last executing test programs: 5m39.271174896s ago: executing program 2 (id=1004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @rand_addr=0x64010100}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x8000}, 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r7, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x54) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6", 0x3) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 5m38.283155734s ago: executing program 2 (id=1007): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES16=r5, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRESHEX=r4, @ANYRESOCT=r1], 0x50) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 5m37.273527997s ago: executing program 2 (id=1009): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='rxrpc_connect_call\x00', r0}, 0xffffffffffffffd6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) sched_setscheduler(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) r7 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}}) 5m32.034794398s ago: executing program 2 (id=1021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0xb1048, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x20001000, 0x957e, 0x1000, 0x3a}, 0x1c) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5m30.976731845s ago: executing program 2 (id=1023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) (fail_nth: 7) 5m29.586054282s ago: executing program 2 (id=1032): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='rxrpc_connect_call\x00', r0}, 0xffffffffffffffd6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) sched_setscheduler(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 5m28.702368651s ago: executing program 32 (id=1032): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='rxrpc_connect_call\x00', r0}, 0xffffffffffffffd6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) sched_setscheduler(r1, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 15.21416576s ago: executing program 0 (id=1969): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sigaltstack(&(0x7f0000000040)={0x0, 0x80000000, 0xfffffffffffffed8}, 0x0) sigaltstack(&(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000280)={0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)="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", 0x13e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x18102) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x48}, &(0x7f00000004c0)=0x40) 15.100571805s ago: executing program 5 (id=1970): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000000002) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x1, &(0x7f0000000040)) (async, rerun: 32) msgsnd(0x0, 0x0, 0x27, 0x0) (rerun: 32) 12.797381536s ago: executing program 1 (id=1975): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='0x00000000000000a2:0x0000000000000003:0x0000000000000dd9:0x000000000000002a:0x0000000000000008:0x00000000000000ed:0x8000000000000001:0x0000000000000001-'], 0xbd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000007"]) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80) ioctl$SW_SYNC_IOC_INC(r4, 0xc0105702, &(0x7f00000000c0)) 12.767540548s ago: executing program 0 (id=1977): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x79af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) creat(0x0, 0xecf86c37d53049cc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000000c0)="94", 0xf000}, {0x0}], 0x1) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x4, 0x3a6}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000180)=""/135, 0x87}], 0x2}, 0x2020) lseek(0xffffffffffffffff, 0xe, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000001e00050500000000000000007f002b0046000000"], 0x18}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = epoll_create(0x113f) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000400)={0x80002001}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000a80)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O%\xca\xec\xc4\x9eR\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xeb\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xc8\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x22f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 12.478526827s ago: executing program 1 (id=1979): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="8799", 0x2, 0x4}]) mlockall(0x7) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) getresgid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r11 = getuid() r12 = getgid() r13 = socket(0x40000000015, 0x5, 0x0) close(r13) pipe2$watch_queue(&(0x7f0000000340), 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) statx(r1, &(0x7f0000000ec0)='./file0/file0\x00', 0x6000, 0x1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000003900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000001900)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x3, 0x210840, 0x7e1c, 0x4, 0x2, 0x8, 0x0, 0x0, 0x10, 0x2}}, &(0x7f00000002c0)={0x18, 0xb, 0x120e, {0x2}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x7, {0x7c}}, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0xacb2, {0x6}}, &(0x7f00000003c0)={0x18, 0x0, 0xffffffffffffff31, {0x56b}}, &(0x7f0000000440)={0x28, 0x0, 0x11b9d5a8, {{0x6, 0x1, 0x0, r2}}}, &(0x7f0000000480)={0x60, 0x0, 0xc1de, {{0x1000, 0x546, 0x3, 0x2, 0x80000000, 0xff6, 0xa46, 0x9}}}, &(0x7f0000000500)={0x18, 0x0, 0x9, {0x7fff}}, &(0x7f0000000540)={0x11, 0x8b71b4a5618009a7, 0x8, {'\x00'}}, &(0x7f0000000580)={0x20, 0x0, 0x8000000000000000, {0x0, 0x8}}, &(0x7f0000000900)={0x78, 0xfffffffffffffff5, 0xfffffffffffffffd, {0xc, 0x3, 0x0, {0x2, 0x9ca8, 0x8000000000000001, 0x9, 0x2, 0x8, 0x6, 0x6, 0x8, 0x8000, 0xa31, 0x0, 0x0, 0x4, 0xc6}}}, &(0x7f0000000a40)={0x90, 0xfffffffffffffffe, 0x0, {0x1, 0x2, 0x4, 0x0, 0x1, 0x7, {0x3, 0x1fc, 0x6, 0x6, 0x3, 0x3, 0x3a, 0x2, 0x5, 0xc000, 0xfffffffe, r7, r8, 0x8000, 0x81}}}, &(0x7f0000000b00)={0x70, 0x0, 0x3, [{0x2, 0x6, 0x6, 0x771, '(.]\xfc[-'}, {0x0, 0x316d, 0x1, 0x6, '\x00'}, {0x6, 0x5, 0x1, 0x5, '.'}]}, &(0x7f0000000c40)={0x148, 0x0, 0x9, [{{0x5, 0x0, 0x80, 0x3, 0x80, 0xb2, {0x3, 0x1ff, 0x9, 0x3, 0x40, 0xa, 0x6, 0x1b, 0x601, 0xa000, 0x7f, r9, r10, 0x1c00000, 0x9}}, {0x2, 0x5, 0x1, 0x7fff, '\x00'}}, {{0x0, 0x3, 0x1, 0x2, 0xb06b, 0x2, {0x5, 0x9, 0x8, 0xf, 0x4, 0x8, 0xffffffff, 0x2, 0x5, 0xc000, 0x4, r11, r12, 0x0, 0x1}}, {0x3, 0x6, 0x0, 0xc}}]}, &(0x7f0000000dc0)={0xa0, 0x0, 0xda1, {{0x5, 0x1, 0x8, 0x7cd026ea, 0x9, 0x3ff, {0x5, 0xfffffffffffffff1, 0x538a6457, 0x2, 0x6, 0x800, 0x0, 0xfffffff9, 0x28, 0x2000, 0x100, r14, 0xee00, 0xfffffbff, 0x8}}, {0x0, 0x4}}}, &(0x7f0000000e80)={0x20, 0x0, 0x3, {0x9, 0x0, 0x1}}, &(0x7f0000001000)={0x130, 0x0, 0x3, {0x7, 0x7, 0x0, '\x00', {0x10000, 0x7fff, 0x1, 0x3, r15, r16, 0xc000, '\x00', 0x7, 0x1, 0x4, 0x6, {0x3, 0xc}, {0x0, 0x7}, {0x3, 0x4}, {0x101, 0x5}, 0x4, 0xf3, 0x7, 0x1}}}}) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1}) open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x10) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 12.432738733s ago: executing program 3 (id=1980): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000009, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x11, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000280)={0x0, 0x400, 0x2, {0x1, @pix_mp={0x17a5499b, 0x2, 0x38414762, 0x2, 0xa, [{0x4, 0x2}, {0x3, 0x2}, {0x100, 0x200}, {0x40, 0x6b}, {0x1}, {0x4, 0x6}, {0x80000000, 0x6cc}, {0xe, 0x2}], 0xff, 0x4, 0x7, 0x0, 0x6}}}) fchdir(r0) 12.234223388s ago: executing program 5 (id=1981): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040810, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 10.568881699s ago: executing program 0 (id=1982): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x33, &(0x7f0000000140)=""/51, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x1, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x1, 0x6, 0xb}, {0x2, 0x5, 0x0, 0x1}, {0x0, 0x4, 0xe, 0x9}, {0x1, 0x1, 0xc, 0xc}], 0x10, 0x200}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xd0) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, &(0x7f0000000040)) 6.593637104s ago: executing program 0 (id=1983): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) syz_usb_connect(0x3, 0x35, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00fe29ee8a3956371bca56"], 0x0}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="111a992cef0aeb1e11ed4f48", 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x600, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/64]}, 0xb8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 6.463387037s ago: executing program 3 (id=1984): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) 6.460624024s ago: executing program 5 (id=1985): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000001000010000000000000000000000000a44000000060a030000000000000000000f2d00000900010073797a30000000000900020073797a32000000001800048014000180090001007866726d0000000004000280140000001100010000000000000000000000000a"], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r4], 0xef) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000180)=""/62, 0x3e) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x2, 0x0, 0x41000000}], 0x0) 6.377046099s ago: executing program 4 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (fail_nth: 1) 6.315305778s ago: executing program 3 (id=1987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) syz_open_dev$MSR(&(0x7f0000000180), 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.311007655s ago: executing program 1 (id=1988): mkdir(&(0x7f0000000280)='./file0\x00', 0x18a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x10082, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfffd, 0x1, 0x0, 0xfc}, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) 5.690086929s ago: executing program 3 (id=1989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, 0x0, 0x280}}], 0x1, 0x40048d1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xc15}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x1}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x8d, 0x0, "42a75f925d0cb3c6a1b7ace54de26c1e6fdbbb0d4c7a0552a40ac76501493b11d4e58eb7eb418bea74d11fac7b9f0ca03694870021f0fef375bedb092b98a7923886c1fc1fb5db89b780a270c038c113"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x80000}, {0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) 5.689816855s ago: executing program 4 (id=1990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000400000000000000000000000000feffffff0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000feffffffe900000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000400"/176]}, 0x128) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000001c0)=""/240, &(0x7f00000002c0)=0xf0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000080)=0x2, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) sched_setscheduler(r3, 0x0, &(0x7f0000000000)=0xffffffff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000400000000000000000000000000feffffff0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000feffffffe900000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000400"/176]}, 0x128) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000001c0)=""/240, &(0x7f00000002c0)=0xf0) (async) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000080)=0x2, 0x4) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) sched_setscheduler(r3, 0x0, &(0x7f0000000000)=0xffffffff) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) 5.080936222s ago: executing program 1 (id=1991): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x3, 0x4, 0x36f0, 0x64, 0x101, 0x7, 0x2a, 0xfffd, @local, @multicast1}}}}}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x8400, &(0x7f0000000340)={[{@huge_always}, {@quota}, {@usrquota}, {@noswap}, {@usrquota}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfsroot={'smackfsroot', 0x3d, '}'}}]}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x100001ff, 0xfff, 0x0, 0x1000, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x20000001) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x3, 0x4, 0x36f0, 0x64, 0x101, 0x7, 0x2a, 0xfffd, @local, @multicast1}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x8400, &(0x7f0000000340)={[{@huge_always}, {@quota}, {@usrquota}, {@noswap}, {@usrquota}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r5}}, {@smackfsroot={'smackfsroot', 0x3d, '}'}}]}) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x100001ff, 0xfff, 0x0, 0x1000, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x20000001) (async) 5.066889586s ago: executing program 5 (id=1992): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x429}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) (fail_nth: 13) 4.98214309s ago: executing program 4 (id=1993): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x33, &(0x7f0000000140)=""/51, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x1, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1, 0x1], &(0x7f0000000240)=[{0x5, 0x1, 0x6, 0xb}, {0x2, 0x5, 0x0, 0x1}, {0x0, 0x4, 0xe, 0x9}, {0x1, 0x1, 0xc, 0xc}], 0x10, 0x200}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xd0) r5 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x49a, 0x0, 0x0, &(0x7f0000000040)) 4.45065302s ago: executing program 5 (id=1994): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) (fail_nth: 3) r3 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.660192955s ago: executing program 1 (id=1995): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r3 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x1ffe, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @loopback, @empty}, 0xc) 2.659271436s ago: executing program 4 (id=1996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x500, 0x0, 0x140192, r3}) flistxattr(r0, &(0x7f0000000000)=""/94, 0x5e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getgid() r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) r7 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000001140)={'#! ', './file0', [{0x20, 'aWLA\xe1\xc4\xef=cb\xaci\xcaYO&\x86\xfbN\x93\xfc[\xf8\xbe;\x95\x06\'\xd7~\xb0\xc7vwb\xca&d\xc0I0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r11, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfefffffff7ffffff, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r13, r14, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000006140)='./file0\x00', &(0x7f0000006180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="f0c5a711bca1631094fcdc748a93f0c4c59635903a181972823e5ed4684821d7659acfe595ea5151ae14a280719013dd4993d13d216140f14bc4a9bbd181b28a3d0e3f49999687f6143c4a71120581197c5656f5742652b4a7461f1fffad9beb92fa9b2a511571d997f493982313516e3c7330de976bec4c5917bca1bd745283a13e63ab5a7fbdf636c0528561b0cca89d0d45360b3eed1eb2361d75ae98748b615826ed9c1e2754acf921a76f580d9b19b9839e3fa1deb0a961075f38ea9064bef6110234c97f6fbc396434a93ffdb4966bcc8d2e0f868edf", 0xd9}, {&(0x7f0000000440)="34d4864e242ceab6ed317de2de20bb28e34419f120698a123560a6456cec938eb840c913af5b0fd6cbf52b2b1190e9a266d7db08e443329b687d6e9f912809f6573dd0a3c4a963e8d0f62d0be8921d4d6e8ee03565257da88818825af34f43e0bccd11cce9c12e38a8f63536fdd9ee7932efbb427b1d1cb3d25b00ad64e564a6369045a4688d487629feb3a0ef04f817a399fa2eb45699a90a6c8f9bb1e7fc7ffb1ff31fefa63c802484fca70202ebfecbfaab56700d8d2a918cf0b5", 0xbc}, {&(0x7f0000000500)="3f0dae0ed96d09f3a425212258143c69b5816ee4bdc7e5c504b2fdea6c6514748ec365fcf412863e69516f9df61b066cac45b0d7fe60d8188e81644ed944182780e992d84d73bd24e4334ec17e28dffe9e459d", 0x53}], 0x3, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x68, 0x14}}, {{&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000780)="20df496eb18565b1af170e5a739ea2c3ee78db616a0b546c17e88c724a83566426f127cd176e5f1fd9d8ff8d51305c325b8d6d02c5c106d8c2da7c03fe727725ff8c5f8e3080ad704f1bdd76fd", 0x4d}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000800)="17d7aace87dc88", 0x7}, {&(0x7f0000000840)="261bd1c067dca1510d8061b571858863a6e17f3fdb4489a2838941ca7ba1d260dd1f2db73b4c343511731b430b22dcac6974996fce1c272d9a58029b67a5be2bdd7dbab2c6", 0x45}, {&(0x7f00000008c0)="791b43d6f5f4018ee9b8148969988667db03c5b5852d1db5d8f97aab97516801353ca6acb28d691a60bb51f6c9ec6ebb974ad4da485fb86e22680e7ed98c1b68a3718ff139a8e87989a74e138730b9ebc7ce6bb25cfcbbb2174aeef9699118f15f69894cd07197e6809dd30449b563ba0d15830469ad972f06228d11ebf06855e368d3bb797a3fd6e3375f1db34374100be45068b923cdb898e11dca9d9b370b5c637e8c0892e659dccf4938a3b55b68475cb1c20f42160bc47f05f0008f97bf891600f738e4829103", 0xc9}, {&(0x7f00000009c0)="4807037dd2b4f61c275f7320a9fc1f001e59794421eabed6c476dc13c8f0bcdf2b06a543cebe752549ac450d0723f2ac2664e402", 0x34}, {&(0x7f0000000a00)="36f97a000f1d2ccd7ccdfaf4e3ab6604f86a07943c0fed2469e5c8a85a60cb12916b3076a1077e40fa967e9b16870ebcb38d592b1286842f7fb05dae4b929b3ae6ccfe7ada3698db4da04ff25ef31fb0136cea49a9c884ceace0556bb702c64c82b5d82bca1cba66737b08a52b6fffb6e6457ca05855dc8b263995675f8f82b80f896f5558bd7df8030099647ea97ef63d6863a90cab0b4fe845a5ccad3bdc4bbd6691aa19de6873113de22a168ff443fdeca9cd157e5cc0ac3945ac023463289163c6fc5d0c", 0xc6}, {&(0x7f0000000b00)="656dda939f88b902d491d42e5fe08b918db9fd9df39d5349eeb7637a6c61e8191298e7d403af625a90ea65b3cf03280dae01d9ebe5b13e5a42c77fd5b467764fb43e3b8ed005b74fdc7ac0272beeed35596e4b02630d1c757df36a3a1d8e2cffad6e6b2ce4a1958d333e9053c035367b47cbb3ac8aa351c7d56a05958720f4fe9bd88b49a39537a28b8a2a5757f04ba26082196c7937f5a5076e793362dc0e374466bd47bac87cd2b0d38e03c39665fec5e40adb6715ac6973af970114a7d35513a750ffaa635d016e42de77c0ccfc", 0xcf}, {&(0x7f0000000c00)="0108f0397030e551dc33b4f91fd619ff90947ba78fa8b92144c164cc", 0x1c}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000d80)="faf603809a001fbfcdc3befb7343337d1467b866befe3ed502ca098244060c6dbb6ffb5c892b85b54aa44438813b6bec76434282193bccc30a6a20479673", 0x3e}, {&(0x7f0000000dc0)="d24455ba5876df4cfec5a5d1fdef335e0cc4d87223353c5ceb1db65a2943d4f11314363c8f4b5927b28c16a2785a04105259447c146182ec0e816affc99b741a770db87acd1a627fda092469cb311d8c9a4784256d189c5566", 0x59}, {&(0x7f0000000e40)="2f60ad9baa88218645f300ecc11e12cc5ae702277495810491fc7c60fb91e924c83ac39fc11e85432684b2c2f2e39be54929ffe91c15109b199c21827af528a04ddc1a2ffaa4b882a6ff2c85b6935ac8294580e4ec607ccb40dde54981428935ff86900fdce52a3e79999fc9fc8f3cd0c7f2019352b481789d01b8244c", 0x7d}, {&(0x7f0000000ec0)="b0ac96272113c3b5a743e3a1af06e6ce016c9e17d54d64cf9b6968df6033397c7f2814ba8bc29e42c575126f0c9e847028d61599b7df33888abde4b9df9d4d5ed3d181088c6ba56404b0ef3afadfba09a317fb376c80751f56a1e441fcb63c79fc08446ac3225c6d8ac3635bd7f333a85a0c63f3f02c752eca81599e0eab0fdcb8a7acdeb3c535715ac686e757c9d1eff3ad5418d6c7174e86f3626b18a5bfa85a8d26937a34cbb77fd9c72f0c85353beb9ea4c834493e7a41c25c3d0c9578d287d4b42a4174055c3e7a1f3aeef42c1e45544a93625c80c6baea66eacc715bd69ada180fe7b0f7e1c906c2ef24e958369e72", 0xf2}, {&(0x7f0000000fc0)="f08cfd938c40f0c8a6f399d13634df0b12", 0x11}], 0x5, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}, @cred={{0x1c}}], 0x80, 0x8010}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000001380)="e72c3af22bb2aa81a8d23836db19080bf7318d4d", 0x14}, {&(0x7f0000001580)="8a512ba68a04f3e39664d1e2e452d66e8dc4de1f3e3864941a20d3ab11e8eb0f705db3766e9e16a87fb077d5691d8fb4e14c0608c6441ab02b4b6a7e3ceace1d16399bbad4798ef68402d112c2db5d268e272b8c737c88031d3545f1ca6bab82a33f2f1c0bbcd4b66f6db746db05ebab4fff067f33be6fa4a385764a08da9c438db7358fc11b59e42435df14eb9860fd44302685dbaee11ae24c4bb21c83c0f677477eac4b2ef86dc4d3c54e1be716a8ea6d3aacd04facd594d2d9abe6cac14c06b9756df29cbc3dd001c43c3b0cbd0e978ef2", 0xd3}, {&(0x7f0000004940)="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", 0x1000}, {&(0x7f0000001680)="7e1bd2f39619d99a0ebe9e6fab93dc3adc3376913be061d846453aa8ead72dc953b48a9562bda04b44fbe668bc64abfa1dc7142af4e4f9226c4d94b92bf4dbbf0e5202d4ad4ae28b9c18ab9dc613b9bf757cd760232f682a759218529da61cf0f8b219362d3d7b288d68618ab8e3419c8c57861dfcf52800ac1e8caf6296bcdd81567d4470146a541078174c2a7e7c3ba5bc3b6e919220bddd67c493d030483910593dc6d0adbe88baf32babb3", 0xad}, {&(0x7f0000001740)="3fbf92c381c67cfd6d208853064e69c9e6c84b3e365419234061736d6c7fc284bb6d51274a1d6483151fea463c681fa395d6707040db7f20743917a6cbfb0a3c801843af56", 0x45}, {&(0x7f00000017c0)}, {&(0x7f0000001800)="5d8147435aafc6e8ea6913e5ab3fd6f2b232495b83cb06e969791b6bf4615f278da9da79658561a25819cf9f7b4d0e4679045597c5967021231c5215deabbf86d78ab20d11555d09cc02f416acb1e031182ab19a97bcb9536aee92f0fc11e3c0cec27f6a583ad789fed8747bf58c107eb6d4040abb39557009e3f7d3f0d44c60bdf80eda7066c3affcc5902c35a0d446ad8ae85dedb26c384a4277594e503cf2cf4e5a96c9374ceaef5124d6ed1cc7ead990e37611fc2d", 0xb7}, {&(0x7f0000005940)="5827d463b262663b395359fb27283ac1205399d5fe78b43ed00291ba138fa663b07309096bf5246aa867ef9d986ed3eae293217ca2ef74746d6ca5d1c44c2fa3926e3994deea350c1aad1a9df9218b3f15be0fb288f11e2fc57d7370ca786291e0be09bd9658d46ee23db99f6adcc9322b15326ea48964dad9f1131f76635c17b0cf653ad498d6caa8e8eed34b3735ff64d504607bac9dc8b45757cae082c55dc52ea6bc3a9bc482085f19b38fadea83c72cfebbb0536c629fba468bb069c4de394cc13bc6b9688d01cd5e70c3ebd3c6834318ecbbb51d21a308f8377aeea4e1beb39983", 0xe4}], 0x8, &(0x7f0000005c80)=[@cred={{0x1c}}], 0x20, 0x18040}}, {{&(0x7f0000005cc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005d40)="308ce3456a0dd8389907eb3551277b64894bfa197abb4080c3e04d0ece867bb77e8daf4e6274a4c36d55cc459721410c49816080075bd3138043dcaef5e94cbd9e420d5ad842b1e9ef531c8f293c42585196a545ed9252b172e6054812f68e16631c8b52080374f7f7a0b86662d86ef27899feb1a2d575653ffcc1665c4b3ec2750186da2f679e9e70ba79f7cb4d214e68879d1ac57bb232d6261873534fba5706597e5c574c5ecdd831a5f7", 0xac}, {&(0x7f0000005e00)="237b1383734d57ac17f4c4d0c0c5dfa378826cd5e3949ba41daaf4ba158f07d3a11a24fcfcd530a5ac57ad328cef5cb505f1d1fe0afedb9a8fd5d6916ab173c941a84455743dd825b6688fb02d9d2fd230abf4d8d5982822e3be03810aed919ea58fb2c5c7899db30c5061861f9d1bda8d83e50e60273511dd47a7cb82f25d42449b388ae9288ac2c003ce95041595161828638392209ef6deb43f630e0b408ce20405c1", 0xa4}, {&(0x7f0000005ec0)="7ff6a6c3748368b8682e3dccf6ec11ec537b8624cb61209839269a73a8d8838e94d216c8e1f26129934970eb0b7eee43857c57144a9746dc6d1e2f19f9ad345e33cd863f2f1033b90e8a30ff7ff033da6963afe1d5b542218b2e624bca35e22591eeecac93e93f1f082399578b366c67861e44edb39e9bb9d7b0584027d7240a22b6539aa5b795bb5caa3cd2d627abb214647656469a5e53dd4091e781", 0x9d}], 0x3, &(0x7f0000006200)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r2, r1, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r15}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x120, 0x4000}}], 0x5, 0x80) r16 = socket$kcm(0x2d, 0x2, 0x0) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000094fa5e8a0000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r17}, 0x10) close(r16) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32704}}, 0x52b01667b62b30cc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2.534152687s ago: executing program 4 (id=1997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8ed", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000040)={0x8, 0x8, [0x3, 0x1]}) read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="188860"], 0x18}, 0x20004891) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 2.533496431s ago: executing program 0 (id=1998): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000001440)) socket(0x25, 0x5, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x1, [{0x3, 0x80}]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3], [0x0, 0x0, 0x5, 0x1b16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffffe, 0xffffffff, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x3, 0x8, 0xfffffffd, 0x0, 0x0, 0x27, 0x0, 0xff4c, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x1], [0xb, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1e00, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcb3, 0x0, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x200]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x2fa4, 0x0, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x8, 0x0, 0x80, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x3c00000, 0x0, 0x0, 0x0, 0x3], [0xffffffff, 0x3, 0x2fd, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x3ffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001c, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x20000000, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6], [0x9, 0x0, 0x5d30, 0x3, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xf, 0xffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 2.497204334s ago: executing program 3 (id=1999): syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 689.447323ms ago: executing program 5 (id=2000): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 673.38773ms ago: executing program 4 (id=2001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000000000000000800000064b0400", @ANYRES32, @ANYBLOB="0000000000005a1ae30e3cf4b0ead1c3000000000000276a45d815a2401b4891976599dd9d849bb1734d0f18ee3141ca5df1d93f18fa24eadd0471a519eb3f865c352fc2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009de00000503d00e00000000000001229403090581030000000000"], 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$FIGETBSZ(r3, 0x2, 0x0) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000210000140007800500150005000000080012400000000005000500b11410e7a802000000050001000600000011000300586173683a6e65742c6e657400000000"], 0x60}}, 0x0) 50.460873ms ago: executing program 3 (id=2002): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd}}) mkdir(0x0, 0x0) (async, rerun: 64) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011e0130f56920ac05190272f00102030109021b000100009000090455070103490200090582030004"], 0x0) (rerun: 64) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x28, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r2, @ANYRESHEX=r2]) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r3, &(0x7f0000003440)=[{{&(0x7f0000002640)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0x80, 0x0}}], 0x1, 0x8880) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 2.07764ms ago: executing program 0 (id=2003): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000840) bpf$PROG_LOAD(0xb2, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 0s ago: executing program 1 (id=2004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xc, &(0x7f0000001440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r9 = syz_open_dev$media(&(0x7f00000000c0), 0x5, 0x100) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000280)={0x0, 0x5, 0x0, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) socket$alg(0x26, 0x5, 0x0) close(r5) ftruncate(0xffffffffffffffff, 0x200004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0/0x10 [ 540.042630][T10938] ? __pfx__printk+0x10/0x10 [ 540.042649][T10938] ? __pfx___mutex_lock+0x10/0x10 [ 540.042678][T10938] should_fail_ex+0x414/0x560 [ 540.042702][T10938] _copy_to_user+0x31/0xb0 [ 540.042727][T10938] usbdev_read+0x504/0x720 [ 540.042761][T10938] ? __pfx_usbdev_read+0x10/0x10 [ 540.042779][T10938] ? bpf_lsm_file_permission+0x9/0x20 [ 540.042799][T10938] ? security_file_permission+0x75/0x290 [ 540.042819][T10938] ? rw_verify_area+0x258/0x650 [ 540.042836][T10938] ? __pfx_usbdev_read+0x10/0x10 [ 540.042858][T10938] vfs_read+0x1fd/0x980 [ 540.042885][T10938] ? __pfx_vfs_read+0x10/0x10 [ 540.042905][T10938] ? __fget_files+0x2a/0x420 [ 540.042928][T10938] ? __fget_files+0x2a/0x420 [ 540.042947][T10938] ? __fget_files+0x3a0/0x420 [ 540.042966][T10938] ? __fget_files+0x2a/0x420 [ 540.042995][T10938] ksys_read+0x145/0x250 [ 540.043015][T10938] ? __pfx_ksys_read+0x10/0x10 [ 540.043031][T10938] ? rcu_is_watching+0x15/0xb0 [ 540.043060][T10938] ? do_syscall_64+0xbe/0x3b0 [ 540.043086][T10938] do_syscall_64+0xfa/0x3b0 [ 540.043106][T10938] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.043127][T10938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.043144][T10938] ? clear_bhb_loop+0x60/0xb0 [ 540.043164][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.043180][T10938] RIP: 0033:0x7f410538e929 [ 540.043196][T10938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.043210][T10938] RSP: 002b:00007f4106133038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.043228][T10938] RAX: ffffffffffffffda RBX: 00007f41055b5fa0 RCX: 00007f410538e929 [ 540.043241][T10938] RDX: 0000000000000015 RSI: 00002000000000c0 RDI: 0000000000000004 [ 540.043253][T10938] RBP: 00007f4106133090 R08: 0000000000000000 R09: 0000000000000000 [ 540.043264][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.043274][T10938] R13: 0000000000000000 R14: 00007f41055b5fa0 R15: 00007ffd4b7080d8 [ 540.043304][T10938] [ 541.694781][T10953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.814512][T10956] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 541.932314][T10961] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 541.932314][T10961] The task syz.0.1350 (10961) triggered the difference, watch for misbehavior. [ 545.292109][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 546.236121][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.249996][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.261573][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 546.271763][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.295591][T11020] xt_l2tp: v2 sid > 0xffff: 262144 [ 546.306419][ T24] usb 6-1: config 0 descriptor?? [ 546.339482][T11018] kvm: user requested TSC rate below hardware speed [ 546.345437][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 546.377714][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 546.413867][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 546.439532][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 546.482161][ T24] usb 6-1: media controller created [ 546.507126][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.577141][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 546.612190][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 546.630873][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 546.683327][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 546.690323][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 546.844947][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 546.850923][ T24] dvb-usb: error while querying for an remote control event. [ 546.956620][ T24] usb 6-1: USB disconnect, device number 7 [ 547.001018][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 547.317125][T11035] binder: BINDER_SET_CONTEXT_MGR already set [ 547.335383][T11035] binder: 11034:11035 ioctl 4018620d 200000000040 returned -16 [ 547.825186][ T7949] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 548.132076][ T7949] usb 4-1: Using ep0 maxpacket: 16 [ 548.152634][ T7949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.258599][ T7949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 548.292197][ T7949] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 548.312365][ T7949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.333350][ T7949] usb 4-1: config 0 descriptor?? [ 548.339108][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 548.820001][ T7949] logitech 0003:046D:C623.000E: unknown main item tag 0x6 [ 548.866989][ T7949] logitech 0003:046D:C623.000E: collection stack underflow [ 548.925919][ T7949] logitech 0003:046D:C623.000E: item 0 4 0 12 parsing failed [ 549.022448][ T7949] logitech 0003:046D:C623.000E: parse failed [ 549.075271][ T7949] logitech 0003:046D:C623.000E: probe with driver logitech failed with error -22 [ 549.217261][ T7949] usb 4-1: USB disconnect, device number 19 [ 550.265961][T11060] xt_l2tp: v2 sid > 0xffff: 262144 [ 550.310951][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1373'. [ 554.106880][T11095] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.659478][T11121] FAULT_INJECTION: forcing a failure. [ 554.659478][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.663639][T11124] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 554.903037][T11123] lo speed is unknown, defaulting to 1000 [ 555.184917][T11121] CPU: 0 UID: 0 PID: 11121 Comm: syz.5.1391 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 555.184945][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.184956][T11121] Call Trace: [ 555.184964][T11121] [ 555.184972][T11121] dump_stack_lvl+0x189/0x250 [ 555.185001][T11121] ? __pfx____ratelimit+0x10/0x10 [ 555.185021][T11121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.185042][T11121] ? __pfx__printk+0x10/0x10 [ 555.185057][T11121] ? lock_acquire+0x175/0x360 [ 555.185091][T11121] should_fail_ex+0x414/0x560 [ 555.185114][T11121] _copy_from_user+0x2d/0xb0 [ 555.185135][T11121] memdup_user+0x5e/0xd0 [ 555.185157][T11121] strndup_user+0x68/0xd0 [ 555.185179][T11121] __se_sys_mount+0x9c/0x410 [ 555.185205][T11121] ? __pfx___se_sys_mount+0x10/0x10 [ 555.185231][T11121] ? do_syscall_64+0xbe/0x3b0 [ 555.185250][T11121] ? __x64_sys_mount+0x20/0xc0 [ 555.185283][T11121] do_syscall_64+0xfa/0x3b0 [ 555.185305][T11121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.185321][T11121] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 555.185337][T11121] ? clear_bhb_loop+0x60/0xb0 [ 555.185357][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.185373][T11121] RIP: 0033:0x7fc90b18e929 [ 555.185389][T11121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.185404][T11121] RSP: 002b:00007fc90bfd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 555.185423][T11121] RAX: ffffffffffffffda RBX: 00007fc90b3b6080 RCX: 00007fc90b18e929 [ 555.185435][T11121] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000000000000000 [ 555.185446][T11121] RBP: 00007fc90bfd3090 R08: 0000200000000080 R09: 0000000000000000 [ 555.185458][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.185468][T11121] R13: 0000000000000001 R14: 00007fc90b3b6080 R15: 00007ffc021d6248 [ 555.185493][T11121] [ 555.387610][T11124] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1390'. [ 557.693056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.832241][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 559.022636][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 559.069401][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.100679][ T10] usb 2-1: config 0 has no interface number 0 [ 559.320464][ T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 559.418675][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.581737][ T10] usb 2-1: Product: syz [ 559.705364][ T10] usb 2-1: Manufacturer: syz [ 559.781059][ T10] usb 2-1: SerialNumber: syz [ 560.230991][ T10] usb 2-1: config 0 descriptor?? [ 562.263911][ T10] usb 2-1: selecting invalid altsetting 1 [ 562.269762][ T10] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 562.828347][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.874124][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.951645][ T10] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 562.959107][ T10] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 562.970005][ T10] usb 2-1: USB disconnect, device number 22 [ 563.538047][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 564.082086][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 564.105070][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 564.190621][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 564.209233][T11233] xt_l2tp: v2 sid > 0xffff: 262144 [ 564.248143][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 564.287093][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.307410][ T10] usb 4-1: Product: syz [ 564.311611][ T10] usb 4-1: Manufacturer: syz [ 564.328145][ T10] usb 4-1: SerialNumber: syz [ 564.351974][ T10] usb 4-1: config 0 descriptor?? [ 564.618742][ T5817] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 564.633062][ T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 564.677918][ T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 564.734062][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 564.909069][ T9] usb 6-1: device descriptor read/64, error -71 [ 565.214172][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 565.454103][ T9] usb 6-1: device descriptor read/64, error -71 [ 565.672714][ T9] usb usb6-port1: attempt power cycle [ 566.184978][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 566.980580][ T9] usb 6-1: device descriptor read/8, error -71 [ 567.267067][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 567.313267][ T9] usb 6-1: device descriptor read/8, error -71 [ 567.452925][ T9] usb usb6-port1: unable to enumerate USB device [ 567.463113][ T10] usb 4-1: USB disconnect, device number 20 [ 567.813944][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 567.875058][T11273] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 568.002878][T11274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.143411][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 568.199543][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 568.252190][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 568.342088][ T9] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 568.358617][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.367095][ T9] usb 2-1: Product: syz [ 568.371278][ T9] usb 2-1: Manufacturer: syz [ 568.455592][T11281] CIFS: Unable to determine destination address [ 568.807252][ T9] usb 2-1: SerialNumber: syz [ 568.819502][ T9] usb 2-1: config 0 descriptor?? [ 568.830892][ T9] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 569.029771][T11283] bio_check_eod: 14 callbacks suppressed [ 569.029789][T11283] syz.5.1431: attempt to access beyond end of device [ 569.029789][T11283] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 569.080527][T11283] syz.5.1431: attempt to access beyond end of device [ 569.080527][T11283] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 569.100412][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.245540][T11283] syz.5.1431: attempt to access beyond end of device [ 569.245540][T11283] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 569.258909][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.269890][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'. [ 569.280665][T11283] syz.5.1431: attempt to access beyond end of device [ 569.280665][T11283] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 569.307112][T11268] 9pnet_virtio: no channels available for device syz [ 569.316150][T11283] syz.5.1431: attempt to access beyond end of device [ 569.316150][T11283] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 569.394498][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.445853][T11283] syz.5.1431: attempt to access beyond end of device [ 569.445853][T11283] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 569.467337][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.489070][T11283] syz.5.1431: attempt to access beyond end of device [ 569.489070][T11283] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 569.505933][ T24] usb 2-1: USB disconnect, device number 23 [ 569.527422][T11283] syz.5.1431: attempt to access beyond end of device [ 569.527422][T11283] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 569.574197][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.595945][T11283] syz.5.1431: attempt to access beyond end of device [ 569.595945][T11283] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 569.618760][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 569.674616][T11283] syz.5.1431: attempt to access beyond end of device [ 569.674616][T11283] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 569.752808][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 569.986382][T11283] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 570.248101][T11283] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 570.506048][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 570.538276][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 570.549307][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 570.559808][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 570.577805][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 570.588206][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 570.599533][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 570.609679][T11287] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 570.620245][T11287] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 572.362639][T11333] sctp: [Deprecated]: syz.1.1444 (pid 11333) Use of int in max_burst socket option. [ 572.362639][T11333] Use struct sctp_assoc_value instead [ 572.487272][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 574.849865][T11357] NILFS (nullb0): couldn't find nilfs on the device [ 575.092815][ T30] audit: type=1326 audit(1751562663.539:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 575.205950][ T30] audit: type=1326 audit(1751562663.539:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 575.361626][ T30] audit: type=1326 audit(1751562663.589:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 575.434340][ T30] audit: type=1326 audit(1751562663.589:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.302080][ T30] audit: type=1326 audit(1751562663.589:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.392196][ T30] audit: type=1326 audit(1751562663.589:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.414383][ T30] audit: type=1326 audit(1751562663.589:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.436242][ T30] audit: type=1326 audit(1751562663.589:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.459430][ T30] audit: type=1326 audit(1751562663.589:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 576.481350][ T30] audit: type=1326 audit(1751562663.589:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11361 comm="syz.0.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 577.323177][ T5887] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 577.483863][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.502113][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 577.525809][ T5887] usb 5-1: New USB device found, idVendor=1e7f, idProduct=2d50, bcdDevice= 0.00 [ 577.549003][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.575831][ T5887] usb 5-1: config 0 descriptor?? [ 578.032388][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 578.331905][ T5887] hid-generic 0003:1E7F:2D50.000F: unknown main item tag 0x4 [ 578.351492][ T5887] hid-generic 0003:1E7F:2D50.000F: item fetching failed at offset 3/5 [ 578.360679][ T5887] hid-generic 0003:1E7F:2D50.000F: probe with driver hid-generic failed with error -22 [ 578.528788][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.657480][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.825492][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 578.939852][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.510482][ T9] usb 6-1: usb_control_msg returned -32 [ 579.520691][ T9] usbtmc 6-1:16.0: can't read capabilities [ 579.547058][ T9] usb 6-1: USB disconnect, device number 12 [ 579.680579][ T5867] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 579.952254][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 580.255665][T11423] gtp1: entered promiscuous mode [ 580.969469][ T7949] usb 5-1: USB disconnect, device number 19 [ 580.975451][T11412] pim6reg1: entered promiscuous mode [ 580.980989][T11412] pim6reg1: entered allmulticast mode [ 581.458285][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 581.458303][ T30] audit: type=1326 audit(1751562669.879:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.603462][ T30] audit: type=1326 audit(1751562669.879:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.627740][ T30] audit: type=1326 audit(1751562669.879:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.650672][ T30] audit: type=1326 audit(1751562669.879:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.676711][ T30] audit: type=1326 audit(1751562669.879:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.702797][ T30] audit: type=1326 audit(1751562669.879:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.740798][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.742500][ T30] audit: type=1326 audit(1751562669.879:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.755250][ T5867] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 581.770828][ T30] audit: type=1326 audit(1751562669.879:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.790166][ T5867] usb 2-1: can't read configurations, error -71 [ 581.803870][ T30] audit: type=1326 audit(1751562669.879:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 581.828710][ T30] audit: type=1326 audit(1751562669.879:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11433 comm="syz.5.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc90b18e929 code=0x7fc00000 [ 582.063397][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 582.732332][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 582.753698][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.765376][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 582.777321][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 582.787675][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.796633][ T24] usb 5-1: Product: syz [ 582.800961][ T24] usb 5-1: Manufacturer: syz [ 582.821814][ T24] usb 5-1: SerialNumber: syz [ 582.854386][ T24] usb 5-1: config 0 descriptor?? [ 583.066419][ T24] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 583.082729][ T24] f6 f2 2c fa 89 99 d8 d7 [ 583.087663][ T24] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 583.275860][ T7949] usb 5-1: USB disconnect, device number 20 [ 583.402105][ T5929] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 583.537901][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 583.966573][ T5929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.989376][ T5929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.011394][ T5929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.220228][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.345126][T11474] netlink: 'syz.4.1482': attribute type 12 has an invalid length. [ 584.754901][ T5929] usb 2-1: usb_control_msg returned -32 [ 584.763340][ T5929] usbtmc 2-1:16.0: can't read capabilities [ 584.815243][ T5929] usb 2-1: USB disconnect, device number 26 [ 588.310320][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 588.310337][ T30] audit: type=1107 audit(1751562676.749:189): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 588.405261][T11518] FAULT_INJECTION: forcing a failure. [ 588.405261][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 588.418266][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.4.1493 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 588.418289][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.418301][T11518] Call Trace: [ 588.418309][T11518] [ 588.418317][T11518] dump_stack_lvl+0x189/0x250 [ 588.418347][T11518] ? __pfx____ratelimit+0x10/0x10 [ 588.418372][T11518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.418397][T11518] ? __pfx__printk+0x10/0x10 [ 588.418419][T11518] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 588.418452][T11518] should_fail_ex+0x414/0x560 [ 588.418478][T11518] should_failslab+0xa8/0x100 [ 588.418498][T11518] ? __pfx_ip6_dst_gc+0x10/0x10 [ 588.418521][T11518] kmem_cache_alloc_noprof+0x73/0x3c0 [ 588.418541][T11518] ? dst_alloc+0x105/0x170 [ 588.418562][T11518] ? __pfx_ip6_dst_gc+0x10/0x10 [ 588.418585][T11518] dst_alloc+0x105/0x170 [ 588.418611][T11518] ip6_pol_route+0xa21/0x1180 [ 588.418628][T11518] ? ip6_pol_route+0x162/0x1180 [ 588.418650][T11518] ? __pfx_ip6_pol_route+0x10/0x10 [ 588.418674][T11518] ? rcu_is_watching+0x15/0xb0 [ 588.418707][T11518] ? preempt_schedule_irq+0xde/0x150 [ 588.418734][T11518] fib6_rule_lookup+0x348/0x6f0 [ 588.418754][T11518] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 588.418772][T11518] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 588.418788][T11518] ? irqentry_exit+0x74/0x90 [ 588.418810][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.418843][T11518] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 588.418859][T11518] ? ip6_route_output_flags+0x2f5/0x5d0 [ 588.418884][T11518] ip6_route_output_flags+0x364/0x5d0 [ 588.418902][T11518] ? ip6_route_output_flags+0x2e/0x5d0 [ 588.418924][T11518] inet6_rtm_getroute+0x95d/0x1900 [ 588.418941][T11518] ? __pfx___schedule+0x10/0x10 [ 588.418969][T11518] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 588.418984][T11518] ? __local_bh_enable_ip+0x13e/0x1c0 [ 588.419036][T11518] ? irqentry_exit+0x74/0x90 [ 588.419057][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.419087][T11518] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 588.419102][T11518] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 588.419124][T11518] ? rtnetlink_rcv_msg+0x7b9/0xb70 [ 588.419152][T11518] ? __pfx_inet6_rtm_getroute+0x10/0x10 [ 588.419168][T11518] rtnetlink_rcv_msg+0x7cf/0xb70 [ 588.419196][T11518] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 588.419218][T11518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.419249][T11518] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 588.419278][T11518] netlink_rcv_skb+0x208/0x470 [ 588.419294][T11518] ? rcu_is_watching+0x15/0xb0 [ 588.419316][T11518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.419342][T11518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.419374][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.419401][T11518] netlink_unicast+0x75b/0x8d0 [ 588.419437][T11518] netlink_sendmsg+0x805/0xb30 [ 588.419453][T11518] ? trace_irq_disable+0x37/0x110 [ 588.419481][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.419501][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.419526][T11518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.419545][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.419564][T11518] __sock_sendmsg+0x21c/0x270 [ 588.419590][T11518] ____sys_sendmsg+0x505/0x830 [ 588.419616][T11518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.419645][T11518] ? import_iovec+0x74/0xa0 [ 588.419672][T11518] ___sys_sendmsg+0x21f/0x2a0 [ 588.419699][T11518] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.419758][T11518] ? __fget_files+0x2a/0x420 [ 588.419778][T11518] ? __fget_files+0x3a0/0x420 [ 588.419810][T11518] __x64_sys_sendmsg+0x19b/0x260 [ 588.419832][T11518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.419872][T11518] ? do_syscall_64+0xbe/0x3b0 [ 588.419898][T11518] do_syscall_64+0xfa/0x3b0 [ 588.419921][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.419937][T11518] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 588.419953][T11518] ? clear_bhb_loop+0x60/0xb0 [ 588.419974][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.419991][T11518] RIP: 0033:0x7f410538e929 [ 588.420007][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.420022][T11518] RSP: 002b:00007f41031f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.420040][T11518] RAX: ffffffffffffffda RBX: 00007f41055b6160 RCX: 00007f410538e929 [ 588.420053][T11518] RDX: 0000000020000050 RSI: 0000200000000300 RDI: 0000000000000005 [ 588.420065][T11518] RBP: 00007f41031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.420076][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.420087][T11518] R13: 0000000000000000 R14: 00007f41055b6160 R15: 00007ffd4b7080d8 [ 588.420117][T11518] [ 590.912283][ T7949] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 591.205733][ T7949] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.473867][ T7949] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.595974][ T7949] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.621409][ T7949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.820202][T11551] FAULT_INJECTION: forcing a failure. [ 591.820202][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 591.854011][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.5.1505 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 591.854038][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.854049][T11551] Call Trace: [ 591.854057][T11551] [ 591.854065][T11551] dump_stack_lvl+0x189/0x250 [ 591.854094][T11551] ? __pfx____ratelimit+0x10/0x10 [ 591.854116][T11551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.854138][T11551] ? __pfx__printk+0x10/0x10 [ 591.854162][T11551] ? __pfx___might_resched+0x10/0x10 [ 591.854184][T11551] ? fs_reclaim_acquire+0x7d/0x100 [ 591.854211][T11551] should_fail_ex+0x414/0x560 [ 591.854237][T11551] should_failslab+0xa8/0x100 [ 591.854260][T11551] __kmalloc_noprof+0xcb/0x4f0 [ 591.854278][T11551] ? snd_pcm_hw_refine+0x967/0x1640 [ 591.854303][T11551] snd_pcm_hw_refine+0x967/0x1640 [ 591.854326][T11551] ? __mutex_trylock_common+0x153/0x260 [ 591.854353][T11551] ? __pfx___mutex_trylock_common+0x10/0x10 [ 591.854382][T11551] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 591.854401][T11551] ? __lock_acquire+0xab9/0xd20 [ 591.854429][T11551] ? do_raw_spin_lock+0x121/0x290 [ 591.854449][T11551] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 591.854465][T11551] ? snd_pcm_hw_params+0x15b/0x1c90 [ 591.854504][T11551] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.854525][T11551] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.854550][T11551] snd_pcm_hw_params+0x491/0x1c90 [ 591.854581][T11551] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.854609][T11551] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 591.854634][T11551] ? snd_pcm_hw_param_near+0x373/0x500 [ 591.854668][T11551] snd_pcm_oss_change_params_locked+0x21cb/0x3e40 [ 591.854733][T11551] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 591.854753][T11551] ? snd_pcm_oss_sync+0x297/0xc30 [ 591.854782][T11551] ? __pfx_ima_file_free+0x10/0x10 [ 591.854808][T11551] ? __fsnotify_parent+0x242/0x540 [ 591.854840][T11551] snd_pcm_oss_sync+0x353/0xc30 [ 591.854870][T11551] snd_pcm_oss_release+0xff/0x250 [ 591.854892][T11551] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 591.854915][T11551] __fput+0x44c/0xa70 [ 591.854950][T11551] task_work_run+0x1d4/0x260 [ 591.854973][T11551] ? __pfx_task_work_run+0x10/0x10 [ 591.854998][T11551] ? exit_to_user_mode_loop+0x40/0x110 [ 591.855023][T11551] exit_to_user_mode_loop+0xec/0x110 [ 591.855045][T11551] do_syscall_64+0x2bd/0x3b0 [ 591.855066][T11551] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.855087][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.855104][T11551] ? clear_bhb_loop+0x60/0xb0 [ 591.855125][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.855142][T11551] RIP: 0033:0x7fc90b18e929 [ 591.855158][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.855171][T11551] RSP: 002b:00007fc90bff4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 591.855191][T11551] RAX: 0000000000000000 RBX: 00007fc90b3b5fa0 RCX: 00007fc90b18e929 [ 591.855203][T11551] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 591.855214][T11551] RBP: 00007fc90bff4090 R08: 0000000000000000 R09: 0000000000000000 [ 591.855225][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.855235][T11551] R13: 0000000000000000 R14: 00007fc90b3b5fa0 R15: 00007ffc021d6248 [ 591.855265][T11551] [ 591.995563][ T7949] usb 2-1: usb_control_msg returned -32 [ 592.284790][ T7949] usbtmc 2-1:16.0: can't read capabilities [ 592.338822][ T7949] usb 2-1: USB disconnect, device number 27 [ 592.481548][T11561] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 592.489523][T11561] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1508'. [ 593.680129][T11583] xt_l2tp: v2 sid > 0xffff: 262144 [ 593.776021][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 597.392318][T11606] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1519'. [ 597.429328][T11605] macvtap1: entered allmulticast mode [ 597.434876][T11605] veth0_macvtap: entered allmulticast mode [ 597.994503][T11611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1518'. [ 599.092884][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 599.098988][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 599.106487][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 599.114349][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 599.252446][ T5887] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 599.455260][T11642] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1528'. [ 599.457210][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 599.487437][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 599.496884][T11637] veth0: entered promiscuous mode [ 599.509907][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.622622][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.636018][T11636] veth0: left promiscuous mode [ 599.639731][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 599.661339][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.679353][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.862324][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.013998][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 600.026667][ T5887] usb 6-1: config 0 descriptor?? [ 600.078639][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 601.200612][ T5887] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 601.211727][T11630] ceph: No mds server is up or the cluster is laggy [ 603.031766][ T5887] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 603.148801][ T1224] usb 6-1: USB disconnect, device number 13 [ 603.305301][T11672] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 603.313213][T11672] netlink: 'syz.1.1538': attribute type 4 has an invalid length. [ 603.321026][T11672] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1538'. [ 603.773372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.840496][T11664] fido_id[11664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 604.590231][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 604.978897][T11701] xt_l2tp: v2 sid > 0xffff: 262144 [ 605.194234][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1548'. [ 606.025492][T11731] Invalid ELF header magic: != ELF [ 606.639689][T11733] netlink: 'syz.0.1555': attribute type 1 has an invalid length. [ 606.647896][T11733] netlink: 'syz.0.1555': attribute type 4 has an invalid length. [ 606.656069][T11733] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1555'. [ 607.108604][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1559'. [ 607.732348][ T7949] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 608.056084][ T7949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.089242][ T7949] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 608.125386][ T7949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.152828][ T7949] usb 5-1: config 0 descriptor?? [ 608.474481][ T7949] usbhid 5-1:0.0: can't add hid device: -71 [ 608.570594][ T7949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 609.232220][ T7949] usb 5-1: USB disconnect, device number 21 [ 609.422966][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 609.716785][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 609.942071][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 609.992435][ T7949] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 610.011520][ T10] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 610.064364][ T10] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 610.171939][ T10] usb 4-1: config 253 has no interface number 0 [ 610.204744][ T7949] usb 5-1: Using ep0 maxpacket: 32 [ 610.292647][ T10] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.513719][T11761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.536175][T11761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.549699][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 610.599580][ T7949] usb 5-1: device descriptor read/all, error -71 [ 610.616568][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.640061][ T10] usb 4-1: Product: syz [ 610.663529][ T10] usb 4-1: Manufacturer: syz [ 610.670527][ T10] usb 4-1: SerialNumber: syz [ 610.811294][T11761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.840779][T11761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.083924][T11761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.129420][T11761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.811289][T11753] delete_channel: no stack [ 612.928951][ T10] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 612.941481][ T10] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 612.948727][T11761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.965606][T11761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.980126][ T10] usb 4-1: USB disconnect, device number 21 [ 614.012282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.388310][T11761] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.395007][T11761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.520643][T11761] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.520688][T11761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.745422][T11761] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.745509][T11761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.943491][T11761] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.943520][T11761] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.724344][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 616.916826][T11842] netlink: 'syz.5.1590': attribute type 10 has an invalid length. [ 616.994752][T11842] team0: Port device dummy0 added [ 617.022188][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 617.029259][ T5929] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.040962][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.057129][ T5929] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 617.082223][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.110571][ T5929] usb 2-1: config 0 descriptor?? [ 617.580803][T11855] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 619.133982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.298624][ T5929] usbhid 2-1:0.0: can't add hid device: -71 [ 619.314242][ T5929] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 619.371884][ T5929] usb 2-1: USB disconnect, device number 28 [ 619.396040][T11872] xt_l2tp: v2 sid > 0xffff: 262144 [ 621.288573][ T30] audit: type=1326 audit(1751562709.719:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 623.594493][ T30] audit: type=1326 audit(1751562709.719:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 623.903640][ T30] audit: type=1326 audit(1751562709.729:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 624.022141][ T30] audit: type=1326 audit(1751562709.759:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 624.099065][ T30] audit: type=1326 audit(1751562709.759:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 624.165649][ T30] audit: type=1326 audit(1751562709.759:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11900 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa6181c11e5 code=0x7ffc0000 [ 624.194069][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 624.242129][ T30] audit: type=1326 audit(1751562709.899:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11900 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 624.269271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.287546][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.350040][ T30] audit: type=1326 audit(1751562709.909:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa61818d290 code=0x7ffc0000 [ 624.376955][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.403295][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.421287][ T30] audit: type=1326 audit(1751562709.909:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa61818d290 code=0x7ffc0000 [ 624.449018][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 624.478739][ T30] audit: type=1326 audit(1751562709.909:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61818e929 code=0x7ffc0000 [ 624.481100][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 624.597363][ T24] usb 4-1: SerialNumber: syz [ 624.861397][T11932] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 624.868787][T11932] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 624.957086][T11932] tipc: Started in network mode [ 624.957124][T11932] tipc: Node identity 080211000001, cluster identity 4711 [ 624.957759][T11932] tipc: Enabled bearer , priority 0 [ 625.312903][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 626.073823][ T10] tipc: Node number set to 134418688 [ 628.402987][ T24] usb 4-1: 0:2 : does not exist [ 628.526459][ T24] usb 4-1: USB disconnect, device number 22 [ 628.601305][ T6296] udevd[6296]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.023390][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 630.083277][T11968] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 630.090632][T11968] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 630.819992][T11976] : entered promiscuous mode [ 633.607795][T12009] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 634.304214][T12013] fuse: Bad value for 'user_id' [ 634.523334][T12013] fuse: Bad value for 'user_id' [ 634.882925][T12018] binder: BINDER_SET_CONTEXT_MGR already set [ 634.892043][T12018] binder: 12014:12018 ioctl 4018620d 200000000040 returned -16 [ 635.002748][T12021] sctp: [Deprecated]: syz.5.1645 (pid 12021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.002748][T12021] Use struct sctp_sack_info instead [ 635.282410][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 635.302472][ T7949] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 635.442094][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 635.477354][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.516389][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 635.658021][ T7949] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 635.689726][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 635.745515][ T7949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.767225][T12027] block device autoloading is deprecated and will be removed. [ 635.780904][T12027] bio_check_eod: 14 callbacks suppressed [ 635.780945][T12027] syz.1.1646: attempt to access beyond end of device [ 635.780945][T12027] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 635.896323][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.980389][ T7949] usb 6-1: config 0 descriptor?? [ 637.497984][ T10] usb 4-1: config 0 descriptor?? [ 637.927637][ T10] logitech 0003:046D:C623.0011: unknown main item tag 0x6 [ 637.937988][ T10] logitech 0003:046D:C623.0011: collection stack underflow [ 637.976415][ T10] logitech 0003:046D:C623.0011: item 0 4 0 12 parsing failed [ 638.021031][ T10] logitech 0003:046D:C623.0011: parse failed [ 638.037997][T12037] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1648'. [ 638.052363][ T10] logitech 0003:046D:C623.0011: probe with driver logitech failed with error -22 [ 638.262880][ T10] usb 4-1: USB disconnect, device number 23 [ 640.412308][T12055] ipt_REJECT: TCP_RESET invalid for non-tcp [ 643.268505][T12073] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1662'. [ 643.410341][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 643.419414][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 644.692785][T12092] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 646.252543][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 648.406497][T12128] FAULT_INJECTION: forcing a failure. [ 648.406497][T12128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.451786][T12128] CPU: 1 UID: 0 PID: 12128 Comm: syz.4.1679 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 648.451815][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.451826][T12128] Call Trace: [ 648.451833][T12128] [ 648.451842][T12128] dump_stack_lvl+0x189/0x250 [ 648.451870][T12128] ? __pfx____ratelimit+0x10/0x10 [ 648.451893][T12128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.451916][T12128] ? __pfx__printk+0x10/0x10 [ 648.451945][T12128] should_fail_ex+0x414/0x560 [ 648.451975][T12128] _copy_to_user+0x31/0xb0 [ 648.451998][T12128] simple_read_from_buffer+0xe1/0x170 [ 648.452025][T12128] proc_fail_nth_read+0x1df/0x250 [ 648.452049][T12128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.452076][T12128] ? rw_verify_area+0x258/0x650 [ 648.452094][T12128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.452117][T12128] vfs_read+0x1fd/0x980 [ 648.452142][T12128] ? __pfx___mutex_lock+0x10/0x10 [ 648.452165][T12128] ? __pfx_vfs_read+0x10/0x10 [ 648.452186][T12128] ? __fget_files+0x2a/0x420 [ 648.452212][T12128] ? __fget_files+0x3a0/0x420 [ 648.452231][T12128] ? __fget_files+0x2a/0x420 [ 648.452259][T12128] ksys_read+0x145/0x250 [ 648.452280][T12128] ? __pfx_ksys_read+0x10/0x10 [ 648.452304][T12128] ? rcu_is_watching+0x15/0xb0 [ 648.452333][T12128] ? do_syscall_64+0xbe/0x3b0 [ 648.452359][T12128] do_syscall_64+0xfa/0x3b0 [ 648.452379][T12128] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.452400][T12128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.452417][T12128] ? clear_bhb_loop+0x60/0xb0 [ 648.452438][T12128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.452454][T12128] RIP: 0033:0x7f410538d33c [ 648.452471][T12128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 648.452485][T12128] RSP: 002b:00007f4106133030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.452504][T12128] RAX: ffffffffffffffda RBX: 00007f41055b5fa0 RCX: 00007f410538d33c [ 648.452517][T12128] RDX: 000000000000000f RSI: 00007f41061330a0 RDI: 0000000000000005 [ 648.452528][T12128] RBP: 00007f4106133090 R08: 0000000000000000 R09: 0000000000000000 [ 648.452538][T12128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.452549][T12128] R13: 0000000000000000 R14: 00007f41055b5fa0 R15: 00007ffd4b7080d8 [ 648.452577][T12128] [ 648.683290][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.918728][T12167] netlink: 'syz.5.1689': attribute type 25 has an invalid length. [ 653.539300][T12178] mkiss: ax0: crc mode is auto. [ 654.105914][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1694'. [ 654.480365][T12179] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 654.757185][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 654.766224][T12189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 654.900363][T12187] netlink: 'syz.4.1695': attribute type 3 has an invalid length. [ 658.033148][T12223] netlink: 'syz.3.1707': attribute type 5 has an invalid length. [ 658.334413][ T5929] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 658.382144][ T1224] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 658.511375][ T5929] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 658.531552][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.541128][ T5929] usb 4-1: Product: syz [ 658.555444][ T5929] usb 4-1: Manufacturer: syz [ 658.561170][ T5929] usb 4-1: SerialNumber: syz [ 658.581568][ T1224] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 658.602020][ T1224] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 658.605686][ T5929] usb 4-1: config 0 descriptor?? [ 658.610257][ T1224] usb 5-1: Product: syz [ 658.610277][ T1224] usb 5-1: Manufacturer: syz [ 658.652159][ T7949] ath6kl: Failed to submit usb control message: -71 [ 658.654090][ T5929] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 658.658796][ T7949] ath6kl: unable to send the bmi data to the device: -71 [ 658.658815][ T7949] ath6kl: Unable to send get target info: -71 [ 658.672022][ T1224] usb 5-1: SerialNumber: syz [ 658.686336][ T7949] ath6kl: Failed to init ath6kl core: -71 [ 658.700641][ T1224] usb 5-1: config 0 descriptor?? [ 658.720405][ T7949] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 658.796261][ T7949] usb 6-1: USB disconnect, device number 14 [ 659.218050][ T1224] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 659.315561][ T1224] asix 5-1:0.0: probe with driver asix failed with error -71 [ 659.333840][ T1224] usb 5-1: USB disconnect, device number 24 [ 659.544443][ T9] usb 4-1: USB disconnect, device number 24 [ 661.521135][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 662.501076][T12273] 9pnet_fd: Insufficient options for proto=fd [ 662.512269][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 662.532903][T12271] syz.1.1720: attempt to access beyond end of device [ 662.532903][T12271] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 662.546823][T12271] syz.1.1720: attempt to access beyond end of device [ 662.546823][T12271] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 662.580311][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 662.597938][T12271] syz.1.1720: attempt to access beyond end of device [ 662.597938][T12271] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 662.641364][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 662.664695][T12271] syz.1.1720: attempt to access beyond end of device [ 662.664695][T12271] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 662.702108][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 662.709112][T12271] syz.1.1720: attempt to access beyond end of device [ 662.709112][T12271] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 662.737223][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.747759][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 662.762137][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 662.791945][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 662.813267][T12271] syz.1.1720: attempt to access beyond end of device [ 662.813267][T12271] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 662.836584][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.871139][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 662.904400][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 662.913725][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.921829][ T9] usb 6-1: Product: syz [ 662.937080][ T9] usb 6-1: Manufacturer: syz [ 662.941704][ T9] usb 6-1: SerialNumber: syz [ 662.963257][T12271] syz.1.1720: attempt to access beyond end of device [ 662.963257][T12271] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 662.980525][ T9] usb 6-1: config 0 descriptor?? [ 663.001783][T12267] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 663.012772][ T9] mcba_usb 6-1:0.0: Can't find endpoints [ 663.038213][T12271] syz.1.1720: attempt to access beyond end of device [ 663.038213][T12271] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 663.081652][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.111644][T12271] syz.1.1720: attempt to access beyond end of device [ 663.111644][T12271] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 663.152079][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.198443][T12271] syz.1.1720: attempt to access beyond end of device [ 663.198443][T12271] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 663.270329][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.310406][T12271] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.352162][T12271] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 663.383209][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.393512][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.433199][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.464222][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.524890][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.542712][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.560355][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.571101][T12272] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.786532][T12272] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 664.358955][T12289] loop6: detected capacity change from 0 to 7 [ 664.389662][T12289] buffer_io_error: 25 callbacks suppressed [ 664.389680][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.484781][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.621832][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.674900][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.687914][T12295] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.718956][T12295] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.732946][T12295] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.749743][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.759198][T12299] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.773087][T12289] Buffer I/O error on dev loop6, logical block 0, async page read [ 664.789925][T12289] ldm_validate_partition_table(): Disk read failed. [ 664.806945][T12289] Dev loop6: unable to read RDB block 0 [ 664.841397][T12289] loop6: unable to read partition table [ 664.892778][ T5929] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 664.912343][T12289] loop6: partition table beyond EOD, truncated [ 665.063999][T12289] loop_reread_partitions: partition scan of loop6 (3Ÿ‚¾‚³÷„I÷>Ê9äÿtPΪÅó×AÝÁÅ8}!Žñè3#yXÖe) failed (rc=-5) [ 665.952658][ T5887] usb 6-1: USB disconnect, device number 15 [ 665.979682][ T5929] usb 4-1: device descriptor read/64, error -71 [ 666.252296][ T5929] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 666.319458][ T5188] ldm_validate_partition_table(): Disk read failed. [ 666.329719][ T5188] Dev loop6: unable to read RDB block 0 [ 666.429216][ T5929] usb 4-1: device descriptor read/64, error -71 [ 666.822662][ T5188] loop6: unable to read partition table [ 666.828555][ T5188] loop6: partition table beyond EOD, truncated [ 666.834099][ T5929] usb usb4-port1: attempt power cycle [ 667.356680][ T5929] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 667.705530][ T1224] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 667.863662][ T5929] usb 4-1: device descriptor read/8, error -71 [ 667.905215][ T1224] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 667.933061][ T1224] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 667.956528][ T1224] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 667.976206][ T1224] usb 5-1: config 220 has no interface number 2 [ 667.982732][ T1224] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 668.422598][ T1224] usb 5-1: config 220 interface 0 has no altsetting 0 [ 668.429428][ T1224] usb 5-1: config 220 interface 76 has no altsetting 0 [ 668.436379][ T1224] usb 5-1: config 220 interface 1 has no altsetting 0 [ 668.456118][ T1224] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 668.473702][ T1224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.481713][ T1224] usb 5-1: Product: syz [ 668.504201][ T1224] usb 5-1: Manufacturer: syz [ 668.508836][ T1224] usb 5-1: SerialNumber: syz [ 668.875500][ T1224] usb 5-1: selecting invalid altsetting 0 [ 668.952997][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'. [ 669.127040][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1745'. [ 669.833370][ T1224] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 669.839790][ T1224] usb 5-1: No valid video chain found. [ 669.876636][ T1224] usb 5-1: selecting invalid altsetting 0 [ 669.892079][ T1224] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 669.920022][ T1224] usb 5-1: USB disconnect, device number 25 [ 670.169849][T12368] netlink: 'syz.5.1750': attribute type 1 has an invalid length. [ 670.274794][T12368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.355416][T12371] vlan2: entered allmulticast mode [ 670.378451][T12371] veth1: entered allmulticast mode [ 670.531324][T12373] tmpfs: Unknown parameter 'ihuge' [ 672.591669][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 672.673631][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 672.673650][ T30] audit: type=1326 audit(1751562761.109:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12363 comm="syz.3.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120bb8e929 code=0x7ffc0000 [ 672.729007][ T30] audit: type=1326 audit(1751562761.109:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12363 comm="syz.3.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120bb8e929 code=0x7ffc0000 [ 672.759791][T12391] bio_check_eod: 14 callbacks suppressed [ 672.759809][T12391] syz.5.1754: attempt to access beyond end of device [ 672.759809][T12391] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 672.761533][ T30] audit: type=1326 audit(1751562761.109:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12363 comm="syz.3.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f120bb8e929 code=0x7ffc0000 [ 672.800380][T12391] syz.5.1754: attempt to access beyond end of device [ 672.800380][T12391] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 672.821037][ T9] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 672.829278][ T9] usb 5-1: config 0 has no interface number 0 [ 672.837908][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice=aa.6c [ 672.847087][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.865602][ T9] usb 5-1: config 0 descriptor?? [ 672.876266][ T30] audit: type=1326 audit(1751562761.109:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12363 comm="syz.3.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120bb8e929 code=0x7ffc0000 [ 672.876298][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 672.951365][ T30] audit: type=1326 audit(1751562761.109:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12363 comm="syz.3.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f120bb8e929 code=0x7ffc0000 [ 672.952854][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 672.989773][T12391] syz.5.1754: attempt to access beyond end of device [ 672.989773][T12391] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 673.052429][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 673.111154][T12391] syz.5.1754: attempt to access beyond end of device [ 673.111154][T12391] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 673.128431][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.144768][T12391] syz.5.1754: attempt to access beyond end of device [ 673.144768][T12391] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 673.168965][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.176435][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 673.217334][T12391] syz.5.1754: attempt to access beyond end of device [ 673.217334][T12391] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 673.259300][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 673.578088][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 673.629293][ T9] gspca_sn9c20x: Device initialization failed [ 673.689479][T12391] syz.5.1754: attempt to access beyond end of device [ 673.689479][T12391] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 673.730905][ T9] gspca_sn9c20x 5-1:0.47: probe with driver gspca_sn9c20x failed with error -71 [ 673.965397][ T9] usb 5-1: USB disconnect, device number 26 [ 673.976059][T12391] syz.5.1754: attempt to access beyond end of device [ 673.976059][T12391] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 674.135258][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.145572][T12391] syz.5.1754: attempt to access beyond end of device [ 674.145572][T12391] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 674.158682][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.168874][T12391] syz.5.1754: attempt to access beyond end of device [ 674.168874][T12391] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 674.187409][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.199011][T12391] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.210985][T12391] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 674.221252][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.231549][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.244065][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.254892][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.266219][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.276631][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.286837][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 674.298565][T12392] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 674.308667][T12392] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 674.663089][T12418] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1764'. [ 675.162124][T12423] random: crng reseeded on system resumption [ 675.960270][T12437] trusted_key: encrypted_key: insufficient parameters specified [ 679.769581][T12444] lo speed is unknown, defaulting to 1000 [ 680.078180][T12467] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1778'. [ 682.453891][T12502] FAULT_INJECTION: forcing a failure. [ 682.453891][T12502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.510425][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.5.1790 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 682.510457][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 682.510468][T12502] Call Trace: [ 682.510476][T12502] [ 682.510485][T12502] dump_stack_lvl+0x189/0x250 [ 682.510514][T12502] ? __pfx____ratelimit+0x10/0x10 [ 682.510536][T12502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.510559][T12502] ? __pfx__printk+0x10/0x10 [ 682.510591][T12502] should_fail_ex+0x414/0x560 [ 682.510616][T12502] _copy_from_iter+0x1db/0x16f0 [ 682.510643][T12502] ? rcu_is_watching+0x15/0xb0 [ 682.510667][T12502] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 682.510695][T12502] ? __pfx__copy_from_iter+0x10/0x10 [ 682.510718][T12502] ? __build_skb_around+0x257/0x3e0 [ 682.510739][T12502] ? netlink_sendmsg+0x642/0xb30 [ 682.510756][T12502] ? skb_put+0x11b/0x210 [ 682.510778][T12502] netlink_sendmsg+0x6b2/0xb30 [ 682.510806][T12502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.510833][T12502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.510852][T12502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.510871][T12502] __sock_sendmsg+0x21c/0x270 [ 682.510897][T12502] ____sys_sendmsg+0x505/0x830 [ 682.510923][T12502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.510952][T12502] ? import_iovec+0x74/0xa0 [ 682.510978][T12502] ___sys_sendmsg+0x21f/0x2a0 [ 682.510999][T12502] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.511054][T12502] ? __fget_files+0x2a/0x420 [ 682.511074][T12502] ? __fget_files+0x3a0/0x420 [ 682.511106][T12502] __x64_sys_sendmsg+0x19b/0x260 [ 682.511128][T12502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.511158][T12502] ? __pfx_ksys_write+0x10/0x10 [ 682.511175][T12502] ? rcu_is_watching+0x15/0xb0 [ 682.511203][T12502] ? do_syscall_64+0xbe/0x3b0 [ 682.511230][T12502] do_syscall_64+0xfa/0x3b0 [ 682.511250][T12502] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.511271][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.511288][T12502] ? clear_bhb_loop+0x60/0xb0 [ 682.511309][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.511324][T12502] RIP: 0033:0x7fc90b18e929 [ 682.511339][T12502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.511353][T12502] RSP: 002b:00007fc90bff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.511372][T12502] RAX: ffffffffffffffda RBX: 00007fc90b3b5fa0 RCX: 00007fc90b18e929 [ 682.511384][T12502] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 682.511396][T12502] RBP: 00007fc90bff4090 R08: 0000000000000000 R09: 0000000000000000 [ 682.511407][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.511417][T12502] R13: 0000000000000000 R14: 00007fc90b3b5fa0 R15: 00007ffc021d6248 [ 682.511446][T12502] [ 684.842219][T12518] NILFS (nullb0): couldn't find nilfs on the device [ 685.706847][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.713282][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.530916][ T30] audit: type=1326 audit(1751562774.969:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 686.565819][ T30] audit: type=1326 audit(1751562774.999:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 686.607823][ T30] audit: type=1326 audit(1751562774.999:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 686.650282][ T30] audit: type=1326 audit(1751562774.999:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 686.682956][ T30] audit: type=1326 audit(1751562774.999:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 686.708473][ T30] audit: type=1326 audit(1751562774.999:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 687.085703][ T30] audit: type=1326 audit(1751562774.999:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 687.108519][ T30] audit: type=1326 audit(1751562774.999:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 687.147524][ T30] audit: type=1326 audit(1751562774.999:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 690.132197][ T30] audit: type=1326 audit(1751562774.999:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12547 comm="syz.0.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86498e929 code=0x7ffc0000 [ 690.281548][T12574] FAULT_INJECTION: forcing a failure. [ 690.281548][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.332768][T12574] CPU: 1 UID: 0 PID: 12574 Comm: syz.3.1811 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 690.332795][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.332806][T12574] Call Trace: [ 690.332815][T12574] [ 690.332823][T12574] dump_stack_lvl+0x189/0x250 [ 690.332851][T12574] ? __pfx____ratelimit+0x10/0x10 [ 690.332873][T12574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.332894][T12574] ? __pfx__printk+0x10/0x10 [ 690.332924][T12574] should_fail_ex+0x414/0x560 [ 690.332949][T12574] strncpy_from_user+0x36/0x290 [ 690.332972][T12574] getname_flags+0xf3/0x540 [ 690.332998][T12574] __x64_sys_renameat+0xa4/0xd0 [ 690.333021][T12574] do_syscall_64+0xfa/0x3b0 [ 690.333042][T12574] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.333063][T12574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.333086][T12574] ? clear_bhb_loop+0x60/0xb0 [ 690.333106][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.333123][T12574] RIP: 0033:0x7f120bb8e929 [ 690.333139][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.333153][T12574] RSP: 002b:00007f120c992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 690.333172][T12574] RAX: ffffffffffffffda RBX: 00007f120bdb5fa0 RCX: 00007f120bb8e929 [ 690.333185][T12574] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000003 [ 690.333197][T12574] RBP: 00007f120c992090 R08: 0000000000000000 R09: 0000000000000000 [ 690.333208][T12574] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 690.333219][T12574] R13: 0000000000000000 R14: 00007f120bdb5fa0 R15: 00007ffe4bf53368 [ 690.333248][T12574] [ 690.509709][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.788274][T12585] dummy0: entered promiscuous mode [ 690.819868][T12585] macsec1: entered promiscuous mode [ 690.932084][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 691.082116][ T10] usb 6-1: device descriptor read/64, error -71 [ 691.352100][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 691.492231][ T10] usb 6-1: device descriptor read/64, error -71 [ 691.646497][ T10] usb usb6-port1: attempt power cycle [ 693.452079][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 694.195149][ T10] usb 6-1: device descriptor read/8, error -71 [ 694.522168][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 694.835130][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 694.926243][T12610] FAULT_INJECTION: forcing a failure. [ 694.926243][T12610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.941945][T12610] CPU: 0 UID: 0 PID: 12610 Comm: syz.4.1821 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 694.941969][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.941983][T12610] Call Trace: [ 694.941990][T12610] [ 694.941998][T12610] dump_stack_lvl+0x189/0x250 [ 694.942025][T12610] ? __pfx____ratelimit+0x10/0x10 [ 694.942048][T12610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.942071][T12610] ? __pfx__printk+0x10/0x10 [ 694.942089][T12610] ? __might_fault+0xb0/0x130 [ 694.942120][T12610] should_fail_ex+0x414/0x560 [ 694.942145][T12610] _copy_from_user+0x2d/0xb0 [ 694.942169][T12610] ___sys_sendmsg+0x158/0x2a0 [ 694.942192][T12610] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.942249][T12610] ? __fget_files+0x2a/0x420 [ 694.942268][T12610] ? __fget_files+0x3a0/0x420 [ 694.942299][T12610] __x64_sys_sendmsg+0x19b/0x260 [ 694.942321][T12610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.942351][T12610] ? __pfx_ksys_write+0x10/0x10 [ 694.942367][T12610] ? rcu_is_watching+0x15/0xb0 [ 694.942395][T12610] ? do_syscall_64+0xbe/0x3b0 [ 694.942421][T12610] do_syscall_64+0xfa/0x3b0 [ 694.942442][T12610] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.942463][T12610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.942479][T12610] ? clear_bhb_loop+0x60/0xb0 [ 694.942500][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.942523][T12610] RIP: 0033:0x7f410538e929 [ 694.942538][T12610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.942553][T12610] RSP: 002b:00007f4106133038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.942572][T12610] RAX: ffffffffffffffda RBX: 00007f41055b5fa0 RCX: 00007f410538e929 [ 694.942585][T12610] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 694.942596][T12610] RBP: 00007f4106133090 R08: 0000000000000000 R09: 0000000000000000 [ 694.942607][T12610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.942617][T12610] R13: 0000000000000000 R14: 00007f41055b5fa0 R15: 00007ffd4b7080d8 [ 694.942645][T12610] [ 695.162621][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 695.223492][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1821'. [ 695.488181][T12619] bio_check_eod: 14 callbacks suppressed [ 695.488207][T12619] syz.5.1822: attempt to access beyond end of device [ 695.488207][T12619] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 695.509702][T12619] efs: cannot read volume header [ 699.534232][T12653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1830'. [ 701.573141][T12665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1834'. [ 703.682060][T12677] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 704.802223][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 704.992690][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 705.005230][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.029240][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 705.932151][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 706.456604][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.547769][ T24] usb 6-1: config 0 descriptor?? [ 707.742545][T12720] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 708.511567][T12725] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 708.636483][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 708.642594][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 708.655168][ T24] usb 6-1: USB disconnect, device number 20 [ 708.726349][T12729] 9pnet_fd: Insufficient options for proto=fd [ 708.766571][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 708.799292][T12729] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1853'. [ 710.106395][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 710.852413][ T1224] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 711.506453][T12755] netlink: 'syz.0.1862': attribute type 31 has an invalid length. [ 711.522124][ T1224] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 711.556755][ T1224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.607689][ T1224] usb 2-1: config 0 descriptor?? [ 711.796292][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 711.796337][ T30] audit: type=1800 audit(1751562800.149:251): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1862" name="bus" dev="overlay" ino=2196 res=0 errno=0 [ 712.765332][ T1224] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 713.607740][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.637450][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.892587][ T1224] gspca_cpia1: usb_control_msg 01, error -71 [ 714.705894][ T1224] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 714.732423][ T1224] usb 2-1: USB disconnect, device number 29 [ 714.773219][T12780] fuse: Unknown parameter 'roo moke' [ 714.963876][T12786] fuse: Bad value for 'fd' [ 716.572242][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1875'. [ 717.192766][ T5887] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 718.756996][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.176076][T12825] netlink: 'syz.3.1884': attribute type 10 has an invalid length. [ 720.258725][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1884'. [ 720.286130][ T5887] usb 6-1: string descriptor 0 read error: -71 [ 720.314765][ T5887] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 721.116343][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.133967][T12833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1888'. [ 721.163557][ T5887] usb 6-1: config 0 descriptor?? [ 721.183026][ T5887] usb 6-1: can't set config #0, error -71 [ 721.255062][ T5887] usb 6-1: USB disconnect, device number 21 [ 721.314291][T12825] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 721.355069][T12825] team0: Failed to send options change via netlink (err -105) [ 721.395690][T12825] team0: Port device geneve0 added [ 721.571459][T12838] vlan3: entered allmulticast mode [ 721.645643][T12848] 9pnet_fd: Insufficient options for proto=fd [ 721.657958][T12848] siw: device registration error -23 [ 722.629091][T12860] trusted_key: encrypted_key: key user:syz not found [ 724.225384][T12867] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 724.487830][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1899'. [ 725.395744][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1903'. [ 725.413006][T12888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1902'. [ 725.689329][T12896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 726.022156][ T5817] Bluetooth: hci4: command 0x0405 tx timeout [ 726.441902][T12901] netlink: 'syz.5.1905': attribute type 1 has an invalid length. [ 726.450278][T12901] netlink: 'syz.5.1905': attribute type 4 has an invalid length. [ 726.458538][T12901] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1905'. [ 727.267532][T12910] FAULT_INJECTION: forcing a failure. [ 727.267532][T12910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.277232][T12907] netlink: 'syz.5.1909': attribute type 1 has an invalid length. [ 727.282100][T12910] CPU: 0 UID: 0 PID: 12910 Comm: syz.4.1908 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 727.282123][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.282134][T12910] Call Trace: [ 727.282142][T12910] [ 727.282149][T12910] dump_stack_lvl+0x189/0x250 [ 727.282177][T12910] ? __pfx____ratelimit+0x10/0x10 [ 727.282199][T12910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.282221][T12910] ? __pfx__printk+0x10/0x10 [ 727.282251][T12910] should_fail_ex+0x414/0x560 [ 727.282275][T12910] _copy_to_user+0x31/0xb0 [ 727.282307][T12910] simple_read_from_buffer+0xe1/0x170 [ 727.282332][T12910] proc_fail_nth_read+0x1df/0x250 [ 727.282359][T12910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.282383][T12910] ? rw_verify_area+0x258/0x650 [ 727.282400][T12910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.282423][T12910] vfs_read+0x1fd/0x980 [ 727.282447][T12910] ? __pfx___mutex_lock+0x10/0x10 [ 727.282469][T12910] ? __pfx_vfs_read+0x10/0x10 [ 727.282488][T12910] ? __fget_files+0x2a/0x420 [ 727.282512][T12910] ? __fget_files+0x3a0/0x420 [ 727.282531][T12910] ? __fget_files+0x2a/0x420 [ 727.282559][T12910] ksys_read+0x145/0x250 [ 727.282580][T12910] ? __pfx_ksys_read+0x10/0x10 [ 727.282594][T12910] ? rcu_is_watching+0x15/0xb0 [ 727.282622][T12910] ? do_syscall_64+0xbe/0x3b0 [ 727.282647][T12910] do_syscall_64+0xfa/0x3b0 [ 727.282667][T12910] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.282687][T12910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.282703][T12910] ? clear_bhb_loop+0x60/0xb0 [ 727.282723][T12910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.282739][T12910] RIP: 0033:0x7f410538d33c [ 727.282754][T12910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 727.282767][T12910] RSP: 002b:00007f4106133030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.282785][T12910] RAX: ffffffffffffffda RBX: 00007f41055b5fa0 RCX: 00007f410538d33c [ 727.282798][T12910] RDX: 000000000000000f RSI: 00007f41061330a0 RDI: 0000000000000004 [ 727.282808][T12910] RBP: 00007f4106133090 R08: 0000000000000000 R09: 0000000000000000 [ 727.282819][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.282829][T12910] R13: 0000000000000000 R14: 00007f41055b5fa0 R15: 00007ffd4b7080d8 [ 727.282857][T12910] [ 727.602143][T12912] trusted_key: encrypted_key: key user:syz not found [ 728.122837][T12907] netlink: 'syz.5.1909': attribute type 1 has an invalid length. [ 728.170281][T12907] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1909'. [ 728.269658][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1911'. [ 729.211729][T12927] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 729.710022][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 729.785911][T12945] FAULT_INJECTION: forcing a failure. [ 729.785911][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 729.789973][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.850824][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.3.1919 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 729.850850][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.850861][T12945] Call Trace: [ 729.850868][T12945] [ 729.850876][T12945] dump_stack_lvl+0x189/0x250 [ 729.850905][T12945] ? __pfx____ratelimit+0x10/0x10 [ 729.850927][T12945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.850950][T12945] ? __pfx__printk+0x10/0x10 [ 729.850982][T12945] should_fail_ex+0x414/0x560 [ 729.851005][T12945] should_failslab+0xa8/0x100 [ 729.851027][T12945] __kmalloc_cache_noprof+0x70/0x3d0 [ 729.851045][T12945] ? sctp_add_bind_addr+0x8c/0x370 [ 729.851068][T12945] sctp_add_bind_addr+0x8c/0x370 [ 729.851101][T12945] sctp_copy_local_addr_list+0x30b/0x4e0 [ 729.851128][T12945] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 729.851150][T12945] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 729.851175][T12945] ? sctp_v6_is_any+0x64/0x80 [ 729.851193][T12945] ? sctp_copy_one_addr+0x93/0x360 [ 729.851219][T12945] sctp_bind_addr_copy+0xb3/0x3c0 [ 729.851243][T12945] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 729.851268][T12945] sctp_connect_new_asoc+0x2e0/0x690 [ 729.851290][T12945] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 729.851308][T12945] ? __local_bh_enable_ip+0x12d/0x1c0 [ 729.851336][T12945] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 729.851356][T12945] ? security_sctp_bind_connect+0x7e/0x2e0 [ 729.851379][T12945] sctp_sendmsg+0x155c/0x2810 [ 729.851409][T12945] ? __pfx_sctp_sendmsg+0x10/0x10 [ 729.851427][T12945] ? __lock_acquire+0xab9/0xd20 [ 729.851462][T12945] ? sock_rps_record_flow+0x19/0x410 [ 729.851486][T12945] ? inet_sendmsg+0x2f4/0x370 [ 729.851509][T12945] __sock_sendmsg+0x19c/0x270 [ 729.851533][T12945] __sys_sendto+0x3bd/0x520 [ 729.851553][T12945] ? __pfx___sys_sendto+0x10/0x10 [ 729.851567][T12945] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 729.851601][T12945] ? __fget_files+0x3a0/0x420 [ 729.851634][T12945] ? ksys_write+0x22a/0x250 [ 729.851655][T12945] ? __pfx_ksys_write+0x10/0x10 [ 729.851671][T12945] ? rcu_is_watching+0x15/0xb0 [ 729.851700][T12945] __x64_sys_sendto+0xde/0x100 [ 729.851721][T12945] do_syscall_64+0xfa/0x3b0 [ 729.851742][T12945] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.851763][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.851780][T12945] ? clear_bhb_loop+0x60/0xb0 [ 729.851801][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.851817][T12945] RIP: 0033:0x7f120bb8e929 [ 729.851836][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.851851][T12945] RSP: 002b:00007f120c992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 729.851870][T12945] RAX: ffffffffffffffda RBX: 00007f120bdb5fa0 RCX: 00007f120bb8e929 [ 729.851882][T12945] RDX: 000000000000ffc0 RSI: 0000200000847fff RDI: 0000000000000004 [ 729.851894][T12945] RBP: 00007f120c992090 R08: 000020000005ffe4 R09: 000000000000001c [ 729.851905][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.851915][T12945] R13: 0000000000000000 R14: 00007f120bdb5fa0 R15: 00007ffe4bf53368 [ 729.851945][T12945] [ 729.915289][T12942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.939841][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 733.772276][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.779750][T12942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.854746][ T5817] Bluetooth: hci2: command 0x0405 tx timeout [ 734.185697][T12964] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 734.185697][T12964] program syz.1.1922 not setting count and/or reply_len properly [ 734.744835][T12962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.131008][T12984] FAULT_INJECTION: forcing a failure. [ 735.131008][T12984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.190220][T12984] CPU: 1 UID: 0 PID: 12984 Comm: syz.5.1930 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 735.190247][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 735.190257][T12984] Call Trace: [ 735.190264][T12984] [ 735.190273][T12984] dump_stack_lvl+0x189/0x250 [ 735.190302][T12984] ? __pfx____ratelimit+0x10/0x10 [ 735.190324][T12984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.190346][T12984] ? __pfx__printk+0x10/0x10 [ 735.190370][T12984] ? __might_fault+0xb0/0x130 [ 735.190400][T12984] should_fail_ex+0x414/0x560 [ 735.190424][T12984] _copy_from_user+0x2d/0xb0 [ 735.190446][T12984] ? __pfx_do_get_feature_msr+0x10/0x10 [ 735.190464][T12984] msr_io+0x99/0x2c0 [ 735.190484][T12984] ? __pfx_msr_io+0x10/0x10 [ 735.190501][T12984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 735.190522][T12984] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 735.190544][T12984] kvm_arch_dev_ioctl+0x210/0x8f0 [ 735.190562][T12984] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 735.190578][T12984] ? smack_log+0xef/0x3f0 [ 735.190603][T12984] ? __pfx_smack_log+0x10/0x10 [ 735.190626][T12984] ? smk_access+0x14c/0x4e0 [ 735.190654][T12984] ? smk_tskacc+0x2fc/0x370 [ 735.190681][T12984] ? smack_file_ioctl+0x2a9/0x340 [ 735.190706][T12984] kvm_dev_ioctl+0x595/0x18e0 [ 735.190735][T12984] ? __fget_files+0x2a/0x420 [ 735.190756][T12984] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 735.190776][T12984] ? __fget_files+0x2a/0x420 [ 735.190800][T12984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 735.190821][T12984] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 735.190843][T12984] __se_sys_ioctl+0xfc/0x170 [ 735.190865][T12984] do_syscall_64+0xfa/0x3b0 [ 735.190885][T12984] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.190906][T12984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.190923][T12984] ? clear_bhb_loop+0x60/0xb0 [ 735.190943][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.190959][T12984] RIP: 0033:0x7fc90b18e929 [ 735.190975][T12984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.190990][T12984] RSP: 002b:00007fc90bff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.191008][T12984] RAX: ffffffffffffffda RBX: 00007fc90b3b5fa0 RCX: 00007fc90b18e929 [ 735.191021][T12984] RDX: 0000200000000340 RSI: 00000000c008ae88 RDI: 0000000000000004 [ 735.191033][T12984] RBP: 00007fc90bff4090 R08: 0000000000000000 R09: 0000000000000000 [ 735.191045][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.191055][T12984] R13: 0000000000000000 R14: 00007fc90b3b5fa0 R15: 00007ffc021d6248 [ 735.191084][T12984] [ 736.419190][T13005] FAULT_INJECTION: forcing a failure. [ 736.419190][T13005] name failslab, interval 1, probability 0, space 0, times 0 [ 736.449599][T13005] CPU: 1 UID: 0 PID: 13005 Comm: syz.3.1940 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 736.449625][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 736.449636][T13005] Call Trace: [ 736.449643][T13005] [ 736.449651][T13005] dump_stack_lvl+0x189/0x250 [ 736.449678][T13005] ? __pfx____ratelimit+0x10/0x10 [ 736.449700][T13005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 736.449721][T13005] ? __pfx__printk+0x10/0x10 [ 736.449743][T13005] ? __pfx___might_resched+0x10/0x10 [ 736.449762][T13005] ? fs_reclaim_acquire+0x7d/0x100 [ 736.449787][T13005] should_fail_ex+0x414/0x560 [ 736.449809][T13005] should_failslab+0xa8/0x100 [ 736.449830][T13005] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 736.449849][T13005] ? kobject_set_name_vargs+0x61/0x110 [ 736.449876][T13005] kstrdup+0x42/0x100 [ 736.449899][T13005] kobject_set_name_vargs+0x61/0x110 [ 736.449922][T13005] dev_set_name+0xd4/0x120 [ 736.449949][T13005] ? __pfx_dev_set_name+0x10/0x10 [ 736.449965][T13005] ? down_write+0x162/0x1f0 [ 736.449989][T13005] ? do_raw_spin_unlock+0x122/0x240 [ 736.450010][T13005] ib_register_device+0x12c/0x1380 [ 736.450040][T13005] ? __pfx_ib_register_device+0x10/0x10 [ 736.450059][T13005] ? xas_start+0x3d4/0x770 [ 736.450079][T13005] ? xa_load+0x60/0x210 [ 736.450106][T13005] ? xa_load+0x60/0x210 [ 736.450126][T13005] ? xa_load+0x60/0x210 [ 736.450144][T13005] ? xa_load+0x60/0x210 [ 736.450166][T13005] ? xa_load+0x1ea/0x210 [ 736.450201][T13005] ? __raw_spin_lock_init+0x45/0x100 [ 736.450220][T13005] siw_newlink+0x903/0xd70 [ 736.450242][T13005] nldev_newlink+0x4a2/0x5a0 [ 736.450261][T13005] ? __pfx_nldev_newlink+0x10/0x10 [ 736.450379][T13005] ? __lock_acquire+0xab9/0xd20 [ 736.450415][T13005] ? cap_capable+0x11f/0x460 [ 736.450434][T13005] ? safesetid_security_capable+0xa9/0x1a0 [ 736.450455][T13005] ? bpf_lsm_capable+0x9/0x20 [ 736.450476][T13005] ? security_capable+0x7e/0x2e0 [ 736.450500][T13005] ? __pfx_nldev_newlink+0x10/0x10 [ 736.450532][T13005] rdma_nl_rcv+0x6ab/0x980 [ 736.450562][T13005] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 736.450578][T13005] ? __lock_acquire+0xab9/0xd20 [ 736.450620][T13005] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.450636][T13005] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.450660][T13005] netlink_unicast+0x75b/0x8d0 [ 736.450694][T13005] netlink_sendmsg+0x805/0xb30 [ 736.450722][T13005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.450748][T13005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.450767][T13005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.450785][T13005] __sock_sendmsg+0x21c/0x270 [ 736.450810][T13005] ____sys_sendmsg+0x505/0x830 [ 736.450835][T13005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.450864][T13005] ? import_iovec+0x74/0xa0 [ 736.450890][T13005] ___sys_sendmsg+0x21f/0x2a0 [ 736.450912][T13005] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.450970][T13005] ? __fget_files+0x2a/0x420 [ 736.450988][T13005] ? __fget_files+0x3a0/0x420 [ 736.451021][T13005] __x64_sys_sendmsg+0x19b/0x260 [ 736.451044][T13005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.451075][T13005] ? __pfx_ksys_write+0x10/0x10 [ 736.451091][T13005] ? rcu_is_watching+0x15/0xb0 [ 736.451118][T13005] ? do_syscall_64+0xbe/0x3b0 [ 736.451144][T13005] do_syscall_64+0xfa/0x3b0 [ 736.451164][T13005] ? lockdep_hardirqs_on+0x9c/0x150 [ 736.451185][T13005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.451202][T13005] ? clear_bhb_loop+0x60/0xb0 [ 736.451223][T13005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.451238][T13005] RIP: 0033:0x7f120bb8e929 [ 736.451255][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.451268][T13005] RSP: 002b:00007f120c992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.451286][T13005] RAX: ffffffffffffffda RBX: 00007f120bdb5fa0 RCX: 00007f120bb8e929 [ 736.451298][T13005] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 736.451308][T13005] RBP: 00007f120c992090 R08: 0000000000000000 R09: 0000000000000000 [ 736.451319][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.451328][T13005] R13: 0000000000000000 R14: 00007f120bdb5fa0 R15: 00007ffe4bf53368 [ 736.451356][T13005] [ 736.451431][T13005] siw: device registration error -12 [ 736.582127][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 736.823787][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.954353][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 738.083384][T13033] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1945'. [ 738.097393][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.195318][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 738.419947][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 738.489443][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.649323][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.225077][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.415016][ T9] usb 2-1: config 0 descriptor?? [ 739.437563][ T9] usb 2-1: can't set config #0, error -71 [ 739.481275][T13044] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1949'. [ 739.528444][ T9] usb 2-1: USB disconnect, device number 30 [ 739.559778][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1949'. [ 739.606874][T13044] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1949'. [ 739.739056][T13054] FAULT_INJECTION: forcing a failure. [ 739.739056][T13054] name failslab, interval 1, probability 0, space 0, times 0 [ 740.146654][T13054] CPU: 1 UID: 0 PID: 13054 Comm: syz.0.1951 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 740.146680][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 740.146691][T13054] Call Trace: [ 740.146698][T13054] [ 740.146705][T13054] dump_stack_lvl+0x189/0x250 [ 740.146732][T13054] ? __pfx____ratelimit+0x10/0x10 [ 740.146754][T13054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.146775][T13054] ? __pfx__printk+0x10/0x10 [ 740.146798][T13054] ? __pfx___might_resched+0x10/0x10 [ 740.146824][T13054] should_fail_ex+0x414/0x560 [ 740.146851][T13054] should_failslab+0xa8/0x100 [ 740.146874][T13054] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 740.146895][T13054] ? __alloc_skb+0x112/0x2d0 [ 740.146917][T13054] __alloc_skb+0x112/0x2d0 [ 740.146938][T13054] netlink_sendmsg+0x5c6/0xb30 [ 740.146965][T13054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.146991][T13054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.147009][T13054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.147027][T13054] __sock_sendmsg+0x21c/0x270 [ 740.147054][T13054] ____sys_sendmsg+0x505/0x830 [ 740.147077][T13054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.147105][T13054] ? import_iovec+0x74/0xa0 [ 740.147132][T13054] ___sys_sendmsg+0x21f/0x2a0 [ 740.147154][T13054] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.147208][T13054] ? __fget_files+0x2a/0x420 [ 740.147235][T13054] ? __fget_files+0x3a0/0x420 [ 740.147266][T13054] __x64_sys_sendmsg+0x19b/0x260 [ 740.147287][T13054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.147316][T13054] ? __pfx_ksys_write+0x10/0x10 [ 740.147339][T13054] ? do_syscall_64+0xbe/0x3b0 [ 740.147365][T13054] do_syscall_64+0xfa/0x3b0 [ 740.147387][T13054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.147401][T13054] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 740.147417][T13054] ? clear_bhb_loop+0x60/0xb0 [ 740.147436][T13054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.147452][T13054] RIP: 0033:0x7fb86498e929 [ 740.147467][T13054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.147481][T13054] RSP: 002b:00007fb8657bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.147501][T13054] RAX: ffffffffffffffda RBX: 00007fb864bb5fa0 RCX: 00007fb86498e929 [ 740.147513][T13054] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 740.147523][T13054] RBP: 00007fb8657bb090 R08: 0000000000000000 R09: 0000000000000000 [ 740.147533][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.147543][T13054] R13: 0000000000000000 R14: 00007fb864bb5fa0 R15: 00007ffcaa948048 [ 740.147570][T13054] [ 740.935524][T13065] 9p: Unknown access argument `: -22 [ 741.449041][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 742.192200][ T10] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 742.327460][T13083] kAFS: unable to lookup cell 'sy@0' [ 742.405280][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 742.422545][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.470888][ T10] usb 2-1: config 0 descriptor?? [ 742.487982][ T10] cp210x 2-1:0.0: cp210x converter detected [ 743.562092][T13093] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 743.682303][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1956'. [ 744.317325][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 744.330277][ T10] usb 2-1: USB disconnect, device number 31 [ 744.343647][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 744.395844][ T10] cp210x 2-1:0.0: device disconnected [ 744.426663][T13095] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 744.789050][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 744.893774][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 744.906301][T13103] team0 (unregistering): Port device team_slave_0 removed [ 744.919702][T13103] team0 (unregistering): Failed to send options change via netlink (err -105) [ 744.930233][T13103] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 744.946891][T13103] team0 (unregistering): Port device team_slave_1 removed [ 747.042526][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 747.145123][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.398618][T13136] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 747.512160][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.623995][T13132] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 747.630018][T13132] [U] J"—e:ÀÆ" [ 747.718066][T13134] lo speed is unknown, defaulting to 1000 [ 747.801101][T13143] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1976'. [ 747.826169][T13143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1976'. [ 749.132135][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 754.260442][T13181] FAULT_INJECTION: forcing a failure. [ 754.260442][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.341062][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.4.1986 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 754.341088][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 754.341099][T13181] Call Trace: [ 754.341107][T13181] [ 754.341115][T13181] dump_stack_lvl+0x189/0x250 [ 754.341142][T13181] ? __pfx____ratelimit+0x10/0x10 [ 754.341165][T13181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.341187][T13181] ? __pfx__printk+0x10/0x10 [ 754.341204][T13181] ? __might_fault+0xb0/0x130 [ 754.341234][T13181] should_fail_ex+0x414/0x560 [ 754.341259][T13181] _copy_from_user+0x2d/0xb0 [ 754.341283][T13181] ___sys_recvmsg+0x12e/0x510 [ 754.341309][T13181] ? __pfx____sys_recvmsg+0x10/0x10 [ 754.341355][T13181] ? __fget_files+0x3a0/0x420 [ 754.341387][T13181] __x64_sys_recvmsg+0x198/0x260 [ 754.341409][T13181] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 754.341438][T13181] ? __pfx_ksys_write+0x10/0x10 [ 754.341455][T13181] ? rcu_is_watching+0x15/0xb0 [ 754.341482][T13181] ? do_syscall_64+0xbe/0x3b0 [ 754.341508][T13181] do_syscall_64+0xfa/0x3b0 [ 754.341528][T13181] ? lockdep_hardirqs_on+0x9c/0x150 [ 754.341549][T13181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.341565][T13181] ? clear_bhb_loop+0x60/0xb0 [ 754.341585][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.341601][T13181] RIP: 0033:0x7f410538e929 [ 754.341617][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.341631][T13181] RSP: 002b:00007f4106133038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 754.341650][T13181] RAX: ffffffffffffffda RBX: 00007f41055b5fa0 RCX: 00007f410538e929 [ 754.341663][T13181] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 754.341673][T13181] RBP: 00007f4106133090 R08: 0000000000000000 R09: 0000000000000000 [ 754.341684][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.341695][T13181] R13: 0000000000000000 R14: 00007f41055b5fa0 R15: 00007ffd4b7080d8 [ 754.341723][T13181] [ 754.616618][T13185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 754.716367][T13188] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1985'. [ 754.726220][T13188] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.1985'. [ 755.221693][T13185] overlayfs: failed to set xattr on upper [ 755.255511][T13185] overlayfs: ...falling back to redirect_dir=nofollow. [ 755.290527][T13185] overlayfs: ...falling back to index=off. [ 755.333964][T13185] overlayfs: ...falling back to uuid=null. [ 755.470369][T13199] FAULT_INJECTION: forcing a failure. [ 755.470369][T13199] name failslab, interval 1, probability 0, space 0, times 0 [ 755.498534][T13199] CPU: 1 UID: 0 PID: 13199 Comm: syz.5.1992 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 755.498559][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.498569][T13199] Call Trace: [ 755.498576][T13199] [ 755.498585][T13199] dump_stack_lvl+0x189/0x250 [ 755.498614][T13199] ? __pfx____ratelimit+0x10/0x10 [ 755.498636][T13199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.498658][T13199] ? __pfx__printk+0x10/0x10 [ 755.498680][T13199] ? __pfx___might_resched+0x10/0x10 [ 755.498701][T13199] ? fs_reclaim_acquire+0x7d/0x100 [ 755.498726][T13199] should_fail_ex+0x414/0x560 [ 755.498750][T13199] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 755.498770][T13199] should_failslab+0xa8/0x100 [ 755.498792][T13199] __kvmalloc_node_noprof+0x161/0x5f0 [ 755.498812][T13199] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 755.498831][T13199] ? alloc_netdev_mqs+0xc36/0x11e0 [ 755.498866][T13199] alloc_netdev_mqs+0xc9e/0x11e0 [ 755.498894][T13199] rtnl_create_link+0x31f/0xd10 [ 755.498922][T13199] rtnl_newlink_create+0x25c/0xb00 [ 755.498945][T13199] ? __lock_acquire+0xab9/0xd20 [ 755.498971][T13199] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 755.498986][T13199] ? rtnl_newlink+0x8db/0x1c70 [ 755.499004][T13199] ? __pfx___mutex_lock+0x10/0x10 [ 755.499037][T13199] ? ns_capable+0x8a/0xf0 [ 755.499064][T13199] rtnl_newlink+0x16d6/0x1c70 [ 755.499081][T13199] ? netlink_sendmsg+0x805/0xb30 [ 755.499112][T13199] ? __pfx_rtnl_newlink+0x10/0x10 [ 755.499153][T13199] ? kasan_quarantine_put+0xdd/0x220 [ 755.499170][T13199] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.499197][T13199] ? nlmon_xmit+0xb0/0x100 [ 755.499217][T13199] ? kmem_cache_free+0x18f/0x400 [ 755.499243][T13199] ? __local_bh_enable_ip+0x12d/0x1c0 [ 755.499265][T13199] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.499287][T13199] ? __local_bh_enable_ip+0x12d/0x1c0 [ 755.499309][T13199] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 755.499334][T13199] ? __dev_queue_xmit+0x27e/0x3a70 [ 755.499354][T13199] ? __dev_queue_xmit+0x27e/0x3a70 [ 755.499372][T13199] ? __dev_queue_xmit+0x27e/0x3a70 [ 755.499393][T13199] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 755.499418][T13199] ? __lock_acquire+0xab9/0xd20 [ 755.499465][T13199] ? __pfx_rtnl_newlink+0x10/0x10 [ 755.499481][T13199] rtnetlink_rcv_msg+0x7cf/0xb70 [ 755.499508][T13199] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 755.499530][T13199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 755.499554][T13199] ? ref_tracker_free+0x63a/0x7d0 [ 755.499570][T13199] ? __copy_skb_header+0xa7/0x550 [ 755.499590][T13199] ? __pfx_ref_tracker_free+0x10/0x10 [ 755.499609][T13199] ? __skb_clone+0x63/0x7a0 [ 755.499633][T13199] netlink_rcv_skb+0x208/0x470 [ 755.499652][T13199] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 755.499676][T13199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 755.499708][T13199] ? netlink_deliver_tap+0x2e/0x1b0 [ 755.499724][T13199] ? netlink_deliver_tap+0x2e/0x1b0 [ 755.499744][T13199] netlink_unicast+0x75b/0x8d0 [ 755.499779][T13199] netlink_sendmsg+0x805/0xb30 [ 755.499806][T13199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.499831][T13199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 755.499855][T13199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.499871][T13199] __sock_sendmsg+0x21c/0x270 [ 755.499896][T13199] ____sys_sendmsg+0x505/0x830 [ 755.499922][T13199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.499950][T13199] ? import_iovec+0x74/0xa0 [ 755.499976][T13199] ___sys_sendmsg+0x21f/0x2a0 [ 755.499997][T13199] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.500057][T13199] ? __fget_files+0x2a/0x420 [ 755.500075][T13199] ? __fget_files+0x3a0/0x420 [ 755.500107][T13199] __x64_sys_sendmsg+0x19b/0x260 [ 755.500129][T13199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 755.500157][T13199] ? __pfx_ksys_write+0x10/0x10 [ 755.500173][T13199] ? rcu_is_watching+0x15/0xb0 [ 755.500201][T13199] ? do_syscall_64+0xbe/0x3b0 [ 755.500226][T13199] do_syscall_64+0xfa/0x3b0 [ 755.500246][T13199] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.500267][T13199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.500284][T13199] ? clear_bhb_loop+0x60/0xb0 [ 755.500304][T13199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.500320][T13199] RIP: 0033:0x7fc90b18e929 [ 755.500336][T13199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.500351][T13199] RSP: 002b:00007fc90bff4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.500369][T13199] RAX: ffffffffffffffda RBX: 00007fc90b3b5fa0 RCX: 00007fc90b18e929 [ 755.500382][T13199] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 755.500394][T13199] RBP: 00007fc90bff4090 R08: 0000000000000000 R09: 0000000000000000 [ 755.500404][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.500414][T13199] R13: 0000000000000000 R14: 00007fc90b3b5fa0 R15: 00007ffc021d6248 [ 755.500442][T13199] [ 756.237889][T13212] FAULT_INJECTION: forcing a failure. [ 756.237889][T13212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.251305][T13212] CPU: 1 UID: 0 PID: 13212 Comm: syz.5.1994 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 756.251329][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.251341][T13212] Call Trace: [ 756.251348][T13212] [ 756.251356][T13212] dump_stack_lvl+0x189/0x250 [ 756.251383][T13212] ? __pfx____ratelimit+0x10/0x10 [ 756.251406][T13212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.251427][T13212] ? __pfx__printk+0x10/0x10 [ 756.251446][T13212] ? fs_reclaim_acquire+0x7d/0x100 [ 756.251472][T13212] should_fail_ex+0x414/0x560 [ 756.251491][T13212] prepare_alloc_pages+0x213/0x610 [ 756.251513][T13212] __alloc_frozen_pages_noprof+0x123/0x370 [ 756.251534][T13212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 756.251556][T13212] ? irqentry_exit+0x74/0x90 [ 756.251574][T13212] ? policy_nodemask+0x27c/0x720 [ 756.251594][T13212] alloc_pages_mpol+0x232/0x4a0 [ 756.251613][T13212] alloc_pages_noprof+0xa9/0x190 [ 756.251629][T13212] get_free_pages_noprof+0xf/0x80 [ 756.251646][T13212] kasan_populate_vmalloc+0x33/0x1a0 [ 756.251664][T13212] alloc_vmap_area+0xd51/0x1490 [ 756.251689][T13212] ? __pfx_alloc_vmap_area+0x10/0x10 [ 756.251704][T13212] ? __kasan_kmalloc+0x93/0xb0 [ 756.251718][T13212] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 756.251734][T13212] ? __lock_acquire+0xab9/0xd20 [ 756.251749][T13212] ? __get_vm_area_node+0x13f/0x300 [ 756.251764][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.251781][T13212] __get_vm_area_node+0x1f8/0x300 [ 756.251801][T13212] __vmalloc_node_range_noprof+0x301/0x12f0 [ 756.251818][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.251846][T13212] ? trace_sched_exit_tp+0x38/0x120 [ 756.251861][T13212] ? __schedule+0x16c0/0x4cb0 [ 756.251880][T13212] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 756.251905][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.251920][T13212] __vmalloc_noprof+0xb1/0xf0 [ 756.251934][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.251952][T13212] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.251976][T13212] bpf_prog_alloc+0x3c/0x1a0 [ 756.252003][T13212] bpf_prog_load+0x735/0x1930 [ 756.252028][T13212] ? __pfx_bpf_prog_load+0x10/0x10 [ 756.252060][T13212] ? bpf_lsm_bpf+0x9/0x20 [ 756.252075][T13212] ? security_bpf+0x7e/0x300 [ 756.252094][T13212] __sys_bpf+0x5f1/0x860 [ 756.252110][T13212] ? __pfx___sys_bpf+0x10/0x10 [ 756.252147][T13212] __x64_sys_bpf+0x7c/0x90 [ 756.252161][T13212] do_syscall_64+0xfa/0x3b0 [ 756.252179][T13212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.252190][T13212] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 756.252202][T13212] ? clear_bhb_loop+0x60/0xb0 [ 756.252218][T13212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.252230][T13212] RIP: 0033:0x7fc90b18e929 [ 756.252242][T13212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.252253][T13212] RSP: 002b:00007fc90bfb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.252267][T13212] RAX: ffffffffffffffda RBX: 00007fc90b3b6160 RCX: 00007fc90b18e929 [ 756.252276][T13212] RDX: 0000000000000082 RSI: 0000200000000300 RDI: 0000000000000005 [ 756.252284][T13212] RBP: 00007fc90bfb2090 R08: 0000000000000000 R09: 0000000000000000 [ 756.252292][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.252300][T13212] R13: 0000000000000000 R14: 00007fc90b3b6160 R15: 00007ffc021d6248 [ 756.252320][T13212] [ 756.588425][T13212] syz.5.1994: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 756.606120][T13212] CPU: 1 UID: 0 PID: 13212 Comm: syz.5.1994 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 756.606144][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.606155][T13212] Call Trace: [ 756.606162][T13212] [ 756.606170][T13212] dump_stack_lvl+0x189/0x250 [ 756.606204][T13212] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 756.606226][T13212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.606249][T13212] ? __pfx__printk+0x10/0x10 [ 756.606267][T13212] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 756.606292][T13212] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 756.606324][T13212] warn_alloc+0x214/0x310 [ 756.606345][T13212] ? kasan_quarantine_put+0xdd/0x220 [ 756.606363][T13212] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.606387][T13212] ? __pfx_warn_alloc+0x10/0x10 [ 756.606410][T13212] ? kfree+0x18e/0x440 [ 756.606425][T13212] ? __get_vm_area_node+0x13f/0x300 [ 756.606447][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.606469][T13212] ? __get_vm_area_node+0x211/0x300 [ 756.606496][T13212] __vmalloc_node_range_noprof+0x326/0x12f0 [ 756.606535][T13212] ? trace_sched_exit_tp+0x38/0x120 [ 756.606554][T13212] ? __schedule+0x16c0/0x4cb0 [ 756.606581][T13212] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 756.606614][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.606632][T13212] __vmalloc_noprof+0xb1/0xf0 [ 756.606652][T13212] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.606676][T13212] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 756.606702][T13212] bpf_prog_alloc+0x3c/0x1a0 [ 756.606733][T13212] bpf_prog_load+0x735/0x1930 [ 756.606766][T13212] ? __pfx_bpf_prog_load+0x10/0x10 [ 756.606810][T13212] ? bpf_lsm_bpf+0x9/0x20 [ 756.606830][T13212] ? security_bpf+0x7e/0x300 [ 756.606854][T13212] __sys_bpf+0x5f1/0x860 [ 756.606876][T13212] ? __pfx___sys_bpf+0x10/0x10 [ 756.606926][T13212] __x64_sys_bpf+0x7c/0x90 [ 756.606946][T13212] do_syscall_64+0xfa/0x3b0 [ 756.606968][T13212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.606984][T13212] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 756.607000][T13212] ? clear_bhb_loop+0x60/0xb0 [ 756.607021][T13212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.607037][T13212] RIP: 0033:0x7fc90b18e929 [ 756.607053][T13212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.607067][T13212] RSP: 002b:00007fc90bfb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 756.607085][T13212] RAX: ffffffffffffffda RBX: 00007fc90b3b6160 RCX: 00007fc90b18e929 [ 756.607099][T13212] RDX: 0000000000000082 RSI: 0000200000000300 RDI: 0000000000000005 [ 756.607110][T13212] RBP: 00007fc90bfb2090 R08: 0000000000000000 R09: 0000000000000000 [ 756.607121][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.607131][T13212] R13: 0000000000000000 R14: 00007fc90b3b6160 R15: 00007ffc021d6248 [ 756.607160][T13212] [ 756.607831][T13212] Mem-Info: [ 756.907036][T13212] active_anon:3128 inactive_anon:8137 isolated_anon:0 [ 756.907036][T13212] active_file:26563 inactive_file:34971 isolated_file:0 [ 756.907036][T13212] unevictable:770 dirty:269 writeback:0 [ 756.907036][T13212] slab_reclaimable:10882 slab_unreclaimable:105032 [ 756.907036][T13212] mapped:34179 shmem:7084 pagetables:1271 [ 756.907036][T13212] sec_pagetables:0 bounce:0 [ 756.907036][T13212] kernel_misc_reclaimable:0 [ 756.907036][T13212] free:1300080 free_pcp:10720 free_cma:0 [ 756.955512][T13212] Node 0 active_anon:12512kB inactive_anon:32548kB active_file:106004kB inactive_file:139884kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:136676kB dirty:1076kB writeback:0kB shmem:26800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12732kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 757.002323][T13212] Node 1 active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 757.034760][T13212] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 757.069136][T13212] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 757.074996][T13212] Node 0 DMA32 free:1262684kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12508kB inactive_anon:32660kB active_file:104324kB inactive_file:139744kB unevictable:1544kB writepending:1084kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:37024kB local_pcp:23664kB free_cma:0kB [ 757.118420][T13212] lowmem_reserve[]: 0 0 1 1 1 [ 757.124106][T13212] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 757.162242][T13212] lowmem_reserve[]: 0 0 0 0 0 [ 757.167071][T13212] Node 1 Normal free:3921928kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 757.253180][T13212] lowmem_reserve[]: 0 0 0 0 0 [ 757.258982][T13212] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 757.273929][T13212] Node 0 DMA32: 516*4kB (UME) 1008*8kB (UME) 1196*16kB (UM) 1397*32kB (UME) 536*64kB (UM) 275*128kB (UME) 131*256kB (UME) 74*512kB (UME) 34*1024kB (ME) 8*2048kB (UME) 243*4096kB (UM) = 1261424kB [ 757.296691][T13212] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 757.310197][T13212] Node 1 Normal: 168*4kB (UME) 49*8kB (UME) 26*16kB (UE) 222*32kB (UE) 80*64kB (UME) 25*128kB (UME) 6*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 4*2048kB (UME) 950*4096kB (M) = 3921928kB [ 757.330509][T13212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 757.340314][T13212] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 757.410761][T13212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 757.421036][T13212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 757.430431][T13212] 65784 total pagecache pages [ 757.435229][T13212] 0 pages in swap cache [ 757.439461][T13212] Free swap = 124996kB [ 757.444270][T13212] Total swap = 124996kB [ 757.449532][T13212] 2097051 pages RAM [ 757.454359][T13212] 0 pages HighMem/MovableOnly [ 757.459125][T13212] 424582 pages reserved [ 757.463371][T13212] 0 pages cma reserved [ 758.160810][T13223] input: syz0 as /devices/virtual/input/input13 [ 758.206570][T13225] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 758.379277][T13227] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 758.535620][T13231] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 760.673541][T13250] ================================================================== [ 760.681660][T13250] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 760.689294][T13250] Read of size 1 at addr ffff8880572be430 by task syz.0.2003/13250 [ 760.697177][T13250] [ 760.699493][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.0.2003 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 760.699511][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.699520][T13250] Call Trace: [ 760.699526][T13250] [ 760.699533][T13250] dump_stack_lvl+0x189/0x250 [ 760.699556][T13250] ? __virt_addr_valid+0x1c8/0x5c0 [ 760.699568][T13250] ? rcu_is_watching+0x15/0xb0 [ 760.699584][T13250] ? __kasan_check_byte+0x12/0x40 [ 760.699600][T13250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.699617][T13250] ? rcu_is_watching+0x15/0xb0 [ 760.699634][T13250] ? lock_release+0x4b/0x3e0 [ 760.699652][T13250] ? __virt_addr_valid+0x1c8/0x5c0 [ 760.699664][T13250] ? __virt_addr_valid+0x4a5/0x5c0 [ 760.699678][T13250] print_report+0xd2/0x2b0 [ 760.699693][T13250] ? rose_get_neigh+0x391/0x990 [ 760.699708][T13250] kasan_report+0x118/0x150 [ 760.699723][T13250] ? rose_get_neigh+0x391/0x990 [ 760.699741][T13250] rose_get_neigh+0x391/0x990 [ 760.699760][T13250] rose_connect+0x416/0x10a0 [ 760.699774][T13250] ? __pfx_smack_socket_connect+0x10/0x10 [ 760.699794][T13250] ? irqentry_exit+0x74/0x90 [ 760.699811][T13250] ? __pfx_rose_connect+0x10/0x10 [ 760.699825][T13250] ? tomoyo_socket_connect_permission+0x164/0x290 [ 760.699843][T13250] ? __might_fault+0xb0/0x130 [ 760.699859][T13250] ? bpf_lsm_socket_connect+0x9/0x20 [ 760.699875][T13250] __sys_connect+0x316/0x440 [ 760.699887][T13250] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 760.699902][T13250] ? __pfx___sys_connect+0x10/0x10 [ 760.699922][T13250] __x64_sys_connect+0x7a/0x90 [ 760.699935][T13250] do_syscall_64+0xfa/0x3b0 [ 760.699952][T13250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.699964][T13250] ? asm_sysvec_call_function_single+0x1a/0x20 [ 760.699977][T13250] ? clear_bhb_loop+0x60/0xb0 [ 760.699990][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.700002][T13250] RIP: 0033:0x7fb86498e929 [ 760.700014][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.700025][T13250] RSP: 002b:00007fb86579a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 760.700039][T13250] RAX: ffffffffffffffda RBX: 00007fb864bb6080 RCX: 00007fb86498e929 [ 760.700050][T13250] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 760.700059][T13250] RBP: 00007fb864a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 760.700067][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.700075][T13250] R13: 0000000000000000 R14: 00007fb864bb6080 R15: 00007ffcaa948048 [ 760.700091][T13250] [ 760.700096][T13250] [ 760.956257][T13250] Allocated by task 6296: [ 760.960568][T13250] kasan_save_track+0x3e/0x80 [ 760.965235][T13250] __kasan_kmalloc+0x93/0xb0 [ 760.969814][T13250] __kmalloc_cache_noprof+0x230/0x3d0 [ 760.975172][T13250] kernfs_fop_open+0x397/0xca0 [ 760.979921][T13250] do_dentry_open+0xdf3/0x1970 [ 760.984678][T13250] vfs_open+0x3b/0x340 [ 760.988735][T13250] path_openat+0x2ee5/0x3830 [ 760.993309][T13250] do_filp_open+0x1fa/0x410 [ 760.997799][T13250] do_sys_openat2+0x121/0x1c0 [ 761.002467][T13250] __x64_sys_openat+0x138/0x170 [ 761.007306][T13250] do_syscall_64+0xfa/0x3b0 [ 761.011795][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.017674][T13250] [ 761.019984][T13250] Freed by task 6296: [ 761.023945][T13250] kasan_save_track+0x3e/0x80 [ 761.028626][T13250] kasan_save_free_info+0x46/0x50 [ 761.033645][T13250] __kasan_slab_free+0x62/0x70 [ 761.038401][T13250] kfree+0x18e/0x440 [ 761.042285][T13250] kernfs_fop_release+0x160/0x190 [ 761.047302][T13250] __fput+0x44c/0xa70 [ 761.051272][T13250] fput_close_sync+0x119/0x200 [ 761.056021][T13250] __x64_sys_close+0x7f/0x110 [ 761.060679][T13250] do_syscall_64+0xfa/0x3b0 [ 761.065169][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.071044][T13250] [ 761.073351][T13250] The buggy address belongs to the object at ffff8880572be400 [ 761.073351][T13250] which belongs to the cache kmalloc-512 of size 512 [ 761.087386][T13250] The buggy address is located 48 bytes inside of [ 761.087386][T13250] freed 512-byte region [ffff8880572be400, ffff8880572be600) [ 761.101083][T13250] [ 761.103400][T13250] The buggy address belongs to the physical page: [ 761.109789][T13250] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x572bc [ 761.118531][T13250] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 761.127008][T13250] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 761.134536][T13250] page_type: f5(slab) [ 761.138512][T13250] raw: 00fff00000000040 ffff88801a441c80 ffffea00015b5700 dead000000000002 [ 761.147082][T13250] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 761.155654][T13250] head: 00fff00000000040 ffff88801a441c80 ffffea00015b5700 dead000000000002 [ 761.164307][T13250] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 761.172960][T13250] head: 00fff00000000002 ffffea00015caf01 00000000ffffffff 00000000ffffffff [ 761.181610][T13250] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 761.190256][T13250] page dumped because: kasan: bad access detected [ 761.196659][T13250] page_owner tracks the page as allocated [ 761.202357][T13250] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 75293042764, free_ts 19703558760 [ 761.223719][T13250] post_alloc_hook+0x240/0x2a0 [ 761.228473][T13250] get_page_from_freelist+0x21d5/0x22b0 [ 761.234014][T13250] __alloc_frozen_pages_noprof+0x181/0x370 [ 761.239818][T13250] alloc_pages_mpol+0x232/0x4a0 [ 761.244662][T13250] allocate_slab+0x8a/0x3b0 [ 761.249153][T13250] ___slab_alloc+0xbfc/0x1480 [ 761.253815][T13250] __kmalloc_noprof+0x305/0x4f0 [ 761.258651][T13250] fib6_info_alloc+0x30/0xf0 [ 761.263225][T13250] ip6_route_info_create+0x142/0x860 [ 761.268493][T13250] ip6_route_add+0x49/0x1b0 [ 761.272978][T13250] inet6_addr_add+0x6b2/0xc00 [ 761.277642][T13250] inet6_rtm_newaddr+0x93d/0xd20 [ 761.282564][T13250] rtnetlink_rcv_msg+0x7cf/0xb70 [ 761.287488][T13250] netlink_rcv_skb+0x208/0x470 [ 761.292238][T13250] netlink_unicast+0x75b/0x8d0 [ 761.296999][T13250] netlink_sendmsg+0x805/0xb30 [ 761.301744][T13250] page last free pid 1 tgid 1 stack trace: [ 761.307534][T13250] __free_frozen_pages+0xc65/0xe60 [ 761.312633][T13250] free_contig_range+0x1bd/0x4a0 [ 761.317552][T13250] destroy_args+0x7e/0x5d0 [ 761.321953][T13250] debug_vm_pgtable+0x412/0x450 [ 761.326787][T13250] do_one_initcall+0x233/0x820 [ 761.331532][T13250] do_initcall_level+0x137/0x1f0 [ 761.336459][T13250] do_initcalls+0x69/0xd0 [ 761.340782][T13250] kernel_init_freeable+0x3d9/0x570 [ 761.345968][T13250] kernel_init+0x1d/0x1d0 [ 761.350278][T13250] ret_from_fork+0x3fc/0x770 [ 761.354856][T13250] ret_from_fork_asm+0x1a/0x30 [ 761.359604][T13250] [ 761.361913][T13250] Memory state around the buggy address: [ 761.367541][T13250] ffff8880572be300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 761.375597][T13250] ffff8880572be380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 761.383650][T13250] >ffff8880572be400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.391695][T13250] ^ [ 761.397307][T13250] ffff8880572be480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.405353][T13250] ffff8880572be500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 761.413393][T13250] ================================================================== [ 761.421770][ T5929] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 761.425056][T13250] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 761.425075][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.0.2003 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 761.425098][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.425111][T13250] Call Trace: [ 761.425119][T13250] [ 761.425128][T13250] dump_stack_lvl+0x99/0x250 [ 761.425155][T13250] ? __asan_memcpy+0x40/0x70 [ 761.425173][T13250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.425195][T13250] ? __pfx__printk+0x10/0x10 [ 761.425218][T13250] panic+0x2db/0x790 [ 761.425243][T13250] ? __pfx_panic+0x10/0x10 [ 761.425266][T13250] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 761.425289][T13250] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 761.425309][T13250] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 761.425334][T13250] ? print_memory_metadata+0x314/0x400 [ 761.425356][T13250] ? rose_get_neigh+0x391/0x990 [ 761.425378][T13250] check_panic_on_warn+0x89/0xb0 [ 761.425398][T13250] ? rose_get_neigh+0x391/0x990 [ 761.425419][T13250] end_report+0x78/0x160 [ 761.425439][T13250] kasan_report+0x129/0x150 [ 761.425460][T13250] ? rose_get_neigh+0x391/0x990 [ 761.425486][T13250] rose_get_neigh+0x391/0x990 [ 761.425510][T13250] rose_connect+0x416/0x10a0 [ 761.425528][T13250] ? __pfx_smack_socket_connect+0x10/0x10 [ 761.425555][T13250] ? irqentry_exit+0x74/0x90 [ 761.425578][T13250] ? __pfx_rose_connect+0x10/0x10 [ 761.425597][T13250] ? tomoyo_socket_connect_permission+0x164/0x290 [ 761.425620][T13250] ? __might_fault+0xb0/0x130 [ 761.425643][T13250] ? bpf_lsm_socket_connect+0x9/0x20 [ 761.425665][T13250] __sys_connect+0x316/0x440 [ 761.425682][T13250] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 761.425703][T13250] ? __pfx___sys_connect+0x10/0x10 [ 761.425731][T13250] __x64_sys_connect+0x7a/0x90 [ 761.425747][T13250] do_syscall_64+0xfa/0x3b0 [ 761.425770][T13250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.425787][T13250] ? asm_sysvec_call_function_single+0x1a/0x20 [ 761.425804][T13250] ? clear_bhb_loop+0x60/0xb0 [ 761.425823][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.425840][T13250] RIP: 0033:0x7fb86498e929 [ 761.425859][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.425875][T13250] RSP: 002b:00007fb86579a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 761.425894][T13250] RAX: ffffffffffffffda RBX: 00007fb864bb6080 RCX: 00007fb86498e929 [ 761.425907][T13250] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 761.425919][T13250] RBP: 00007fb864a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 761.425931][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.425942][T13250] R13: 0000000000000000 R14: 00007fb864bb6080 R15: 00007ffcaa948048 [ 761.425962][T13250] [ 761.429549][T13250] Kernel Offset: disabled