467e0177eab2cd0c86bb65e75cd94bd300373ec61dd84e5f0a29982a007c8eb0c178b063f7b9c607bf825c23f89ce98cb19a64499a737a6527addf79bfbab945941b107d6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8925}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x9, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x77, 0x1}, @generic={0x3c, 0x2, "7b93251cb40a1be64a527caabc5e2535a8e4be70a2f9ee531e0de624ddb9e4f594d3f7a9cddf4743824114ab77571c74f50a27da29d134bf16e2"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x8, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6b, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xb}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x6, 0x7f, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x7f, 0xd6, 0x4, [@generic={0xd5, 0x7, "5c7f0e099668546405446f37d843c5b160d9e231dd5bca51b228c2a7422748e92d51d3fc8f5b4d7597e5b2dc39f1c5bfd46d26b0bf28ceb0b256c79bb1346dfd264f2a66f9ea45ec3c6e6d90285ba9d83d42d33b6cb52b455072e8652f7a5ce283099f20d3ae68158a56484fadf7ff2be823e49703df182cbf872d3370a5369eb09b857879968c7d74e42f6b9815c5047497e6355f4f0cdc38350df1322bbcfb0327103ee3a42ebdb019b6573c45d47ff5d8a766a7cae0a73a79bcbd9c042bbac212a3c8274206d2da7506cabe0371ea62c581"}]}}]}}, {{0x9, 0x4, 0x26, 0x81, 0x7, 0x80, 0x7d, 0xc6, 0xe4, [@generic={0x8, 0x22, "b4871dc1b634"}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf0, 0x100}, @generic={0x3a, 0xf, "126bba9e20c90abbf4dd800106844669aaea597a34c6159224f014a78a12f8576c4ca8469c9f3b9b3fb82b29251b1fbdeb4eea02415f6a7c"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x5, 0xa2, 0xff, [@generic={0xaf, 0x23, "fdd6d02d5d38062e7663384e787f3aa3bd588c7b0857f8dabc8079903346d73452209c06480a7e588fe4d8cd3afeb7c22729daf3c0fa5a1da2d66e251378ffb177ee5bf7d1211c3b4558cf0b2967142e778204dbeea111b3053c980693c70079442d3adddec41793591b1787f96e79679a8a72a9b1dcdcefbf3298628c71baf58c83f55e67e583d57a6bc04bb485d5f1532a69799f3c8a74483b42323e18218988c91bea474350db7ca3181f39"}, @generic={0x93, 0x9, "f122d4adcc0821ad0a7d4c8a29893382a85e73cdb160a28ef21bb3eb5ab1dc04f3a0a08328630268e1d11dc4311cdf9c2abc2e2f8e2755f0f0a029d2aedb4b82d2310a94cd6604c90d3348d8e19bc088f9d8ae23fe761fadf3ea7642273dc918a224439ce4f361a9225777e69094f830349c494ca5e5a80a8f295a3ef1406fb4b11f09aed73486c439299fe60cc0ddd3d9"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0xe, 0x2, 0x8, [@generic={0x32, 0xd, "ca3150c203a1546c1d820c82c7ac107354ccceee6e3f42f01a74928316697cf03566b82c7d08304c1da16eb85e4b8036"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0xd, 0xe, 0x2, [@generic={0xe3, 0x8, "f0b975b293809fef020ce371cfa5553dc60e8a96d3ea4b33b71da1521662d51b1ec9c2cb8888180460361e89c4dd05b4e1dd6fc6090f81670da661e8d2f463ad3a68c85f6e8c5f06100439f919c52a27603a9279af7bfa38a4e48ae76ceb06cfa65df5134990cb1c3d14871d2bc40d948c15f458c23ce65b9228e153d9c0bb23d53bcb62a26211088414233d5bb427016411ab85ddae52849016971a36b115cfaf26edd7a204ad6669a46b64271e3ebea9fdb71a8c60e56354e7babbb012b54dd96010916bff8e111d36bd74383a82dd159243b02eab394c5556e222601b798166"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xe, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x50}]}}, {{0x9, 0x5, 0xc75fe0a5d645391a, 0xc, 0x3ff, 0x0, 0x9d, 0x3}}]}}]}}]}}, &(0x7f0000002e40)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x300, 0x0, 0x6, 0x6, 0xff, 0xff}, 0x180, &(0x7f00000029c0)={0x5, 0xf, 0x180, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "0aadf23a62c30664ac1065470a13e8e0"}, @generic={0x91, 0x10, 0x0, "f7098a3ce954f7f8b66e4ec417b6a1d23ab57cdd4fc9727a82ad4f51eb1b45731fda0d3398c2733e5c9d4f5115bf8b2991ba4704a4c2a2b704fa7928bb9599d33cd4adfd98cf23f27a6005a266b42b07275ce1f052928c127d1d652cb07c7629ee9b2778941a7f7a47d7954dd20930e1fd9f59a72c07130f59a4bb70328db8aa5209d77e46be0a9b98e636630094"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0xd, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x8, 0x1f, 0x401, 0x4d}, @generic={0xc4, 0x10, 0x60a5654b035aa875, "7d1002a74195e3f54bfbe5ebb10900a1ecf8480f48ef03f73bd36be534618b69b0b62fbf35814e3d6ab3023f9cbc1f2ad737c6829d8d985b06da8c60af5e8e43fdd93199df674089818a8cd99ed4cd97474a09f2442234b66909e17acd6f1e33dbfde36f632415a06da6d46639fce6deb9bbac1650488065577e0a3e53afcf8452a35d2486a7c6f727c76f46d2185326651a8bee0aad18726280ba146b38263ba3e901d9a5abeb7ad6e9b3848f7d691c807d6f3970b741bb92f011c714af18c5cc"}]}, 0x6, [{0xae, &(0x7f0000002b40)=@string={0xae, 0x3, "e70fd0e15ebb9e58c7b6ea51a87fcc3c44178aae69150193f4ce5d96bd8713bfa8712b881592e89b3e187f707b37deed57252d2b814cc8b7e35212ecd14450435cd9922d82924c567593b29eee226403fa7080b3317c826fca72924dad151bb976e88d583dbdb229fa87cf9299b62435adba6ae3e5f2b101bcc1326aba8a960c12e4345a0926d5068328dc58fbf54c9a370d371d0c1662bb11fd792332ec2cdca115a7dc5a3343bb2828326a"}}, {0x64, &(0x7f0000002c00)=@string={0x64, 0x3, "92a709976c9ea9f64401c6c0ff3154224dd3a28160aba7d90f8e8cb11b7f5d3445ecde26e8a55209a2436a54608430c6c1b46cd559de580049d781c34ce30888c927fe720fb90f2363852132dc27bc3c35bbaba660e7ecec73ca240d493b7e65edb1"}}, {0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x42d}}, {0xa1, &(0x7f0000002d00)=@string={0xa1, 0x3, "2ae03fef2e1c47f2b13c025b963ebefd924673e63b98c0ac778f47379113965fb93af71ac1bad058abdce0e82a933d93c220e5ca4d7f30566b5c27bf14e4388fdb646f330b40150be0a6cc31a22f289b00ff245ca4fc96a9e3b5409589fb3976f739746c9b951f9c2746667ad6bf247f7cd9035e84932a849991d941e633f323cf151704a80a46896b22f0241774818c11bbbfac6bdf58f29f879e50997695"}}, {0x49, &(0x7f0000002dc0)=@string={0x49, 0x3, "802e0a84634d978d5bfdd93452e0efefa5b340286c195c08dfbfd1c67cfab63c9a54ab36ae77953b99d0a32e3a44771233fe2c46e5e86284752e9e8d386ef697c9df109b727a5c"}}]}) name_to_handle_at(r6, &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)=@isofs={0x14, 0x1, {0x1, 0xfff8, 0xfff6, 0x6, 0x0, 0xff}}, &(0x7f0000002f40), 0x200) (async) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x10, 0x3f8, 0x100, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x80) (async) recvmsg(r8, &(0x7f0000003440)={&(0x7f0000003080)=@qipcrtr, 0x80, &(0x7f0000003400)=[{&(0x7f0000003100)=""/50, 0x32}, {&(0x7f0000003140)=""/253, 0xfd}, {&(0x7f0000003240)=""/178, 0xb2}, {&(0x7f0000003300)=""/37, 0x25}, {&(0x7f0000003340)=""/132, 0x84}], 0x5}, 0x2000) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000034c0), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x3c, r9, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xffff0001}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xda0d}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) (async) syz_usb_connect(0x0, 0x5b9, &(0x7f00000035c0)={{0x12, 0x1, 0x200, 0x77, 0xd8, 0x4e, 0x8, 0x100d, 0x9032, 0x8ed4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a7, 0x1, 0x9, 0x1, 0x10, 0xb, [{{0x9, 0x4, 0x20, 0x7, 0xf, 0x74, 0x26, 0x60, 0xe, [@hid_hid={0x9, 0x21, 0xf0e4, 0xb, 0x1, {0x22, 0xde5}}, @generic={0xb0, 0x21, "062dcdc160b35691fcaec7f7927ef8228c9e75cebca8b8eaf6c289108590218c46379a6bb77e963541cdbe6e2089b7cbe454a7e8594746447a52b44dc2f0dea94fc00b75753069960ed4bc5e856b064105a4cdf8fa9bc8093aabf3f4e45ed2809ee20013ff6babd1cebeb922296b7e935707ba3449b19cac04dd89869e981ce64f091e32302a7cb41cb0a24899a2bdbcf6899b6732f1024959877d97eb9c3b38a5e8ff8b075be56a8f817e2997ee"}], [{{0x9, 0x5, 0x80, 0x3, 0x20, 0x1e, 0x8, 0x0, [@generic={0xe2, 0x6, "bb4e0ed37112a23bba04fc52fe89bcbe475d6e2ecd7a74801f895f5f3e9d6af2e53811807ca5a45a5a3431358d042fee12722ac3b6cfae8b484977c2ff0c85a7ddae8958aecc2d4c0f40a413b7cafc63d60f3a93474a8d9c9f817487f9f85fda2a00e15a4d4e736fb658d196ae23ddc5164a8014fe6d003d12a6a6819e609b31379439c99a553d209dedd777a2385aaca261ccac02af2edafd78d55b9929743c69dc7a0c11789018829edd5ea7f08500cb787f54b6f627dd33dfcf284bb5ab5e0378dca2b9d49778d789bbb023c9f8154250fb4808df273666335f25b1b217c7"}, @generic={0xd5, 0x21, "fe7ec9d3536e234877e1f416f81819e08dea37bab457d322ef84b1ace7263cd8d61df94463ed82aa45ce9286667c9483eabbeb89c13812b28a0972358e15b32605da9023cad87ed76d4ae958d9fc09f7a17a082520673e0532fe7f6348e4996de79e88a7736f12c5840af43e01e0d7545e366efa3a2d7f0acb580251af21070f816ca8f4d153806e6f79fc95ba1999f711852ecdcb80077fed0f7e2c65154df6f7ed59b910a48e69f29748905b96040417306bd09a2fd6d07b5f0a8497f872b8ea8208f6e7e0600ea7215b104153454f86a327"}]}}, {{0x9, 0x5, 0x0, 0x36e974451dc2fdc2, 0x40, 0x2, 0xc4, 0x23, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x5}, @generic={0x6b, 0x7, "dbc3bf6d2a6a50211428ea4867ab75dd7cc19391c3fcf5a3672b8253a00360f25420af2e6004d6df2070bfb70059761e1177bf95d0bf03121ad55826c26621123e9264579f1e9632509cc896147c5747a76c25c93cc0b3dc407f63ba29a8b3f43705fe47ddc710ba5c"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x0, 0xff, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9f}]}}, {{0x9, 0x5, 0x1, 0x8, 0xdef, 0x5, 0x0, 0x5, [@generic={0x76, 0x2, "39be33996e5b83d1786e0e6dcbac4c0c42439a76e84741aed597f94dd61027d9e9ed74801c8794ffa52a5a1a8cfff455d0d1e5bb82d3bff1869138edab4156fc164987ead929823654cd094c61646a30c26903f87cad69dc20e380f96fb96f0dc0c774f8f66a457afb0ad9d92ee56600eb01e907"}]}}, {{0x9, 0x5, 0x9, 0x13, 0x20, 0x9, 0x1, 0xd}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x9, 0x7, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x3b, 0x9}}, {{0x9, 0x5, 0xa, 0x771e3b1ab00de280, 0x8, 0x6, 0x8, 0x0, [@generic={0xe6, 0xa, "81d5260656bf873e6af5959ed3808f6548dc8a88139dd6be44949d9eda9f7aff77ad7f6fc6d01d516f315e81e6e738070a9cf68d0bbb2933204f6512252b0a0977e785b01e7d1a946615c3af79d0c7042052e426687e0435dd1375fb31ac4c530b5e9d120ceebe7cf65bd1120afe1320b5d6aca1596ef10aa9266e156c392924bd9b62d7c87a154190bc2c461ad6f9086c49ccda1b73ef1ec4281712ea43f8c057960df5f1bc49d0485c3bea04e6f742dba56aa8b1c6a8e70936310e337cb19b43cabf18121658bb20d559169329219794d1ef9283d70438a616b759e2294fde396921be"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x8, 0x0, 0x53}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x1, 0x0, 0x4, [@generic={0xbe, 0x8, "09ed3a348bf927bdb3c0bbbbd01a06587dfd0762832ea57bf97266139ee5d4c54638bc9cf7c4c6e827b262b1bd3db86fd992fea0d3f748e82c4ad698c1f393342b50421f5610711af38e02e0f6975fe3ffe556e04945922786a71f5b0107bce66ee65f79f754d1ee0de916442d9ac473bc6b3da705b431f4007c3fc017d5277cd7594f87921b0b66f1629c787a8eef6076b8dd0823afe2fb503dbcd6b04381e0ab0fe8f4371a16431162b5b3e7c450d7e58157a3f33a6c3469e80fce"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xc, 0xd}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x0, 0x96, 0x6, [@generic={0xb, 0x5, "66f2e9d258432633fd"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x410, 0x6, 0x7, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x9, 0x4, 0xd}}]}}]}}]}}, &(0x7f0000003d80)={0xa, &(0x7f0000003b80)={0xa, 0x6, 0x250, 0x0, 0x7, 0x3, 0xff, 0x2}, 0x35, &(0x7f0000003bc0)={0x5, 0xf, 0x35, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x16, 0xfffa}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x1, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x9, 0x3, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x0, 0xffc0}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x7, 0x7ff}]}, 0x5, [{0x4, &(0x7f0000003c00)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000003c40)=@lang_id={0x4, 0x3, 0x843}}, {0x25, &(0x7f0000003c80)=@string={0x25, 0x3, "e59c4acb3368eea84cd5e61980b9d9d5b80480b225f01b8ea7236b5cb03f359a562ea5"}}, {0x69, &(0x7f0000003cc0)=@string={0x69, 0x3, "acd5260b9b5615e67a3cd19be306ab263c95a4e3fbbcd1091fd62b2e8a5205a78d5a368ed8aebbf27106c354f89f67b142cfb8901779b4807bf4d4c4d5f3debbe5bcddb6d1eb6a7c93334c5df5ad55359e3b60147035ef205a4ace2daadb9261297e132bb25023"}}, {0xe, &(0x7f0000003d40)=@string={0xe, 0x3, "381b0111e27c9749b1cf814c"}}]}) ioctl$PPPIOCSFLAGS(r8, 0x40047459, &(0x7f0000003dc0)=0x6406a25) (async) ioctl$KVM_SIGNAL_MSI(r6, 0x4020aea5, &(0x7f0000003e00)={0x3000, 0x100000, 0x80000001, 0x1, 0x4f9}) 8.33725871s ago: executing program 4 (id=3484): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x6, @capture={0x1000, 0x0, {0x6, 0x9f}, 0x10, 0xfffffffd}}) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000004b40)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001300)=""/155, 0x9b}, 0x7}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)=""/200, 0xc8}], 0x1, &(0x7f0000001580)=""/217, 0xd9}, 0xfffffffa}, {{&(0x7f0000001680)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000001800)=""/231, 0xe7}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/65, 0x41}, {&(0x7f0000002980)=""/18, 0x12}, {&(0x7f00000029c0)=""/76, 0x4c}, {&(0x7f0000002a40)=""/22, 0x16}, {&(0x7f0000002a80)=""/120, 0x78}, {&(0x7f0000002b00)=""/50, 0x32}], 0x9, &(0x7f0000002bc0)=""/116, 0x74}, 0x5e7}, {{&(0x7f0000002c40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/200, 0xc8}], 0x1, &(0x7f0000002e00)=""/123, 0x7b}, 0x7}, {{&(0x7f0000002e80)=@rc={0x1f, @none}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f00)=""/81, 0x51}], 0x1, &(0x7f0000002fc0)}, 0x3}, {{&(0x7f0000003000)=@isdn, 0x80, &(0x7f0000004440)=[{&(0x7f0000003080)=""/97, 0x61}, {&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/233, 0xe9}, {&(0x7f0000003300)=""/40, 0x28}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/241, 0xf1}], 0x6, &(0x7f0000004480)=""/13, 0xd}, 0x6}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004540)=""/156, 0x9c}], 0x0, &(0x7f0000004640)=""/25, 0x19}, 0x100}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004680)=""/30, 0x1e}, {&(0x7f00000046c0)=""/103, 0x67}], 0x2, &(0x7f0000004780)=""/77, 0x4d}, 0x6}, {{&(0x7f0000004800)=@phonet, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004880)=""/91, 0x5b}, {&(0x7f0000000340)=""/80, 0x50}, {&(0x7f0000004980)=""/103, 0x67}, {&(0x7f0000004a00)=""/54, 0x36}, {&(0x7f0000004a40)=""/145, 0x91}], 0x5}, 0x5}], 0x9, 0x50, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.04203139s ago: executing program 4 (id=3486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.983171621s ago: executing program 5 (id=3487): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.809333112s ago: executing program 5 (id=3488): r0 = syz_open_dev$swradio(&(0x7f0000002800), 0x0, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x51) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000100), 0x9, 0x0, &(0x7f0000000380)={r7, r8+10000000}, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000]}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r11, 0x7a0, &(0x7f0000000140)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r11, 0x7ab, &(0x7f00000006c0)={&(0x7f00000007c0)={{@host}, {@hyper, 0xc}, 0x400, "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"}, 0x418, 0x9581}) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r12, 0x2285, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) write$sndseq(r13, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r13, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x1f}, {}, @control={0x0, 0x8000, 0x4ee8}}], 0x8c) ioctl$SG_GET_REQUEST_TABLE(r13, 0x2286, &(0x7f00000018c0)) r14 = openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x7ff) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000002980)=@userptr={0x101, 0x4, 0x4, 0x4, 0xf007, {r9, r10/1000+10000}, {0x5, 0x0, 0xf9, 0x0, 0x7, 0x0, "078cf9f3"}, 0x88ae, 0x2, {&(0x7f0000000040)}, 0x9, 0x0, r13}) 7.325740648s ago: executing program 2 (id=3490): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5800}, 0x4) bind$alg(r3, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x10, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmmsg(r6, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="6dd1d20ea33b64dbe6df735b9074eb86e9a529a699a96487493109f2801696a5425c51cb5072d9f04d9c543f26e945afa51b569b4f914ff985667c169e73e024227211247d6dcb6e73e4ab396d78cefa4ba4dcf264719c73331c", 0x5a}, {0x0}, {&(0x7f0000000380)="921c9e65615110daa76091b3a1565773b980939c14df3f4cab15dbaee58017ecc78959698882f1f850a3a5ad1579717477b2801b6b63eea2b01f3832e455b684d099d12bef4dcf1ba51c3ddc2a6d38df71a30c1368f368707de1a8489451b42d0202a7c03c5a4f487a880f36354e4331f1205cb8d1f4b3a8aa663edc586a9d303d90f7c3a73ddeda7e63942716527926bc542a4adbc5416c539bc0c0bf2c5c04c1f1192a1488424659099c7b8ed8f792f34477801cd05cfd96cb52e1294414d9794835bf827428bd5851be7a2e3dc4ec39921c588098eb53cb5cd0116b955c20", 0xe0}, {&(0x7f0000000200)="d04da7328b056c5d892e6936447a2df76831", 0x12}, {&(0x7f0000000480)="0d6a2cf672e1062fd84f908e58ac9337bc441bef40de382c7d130e55c0cf23e3e94a9bf68f8835cbcf49f47e23fe8568f345bf40362eb121de489ff00ecadf43c4a0167f9d6216c6b39d", 0x4a}, {&(0x7f0000000540)="553ec8b992b4", 0x6}], 0x6}}], 0x1, 0x40004) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x5, 0x9, 0x2, 0x1}, 0x9, 0x0, 0x3, 0x3, 0xc, 0x1a, 0x12, 0x7, 0x5, 0x3ff, {0xe, 0x9, 0xfffffffe, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x70, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x99}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8084}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r10}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.921397743s ago: executing program 4 (id=3491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff0101ff00000000000000000000000100000000000000000200080008"], 0x80}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0x6}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7f}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x90000, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd5c"], 0xffdd) 6.728883295s ago: executing program 5 (id=3492): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3, 0x0, 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x22c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) 5.402318229s ago: executing program 1 (id=3493): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000010007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc67000ae4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x600) 4.965251248s ago: executing program 1 (id=3494): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/204, 0xcc}], &(0x7f0000000100)=[0x18, 0x966, 0x9, 0xf4], 0x4}, 0x20) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 4.508714036s ago: executing program 0 (id=3495): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (fail_nth: 9) 4.39812984s ago: executing program 5 (id=3496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x80, 0x7, {{0x45, 0x4, 0x1, 0x15, 0x114, 0x68, 0x0, 0x93, 0x2f, 0x0, @broadcast, @empty, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xb0, [@broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x1, [{@private=0xa010102, 0x7}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x11, "c64f63e8e5370d6fab4710969141a6"}, {0x1, 0x7, "c361acc668"}]}, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x9, [{@empty, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0xf, [{@remote, 0x2}, {@multicast2, 0x830c}]}, @cipso={0x86, 0x29, 0x3, [{0x7, 0x4, "e4ce"}, {0x5, 0x9, "f05bab49b70949"}, {0x0, 0xb, "1213f692a69e40d73f"}, {0x4, 0x6, "c0518fb1"}, {0x1, 0x5, "def0b0"}]}, @cipso={0x86, 0x44, 0x1, [{0x2, 0x7, "8dda280da3"}, {0x7, 0xf, "91926cae4d16a231172517a474"}, {0x2, 0xe, "860994b2fd80a02647b440b2"}, {0x7, 0xf, "c5461e73b5535e0e3ab7538610"}, {0x5, 0xb, "1ace49b14793a945a6"}]}, @lsrr={0x83, 0x17, 0xf3, [@remote, @private=0xa010101, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x20, 0x0, [{0x5, 0xa, "11a8b67e3be41700"}, {0x5, 0x10, "efcd69d0dc1152027c8d1c5ab5d9"}]}]}}}}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4e20, 0x1, 0x4e21, 0x8, 0x2, 0x40, 0xa0, 0x32, r1, r3}, {0xbb0, 0x1, 0x1, 0x1000, 0x7, 0x1, 0x8, 0x38}, {0x0, 0xd, 0x5, 0xfffffffeffffffff}, 0x0, 0x6e6bbf, 0x0, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x0, 0x0, 0x5, 0xfffffff7, 0x10001, 0x8}}, 0xe4) r4 = fcntl$getown(r0, 0x9) prlimit64(r4, 0x9, &(0x7f0000000300)={0xcd0, 0x5}, &(0x7f0000000340)) recvfrom$inet6(r0, &(0x7f0000000380)=""/54, 0x36, 0x40000000, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {0xfff3, 0xc}, {0xfff2, 0x6}}, [{0x4}, {0x4}]}, 0x2c}}, 0x8000) r6 = openat$sndtimer(0xffffff9c, &(0x7f0000000540), 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e05411, &(0x7f0000000580)=""/220) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000006c0)="4b79fc904e8d2350a63023ef4399f00aa2fc87cf3c15fd72d88080", 0x1b}, {&(0x7f0000000700)="9b1cb6010dbba4a126b8f7c04efbee9551cc425484b846b10fe5dfd08adea2b9063e5644bbf2ab3524ee94abd3ebaab9bb0fe60cb83afdd511519cd7db3ca221b0ac94050bf92f44c2291ab3b14fa290865673f1391a73af52613cce948adb1ae90788ca051747315cf71ea64126286796e4e782b108e1ccf4173a4fe986e30001ab354d5475fe87dd9507fde2915b4a90b72849d9b7c505946a4f71b29bf8bf4d9cf36b20c17c0184204e848ea564", 0xaf}, {&(0x7f00000007c0)="d8e9deed3f270bc8e7ca3966e892449a43a11833ba37b2d58019b63d3ef54a6decd402c39334a7912cc1cdf59aa84c813411fbe7d66bb854bac08124068c0c30ad224459ab6a4e8bd5fbbd375f4b833cfaaf10ce1a1b20de0387ca22f94ddacc7adc3fce2efa3f8f3047823ab1a1fffb833e4f30759dd8bcdbafefe3b22f52ef53bc6730576d", 0x86}, {&(0x7f0000000880)="e37b180d85d1e30e538b35109720b6a9ebdb6246364371daf3181ab439ee6cd5e38b2089ca5e29969605fc7cfd0719576873cdf0f2297882c80a8107cbdce91d4509dc6e82fa438fe7c73392220256f559bfaa4f74c6bd05e7e8eef28116ba6fd6", 0x61}], 0x4, &(0x7f0000000940)=[@dstopts_2292={{0x2c, 0x29, 0x4, {0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0xc}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x7fff}}, @rthdr={{0x34, 0x29, 0x39, {0x3c, 0x4, 0x1, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}], 0x70}}, {{&(0x7f00000009c0)={0xa, 0x4e20, 0x1614, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000000a00)="633058ef674b8c696ef092c74d064747c2dd37c812f5a50a407ec9b135f219ce8bf5b9b5972743a2276f70deaa0f460cffdba5e3c0f609bc8ed6cc079440e51edf0b8146b37e32b3b89ffcd74b9e694f4d", 0x51}, {&(0x7f0000000a80)="bea49585d3bfb2fe9073e09623c74b0d09f93629488312e153fa73e8afbdbcdbf1e52d23df7ab6da96a07d1a4f4cad8ce2e6e9e2471686f6317fbc3dbbb5b72bba7094f130b4952a91e14f4721c508a3739e2dd19662cc00205ac211e11833b4ab306d212627a39d57db2233accbdcbe67981d450337d4ec71cb", 0x7a}, {&(0x7f0000000b00)="dc781237eedffcebe31f17c58734e6ddf180a4a13898f23f12ff8428fce6ad9c059dd1da58e02fd2f33a0baac94f0401a9340ebd639a21afdb354c37e1437812df31dc10b5d01a0ed350704e26ef263402054290fac0df7128100d4c78933202452d6b8b1841f9df6565ba4c96e348d0930f4d74ecb7d7b2297e1989c951e105b576399a6e3eb3d7be2c0908f8c0aea9f81f0c0593a052bd320a353b8a23f0643ee26bec0d81014c41d1edaecdd6b3b6ddb7fb6a", 0xb4}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="22f546f1991eeb79c94b346e11ab0e33b6d3f307ac5fb212caf3dd8da871a847bee4538c86e30b617e0d235dda51390e80f89c0b30eb03f999893a6465f4387bd99fe850124094d9019e7b06041ece1508ebe09eb3f28abb41476c19c6bf7d3adbe90ccb2201690fe80bcfc6f7f06204c5ec0185ef79643fb64a748d740c5f56106e9ff41068e54fde821f7afa0b66e36a52f592fdf8ef89e63e1a9860c13956026f8b", 0xa3}, {&(0x7f0000001c80)="0426290faf95188a2273bf586fed607ad67a9caf4e8de9a70f79fae8bfe4c377ba8786be15", 0x25}], 0x6, &(0x7f0000001d00)=[@rthdr={{0x24, 0x29, 0x39, {0x32, 0x2, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x24}}, {{&(0x7f0000001d40)={0xa, 0x4e22, 0xd4, @empty, 0x81}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001d80)="14ccbc14e7cd59b4f942814e8064f3bfd7d7beca0211589c48a0b302ab5c350105d208ac135c957a41445524137c961d698e6453e87ba015e987b1941819eb968247233f8fc7051dceefdc0a6dd42b9906d15823f8699cfa0edbec1d4a95bf03d69999931d2e995503e1b3779aad592b2a53938c817f380edee327461bfe1147bcdb67ea6d624b27a299e6f6312a58e8d3c42e", 0x93}, {&(0x7f0000001e40)="32927e9549401d72aa77ee3f3d9c0e4ca29b595ec0e0ebcb41c538a272a1405aa222c5b6fb336947ff0e664358a2810cff0ac491378173a1639d68520c613eb556cf1795b5486d20b78fb540b8498f9e5742d4cb4f89d162da1357221406cd8b31a84564163dcdec54c3e3c83c6d406f596fe08d3df8eda64f2e52deb99a48985b84bc4b8384f59e5565dc26f8d741befa778fa533b17b86c0ceea55ea8f9775d1b07e836335dbbad421346731e1cb0e7b590abf1fd0fd7519b43ac5310679e4285a8c59007ebbce784d8e4dc2f142e4e366454349fdc958c975d6caa145f3d0416349e16f5be9", 0xe7}, {&(0x7f0000001f40)="0f7ee01a708de0b71b01410298540d924058e697d6705ce5", 0x18}, {&(0x7f0000001f80)="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", 0xfe}, {&(0x7f0000002080)="1c84eb8fda6498765edc8d2ad58de76b201603ac03dfdf0eaaa94ccf0f1c17e6e31def5e4dfc62fc1f28ee0cc6963c1234f994306f43d2ef15dcb8486e55db98f2351409a0625136aa680dee4f3a2f50d5e7bbca3839d20404fc", 0x5a}], 0x5}}, {{&(0x7f0000002140)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c, &(0x7f0000002540)=[{&(0x7f0000002180)="843d5fcff47711b2286476c7ffc55674f537a9e821ae8756b08ec7039a889b2374003267d23777f71a02cfc7791e69621d700758f4c8d3a27c28b68d97f6ef4f37297c758eb8019aade59d2ecc37817f24bb010e080fa484e97216480e5b0c3a9122b13057556e20929d2038146a751d245883fe1210d13aabc07c1acd4424326f0e2a7439c9060bd4e13daca195c6d8559dd6116aad895e9d93cf353825550c6a115a87361a83d60ca339986391f9c6d121f28e0f9212591ae03fad92c628ee4155cd618c38ed35f226562812a4af505d437df694d44ab05874ecffc7546187fa28a6064ebeca4d8619b97b1943864e7adf56c530e6", 0xf6}, {&(0x7f0000002280)="d618aab2aec1400fd67a0bc9fe4514c96fb982a98037ee8b27e7c95a220c8da64c30c28dfa2c1fbb121df59e75e7a6023f61bf77a58fe33f3d24389c246e88a76ed6d3e95ac83c185eef2f9676b73653c8346f6a1ad9ec5463fb2fd045aefbc875d5fd42e88a371c0cd2eb04283ebfab896f3692256eceb6a225d112992702cfa2878961be3e5786260a78066503278e5e431ce708748023b2f59d10bd3a1dbdaeeb9164e34b40690a360528b19e0fce9673d863b81c2f253fe4f3aad3282b57ef52c7e888df118bd5bc73ba178c574f73de997bdaa59ea2e4de19e434d7f3b8c9a5b787b9188018f2", 0xe9}, {&(0x7f0000002380)="d3a1e00a74f8d78fa2b8fafe59043430234cb2b9a62fbc281d23655c2588a2944003954dccf40808ffaa233d2ffe69178f958227fe694eb319c309dea104a012c878e826988145cb2e5d7e56667a2ae4edb016f6d8261d8ab0df62e7443adabc66c0e6b5ca6d21c54b790f1e1b430ab033b88686cf540561ea105d2ab433f0a6e1f8d7603e3dd4c3985c806ec6f4f39a8c7fef4d738c0abf2e48e2cfe90af809899041049f6a00a7cb215bc88e7fff41d9077f5044ecdb12d758abaaa0288355", 0xc0}, {&(0x7f0000002440)="025addb7c9e5626ffc6a183e15cc368781e4df82346ff2ad52d76f3b4818f4bbc8782866315ea503690fd3ce848c513717cb8eacdd9f0c14adcd5818e3ea3fabd5f676464c4d926e1eef04bece4a323e73daaa31fde5ae230b58e13b4fb4f95855f33f934e22e3f4874eb49835a79a1d758d7986ce30eeec780b908aa204c587a87d277bf26269204d5b9798745c79d05c129849992db658a6fd6cc8e9af3b3630b0543f6110fe59423d096bc13acdaabcce7420d0878c88e598260d08f54781f63f52fe8598d89c85117d8d13b36f9f239101cbcfefb818928cbb93698133812eaf3204af4f1188", 0xe8}], 0x4, &(0x7f0000002580)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0xffff}}, @rthdrdstopts={{0xcc, 0x29, 0x37, {0x8d, 0x16, '\x00', [@ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x38, {0x3, 0xc, 0xf5, 0x4, [0x0, 0x8, 0x3, 0xcb, 0x99, 0x1]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x0, 0x6, 0x13, 0xb8b6, [0x1, 0x4, 0x80000001]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x0, [0x100000000, 0x7fff, 0xfffffffffffffffe, 0x3, 0xd192]}}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x5}}, @rthdrdstopts={{0x24, 0x29, 0x37, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffc}, @jumbo={0xc2, 0x4, 0x9}]}}}, @tclass={{0x10, 0x29, 0x43, 0x7}}], 0x120}}], 0x4, 0x24000804) r7 = syz_usb_connect(0x0, 0x1232, &(0x7f0000002740)={{0x12, 0x1, 0x201, 0x3e, 0x74, 0xe6, 0x20, 0x19d2, 0xffba, 0x5cdb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1220, 0x4, 0x2, 0x5, 0xd0, 0x6, [{{0x9, 0x4, 0xa7, 0x1, 0x2, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x3, "", "d9549c"}, @as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x1}, @as_header={0x7, 0x24, 0x1, 0x6c, 0x5, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc9, 0x4, 0x9, 0x8d, "69e77cdc"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x0, '~'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x93, 0x1, 0x8, 0x4, "", '\x00'}]}], [{{0x9, 0x5, 0xe, 0x3, 0x60, 0x2, 0xe6, 0x7, [@generic={0x94, 0x22, "d0ef70fbaf86150cead6a04fbc50c9daae932ecdb2e9f436d6c59018db881b96763eccbf2c5d66be7b0bc96390af75d67c9a0fad19a3ce00dfd0a9294961feff60667d0a7115661801042a71db67718987a0ac29b178a401b5008e2a1d9e62fbd61bac195c81853578bee9c1c4964d88d7d92ce611bb0c70a0e7efc3894f63e3af5718a5dd0c8458bdadf95f858703cd0026"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x67, 0x37, 0x9, [@generic={0x1d, 0x2, "2567fb808efca2bf1989c3f2546743cfb6fb9f299710fd7001226e"}, @generic={0xd6, 0x8, "d75ea3460fe9d2ae43406ba213d6442f739acfe699187b9e387afbbd2d1f3ae176702155118b49047d918d2c8e3c2953a24d93f8dcc2236338c03f87c2d6b0b12e29472bf0b2430d68bf16747155e7f6ffcc6df25e4769f7154ac0b8a866dcff2fd66481b25950d0e058b16f2634c4de98a4d52d60aa79809373cfa185440a05c2c65644553bdbaa44ffd0930e6c89e6a081f80ebb819a81d683f7e60717405bc1e911ec1a3330001c4f0616c1b19ff7aeff90ca1015786951f619ad56dfa25edca0c9dac6010ec71a7250065f66b7e02b584975"}]}}]}}, {{0x9, 0x4, 0x8f, 0x7, 0xe, 0x83, 0x27, 0x43, 0xf6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '?'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7fff, 0x4, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x1ff, 0x8, 0x8, 0x3ff, 0xff}, @mbim={0xc, 0x24, 0x1b, 0xb, 0x7, 0x16, 0x7, 0x1, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x6}, @mdlm_detail={0x36, 0x24, 0x13, 0x6, "f004129f6cae8dcd5eb966fa0b8bfeebd6b2e4e834c340e2b57ad75cf590bc87689445280f308f8d7e4970f04195d3e0705a"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x400, 0x64, 0x1, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x1}, @generic={0xbb, 0x7, "fa441f314714e763417603777ab3c8cf73de317d0419dc0173f58faafcabf022c26f91ef17213bddead57ff47f5ef01027354c96c38f55030f1ff33f5aa56ce730e1d1c2fcaea48404138133d4e1696eff50f384c0bcd1cf41a0eb0abf7581345797804cf65dcd8328512732a7f018c5f32f298527c59752dfc5bbd99cf79fddd9c18ec9cbb971c18e447c28e5117bcaec9bb909e13dc53e932dec9ddf6f81223e3502ffe8abc76ed79e2b1a0be707c91ce78535ec016e0c2b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xd7, 0x10, 0x7, [@generic={0x50, 0x30, "72ea0a1f0d37dff54a000936282796f78c97c0367ae904b657b26b46e404eaab42cc3dc6b84f02bd5251f48089293709db3ea896b1df22beb29963814abb63a59bd4102f77292cd22ee809c987d1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x8, 0xc0, [@generic={0x83, 0x2c, "b9745fb6aa64ec141a44901b11c56979080382175400fc6e751b0b1579b217305e4e01a355f77b7d9ea04213dcedc77a874f163639a0509773b8089146b1ffbcccb8b094e5e2e48431ce60fe060d0c4fd3d5dc4ad15bcd3f624153a6cc130948f1cc3913ca3d423f73ae7c9c747daed5c348b035a460f9c4dd9567e740a3e435f6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0x4, 0xf7, [@generic={0xa9, 0x4, "e66cd28ac73b75c07114d71166d6e9de8f3c9cc1e5c21ffc177a35c2ba9ed6ae03d978fa0f6b3f60e0bc5b9ade1756296c24bca953614e887e178f6f6238deaef697cda667f4fa898480f5f3a4a15f4b2bff96cab3b80789083c90e462418f43c3bdc798a6ddbac340ee880fd43a17bdb68b3c7795712f753bd9594b9a0095d8a32857939a9866e44c7e8dbe93816d8159aeaa6821d833e744d59b86393b65281b6dbc1cab3455"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xa9, 0x3, 0x2, [@generic={0xf4, 0x4, "17ed68e6254ad79a87eebb1428c498a3cc7670ebeb392eb5938ef902eadca27efb564eda9e4d85a8ca8b75471ab249522e5c41a80887b6e3f93f1680fa10b2643dfa69afb1a24b33d2cbc77aa715f74b746c2ef3d17af7451515d7c6e94c3c9506a803138b6bdea5cc50bdbcabf3a31d9d7cf41654dcf0116446e4279641644ef65d2149e36141605f15feb787fd67eaeb9e9406fe67bd078089a25d534af531869a4f407a8526d874324cadf3ff2b191ddf42312996f90c36b234669bc936537cd4e21bd3559941b6cdf856edcb3027f697452982a9293c9d9e6c73cae23864ed891c3cc54bb6b60c7436614c454400e6a4"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x7, 0x0, 0x7, [@generic={0xd1, 0x31, "073d769f5f595054be9ffe1042ae7e6da721dc2f5b552e8824ea1f5eb69044f4136a7cfb5da77d8eee1db39ea063cb1749c9710663daa49f78d33234859f79135490803127762301d833cb4f002b4fbaa362249294d23359393ed9d873d9078b99099fc56cf067276e5830b422c2211cbaafdccfdd27d30ea847e8674def3b1f10f8059631f9ebc95441b634740fab586a25f04e534b5618b3aaf6e9301f0149c79797a82a0dfa11436d89f88e19d9303fdccc900488e6b2320eda9ab11e6516f6e907735fbbdc8c441cb7d42b3002"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x1, 0xf, [@generic={0xfe, 0x11, "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"}, @generic={0xe9, 0x19, "9fbd8649288bbf219f2a9037edf1d7c197adc26c61b5687ccc6c9f8c8c63a5841ff051c03c758dec10d9b21bb7c8fe86946397c5ac1c7d8cadcabc5f447cdd5ed0720f5fae9ea0a091bd51aa2e3c053aa31a15d5eae118e70d3ff1655db96275e3d32f3a4683f6dab625fa2f194ec314c753159efc0d1ad82b096f257aba41fdf1d34be6b11e156157f65f1d7f45bcaa36cb6ddeb7553cbacc6ac814146fd09e02d9a758e1760809c8f5c8d7c797b7cd4e62d47f5e3bb865b625ca2211e6a371ade1cd1d52cdb399c973a072b0624172ad5b0b339e0bc641f2cbfd1dcc2fa05b3093d8b0e7bfea"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x5, 0xd7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x58}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0xa, 0x7, 0x9, [@generic={0x98, 0x23, "6730791785a0e61adcabc1389e50e6e441339f6b91166156f2c34332e521863f3ca98bdbc07485d778d3db33d935e2b4af5cd3dcaf3a6f188b98b08c76443e056adb11934db6b56605594832c880286f37567d2c6af8d4318fba3641c84249ef68f5fe8c6a8e0c3ab9e592ffee35e4ce86c911bd354ae926fd85b5cc2627a273342b5487ebfe37f96326bc85a935e173e3d7cbac0b87"}, @generic={0xd0, 0x6, "681dbc8abf14b21e0a24fb5308e4417feb7d0e93ba9358781fd569408033d45957a5331ad0661b982b7a065e48fde9ad07e622f9d083030a3b236e43be2217b495cad0f025adcfcc69520cd608422422df720ddc00428c399d3c7ceb1b418d0cf015b908d960a95849b9c671165c384d0c39f3e5bc27e242002a96b90a91aaaeb09482e1d43128e3c09092f7fde74cfbf770215590991bb2dae390db49be0709702838a6378901a96a88674ead78df8be23a1285b33d9dbddb2f2146573a061466da8d4cb8d422ca1554774c656c"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x1, 0x3, 0x8, [@generic={0xac, 0x30, "419771951facf9d2140f613f74642d062982cbb2e0b03bd6539caf39781930d23cf80205e8b20ed868224cccda3168b216c895e6ca07315363b2c5fa952fa2b1d8c28b534d824bdaca4dad409b057abcbfecb4cf33ac8faf1a985fe83ee8dc35db37a437ea861e467fb5bcd063b1f8e41c11508d0f329c716e2d5f9450c3769e93a87bc931e7c96881191338de4df3e198908610638efdc0d73d6e5d595d526af596762aa9cbcb207ab2"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xf7, 0xc, 0x1, [@generic={0x38, 0xe, "0e2cb84aea84210717ba7e4b8e93755ea9d080703f7d0a1cf485bd5ecabb4a3e22186b82132216ad496e40c9476c0011dcc080dec161"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x1, 0xf, [@generic={0x2b, 0x22, "9d6f5ce8b79c4db5374fd1d80b5e1dee72f47ca59dde6b4f80e40101947a1f386e3077a38688a36e97"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x30}]}}]}}, {{0x9, 0x4, 0xb4, 0xfa, 0x2, 0xa4, 0x49, 0x79, 0x5, [@generic={0x32, 0xe, "3aada2d0b62a494158a99897632b7fd36c0a38ab403b2bed7318c4d2bd3e55dccce10996df7f928038cf6047f5d80364"}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0xef, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x10}, @generic={0x6e, 0xb, "f83d44c4683be383e459a26c2b7eab7efbf6e620542aa713978ffd1e9b9d913d6cfa623f75506973d74393e6a6a34955d5f2b75e60a3be983babf20669e40d947e417b7533fd222d466e276936728296c0b1211d6e9b7c548a6f75fc37044be19b12889fe583abe51dfa398e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0xaf, 0xf9, 0x5, [@generic={0x101, 0xf, "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"}]}}]}}, {{0x9, 0x4, 0xeb, 0x10, 0xc, 0xff, 0xff, 0xff, 0x8, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "d7"}, {0x5, 0x24, 0x0, 0x397a}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc, 0x40, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0xd, 0x2, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}]}], [{{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0x9, 0x3, [@generic={0xe1, 0x2, "3a7b0972320ca33953b344ba50e0c75095159529ace9835afe71ba2a7f7baa76b21e83cbf76cb6a2d1583e4be40ff83e5d01088113021f9ee91d1cb937cb1bc2eb21cf93328244e81228ead4ef9197e86d13e8c3993ee47938c77d69cc7732c14bd9b5c157563ab166ceb257db959e12863984c975d0950718023a5e061f8bf203b6b35dbcbcb9bb4d404cbd8e56881bb82ce965e301888d5e59fe662a7f613bccc8c923e4a057888a9404a5c4f820307b1551c8e5842903dd139a9bb1a9b4e754aa1c227e7b2858d4d023fbc20fc9d793866fe93f4a1a2453a22ce2984604"}, @generic={0xf3, 0xd, "7564bc673c084cd6f8932f7b4ea2a391241bcab64de7f5350ed7982f5ad8afd36064efcb3fcb55dd56b5179b2fdc6b0a4e2a381a8a0081674d6ee88d2d46c5f6934dbfe0e5956b6d17e8ad471dbcf09ae107e4bf2d86bf5d6a8090a6bda80c0f7ad6428cef15fb793a1b92ae8607442278b2edca5d2a5ab283d95b3f56bc10de7406b73244142d8785ff91cc8bc3bfbef6cc98512757ddaedab3cc690205ba1647f8548d877dd1248d6c6c40220b15d0c409859ea0e87d605c8e2b5cb47319a6696325dc20c4fa13dc90e9618722eb141fd1fd6205c49603e4804768f3177e75c207c9972366f28b4d2d16e98451c9536c"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x200, 0xdf, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xaf8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x7, 0x2, 0x7, [@generic={0x31, 0x6, "a00ed23e2e64cc309fe1d1a34279c3f405f4439cb731beedb4b62404e093ab7e762cf6a71b3ef1ab47996e84eb403f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x8, 0x4, 0x9, [@generic={0xa0, 0x23, "ff64150ec552989410af3c0073a54ffee2edf45a8d318065ce7076eef5f35892de31e08fa998f6bc5eb546aab9dd5c9c7aed84543e9b62a9891d0411dec3ad868ec441279d42f2e58f04e174a6410b84a1acba49a3ee6fe6f883c5dba18ddc5fcf3edc4cb6e27be343b972d159d667f44a536785303255b7e60ce08bfee1bfdec206a9944a440ce3d1c6858a27b8b7f585333402e5da7de5ca2abca48caf"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0xe, 0x10, [@generic={0xd2, 0x9, "18fa6bc41f262399db0737102c7cf24d2358f5bf83680d0e15a3cb5154e14b9dfaa9ae4780a89ca63e1a30269bcbb036d2b89bc6a6761e2ed68ce7eba019b3925b69740f386af495ba9c9d8278f68a149e2f42f10523c1ccd3afa25dc208b8c8c8b0d0b85284e8e3033f29b0cdaa06d1cc99956425a4d7207cbbef82d26e799b5369133fabab1c4a3d5c5587071699daf47ee352c9a46f677f52fc44047fbb12cf8e264a5a32204fcc7424df794eba3345c3f51afd10b0f558742d1bf9f444eb87c647b66d4ac63539382e75d4a37c57"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x8, 0x5, 0x1, [@generic={0x9, 0x23, "09ebc94afde692"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x6, 0x9, 0x2, [@generic={0x1d, 0x22, "4ebb18a2af3460188a377644b1625e18b643c052d1739738d3889a"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x0, 0xa6, 0x7d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xffbe}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x90, 0xfc, 0x8, [@generic={0x8a, 0x10, "2ca274f775e3fc38561917a3040d3bf2d95994f2181b3d03772e8efcb8a9ceb9f5bc8380d88bb2861d3deb12d46da74d1177a384c495066c530dbad8d5d750e065744a9cf509ad6fbf573d4053985102e54728b33b0fed235f5df15c564be775add01d5bebba5a971258861b8ad5d4bdef2dbe8c18eb67ad8eb6596391eb630790a975679acde292"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff8}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0xd, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xed5}]}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0x6, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x6}]}}]}}]}}]}}, &(0x7f0000003d00)={0xa, &(0x7f0000003980)={0xa, 0x6, 0x110, 0xd, 0x8, 0x0, 0x40, 0x8}, 0x2f, &(0x7f00000039c0)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7, 0xf00, 0xff, [0xffc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x4, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0xff00, 0x0, [0x30]}]}, 0x6, [{0x34, &(0x7f0000003a00)=@string={0x34, 0x3, "dd2ebdfbf75ab064926d49dbc52177260eb0bb0007f0413b086f7a99bc87003272c1fb8b21286f0b3797738c8fad8053ef48"}}, {0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x81d}}, {0xa3, &(0x7f0000003a80)=@string={0xa3, 0x3, "0d3b6d95faf3d0f888699a87c1c9a7b8a7b08b113e49657a549b5373f688c6a74ced26411df2b08c1610a46790d5572e299f46be7029d94449aa04e3b8e25291df4c9f15bbb20d95adee9c04575a9faacc52748754f3023f912764f7490c6d11921a9124690c51a33435cddc94a72ba8b63c5f177455ec5fd1c173083ebd6d0ea50d494ecb79ac70b0d33a08b7841dbe6fc0678d9516efa74791e1a26a503dcfc0"}}, {0xb1, &(0x7f0000003b40)=@string={0xb1, 0x3, "230ebbd1804818695e1cdd9da0bc2f967a92a0ab2f8bbec86941d1ec639a1e09f133550175681d975402c9e382d27a9a2642e3180ad37ab308f7ba0c886e3be081b54593739c0cc0bfd12b26e731b22f6fe8729aab3da9015a45f79a1a2ddcdb2d517ea9bc1801ddf218c230e44bc08c42aa15efdab576b14a529a66879dc7395fba9c2f03f718bc70d40a647738a0420b27c4c61d52b047f6ceb4726e3ff96ad29351fc1e9e9f735171736c0268ea"}}, {0xab, &(0x7f0000003c00)=@string={0xab, 0x3, "a6610828555bcb11423718e95c59b472f6566f51b007e7ab8579c16dee92a706275c785d69daf59e4c00b5130dbc673f4a9dd6514d95a9e05427d6e33f242322de252eddfe93977a76739583042321f9cd53c719a2d49546e9415ab21d17ecef7bf33c1a6cc134f3c76a781c1248dc95bc762ef493850b69d3127bd8bb8c7ea83217cf96ef6e4d156153bcfeaee7d6c16c355999e2ae0b7df7b076795e34a5a7d752796a3d3a56e13e"}}, {0x4, &(0x7f0000003cc0)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_control_io(r7, &(0x7f0000003f00)={0x18, &(0x7f0000003d80)={0x40, 0x23, 0x5e, {0x5e, 0x23, "1a081e942e6087ffc3d6ea1abaa4204532202cea6dc6eb776a120407b2e6ee8c5de7df6a5b431fef93e9b36a22fd5060d300f6a47eafd99863dd80c9145f41e8c9f2fd1372c1cd485632c2d4090e49c965da76ae3499acbadf609e1e"}}, &(0x7f0000003e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c6e}}, &(0x7f0000003e40)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ebfbe9760763b221324b10260fe62860"}]}}, &(0x7f0000003e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x69, 0x2, 0x8, 0x1, "7e6db100", "1c604752"}}, &(0x7f0000003ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0x4, 0x5, 0x0, 0x8000, 0x1ff}}}, &(0x7f0000004380)={0x44, &(0x7f0000003f40)={0x40, 0x17, 0x5e, "ad8c0a8c3277961622e95b24f5818c07a6c19e022ac9d21cf1b8fefdabf584bcb59ae19e18afe0c43e2300d9a0b7cec3df458b2fae2d412c05f2f2571054f89da7d9fb77a15e23978db82dd6047671fbcbc03a3214df15513dc518b8d562"}, &(0x7f0000003fc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000004000)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000004040)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000004080)={0x20, 0x0, 0x8, {0x20, 0x80, [0xff]}}, &(0x7f00000040c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000004100)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000004140)={0x40, 0xb, 0x2, "95dd"}, &(0x7f0000004180)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000041c0)={0x40, 0x13, 0x6}, &(0x7f0000004200)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000004240)={0x40, 0x19, 0x2, 'Y\t'}, &(0x7f0000004280)={0x40, 0x1a, 0x2}, &(0x7f00000042c0)={0x40, 0x1c, 0x1}, &(0x7f0000004300)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000004340)={0x40, 0x21, 0x1, 0x6}}) shutdown(r0, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x15830, r6, 0xbaff6000) socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat2$dir(0xffffff9c, &(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x80, 0x22}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) move_mount(r8, &(0x7f0000004480)='./file0\x00', r9, &(0x7f0000004500)='./file0\x00', 0x1) ioctl$DRM_IOCTL_SET_UNIQUE(r9, 0x40086410, &(0x7f0000004640)={0xfe, &(0x7f0000004540)="233c5f01f13b49d268c763ea695cb99b7d1176dd62f3364d2f5cefea8524c36c23f8bb6c2c35a3a21be2957df676704de33b071a173488a3d3f65e72c64255175c0149f374248cad41a6d8fab5d6734aa90c7777ab8a2941cdbcb66b29e50ddc15e095ed25479a567e3183bc5816558e2b55c3edd7e9b88ebe2b8d8a7fa7c6e17310d39fc2a982b53a35fb6f0ee77e05e1e88a219e17f77927133caa3ba63b136844b729306ec3a2621f84198cc3eb28df0297092b8ff65825cd62c66afb7033621ee38f04625a266d8974c4573c56900019961f2193ba170fdb8e0c05b6cc55f4b902057b13586f2f2a334c6f3880eed53308197ebddd83c7b953c09148"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0x40405515, &(0x7f0000004680)={0x6, 0x6, 0x17, 0x5, 'syz0\x00', 0x8}) ptrace(0x11, r4) ioctl$I2C_TENBIT(r9, 0x704, 0x1) r10 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000046c0), 0x101800, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x28, 0x140a, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x2) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_procfs(r2, &(0x7f0000004800)='net/fib_triestat\x00') shutdown(0xffffffffffffffff, 0x3) 4.068489911s ago: executing program 0 (id=3497): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) (fail_nth: 9) 3.397788019s ago: executing program 0 (id=3498): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.985936092s ago: executing program 1 (id=3499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b4, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bf0bc37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x79, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x6, 0x7f00]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f00000001c0)='./file0\x00', 0x101002, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x2, 0x0, 0x0) statfs(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r7, 0xf, &(0x7f0000000140)) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r8, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) sendmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='&', 0x1}], 0x1, 0x0, 0x0, 0x4004044}}], 0x1, 0x40015) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000080)={0xb0a0, 0x1, 0x3}, 0x15, 0x0) landlock_restrict_self(r11, 0x0) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) r13 = accept4(r12, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0x7d, &(0x7f0000000100)={0x0, 0x8, 0x203, 0x0, 0x5, 0x3, 0x4, 0x7}, &(0x7f0000000140)=0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e4, 0x2f8, 0xffffff80, 0x178, 0x0, 0x178, 0x44c, 0x230, 0x258, 0x44c, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa4, 0xc8, 0x340, {0x1e0002a8, 0x7203000000000c00}}, @common=@unspec=@AUDIT={0x24}}, {{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x154, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x24}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) 2.985594566s ago: executing program 0 (id=3500): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000804) (fail_nth: 9) 1.005463918s ago: executing program 5 (id=3501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 457.763237ms ago: executing program 4 (id=3502): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/69, 0x94}, {0x0}], 0x2}, 0x7}], 0x1, 0x10000, 0x0) (fail_nth: 3) 444.975435ms ago: executing program 1 (id=3503): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x101}]}]}]}}]}, 0xac}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x6f, 0xe4, 0x14}}]}}]}}, 0x0) 333.384165ms ago: executing program 0 (id=3504): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xbf5, 0x20200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000080d0500020007000000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000180)={0xf000000, 0x800, 0x1, r4, 0x0, &(0x7f0000000140)={0x990a79, 0x5, '\x00', @p_u8=&(0x7f0000000100)=0xf}}) 330.900623ms ago: executing program 2 (id=3505): fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="040150"], 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ce7e12d0d1f64d525008a78955d1c584478e9f", 0x73ba}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffd68, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) r7 = syz_open_dev$vcsn(&(0x7f0000000000), 0x22, 0x200) read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000000)={0x6, 0x7, 0x10021da0, 0x8, 0x9, "8e5aec777600", 0xfffffffe, 0x1c67c}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000080)) pread64(r5, &(0x7f0000000140)=""/237, 0xed, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x29, 0x5, 0x49, 0x0, 0xc, @remote, @private0, 0x40, 0x20, 0x7, 0x3}}) 2.608797ms ago: executing program 0 (id=3506): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) syz_clone3(&(0x7f0000000580)={0x60080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001ec0)=@assoc_value={r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000001000001003110c3eb8803160000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000804) 893.489µs ago: executing program 2 (id=3507): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/204, 0xcc}], &(0x7f0000000100)=[0x18, 0x966, 0x9, 0xf4], 0x4}, 0x20) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 247.113µs ago: executing program 5 (id=3508): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x13) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/204, 0xcc}], &(0x7f0000000100)=[0x18, 0x966, 0x9, 0xf4], 0x4}, 0x20) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) 0s ago: executing program 4 (id=3509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): [ 1213.921044][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1213.932391][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1214.015734][T17460] netlink: 'syz.4.3258': attribute type 12 has an invalid length. [ 1214.057684][T17462] Cannot find add_set index 0 as target [ 1214.124977][T15549] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1214.194325][ T5890] usb 6-1: USB disconnect, device number 16 [ 1214.285637][T17466] FAULT_INJECTION: forcing a failure. [ 1214.285637][T17466] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.303462][T17466] CPU: 0 UID: 0 PID: 17466 Comm: syz.5.3259 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1214.303494][T17466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1214.303507][T17466] Call Trace: [ 1214.303515][T17466] [ 1214.303524][T17466] dump_stack_lvl+0x189/0x250 [ 1214.303563][T17466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1214.303592][T17466] ? __pfx__printk+0x10/0x10 [ 1214.303609][T17466] ? __lock_acquire+0xaac/0xd20 [ 1214.303652][T17466] should_fail_ex+0x414/0x560 [ 1214.303678][T17466] should_failslab+0xa8/0x100 [ 1214.303708][T17466] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1214.303733][T17466] ? skb_clone+0x212/0x3a0 [ 1214.303766][T17466] skb_clone+0x212/0x3a0 [ 1214.303798][T17466] __netlink_deliver_tap+0x404/0x850 [ 1214.303834][T17466] ? netlink_deliver_tap+0x2e/0x1b0 [ 1214.303858][T17466] netlink_deliver_tap+0x19c/0x1b0 [ 1214.303883][T17466] netlink_sendskb+0x68/0x140 [ 1214.303917][T17466] netlink_rcv_skb+0x2a0/0x490 [ 1214.303941][T17466] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1214.303975][T17466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1214.304023][T17466] ? down_read+0x1ad/0x2e0 [ 1214.304053][T17466] genl_rcv+0x28/0x40 [ 1214.304078][T17466] netlink_unicast+0x758/0x8d0 [ 1214.304110][T17466] netlink_sendmsg+0x805/0xb30 [ 1214.304144][T17466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.304170][T17466] ? __import_iovec+0x5d4/0x7f0 [ 1214.304195][T17466] ? aa_sock_msg_perm+0x94/0x160 [ 1214.304220][T17466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1214.304243][T17466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.304267][T17466] __sock_sendmsg+0x219/0x270 [ 1214.304291][T17466] ____sys_sendmsg+0x505/0x830 [ 1214.304324][T17466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.304369][T17466] ___sys_sendmsg+0x21f/0x2a0 [ 1214.304398][T17466] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.304471][T17466] ? __fget_files+0x2a/0x420 [ 1214.304497][T17466] ? __fget_files+0x3a0/0x420 [ 1214.304534][T17466] __sys_sendmsg+0x164/0x220 [ 1214.304562][T17466] ? __pfx___sys_sendmsg+0x10/0x10 [ 1214.304606][T17466] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1214.304632][T17466] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.304658][T17466] __do_fast_syscall_32+0xb4/0x110 [ 1214.304685][T17466] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.304713][T17466] do_fast_syscall_32+0x34/0x80 [ 1214.304739][T17466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1214.304763][T17466] RIP: 0023:0xf70de539 [ 1214.304781][T17466] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1214.304799][T17466] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1214.304820][T17466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 1214.304835][T17466] RDX: 0000000000008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.304847][T17466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1214.304860][T17466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1214.304872][T17466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1214.304903][T17466] [ 1214.665943][T15549] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 1214.676244][T15549] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.686981][T15549] usb 2-1: config 0 has no interface number 0 [ 1214.696387][T15549] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1214.706644][T15549] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1214.719881][T15549] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1214.729233][T15549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.739942][T15549] usb 2-1: config 0 descriptor?? [ 1214.748743][T15549] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1214.957655][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.984831][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.004308][T17468] FAULT_INJECTION: forcing a failure. [ 1215.004308][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.103221][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.4.3260 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1215.103245][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1215.103256][T17468] Call Trace: [ 1215.103262][T17468] [ 1215.103269][T17468] dump_stack_lvl+0x189/0x250 [ 1215.103297][T17468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.103319][T17468] ? __pfx__printk+0x10/0x10 [ 1215.103331][T17468] ? __lock_acquire+0xaac/0xd20 [ 1215.103364][T17468] should_fail_ex+0x414/0x560 [ 1215.103384][T17468] should_failslab+0xa8/0x100 [ 1215.103405][T17468] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1215.103422][T17468] ? skb_clone+0x212/0x3a0 [ 1215.103445][T17468] skb_clone+0x212/0x3a0 [ 1215.103468][T17468] __netlink_deliver_tap+0x404/0x850 [ 1215.103494][T17468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1215.103510][T17468] netlink_deliver_tap+0x19c/0x1b0 [ 1215.103527][T17468] netlink_sendskb+0x68/0x140 [ 1215.103552][T17468] netlink_rcv_skb+0x2a0/0x490 [ 1215.103568][T17468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1215.103590][T17468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1215.103623][T17468] ? down_read+0x1ad/0x2e0 [ 1215.103644][T17468] genl_rcv+0x28/0x40 [ 1215.103662][T17468] netlink_unicast+0x758/0x8d0 [ 1215.103684][T17468] netlink_sendmsg+0x805/0xb30 [ 1215.103707][T17468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.103726][T17468] ? __import_iovec+0x5d4/0x7f0 [ 1215.103743][T17468] ? aa_sock_msg_perm+0x94/0x160 [ 1215.103761][T17468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1215.103777][T17468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.103799][T17468] __sock_sendmsg+0x219/0x270 [ 1215.103815][T17468] ____sys_sendmsg+0x505/0x830 [ 1215.103839][T17468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1215.103869][T17468] ___sys_sendmsg+0x21f/0x2a0 [ 1215.103890][T17468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1215.103936][T17468] ? __fget_files+0x2a/0x420 [ 1215.103954][T17468] ? __fget_files+0x3a0/0x420 [ 1215.103979][T17468] __sys_sendmsg+0x164/0x220 [ 1215.104000][T17468] ? __pfx___sys_sendmsg+0x10/0x10 [ 1215.104029][T17468] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1215.104048][T17468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.104066][T17468] __do_fast_syscall_32+0xb4/0x110 [ 1215.104085][T17468] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.104110][T17468] do_fast_syscall_32+0x34/0x80 [ 1215.104129][T17468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.104147][T17468] RIP: 0023:0xf712e539 [ 1215.104159][T17468] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1215.104172][T17468] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1215.104187][T17468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1215.104198][T17468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.104211][T17468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.104223][T17468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1215.104235][T17468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.104265][T17468] [ 1215.532754][ T5893] usb 3-1: USB disconnect, device number 94 [ 1215.551819][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3262'. [ 1215.619731][T15549] usb 2-1: USB disconnect, device number 45 [ 1215.935015][ T5891] usb 1-1: USB disconnect, device number 84 [ 1216.423159][ T5890] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1216.685850][ T5890] usb 5-1: config 0 has no interfaces? [ 1216.699128][ T5890] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1216.708733][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.723200][ T5890] usb 5-1: Product: syz [ 1216.728595][ T5890] usb 5-1: Manufacturer: syz [ 1216.795955][ T5890] usb 5-1: SerialNumber: syz [ 1216.836596][ T5890] usb 5-1: config 0 descriptor?? [ 1216.853149][ T5893] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1217.089007][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1217.177785][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 1217.293043][ T5893] usb 1-1: config 0 has no interfaces? [ 1217.387934][ T5893] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1217.399791][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.411026][ T5893] usb 1-1: Product: syz [ 1217.443760][ T5893] usb 1-1: Manufacturer: syz [ 1217.448613][ T5893] usb 1-1: SerialNumber: syz [ 1217.460914][ T5893] usb 1-1: config 0 descriptor?? [ 1217.493389][ T5890] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1217.686262][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1217.707672][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.842666][ T5890] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1217.873434][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.907104][ T5890] usb 2-1: config 0 descriptor?? [ 1218.087775][T17516] FAULT_INJECTION: forcing a failure. [ 1218.087775][T17516] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.142012][T17516] CPU: 0 UID: 0 PID: 17516 Comm: syz.2.3276 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1218.142042][T17516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1218.142056][T17516] Call Trace: [ 1218.142065][T17516] [ 1218.142074][T17516] dump_stack_lvl+0x189/0x250 [ 1218.142111][T17516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1218.142140][T17516] ? __pfx__printk+0x10/0x10 [ 1218.142157][T17516] ? __lock_acquire+0xaac/0xd20 [ 1218.142211][T17516] should_fail_ex+0x414/0x560 [ 1218.142237][T17516] should_failslab+0xa8/0x100 [ 1218.142267][T17516] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1218.142292][T17516] ? skb_clone+0x212/0x3a0 [ 1218.142324][T17516] skb_clone+0x212/0x3a0 [ 1218.142357][T17516] __netlink_deliver_tap+0x404/0x850 [ 1218.142394][T17516] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.142418][T17516] netlink_deliver_tap+0x19c/0x1b0 [ 1218.142442][T17516] netlink_sendskb+0x68/0x140 [ 1218.142477][T17516] netlink_rcv_skb+0x2a0/0x490 [ 1218.142501][T17516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1218.142532][T17516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1218.142580][T17516] ? down_read+0x1ad/0x2e0 [ 1218.142610][T17516] genl_rcv+0x28/0x40 [ 1218.142637][T17516] netlink_unicast+0x758/0x8d0 [ 1218.142669][T17516] netlink_sendmsg+0x805/0xb30 [ 1218.142699][T17516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.142728][T17516] ? __import_iovec+0x5d4/0x7f0 [ 1218.142753][T17516] ? aa_sock_msg_perm+0x94/0x160 [ 1218.142777][T17516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1218.142801][T17516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.142824][T17516] __sock_sendmsg+0x219/0x270 [ 1218.142847][T17516] ____sys_sendmsg+0x505/0x830 [ 1218.142879][T17516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.142925][T17516] ___sys_sendmsg+0x21f/0x2a0 [ 1218.142955][T17516] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.143018][T17516] ? __fget_files+0x2a/0x420 [ 1218.143043][T17516] ? __fget_files+0x3a0/0x420 [ 1218.143081][T17516] __sys_sendmsg+0x164/0x220 [ 1218.143109][T17516] ? __pfx___sys_sendmsg+0x10/0x10 [ 1218.143152][T17516] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1218.143185][T17516] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.143212][T17516] __do_fast_syscall_32+0xb4/0x110 [ 1218.143238][T17516] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.143264][T17516] do_fast_syscall_32+0x34/0x80 [ 1218.143291][T17516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1218.143316][T17516] RIP: 0023:0xf7f45539 [ 1218.143334][T17516] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1218.143352][T17516] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1218.143374][T17516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1218.143389][T17516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1218.143401][T17516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1218.143413][T17516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1218.143426][T17516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1218.143457][T17516] [ 1218.500516][ T5890] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1218.530460][ T5890] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1218.685144][ T5890] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1218.721669][ T5890] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1218.738609][T17518] netlink: 'syz.5.3277': attribute type 21 has an invalid length. [ 1218.750030][ T5890] elan 0003:04F3:0755.0020: unknown main item tag 0x0 [ 1218.759391][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 1218.776784][ T5890] elan 0003:04F3:0755.0020: failed to start in urb: -90 [ 1218.805817][ T5890] elan 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1218.882980][ T5890] usb 2-1: USB disconnect, device number 46 [ 1219.005577][T17522] fido_id[17522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1219.311035][T17532] FAULT_INJECTION: forcing a failure. [ 1219.311035][T17532] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.325796][T17532] CPU: 0 UID: 0 PID: 17532 Comm: syz.2.3283 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1219.325826][T17532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1219.325839][T17532] Call Trace: [ 1219.325849][T17532] [ 1219.325858][T17532] dump_stack_lvl+0x189/0x250 [ 1219.325896][T17532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.325932][T17532] ? __pfx__printk+0x10/0x10 [ 1219.325949][T17532] ? __lock_acquire+0xaac/0xd20 [ 1219.325994][T17532] should_fail_ex+0x414/0x560 [ 1219.326019][T17532] should_failslab+0xa8/0x100 [ 1219.326048][T17532] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1219.326073][T17532] ? skb_clone+0x212/0x3a0 [ 1219.326106][T17532] skb_clone+0x212/0x3a0 [ 1219.326137][T17532] __netlink_deliver_tap+0x404/0x850 [ 1219.326174][T17532] ? netlink_deliver_tap+0x2e/0x1b0 [ 1219.326198][T17532] netlink_deliver_tap+0x19c/0x1b0 [ 1219.326221][T17532] netlink_sendskb+0x68/0x140 [ 1219.326255][T17532] netlink_rcv_skb+0x2a0/0x490 [ 1219.326278][T17532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1219.326308][T17532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1219.326356][T17532] ? down_read+0x1ad/0x2e0 [ 1219.326386][T17532] genl_rcv+0x28/0x40 [ 1219.326411][T17532] netlink_unicast+0x758/0x8d0 [ 1219.326442][T17532] netlink_sendmsg+0x805/0xb30 [ 1219.326475][T17532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.326500][T17532] ? __import_iovec+0x5d4/0x7f0 [ 1219.326525][T17532] ? aa_sock_msg_perm+0x94/0x160 [ 1219.326549][T17532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1219.326572][T17532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.326595][T17532] __sock_sendmsg+0x219/0x270 [ 1219.326619][T17532] ____sys_sendmsg+0x505/0x830 [ 1219.326652][T17532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.326698][T17532] ___sys_sendmsg+0x21f/0x2a0 [ 1219.326727][T17532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.326798][T17532] ? __fget_files+0x2a/0x420 [ 1219.326824][T17532] ? __fget_files+0x3a0/0x420 [ 1219.326862][T17532] __sys_sendmsg+0x164/0x220 [ 1219.326890][T17532] ? __pfx___sys_sendmsg+0x10/0x10 [ 1219.326938][T17532] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1219.326964][T17532] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.326990][T17532] __do_fast_syscall_32+0xb4/0x110 [ 1219.327016][T17532] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.327044][T17532] do_fast_syscall_32+0x34/0x80 [ 1219.327070][T17532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.327094][T17532] RIP: 0023:0xf7f45539 [ 1219.327111][T17532] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1219.327130][T17532] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1219.327151][T17532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1219.327165][T17532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.327178][T17532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1219.327190][T17532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1219.327202][T17532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1219.327234][T17532] [ 1219.700559][ T978] usb 1-1: USB disconnect, device number 85 [ 1219.925704][ T5890] usb 5-1: USB disconnect, device number 87 [ 1220.240319][T17550] netlink: 'syz.5.3289': attribute type 3 has an invalid length. [ 1220.287132][T17550] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1220.343190][ T978] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1220.524325][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 1220.555186][ T978] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1220.612432][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.696622][ T978] usb 3-1: Product: syz [ 1220.700848][ T978] usb 3-1: Manufacturer: syz [ 1220.730434][ T978] usb 3-1: SerialNumber: syz [ 1220.760027][ T978] usb 3-1: config 0 descriptor?? [ 1221.143130][ T5890] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1221.217691][ T978] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1221.335469][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 1221.414988][ T5890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1221.446954][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.882137][ T5890] usb 6-1: Product: syz [ 1221.900543][ T5890] usb 6-1: Manufacturer: syz [ 1221.927291][ T5890] usb 6-1: SerialNumber: syz [ 1222.035639][ T5890] usb 6-1: config 0 descriptor?? [ 1222.379620][ T5890] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1222.796806][ T978] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1222.818180][ T978] usb 3-1: USB disconnect, device number 95 [ 1222.895852][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1223.662549][ T5890] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1223.676787][ T5890] usb 6-1: USB disconnect, device number 17 [ 1224.544884][ T978] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1224.717038][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1224.730130][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.746011][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.760921][ T978] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1224.774010][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.784063][T17614] openvswitch: netlink: Actions may not be safe on all matching packets [ 1224.814480][ T978] usb 6-1: config 0 descriptor?? [ 1224.832815][ T978] hub 6-1:0.0: USB hub found [ 1225.067540][ T978] hub 6-1:0.0: 1 port detected [ 1225.481209][ T978] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1225.501783][ T978] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1225.529233][ T978] usbhid 6-1:0.0: can't add hid device: -71 [ 1225.571494][ T978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1225.619499][ T978] usb 6-1: USB disconnect, device number 18 [ 1227.493121][ T978] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1227.613234][T15549] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1227.683596][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 1227.698950][T17643] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1227.705515][T17643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1227.754834][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1227.783320][T17643] vhci_hcd vhci_hcd.0: Device attached [ 1227.843071][T15549] usb 2-1: Using ep0 maxpacket: 8 [ 1227.849379][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.851828][T17644] vhci_hcd: connection closed [ 1227.886604][ T978] usb 1-1: Product: syz [ 1227.912030][T15549] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1227.921604][T12698] vhci_hcd: stop threads [ 1227.984306][T12698] vhci_hcd: release socket [ 1227.994046][T15549] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.018074][ T978] usb 1-1: Manufacturer: syz [ 1228.027855][ T978] usb 1-1: SerialNumber: syz [ 1228.054126][ T5890] usb 44-1: SetAddress Request (2) to port 0 [ 1228.060424][T15549] usb 2-1: Product: syz [ 1228.068594][T12698] vhci_hcd: disconnect device [ 1228.073839][T15549] usb 2-1: Manufacturer: syz [ 1228.083731][ T5890] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1228.104467][ T978] usb 1-1: config 0 descriptor?? [ 1228.109557][T15549] usb 2-1: SerialNumber: syz [ 1228.133438][ T5890] usb 44-1: enqueue for inactive port 0 [ 1228.148197][T15549] usb 2-1: config 0 descriptor?? [ 1228.413765][T15549] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1228.436907][ T978] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1228.525080][ T5890] usb usb44-port1: attempt power cycle [ 1228.663156][ T5891] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1228.703203][ T5893] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1228.836622][ T5891] usb 3-1: not running at top speed; connect to a high speed hub [ 1228.845762][ T5891] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1228.867677][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1228.874761][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.878180][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.897716][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.907884][ T5893] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1228.917106][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.933965][ T5893] usb 5-1: config 0 descriptor?? [ 1228.964153][ T5891] usb 3-1: Manufacturer: ᐁ [ 1228.974159][ T5891] usb 3-1: SerialNumber: 鰌䨈젬刹﮹ [ 1229.084673][ T5890] usb usb44-port1: unable to enumerate USB device [ 1229.385545][ T5893] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 1229.412788][ T5893] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1229.580173][ T5893] cp2112 0003:10C4:EA90.0021: Part Number: 0x46 Device Version: 0xDB [ 1229.665493][T15549] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1229.690480][ T978] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1229.714821][T15549] usb 2-1: USB disconnect, device number 47 [ 1229.741831][ T978] usb 1-1: USB disconnect, device number 86 [ 1229.795398][ T5893] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 1229.818306][ T5893] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -71 [ 1229.855533][ T5893] usb 5-1: USB disconnect, device number 88 [ 1230.420969][T17667] FAULT_INJECTION: forcing a failure. [ 1230.420969][T17667] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.434357][T17667] CPU: 0 UID: 0 PID: 17667 Comm: syz.4.3323 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1230.434386][T17667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1230.434401][T17667] Call Trace: [ 1230.434410][T17667] [ 1230.434420][T17667] dump_stack_lvl+0x189/0x250 [ 1230.434454][T17667] ? kasan_save_track+0x3e/0x80 [ 1230.434476][T17667] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1230.434503][T17667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.434532][T17667] ? __pfx__printk+0x10/0x10 [ 1230.434560][T17667] ? __lock_acquire+0xaac/0xd20 [ 1230.434594][T17667] should_fail_ex+0x414/0x560 [ 1230.434620][T17667] should_failslab+0xa8/0x100 [ 1230.434648][T17667] __kmalloc_noprof+0xcb/0x4f0 [ 1230.434672][T17667] ? tcp_sigpool_start+0x1ff/0x940 [ 1230.434702][T17667] ? tcp_sigpool_start+0x20/0x940 [ 1230.434730][T17667] tcp_sigpool_start+0x1ff/0x940 [ 1230.434762][T17667] tcp_v6_md5_hash_skb+0x1b6/0x4e0 [ 1230.434799][T17667] ? __pfx_tcp_v6_md5_hash_skb+0x10/0x10 [ 1230.434840][T17667] __tcp_transmit_skb+0x3556/0x36c0 [ 1230.434876][T17667] ? __asan_memcpy+0x40/0x70 [ 1230.434900][T17667] ? __asan_memcpy+0x40/0x70 [ 1230.434928][T17667] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1230.434987][T17667] tcp_rcv_state_process+0x13d2/0x4190 [ 1230.435039][T17667] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 1230.435078][T17667] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1230.435110][T17667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.435138][T17667] tcp_v6_do_rcv+0x89d/0x13f0 [ 1230.435169][T17667] ? do_raw_spin_unlock+0x122/0x240 [ 1230.435197][T17667] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1230.435224][T17667] __release_sock+0x1c5/0x350 [ 1230.435265][T17667] release_sock+0x5f/0x1f0 [ 1230.435290][T17667] tcp_sendmsg+0x39/0x50 [ 1230.435321][T17667] __sock_sendmsg+0xe5/0x270 [ 1230.435344][T17667] __sys_sendto+0x3bd/0x520 [ 1230.435372][T17667] ? __pfx___sys_sendto+0x10/0x10 [ 1230.435392][T17667] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1230.435430][T17667] ? __fget_files+0x3a0/0x420 [ 1230.435469][T17667] ? ksys_write+0x1f0/0x250 [ 1230.435501][T17667] __ia32_sys_sendto+0xdd/0x100 [ 1230.435528][T17667] __do_fast_syscall_32+0xb4/0x110 [ 1230.435555][T17667] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.435584][T17667] do_fast_syscall_32+0x34/0x80 [ 1230.435609][T17667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1230.435633][T17667] RIP: 0023:0xf712e539 [ 1230.435652][T17667] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1230.435671][T17667] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1230.435693][T17667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1230.435708][T17667] RDX: 0000000000000000 RSI: 0000000020008045 RDI: 00000000800001c0 [ 1230.435721][T17667] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1230.435733][T17667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1230.435746][T17667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1230.435776][T17667] [ 1230.744584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1230.947437][T17676] FAULT_INJECTION: forcing a failure. [ 1230.947437][T17676] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.972587][T17676] CPU: 1 UID: 0 PID: 17676 Comm: syz.0.3325 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1230.972618][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1230.972631][T17676] Call Trace: [ 1230.972644][T17676] [ 1230.972654][T17676] dump_stack_lvl+0x189/0x250 [ 1230.972693][T17676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.972724][T17676] ? __pfx__printk+0x10/0x10 [ 1230.972746][T17676] ? __pfx___might_resched+0x10/0x10 [ 1230.972764][T17676] ? fs_reclaim_acquire+0x7d/0x100 [ 1230.972790][T17676] should_fail_ex+0x414/0x560 [ 1230.972808][T17676] should_failslab+0xa8/0x100 [ 1230.972829][T17676] __kmalloc_noprof+0xcb/0x4f0 [ 1230.972846][T17676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.972862][T17676] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1230.972887][T17676] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1230.972914][T17676] genl_family_rcv_msg_doit+0xb8/0x300 [ 1230.972939][T17676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1230.972961][T17676] ? rcu_is_watching+0x15/0xb0 [ 1230.972990][T17676] ? apparmor_capable+0x137/0x1b0 [ 1230.973020][T17676] ? bpf_lsm_capable+0x9/0x20 [ 1230.973047][T17676] ? security_capable+0x7e/0x2e0 [ 1230.973074][T17676] genl_rcv_msg+0x60e/0x790 [ 1230.973108][T17676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1230.973136][T17676] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1230.973162][T17676] ? ref_tracker_free+0x63a/0x7d0 [ 1230.973182][T17676] ? __copy_skb_header+0xa7/0x550 [ 1230.973220][T17676] netlink_rcv_skb+0x219/0x490 [ 1230.973251][T17676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1230.973280][T17676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1230.973327][T17676] ? down_read+0x1ad/0x2e0 [ 1230.973357][T17676] genl_rcv+0x28/0x40 [ 1230.973383][T17676] netlink_unicast+0x758/0x8d0 [ 1230.973415][T17676] netlink_sendmsg+0x805/0xb30 [ 1230.973448][T17676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.973474][T17676] ? __import_iovec+0x5d4/0x7f0 [ 1230.973499][T17676] ? aa_sock_msg_perm+0x94/0x160 [ 1230.973523][T17676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1230.973545][T17676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.973568][T17676] __sock_sendmsg+0x219/0x270 [ 1230.973592][T17676] ____sys_sendmsg+0x505/0x830 [ 1230.973625][T17676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.973669][T17676] ___sys_sendmsg+0x21f/0x2a0 [ 1230.973698][T17676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.973764][T17676] ? __fget_files+0x2a/0x420 [ 1230.973789][T17676] ? __fget_files+0x3a0/0x420 [ 1230.973825][T17676] __sys_sendmsg+0x164/0x220 [ 1230.973854][T17676] ? __pfx___sys_sendmsg+0x10/0x10 [ 1230.973897][T17676] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1230.973922][T17676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.973949][T17676] __do_fast_syscall_32+0xb4/0x110 [ 1230.973974][T17676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.974002][T17676] do_fast_syscall_32+0x34/0x80 [ 1230.974028][T17676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1230.974053][T17676] RIP: 0023:0xf70de539 [ 1230.974071][T17676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1230.974088][T17676] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1230.974110][T17676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1230.974124][T17676] RDX: 0000000002008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1230.974136][T17676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1230.974148][T17676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1230.974160][T17676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1230.974189][T17676] [ 1232.453599][ T978] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1232.607305][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 1232.623169][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1232.649083][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.657818][ T978] usb 1-1: Product: syz [ 1232.662137][ T978] usb 1-1: Manufacturer: syz [ 1232.672403][ T978] usb 1-1: SerialNumber: syz [ 1232.701167][ T978] usb 1-1: config 0 descriptor?? [ 1232.963766][ T978] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1233.839058][ T5891] cdc_ncm 3-1:1.0: bind() failure [ 1233.882612][ T5891] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1233.941891][ T5891] cdc_ncm 3-1:1.1: bind() failure [ 1233.953847][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1233.953866][ T30] audit: type=1326 audit(1746794199.927:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1233.973551][ T5891] usb 3-1: USB disconnect, device number 96 [ 1234.084967][ T30] audit: type=1326 audit(1746794199.927:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.104502][T17703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3335'. [ 1234.163135][ T30] audit: type=1326 audit(1746794199.927:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.263631][ T978] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1234.288404][ T978] usb 1-1: USB disconnect, device number 87 [ 1234.312561][ T30] audit: type=1326 audit(1746794199.927:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.493168][ T5890] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1234.553527][ T30] audit: type=1326 audit(1746794199.947:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.579402][ T30] audit: type=1326 audit(1746794199.947:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.612259][ T30] audit: type=1326 audit(1746794199.947:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.669773][T17714] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1234.675380][ T5890] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.694364][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.703197][ T30] audit: type=1326 audit(1746794199.947:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1234.724298][ T5890] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1234.870433][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1234.898611][ T5890] usb 6-1: SerialNumber: syz [ 1235.231422][T17714] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1235.265747][ T30] audit: type=1326 audit(1746794199.967:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1235.270025][ T5890] usb 6-1: 0:2 : does not exist [ 1235.311654][ T5890] usb 6-1: unit 255 not found! [ 1235.353662][ T30] audit: type=1326 audit(1746794199.977:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17695 comm="syz.2.3334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 1235.449023][ T5890] usb 6-1: USB disconnect, device number 19 [ 1235.523816][T14985] udevd[14985]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.598999][T17724] FAULT_INJECTION: forcing a failure. [ 1235.598999][T17724] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.647311][T17724] CPU: 0 UID: 0 PID: 17724 Comm: syz.4.3342 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1235.647343][T17724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1235.647357][T17724] Call Trace: [ 1235.647366][T17724] [ 1235.647375][T17724] dump_stack_lvl+0x189/0x250 [ 1235.647414][T17724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.647443][T17724] ? __pfx__printk+0x10/0x10 [ 1235.647466][T17724] ? __pfx___might_resched+0x10/0x10 [ 1235.647485][T17724] ? fs_reclaim_acquire+0x7d/0x100 [ 1235.647521][T17724] should_fail_ex+0x414/0x560 [ 1235.647547][T17724] should_failslab+0xa8/0x100 [ 1235.647577][T17724] __kmalloc_noprof+0xcb/0x4f0 [ 1235.647601][T17724] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.647627][T17724] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1235.647663][T17724] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1235.647701][T17724] genl_family_rcv_msg_doit+0xb8/0x300 [ 1235.647737][T17724] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1235.647769][T17724] ? rcu_is_watching+0x15/0xb0 [ 1235.647803][T17724] ? apparmor_capable+0x137/0x1b0 [ 1235.647832][T17724] ? bpf_lsm_capable+0x9/0x20 [ 1235.647858][T17724] ? security_capable+0x7e/0x2e0 [ 1235.647886][T17724] genl_rcv_msg+0x60e/0x790 [ 1235.647928][T17724] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1235.647954][T17724] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1235.647980][T17724] ? ref_tracker_free+0x63a/0x7d0 [ 1235.648000][T17724] ? __copy_skb_header+0xa7/0x550 [ 1235.648037][T17724] netlink_rcv_skb+0x219/0x490 [ 1235.648060][T17724] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1235.648088][T17724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1235.648136][T17724] ? down_read+0x1ad/0x2e0 [ 1235.648165][T17724] genl_rcv+0x28/0x40 [ 1235.648189][T17724] netlink_unicast+0x758/0x8d0 [ 1235.648218][T17724] netlink_sendmsg+0x805/0xb30 [ 1235.648250][T17724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.648275][T17724] ? __import_iovec+0x5d4/0x7f0 [ 1235.648300][T17724] ? aa_sock_msg_perm+0x94/0x160 [ 1235.648322][T17724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1235.648345][T17724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1235.648368][T17724] __sock_sendmsg+0x219/0x270 [ 1235.648391][T17724] ____sys_sendmsg+0x505/0x830 [ 1235.648423][T17724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1235.648468][T17724] ___sys_sendmsg+0x21f/0x2a0 [ 1235.648497][T17724] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.648569][T17724] ? __fget_files+0x2a/0x420 [ 1235.648595][T17724] ? __fget_files+0x3a0/0x420 [ 1235.648633][T17724] __sys_sendmsg+0x164/0x220 [ 1235.648661][T17724] ? __pfx___sys_sendmsg+0x10/0x10 [ 1235.648704][T17724] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1235.648731][T17724] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.648757][T17724] __do_fast_syscall_32+0xb4/0x110 [ 1235.648784][T17724] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.648812][T17724] do_fast_syscall_32+0x34/0x80 [ 1235.648837][T17724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1235.648862][T17724] RIP: 0023:0xf712e539 [ 1235.648880][T17724] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1235.648897][T17724] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1235.648925][T17724] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1235.648939][T17724] RDX: 0000000002008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1235.648952][T17724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1235.648963][T17724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1235.648976][T17724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1235.649006][T17724] [ 1236.147403][ T5893] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1236.363721][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1236.450192][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1236.565668][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1236.576624][T17739] Cannot find add_set index 0 as target [ 1236.612365][T17736] netlink: 'syz.1.3347': attribute type 12 has an invalid length. [ 1236.653421][ T5893] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1237.549653][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1237.705874][ T5893] usb usb1-port1: attempt power cycle [ 1238.073138][ T5893] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1238.213918][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1238.343255][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1238.494781][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 1238.501237][ T5893] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1238.562436][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1238.598420][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1238.638985][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.678315][ T5890] usb 2-1: Product: syz [ 1238.703303][ T5893] usb usb1-port1: unable to enumerate USB device [ 1238.721624][ T5890] usb 2-1: Manufacturer: syz [ 1238.739578][ T5890] usb 2-1: SerialNumber: syz [ 1238.786122][ T5890] usb 2-1: config 0 descriptor?? [ 1239.014973][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.021376][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.065206][ T5890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1239.549948][T11667] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1239.640970][T11667] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1239.980129][T17764] fido_id[17764]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1239.994654][ T5893] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 1240.137412][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1240.314076][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1240.330708][ T5890] usb 2-1: USB disconnect, device number 48 [ 1240.393172][ T5893] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1240.523370][ T5893] usb 1-1: device descriptor read/64, error -71 [ 1240.628004][T17737] syz.4.3344 (17737): drop_caches: 1 [ 1240.643776][ T5893] usb usb1-port1: attempt power cycle [ 1240.908711][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 1241.025502][ T5893] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 1241.069699][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1241.331495][ T5893] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 1241.364221][ T5893] usb 1-1: device descriptor read/8, error -71 [ 1241.498335][ T5893] usb usb1-port1: unable to enumerate USB device [ 1242.291467][T17758] FAULT_INJECTION: forcing a failure. [ 1242.291467][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.305311][T17773] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1242.312494][T17774] ip6tnl1: entered allmulticast mode [ 1242.326821][T17758] CPU: 1 UID: 0 PID: 17758 Comm: syz.2.3353 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1242.326850][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1242.326864][T17758] Call Trace: [ 1242.326873][T17758] [ 1242.326883][T17758] dump_stack_lvl+0x189/0x250 [ 1242.326919][T17758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1242.326949][T17758] ? __pfx__printk+0x10/0x10 [ 1242.326966][T17758] ? __lock_acquire+0xaac/0xd20 [ 1242.327012][T17758] should_fail_ex+0x414/0x560 [ 1242.327037][T17758] should_failslab+0xa8/0x100 [ 1242.327066][T17758] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1242.327091][T17758] ? skb_clone+0x212/0x3a0 [ 1242.327125][T17758] skb_clone+0x212/0x3a0 [ 1242.327157][T17758] __netlink_deliver_tap+0x404/0x850 [ 1242.327204][T17758] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.327229][T17758] netlink_deliver_tap+0x19c/0x1b0 [ 1242.327252][T17758] netlink_sendskb+0x68/0x140 [ 1242.327286][T17758] netlink_rcv_skb+0x2a0/0x490 [ 1242.327309][T17758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1242.327338][T17758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1242.327386][T17758] ? down_read+0x1ad/0x2e0 [ 1242.327416][T17758] genl_rcv+0x28/0x40 [ 1242.327442][T17758] netlink_unicast+0x758/0x8d0 [ 1242.327474][T17758] netlink_sendmsg+0x805/0xb30 [ 1242.327507][T17758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.327533][T17758] ? __import_iovec+0x5d4/0x7f0 [ 1242.327559][T17758] ? aa_sock_msg_perm+0x94/0x160 [ 1242.327583][T17758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.327606][T17758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.327631][T17758] __sock_sendmsg+0x219/0x270 [ 1242.327654][T17758] ____sys_sendmsg+0x505/0x830 [ 1242.327687][T17758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.327732][T17758] ___sys_sendmsg+0x21f/0x2a0 [ 1242.327761][T17758] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.327828][T17758] ? __fget_files+0x2a/0x420 [ 1242.327853][T17758] ? __fget_files+0x3a0/0x420 [ 1242.327891][T17758] __sys_sendmsg+0x164/0x220 [ 1242.327920][T17758] ? __pfx___sys_sendmsg+0x10/0x10 [ 1242.327962][T17758] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1242.327988][T17758] ? lockdep_hardirqs_on+0x9c/0x150 [ 1242.328014][T17758] __do_fast_syscall_32+0xb4/0x110 [ 1242.328040][T17758] ? lockdep_hardirqs_on+0x9c/0x150 [ 1242.328068][T17758] do_fast_syscall_32+0x34/0x80 [ 1242.328094][T17758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.328119][T17758] RIP: 0023:0xf7f45539 [ 1242.328137][T17758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1242.328156][T17758] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1242.328177][T17758] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1242.328198][T17758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.328211][T17758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.328223][T17758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1242.328236][T17758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.328267][T17758] [ 1242.787894][T17780] FAULT_INJECTION: forcing a failure. [ 1242.787894][T17780] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.801690][T17780] CPU: 1 UID: 0 PID: 17780 Comm: syz.2.3358 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1242.801719][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1242.801732][T17780] Call Trace: [ 1242.801741][T17780] [ 1242.801750][T17780] dump_stack_lvl+0x189/0x250 [ 1242.801788][T17780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1242.801817][T17780] ? __pfx__printk+0x10/0x10 [ 1242.801841][T17780] ? __pfx___might_resched+0x10/0x10 [ 1242.801861][T17780] ? fs_reclaim_acquire+0x7d/0x100 [ 1242.801896][T17780] should_fail_ex+0x414/0x560 [ 1242.801921][T17780] ? nf_hook_entries_grow+0x27c/0x6d0 [ 1242.801940][T17780] should_failslab+0xa8/0x100 [ 1242.801967][T17780] __kvmalloc_node_noprof+0x168/0x5e0 [ 1242.801994][T17780] ? nf_hook_entries_grow+0x27c/0x6d0 [ 1242.802013][T17780] ? __pfx___mutex_lock+0x10/0x10 [ 1242.802041][T17780] nf_hook_entries_grow+0x27c/0x6d0 [ 1242.802077][T17780] __nf_register_net_hook+0x2c9/0x930 [ 1242.802108][T17780] nf_register_net_hook+0xb2/0x190 [ 1242.802131][T17780] nf_register_net_hooks+0x44/0x1b0 [ 1242.802167][T17780] nf_defrag_ipv4_enable+0x87/0x120 [ 1242.802199][T17780] nf_ct_netns_do_get+0x18c/0x5a0 [ 1242.802224][T17780] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1242.802246][T17780] ? synproxy_pernet+0x45/0x270 [ 1242.802271][T17780] ? synproxy_pernet+0x45/0x270 [ 1242.802292][T17780] ? synproxy_pernet+0x45/0x270 [ 1242.802322][T17780] nft_synproxy_do_init+0x1d1/0x4c0 [ 1242.802353][T17780] nf_tables_newrule+0x178c/0x2890 [ 1242.802396][T17780] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1242.802422][T17780] ? nfnl_pernet+0x23/0x240 [ 1242.802460][T17780] ? __nla_parse+0x40/0x60 [ 1242.802489][T17780] nfnetlink_rcv+0x113f/0x2530 [ 1242.802551][T17780] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1242.802632][T17780] ? skb_clone+0x246/0x3a0 [ 1242.802677][T17780] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.802697][T17780] ? netlink_deliver_tap+0x2e/0x1b0 [ 1242.802724][T17780] netlink_unicast+0x758/0x8d0 [ 1242.802755][T17780] netlink_sendmsg+0x805/0xb30 [ 1242.802787][T17780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.802813][T17780] ? __import_iovec+0x5d4/0x7f0 [ 1242.802838][T17780] ? aa_sock_msg_perm+0x94/0x160 [ 1242.802862][T17780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1242.802885][T17780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1242.802910][T17780] __sock_sendmsg+0x219/0x270 [ 1242.802933][T17780] ____sys_sendmsg+0x505/0x830 [ 1242.802966][T17780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1242.803013][T17780] ___sys_sendmsg+0x21f/0x2a0 [ 1242.803042][T17780] ? __pfx____sys_sendmsg+0x10/0x10 [ 1242.803106][T17780] ? __fget_files+0x2a/0x420 [ 1242.803131][T17780] ? __fget_files+0x3a0/0x420 [ 1242.803179][T17780] __sys_sendmsg+0x164/0x220 [ 1242.803205][T17780] ? __pfx___sys_sendmsg+0x10/0x10 [ 1242.803245][T17780] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1242.803270][T17780] ? lockdep_hardirqs_on+0x9c/0x150 [ 1242.803294][T17780] __do_fast_syscall_32+0xb4/0x110 [ 1242.803320][T17780] ? lockdep_hardirqs_on+0x9c/0x150 [ 1242.803344][T17780] do_fast_syscall_32+0x34/0x80 [ 1242.803368][T17780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1242.803392][T17780] RIP: 0023:0xf7f45539 [ 1242.803411][T17780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1242.803428][T17780] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1242.803449][T17780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1242.803463][T17780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.803473][T17780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1242.803484][T17780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1242.803494][T17780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1242.803526][T17780] [ 1243.373398][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1243.382344][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1243.482262][T17784] netlink: 'syz.5.3359': attribute type 12 has an invalid length. [ 1243.500891][T17784] Cannot find add_set index 0 as target [ 1243.878775][T17801] FAULT_INJECTION: forcing a failure. [ 1243.878775][T17801] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.896926][T17801] CPU: 0 UID: 0 PID: 17801 Comm: syz.1.3365 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1243.896958][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1243.896971][T17801] Call Trace: [ 1243.896980][T17801] [ 1243.896990][T17801] dump_stack_lvl+0x189/0x250 [ 1243.897028][T17801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1243.897057][T17801] ? __pfx__printk+0x10/0x10 [ 1243.897085][T17801] ? __pfx___might_resched+0x10/0x10 [ 1243.897103][T17801] ? fs_reclaim_acquire+0x7d/0x100 [ 1243.897137][T17801] should_fail_ex+0x414/0x560 [ 1243.897171][T17801] should_failslab+0xa8/0x100 [ 1243.897199][T17801] __kmalloc_noprof+0xcb/0x4f0 [ 1243.897223][T17801] ? ethnl_default_notify+0x1cd/0x990 [ 1243.897253][T17801] ethnl_default_notify+0x1cd/0x990 [ 1243.897284][T17801] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1243.897319][T17801] ? __pfx_ethnl_set_pause+0x10/0x10 [ 1243.897343][T17801] ? mutex_is_locked+0x17/0x50 [ 1243.897360][T17801] ? rtnl_is_locked+0x15/0x20 [ 1243.897391][T17801] ethnl_default_set_doit+0x64e/0xa20 [ 1243.897427][T17801] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1243.897457][T17801] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1243.897497][T17801] genl_family_rcv_msg_doit+0x212/0x300 [ 1243.897534][T17801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1243.897577][T17801] ? bpf_lsm_capable+0x9/0x20 [ 1243.897604][T17801] ? security_capable+0x7e/0x2e0 [ 1243.897633][T17801] genl_rcv_msg+0x60e/0x790 [ 1243.897669][T17801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1243.897695][T17801] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1243.897723][T17801] ? ref_tracker_free+0x63a/0x7d0 [ 1243.897743][T17801] ? __copy_skb_header+0xa7/0x550 [ 1243.897781][T17801] netlink_rcv_skb+0x219/0x490 [ 1243.897804][T17801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1243.897834][T17801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1243.897884][T17801] ? down_read+0x1ad/0x2e0 [ 1243.897913][T17801] genl_rcv+0x28/0x40 [ 1243.897939][T17801] netlink_unicast+0x758/0x8d0 [ 1243.897971][T17801] netlink_sendmsg+0x805/0xb30 [ 1243.898004][T17801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.898031][T17801] ? __import_iovec+0x5d4/0x7f0 [ 1243.898056][T17801] ? aa_sock_msg_perm+0x94/0x160 [ 1243.898080][T17801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1243.898102][T17801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1243.898126][T17801] __sock_sendmsg+0x219/0x270 [ 1243.898156][T17801] ____sys_sendmsg+0x505/0x830 [ 1243.898190][T17801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1243.898234][T17801] ___sys_sendmsg+0x21f/0x2a0 [ 1243.898264][T17801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1243.898332][T17801] ? __fget_files+0x2a/0x420 [ 1243.898358][T17801] ? __fget_files+0x3a0/0x420 [ 1243.898397][T17801] __sys_sendmsg+0x164/0x220 [ 1243.898426][T17801] ? __pfx___sys_sendmsg+0x10/0x10 [ 1243.898469][T17801] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1243.898497][T17801] ? lockdep_hardirqs_on+0x9c/0x150 [ 1243.898523][T17801] __do_fast_syscall_32+0xb4/0x110 [ 1243.898554][T17801] ? lockdep_hardirqs_on+0x9c/0x150 [ 1243.898582][T17801] do_fast_syscall_32+0x34/0x80 [ 1243.898607][T17801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.898631][T17801] RIP: 0023:0xf70de539 [ 1243.898650][T17801] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1243.898667][T17801] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1243.898689][T17801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1243.898703][T17801] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.898715][T17801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.898727][T17801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1243.898740][T17801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.898771][T17801] [ 1244.825717][ T978] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1245.011858][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 1245.026525][ T978] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1245.026559][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.026580][ T978] usb 1-1: Product: syz [ 1245.026595][ T978] usb 1-1: Manufacturer: syz [ 1245.026611][ T978] usb 1-1: SerialNumber: syz [ 1245.029360][ T978] usb 1-1: config 0 descriptor?? [ 1245.299835][ T978] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1245.738230][ T5893] IPVS: starting estimator thread 0... [ 1245.755692][T17819] vivid-002: disconnect [ 1245.780499][T17818] vivid-002: reconnect [ 1245.814218][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1245.836978][T17821] IPVS: using max 30 ests per chain, 72000 per kthread [ 1246.399328][T17822] could not allocate digest TFM handle sha1-ni [ 1246.562500][ T978] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1246.615380][ T978] usb 1-1: USB disconnect, device number 96 [ 1246.966603][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1246.988271][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1247.008059][T17844] netlink: 'syz.2.3375': attribute type 12 has an invalid length. [ 1247.035988][T17845] Cannot find add_set index 0 as target [ 1249.964466][T17826] team0: Device ipvlan2 failed to register rx_handler [ 1250.261370][T17858] FAULT_INJECTION: forcing a failure. [ 1250.261370][T17858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.264816][T17860] tipc: Started in network mode [ 1250.318224][T17858] CPU: 0 UID: 0 PID: 17858 Comm: syz.2.3380 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1250.318255][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1250.318269][T17858] Call Trace: [ 1250.318278][T17858] [ 1250.318288][T17858] dump_stack_lvl+0x189/0x250 [ 1250.318325][T17858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.318354][T17858] ? __pfx__printk+0x10/0x10 [ 1250.318388][T17858] should_fail_ex+0x414/0x560 [ 1250.318414][T17858] _copy_to_user+0x31/0xb0 [ 1250.318445][T17858] simple_read_from_buffer+0xe1/0x170 [ 1250.318474][T17858] proc_fail_nth_read+0x1df/0x250 [ 1250.318506][T17858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1250.318538][T17858] ? rw_verify_area+0x258/0x650 [ 1250.318560][T17858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1250.318589][T17858] vfs_read+0x1fd/0x980 [ 1250.318618][T17858] ? __pfx___mutex_lock+0x10/0x10 [ 1250.318644][T17858] ? __pfx_vfs_read+0x10/0x10 [ 1250.318668][T17858] ? __fget_files+0x2a/0x420 [ 1250.318698][T17858] ? __fget_files+0x3a0/0x420 [ 1250.318722][T17858] ? __fget_files+0x2a/0x420 [ 1250.318758][T17858] ksys_read+0x145/0x250 [ 1250.318778][T17858] ? rcu_is_watching+0x15/0xb0 [ 1250.318810][T17858] ? __pfx_ksys_read+0x10/0x10 [ 1250.318835][T17858] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1250.318861][T17858] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.318886][T17858] __do_fast_syscall_32+0xb4/0x110 [ 1250.318913][T17858] ? lockdep_hardirqs_on+0x9c/0x150 [ 1250.318947][T17858] do_fast_syscall_32+0x34/0x80 [ 1250.318973][T17858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1250.318998][T17858] RIP: 0023:0xf7f45539 [ 1250.319015][T17858] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1250.319033][T17858] RSP: 002b:00000000f5066590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1250.319054][T17858] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5066620 [ 1250.319068][T17858] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 1250.319081][T17858] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1250.319092][T17858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.319104][T17858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.319134][T17858] [ 1250.331951][T17860] tipc: Node identity -, cluster identity 4711 [ 1250.592560][T17860] tipc: Enabling of bearer rejected, failed to enable media [ 1251.153118][ T5890] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1251.164155][ T5924] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1251.727531][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 1251.762051][ T5890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1251.898675][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.929052][ T5924] usb 3-1: config 0 has no interfaces? [ 1251.989502][ T5890] usb 6-1: Product: syz [ 1251.995985][ T5924] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1252.030208][ T5890] usb 6-1: Manufacturer: syz [ 1252.060761][ T5890] usb 6-1: SerialNumber: syz [ 1252.066078][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.111820][ T5890] usb 6-1: config 0 descriptor?? [ 1252.133219][ T5924] usb 3-1: Product: syz [ 1252.153550][ T5924] usb 3-1: Manufacturer: syz [ 1252.179572][ T5924] usb 3-1: SerialNumber: syz [ 1252.200523][ T5924] usb 3-1: config 0 descriptor?? [ 1252.369388][ T5890] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1252.639990][ T978] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1252.822178][ T978] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1252.831770][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.939117][ T978] usb 1-1: config 0 descriptor?? [ 1253.698677][ T5890] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1253.745123][ T5890] usb 6-1: USB disconnect, device number 20 [ 1253.802779][ T978] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1254.302503][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1254.590452][ T5890] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1254.761446][ T5890] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.777522][ T5890] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x3C, changing to 0xC [ 1254.808243][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 1254.829030][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1254.848315][ T5890] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.871097][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1254.889308][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.908457][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1255.035702][ T5890] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1255.368506][ T978] usb 1-1: USB disconnect, device number 97 [ 1255.441805][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1255.473164][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 1255.485418][T17902] netlink: 'syz.0.3391': attribute type 12 has an invalid length. [ 1255.531085][T17903] Cannot find add_set index 0 as target [ 1255.936033][T17878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3384'. [ 1255.981310][ T5932] usb 2-1: USB disconnect, device number 49 [ 1256.037431][ T978] usb 3-1: USB disconnect, device number 97 [ 1256.168945][T17907] FAULT_INJECTION: forcing a failure. [ 1256.168945][T17907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1256.196634][T17907] CPU: 0 UID: 0 PID: 17907 Comm: syz.2.3393 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1256.196665][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1256.196678][T17907] Call Trace: [ 1256.196687][T17907] [ 1256.196696][T17907] dump_stack_lvl+0x189/0x250 [ 1256.196735][T17907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.196766][T17907] ? __pfx__printk+0x10/0x10 [ 1256.196787][T17907] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.196825][T17907] should_fail_ex+0x414/0x560 [ 1256.196852][T17907] prepare_alloc_pages+0x213/0x610 [ 1256.196891][T17907] __alloc_frozen_pages_noprof+0x123/0x370 [ 1256.196927][T17907] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1256.196968][T17907] ? policy_nodemask+0x27c/0x720 [ 1256.196993][T17907] ? __lock_acquire+0xaac/0xd20 [ 1256.197025][T17907] alloc_pages_mpol+0x232/0x4a0 [ 1256.197057][T17907] vma_alloc_folio_noprof+0xe4/0x200 [ 1256.197084][T17907] ? page_table_check_set+0x16b/0x710 [ 1256.197111][T17907] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1256.197150][T17907] folio_prealloc+0x30/0x180 [ 1256.197180][T17907] __handle_mm_fault+0x2b28/0x5380 [ 1256.197225][T17907] ? __pfx___handle_mm_fault+0x10/0x10 [ 1256.197272][T17907] ? find_vma+0xe7/0x160 [ 1256.197295][T17907] ? __pfx_find_vma+0x10/0x10 [ 1256.197323][T17907] handle_mm_fault+0x3f6/0x8c0 [ 1256.197358][T17907] do_user_addr_fault+0x764/0x1390 [ 1256.197396][T17907] exc_page_fault+0x68/0x110 [ 1256.197422][T17907] asm_exc_page_fault+0x26/0x30 [ 1256.197441][T17907] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1256.197472][T17907] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1256.197502][T17907] RSP: 0018:ffffc90003dd7478 EFLAGS: 00050202 [ 1256.197521][T17907] RAX: ffff888028ad1001 RBX: ffff888028ad10a8 RCX: 000000000000006c [ 1256.197536][T17907] RDX: 0000000000000000 RSI: ffff888028ad1468 RDI: 0000000080003000 [ 1256.197550][T17907] RBP: ffffc90003dd75d8 R08: ffff888028ad14d3 R09: 1ffff1100515a29a [ 1256.197565][T17907] R10: dffffc0000000000 R11: ffffed100515a29b R12: dffffc0000000000 [ 1256.197580][T17907] R13: 000000000000042c R14: 00007ffffffff000 R15: 000000008000306c [ 1256.197613][T17907] _copy_to_iter+0x5f6/0x15a0 [ 1256.197651][T17907] ? __pfx__copy_to_iter+0x10/0x10 [ 1256.197673][T17907] ? __skb_try_recv_from_queue+0x58f/0x730 [ 1256.197710][T17907] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1256.197746][T17907] __skb_datagram_iter+0x100/0x960 [ 1256.197777][T17907] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1256.197815][T17907] skb_copy_datagram_iter+0xc5/0x230 [ 1256.197848][T17907] netlink_recvmsg+0x2c9/0xe00 [ 1256.197881][T17907] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1256.197910][T17907] ? __lock_acquire+0xaac/0xd20 [ 1256.197950][T17907] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1256.197974][T17907] sock_recvmsg_nosec+0x183/0x1c0 [ 1256.197998][T17907] ____sys_recvmsg+0x3aa/0x460 [ 1256.198036][T17907] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1256.198060][T17907] ? get_compat_msghdr+0x37e/0x4a0 [ 1256.198096][T17907] ? rcu_is_watching+0x15/0xb0 [ 1256.198125][T17907] ? ___sys_recvmsg+0x1c4/0x510 [ 1256.198159][T17907] ___sys_recvmsg+0x1b5/0x510 [ 1256.198192][T17907] ? __pfx____sys_recvmsg+0x10/0x10 [ 1256.198244][T17907] ? __fget_files+0x3a0/0x420 [ 1256.198338][T17907] do_recvmmsg+0x36a/0x760 [ 1256.198385][T17907] ? __pfx_do_recvmmsg+0x10/0x10 [ 1256.198428][T17907] ? __pfx_vfs_write+0x10/0x10 [ 1256.198471][T17907] __sys_recvmmsg+0x19d/0x280 [ 1256.198502][T17907] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1256.198528][T17907] ? ksys_write+0x1f0/0x250 [ 1256.198568][T17907] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1256.198601][T17907] __do_fast_syscall_32+0xb4/0x110 [ 1256.198630][T17907] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.198660][T17907] do_fast_syscall_32+0x34/0x80 [ 1256.198688][T17907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.198714][T17907] RIP: 0023:0xf7f45539 [ 1256.198733][T17907] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1256.198752][T17907] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1256.198774][T17907] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800010c0 [ 1256.198788][T17907] RDX: 0000000000000003 RSI: 0000000040008022 RDI: 0000000000000000 [ 1256.198802][T17907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.198813][T17907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1256.198826][T17907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.198856][T17907] [ 1256.201835][T17905] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3392'. [ 1256.526115][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1256.700912][T17915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1256.798975][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3395'. [ 1256.983113][ T5890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1257.138915][ T5890] usb 2-1: device descriptor read/64, error -71 [ 1257.403279][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1257.473260][T16211] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1257.583187][ T5890] usb 2-1: device descriptor read/64, error -71 [ 1257.643191][T16211] usb 6-1: Using ep0 maxpacket: 8 [ 1257.680009][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1257.705789][ T5890] usb usb2-port1: attempt power cycle [ 1257.853239][T16211] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1257.862350][T16211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.923164][T16211] usb 6-1: Product: syz [ 1257.956427][T16211] usb 6-1: Manufacturer: syz [ 1257.961246][T16211] usb 6-1: SerialNumber: syz [ 1257.969150][T16211] usb 6-1: config 0 descriptor?? [ 1258.073164][ T5890] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1258.180483][T17942] team0: Device ipvlan2 failed to register rx_handler [ 1258.238314][ T5890] usb 2-1: device descriptor read/8, error -71 [ 1258.353183][ T978] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1258.370805][T16211] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1258.398418][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 1258.413363][T17951] netlink: 'syz.2.3406': attribute type 12 has an invalid length. [ 1258.455829][T17951] Cannot find add_set index 0 as target [ 1258.493177][ T5890] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1258.541856][ T5890] usb 2-1: device descriptor read/8, error -71 [ 1258.585392][ T978] usb 5-1: config 0 has no interfaces? [ 1258.641419][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1258.710950][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.763752][ T5890] usb usb2-port1: unable to enumerate USB device [ 1258.831429][ T978] usb 5-1: Product: syz [ 1259.018558][ T978] usb 5-1: Manufacturer: syz [ 1259.123549][ T978] usb 5-1: SerialNumber: syz [ 1259.211150][ T978] usb 5-1: config 0 descriptor?? [ 1259.649700][T17956] netlink: 'syz.0.3408': attribute type 2 has an invalid length. [ 1259.663691][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1259.711540][T16211] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1259.742688][T16211] usb 6-1: USB disconnect, device number 21 [ 1260.195807][ T5932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1260.354910][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 1260.375858][ T5932] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1260.388240][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.397493][ T5932] usb 2-1: Product: syz [ 1260.422122][ T5932] usb 2-1: Manufacturer: syz [ 1260.428504][ T5932] usb 2-1: SerialNumber: syz [ 1260.467001][ T5932] usb 2-1: config 0 descriptor?? [ 1260.491884][ T5932] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1262.356777][T17948] __nla_validate_parse: 1 callbacks suppressed [ 1262.356797][T17948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3405'. [ 1262.390971][T17956] : entered promiscuous mode [ 1262.403893][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3412'. [ 1262.443783][T17965] netem: change failed [ 1262.468957][T16211] usb 5-1: USB disconnect, device number 89 [ 1262.616469][T17979] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1262.657107][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 1262.945182][ T978] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1263.096248][T16211] usb 2-1: USB disconnect, device number 54 [ 1263.115639][ T978] usb 5-1: config 0 has an invalid interface number: 72 but max is 3 [ 1263.135841][ T978] usb 5-1: config 0 has an invalid interface number: 98 but max is 3 [ 1263.151376][ T978] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 1263.172134][ T978] usb 5-1: config 0 has no interface number 1 [ 1263.181091][ T978] usb 5-1: config 0 has no interface number 2 [ 1263.192369][ T978] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1263.209712][ T978] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1263.223091][T17998] FAULT_INJECTION: forcing a failure. [ 1263.223091][T17998] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.241730][ T978] usb 5-1: config 0 interface 72 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1263.261634][ T978] usb 5-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1263.273510][T17998] CPU: 1 UID: 0 PID: 17998 Comm: syz.1.3419 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1263.273533][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1263.273543][T17998] Call Trace: [ 1263.273550][T17998] [ 1263.273556][T17998] dump_stack_lvl+0x189/0x250 [ 1263.273584][T17998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1263.273606][T17998] ? __pfx__printk+0x10/0x10 [ 1263.273618][T17998] ? __lock_acquire+0xaac/0xd20 [ 1263.273650][T17998] should_fail_ex+0x414/0x560 [ 1263.273669][T17998] should_failslab+0xa8/0x100 [ 1263.273702][T17998] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1263.273721][T17998] ? skb_clone+0x212/0x3a0 [ 1263.273744][T17998] skb_clone+0x212/0x3a0 [ 1263.273766][T17998] __netlink_deliver_tap+0x404/0x850 [ 1263.273794][T17998] ? netlink_deliver_tap+0x2e/0x1b0 [ 1263.273811][T17998] netlink_deliver_tap+0x19c/0x1b0 [ 1263.273828][T17998] netlink_sendskb+0x68/0x140 [ 1263.273853][T17998] netlink_rcv_skb+0x2a0/0x490 [ 1263.273869][T17998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1263.273891][T17998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1263.273924][T17998] ? down_read+0x1ad/0x2e0 [ 1263.273945][T17998] genl_rcv+0x28/0x40 [ 1263.273964][T17998] netlink_unicast+0x758/0x8d0 [ 1263.273986][T17998] netlink_sendmsg+0x805/0xb30 [ 1263.274010][T17998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.274028][T17998] ? __import_iovec+0x5d4/0x7f0 [ 1263.274052][T17998] ? aa_sock_msg_perm+0x94/0x160 [ 1263.274069][T17998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1263.274087][T17998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1263.274104][T17998] __sock_sendmsg+0x219/0x270 [ 1263.274120][T17998] ____sys_sendmsg+0x505/0x830 [ 1263.274144][T17998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.274178][T17998] ___sys_sendmsg+0x21f/0x2a0 [ 1263.274199][T17998] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.274245][T17998] ? __fget_files+0x2a/0x420 [ 1263.274269][T17998] ? __fget_files+0x3a0/0x420 [ 1263.274306][T17998] __sys_sendmsg+0x164/0x220 [ 1263.274336][T17998] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.274379][T17998] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1263.274406][T17998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1263.274432][T17998] __do_fast_syscall_32+0xb4/0x110 [ 1263.274459][T17998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1263.274488][T17998] do_fast_syscall_32+0x34/0x80 [ 1263.274514][T17998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1263.274539][T17998] RIP: 0023:0xf70de539 [ 1263.274557][T17998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1263.274575][T17998] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1263.274596][T17998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 1263.274610][T17998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1263.274622][T17998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.274634][T17998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1263.274646][T17998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.274676][T17998] [ 1263.287782][ T978] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1264.013034][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.290297][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.772088][T15549] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1264.826060][ T978] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1264.865507][ T978] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 1264.874963][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.939911][ T978] usb 5-1: Product: syz [ 1264.983103][T15549] usb 1-1: Using ep0 maxpacket: 8 [ 1264.988381][ T978] usb 5-1: Manufacturer: syz [ 1265.003796][ T978] usb 5-1: SerialNumber: syz [ 1265.014030][T15549] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1265.023329][T15549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.031404][T15549] usb 1-1: Product: syz [ 1265.056006][ T978] usb 5-1: config 0 descriptor?? [ 1265.115836][ T978] s2255 5-1:0.72: Could not find bulk-in endpoint [ 1265.122545][T15549] usb 1-1: Manufacturer: syz [ 1265.130481][T15549] usb 1-1: SerialNumber: syz [ 1265.145126][ T978] Sensoray 2255 driver load failed: 0xfffffff4 [ 1265.170286][ T978] s2255 5-1:0.72: probe with driver s2255 failed with error -12 [ 1265.178877][T15549] usb 1-1: config 0 descriptor?? [ 1265.249952][ T978] s2255 5-1:0.98: Could not find bulk-in endpoint [ 1265.273786][ T978] Sensoray 2255 driver load failed: 0xfffffff4 [ 1265.290363][ T978] s2255 5-1:0.98: probe with driver s2255 failed with error -12 [ 1265.327327][ T978] s2255 5-1:0.0: Could not find bulk-in endpoint [ 1265.377001][ T978] Sensoray 2255 driver load failed: 0xfffffff4 [ 1265.399741][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.409398][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.430230][T15549] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1265.440957][ T978] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 1266.558603][T11667] usb 5-1: USB disconnect, device number 90 [ 1266.650067][T15549] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1266.675109][T15549] usb 1-1: USB disconnect, device number 98 [ 1267.080932][T18039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1267.095647][T18039] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1268.716842][T18060] FAULT_INJECTION: forcing a failure. [ 1268.716842][T18060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.853137][T18060] CPU: 0 UID: 0 PID: 18060 Comm: syz.4.3436 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1268.853168][T18060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1268.853182][T18060] Call Trace: [ 1268.853190][T18060] [ 1268.853200][T18060] dump_stack_lvl+0x189/0x250 [ 1268.853238][T18060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1268.853267][T18060] ? __pfx__printk+0x10/0x10 [ 1268.853313][T18060] should_fail_ex+0x414/0x560 [ 1268.853340][T18060] _copy_to_user+0x31/0xb0 [ 1268.853377][T18060] simple_read_from_buffer+0xe1/0x170 [ 1268.853407][T18060] proc_fail_nth_read+0x1df/0x250 [ 1268.853437][T18060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.853468][T18060] ? rw_verify_area+0x258/0x650 [ 1268.853489][T18060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1268.853519][T18060] vfs_read+0x1fd/0x980 [ 1268.853547][T18060] ? __pfx___mutex_lock+0x10/0x10 [ 1268.853572][T18060] ? __pfx_vfs_read+0x10/0x10 [ 1268.853596][T18060] ? __fget_files+0x2a/0x420 [ 1268.853627][T18060] ? __fget_files+0x3a0/0x420 [ 1268.853650][T18060] ? __fget_files+0x2a/0x420 [ 1268.853685][T18060] ksys_read+0x145/0x250 [ 1268.853710][T18060] ? __pfx_ksys_read+0x10/0x10 [ 1268.853735][T18060] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1268.853761][T18060] ? lockdep_hardirqs_on+0x9c/0x150 [ 1268.853786][T18060] __do_fast_syscall_32+0xb4/0x110 [ 1268.853813][T18060] ? lockdep_hardirqs_on+0x9c/0x150 [ 1268.853840][T18060] do_fast_syscall_32+0x34/0x80 [ 1268.853865][T18060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1268.853890][T18060] RIP: 0023:0xf712e539 [ 1268.853908][T18060] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1268.853925][T18060] RSP: 002b:00000000f50fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1268.853946][T18060] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50fd620 [ 1268.853961][T18060] RDX: 000000000000000f RSI: 00000000f7492ff4 RDI: 0000000000000000 [ 1268.853973][T18060] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1268.853986][T18060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1268.853998][T18060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1268.854029][T18060] [ 1269.087974][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.098406][ T978] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1269.265857][ T978] usb 2-1: config 0 has no interfaces? [ 1269.291115][ T978] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1269.300804][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.309014][ T978] usb 2-1: Product: syz [ 1269.313586][ T978] usb 2-1: Manufacturer: syz [ 1269.318226][ T978] usb 2-1: SerialNumber: syz [ 1269.326994][ T978] usb 2-1: config 0 descriptor?? [ 1269.498607][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1269.527607][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1269.556309][T18069] Cannot find add_set index 0 as target [ 1269.563575][T18065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1269.579512][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 1269.592443][T18070] Cannot find add_set index 0 as target [ 1269.603437][T18065] netlink: 'syz.4.3438': attribute type 12 has an invalid length. [ 1269.642947][T18066] netlink: 'syz.0.3439': attribute type 12 has an invalid length. [ 1269.717384][T18055] can: request_module (can-proto-3) failed. [ 1270.015347][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 1270.083129][ T5891] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1270.217017][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1270.253345][T18081] bridge_slave_1: left allmulticast mode [ 1270.273064][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1270.274008][T18081] bridge_slave_1: left promiscuous mode [ 1270.320967][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.336598][ T5891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1270.375801][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.397152][ T5891] usb 6-1: Product: syz [ 1270.405669][ T5891] usb 6-1: Manufacturer: syz [ 1270.413746][ T5891] usb 6-1: SerialNumber: syz [ 1270.425225][T18081] bridge_slave_0: left allmulticast mode [ 1270.428570][ T5891] usb 6-1: config 0 descriptor?? [ 1270.442375][T18081] bridge_slave_0: left promiscuous mode [ 1270.476630][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.607640][T18086] syzkaller1: entered promiscuous mode [ 1270.615816][T18086] syzkaller1: entered allmulticast mode [ 1270.667099][ T5891] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1271.686989][T15549] usb 2-1: USB disconnect, device number 55 [ 1271.853367][T17967] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1271.916484][ T5891] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1271.950544][ T5891] usb 6-1: USB disconnect, device number 22 [ 1272.051479][T17967] usb 3-1: config 0 has no interfaces? [ 1272.061347][T18105] input: syz1 as /devices/virtual/input/input40 [ 1272.129773][T17967] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1272.201566][T17967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.232347][T17967] usb 3-1: Product: syz [ 1272.237085][T17967] usb 3-1: Manufacturer: syz [ 1272.279258][T17967] usb 3-1: SerialNumber: syz [ 1272.322038][T17967] usb 3-1: config 0 descriptor?? [ 1272.508880][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3453'. [ 1272.519633][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3453'. [ 1272.529019][T18110] netlink: 'syz.5.3453': attribute type 12 has an invalid length. [ 1272.579772][T18111] Cannot find add_set index 0 as target [ 1274.464416][T18103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1274.478274][T18103] FAULT_INJECTION: forcing a failure. [ 1274.478274][T18103] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.493811][T17967] usb 3-1: USB disconnect, device number 98 [ 1274.499828][T18103] CPU: 0 UID: 0 PID: 18103 Comm: syz.4.3450 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1274.499857][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1274.499871][T18103] Call Trace: [ 1274.499881][T18103] [ 1274.499890][T18103] dump_stack_lvl+0x189/0x250 [ 1274.499941][T18103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.499974][T18103] ? __pfx__printk+0x10/0x10 [ 1274.499999][T18103] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 1274.500031][T18103] ? ref_tracker_alloc+0x318/0x460 [ 1274.500058][T18103] should_fail_ex+0x414/0x560 [ 1274.500086][T18103] should_failslab+0xa8/0x100 [ 1274.500118][T18103] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1274.500145][T18103] ? skb_clone+0x212/0x3a0 [ 1274.500179][T18103] skb_clone+0x212/0x3a0 [ 1274.500213][T18103] __netlink_deliver_tap+0x404/0x850 [ 1274.500252][T18103] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.500279][T18103] netlink_deliver_tap+0x19c/0x1b0 [ 1274.500304][T18103] __netlink_sendskb+0x47/0x90 [ 1274.500340][T18103] netlink_dump+0xa5c/0xe70 [ 1274.500376][T18103] ? __pfx_netlink_dump+0x10/0x10 [ 1274.500422][T18103] ? netlink_lookup+0x30/0x200 [ 1274.500444][T18103] ? netlink_lookup+0x30/0x200 [ 1274.500462][T18103] ? netlink_lookup+0x30/0x200 [ 1274.500491][T18103] __netlink_dump_start+0x5cb/0x7e0 [ 1274.500524][T18103] rtnetlink_rcv_msg+0x9eb/0xb70 [ 1274.500549][T18103] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1274.500577][T18103] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1274.500600][T18103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1274.500622][T18103] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1274.500643][T18103] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 1274.500671][T18103] ? ref_tracker_free+0x63a/0x7d0 [ 1274.500691][T18103] ? __copy_skb_header+0xa7/0x550 [ 1274.500731][T18103] netlink_rcv_skb+0x219/0x490 [ 1274.500757][T18103] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1274.500782][T18103] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1274.500829][T18103] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.500852][T18103] ? netlink_deliver_tap+0x2e/0x1b0 [ 1274.500882][T18103] netlink_unicast+0x758/0x8d0 [ 1274.500916][T18103] netlink_sendmsg+0x805/0xb30 [ 1274.500962][T18103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.500989][T18103] ? __import_iovec+0x40e/0x7f0 [ 1274.501016][T18103] ? aa_sock_msg_perm+0x94/0x160 [ 1274.501042][T18103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1274.501066][T18103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.501093][T18103] __sock_sendmsg+0x219/0x270 [ 1274.501118][T18103] ____sys_sendmsg+0x505/0x830 [ 1274.501154][T18103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.501191][T18103] ? irqentry_exit+0x74/0x90 [ 1274.501224][T18103] ___sys_sendmsg+0x21f/0x2a0 [ 1274.501256][T18103] ? __pfx____sys_sendmsg+0x10/0x10 [ 1274.501326][T18103] ? __fget_files+0x2a/0x420 [ 1274.501354][T18103] ? __fget_files+0x3a0/0x420 [ 1274.501395][T18103] __sys_sendmsg+0x164/0x220 [ 1274.501427][T18103] ? __pfx___sys_sendmsg+0x10/0x10 [ 1274.501473][T18103] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1274.501501][T18103] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.501528][T18103] __do_fast_syscall_32+0xb4/0x110 [ 1274.501557][T18103] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.501587][T18103] do_fast_syscall_32+0x34/0x80 [ 1274.501614][T18103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1274.501641][T18103] RIP: 0023:0xf712e539 [ 1274.501661][T18103] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1274.501679][T18103] RSP: 002b:00000000f50dc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1274.501702][T18103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1274.501717][T18103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1274.501731][T18103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.501743][T18103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1274.501756][T18103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.501788][T18103] [ 1275.007715][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1275.108093][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1275.193449][T17967] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1275.333429][T17967] usb 3-1: device descriptor read/64, error -71 [ 1275.406233][T18132] FAULT_INJECTION: forcing a failure. [ 1275.406233][T18132] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.436598][T18132] CPU: 1 UID: 0 PID: 18132 Comm: syz.1.3460 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1275.436629][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1275.436643][T18132] Call Trace: [ 1275.436651][T18132] [ 1275.436661][T18132] dump_stack_lvl+0x189/0x250 [ 1275.436699][T18132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1275.436728][T18132] ? __pfx__printk+0x10/0x10 [ 1275.436755][T18132] ? __pfx___might_resched+0x10/0x10 [ 1275.436779][T18132] should_fail_ex+0x414/0x560 [ 1275.436804][T18132] should_failslab+0xa8/0x100 [ 1275.436833][T18132] __kmalloc_cache_noprof+0x70/0x3d0 [ 1275.436859][T18132] ? call_usermodehelper_setup+0x8e/0x270 [ 1275.436888][T18132] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1275.436919][T18132] call_usermodehelper_setup+0x8e/0x270 [ 1275.436948][T18132] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1275.436980][T18132] __request_module+0x39f/0x5e0 [ 1275.437015][T18132] ? __pfx___request_module+0x10/0x10 [ 1275.437055][T18132] ? rtnl_link_ops_get+0x23/0x250 [ 1275.437077][T18132] ? rtnl_link_ops_get+0x23/0x250 [ 1275.437102][T18132] ? rtnl_link_ops_get+0x215/0x250 [ 1275.437128][T18132] rtnl_newlink+0x64f/0x1c70 [ 1275.437148][T18132] ? kasan_save_track+0x3e/0x80 [ 1275.437172][T18132] ? nlmon_xmit+0xb0/0x100 [ 1275.437203][T18132] ? dev_hard_start_xmit+0x2ff/0x880 [ 1275.437229][T18132] ? __dev_queue_xmit+0x1adf/0x3a70 [ 1275.437255][T18132] ? netlink_deliver_tap+0x19c/0x1b0 [ 1275.437278][T18132] ? ____sys_sendmsg+0x505/0x830 [ 1275.437301][T18132] ? ___sys_sendmsg+0x21f/0x2a0 [ 1275.437325][T18132] ? __sys_sendmsg+0x164/0x220 [ 1275.437349][T18132] ? __pfx_rtnl_newlink+0x10/0x10 [ 1275.437402][T18132] ? kasan_quarantine_put+0xdd/0x220 [ 1275.437424][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1275.437453][T18132] ? nlmon_xmit+0xb0/0x100 [ 1275.437479][T18132] ? kmem_cache_free+0x192/0x3f0 [ 1275.437512][T18132] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1275.437543][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1275.437567][T18132] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1275.437602][T18132] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1275.437642][T18132] ? aa_get_newest_label+0xf7/0x5d0 [ 1275.437667][T18132] ? __lock_acquire+0xaac/0xd20 [ 1275.437718][T18132] ? __pfx_rtnl_newlink+0x10/0x10 [ 1275.437739][T18132] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1275.437765][T18132] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1275.437786][T18132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1275.437812][T18132] ? ref_tracker_free+0x63a/0x7d0 [ 1275.437831][T18132] ? __copy_skb_header+0xa7/0x550 [ 1275.437868][T18132] netlink_rcv_skb+0x219/0x490 [ 1275.437891][T18132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1275.437914][T18132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.437957][T18132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1275.437978][T18132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1275.438006][T18132] netlink_unicast+0x758/0x8d0 [ 1275.438037][T18132] netlink_sendmsg+0x805/0xb30 [ 1275.438070][T18132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.438096][T18132] ? __import_iovec+0x5d4/0x7f0 [ 1275.438121][T18132] ? aa_sock_msg_perm+0x94/0x160 [ 1275.438145][T18132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1275.438167][T18132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.438196][T18132] __sock_sendmsg+0x219/0x270 [ 1275.438219][T18132] ____sys_sendmsg+0x505/0x830 [ 1275.438252][T18132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.438295][T18132] ___sys_sendmsg+0x21f/0x2a0 [ 1275.438324][T18132] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.438387][T18132] ? __fget_files+0x2a/0x420 [ 1275.438413][T18132] ? __fget_files+0x3a0/0x420 [ 1275.438449][T18132] __sys_sendmsg+0x164/0x220 [ 1275.438477][T18132] ? __pfx___sys_sendmsg+0x10/0x10 [ 1275.438518][T18132] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1275.438544][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1275.438574][T18132] __do_fast_syscall_32+0xb4/0x110 [ 1275.438603][T18132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1275.438630][T18132] do_fast_syscall_32+0x34/0x80 [ 1275.438655][T18132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1275.438680][T18132] RIP: 0023:0xf70de539 [ 1275.438697][T18132] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1275.438715][T18132] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1275.438737][T18132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1275.438752][T18132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1275.438763][T18132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1275.438775][T18132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1275.438787][T18132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1275.438816][T18132] [ 1275.930017][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.980101][T18134] FAULT_INJECTION: forcing a failure. [ 1275.980101][T18134] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.008015][T18134] CPU: 1 UID: 0 PID: 18134 Comm: syz.4.3462 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1276.008047][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1276.008061][T18134] Call Trace: [ 1276.008070][T18134] [ 1276.008080][T18134] dump_stack_lvl+0x189/0x250 [ 1276.008125][T18134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.008155][T18134] ? __pfx__printk+0x10/0x10 [ 1276.008182][T18134] ? __pfx___might_resched+0x10/0x10 [ 1276.008200][T18134] ? fs_reclaim_acquire+0x7d/0x100 [ 1276.008234][T18134] should_fail_ex+0x414/0x560 [ 1276.008258][T18134] should_failslab+0xa8/0x100 [ 1276.008287][T18134] __kmalloc_cache_noprof+0x70/0x3d0 [ 1276.008313][T18134] ? basic_change+0x2cd/0xd80 [ 1276.008335][T18134] basic_change+0x2cd/0xd80 [ 1276.008354][T18134] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1276.008390][T18134] ? __pfx_basic_change+0x10/0x10 [ 1276.008429][T18134] tc_new_tfilter+0xdc7/0x15b0 [ 1276.008483][T18134] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1276.008545][T18134] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1276.008570][T18134] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1276.008597][T18134] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1276.008618][T18134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1276.008645][T18134] ? ref_tracker_free+0x63a/0x7d0 [ 1276.008665][T18134] ? __copy_skb_header+0xa7/0x550 [ 1276.008702][T18134] netlink_rcv_skb+0x219/0x490 [ 1276.008726][T18134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1276.008749][T18134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1276.008792][T18134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1276.008814][T18134] ? netlink_deliver_tap+0x2e/0x1b0 [ 1276.008843][T18134] netlink_unicast+0x758/0x8d0 [ 1276.008875][T18134] netlink_sendmsg+0x805/0xb30 [ 1276.008908][T18134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.008934][T18134] ? __import_iovec+0x5d4/0x7f0 [ 1276.008959][T18134] ? aa_sock_msg_perm+0x94/0x160 [ 1276.008983][T18134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1276.009006][T18134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1276.009030][T18134] __sock_sendmsg+0x219/0x270 [ 1276.009054][T18134] ____sys_sendmsg+0x505/0x830 [ 1276.009087][T18134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1276.009139][T18134] ___sys_sendmsg+0x21f/0x2a0 [ 1276.009168][T18134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.009229][T18134] ? __fget_files+0x2a/0x420 [ 1276.009255][T18134] ? __fget_files+0x3a0/0x420 [ 1276.009291][T18134] __sys_sendmsg+0x164/0x220 [ 1276.009319][T18134] ? __pfx___sys_sendmsg+0x10/0x10 [ 1276.009361][T18134] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1276.009388][T18134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.009414][T18134] __do_fast_syscall_32+0xb4/0x110 [ 1276.009440][T18134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.009467][T18134] do_fast_syscall_32+0x34/0x80 [ 1276.009492][T18134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1276.009516][T18134] RIP: 0023:0xf712e539 [ 1276.009533][T18134] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1276.009551][T18134] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1276.009572][T18134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 1276.009586][T18134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.009597][T18134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1276.009610][T18134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1276.009621][T18134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1276.009650][T18134] [ 1276.430703][T17967] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1276.566445][T17967] usb 3-1: device descriptor read/64, error -71 [ 1276.673387][T17967] usb usb3-port1: attempt power cycle [ 1276.827328][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1276.846835][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1276.858564][T18149] netlink: 'syz.5.3467': attribute type 12 has an invalid length. [ 1276.893119][ T5893] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1277.023083][T17967] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1277.063157][ T978] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1277.084272][T17967] usb 3-1: device descriptor read/8, error -71 [ 1277.141453][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1277.153141][T15549] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1277.193240][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1277.202619][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.215052][ T5893] usb 1-1: Product: syz [ 1277.219283][ T5893] usb 1-1: Manufacturer: syz [ 1277.225758][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1277.236124][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1277.244963][ T978] usb 2-1: config 0 has no interface number 0 [ 1277.255571][ T5893] usb 1-1: SerialNumber: syz [ 1277.262764][ T978] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1277.296842][ T5893] usb 1-1: config 0 descriptor?? [ 1277.306265][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.329685][ T978] usb 2-1: Product: syz [ 1277.337858][ T978] usb 2-1: Manufacturer: syz [ 1277.342800][ T978] usb 2-1: SerialNumber: syz [ 1277.354447][T17967] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1277.367507][ T978] usb 2-1: config 0 descriptor?? [ 1277.379641][ T978] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1277.395231][T15549] usb 5-1: config 0 has no interfaces? [ 1277.410514][T15549] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1277.420915][T15549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.430120][T15549] usb 5-1: Product: syz [ 1277.435558][T15549] usb 5-1: Manufacturer: syz [ 1277.440588][T15549] usb 5-1: SerialNumber: syz [ 1277.448420][T17967] usb 3-1: device descriptor read/8, error -71 [ 1277.455300][T15549] usb 5-1: config 0 descriptor?? [ 1277.512883][ T5893] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1277.563633][T17967] usb usb3-port1: unable to enumerate USB device [ 1277.788287][T18150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.798689][T18150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.816523][T18150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.832099][T18150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.062646][T18150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.078276][T18150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.125780][ T978] gspca_spca1528: reg_w err -110 [ 1278.153584][ T978] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 1278.525415][T18164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.537277][T18164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.818759][ T5893] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1278.842092][ T5893] usb 1-1: USB disconnect, device number 99 [ 1280.199587][ T978] usb 2-1: USB disconnect, device number 56 [ 1280.234589][T18176] fuse: Bad value for 'fd' [ 1280.292223][T18176] fuse: Bad value for 'fd' [ 1280.292348][T18178] netlink: 'syz.1.3475': attribute type 23 has an invalid length. [ 1281.819629][T18152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3466'. [ 1281.921812][ T5889] usb 5-1: USB disconnect, device number 91 [ 1282.090473][T18178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1282.251123][T18197] input: syz1 as /devices/virtual/input/input41 [ 1282.793219][T17967] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1282.875051][ T978] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1283.007851][T17967] usb 3-1: not running at top speed; connect to a high speed hub [ 1283.045702][T17967] usb 3-1: config 2 has an invalid interface number: 8 but max is 1 [ 1283.058796][T17967] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1283.068806][T17967] usb 3-1: config 2 has an invalid interface number: 38 but max is 1 [ 1283.077449][T17967] usb 3-1: config 2 has no interface number 0 [ 1283.086272][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 1283.090023][T17967] usb 3-1: config 2 has no interface number 1 [ 1283.096557][ T978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1283.103216][T17967] usb 3-1: config 2 interface 8 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1283.127343][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.139586][T17967] usb 3-1: config 2 interface 8 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1283.157964][ T978] usb 2-1: Product: syz [ 1283.158639][T17967] usb 3-1: config 2 interface 8 altsetting 2 has an endpoint descriptor with address 0x3A, changing to 0xA [ 1283.162167][ T978] usb 2-1: Manufacturer: syz [ 1283.162186][ T978] usb 2-1: SerialNumber: syz [ 1283.170042][ T978] usb 2-1: config 0 descriptor?? [ 1283.198757][T17967] usb 3-1: config 2 interface 8 altsetting 2 endpoint 0xA has invalid maxpacket 46294, setting to 64 [ 1283.222672][T17967] usb 3-1: config 2 interface 8 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1283.235080][T17967] usb 3-1: config 2 interface 8 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1283.263815][T17967] usb 3-1: config 2 interface 8 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1283.291969][T17967] usb 3-1: config 2 interface 8 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1283.314509][T17967] usb 3-1: config 2 interface 8 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1283.331501][T17967] usb 3-1: config 2 interface 8 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 1283.346509][T17967] usb 3-1: config 2 interface 38 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1283.346546][T17967] usb 3-1: config 2 interface 38 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1283.346572][T17967] usb 3-1: config 2 interface 38 altsetting 129 endpoint 0xD has invalid wMaxPacketSize 0 [ 1283.346596][T17967] usb 3-1: config 2 interface 38 altsetting 129 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1283.346631][T17967] usb 3-1: config 2 interface 38 altsetting 129 has a duplicate endpoint with address 0xA, skipping [ 1283.346654][T17967] usb 3-1: config 2 interface 8 has no altsetting 0 [ 1283.346673][T17967] usb 3-1: config 2 interface 38 has no altsetting 0 [ 1283.349645][T17967] usb 3-1: New USB device found, idVendor=16d8, idProduct=7253, bcdDevice=e7.f9 [ 1283.349676][T17967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.349698][T17967] usb 3-1: Product: Ж [ 1283.349714][T17967] usb 3-1: Manufacturer: Ꞓ霉鹬ń샆ㇿ≔퍍膢ꭠ踏놌缛㑝⛞ꗨ॒䎢呪葠옰듁핬X흉쎁蠈⟉狾뤏⌏蕣㈡⟜㲼묵ꚫ쩳ത㭉敾뇭 [ 1283.349739][T17967] usb 3-1: SerialNumber: Э [ 1283.355432][T18204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1283.355709][T18204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1283.355845][T18204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1283.462829][ T978] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.477152][T18226] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1283.668110][T17967] option 3-1:2.8: GSM modem (1-port) converter detected [ 1283.706476][T17967] option 3-1:2.38: GSM modem (1-port) converter detected [ 1283.839425][T11667] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1283.961660][T17967] usb 3-1: USB disconnect, device number 103 [ 1283.974992][T17967] option 3-1:2.8: device disconnected [ 1283.985236][T17967] option 3-1:2.38: device disconnected [ 1284.080505][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1284.093674][T11667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1284.104892][T11667] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1284.114382][T11667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.129726][T11667] usb 1-1: config 0 descriptor?? [ 1284.443115][T17967] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1284.791444][T17967] usb 3-1: config 0 has no interfaces? [ 1284.845649][T17967] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1284.979937][T17967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.070889][ T978] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1285.071346][T17967] usb 3-1: Product: syz [ 1285.113642][ T978] usb 2-1: USB disconnect, device number 57 [ 1285.122081][T17967] usb 3-1: Manufacturer: syz [ 1285.136694][T17967] usb 3-1: SerialNumber: syz [ 1285.168668][T17967] usb 3-1: config 0 descriptor?? [ 1286.478540][ T5893] usb 1-1: USB disconnect, device number 100 [ 1286.553774][T18255] FAULT_INJECTION: forcing a failure. [ 1286.553774][T18255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.599243][T18255] CPU: 0 UID: 0 PID: 18255 Comm: syz.0.3495 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1286.599276][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1286.599289][T18255] Call Trace: [ 1286.599297][T18255] [ 1286.599307][T18255] dump_stack_lvl+0x189/0x250 [ 1286.599343][T18255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.599372][T18255] ? __pfx__printk+0x10/0x10 [ 1286.599404][T18255] should_fail_ex+0x414/0x560 [ 1286.599430][T18255] _copy_to_user+0x31/0xb0 [ 1286.599461][T18255] simple_read_from_buffer+0xe1/0x170 [ 1286.599491][T18255] proc_fail_nth_read+0x1df/0x250 [ 1286.599520][T18255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.599543][T18255] ? rw_verify_area+0x258/0x650 [ 1286.599559][T18255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.599580][T18255] vfs_read+0x1fd/0x980 [ 1286.599600][T18255] ? __pfx___mutex_lock+0x10/0x10 [ 1286.599619][T18255] ? __pfx_vfs_read+0x10/0x10 [ 1286.599636][T18255] ? __fget_files+0x2a/0x420 [ 1286.599658][T18255] ? __fget_files+0x3a0/0x420 [ 1286.599675][T18255] ? __fget_files+0x2a/0x420 [ 1286.599700][T18255] ksys_read+0x145/0x250 [ 1286.599715][T18255] ? rcu_is_watching+0x15/0xb0 [ 1286.599739][T18255] ? __pfx_ksys_read+0x10/0x10 [ 1286.599756][T18255] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1286.599775][T18255] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.599794][T18255] __do_fast_syscall_32+0xb4/0x110 [ 1286.599813][T18255] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.599832][T18255] do_fast_syscall_32+0x34/0x80 [ 1286.599850][T18255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1286.599868][T18255] RIP: 0023:0xf70de539 [ 1286.599880][T18255] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1286.599893][T18255] RSP: 002b:00000000f50ce590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1286.599908][T18255] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ce620 [ 1286.599918][T18255] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 1286.599926][T18255] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1286.599934][T18255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1286.599943][T18255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1286.599963][T18255] [ 1286.830707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.116446][T18263] FAULT_INJECTION: forcing a failure. [ 1287.116446][T18263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1287.162704][T18263] CPU: 0 UID: 0 PID: 18263 Comm: syz.0.3497 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1287.162736][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1287.162749][T18263] Call Trace: [ 1287.162758][T18263] [ 1287.162767][T18263] dump_stack_lvl+0x189/0x250 [ 1287.162806][T18263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1287.162835][T18263] ? __pfx__printk+0x10/0x10 [ 1287.162857][T18263] ? fs_reclaim_acquire+0x7d/0x100 [ 1287.162894][T18263] should_fail_ex+0x414/0x560 [ 1287.162921][T18263] prepare_alloc_pages+0x213/0x610 [ 1287.162963][T18263] __alloc_frozen_pages_noprof+0x123/0x370 [ 1287.162996][T18263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1287.163026][T18263] ? __lock_acquire+0xaac/0xd20 [ 1287.163063][T18263] ? policy_nodemask+0x27c/0x720 [ 1287.163103][T18263] alloc_pages_mpol+0x232/0x4a0 [ 1287.163135][T18263] vma_alloc_folio_noprof+0xe4/0x200 [ 1287.163161][T18263] ? __anon_vma_prepare+0x3d2/0x4a0 [ 1287.163190][T18263] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1287.163217][T18263] ? up_write+0x1c4/0x420 [ 1287.163235][T18263] ? do_raw_spin_unlock+0x122/0x240 [ 1287.163267][T18263] folio_prealloc+0x30/0x180 [ 1287.163296][T18263] __handle_mm_fault+0x2b28/0x5380 [ 1287.163342][T18263] ? __pfx___handle_mm_fault+0x10/0x10 [ 1287.163387][T18263] ? find_vma+0xe7/0x160 [ 1287.163412][T18263] ? __pfx_find_vma+0x10/0x10 [ 1287.163440][T18263] handle_mm_fault+0x3f6/0x8c0 [ 1287.163475][T18263] do_user_addr_fault+0x764/0x1390 [ 1287.163511][T18263] exc_page_fault+0x68/0x110 [ 1287.163538][T18263] asm_exc_page_fault+0x26/0x30 [ 1287.163556][T18263] RIP: 0010:__put_user_4+0xd/0x20 [ 1287.163580][T18263] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1287.163599][T18263] RSP: 0018:ffffc900045afcf8 EFLAGS: 00050202 [ 1287.163618][T18263] RAX: 0000000000000314 RBX: 0000000000000000 RCX: 0000000080000040 [ 1287.163632][T18263] RDX: 0000000000000000 RSI: ffffffff8d935c50 RDI: ffffffff8bc1d260 [ 1287.163647][T18263] RBP: 0000000080045432 R08: 0000000000000000 R09: 0000000000000000 [ 1287.163659][T18263] R10: 0000000000000000 R11: ffffffff820aee40 R12: ffff888034192004 [ 1287.163673][T18263] R13: dffffc0000000000 R14: 0000000080000040 R15: ffff888142388630 [ 1287.163693][T18263] ? __might_fault+0xb0/0x130 [ 1287.163729][T18263] tty_ioctl+0x567/0xde0 [ 1287.163755][T18263] __ia32_compat_sys_ioctl+0x551/0x840 [ 1287.163781][T18263] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1287.163803][T18263] ? __fget_files+0x3a0/0x420 [ 1287.163836][T18263] ? fput+0xa0/0xd0 [ 1287.163866][T18263] ? ksys_write+0x1f0/0x250 [ 1287.163886][T18263] ? rcu_is_watching+0x15/0xb0 [ 1287.163923][T18263] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1287.163949][T18263] ? lockdep_hardirqs_on+0x9c/0x150 [ 1287.163975][T18263] __do_fast_syscall_32+0xb4/0x110 [ 1287.164001][T18263] ? lockdep_hardirqs_on+0x9c/0x150 [ 1287.164028][T18263] do_fast_syscall_32+0x34/0x80 [ 1287.164054][T18263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1287.164078][T18263] RIP: 0023:0xf70de539 [ 1287.164094][T18263] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1287.164117][T18263] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1287.164136][T18263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045432 [ 1287.164150][T18263] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1287.164163][T18263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1287.164174][T18263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1287.164186][T18263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1287.164216][T18263] [ 1287.534636][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.023084][ T978] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1288.100061][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1288.110365][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1288.130327][T18267] netlink: 'syz.1.3499': attribute type 12 has an invalid length. [ 1288.184441][T18270] Cannot find add_set index 0 as target [ 1288.203864][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1288.256323][ T978] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 1288.264429][ T978] usb 6-1: can't read configurations, error -22 [ 1288.403202][ T978] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1288.573998][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1288.586745][ T978] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 1288.595293][ T978] usb 6-1: can't read configurations, error -22 [ 1288.602068][ T978] usb usb6-port1: attempt power cycle [ 1288.958053][ T978] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1288.997252][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1289.010323][ T978] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 1289.019121][ T978] usb 6-1: can't read configurations, error -22 [ 1289.175328][ T978] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1289.217145][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 1289.279642][ T978] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 1289.287773][ T978] usb 6-1: can't read configurations, error -22 [ 1289.295704][ T978] usb usb6-port1: unable to enumerate USB device [ 1290.148281][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1290.164963][T18269] FAULT_INJECTION: forcing a failure. [ 1290.164963][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.223193][T18269] CPU: 0 UID: 0 PID: 18269 Comm: syz.0.3500 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1290.223226][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1290.223240][T18269] Call Trace: [ 1290.223249][T18269] [ 1290.223258][T18269] dump_stack_lvl+0x189/0x250 [ 1290.223295][T18269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.223326][T18269] ? __pfx__printk+0x10/0x10 [ 1290.223344][T18269] ? __lock_acquire+0xaac/0xd20 [ 1290.223388][T18269] should_fail_ex+0x414/0x560 [ 1290.223414][T18269] should_failslab+0xa8/0x100 [ 1290.223443][T18269] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1290.223468][T18269] ? skb_clone+0x212/0x3a0 [ 1290.223501][T18269] skb_clone+0x212/0x3a0 [ 1290.223533][T18269] __netlink_deliver_tap+0x404/0x850 [ 1290.223569][T18269] ? netlink_deliver_tap+0x2e/0x1b0 [ 1290.223594][T18269] netlink_deliver_tap+0x19c/0x1b0 [ 1290.223617][T18269] netlink_sendskb+0x68/0x140 [ 1290.223658][T18269] netlink_rcv_skb+0x2a0/0x490 [ 1290.223681][T18269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1290.223711][T18269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1290.223760][T18269] ? down_read+0x1ad/0x2e0 [ 1290.223790][T18269] genl_rcv+0x28/0x40 [ 1290.223816][T18269] netlink_unicast+0x758/0x8d0 [ 1290.223848][T18269] netlink_sendmsg+0x805/0xb30 [ 1290.223881][T18269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1290.223908][T18269] ? __import_iovec+0x5d4/0x7f0 [ 1290.223933][T18269] ? aa_sock_msg_perm+0x94/0x160 [ 1290.223956][T18269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1290.223979][T18269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1290.224003][T18269] __sock_sendmsg+0x219/0x270 [ 1290.224026][T18269] ____sys_sendmsg+0x505/0x830 [ 1290.224060][T18269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1290.224113][T18269] ___sys_sendmsg+0x21f/0x2a0 [ 1290.224143][T18269] ? __pfx____sys_sendmsg+0x10/0x10 [ 1290.224209][T18269] ? __fget_files+0x2a/0x420 [ 1290.224234][T18269] ? __fget_files+0x3a0/0x420 [ 1290.224272][T18269] __sys_sendmsg+0x164/0x220 [ 1290.224301][T18269] ? __pfx___sys_sendmsg+0x10/0x10 [ 1290.224344][T18269] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1290.224370][T18269] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.224397][T18269] __do_fast_syscall_32+0xb4/0x110 [ 1290.224424][T18269] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.224452][T18269] do_fast_syscall_32+0x34/0x80 [ 1290.224477][T18269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.224501][T18269] RIP: 0023:0xf70de539 [ 1290.224518][T18269] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1290.224536][T18269] RSP: 002b:00000000f50ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1290.224558][T18269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1290.224572][T18269] RDX: 0000000004000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.224585][T18269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.224595][T18269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.224607][T18269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.224638][T18269] [ 1290.579488][T18275] FAULT_INJECTION: forcing a failure. [ 1290.579488][T18275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.618078][T11667] usb 3-1: USB disconnect, device number 104 [ 1290.673449][T18275] CPU: 1 UID: 0 PID: 18275 Comm: syz.4.3502 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1290.673482][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1290.673495][T18275] Call Trace: [ 1290.673504][T18275] [ 1290.673513][T18275] dump_stack_lvl+0x189/0x250 [ 1290.673551][T18275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.673580][T18275] ? __pfx__printk+0x10/0x10 [ 1290.673614][T18275] should_fail_ex+0x414/0x560 [ 1290.673640][T18275] _copy_to_user+0x31/0xb0 [ 1290.673670][T18275] simple_read_from_buffer+0xe1/0x170 [ 1290.673700][T18275] proc_fail_nth_read+0x1df/0x250 [ 1290.673732][T18275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1290.673764][T18275] ? rw_verify_area+0x258/0x650 [ 1290.673784][T18275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1290.673821][T18275] vfs_read+0x1fd/0x980 [ 1290.673848][T18275] ? __pfx___mutex_lock+0x10/0x10 [ 1290.673874][T18275] ? __pfx_vfs_read+0x10/0x10 [ 1290.673898][T18275] ? __fget_files+0x2a/0x420 [ 1290.673928][T18275] ? __fget_files+0x3a0/0x420 [ 1290.673952][T18275] ? __fget_files+0x2a/0x420 [ 1290.673987][T18275] ksys_read+0x145/0x250 [ 1290.674012][T18275] ? __pfx_ksys_read+0x10/0x10 [ 1290.674037][T18275] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1290.674063][T18275] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.674091][T18275] __do_fast_syscall_32+0xb4/0x110 [ 1290.674117][T18275] ? lockdep_hardirqs_on+0x9c/0x150 [ 1290.674145][T18275] do_fast_syscall_32+0x34/0x80 [ 1290.674170][T18275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.674195][T18275] RIP: 0023:0xf712e539 [ 1290.674212][T18275] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1290.674231][T18275] RSP: 002b:00000000f511e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1290.674253][T18275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f511e620 [ 1290.674267][T18275] RDX: 000000000000000f RSI: 00000000f7492ff4 RDI: 0000000000000000 [ 1290.674280][T18275] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1290.674293][T18275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.674305][T18275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.674335][T18275] [ 1293.607173][T18291] FAULT_INJECTION: forcing a failure. [ 1293.607173][T18291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.632574][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.4.3509 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1293.632606][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1293.632620][T18291] Call Trace: [ 1293.632629][T18291] [ 1293.632638][T18291] dump_stack_lvl+0x189/0x250 [ 1293.632671][T18291] ? __lock_acquire+0xaac/0xd20 [ 1293.632701][T18291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.632730][T18291] ? __pfx__printk+0x10/0x10 [ 1293.632751][T18291] ? __might_fault+0xb0/0x130 [ 1293.632789][T18291] should_fail_ex+0x414/0x560 [ 1293.632815][T18291] _copy_from_iter+0x1db/0x15a0 [ 1293.632847][T18291] ? trace_kmalloc+0x1f/0xd0 [ 1293.632868][T18291] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1293.632898][T18291] ? __pfx__copy_from_iter+0x10/0x10 [ 1293.632923][T18291] ? __build_skb_around+0x257/0x3e0 [ 1293.632955][T18291] ? netlink_sendmsg+0x642/0xb30 [ 1293.632977][T18291] ? skb_put+0x11b/0x210 [ 1293.633005][T18291] netlink_sendmsg+0x6b2/0xb30 [ 1293.633037][T18291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.633062][T18291] ? __import_iovec+0x5d4/0x7f0 [ 1293.633086][T18291] ? aa_sock_msg_perm+0x94/0x160 [ 1293.633111][T18291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1293.633133][T18291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.633157][T18291] __sock_sendmsg+0x219/0x270 [ 1293.633180][T18291] ____sys_sendmsg+0x505/0x830 [ 1293.633212][T18291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1293.633255][T18291] ___sys_sendmsg+0x21f/0x2a0 [ 1293.633284][T18291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1293.633348][T18291] ? __fget_files+0x2a/0x420 [ 1293.633374][T18291] ? __fget_files+0x3a0/0x420 [ 1293.633411][T18291] __sys_sendmsg+0x164/0x220 [ 1293.633439][T18291] ? __pfx___sys_sendmsg+0x10/0x10 [ 1293.633479][T18291] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1293.633505][T18291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.633531][T18291] __do_fast_syscall_32+0xb4/0x110 [ 1293.633564][T18291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.633591][T18291] do_fast_syscall_32+0x34/0x80 [ 1293.633617][T18291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1293.633640][T18291] RIP: 0023:0xf712e539 [ 1293.633657][T18291] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1293.633675][T18291] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1293.633697][T18291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1293.633711][T18291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.633723][T18291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1293.633735][T18291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1293.633747][T18291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1293.633776][T18291] [ 1398.592945][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1398.599963][ C1] rcu: 0-...!: (2 ticks this GP) idle=2fac/1/0x4000000000000000 softirq=149039/149039 fqs=0 [ 1398.611421][ C1] rcu: (detected by 1, t=10502 jiffies, g=158905, q=183 ncpus=2) [ 1398.619285][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1398.619325][ C0] NMI backtrace for cpu 0 [ 1398.619348][ C0] CPU: 0 UID: 0 PID: 5494 Comm: dhcpcd Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 1398.619369][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1398.619381][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1398.619410][ C0] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 40 75 92 65 8b 0d 88 6b b5 10 81 e1 00 01 ff 00 [ 1398.619426][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000046 [ 1398.619442][ C0] RAX: ffffffff81ae34ff RBX: 0000000000000001 RCX: 8568c03eaa8e3300 [ 1398.619462][ C0] RDX: ffff88803029da00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1398.619473][ C0] RBP: ffffc90000007e90 R08: ffff888059f6f357 R09: 0000000000000000 [ 1398.619485][ C0] R10: ffff888059f6f340 R11: ffffed100b3ede6b R12: ffff888059f6f340 [ 1398.619498][ C0] R13: dffffc0000000000 R14: 183ddc2188e07bb9 R15: ffff8880b88277c0 [ 1398.619511][ C0] FS: 00007fcafb63d740(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 1398.619526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1398.619538][ C0] CR2: 00000000f50ac510 CR3: 0000000030a46000 CR4: 00000000003526f0 [ 1398.619552][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1398.619563][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1398.619574][ C0] Call Trace: [ 1398.619582][ C0] [ 1398.619589][ C0] __hrtimer_run_queues+0x28f/0xc60 [ 1398.619628][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1398.619652][ C0] ? read_tsc+0x9/0x20 [ 1398.619667][ C0] ? rcu_is_watching+0x15/0xb0 [ 1398.619695][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1398.619734][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1398.619757][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1398.619777][ C0] [ 1398.619783][ C0] [ 1398.619790][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1398.619809][ C0] RIP: 0010:smp_call_function_many_cond+0xe69/0x11c0 [ 1398.619836][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 20 6d 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cb 68 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 b0 68 0b [ 1398.619850][ C0] RSP: 0018:ffffc900034f75c0 EFLAGS: 00000293 [ 1398.619864][ C0] RAX: ffffffff81b467a0 RBX: ffff8880b883ad40 RCX: ffff88803029da00 [ 1398.619877][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1398.619887][ C0] RBP: ffffc900034f7720 R08: ffffffff8f7ed177 R09: 1ffffffff1efda2e [ 1398.619901][ C0] R10: dffffc0000000000 R11: fffffbfff1efda2f R12: 1ffff11017127e99 [ 1398.619914][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b893f4c8 [ 1398.619930][ C0] ? smp_call_function_many_cond+0xe80/0x11c0 [ 1398.619964][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1398.619991][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1398.620020][ C0] ? rcu_is_watching+0x15/0xb0 [ 1398.620046][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1398.620068][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1398.620093][ C0] flush_tlb_mm_range+0x6ae/0x12b0 [ 1398.620124][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1398.620149][ C0] ? up_write+0x1c4/0x420 [ 1398.620168][ C0] copy_mm+0x1882/0x2100 [ 1398.620195][ C0] ? __pfx_copy_mm+0x10/0x10 [ 1398.620212][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1398.620237][ C0] ? __init_rwsem+0x122/0x160 [ 1398.620254][ C0] ? copy_signal+0x50b/0x630 [ 1398.620272][ C0] ? copy_process+0x978/0x3b80 [ 1398.620287][ C0] copy_process+0x16d3/0x3b80 [ 1398.620307][ C0] ? copy_process+0x978/0x3b80 [ 1398.620332][ C0] ? __pfx_copy_process+0x10/0x10 [ 1398.620350][ C0] ? __lock_acquire+0xaac/0xd20 [ 1398.620376][ C0] kernel_clone+0x21e/0x870 [ 1398.620397][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1398.620419][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1398.620441][ C0] __x64_sys_clone+0x18b/0x1e0 [ 1398.620473][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1398.620504][ C0] ? do_syscall_64+0xba/0x210 [ 1398.620526][ C0] do_syscall_64+0xf6/0x210 [ 1398.620547][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1398.620566][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.620582][ C0] RIP: 0033:0x7fcafb711636 [ 1398.620599][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1398.620613][ C0] RSP: 002b:00007ffcc141fa50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1398.620629][ C0] RAX: ffffffffffffffda RBX: 00007ffcc141fa58 RCX: 00007fcafb711636 [ 1398.620643][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1398.620653][ C0] RBP: 00007ffcc143ffa0 R08: 0000000000000000 R09: 0000000000000001 [ 1398.620664][ C0] R10: 00007fcafb63da10 R11: 0000000000000246 R12: 00007ffcc141fb90 [ 1398.620676][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005576a1ed0ac0 [ 1398.620695][ C0] [ 1398.621316][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g158905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1399.118356][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=80426 [ 1399.126271][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g158905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1399.137744][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1399.147730][ C1] rcu: RCU grace-period kthread stack dump: [ 1399.153635][ C1] task:rcu_preempt state:I stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1399.165597][ C1] Call Trace: [ 1399.168909][ C1] [ 1399.171898][ C1] __schedule+0x16e2/0x4cd0 [ 1399.176439][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1399.181666][ C1] ? schedule+0x165/0x360 [ 1399.186028][ C1] ? __pfx___schedule+0x10/0x10 [ 1399.190920][ C1] ? schedule+0x91/0x360 [ 1399.195187][ C1] schedule+0x165/0x360 [ 1399.199372][ C1] schedule_timeout+0x12b/0x270 [ 1399.204257][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1399.209663][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1399.214980][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1399.220553][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1399.225431][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.230686][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1399.235674][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1399.240997][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1399.246226][ C1] ? finish_swait+0xcd/0x1f0 [ 1399.250845][ C1] rcu_gp_kthread+0x99/0x390 [ 1399.255469][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1399.260698][ C1] ? __kthread_parkme+0x7b/0x200 [ 1399.265746][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1399.270794][ C1] kthread+0x70e/0x8a0 [ 1399.274894][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1399.280115][ C1] ? __pfx_kthread+0x10/0x10 [ 1399.284736][ C1] ? __pfx_kthread+0x10/0x10 [ 1399.289352][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1399.294572][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.299790][ C1] ? __pfx_kthread+0x10/0x10 [ 1399.304401][ C1] ret_from_fork+0x4b/0x80 [ 1399.308848][ C1] ? __pfx_kthread+0x10/0x10 [ 1399.313465][ C1] ret_from_fork_asm+0x1a/0x30 [ 1399.318266][ C1]