last executing test programs: 2m57.080955536s ago: executing program 3 (id=366): syz_emit_ethernet(0x3a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000004c0)={{0x1, 0x1, 0x80000001, 0x0, 0xfff}}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200}) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f000000b000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000004c0)={&(0x7f0000004000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a400080000000031000000014000200fc0200000000000000000000000000011400010020010000000000000000000000000000f71c246abefd8d49eb9c3410eb6c19cbe76b"], 0x44}}, 0x40000) sendmmsg$inet(r7, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="4b2e1657c2da7beff4e61136f0b90ca1", 0x10}, {&(0x7f0000000140)="0572f9c4cefb2e6157b4667c9961f1cb0c695d595d09f95973a751d54edf0680f35dabce5e604eaa17090194cedf9c784b78c7741253a017ec3798df9be93cfa1327f61daad434596bce63f52b036ead90f2b9e58bfeaa9697dd0624c98fa84bba74f8f9e7f6ebbc88a9a60d785a89418eb68d811a0909c14fbe28f15bcbde29f3a80e1e2b15d162155caf47dabb8155e7bdf373f298a747ba984d84b65cc980edac44b4dd955ac005fae7535f10dad8ee6be6522ffb956ef0256d7bae81cac2676d482af1b89c85afe2a5fd7743edef95b6138bc40376947b6dd59e95389b8661c1ca7b8f57a4bc9c86d486cc", 0xed}, {&(0x7f0000000240)="2f46b5ca1bf06c863d6b6c45fa7c0a4331582e9fe4c7170af73ee7f7a5eb73c251f1dea4e9f48e9f2d234bdc8e0bd89dbb3b7b3e1710c4c8c4cb25ec9c39f3c09622a63fd5f6afd2ad1e92fe70b66d", 0x4f}, {&(0x7f0000000340)="1ad8ca26cd0e886224da9493c68ada1659e63f35cbe2cd8d5e150b30c94555bda25f9ff1b47d325aa276a2aaf128e9b8a0b370212202acb6d22cb561b02a1ae2c1b9822a5fb6c3ebab52c24cbfaf25fc41eaaa4bb599599910f4d21fd6731b6a63b5d0184fd25ae4a50fa1195382a666245ff52bf8dbb9aa277d91524a9bd3b249b1f0eb6996b2cf361844202dd90b9bdc6011a1", 0x94}, {&(0x7f0000000400)="384b14a0d9b8c5112810461e43c6632e4af15fda2b7a2ec5b5e69cce842296390cc299c2939dd09dc1c1f2059132cfbf73fb534fc064445ef0fde745634bb287a194e8f2dc668c14b56faef7a6bbd9c1e6ee4614b59ee0502c7df663a15d34e5bb92a99a77feb9b9236ca42f98547dc26dc7a24a9fccc562020f0acd", 0x7c}, {&(0x7f0000000040)="ff426ec5", 0x4}, {&(0x7f00000005c0)="ccfdd3db28e16d962297340af877fdfcd5aeb316ff68984a2825832ff055a82be4859486ff14bfcc3a0cad4aa10b51d9fca3e156d40d23424cee5ccb473cff47d3d61b19ebbfdea42067bc8e3bf841cd6666d550efb47aafe6af61086e9e4a640df79e600c55e1e780845fb89fd71b93d851613464bbfaadb855dac092e4234920", 0x81}, {&(0x7f0000000680)="0775e30427082b7f26d0222ea083059b02dec58a80fc7ccea7bca3ab68db0a6ac43128452891205f22a99d6b8c3b8414f1ed9aff22f42deea9d41a83ccb1a61beea0e2e8fb952c9f0b2bdfccfb43284134b16e3b36469785847eaf3cffa21ba70d4d075dfababa415f23efc72dff6eee88959b1f91e82eb2c11e55e2fe1d91a1f3d2e5bb2f42e63a13b0c836d2bddb77c51c6f0cc345e21099044f9ab7112af12e0f2d600ff34a70cb294969c1072bd45bf6c49179589eac", 0xb8}, {&(0x7f00000000c0)="90", 0x1}], 0x9, &(0x7f0000000480)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x7, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}, @lsrr={0x83, 0x17, 0xd5, [@multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x797f, @dev={0xac, 0x14, 0x14, 0x3c}]}, @end]}}}], 0x38}}], 0x1, 0x1) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 2m55.865297514s ago: executing program 3 (id=370): socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000000100)='\xdd:\xd9\xf8d\x05\x00\x1a\xdf\x86\xbf\x03;\xaa)\xf6!ux\x00', 0x6e93ebbbcc0884f2, 0x1d5, &(0x7f0000000000)={0x0, 0x5, 0x3}) mq_timedreceive(r1, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x20010, 0xffffffffffffffff, 0x3000) r2 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x48) read(r3, 0x0, 0x0) close(r3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 2m53.837382601s ago: executing program 3 (id=377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) 2m49.02845576s ago: executing program 3 (id=391): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000914bf20c80a01c3d5820102031d090212"], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x10001, 0x7, 0x4, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 2m44.092642323s ago: executing program 3 (id=394): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)=0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x2c47f4, 0x5c8, 0x80000003, 0x6}) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r2, 0x4, 0x5, 0x1}, 0x50) 2m28.190631478s ago: executing program 32 (id=394): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=0xffffffffffffffff}, &(0x7f0000bbdffc)=0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x2c47f4, 0x5c8, 0x80000003, 0x6}) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r2, 0x4, 0x5, 0x1}, 0x50) 17.147610955s ago: executing program 4 (id=683): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15.275888318s ago: executing program 1 (id=690): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0xc050) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xac, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0x1, 0x0, &(0x7f0000001ac0)="d4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r6) syz_fuse_handle_req(r5, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r7, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 13.918478962s ago: executing program 4 (id=692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)}}], 0x1, 0x6001) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x800, 0x752f, 0xffffccb7, 0x3, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xfff, 0x4002, 0xe6, 0x4}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000880)={0x1, 0x1ff, @status={[0x9, 0x1, 0x10001, 0x9, 0x5]}, [0x3, 0x9, 0x3, 0x8, 0x200, 0x100, 0x38000, 0x800, 0x8001, 0x4a6, 0xfffffffffffff800, 0x3, 0xffffffffffff0001, 0x725, 0x52, 0x6, 0x6, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x3ff, 0x1, 0x81, 0x80, 0x6, 0x3, 0x91, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x197d, 0x47a9, 0x3, 0x8, 0x40, 0xffffffff, 0xfd, 0x12000000, 0x2d87, 0x9, 0x9, 0x2, 0x593, 0x8, 0x200000000, 0x100000000, 0x1, 0x4, 0x7, 0x80000000000000, 0x1edb, 0x9, 0x101, 0x1, 0xffffffffffffffff, 0xffffffffffffff00, 0x10001, 0x2]}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x94, r4, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2079ce0bd88e386d489f544c096b0a719ef9d87d3d08427b95cdafdd3323d5b5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 12.532097061s ago: executing program 4 (id=693): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'pcm3724\x00', [0x109, 0x80008000, 0x86c, 0xc, 0x80000000, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x1, 0x5, 0x6, 0x746, 0x100, 0x6, 0xffffefa7, 0x2000001, 0x0, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/222, 0xde}], 0x1, 0x8, 0xeffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x77359400}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, 0x0, 0x4810) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 10.612095477s ago: executing program 1 (id=698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r6, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = io_uring_setup(0x4b6e, &(0x7f00000002c0)) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r9, 0x7cb, &(0x7f0000000980)={&(0x7f0000000100)={{@hyper}, {@local}, 0x400, "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"}, 0x418}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x28a, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x50}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000e30000ea00000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="46060900000000002000128009000100766c616e00000000100002800c0002001f0000001b00000014003500766c616e3100"/60], 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) 9.890924009s ago: executing program 2 (id=699): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1005}, 0x1c) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./bus\x00'}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) connect$unix(r4, &(0x7f00000002c0)=@file={0x1, './bus\x00'}, 0x6e) r6 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b472545b45602117fffffff81004e230e227f008901925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7070000000000000000f85d46ff1317281722e30c0200000000", 0x63}], 0x1) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000) r9 = open(&(0x7f0000000000)='./bus\x00', 0x42, 0x0) write$dsp(r9, 0x0, 0x0) r10 = getpid() ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f00000001c0)=r10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x6, 0xb47, 0xf, 0x2, 0x78, 0x8, 0xe}, 0x9c) 9.679823892s ago: executing program 0 (id=700): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.608201778s ago: executing program 4 (id=702): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 9.201714501s ago: executing program 0 (id=703): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)}}], 0x1, 0x6001) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x800, 0x752f, 0xffffccb7, 0x3, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xfff, 0x4002, 0xe6, 0x4}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000880)={0x1, 0x1ff, @status={[0x9, 0x1, 0x10001, 0x9, 0x5]}, [0x3, 0x9, 0x3, 0x8, 0x200, 0x100, 0x38000, 0x800, 0x8001, 0x4a6, 0xfffffffffffff800, 0x3, 0xffffffffffff0001, 0x725, 0x52, 0x6, 0x6, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x3ff, 0x1, 0x81, 0x80, 0x6, 0x3, 0x91, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x197d, 0x47a9, 0x3, 0x8, 0x40, 0xffffffff, 0xfd, 0x12000000, 0x2d87, 0x9, 0x9, 0x2, 0x593, 0x8, 0x200000000, 0x100000000, 0x1, 0x4, 0x7, 0x80000000000000, 0x1edb, 0x9, 0x101, 0x1, 0xffffffffffffffff, 0xffffffffffffff00, 0x10001, 0x2]}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x94, r4, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2079ce0bd88e386d489f544c096b0a719ef9d87d3d08427b95cdafdd3323d5b5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 8.364447999s ago: executing program 0 (id=704): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44845}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4008898) recvmsg(r4, &(0x7f000000b680)={0x0, 0xf900, &(0x7f000000b600)=[{&(0x7f000000b4c0)}, {&(0x7f000000b500)=""/153, 0x99}], 0x2}, 0x0) sendto$inet6(r4, &(0x7f00000006c0)="666ef1c7406cde08bec59b0a47c1b07d5c955b4dd521a2fe77465249b56be3eb57ee3612df6b17eca0d3427f2a509b4624f1b521135ad6ded5ef8d81f9c36d821bb064107f9000003521406681f59910924b2c4f4b8dfbbb4f8c32b846ed9251e1d8cf1fc9547299f5a9e79e45341474894ec06bfab69227bfbb749095cc267348c72c426459b44a682ec4e03b793b067931aec4df27e22b6c643484b4eb4e0abd0e03b1231db2fabf6d1fe0e6e61e4a13d0a5909e46b67b30a4cca1e4b1b2a4267cf3ab44b39948b0e9e472553b793b1db2f388a42a5c6014d4df5045801e9870e120e6f7a2894e8849eab34b6987db23d32e2a5f", 0xf5, 0x24000044, 0x0, 0x0) 8.244486024s ago: executing program 2 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="0404"], 0xd) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x1, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x4, [@enum={0x9, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0x8, 0x7}, {0xf, 0x285c}, {0xe, 0x81}, {0x1, 0x5}, {0xa, 0x1}, {0xc, 0xfff00000}, {0x5, 0x7207}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x9}, {0xc}, {0x2, 0x3}, {0xf}, {0x10}, {0x7, 0x1}]}, @var={0xe, 0x0, 0x0, 0xe, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000480)=""/255, 0xc8, 0xff, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000001000100a91d0000ff03291b0257ed77ffe206a0e377dd000000050000", @ANYRES32=0x1, @ANYBLOB="8f00"/20, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="0100000004000000050000000d00"/28], 0x50) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000e0000000000008160200086dd63269fe000303aff200173d0cd8b00000000000001ff020000ad098eb3b313593c00000000000000008a0000010100907801000000e2de789a0007010000000000000000000000000000000000ff020000000000000000000000000001000000"], 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 7.931731101s ago: executing program 5 (id=706): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.126743637s ago: executing program 4 (id=707): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x20, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x59a, 0x16}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x7f, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x5f}]}, 0x98}}, 0x0) bind$l2tp(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback, 0x4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x490e7, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 6.82107799s ago: executing program 5 (id=708): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520436170745572652720303030303030"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts_2292={{0x58, 0x29, 0xb, {0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}}}], 0x58}, 0x0) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.678679547s ago: executing program 5 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x0, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0x2]}) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x8000009, 0x7f, 0x5, 0x4, 0x4, 0x2, 0x0, 0x8}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1000000, [r7, 0x0, 0x0, r8], [0x2b8]}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x4, &(0x7f00000003c0)=0xa1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 5.556735591s ago: executing program 1 (id=710): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f0000000100)='\xdd:\xd9\xf8d\x05\x00\x1a\xdf\x86\xbf\x03;\xaa)\xf6!ux\x00', 0x6e93ebbbcc0884f2, 0x1d5, &(0x7f0000000000)={0x0, 0x5, 0x3}) mq_timedreceive(r2, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x20010, 0xffffffffffffffff, 0x3000) r3 = fsopen(&(0x7f00000003c0)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) read(r3, 0x0, 0x0) close(r3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 5.516771287s ago: executing program 2 (id=711): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x34, 0x2, @tid=r1}, &(0x7f0000000180)) prlimit64(r1, 0x0, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c337b4eb920f3f569140400000000005d76063bb1605b0e06030000000000ce0ba20016de672f06e4"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff13, &(0x7f0000000000)='cgroup\x00'}, 0x7c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)) 4.516811749s ago: executing program 5 (id=712): syz_emit_ethernet(0x43, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x30, 0x35, 0x64, 0x3, 0x6, 0x2, 0x0, @multicast1, @multicast2}, {0x14, 0x9, 0x0, @multicast2, "98f8d76031f54d31f7d7a7d6087627e5c2627d6a5f789c4da3"}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x44000, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 3.933842743s ago: executing program 1 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0, 0x88f7]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x18) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3d5) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x108}}, 0x0) 3.828648541s ago: executing program 2 (id=714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001440)}}], 0x1, 0x6001) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x800, 0x752f, 0xffffccb7, 0x3, 0x6}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0xfff, 0x4002, 0xe6, 0x4}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000880)={0x1, 0x1ff, @status={[0x9, 0x1, 0x10001, 0x9, 0x5]}, [0x3, 0x9, 0x3, 0x8, 0x200, 0x100, 0x38000, 0x800, 0x8001, 0x4a6, 0xfffffffffffff800, 0x3, 0xffffffffffff0001, 0x725, 0x52, 0x6, 0x6, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x3ff, 0x1, 0x81, 0x80, 0x6, 0x3, 0x91, 0x5, 0x4, 0x6, 0x4, 0x1, 0x7, 0x197d, 0x47a9, 0x3, 0x8, 0x40, 0xffffffff, 0xfd, 0x12000000, 0x2d87, 0x9, 0x9, 0x2, 0x593, 0x8, 0x200000000, 0x100000000, 0x1, 0x4, 0x7, 0x80000000000000, 0x1edb, 0x9, 0x101, 0x1, 0xffffffffffffffff, 0xffffffffffffff00, 0x10001, 0x2]}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x94, r4, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2079ce0bd88e386d489f544c096b0a719ef9d87d3d08427b95cdafdd3323d5b5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 3.828161387s ago: executing program 4 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01004100d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 3.637699747s ago: executing program 5 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24020400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1a1b02) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 2.828974273s ago: executing program 2 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000001480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001500)="2d24eb741ec2d15e57f36a86d30ad376dce691d79f5d7fd3f8b4e9923445319624a3d027cb72638d8bdc179fb3ffdc5e7f7c22491d811be2cfb97a3312081e525a50d739b4c141905febf34ce6fcd299109d36e80b85666f84d579b736c5873f567f1521e01ecc", 0x67}], 0x1, &(0x7f0000001600)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="165de18e"], 0x50, 0x40000000}}], 0x1, 0x4040000) recvmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000300)=@rc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000006900)=""/266, 0x10a}, {&(0x7f0000000940)=""/223, 0xdf}], 0x7, &(0x7f0000000a40)=""/78, 0x4e}, 0x7}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ac0)=""/158, 0x9e}], 0x1, &(0x7f0000000b80)=""/106, 0x6a}, 0x20000c}, {{&(0x7f0000000c00)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000c80)=""/89, 0x59}, {&(0x7f0000000d00)=""/18, 0x12}, {&(0x7f0000000d40)=""/17, 0x11}, {&(0x7f0000000d80)=""/140, 0x8c}, {&(0x7f0000000780)=""/217, 0xd9}], 0x6, &(0x7f0000000fc0)=""/29, 0x1d}, 0x5}, {{&(0x7f0000001400)=@x25, 0x80, &(0x7f00000019c0)}, 0xb7a}, {{&(0x7f0000001a40)=@x25, 0x80, &(0x7f0000002f40)=[{&(0x7f00000016c0)=""/221, 0xdd}, {&(0x7f0000001bc0)=""/39, 0x27}, {&(0x7f0000001c00)=""/64, 0x40}, {&(0x7f0000001c40)=""/104, 0x68}, {&(0x7f0000001cc0)=""/156, 0x9c}, {&(0x7f0000001d80)=""/41, 0x29}, {&(0x7f0000001dc0)=""/107, 0x6b}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/227, 0xe3}], 0x9, &(0x7f0000003000)=""/57, 0x39}, 0x5}, {{&(0x7f0000003040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000004380)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/70, 0x46}, {&(0x7f0000004140)=""/236, 0xec}, {&(0x7f0000004240)=""/61, 0x3d}, {&(0x7f0000004280)=""/247, 0xf7}], 0x5, &(0x7f0000004400)=""/8, 0x8}, 0x7}, {{&(0x7f0000004440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000006600)=[{&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f0000006640)=""/49, 0x31}, {&(0x7f0000006500)=""/215, 0xd7}], 0x10000000000000f3}, 0xb59d}, {{&(0x7f0000000e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000007ac0)=[{&(0x7f0000006680)=""/151, 0x97}, {&(0x7f0000000ec0)=""/85, 0x55}, {&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/97, 0x61}], 0x5}, 0x10001}], 0x8, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r3], 0x0, 0x58}, 0x28) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000006800)=[0xffffffffffffffff, r5, r2], 0x3) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) close(r6) fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r8 = openat$kvm(0x0, &(0x7f00000015c0), 0x40100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x0, r10, 0x8}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r10}) 2.492648205s ago: executing program 1 (id=718): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.26272486s ago: executing program 0 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520436170745572652720303030303030"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts_2292={{0x58, 0x29, 0xb, {0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}]}}}], 0x58}, 0x0) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.047621617s ago: executing program 0 (id=720): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000100000007000000071c1c"], 0x30}, 0x40880) 1.046832892s ago: executing program 2 (id=721): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@random="ee38264ba485", @random="002000050008", @void, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x5f, [@remote]}, @timestamp={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x27, 0x58, [@broadcast, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback, @multicast1, @local, @multicast1, @multicast1]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003020000020203"], 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000c40)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000cc0)="753edfebc74d3a003a70ef48a9be335235f7d02ca53606c5b39b9f85fde2d5a5c14fd13a9b3f52772e92db714d296b39b494d571add8322e6a26c3ceb078786cf4dfc9768d69230c5809511bdf2beb0cf0477e60d7cc3591ec10020399b58b34a808df69829a8aef4f2e0a60522e197a071b8148e234506cf47ac069ad4d99bbb3a4a4cbf01537c5960426238c1c8749abaf7143452dd684f1c3822baaa9cad67e3155cdc4a7d3363914dd77980c116b1d30539564f7c64838cf341c78d6ae4f71c020c3f3f5a176aad072ac70e14d864eb9954e98f963acb30dcd08833d19279e9029", 0xe3}, {&(0x7f0000000dc0)="fbda5f69cb10b4a7c886c8b9471eae6562dac66760b4ca7efe94aa8cd48755e5d57e950991cefb34b7ce8944db7202028ba422b566a9cec4c8474b25d5a9c7e91ec7f5cee2c048dfa50774a55ab1071d1a098b7602ed23d8f76f4a47577757d2d52490e309c38fb2fc5a0596262406a8f4f25b164e04ab66fcc07c20ed60bd003d40f491b591", 0x86}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)}], 0x4, &(0x7f0000001f00)=[{0xf8, 0x0, 0x10, "780d99a19687b3b2d916e75e864bbb5770cb821a01faacdf4c4d62b086b1c7f0c1a77675c0a72eda5e7492de7d3a62571f7bff64452141398b91e880441aa9f6cdd31028a56cf9d6c8db93b7060bbd2f9314386e308e12e64023660c6ded31e04f17e94d1c995ac10da4e0411b6b529bb6e953b423bf1eeeb3513f722f5f59ec87177c5c4673abea1b856c8d5fad79f2e4a7cb8c7ed1b956ba83c6351f5384687cfada857865995f290dfc5b4b665ffc5e4a62fa89b6e25ab79124564ea6a89659c13a092411edabab7df8c348a1fa681ca9d3186c4eb3ab7f140e6bf0f8d3fa31e517f1"}, {0x68, 0x16, 0x1, "4de8c05e2cec9d48da57121bf989ab8c82fca87856849c7a814896d04ec5d7e3a3da326f99a9105773f1d859d302ee58f530ff12afbb889e7a4ce6231d4d03d0d725e2d9bc511a0f7dcdd9fcb4e7579922576a9426"}, {0x70, 0x10d, 0x1000, "ebf20a1093fefb8f70218c38aaba1c7a5336f31a5a5023057053781d033ea9d85498a488ede3ebad04ee703d464e77569f8b317a37837667a529c773292cac49781f54159d7d6d136ec336d1c15cd7b3334edaa3a76c96a6570df9fad900"}, {0xc8, 0x10e, 0x9, "dcce094c6f6f5f5f93432c65c45b16a88eeb50bda2fb8aaaca997b350e2835223c061f08853c182b4309eba6606c5fb575f41f304a0a413c388ea65ebb40b6ad1fa6a4953a7afd51157963065b460afe2088f3518ba261db17330cbcd3375d3a11bb6904eb972576308fb7d51be56b78b38b49bdb2ed10401bad5cf8096af55f3f3d2c4b786e233273edffb7008d91cb41b7da3031db703be2a1bf8440bd5d0e8cf7855c0daf194262d593aefff63b506dd9"}, {0xe0, 0x115, 0x8, "10ca334bb1ecb0e1bce33babb71f8752290def3e7a0225c69392009659048b6028e3617cf2a207e032b707a7b2694d0baefc2554045938cdc9c5e5139df18cf5883001181b9ddb1b1cc9b96994bbc2ebb42490c3652e0d7c7bcfc94be7abc089ab380601c31457de1d4f747c8e726408b4dfe28bddc0cd5528d8c080a73de3711ec606bfdf83f17b7bb16a3e9b83f1a1e872231064b1cafbe3e12393abd6b36c2a6d34b5a99e81b79a2c9cc9f8c007252921ea09ba25c9d4f4e46a20a815a6a94b0ad27b7e318c30ec810ab4219d0012"}, {0x70, 0x29, 0x6, "608a489258a0acc4cb6266b32e84e892673d3a0589532d5c51cf69ffe8e289dc0ce5ea21f0ce952470c8f34f71ce53f3b3232f4a5cb05669fff081b9e1c61467093997d0f6e6ecf26159bfe8ebfc94bc3caec0098496431aef296b3e1eaa11"}, {0x68, 0x109, 0xe, "471dfbd82ef841affbf98379351edc84f370615df2819fad99b8130101ac7d85d21b5bfbc61e2e37f15061ce75ed400327956ec9922bf0d11b23a3185d9e1ca4085b269b244fa97a1775d3ffbab8844fe1498f3cac"}], 0x450}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002380)="00df6efd3a6b4240b6d7d83b77c84115c3a0fa5b23b224d6676273f6154d5e44270fda2e", 0x24}, {&(0x7f00000023c0)="0fad2993bb0715abbf48709d62", 0xd}, {&(0x7f0000002400)="be4343c8fcbc53ed9b8bd119a504fd95b244fcc367e68e9c56c034b81dee09140a9b1c9f24117163c365e8c655ba", 0x2e}], 0x3, &(0x7f0000002480)=[{0x10, 0x116, 0xe}, {0xb0, 0x10d, 0x6, "3fbcef94954a69f0dd143a0166c1392561c228a3cd918b9a5927df357cc1ef7d6792233b9f4b361b58610ce74bf46640d66e8b8b280855238860f374bfc852792f443566e50098682e1b187c79d4c8bb89f78d0327721118d2b1b4ff517f571a53cc54707ccd73bb2f3d2132e0379ece4078a772966ce66aed6ec38cb04532ab188eef9d95d4a0189bb223f86fbfc97aa3828a2fedea790a348e"}, {0xf0, 0x10a, 0x80000000, "787226a164dac77cabf52fea21e7dc2f5627d28eb7eb0d05dacd1c6b9ecb6119dd88a46c5ac6346ae52e76feff3c9c1488e520295e1baf2f9253c352005eb56fb71aa6dd025c24c44d335c6c7e8bb29b4a9e6b450628bf3d2c0ba208e7b3ae9e1afceb14d3870162e41b066a30ff5f18e2ca1f5f749b8cae5392c50d86f4063345ba1f41ba4673b7c679d194ee740a094a1efee13e19cc3616570f6c93fb541b58c6f2dc54a798ef12af2a86ad355667b9792e438322b511a4bfa275eaef5de65bfc14666ef1ae1289dbb096e6439ae80c926540f667992ad2"}, {0x78, 0xff, 0x4, "c69dbcce5f402b2f92c30d791ac71079f8a4a5971c59828da48336ac73bc94652f554690ce5337119db9c618fb010ee1f03390ca9998ce994847c0048138b14d6db20794881c4fa11b25574fb0fb2717e1192edb8a7da35277dd6d3ad77fcb26d600365727"}, {0xf0, 0xff, 0x2, "f00d4076523a12ab77837b58b901ac57ae196f9ae4c653d8cbea79851685d948bb2e589c84beb5d1b6913b4aa46315787d645c3702733df0e886413e11f43c59c5ba5e596a8429293c367db5cac50a6f7d11f9d2face06a3c0918e0128cefcb879dcdda454c589516b191a437fbf57968d6945eae3ef360581ca18b781e881b424f39ceab29e90f06dd4d1868ed00364f47228415b006aa92b777e2d5fdc0f3b64593b5d8421d96f6f64f8a90d1182f62c91751e7960d8e2791ba8aaa8bd8b8f451a2fa7c6e8e9a704650d35948bb6304b022214c86967d84641bade"}, {0xf0, 0x112, 0x51d, "90b8ba2befc896da3bd988eda4052025dda6cb57b3e1b45a4e3998993ed7c618425eead3324b487e55e708f2fe304295996b588710287ee565047d9fbe936f436ab6da9ef40e7db415f58d0669ed2ccfb6ced85e2d4935a1db7f0b6695c70142e8e5f7adc90ee237c717821eb7b78596bac23050156376b58439b80f27d9a9aca8453c9f43cbe8cd4d63df0638e18fbc9c19795b628976f60104d2993681fc1308be1febc6a3a1f6de390fa2791761855c48dc90d9ef0246328bf57872587916bf72d348b7a30118b801d34c97d003f51d9a4e10c68bb13aafb42a2f1d20"}, {0xf0, 0x111, 0x310, "b94fc49a3eeaa8a81ea01d1b71426abc3e9a2653cb4b9741c9e0ee51ecbdcdc8c28df262c7a19d32d4f300418f7fe071a5472692c5a813523e144747e4b094ca66ed75e863d10976e5d5412c38b1e6b2a18bccc98add5a6fd9bfc176eb986c9905bc0e348b68c1058b991b265ece43d018830c40a3ad2408afdef86f0ca112d6335e6a308835e39fcfcfa5fff0783e69bc31622e0911137b31fd6d1190241f1d7f63ffa593252d5bc1788b861726e9e79ebc0a9821f8e6bddd70da07db52380746d72769825547d0142820685b5437a393cba35498021213a19a496c13"}, {0xd0, 0x115, 0x5, "9ba145701cddf55c5599d6e83b1d10601a0e685d191a7f99971a6623a144701a8cee13b8de93929ebe7b4a40316e107137782105118e9983c6bda94452ca4a79f71dd81c52ab281b52ea9cfd62c7bf4bab4357ea2cd3049e59d27d299fae6e53bc10c9a48d6113575ab24f947a4d71079d029b058d2e5ac6ae1b0964130a44bb865ac4e5e287e6fbb96039f1ecc54323edf5532ff661385631741da4311d49787bbb919253be4539ab150a258273e61fb7d21a172354d8803167ec73f8c87469"}, {0xf0, 0x88, 0x5, "12d2430f4900cb4fcff63f9b0cb3f0508be8d94eefd045ea26a67ce35a5e9f9c0dd86952674cf59a230b573073d7565b4b50390f5a3362280511fef04df913ad9d28c2c050e060de6c2d3d6941d5638e7a66a5d8368abb7c98df531a1e5233ce9b6236aa0390065391b4aebccca1403793abc58eb6ec011168244b44198efc3815235a113c1dc1afc1d9340bacfb68e9ba9ff37f620e5c71ce0824dc872fce77f2f78103b973e5c0cb699a416df011aa76ead365f61a253e20b776cf99170548425c2f5fa28684664816d2a055aebd47539bb88e6275f7e1f595bf75"}], 0x6b8}}], 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x0, 0xb, 0x26, {0x26, 0x21, "405ae846cde120d5afdba6cf9d93173b3e6a227bf6b9861b0913f9efded99a43e8c12f1a"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="2017c800000014477011b18ace041092c2a1e525fdf161b1db5fd30184e299a2465b8f1a8bce4ebdd1d46f2fa6e15c28700b63a4a58ede5c7df083d4cc75ba953ef35ae220dc35ce0aef6ce2ff38269d1bde11ee0dd2097857199c5fbd5b7f9fb19de17b63b9b486bcec1dd744b75f68ec63167466458c0b817c9a575637f074ab9b8bbc16186191642876771062bbd7930a492eeb441050c952b11ce9244a11e55a0b467a1928117aca953e02cb218bad554b10286b7bade1157da2ea1a062e830e93c0b26dae7729bf"], &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x5}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r6) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r7], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 852.632251ms ago: executing program 1 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="66013df5b00835141bf5cf1710dce981f37412f11d8bbf7a5b601fe19f1543ddcb081a5f06771d6555f59abbbf06be7291b6cd9ea3250f0066bb36409f681926510e4ef474e6553012220860529fea1d74b87d28f9b6bba9ee43c23501e5e1b613bc6e7d4bedb5359429c6157bc71268f9230d91cfe3173de6487eab7a55f29c63401b2bb583ba570a3423663d98f5b0817046", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee00, 0xee01, 0x0) setuid(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) open$dir(&(0x7f0000000240)='./file0/file0\x00', 0x41, 0x2) timer_settime(r8, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109021b00010000100009040002010083ec0009050602000202000aa6ef8fbc7d6ce517be5692dbaebf7d54bb2e18188a2c9eb490dd8e0eefa4fb"], 0x0) socket$key(0xf, 0x3, 0x2) 852.18926ms ago: executing program 0 (id=723): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4044800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x17, 0x6e, &(0x7f0000000180)="8f2329a343fcbf8d05301d75be5da7228539cc782a9b58", &(0x7f0000000340)=""/110, 0x20003, 0x0, 0x8b, 0xffc, &(0x7f0000000200)="5d356ac909e52fbca8b93a0091ad7822e861bf0754f5a60bade48631be8cc418e61f20c4572538c4147722f7d9e954e9f374952d7ce3d26c1c15a1e3880309d69fe043f9231819beb547aacafcebc08cfbd6d1fb22533e305a99aa5a45cf07d9a0950e92d8c2a95a8e842c1450863921f540de1aa4e4f2e1f3e0473c1aa442a1661471e8920d22f0f4c37a", &(0x7f0000001940)="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", 0x2, 0x0, 0x22}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 5 (id=724): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0401273, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4151, 0x1037}], 0x1, 0x8b3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): tap+0x807/0x850 [ 169.337844][ T6671] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.337871][ T6671] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.337905][ T6671] netlink_unicast+0x759/0x8e0 [ 169.337945][ T6671] netlink_sendmsg+0x805/0xb30 [ 169.337985][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.338023][ T6671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.338043][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.338072][ T6671] __sock_sendmsg+0x219/0x270 [ 169.338098][ T6671] ____sys_sendmsg+0x505/0x830 [ 169.338133][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.338174][ T6671] ? import_iovec+0x74/0xa0 [ 169.338207][ T6671] ___sys_sendmsg+0x21f/0x2a0 [ 169.338239][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.338322][ T6671] ? __fget_files+0x2a/0x420 [ 169.338344][ T6671] ? __fget_files+0x3a0/0x420 [ 169.338381][ T6671] __x64_sys_sendmsg+0x19b/0x260 [ 169.338415][ T6671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.338457][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 169.338475][ T6671] ? rcu_is_watching+0x15/0xb0 [ 169.338504][ T6671] ? do_syscall_64+0xbe/0x3b0 [ 169.338532][ T6671] do_syscall_64+0xfa/0x3b0 [ 169.338553][ T6671] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.338574][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.338594][ T6671] ? clear_bhb_loop+0x60/0xb0 [ 169.338621][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.338641][ T6671] RIP: 0033:0x7ff87c78e9a9 [ 169.338661][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.338677][ T6671] RSP: 002b:00007ff87a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.338700][ T6671] RAX: ffffffffffffffda RBX: 00007ff87c9b5fa0 RCX: 00007ff87c78e9a9 [ 169.338715][ T6671] RDX: 0000000004000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 169.338728][ T6671] RBP: 00007ff87a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.338740][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.338752][ T6671] R13: 0000000000000000 R14: 00007ff87c9b5fa0 R15: 00007ffd86e63a28 [ 169.338787][ T6671] [ 169.669010][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.750889][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.516044][ T9] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 171.779403][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 171.789028][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'. [ 172.336186][ T6695] fuse: Unknown parameter '|eoupWid00000000000000000000' [ 173.752425][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 173.762995][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.204'. [ 174.528427][ T6708] hub 6-0:1.0: USB hub found [ 174.534149][ T6708] hub 6-0:1.0: 1 port detected [ 176.303628][ T3093] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.454096][ T6732] FAULT_INJECTION: forcing a failure. [ 176.454096][ T6732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.484606][ T3093] usb 3-1: Using ep0 maxpacket: 8 [ 176.506974][ T3093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.525050][ T3093] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 176.546329][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.0.212 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 176.546358][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.546369][ T6732] Call Trace: [ 176.546377][ T6732] [ 176.546384][ T6732] dump_stack_lvl+0x189/0x250 [ 176.546404][ T6732] ? __pfx____ratelimit+0x10/0x10 [ 176.546418][ T6732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.546431][ T6732] ? __pfx__printk+0x10/0x10 [ 176.546447][ T6732] ? __might_fault+0xb0/0x130 [ 176.546466][ T6732] should_fail_ex+0x414/0x560 [ 176.546483][ T6732] _copy_from_user+0x2d/0xb0 [ 176.546500][ T6732] snd_pcm_oss_write+0x84f/0x11a0 [ 176.546515][ T6732] ? get_pid_task+0x20/0x1f0 [ 176.546542][ T6732] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 176.546556][ T6732] ? bpf_lsm_file_permission+0x9/0x20 [ 176.546568][ T6732] ? security_file_permission+0x75/0x290 [ 176.546583][ T6732] ? rw_verify_area+0x258/0x650 [ 176.546600][ T6732] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 176.546614][ T6732] vfs_write+0x27b/0xa90 [ 176.546631][ T6732] ? __pfx_vfs_write+0x10/0x10 [ 176.546643][ T6732] ? __fget_files+0x2a/0x420 [ 176.546659][ T6732] ? __fget_files+0x2a/0x420 [ 176.546671][ T6732] ? __fget_files+0x3a0/0x420 [ 176.546683][ T6732] ? __fget_files+0x2a/0x420 [ 176.546701][ T6732] ksys_write+0x145/0x250 [ 176.546714][ T6732] ? __pfx_ksys_write+0x10/0x10 [ 176.546723][ T6732] ? rcu_is_watching+0x15/0xb0 [ 176.546740][ T6732] ? do_syscall_64+0xbe/0x3b0 [ 176.546757][ T6732] do_syscall_64+0xfa/0x3b0 [ 176.546768][ T6732] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.546781][ T6732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.546793][ T6732] ? clear_bhb_loop+0x60/0xb0 [ 176.546808][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.546819][ T6732] RIP: 0033:0x7f4ec9f8e9a9 [ 176.546831][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.546841][ T6732] RSP: 002b:00007f4ecad94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.546856][ T6732] RAX: ffffffffffffffda RBX: 00007f4eca1b6080 RCX: 00007f4ec9f8e9a9 [ 176.546865][ T6732] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 176.546872][ T6732] RBP: 00007f4ecad94090 R08: 0000000000000000 R09: 0000000000000000 [ 176.546879][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.546886][ T6732] R13: 0000000000000001 R14: 00007f4eca1b6080 R15: 00007fff15ce8618 [ 176.546905][ T6732] [ 176.574899][ T3093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.575390][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.813840][ C0] hrtimer: interrupt took 260682446 ns [ 176.913851][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.953777][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 176.963051][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 177.069061][ T5834] usb 5-1: USB disconnect, device number 6 [ 177.487875][ T3093] usb 3-1: config 0 descriptor?? [ 178.685617][ T3093] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.695395][ T3093] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.779193][ T3093] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.786849][ T3093] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.794418][ T3093] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 178.834528][ T3093] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 178.910105][ T3093] usb 3-1: USB disconnect, device number 9 [ 178.910595][ T30] audit: type=1326 audit(3506043909.017:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 178.947259][ T30] audit: type=1326 audit(3506043909.017:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 179.040053][ T30] audit: type=1326 audit(3506043909.057:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 179.061497][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.088877][ T30] audit: type=1326 audit(3506043909.057:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 179.110248][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.121707][ T30] audit: type=1326 audit(3506043909.057:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 179.143063][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.096815][ T30] audit: type=1326 audit(3506043909.057:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 180.231807][ T30] audit: type=1326 audit(3506043909.057:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 180.320919][ T30] audit: type=1326 audit(3506043909.057:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 180.435233][ T30] audit: type=1326 audit(3506043909.057:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 180.498007][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 180.515037][ T30] audit: type=1326 audit(3506043909.127:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6751 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 180.594292][ T6770] netlink: 'syz.2.223': attribute type 10 has an invalid length. [ 181.000836][ T6770] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 182.815966][ T6783] fido_id[6783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 182.954977][ T6787] _Z`Ԁ@: entered promiscuous mode [ 182.994336][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 183.071226][ T6790] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 183.095272][ T6790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.404367][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 184.404388][ T30] audit: type=1326 audit(3506043914.510:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 184.508335][ T6798] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:0 [ 184.592805][ T30] audit: type=1326 audit(3506043914.510:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 184.616024][ T30] audit: type=1326 audit(3506043914.520:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 184.638732][ T30] audit: type=1326 audit(3506043914.520:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 184.680890][ T30] audit: type=1326 audit(3506043914.550:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.462647][ T30] audit: type=1326 audit(3506043914.550:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.494429][ T30] audit: type=1326 audit(3506043914.550:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.569053][ T30] audit: type=1326 audit(3506043914.550:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.668891][ T30] audit: type=1326 audit(3506043914.550:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.779004][ T30] audit: type=1326 audit(3506043914.550:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6797 comm="syz.1.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 185.811317][ T6821] netlink: 'syz.1.237': attribute type 2 has an invalid length. [ 185.864233][ T6826] netlink: 'syz.4.239': attribute type 21 has an invalid length. [ 185.902393][ T6826] netlink: 128 bytes leftover after parsing attributes in process `syz.4.239'. [ 185.931594][ T6826] netlink: 'syz.4.239': attribute type 4 has an invalid length. [ 185.968861][ T6826] netlink: 'syz.4.239': attribute type 5 has an invalid length. [ 185.996093][ T6826] netlink: 3 bytes leftover after parsing attributes in process `syz.4.239'. [ 187.006679][ T6836] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.242'. [ 187.056630][ T6836] netlink: 'syz.3.242': attribute type 8 has an invalid length. [ 187.082188][ T6842] Illegal XDP return value 4294967294 on prog (id 54) dev N/A, expect packet loss! [ 190.350236][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 190.372622][ T6866] vlan0: entered promiscuous mode [ 190.378122][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 190.378139][ T30] audit: type=1326 audit(3506043920.503:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 190.423618][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 190.596253][ T30] audit: type=1326 audit(3506043920.503:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 190.617830][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.516997][ T30] audit: type=1326 audit(3506043920.503:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 191.636297][ T30] audit: type=1326 audit(3506043920.503:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 192.133496][ T30] audit: type=1326 audit(3506043920.503:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 192.250401][ T30] audit: type=1326 audit(3506043920.553:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 192.587680][ T30] audit: type=1326 audit(3506043920.553:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 193.230592][ T6886] netlink: 'syz.2.255': attribute type 8 has an invalid length. [ 193.572566][ T30] audit: type=1326 audit(3506043920.563:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 193.622353][ T30] audit: type=1326 audit(3506043920.573:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 193.797451][ T30] audit: type=1326 audit(3506043920.573:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3bf8e9a9 code=0x7ffc0000 [ 194.462232][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.468758][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.791349][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 196.457975][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 196.468011][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 197.393202][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 197.393223][ T30] audit: type=1326 audit(3506043927.497:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.362890][ T30] audit: type=1326 audit(3506043927.497:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.386591][ T30] audit: type=1326 audit(3506043927.497:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.449133][ T30] audit: type=1326 audit(3506043927.497:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.691719][ T30] audit: type=1326 audit(3506043927.497:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.719504][ T30] audit: type=1326 audit(3506043927.497:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 198.769354][ T30] audit: type=1326 audit(3506043927.497:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 199.374074][ T30] audit: type=1326 audit(3506043927.497:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 199.557716][ T30] audit: type=1326 audit(3506043927.507:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 199.593408][ T30] audit: type=1326 audit(3506043927.507:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6929 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 202.110888][ T5939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 202.410580][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 202.428191][ T5939] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 202.580585][ T6974] process 'syz.3.280' launched './file0' with NULL argv: empty string added [ 202.614284][ T6974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.650380][ T6974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.335253][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.441798][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 204.285690][ T5939] usb 1-1: Product: syz [ 204.290300][ T5939] usb 1-1: Manufacturer: syz [ 204.295062][ T5939] usb 1-1: SerialNumber: syz [ 204.331410][ T5939] usb 1-1: config 0 descriptor?? [ 204.337542][ T5939] usb 1-1: can't set config #0, error -71 [ 204.355404][ T5939] usb 1-1: USB disconnect, device number 6 [ 204.446918][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 204.446939][ T30] audit: type=1326 audit(3506043934.570:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 204.642925][ T30] audit: type=1326 audit(3506043934.630:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 204.665750][ T30] audit: type=1326 audit(3506043934.640:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 204.707514][ T30] audit: type=1326 audit(3506043934.640:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 204.715819][ T6988] FAULT_INJECTION: forcing a failure. [ 204.715819][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 204.749825][ T6988] CPU: 0 UID: 0 PID: 6988 Comm: syz.3.285 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 204.749853][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.749865][ T6988] Call Trace: [ 204.749873][ T6988] [ 204.749883][ T6988] dump_stack_lvl+0x189/0x250 [ 204.749912][ T6988] ? __pfx____ratelimit+0x10/0x10 [ 204.749935][ T6988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.749958][ T6988] ? __pfx__printk+0x10/0x10 [ 204.749987][ T6988] ? __pfx___might_resched+0x10/0x10 [ 204.750010][ T6988] ? fs_reclaim_acquire+0x7d/0x100 [ 204.750041][ T6988] should_fail_ex+0x414/0x560 [ 204.750069][ T6988] should_failslab+0xa8/0x100 [ 204.750093][ T6988] __kmalloc_noprof+0xcb/0x4f0 [ 204.750112][ T6988] ? tomoyo_encode+0x28b/0x550 [ 204.750144][ T6988] tomoyo_encode+0x28b/0x550 [ 204.750177][ T6988] tomoyo_realpath_from_path+0x58d/0x5d0 [ 204.750206][ T6988] ? tomoyo_domain+0xda/0x130 [ 204.750239][ T6988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 204.750260][ T6988] tomoyo_path_number_perm+0x1e8/0x5a0 [ 204.750286][ T6988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.750329][ T6988] ? __lock_acquire+0xab9/0xd20 [ 204.750373][ T6988] ? __fget_files+0x2a/0x420 [ 204.750400][ T6988] ? __fget_files+0x2a/0x420 [ 204.750420][ T6988] ? __fget_files+0x3a0/0x420 [ 204.750441][ T6988] ? __fget_files+0x2a/0x420 [ 204.750468][ T6988] security_file_ioctl+0xcb/0x2d0 [ 204.750495][ T6988] __se_sys_ioctl+0x47/0x170 [ 204.750527][ T6988] do_syscall_64+0xfa/0x3b0 [ 204.750547][ T6988] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.750569][ T6988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.750598][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 204.750624][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.750643][ T6988] RIP: 0033:0x7f0e3bf8e9a9 [ 204.750663][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.750679][ T6988] RSP: 002b:00007f0e3cedb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.750702][ T6988] RAX: ffffffffffffffda RBX: 00007f0e3c1b5fa0 RCX: 00007f0e3bf8e9a9 [ 204.750717][ T6988] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 204.750729][ T6988] RBP: 00007f0e3cedb090 R08: 0000000000000000 R09: 0000000000000000 [ 204.750742][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.750754][ T6988] R13: 0000000000000000 R14: 00007f0e3c1b5fa0 R15: 00007ffd112f1048 [ 204.750788][ T6988] [ 204.750931][ T6988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.064849][ T30] audit: type=1326 audit(3506043934.640:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 205.279091][ T30] audit: type=1326 audit(3506043934.640:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 205.380786][ T30] audit: type=1326 audit(3506043934.640:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 205.513338][ T30] audit: type=1326 audit(3506043934.640:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 206.520704][ T30] audit: type=1326 audit(3506043934.640:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 206.612131][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 206.624092][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 207.084487][ T30] audit: type=1326 audit(3506043934.640:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 207.232924][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 207.721333][ T7014] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 207.758050][ T7014] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.407053][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.539247][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 209.539267][ T30] audit: type=1326 audit(3506043939.673:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 209.628467][ T30] audit: type=1326 audit(3506043939.673:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 210.486826][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 210.500965][ T5924] usb 3-1: config 4 has an invalid interface number: 37 but max is 0 [ 210.511015][ T5924] usb 3-1: config 4 has no interface number 0 [ 210.536663][ T5924] usb 3-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 210.576433][ T5924] usb 3-1: config 4 interface 37 has no altsetting 0 [ 210.576627][ T30] audit: type=1326 audit(3506043939.713:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 210.606654][ T5924] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 210.621981][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.670939][ T30] audit: type=1326 audit(3506043939.713:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 210.699441][ T5924] usb 3-1: Product: syz [ 210.703679][ T5924] usb 3-1: Manufacturer: syz [ 210.749319][ T5924] usb 3-1: SerialNumber: syz [ 210.773215][ T7026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.831418][ T30] audit: type=1326 audit(3506043939.713:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 210.959789][ T30] audit: type=1326 audit(3506043939.713:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7029 comm="syz.0.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 211.078215][ T7051] x_tables: unsorted entry at hook 2 [ 211.138827][ T7051] netlink: 88 bytes leftover after parsing attributes in process `syz.3.307'. [ 211.181258][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 211.243578][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 211.641300][ T5939] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.650219][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.728685][ T7051] lo speed is unknown, defaulting to 1000 [ 212.755092][ T5939] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 212.850842][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.987512][ T5939] usb 2-1: config 0 descriptor?? [ 213.214480][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.238684][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 213.260921][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.305242][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 213.317386][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.331637][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.340952][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.380999][ T7067] hsr_slave_1 (unregistering): left promiscuous mode [ 213.563148][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.581815][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.593475][ T5924] usb 3-1: USB disconnect, device number 10 [ 213.599002][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.628267][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 213.650363][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 213.688614][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.716739][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.739014][ T9] usb 5-1: Product: syz [ 213.743252][ T9] usb 5-1: Manufacturer: syz [ 213.774143][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.797276][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 213.800523][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.802518][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 213.841993][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 213.853809][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 213.978726][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 213.980434][ T9] usb 5-1: USB disconnect, device number 7 [ 214.022278][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.276379][ T5939] usb 2-1: USB disconnect, device number 3 [ 214.997471][ T30] audit: type=1804 audit(3506043945.135:281): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.318" name="/newroot/62/file1" dev="fuse" ino=1 res=1 errno=0 [ 215.537232][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 215.546449][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 215.658979][ T30] audit: type=1800 audit(3506043945.596:282): pid=7090 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.318" name="/" dev="fuse" ino=1 res=0 errno=0 [ 217.258707][ T30] audit: type=1326 audit(3506043947.196:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 218.614373][ T30] audit: type=1326 audit(3506043947.206:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 218.636080][ T30] audit: type=1326 audit(3506043947.206:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 218.670167][ T30] audit: type=1326 audit(3506043947.206:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 219.108029][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.117823][ T30] audit: type=1326 audit(3506043947.206:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 219.139740][ T30] audit: type=1326 audit(3506043947.206:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 219.163008][ T30] audit: type=1326 audit(3506043947.206:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 219.199494][ T30] audit: type=1326 audit(3506043947.206:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7113 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 219.262056][ T5834] usb 2-1: device descriptor read/64, error -71 [ 219.380521][ T7128] [U] [ 219.383272][ T7128] [U] [ 219.385958][ T7128] [U] [ 219.388640][ T7128] [U] [ 219.396808][ T7128] [U] [ 219.399558][ T7128] [U] [ 219.402282][ T7128] [U] [ 219.405009][ T7128] [U] [ 219.415888][ T7128] [U] [ 219.418648][ T7128] [U] [ 219.421379][ T7128] [U] [ 219.424104][ T7128] [U] [ 219.478461][ T7128] [U] [ 219.481252][ T7128] [U] [ 219.483964][ T7128] [U] [ 219.486676][ T7128] [U] [ 219.543298][ T7128] [U] [ 219.546030][ T7128] [U] [ 219.548711][ T7128] [U] [ 219.551400][ T7128] [U] [ 219.572359][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 219.650074][ T7128] [U] [ 219.652859][ T7128] [U] [ 219.655576][ T7128] [U] [ 219.658264][ T7128] [U] [ 219.676499][ T7128] [U] [ 219.679237][ T7128] [U] [ 219.681935][ T7128] [U] [ 219.684617][ T7128] [U] [ 219.690735][ T7128] [U] [ 219.693456][ T7128] [U] [ 219.696141][ T7128] [U] [ 219.698823][ T7128] [U] [ 219.705181][ T7128] [U] [ 219.707907][ T7128] [U] [ 219.710589][ T7128] [U] [ 219.713275][ T7128] [U] [ 219.719545][ T7128] [U] [ 219.722262][ T7128] [U] [ 219.724980][ T7128] [U] [ 219.727751][ T7128] [U] [ 219.741820][ T5834] usb 2-1: device descriptor read/64, error -71 [ 219.749410][ T7128] [U] [ 219.752142][ T7128] [U] [ 219.754851][ T7128] [U] [ 219.757536][ T7128] [U] [ 219.763000][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.773249][ T7128] [U] [ 219.775996][ T7128] [U] [ 219.778702][ T7128] [U] [ 219.781396][ T7128] [U] [ 219.785083][ T7128] [U] [ 219.787788][ T7128] [U] [ 219.790483][ T7128] [U] [ 219.793188][ T7128] [U] [ 219.796884][ T7128] [U] [ 219.799598][ T7128] [U] [ 219.802315][ T7128] [U] [ 219.805036][ T7128] [U] [ 219.808707][ T7128] [U] [ 219.811438][ T7128] [U] [ 219.814129][ T7128] [U] [ 219.816816][ T7128] [U] [ 219.823175][ T7128] [U] [ 219.825892][ T7128] [U] [ 219.828668][ T7128] [U] [ 219.831355][ T7128] [U] [ 219.835110][ T7128] [U] [ 219.837823][ T7128] [U] [ 219.840531][ T7128] [U] [ 219.843242][ T7128] [U] [ 219.847683][ T7128] [U] [ 219.850418][ T7128] [U] [ 219.853127][ T7128] [U] [ 219.855843][ T7128] [U] [ 219.859262][ T5834] usb usb2-port1: attempt power cycle [ 219.866663][ T7128] [U] [ 219.869389][ T7128] [U] [ 219.872100][ T7128] [U] [ 219.874829][ T7128] [U] [ 219.878372][ T7128] [U] [ 219.881094][ T7128] [U] [ 219.883798][ T7128] [U] [ 219.886500][ T7128] [U] [ 219.890255][ T7128] [U] [ 219.893018][ T7128] [U] [ 219.895806][ T7128] [U] [ 219.898503][ T7128] [U] [ 219.901918][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.911768][ T7128] [U] [ 219.914473][ T7128] [U] [ 219.917179][ T7128] [U] [ 219.919865][ T7128] [U] [ 219.923798][ T7128] [U] [ 219.926499][ T7128] [U] [ 219.929190][ T7128] [U] [ 219.931880][ T7128] [U] [ 219.936937][ T5897] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.953524][ T5897] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.984723][ T7128] [U] [ 219.987493][ T7128] [U] [ 219.990223][ T7128] [U] [ 219.992940][ T7128] [U] [ 220.004903][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.050124][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.056032][ T7128] [U] [ 220.063053][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 220.063826][ T7128] [U] [ 220.071661][ T7128] [U] [ 220.074393][ T7128] [U] [ 220.079596][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 220.098666][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 220.100586][ T7128] [U] [ 220.110276][ T5897] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.112650][ T7128] [U] [ 220.112687][ T7128] [U] [ 220.112720][ T7128] [U] [ 220.128277][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.147206][ T5834] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 220.187816][ T7128] [U] [ 220.190481][ T5897] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.190574][ T7128] [U] [ 220.199698][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 220.202277][ T7128] [U] [ 220.202318][ T7128] [U] [ 220.216088][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 220.230353][ T5897] usb 5-1: Product: syz [ 220.235194][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.242248][ T5897] usb 5-1: Manufacturer: syz [ 220.242396][ T7128] [U] [ 220.246924][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 220.249575][ T7128] [U] [ 220.261320][ T7128] [U] [ 220.261330][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.264025][ T7128] [U] [ 220.293839][ T5897] cdc_wdm 5-1:1.0: skipping garbage [ 220.314547][ T5834] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.324356][ T5897] cdc_wdm 5-1:1.0: skipping garbage [ 220.354121][ T7128] [U] [ 220.356910][ T7128] [U] [ 220.359645][ T7128] [U] [ 220.362548][ T7128] [U] [ 220.369298][ T7128] [U] [ 220.370978][ T5897] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 220.378971][ T9] usb 1-1: config 0 descriptor?? [ 220.392216][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.403904][ T5897] cdc_wdm 5-1:1.0: Unknown control protocol [ 220.411517][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 220.478931][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 220.526826][ T5924] usb 5-1: USB disconnect, device number 8 [ 220.534668][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.549575][ T5834] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.601784][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.637502][ T5834] usb 2-1: config 0 descriptor?? [ 220.732292][ T7138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.747827][ T7138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.705033][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.118069][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.485597][ T7160] syz_tun: entered allmulticast mode [ 224.234538][ T7154] syz_tun: left allmulticast mode [ 224.473569][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 224.494213][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.568783][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 224.625808][ T5834] usb 2-1: USB disconnect, device number 7 [ 224.639507][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 224.666054][ T9] usb 1-1: USB disconnect, device number 7 [ 224.904168][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 224.904187][ T30] audit: type=1326 audit(3506043954.880:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.168114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.749468][ T30] audit: type=1326 audit(3506043954.880:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.773019][ T30] audit: type=1326 audit(3506043954.880:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.794452][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.801428][ T30] audit: type=1326 audit(3506043954.880:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.823711][ T30] audit: type=1326 audit(3506043954.880:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.845134][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.851875][ T30] audit: type=1326 audit(3506043954.880:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.875593][ T30] audit: type=1326 audit(3506043954.880:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 225.897028][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.946386][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 226.028366][ T30] audit: type=1326 audit(3506043954.880:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 226.364191][ T30] audit: type=1326 audit(3506043954.880:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 226.596531][ T30] audit: type=1326 audit(3506043954.880:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7162 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35f398e9a9 code=0x7ffc0000 [ 226.950972][ T7181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.962101][ T7181] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 228.777517][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.549615][ T5834] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.558512][ T5834] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.600519][ T5834] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.620349][ T5834] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.631924][ T5834] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.648873][ T5834] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.658372][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.666431][ T5834] usb 1-1: Product: syz [ 229.671446][ T5834] usb 1-1: Manufacturer: syz [ 229.683447][ T5834] cdc_wdm 1-1:1.0: skipping garbage [ 229.713908][ T5834] cdc_wdm 1-1:1.0: skipping garbage [ 229.761937][ T5834] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 229.794788][ T5834] cdc_wdm 1-1:1.0: Unknown control protocol [ 229.896589][ T5834] usb 1-1: USB disconnect, device number 8 [ 230.036720][ T5939] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.288439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.684059][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.711562][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.736043][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.755545][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.779771][ T5939] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.793718][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.823861][ T5939] usb 5-1: config 0 descriptor?? [ 232.767210][ T6618] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 232.967614][ T6618] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.000217][ T6618] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.050898][ T6618] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.085880][ T6618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.144996][ T7216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.388392][ T6618] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.085206][ T6618] usb 1-1: USB disconnect, device number 9 [ 234.105369][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 234.162624][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 234.212875][ T5939] usb 5-1: USB disconnect, device number 9 [ 235.144307][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 235.256894][ T7248] loop2: detected capacity change from 0 to 7 [ 235.295816][ T7248] loop2: [ 235.307162][ T7248] loop2: partition table partially beyond EOD, truncated [ 235.474381][ T6618] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 235.704193][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 235.794802][ T6618] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.007296][ T6618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.023201][ T5897] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.063331][ T5897] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.074598][ T6618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.120031][ T5897] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.130007][ T6618] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.163546][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 236.174849][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 236.179719][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.192609][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.205695][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.212722][ T6618] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.215670][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.237805][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.247014][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.297047][ T6618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.313060][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 236.342809][ T5897] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.419017][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.428142][ T6618] usb 5-1: config 0 descriptor?? [ 236.489216][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 236.518705][ T24] usbtmc 4-1:16.0: can't read capabilities [ 236.529150][ T5897] usb 2-1: Product: syz [ 236.533527][ T5897] usb 2-1: Manufacturer: syz [ 236.628010][ T5897] cdc_wdm 2-1:1.0: skipping garbage [ 236.639441][ T5897] cdc_wdm 2-1:1.0: skipping garbage [ 236.659859][ T5897] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 236.665887][ T5897] cdc_wdm 2-1:1.0: Unknown control protocol [ 236.777714][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.805136][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.814309][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.823443][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.854439][ T5897] usb 2-1: USB disconnect, device number 8 [ 236.861735][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.870899][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.880164][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.924754][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.933934][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.954432][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.955467][ T6618] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 236.963573][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.963626][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 236.996172][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.005328][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.014649][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.042109][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.181941][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 237.192642][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 237.297391][ T6618] usb 4-1: USB disconnect, device number 3 [ 239.861391][ T5834] usb 5-1: USB disconnect, device number 10 [ 239.953026][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.619035][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.835671][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.212384][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.282571][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.751716][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.775316][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.846446][ T43] usb 2-1: config 0 descriptor?? [ 242.148107][ T43] usb 2-1: can't set config #0, error -71 [ 242.189794][ T43] usb 2-1: USB disconnect, device number 9 [ 242.351645][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.382545][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.392432][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.402160][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.411212][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.420275][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.429237][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.438276][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.447352][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 242.456466][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 243.013189][ T7309] openvswitch: netlink: Missing valid actions attribute. [ 243.030286][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.743710][ T7296] lo speed is unknown, defaulting to 1000 [ 243.889396][ T5939] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.989602][ T5939] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.999820][ T5939] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.010489][ T5939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.020889][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 245.195648][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 245.210059][ T5939] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.227703][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.235755][ T5939] usb 4-1: Product: syz [ 245.240266][ T5939] usb 4-1: Manufacturer: syz [ 245.260411][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 245.265689][ T5939] cdc_wdm 4-1:1.0: skipping garbage [ 245.276121][ T5939] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 245.500668][ T5939] cdc_wdm 4-1:1.0: Unknown control protocol [ 245.556448][ T5939] usb 4-1: USB disconnect, device number 4 [ 246.830296][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.228957][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.390618][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.532323][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.636392][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.811416][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.972228][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.327937][ T5939] usb 3-1: config 0 descriptor?? [ 248.528199][ T3093] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 248.743409][ T7355] lo speed is unknown, defaulting to 1000 [ 248.749288][ T3093] usb 4-1: Using ep0 maxpacket: 32 [ 248.750223][ T3093] usb 4-1: too many configurations: 29, using maximum allowed: 8 [ 248.769653][ T7361] __nla_validate_parse: 44 callbacks suppressed [ 248.769673][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 248.794183][ T3093] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.809927][ T3093] usb 4-1: config 0 has no interfaces? [ 248.833165][ T3093] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.089820][ T3093] usb 4-1: config 0 has no interfaces? [ 249.858185][ T3093] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.450182][ T3093] usb 4-1: config 0 has no interfaces? [ 251.715636][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 251.725712][ T3093] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 251.736524][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 251.785447][ T3093] usb 4-1: can't read configurations, error -71 [ 251.837808][ T5939] usb 3-1: USB disconnect, device number 11 [ 252.380590][ T5939] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.563637][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.578291][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.871583][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 253.000081][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.085852][ T5939] usb 3-1: config 0 descriptor?? [ 254.004017][ T5939] lg-g15 0003:046D:C222.0007: unknown main item tag 0x0 [ 254.010752][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.045719][ T5939] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 254.112132][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.198830][ T7390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 254.249111][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 254.249168][ T30] audit: type=1326 audit(3506044497.274:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 254.290393][ T5939] usb 3-1: USB disconnect, device number 12 [ 254.485163][ T30] audit: type=1326 audit(3506044497.274:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 255.247966][ T30] audit: type=1326 audit(3506044497.274:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 255.273913][ T30] audit: type=1326 audit(3506044497.274:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 255.603868][ T30] audit: type=1326 audit(3506044497.274:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 255.873432][ T30] audit: type=1326 audit(3506044497.274:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 255.972702][ T30] audit: type=1326 audit(3506044497.274:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 256.002991][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.009293][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.166835][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 256.887974][ T30] audit: type=1326 audit(3506044497.284:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 257.025194][ T5939] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 257.035481][ T30] audit: type=1326 audit(3506044497.284:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 257.087443][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.110025][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 257.124694][ T30] audit: type=1326 audit(3506044497.284:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 257.146101][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.170576][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.188754][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.206112][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 257.233607][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.296508][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.306321][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.344044][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.403881][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.415121][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.454995][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.481614][ T5939] usb 3-1: config 0 descriptor?? [ 257.548211][ T5897] usb 5-1: config 0 descriptor?? [ 258.153283][ T5939] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 260.685738][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 261.067009][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 261.073090][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.133705][ T5897] usb 5-1: USB disconnect, device number 11 [ 262.456357][ T9] usb 3-1: USB disconnect, device number 13 [ 263.085160][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.209475][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 263.330483][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.367796][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.414095][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.443937][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.494954][ T5897] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.546069][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.631459][ T5897] usb 2-1: config 0 descriptor?? [ 264.115313][ T5897] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 266.349472][ T5834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.533490][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.557436][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.572380][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.584731][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.598433][ T5834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.608017][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.628050][ T5834] usb 3-1: config 0 descriptor?? [ 269.133526][ T9] usb 2-1: USB disconnect, device number 10 [ 269.220155][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 269.515172][ T7519] lo speed is unknown, defaulting to 1000 [ 269.629909][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.689215][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.714066][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.729559][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.737906][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.119014][ T7527] lo speed is unknown, defaulting to 1000 [ 271.834064][ T5853] Bluetooth: hci5: command tx timeout [ 271.842463][ T5834] usbhid 3-1:0.0: can't add hid device: -71 [ 271.848579][ T5834] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.961238][ T5834] usb 3-1: USB disconnect, device number 14 [ 272.153737][ T7540] syz_tun: entered allmulticast mode [ 272.265123][ T7531] syz_tun: left allmulticast mode [ 273.679805][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 273.860735][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 273.898058][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.930024][ T5853] Bluetooth: hci5: command tx timeout [ 273.943120][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.970970][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.981081][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 273.991921][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.007756][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.017425][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.026092][ T9] usb 2-1: Manufacturer: syz [ 274.027639][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 274.043333][ T9] usb 2-1: config 0 descriptor?? [ 274.483016][ T9] rc_core: IR keymap rc-hauppauge not found [ 274.645308][ T7564] netlink: 2980 bytes leftover after parsing attributes in process `syz.0.437'. [ 274.874383][ T9] Registered IR keymap rc-empty [ 275.024898][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.065102][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.108289][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.126419][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.133881][ T7527] bridge_slave_0: entered allmulticast mode [ 275.141166][ T7527] bridge_slave_0: entered promiscuous mode [ 275.149700][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.158244][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.165632][ T7527] bridge_slave_1: entered allmulticast mode [ 275.191682][ T7527] bridge_slave_1: entered promiscuous mode [ 275.209482][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 275.282061][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 275.346752][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.416734][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.444147][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.483555][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.599016][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.664937][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.801967][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 275.844148][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.948835][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 276.958242][ T5853] Bluetooth: hci5: command tx timeout [ 277.154375][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.653219][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.694724][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 277.727527][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 277.765225][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 277.865334][ T9] usb 2-1: USB disconnect, device number 11 [ 278.115042][ T7527] team0: Port device team_slave_0 added [ 278.140979][ T7590] netlink: 'syz.4.445': attribute type 27 has an invalid length. [ 278.149461][ T7591] vivid-000: ================= START STATUS ================= [ 278.161956][ T7591] vivid-000: Generate PTS: true [ 278.238123][ T7591] vivid-000: Generate SCR: true [ 278.910823][ T7527] team0: Port device team_slave_1 added [ 278.938180][ T7591] tpg source WxH: 320x240 (Y'CbCr) [ 278.944062][ T7591] tpg field: 1 [ 278.947837][ T7591] tpg crop: (0,0)/320x240 [ 278.952896][ T7591] tpg compose: (0,0)/320x240 [ 278.957535][ T7591] tpg colorspace: 8 [ 278.963164][ T7591] tpg transfer function: 0/0 [ 278.969115][ T7591] tpg Y'CbCr encoding: 0/0 [ 278.973592][ T7591] tpg quantization: 0/0 [ 278.979090][ T5853] Bluetooth: hci5: command tx timeout [ 279.050349][ T7591] tpg RGB range: 0/2 [ 279.054332][ T7591] vivid-000: ================== END STATUS ================== [ 279.106318][ T7597] dvmrp5: entered allmulticast mode [ 279.156994][ T7599] dvmrp5: left allmulticast mode [ 279.330559][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.337809][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.461244][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.481562][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.488643][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.533585][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 279.533609][ T30] audit: type=1326 audit(3506044522.434:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 279.571213][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.579051][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.669554][ T30] audit: type=1326 audit(3506044522.434:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 279.733328][ T30] audit: type=1326 audit(3506044522.484:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 279.777591][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 280.360946][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.029148][ T7617] netlink: 2980 bytes leftover after parsing attributes in process `syz.0.449'. [ 282.562034][ T30] audit: type=1326 audit(3506044522.484:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.613640][ T7527] hsr_slave_0: entered promiscuous mode [ 282.745551][ T30] audit: type=1326 audit(3506044522.484:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.768489][ T7527] hsr_slave_1: entered promiscuous mode [ 282.769306][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.775108][ T30] audit: type=1326 audit(3506044522.484:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.803953][ T30] audit: type=1326 audit(3506044522.484:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.826764][ T30] audit: type=1326 audit(3506044522.484:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.848746][ T30] audit: type=1326 audit(3506044522.484:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.877277][ T30] audit: type=1326 audit(3506044522.484:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7605 comm="syz.0.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 282.899633][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 282.915053][ T7527] Cannot create hsr debugfs directory [ 282.924241][ T9] usb 5-1: can't read configurations, error -71 [ 283.060063][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 286.032673][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 286.032693][ T30] audit: type=1804 audit(3506044528.922:400): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.454" name="/newroot/93/file1" dev="fuse" ino=1 res=1 errno=0 [ 286.167056][ T30] audit: type=1800 audit(3506044528.922:401): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 286.256896][ T30] audit: type=1800 audit(3506044528.952:402): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 286.438375][ T7635] lo speed is unknown, defaulting to 1000 [ 288.718699][ T7665] pim6reg1: entered promiscuous mode [ 288.751338][ T7665] pim6reg1: entered allmulticast mode [ 288.802296][ T7527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.154707][ T7527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.617075][ T7527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.663668][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 290.703153][ T7527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.929756][ T30] audit: type=1326 audit(3506044534.805:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 292.141141][ T30] audit: type=1326 audit(3506044534.835:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.204723][ T30] audit: type=1326 audit(3506044534.835:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.376175][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.433846][ T30] audit: type=1326 audit(3506044534.835:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.456001][ T30] audit: type=1326 audit(3506044534.835:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.608243][ T30] audit: type=1326 audit(3506044534.845:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.646530][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.874958][ T30] audit: type=1326 audit(3506044534.845:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 293.913469][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 294.200539][ T30] audit: type=1326 audit(3506044534.855:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 294.450324][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.457720][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.553305][ T30] audit: type=1326 audit(3506044534.855:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 294.590767][ T195] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.597961][ T195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.672491][ T30] audit: type=1326 audit(3506044534.855:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7695 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 294.694186][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 294.712527][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 294.747035][ T5897] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 294.801532][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.904782][ T5897] usb 3-1: config 0 descriptor?? [ 295.225556][ T5897] usb 3-1: string descriptor 0 read error: -22 [ 295.479204][ T5939] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.779276][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.828881][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.622669][ T5897] aquacomputer_d5next 0003:0C70:F014.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 296.656450][ T5939] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 296.742099][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.798344][ T5939] usb 2-1: config 0 descriptor?? [ 296.811154][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.970640][ T7737] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.477'. [ 297.661886][ T43] usb 3-1: USB disconnect, device number 15 [ 297.875802][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 298.932838][ T7757] netlink: 2980 bytes leftover after parsing attributes in process `syz.4.481'. [ 299.716321][ T5939] ath6kl: Failed to read usb control message: -110 [ 299.986431][ T5939] ath6kl: Unable to read the bmi data from the device: -110 [ 300.010414][ T5939] ath6kl: Unable to recv target info: -110 [ 300.216007][ T5939] ath6kl: Failed to init ath6kl core: -110 [ 300.931002][ T5939] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 300.951437][ T5939] usb 2-1: USB disconnect, device number 12 [ 302.175493][ T7527] veth0_vlan: entered promiscuous mode [ 302.212043][ T7825] Bluetooth: MGMT ver 1.23 [ 302.230285][ T7527] veth1_vlan: entered promiscuous mode [ 302.399697][ T7527] veth0_macvtap: entered promiscuous mode [ 302.432116][ T7527] veth1_macvtap: entered promiscuous mode [ 302.506010][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.596863][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.629442][ T7527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.701105][ T7527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.722493][ T7527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.748642][ T7527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.107311][ T7833] FAULT_INJECTION: forcing a failure. [ 303.107311][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.120821][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.1.489 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 303.120851][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.120863][ T7833] Call Trace: [ 303.120871][ T7833] [ 303.120881][ T7833] dump_stack_lvl+0x189/0x250 [ 303.120910][ T7833] ? __pfx____ratelimit+0x10/0x10 [ 303.120934][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.120958][ T7833] ? __pfx__printk+0x10/0x10 [ 303.120999][ T7833] should_fail_ex+0x414/0x560 [ 303.121028][ T7833] strncpy_from_user+0x36/0x290 [ 303.121065][ T7833] getname_flags+0xf3/0x540 [ 303.121096][ T7833] do_sys_openat2+0xbc/0x1c0 [ 303.121135][ T7833] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.121158][ T7833] ? irqentry_exit+0x74/0x90 [ 303.121196][ T7833] __x64_sys_openat+0x138/0x170 [ 303.121229][ T7833] do_syscall_64+0xfa/0x3b0 [ 303.121253][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.121271][ T7833] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 303.121291][ T7833] ? clear_bhb_loop+0x60/0xb0 [ 303.121316][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.121336][ T7833] RIP: 0033:0x7f35f398e9a9 [ 303.121355][ T7833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.121372][ T7833] RSP: 002b:00007f35f17b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.121394][ T7833] RAX: ffffffffffffffda RBX: 00007f35f3bb6160 RCX: 00007f35f398e9a9 [ 303.121409][ T7833] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 303.121423][ T7833] RBP: 00007f35f17b4090 R08: 0000000000000000 R09: 0000000000000000 [ 303.121435][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.121447][ T7833] R13: 0000000000000000 R14: 00007f35f3bb6160 R15: 00007ffe63efa628 [ 303.121481][ T7833] [ 303.645900][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 303.645916][ T30] audit: type=1326 audit(3506044546.486:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 303.918268][ T7794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.017221][ T30] audit: type=1326 audit(3506044546.586:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 304.039082][ T30] audit: type=1326 audit(3506044546.596:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 304.088181][ T30] audit: type=1326 audit(3506044546.596:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 304.111205][ T7794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.976781][ T30] audit: type=1326 audit(3506044546.596:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 305.222887][ T7848] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 305.337971][ T7845] binder: BINDER_SET_CONTEXT_MGR already set [ 305.348779][ T7845] binder: 7844:7845 ioctl 4018620d 200000000040 returned -16 [ 305.413916][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.448295][ T7848] bond0: (slave team0): Enslaving as an active interface with an up link [ 305.645335][ T30] audit: type=1326 audit(3506044546.646:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 305.692574][ T7794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.708873][ T7794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.783609][ T30] audit: type=1326 audit(3506044546.646:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 305.815326][ T30] audit: type=1326 audit(3506044546.646:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 305.933303][ T30] audit: type=1326 audit(3506044546.646:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 306.083976][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 306.119972][ T30] audit: type=1326 audit(3506044546.646:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7836 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec9f8e9a9 code=0x7ffc0000 [ 306.307309][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 306.314239][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 306.327391][ T9] usb 3-1: config 0 has too many interfaces: 108, using maximum allowed: 32 [ 306.344564][ T9] usb 3-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 306.355385][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 108 [ 306.367816][ T9] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 306.384292][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.392745][ T9] usb 3-1: Product: syz [ 306.398230][ T9] usb 3-1: Manufacturer: syz [ 306.403161][ T9] usb 3-1: SerialNumber: syz [ 306.413549][ T9] usb 3-1: config 0 descriptor?? [ 307.493337][ T5939] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 307.699046][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 307.724867][ T5939] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.742422][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.752331][ T5939] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 307.768759][ T7872] netlink: 'syz.0.496': attribute type 8 has an invalid length. [ 307.788957][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.801618][ T5939] usb 2-1: config 0 descriptor?? [ 307.820116][ T43] usb 3-1: USB disconnect, device number 16 [ 308.215987][ T5939] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.252761][ T5939] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.290984][ T5939] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.316521][ T5939] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.332614][ T5939] corsair-cpro 0003:1B1C:0C10.000B: unknown main item tag 0x0 [ 308.344519][ T7878] 9p filesystem being mounted at /101/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 308.367225][ T5939] corsair-cpro 0003:1B1C:0C10.000B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 308.496579][ T5939] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -38 [ 308.531164][ T5939] usb 2-1: USB disconnect, device number 13 [ 308.650765][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.829671][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 308.851787][ T43] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 308.870527][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.895686][ T43] usb 3-1: Product: syz [ 308.908910][ T43] usb 3-1: Manufacturer: syz [ 308.921438][ T43] usb 3-1: SerialNumber: syz [ 308.945636][ T43] usb 3-1: config 0 descriptor?? [ 308.987007][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 309.064633][ T43] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 309.111655][ T43] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 309.242224][ T43] usb 3-1: USB disconnect, device number 17 [ 309.535135][ T7892] FAULT_INJECTION: forcing a failure. [ 309.535135][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 309.641598][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: syz.2.505 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 309.641630][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.641642][ T7892] Call Trace: [ 309.641650][ T7892] [ 309.641659][ T7892] dump_stack_lvl+0x189/0x250 [ 309.641688][ T7892] ? __pfx____ratelimit+0x10/0x10 [ 309.641711][ T7892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.641735][ T7892] ? __pfx__printk+0x10/0x10 [ 309.641767][ T7892] ? __pfx___might_resched+0x10/0x10 [ 309.641789][ T7892] ? fs_reclaim_acquire+0x7d/0x100 [ 309.641819][ T7892] should_fail_ex+0x414/0x560 [ 309.641848][ T7892] should_failslab+0xa8/0x100 [ 309.641872][ T7892] __kmalloc_cache_noprof+0x70/0x3d0 [ 309.641892][ T7892] ? nfnetlink_rcv+0xeff/0x2520 [ 309.641921][ T7892] nfnetlink_rcv+0xeff/0x2520 [ 309.641980][ T7892] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 309.642023][ T7892] ? ref_tracker_free+0x63a/0x7d0 [ 309.642083][ T7892] ? __netlink_deliver_tap+0x807/0x850 [ 309.642123][ T7892] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.642148][ T7892] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.642183][ T7892] netlink_unicast+0x759/0x8e0 [ 309.642236][ T7892] netlink_sendmsg+0x805/0xb30 [ 309.642276][ T7892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.642314][ T7892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.642334][ T7892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.642371][ T7892] __sock_sendmsg+0x219/0x270 [ 309.642399][ T7892] ____sys_sendmsg+0x505/0x830 [ 309.642437][ T7892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.642479][ T7892] ? import_iovec+0x74/0xa0 [ 309.642510][ T7892] ___sys_sendmsg+0x21f/0x2a0 [ 309.642543][ T7892] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.642615][ T7892] ? __fget_files+0x2a/0x420 [ 309.642637][ T7892] ? __fget_files+0x3a0/0x420 [ 309.642672][ T7892] __x64_sys_sendmsg+0x19b/0x260 [ 309.642706][ T7892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.642748][ T7892] ? __pfx_ksys_write+0x10/0x10 [ 309.642765][ T7892] ? rcu_is_watching+0x15/0xb0 [ 309.642794][ T7892] ? do_syscall_64+0xbe/0x3b0 [ 309.642820][ T7892] do_syscall_64+0xfa/0x3b0 [ 309.642841][ T7892] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.642880][ T7892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.642902][ T7892] ? clear_bhb_loop+0x60/0xb0 [ 309.642926][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.642945][ T7892] RIP: 0033:0x7ff87c78e9a9 [ 309.642962][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.642980][ T7892] RSP: 002b:00007ff87a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.643003][ T7892] RAX: ffffffffffffffda RBX: 00007ff87c9b5fa0 RCX: 00007ff87c78e9a9 [ 309.643018][ T7892] RDX: 0000000000040000 RSI: 0000200000000280 RDI: 0000000000000003 [ 309.643031][ T7892] RBP: 00007ff87a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 309.643044][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.643056][ T7892] R13: 0000000000000000 R14: 00007ff87c9b5fa0 R15: 00007ffd86e63a28 [ 309.643089][ T7892] [ 310.951892][ T7895] !: renamed from dummy0 (while UP) [ 311.063286][ T7902] FAULT_INJECTION: forcing a failure. [ 311.063286][ T7902] name failslab, interval 1, probability 0, space 0, times 0 [ 311.125232][ T7906] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 311.128446][ T7902] CPU: 1 UID: 0 PID: 7902 Comm: syz.0.511 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 311.128475][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.128486][ T7902] Call Trace: [ 311.128494][ T7902] [ 311.128503][ T7902] dump_stack_lvl+0x189/0x250 [ 311.128530][ T7902] ? __pfx____ratelimit+0x10/0x10 [ 311.128551][ T7902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.128572][ T7902] ? __pfx__printk+0x10/0x10 [ 311.128597][ T7902] ? __pfx___might_resched+0x10/0x10 [ 311.128617][ T7902] ? fs_reclaim_acquire+0x7d/0x100 [ 311.128645][ T7902] should_fail_ex+0x414/0x560 [ 311.128670][ T7902] should_failslab+0xa8/0x100 [ 311.128692][ T7902] __kmalloc_noprof+0xcb/0x4f0 [ 311.128710][ T7902] ? tomoyo_encode+0x28b/0x550 [ 311.128738][ T7902] tomoyo_encode+0x28b/0x550 [ 311.128768][ T7902] tomoyo_realpath_from_path+0x58d/0x5d0 [ 311.128794][ T7902] ? tomoyo_domain+0xda/0x130 [ 311.128826][ T7902] tomoyo_path_perm+0x213/0x4b0 [ 311.128844][ T7902] ? arch_stack_walk+0xfc/0x150 [ 311.128864][ T7902] ? tomoyo_path_perm+0x1e3/0x4b0 [ 311.128882][ T7902] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 311.128939][ T7902] ? user_path_at+0x44/0x60 [ 311.128961][ T7902] ? __x64_sys_umount+0xee/0x160 [ 311.128976][ T7902] ? do_syscall_64+0xfa/0x3b0 [ 311.128994][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.129018][ T7902] ? hook_sb_umount+0x1da/0x370 [ 311.129046][ T7902] ? __pfx_hook_sb_umount+0x10/0x10 [ 311.129075][ T7902] tomoyo_sb_umount+0x9c/0xe0 [ 311.129100][ T7902] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 311.129130][ T7902] ? security_capable+0x7e/0x2e0 [ 311.129158][ T7902] security_sb_umount+0xbb/0x290 [ 311.129184][ T7902] path_umount+0x3e6/0xf70 [ 311.129216][ T7902] ? __pfx_path_umount+0x10/0x10 [ 311.129230][ T7902] ? user_path_at+0x44/0x60 [ 311.129251][ T7902] ? kmem_cache_free+0x18f/0x400 [ 311.129279][ T7902] __x64_sys_umount+0x122/0x160 [ 311.129297][ T7902] ? __pfx___x64_sys_umount+0x10/0x10 [ 311.129311][ T7902] ? rcu_is_watching+0x15/0xb0 [ 311.129337][ T7902] ? do_syscall_64+0xbe/0x3b0 [ 311.129361][ T7902] do_syscall_64+0xfa/0x3b0 [ 311.129378][ T7902] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.129397][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.129415][ T7902] ? clear_bhb_loop+0x60/0xb0 [ 311.129438][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.129455][ T7902] RIP: 0033:0x7f4ec9f8e9a9 [ 311.129472][ T7902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.129488][ T7902] RSP: 002b:00007f4ecadb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 311.129509][ T7902] RAX: ffffffffffffffda RBX: 00007f4eca1b5fa0 RCX: 00007f4ec9f8e9a9 [ 311.129522][ T7902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 311.129533][ T7902] RBP: 00007f4ecadb5090 R08: 0000000000000000 R09: 0000000000000000 [ 311.129544][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.129555][ T7902] R13: 0000000000000000 R14: 00007f4eca1b5fa0 R15: 00007fff15ce8618 [ 311.129586][ T7902] [ 311.129610][ T7902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.343313][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.514'. [ 315.123656][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 315.123675][ T30] audit: type=1326 audit(3506044557.953:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 315.420989][ T30] audit: type=1326 audit(3506044557.983:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 317.746775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.753205][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.760480][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 317.789254][ T30] audit: type=1326 audit(3506044557.983:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 317.836578][ T30] audit: type=1326 audit(3506044557.983:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 318.055213][ T30] audit: type=1326 audit(3506044557.993:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 318.099833][ T30] audit: type=1326 audit(3506044557.993:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 318.962768][ T30] audit: type=1326 audit(3506044557.993:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 318.996777][ T30] audit: type=1326 audit(3506044558.003:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 319.106843][ T30] audit: type=1326 audit(3506044558.003:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 319.128587][ T30] audit: type=1326 audit(3506044558.003:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7940 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d9378e9a9 code=0x7ffc0000 [ 319.875378][ T5897] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 320.227576][ T5897] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 320.268866][ T5897] usb 3-1: config 7 has no interface number 0 [ 320.313778][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 320.325474][ T5897] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 320.350315][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.104073][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 321.107556][ T5897] usb 3-1: Product: syz [ 322.363497][ T5897] usb 3-1: Manufacturer: syz [ 322.368162][ T5897] usb 3-1: SerialNumber: syz [ 322.569898][ T5897] usb 3-1: can't set config #7, error -71 [ 322.652662][ T5897] usb 3-1: USB disconnect, device number 18 [ 322.991042][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 323.061125][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 323.243269][ T7995] lo speed is unknown, defaulting to 1000 [ 323.363596][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 324.200345][ T8006] loop2: detected capacity change from 0 to 7 [ 324.253421][ T5205] loop2: [ 324.266302][ T5205] loop2: partition table partially beyond EOD, truncated [ 324.333977][ T8006] loop2: [ 324.357854][ T7999] netlink: 288 bytes leftover after parsing attributes in process `syz.0.533'. [ 324.367509][ T8006] loop2: partition table partially beyond EOD, truncated [ 324.413230][ T5205] loop2: [ 324.416266][ T5205] loop2: partition table partially beyond EOD, truncated [ 324.419846][ T7999] syz.0.533 uses obsolete (PF_INET,SOCK_PACKET) [ 324.607174][ T5834] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 324.803652][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.857231][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.118855][ T8022] ceph: No mds server is up or the cluster is laggy [ 325.890581][ T43] libceph: connect (1)[c::]:6789 error -101 [ 326.104290][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 327.176282][ T5834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.185846][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.265040][ T5834] usb 3-1: config 0 descriptor?? [ 327.275441][ T5834] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 327.280595][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 327.350183][ T5834] usb 3-1: USB disconnect, device number 19 [ 327.684563][ T43] usb 2-1: device descriptor read/all, error -71 [ 327.895853][ T5834] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 328.959360][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.070809][ T5834] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 329.208572][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 329.229871][ T5834] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 329.242122][ T5834] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a5.95 [ 329.253761][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.261806][ T5834] usb 3-1: Product: syz [ 329.271059][ T5834] usb 3-1: Manufacturer: ъ [ 329.276334][ T5834] usb 3-1: SerialNumber: syz [ 329.295395][ T8042] netlink: 'syz.0.544': attribute type 3 has an invalid length. [ 329.312751][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 329.321807][ T8041] netlink: 44 bytes leftover after parsing attributes in process `syz.5.542'. [ 329.404005][ T8042] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.544'. [ 329.520295][ T5834] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 329.578250][ T5834] usb 3-1: USB disconnect, device number 20 [ 330.953238][ T8059] loop2: detected capacity change from 0 to 7 [ 331.034579][ T5833] loop2: [ 331.039774][ T5833] loop2: partition table partially beyond EOD, truncated [ 331.047113][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 331.047149][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 331.090730][ T8059] loop2: [ 331.094026][ T8059] loop2: partition table partially beyond EOD, truncated [ 331.234232][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 331.248686][ T5939] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 331.569507][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.682519][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.730474][ T8067] sp0: Synchronizing with TNC [ 331.783134][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.888062][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.967304][ T5939] usb 3-1: config 0 descriptor?? [ 332.050333][ T5939] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 332.217877][ T8063] [U] [ 334.632287][ T8091] netlink: 'syz.1.556': attribute type 8 has an invalid length. [ 338.094667][ T8103] netlink: 'syz.1.559': attribute type 8 has an invalid length. [ 339.262031][ T5939] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 339.553670][ T5939] usb 1-1: device descriptor read/64, error -71 [ 340.496437][ T5939] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 340.603188][ T5924] usb 3-1: USB disconnect, device number 21 [ 340.670255][ T5939] usb 1-1: device descriptor read/64, error -71 [ 340.947335][ T5939] usb usb1-port1: attempt power cycle [ 341.536182][ T8124] 9pnet_fd: Insufficient options for proto=fd [ 341.648464][ T5939] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 341.692081][ T5939] usb 1-1: device descriptor read/8, error -71 [ 341.978960][ T5939] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 342.878777][ T5939] usb 1-1: device descriptor read/8, error -71 [ 343.009016][ T5939] usb usb1-port1: unable to enumerate USB device [ 343.171763][ T8133] comedi comedi4: bad chanlist[0]=0x00000040 chan=64 range length=2 [ 343.271672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.412407][ T5853] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 347.070042][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 347.644956][ T8152] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 348.035407][ T5834] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 348.776641][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.366979][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.469951][ T5834] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.730879][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.763954][ T5834] usb 3-1: config 0 descriptor?? [ 350.654659][ T5834] usb 3-1: can't set config #0, error -71 [ 350.724430][ T5834] usb 3-1: USB disconnect, device number 22 [ 352.290098][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 352.290118][ T30] audit: type=1326 audit(3506044595.048:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8181 comm="syz.5.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f701478e9a9 code=0x0 [ 352.322096][ T8191] loop2: detected capacity change from 0 to 7 [ 352.338382][ T8191] loop2: [ 352.370614][ T8191] loop2: partition table partially beyond EOD, truncated [ 352.667259][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 352.915677][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 352.960553][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.046585][ T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 353.091678][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.141201][ T24] usb 3-1: Product: syz [ 353.377852][ T24] usb 3-1: Manufacturer: syz [ 353.382542][ T24] usb 3-1: SerialNumber: syz [ 353.790877][ T24] usb 3-1: config 0 descriptor?? [ 353.812896][ T24] usb 3-1: bad CDC descriptors [ 353.818704][ T24] usb 3-1: unsupported MDLM descriptors [ 354.366835][ T8212] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.590'. [ 354.844848][ T5897] usb 3-1: USB disconnect, device number 23 [ 356.567609][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 356.760089][ T43] usb 1-1: device descriptor read/64, error -71 [ 357.050464][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 357.308713][ T43] usb 1-1: device descriptor read/64, error -71 [ 357.431094][ T43] usb usb1-port1: attempt power cycle [ 357.780861][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 357.790313][ T8227] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 357.796897][ T5939] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 357.855837][ T43] usb 1-1: device descriptor read/8, error -71 [ 358.074998][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.107982][ T5939] usb 5-1: config 0 has no interfaces? [ 358.131001][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 358.139923][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 358.172277][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.186921][ T43] usb 1-1: device descriptor read/8, error -71 [ 358.199487][ T5939] usb 5-1: config 0 descriptor?? [ 358.272255][ T8241] lo speed is unknown, defaulting to 1000 [ 358.339479][ T43] usb usb1-port1: unable to enumerate USB device [ 358.643167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.655559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.121676][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.460260][ T8263] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.602'. [ 361.962867][ T5924] usb 5-1: USB disconnect, device number 14 [ 362.279983][ T8267] netlink: 'syz.1.603': attribute type 39 has an invalid length. [ 364.420982][ T8285] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 364.527985][ T8282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.107977][ T8283] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 365.335321][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 365.528887][ T24] usb 5-1: device descriptor read/64, error -71 [ 366.056060][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 366.327057][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.516034][ T24] usb 5-1: device descriptor read/64, error -71 [ 366.761435][ T24] usb usb5-port1: attempt power cycle [ 367.393453][ T8308] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.615'. [ 367.403006][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 367.480033][ T24] usb 5-1: device descriptor read/8, error -71 [ 367.796583][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 367.865911][ T24] usb 5-1: device descriptor read/8, error -71 [ 368.008357][ T24] usb usb5-port1: unable to enumerate USB device [ 368.024155][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 368.033558][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.616'. [ 368.661297][ T8313] FAULT_INJECTION: forcing a failure. [ 368.661297][ T8313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.785619][ T8313] CPU: 0 UID: 0 PID: 8313 Comm: syz.0.617 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 368.785653][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.785665][ T8313] Call Trace: [ 368.785674][ T8313] [ 368.785684][ T8313] dump_stack_lvl+0x189/0x250 [ 368.785714][ T8313] ? __pfx____ratelimit+0x10/0x10 [ 368.785736][ T8313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.785760][ T8313] ? __pfx__printk+0x10/0x10 [ 368.785787][ T8313] ? __might_fault+0xb0/0x130 [ 368.785821][ T8313] should_fail_ex+0x414/0x560 [ 368.785850][ T8313] _copy_from_iter+0x1db/0x16f0 [ 368.785891][ T8313] ? __pfx__copy_from_iter+0x10/0x10 [ 368.785914][ T8313] ? sock_alloc_send_pskb+0x875/0x990 [ 368.785944][ T8313] ? __pfx__copy_from_iter+0x10/0x10 [ 368.785972][ T8313] ? page_copy_sane+0x16a/0x280 [ 368.786001][ T8313] copy_page_from_iter+0xdd/0x170 [ 368.786033][ T8313] skb_copy_datagram_from_iter+0x306/0x720 [ 368.786077][ T8313] tun_get_user+0x15c3/0x3ce0 [ 368.786125][ T8313] ? __might_fault+0xb0/0x130 [ 368.786149][ T8313] ? __pfx_tun_get_user+0x10/0x10 [ 368.786184][ T8313] ? __lock_acquire+0xab9/0xd20 [ 368.786211][ T8313] ? ref_tracker_alloc+0x318/0x460 [ 368.786231][ T8313] ? __lock_acquire+0xab9/0xd20 [ 368.786250][ T8313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 368.786278][ T8313] ? tun_get+0x1c/0x2f0 [ 368.786307][ T8313] ? tun_get+0x1c/0x2f0 [ 368.786329][ T8313] ? tun_get+0x1c/0x2f0 [ 368.786360][ T8313] tun_chr_write_iter+0x113/0x200 [ 368.786389][ T8313] vfs_write+0x548/0xa90 [ 368.786415][ T8313] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 368.786442][ T8313] ? __pfx_vfs_write+0x10/0x10 [ 368.786474][ T8313] ? __fget_files+0x2a/0x420 [ 368.786509][ T8313] ksys_write+0x145/0x250 [ 368.786531][ T8313] ? __pfx_ksys_write+0x10/0x10 [ 368.786548][ T8313] ? rcu_is_watching+0x15/0xb0 [ 368.786577][ T8313] ? do_syscall_64+0xbe/0x3b0 [ 368.786605][ T8313] do_syscall_64+0xfa/0x3b0 [ 368.786625][ T8313] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.786653][ T8313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.786674][ T8313] ? clear_bhb_loop+0x60/0xb0 [ 368.786699][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.786719][ T8313] RIP: 0033:0x7f4ec9f8e9a9 [ 368.786737][ T8313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.786756][ T8313] RSP: 002b:00007f4ecadb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.786780][ T8313] RAX: ffffffffffffffda RBX: 00007f4eca1b5fa0 RCX: 00007f4ec9f8e9a9 [ 368.786795][ T8313] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 0000000000000003 [ 368.786809][ T8313] RBP: 00007f4ecadb5090 R08: 0000000000000000 R09: 0000000000000000 [ 368.786821][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.786834][ T8313] R13: 0000000000000000 R14: 00007f4eca1b5fa0 R15: 00007fff15ce8618 [ 368.786867][ T8313] [ 369.785438][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 370.138306][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.341488][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.352753][ T5939] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 370.367729][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.379443][ T5939] usb 6-1: config 0 descriptor?? [ 371.192817][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 371.370268][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.394196][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 371.458836][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.949287][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 372.991098][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 373.029570][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 373.065783][ T5939] usb 6-1: USB disconnect, device number 2 [ 373.348989][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 373.378556][ T43] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 374.146693][ T43] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.163100][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 374.174246][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.229003][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.319407][ T43] usb 1-1: Product: 棈딖礋徻晠杯碝磉ꑔ蝿誫㋹毆䥢돰鼅섾풗纭忺뚳月놜წ눰ே斮ￕ悝姫走쐰ꣅ魿㻥蛊ꭸᲃ䘑ꦜ㰸ᐡ㨁峥圢쬄谫䥖卺༵祵ଢᮺ㮋冭ŷ钝 [ 374.418019][ T43] usb 1-1: Manufacturer: 磷꫇䰑梨ᔦጚ潪單쯛姈㥲윕পꗡ蔠틄谭᳥厀⅑⧘鰆ൾ켜ମ◱⛁ŭ㏇襭䆉뉋몫룶뚕纪㛾ॆမ该璬櫖倦ℋ㞿붞䃘掃⾸ﻮ専鮱擑弾ᖿ጑顦靚ॗ놯厷齿㙊诬墺辧幨玬᝷供ᇧ願瘘늸퀍ᭆ쇉䦑䚯㞋광ᩫ켖ʞ [ 374.527767][ T43] usb 1-1: SerialNumber: ▘駎쇔⛀噫ꏭ嫒฼㵙ٷ鸜莊橯৤᳗▍ㅾꛑట쇡䧈嗤殒ᝪ嚳ȥ蜪穜짧냱⍩΄燐욛ᑉ [ 374.609539][ T5834] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 374.643535][ T43] usb 1-1: can't set config #1, error -71 [ 374.719340][ T43] usb 1-1: USB disconnect, device number 19 [ 374.798248][ T5834] usb 3-1: device descriptor read/64, error -71 [ 375.830048][ T5834] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 376.000447][ T5834] usb 3-1: device descriptor read/64, error -71 [ 376.128369][ T5834] usb usb3-port1: attempt power cycle [ 376.520340][ T5834] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 376.541593][ T5834] usb 3-1: device descriptor read/8, error -71 [ 376.780419][ T5834] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 376.840925][ T5834] usb 3-1: device descriptor read/8, error -71 [ 376.960597][ T5834] usb usb3-port1: unable to enumerate USB device [ 377.487876][ T8396] netlink: 'syz.1.638': attribute type 8 has an invalid length. [ 379.412642][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.418973][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.748036][ T8410] netlink: 'syz.1.640': attribute type 8 has an invalid length. [ 380.129056][ T8397] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 380.254872][ T8391] bridge1: entered promiscuous mode [ 381.061779][ T5939] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 382.254647][ T5939] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.311648][ T5939] usb 1-1: config 0 has no interface number 0 [ 382.390573][ T5939] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 382.444195][ T5939] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 382.569133][ T5939] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.751224][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.545755][ T5939] usb 1-1: config 0 descriptor?? [ 383.551727][ T8416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 383.612186][ T5939] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 383.925392][ T5939] usb 1-1: USB disconnect, device number 20 [ 384.490778][ T8441] netlink: 'syz.0.651': attribute type 8 has an invalid length. [ 385.307156][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 385.316330][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.650'. [ 385.894190][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 386.190894][ T8449] fuse: Bad value for 'rootmode' [ 386.870932][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 386.973496][ T30] audit: type=1326 audit(3506044628.972:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8442 comm="syz.1.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35f398e9a9 code=0x0 [ 387.133573][ T9] usb 3-1: device descriptor read/64, error -71 [ 387.261110][ T43] usb 5-1: device descriptor read/64, error -71 [ 388.179674][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 388.198830][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 388.501003][ T9] usb 3-1: device descriptor read/64, error -71 [ 389.401102][ T9] usb usb3-port1: attempt power cycle [ 389.507368][ T8459] fuse: Bad value for 'fd' [ 389.564984][ T30] audit: type=1800 audit(3506044632.321:514): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.657" name="file1" dev="tmpfs" ino=857 res=0 errno=0 [ 391.643132][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 391.877605][ T8486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.898198][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 393.109633][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 393.138433][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 393.324747][ T9] usb 1-1: device descriptor read/64, error -71 [ 393.581705][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 393.634789][ T5939] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 393.701165][ T8512] fuse: Bad value for 'fd' [ 393.731506][ T30] audit: type=1800 audit(3506044636.490:515): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.671" name="file1" dev="tmpfs" ino=190 res=0 errno=0 [ 393.769159][ T9] usb 1-1: device descriptor read/64, error -71 [ 393.831833][ T8513] netlink: 'syz.1.664': attribute type 8 has an invalid length. [ 393.842859][ T5939] usb 3-1: device descriptor read/64, error -71 [ 393.904910][ T9] usb usb1-port1: attempt power cycle [ 394.134740][ T5939] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 394.274803][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 394.324862][ T5939] usb 3-1: device descriptor read/64, error -71 [ 394.335688][ T9] usb 1-1: device descriptor read/8, error -71 [ 394.467914][ T5939] usb usb3-port1: attempt power cycle [ 394.635092][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 394.778804][ T9] usb 1-1: device descriptor read/8, error -71 [ 394.894039][ T8521] netlink: 'syz.5.674': attribute type 8 has an invalid length. [ 395.093812][ T5939] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 395.671870][ T9] usb usb1-port1: unable to enumerate USB device [ 395.695680][ T5939] usb 3-1: device descriptor read/8, error -71 [ 395.971379][ T5939] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 396.579052][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 396.734440][ T5939] usb 3-1: device descriptor read/8, error -71 [ 396.880950][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 396.896413][ T5939] usb usb3-port1: unable to enumerate USB device [ 398.961896][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 399.089088][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 399.211720][ T8552] 9p filesystem being mounted at /file0 supports timestamps until 2106-02-07 (0xffffffff) [ 400.586907][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 400.921970][ T5923] usb 3-1: device descriptor read/64, error -71 [ 401.206063][ T5923] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 401.967481][ T5923] usb 3-1: device descriptor read/64, error -71 [ 402.235505][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 402.693689][ T5923] usb usb3-port1: attempt power cycle [ 403.425884][ T5923] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 403.656657][ T5923] usb 3-1: device not accepting address 37, error -71 [ 406.469314][ T8618] lo speed is unknown, defaulting to 1000 [ 406.654110][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 406.732327][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 407.196187][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 407.689779][ T8640] netlink: 'syz.2.705': attribute type 12 has an invalid length. [ 407.707948][ T5853] Bluetooth: hci1: connection err: -111 [ 407.763523][ T8640] netlink: 'syz.2.705': attribute type 29 has an invalid length. [ 407.791153][ T8640] netlink: 148 bytes leftover after parsing attributes in process `syz.2.705'. [ 407.899812][ T8640] netlink: 59 bytes leftover after parsing attributes in process `syz.2.705'. [ 409.176019][ T5897] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 409.265078][ T8656] netlink: 'syz.5.708': attribute type 8 has an invalid length. [ 410.066006][ T5897] usb 5-1: device descriptor read/64, error -71 [ 410.336057][ T5897] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 411.735472][ T5897] usb 5-1: device descriptor read/64, error -71 [ 411.876730][ T5897] usb usb5-port1: attempt power cycle [ 413.490308][ T8688] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 413.852123][ T8695] netlink: 'syz.0.719': attribute type 8 has an invalid length. [ 415.100754][ T8704] loop2: detected capacity change from 0 to 7 [ 415.129207][ T5833] loop2: [ 415.138777][ T8703] fuse: Unknown parameter 'f' [ 415.143821][ T5833] loop2: partition table partially beyond EOD, truncated [ 415.200434][ T3093] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 416.164750][ T8704] loop2: [ 416.212456][ T8704] loop2: partition table partially beyond EOD, truncated [ 416.235879][ T3093] usb 3-1: Using ep0 maxpacket: 16 [ 416.256129][ T31] INFO: task syz.3.394:7382 blocked for more than 143 seconds. [ 416.279053][ T3093] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 416.293953][ T31] Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 [ 416.313473][ T3093] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.334292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.373235][ T3093] usb 3-1: config 0 has no interface number 0 [ 416.386459][ T31] task:syz.3.394 state:D stack:28296 pid:7382 tgid:7376 ppid:5841 task_flags:0x400040 flags:0x00004004 [ 416.407290][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 416.442085][ T3093] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 416.464301][ T31] Call Trace: [ 416.477495][ T3093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.489638][ T31] [ 416.501189][ T31] __schedule+0x16a2/0x4cb0 [ 416.521748][ T3093] usb 3-1: Product: syz [ 416.537589][ T31] ? schedule+0x165/0x360 [ 416.550970][ T31] ? __pfx___schedule+0x10/0x10 [ 416.558546][ T3093] usb 3-1: Manufacturer: syz [ 416.572955][ T3093] usb 3-1: SerialNumber: syz [ 416.585941][ T31] ? schedule+0x91/0x360 [ 416.603836][ T31] schedule+0x165/0x360 [ 416.633907][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.644187][ T3093] usb 3-1: config 0 descriptor?? [ 416.675127][ T31] __mutex_lock+0x724/0xe80 [ 416.701604][ T31] ? __mutex_lock+0x51b/0xe80 [ 416.722820][ T31] ? blk_trace_ioctl+0x1b9/0x430 [ 416.741959][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.766091][ T31] ? kasan_save_track+0x4f/0x80 [ 416.809933][ T31] ? kasan_save_track+0x3e/0x80 [ 416.842947][ T31] ? kasan_save_free_info+0x46/0x50 [ 416.875079][ T31] ? __kasan_slab_free+0x62/0x70 [ 416.897619][ T31] ? kfree+0x18e/0x440 [ 416.919026][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 416.943733][ T31] ? security_file_ioctl+0xcb/0x2d0 [ 416.968252][ T31] blk_trace_ioctl+0x1b9/0x430 [ 416.992102][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 417.021416][ T31] ? do_vfs_ioctl+0xf37/0x1990 [ 417.043520][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 417.071160][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 417.090217][ T31] blkdev_common_ioctl+0xdce/0x2450 [ 417.110376][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 417.125458][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 417.178650][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 417.208723][ T31] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 417.228158][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 417.243842][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 417.259747][ T31] ? __lock_acquire+0xab9/0xd20 [ 417.274888][ T31] ? __asan_memset+0x22/0x50 [ 417.287101][ T31] ? smack_file_ioctl+0x24a/0x340 [ 417.297651][ T31] ? __pfx_smack_file_ioctl+0x10/0x10 [ 417.312146][ T31] blkdev_ioctl+0x4ef/0x6d0 [ 417.324446][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 417.342212][ T31] ? __fget_files+0x2a/0x420 [ 417.367249][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 417.395832][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 417.423129][ T31] __se_sys_ioctl+0xf9/0x170 [ 417.433643][ T31] do_syscall_64+0xfa/0x3b0 [ 417.446088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.460121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.476444][ T31] ? clear_bhb_loop+0x60/0xb0 [ 417.488173][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.514856][ T31] RIP: 0033:0x7f0e3bf8e9a9 [ 417.545923][ T31] RSP: 002b:00007f0e3ce99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.583037][ T31] RAX: ffffffffffffffda RBX: 00007f0e3c1b6160 RCX: 00007f0e3bf8e9a9 [ 417.617871][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 [ 417.638324][ T31] RBP: 00007f0e3c010d69 R08: 0000000000000000 R09: 0000000000000000 [ 417.656377][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.675763][ T31] R13: 0000000000000000 R14: 00007f0e3c1b6160 R15: 00007ffd112f1048 [ 417.695315][ T31] [ 417.714088][ T8711] uprobe: syz.5.724:8711 failed to unregister, leaking uprobe [ 417.724197][ T31] [ 417.724197][ T31] Showing all locks held in the system: [ 417.754766][ T5939] IPVS: starting estimator thread 0... [ 417.799614][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.811779][ T31] 5 locks held by kworker/1:0/24: [ 417.834529][ T31] #0: ffff888143aded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 417.874419][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 417.896226][ T8713] IPVS: using max 25 ests per chain, 60000 per kthread [ 417.908785][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.933294][ T31] #2: ffff888028157198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 417.999480][ T31] #3: ffff8881447aa510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 418.010041][ T3093] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 418.045131][ T31] #4: ffff888028045668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 418.055853][ T3093] usb 3-1: No valid video chain found. [ 418.085424][ T3093] usb 3-1: USB disconnect, device number 39 [ 418.230688][ T31] 1 lock held by khungtaskd/31: [ 418.240284][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 418.252103][ T31] 3 locks held by kworker/1:2/3093: [ 418.258639][ T31] #0: ffff888143aded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 418.273753][ T31] #1: ffffc9000b217bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 418.292659][ T31] #2: ffff8881447af198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 418.303768][ T31] 2 locks held by getty/5592: [ 418.315481][ T31] #0: ffff88803545a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 418.334748][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 418.369137][ T31] 1 lock held by udevd/5833: [ 418.392872][ T31] 3 locks held by syz.3.394/7377: [ 418.425817][ T31] 1 lock held by syz.3.394/7382: [ 418.448728][ T31] #0: ffff888024e4e128 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430 [ 418.525807][ T31] 2 locks held by syz.1.722/8709: [ 418.539915][ T31] #0: ffff888148c58808 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 418.565848][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 418.592185][ T31] [ 418.716709][ T31] ============================================= [ 418.716709][ T31] [ 418.755513][ T31] NMI backtrace for cpu 0 [ 418.755534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 418.755560][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.755571][ T31] Call Trace: [ 418.755579][ T31] [ 418.755588][ T31] dump_stack_lvl+0x189/0x250 [ 418.755615][ T31] ? __wake_up_klogd+0xd9/0x110 [ 418.755648][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.755670][ T31] ? __pfx__printk+0x10/0x10 [ 418.755707][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 418.755740][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 418.755765][ T31] ? _printk+0xcf/0x120 [ 418.755794][ T31] ? __pfx__printk+0x10/0x10 [ 418.755821][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 418.755854][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 418.755882][ T31] watchdog+0xfee/0x1030 [ 418.755913][ T31] ? watchdog+0x1de/0x1030 [ 418.755947][ T31] kthread+0x711/0x8a0 [ 418.755976][ T31] ? __pfx_watchdog+0x10/0x10 [ 418.756003][ T31] ? __pfx_kthread+0x10/0x10 [ 418.756030][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.756059][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.756078][ T31] ? __pfx_kthread+0x10/0x10 [ 418.756104][ T31] ret_from_fork+0x3fc/0x770 [ 418.756127][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.756152][ T31] ? __switch_to_asm+0x39/0x70 [ 418.756173][ T31] ? __switch_to_asm+0x33/0x70 [ 418.756195][ T31] ? __pfx_kthread+0x10/0x10 [ 418.756222][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.756259][ T31] [ 418.909329][ T31] Sending NMI from CPU 0 to CPUs 1: [ 418.914677][ C1] NMI backtrace for cpu 1 [ 418.914695][ C1] CPU: 1 UID: 0 PID: 7799 Comm: kworker/u8:21 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 418.914715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.914726][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 418.914747][ C1] RIP: 0010:rcu_is_watching+0x6f/0xb0 [ 418.914768][ C1] Code: c7 c3 58 bf 9d 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 79 64 f5 10 74 11 83 e0 04 c1 e8 02 <5b> 41 5e 41 5f e9 97 27 c2 09 cc e8 e1 7a 8c ff eb e8 48 c7 c7 40 [ 418.914782][ C1] RSP: 0018:ffffc90002eb7308 EFLAGS: 00000202 [ 418.914795][ C1] RAX: 0000000000000001 RBX: ffff8880b8732f58 RCX: 1f4c195887cc7900 [ 418.914807][ C1] RDX: 0000000000000001 RSI: ffffffff8be1b9e0 RDI: ffffffff8be1b9a0 [ 418.914819][ C1] RBP: ffffffff8212fffb R08: 0000000000000001 R09: 0000000000000000 [ 418.914831][ C1] R10: dffffc0000000000 R11: fffff520005d6e68 R12: 0000000000000000 [ 418.914842][ C1] R13: ffff8880b873fe98 R14: ffffffff8dba7c78 R15: dffffc0000000000 [ 418.914854][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 418.914867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.914878][ C1] CR2: 00007f35f3b802d8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 418.914894][ C1] Call Trace: [ 418.914901][ C1] [ 418.914910][ C1] lock_acquire+0x5f/0x360 [ 418.914925][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 418.914945][ C1] ? __zone_watermark_ok+0x8b/0x400 [ 418.914968][ C1] _raw_spin_trylock+0x47/0x80 [ 418.914990][ C1] ? get_page_from_freelist+0x63b/0x22b0 [ 418.915009][ C1] get_page_from_freelist+0x63b/0x22b0 [ 418.915034][ C1] ? unwind_next_frame+0xa5/0x2390 [ 418.915053][ C1] ? unwind_next_frame+0xa5/0x2390 [ 418.915069][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 418.915097][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 418.915117][ C1] ? prepare_alloc_pages+0x213/0x610 [ 418.915147][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 418.915168][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 418.915212][ C1] ? policy_nodemask+0x27c/0x720 [ 418.915228][ C1] ? ___slab_alloc+0x240/0x1480 [ 418.915247][ C1] alloc_pages_mpol+0x232/0x4a0 [ 418.915266][ C1] allocate_slab+0x8a/0x3b0 [ 418.915319][ C1] ___slab_alloc+0xbfc/0x1480 [ 418.915346][ C1] ? __alloc_skb+0x142/0x2d0 [ 418.915370][ C1] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 418.915387][ C1] ? __alloc_skb+0x142/0x2d0 [ 418.915408][ C1] ? __alloc_skb+0x142/0x2d0 [ 418.915427][ C1] kmalloc_reserve+0x136/0x290 [ 418.915449][ C1] __alloc_skb+0x142/0x2d0 [ 418.915471][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 418.915495][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 418.915513][ C1] process_scheduled_works+0xade/0x17b0 [ 418.915542][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.915567][ C1] worker_thread+0x8a0/0xda0 [ 418.915596][ C1] kthread+0x711/0x8a0 [ 418.915617][ C1] ? __pfx_worker_thread+0x10/0x10 [ 418.915637][ C1] ? __pfx_kthread+0x10/0x10 [ 418.915658][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.915681][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.915698][ C1] ? __pfx_kthread+0x10/0x10 [ 418.915720][ C1] ret_from_fork+0x3fc/0x770 [ 418.915740][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 418.915761][ C1] ? __switch_to_asm+0x39/0x70 [ 418.915781][ C1] ? __switch_to_asm+0x33/0x70 [ 418.915802][ C1] ? __pfx_kthread+0x10/0x10 [ 418.915823][ C1] ret_from_fork_asm+0x1a/0x30 [ 418.915851][ C1] [ 419.261853][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 419.268761][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(full) [ 419.280603][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.290699][ T31] Call Trace: [ 419.294011][ T31] [ 419.296969][ T31] dump_stack_lvl+0x99/0x250 [ 419.301604][ T31] ? __asan_memcpy+0x40/0x70 [ 419.306240][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.311486][ T31] ? __pfx__printk+0x10/0x10 [ 419.316132][ T31] panic+0x2db/0x790 [ 419.320096][ T31] ? __pfx_panic+0x10/0x10 [ 419.324551][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 419.329360][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 419.335225][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 419.340636][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 419.346848][ T31] watchdog+0x102d/0x1030 [ 419.351252][ T31] ? watchdog+0x1de/0x1030 [ 419.355717][ T31] kthread+0x711/0x8a0 [ 419.360000][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.364804][ T31] ? __pfx_kthread+0x10/0x10 [ 419.369440][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.374688][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.379915][ T31] ? __pfx_kthread+0x10/0x10 [ 419.384545][ T31] ret_from_fork+0x3fc/0x770 [ 419.389177][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.394331][ T31] ? __switch_to_asm+0x39/0x70 [ 419.399131][ T31] ? __switch_to_asm+0x33/0x70 [ 419.403926][ T31] ? __pfx_kthread+0x10/0x10 [ 419.408554][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.413545][ T31] [ 419.416849][ T31] Kernel Offset: disabled [ 419.421176][ T31] Rebooting in 86400 seconds..