last executing test programs: 24m6.302162641s ago: executing program 3 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x2000, {{@in6=@private1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in=@multicast2, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24m5.986000114s ago: executing program 3 (id=14): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0fff000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 24m5.130085725s ago: executing program 3 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000380)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d040012000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32e218d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 24m4.889615238s ago: executing program 3 (id=19): socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f0000000140), 0xffff, 0x2) tkill(0x0, 0x800083) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0xffffffffffffff89) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000580)}, {&(0x7f0000000680)="89d13d60d164984341914f4208e47d44d5c29d0ff2ce2104b661c513ae73e7b9f1e2a2d87970aad4e2514e007964af79d2515b2bdac47f19da11e6eb2ae4ad90f7a55b5a98c6c0b1be73d607d68f6039dc8cfa3b2d42211d069d12ecca7aca64", 0x60}], 0x3) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf7, 0x79, 0x48, 0x20, 0x458, 0x7005, 0x1a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x2}}]}}]}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, 0x0) 24m0.961227139s ago: executing program 3 (id=29): userfaultfd(0x801) (async) userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000810) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000810) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d462", 0x4, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d462", 0x4, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x321542, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f36db9d90800000f322e6764260f350f79330f8267333a99c4e17ff057ee66baf80cb8ace60d8aef66bafc0c66ed670f01c8f365f0812109000000f3260fa520", 0x40}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005680)}, 0x1000}], 0x1, 0xb, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x7fff, 0x100000000, 0x2, 0x0, 0x100000, 0x0, 0x2004c7, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 24m0.21529143s ago: executing program 3 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180003801400020073797a5f74756e"], 0x44}}, 0x0) 23m59.232220799s ago: executing program 32 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180003801400020073797a5f74756e"], 0x44}}, 0x0) 22m52.142346573s ago: executing program 0 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0xa000000) 22m51.984783023s ago: executing program 0 (id=248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}, {0x0}], 0x3, 0x0, 0x0, 0x4000040}], 0x1, 0x20040844) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 22m51.75791301s ago: executing program 0 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38220000030101040000000000000000020180080001000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24008040}, 0x20000800) r3 = dup(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x488e2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000900)=0xc, 0x4) sendmsg$can_raw(r6, &(0x7f0000000200)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000500)={&(0x7f0000000280)=@canfd={{0x2, 0x0, 0x1}, 0x35, 0x3, 0x0, 0x0, "dc90fa8d85a7ff3ae05c5a9528090a273202ebb493be1021775e0900df2f09f4eb36c54fcffa36f540dfbefee0191064f234263b0fa8ba3f76e418924eade8a5"}, 0x48}}, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x401, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x10, 0x5, r4, &(0x7f0000000240), 0x0, 0x0, 0x800}) r8 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) close(r8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x44000000) unshare(0x2c020400) r10 = getpid() syz_pidfd_open(r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) setns(r9, 0x10000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) 22m48.001702163s ago: executing program 0 (id=258): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000000c0)={0xecb6bcbdeffb5fd9, 0x17, 0x50, {0x50, 0x3b, "fc8c51a84c6fab6a95b70dac52e6631d6ee1d0296234ebdf023d2c738d4e39af11dcc3a9dc84ab97594baf578b849875b152fedf8eff0884f435fc06a41c6c3c75a67bdce35b76c28f07aafdd710"}}, 0x0}, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='cmdline\x00') lseek(r2, 0x20000000000a, 0x1) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0xa, [{}, {}, {}, {}, {0x0, 0x2}], 0x8, 0x0, 0x8}}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 22m47.714262654s ago: executing program 0 (id=259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 22m47.389764665s ago: executing program 0 (id=260): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e22, 0xd, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x29}, {0xe8, 0x2, 0x8, 0x10, 0x2, 0xb4, 0x9f4, 0x7fff}, {0x1, 0x80000000000005, 0x9, 0x3}, 0x57, 0x6e6bbe, 0x1, 0x1, 0x0, 0x3}, {{@in6=@private1, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x34ff, 0x3, 0x0, 0x3, 0x5, 0xfffffff8, 0x80}}, 0xe8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x2, 0x1, 0x7, "4aef"}, @main]}}, 0x0}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x0, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x2c}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22m46.558374699s ago: executing program 33 (id=260): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x4e22, 0xd, 0x4e24, 0x0, 0xa, 0x80, 0xa0, 0x29}, {0xe8, 0x2, 0x8, 0x10, 0x2, 0xb4, 0x9f4, 0x7fff}, {0x1, 0x80000000000005, 0x9, 0x3}, 0x57, 0x6e6bbe, 0x1, 0x1, 0x0, 0x3}, {{@in6=@private1, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x34ff, 0x3, 0x0, 0x3, 0x5, 0xfffffff8, 0x80}}, 0xe8) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_012={0x0, 0x1, 0x4}, @global=@item_012={0x2, 0x1, 0x7, "4aef"}, @main]}}, 0x0}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x0, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x2c}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m51.674052515s ago: executing program 5 (id=4266): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0xfffd, @rand_addr=0x64010101}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00'}) 1m51.53092992s ago: executing program 5 (id=4268): pipe(0x0) clock_gettime(0x0, &(0x7f0000003440)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mknod(0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x0, 0x2) write$FUSE_INTERRUPT(r3, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000380)=""/22, 0x16}, {0x0}], 0x6, &(0x7f0000000680)=""/28, 0x1c}, 0x7}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000cc0)=""/121, 0x79}], 0x4}, 0x8}], 0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000050024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) 1m51.29989619s ago: executing program 5 (id=4270): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x168, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_ACT={0x134, 0x3, [@m_connmark={0x130, 0x1, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x0, 0x2, 0x3, 0x951}, 0xd495}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x3, 0x5, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x1, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0xb8, 0x4}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x3, 0x4, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x1, 0xdcbb9f89ddd87698, 0xc, 0xffffffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x0, 0x8, 0x7af8c07e}, 0x566a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x427, 0xffffffffffffffff, 0x1, 0x3ff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xffffff7f, 0xffffffffffffffff, 0xa, 0x766}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x168}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1000000) 1m50.800825848s ago: executing program 5 (id=4271): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000003780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0xb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe5d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0xbdc, 0xe, 0xa, 0x400, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x444, 0x3, 0x0, 0x1, [{0x440, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3d0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "981cedce5550147d6bcce98b4049ca108ffea4417c2dc7b009e161f21fccd1e6ad42a69b6e730648617fdb640849527bb0149ab3d16e395f0297b956a56828dc466c594ab0113efdc45445362f663bd90c346aab3380502e2c287bb92ce6a85fe52af9db2c30eea64597d1545593a96ff0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "84a52a9fafce68002250c8efa0750704db847151801388661aaff8ee0a6ce619f9af246638e52bcf62630262dd4092a077db73eabee255e1ec391b893c84c78f9d7f8c871d338eb255b4b4bb33b25de352aa45afa3bb1a9eb9a98af4c230f70d3e6c2cdcabd3ed5fd86284acd43f108328ebe80ab40e39b2cb08aa8717f9dd50f590d1f9ed3e2e4a77f945e718702af8f8017c73b6d32a478c9381903438e68a6a9e69f369fbcf6b53e0bf438b476d4d2765c11d65c4243a5b09049c07c6126fd30dcdae58ce725271df51dccd3238b893e5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0xebfd0f2ef6df29b0}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf7}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x750, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffd}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x77, 0x1, "9affadb191aefc420a9d313b74bf54e43f3f298477826030e01292c297cd1c7408c606269eb741ea9f02e4df852f05d0224cba87104d680b92dbcc0acfc8db265d0f74c6ba10b494e4be7a6c9c33b570fc7d5a049732cba2accb7953a29802ec7ae6a7fdbb58a1c673a31e70e633c8f08dd1e1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x148, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "d931b27061d86fe993714f1599543cc5156c82b2d8fd66766a0ad44da6fb8216743a531e03057cf5b034dadfd5fca55a24ca8724d33235ec46b5fbbfc67679f7f96c27fae6555c6abebeaa7eb6e884ad92fed190e73082a12088a3af7872cc124c70863b413473a70d755a15769b164199c94ca712fa0a288c5565fa2f677092b961c58605673cdb4855eab28cdd41784aee93f95a4294922f77728dfcf724f600b4a1e743357d0731ae722fb660980beb3cf6ffa0e7921f7f19ba867335f6e2b12d8156730a299cd501d5765d61779665f145"}]}, @NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "9f7fbbd915006b2c4a5e9f0465c804947618e9403793daf12ab09e26f0f4623a4999331c20a73ad85b2b07c14330e997e8ca61e9d6f9c61268f54d2cd3344c24f26104003f0ba68ca2f716063865f17331edfc478f6a489a00b509a7d4311909a76de7f587063598c6768c06d0ab1047dfcb588dffcd311755e74ac47d33d3193a2b01f0403bba76e18ae4d379756f3a55f6d212fe38ae76908de7e69f72f001bba0f44f38b18a1cc0aa298b421ca684b0da1dc4cefffd0f9b275512acc0166cd5c3fef7c2792790c087941337045fa1a92a0126bcf10fb106383e79b49baf66e1"}]}]}, {0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb2, 0x1, "5aa6331f692c40462f7c33715160124e2cd6475b67f039201da3f7c2ae861eb34035f722e92242dba2bb88b8e43d67c4ad1525329104cac935e095b046bcf07d2e39ececaef61d1ac57c46cc81cab0271f95d0f165adbb3aa05d70c9e07f2254debbd94d7878ae3e77624b4c59cc2ec5fa754429d31ab9fc0bfd60a6a001e8589ad9168710df4f9884a3193820ec4c94b8201f70f150643b0fbef855b4a73b519a8aff87e777cb4f37fef1f703ec"}]}, @NFTA_SET_ELEM_KEY={0x308, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "62242abd15993cc3abd85996bec0ff0b3c1cf163ffeb8634f7840c0dbb6ddd32cc0b17005d713ce020e8a32a43602cf5e716bf68ef5892c1c05c8ca7f473db76161c43de54cd06386dc7a92c19cbd46f5cf92e93e181136899237286a92869bc0faa1c0816089bb00951e7bf8b2db2f630c6e87317df69b58de79a65677e96fc71343762f3911e4845d21d139611abcb5e1f9d23a885d4f0082a5fdb119d7ca2d304c3730f954f152cce263a7a71e450d78f4aa5da170252cc1d1292a2df4caccb7a0793556ab0e226cca3"}, @NFTA_DATA_VALUE={0xda, 0x1, "3d3489be79794a9542f76368f2119dd8caeefca1052eaacc9dd96536e7b3e2e0b5755f38c97702b31f56f1db82699ccbb813a94456311d22bdac8f6f52b821e927f22aba24356419bd841aac2b96c20a33de6b8a90ac0dc80bbc106d5d160833f2c709100e78751e999c3edaa942ccac6cdc88cd7330e6bdee145455f589598ed927b48ec213e3619c14d672c3436b5c58bc3ed1c08ee5e8ca9d671aed607b79cd72fb157fb6f6573c7051ebcb74e17263373ad4292e968bd4420255a19eb49f68f6e6e912445f7e3cf50736d8ed4e86e7d782610f49"}, @NFTA_DATA_VALUE={0xe4, 0x1, "dc67b18268b50a2f00137d4f18bad431978ca9cd1e5ccb6f8b3f22e89d0f77405e19ed093c43e81377be8e9eff191b80de93d622218a8e56ec3e73c0da6bca7e22ee1d9a39718efd8a5ec884e225e945867f3785f9ed954b845d3023d290484240be785bc30dc8507fa8cba7214593063aa1f020da1ff616fde8cc4a3547abd2bc04937ff080fc4f70df1613140878c15efd90c41d48059c3f48225cd6851cecd580aaa7a42616f9406c624f2fb7e25c9cc1ec7eb8963c4dca86bebbbb32d29771cf7f874dbbbb2a57f48569f4d858d4f71f2c8691ced06d525fd7defa67b4b2"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x37, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1e73}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8050) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x25, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xb2) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_usb_connect(0x3, 0x6f2, &(0x7f00000013c0)={{0x12, 0x1, 0x201, 0xd3, 0xe2, 0xae, 0x8, 0x1557, 0xa80, 0xdb2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e0, 0x3, 0x7, 0xc, 0x40, 0x7e, [{{0x9, 0x4, 0x2, 0x1, 0xd, 0x81, 0x8, 0xdc, 0x5, [@generic={0xa7, 0x12, "21027d1babb4ed793f5f7440de46397c80cf1342fb42b3c7619e55724c62bb4e6b6c2a5d8f20fbbe263415beaa1470e35060822f9f7b40d5dffe2d33dab366b9464bd665bd91250545b6ea00531e4e9adedee5c77e717a39415ef4e46dc8d3ba9a9bc34ca8dd076cd12dff8aa58ef898d50ec6d2ac4f3bfedad21676a5a204f44b79915960ad42decef479c61145ce9a874ac9c107593f88c31276c40020a7f0669cd96fcb"}], [{{0x9, 0x5, 0xf, 0x1, 0x10, 0xfb, 0x2, 0x3, [@generic={0xb, 0x0, "fa109759d0ab472bd7"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xd, 0x7, 0x13, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}, @generic={0x40, 0x26, "d734cfc8052c4365ced2fb0aa25ccdcd0f70849eea14f605b0668fc561d605df853367fa4e484f79d5c2eba79b02c1b3ca336208b72aed78d1999ec6a3b4"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x0, 0x4, 0x10}}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x6, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x63, 0x42, 0x80}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0xc4, 0x3, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7e55}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x0, 0x6, 0xcc, [@generic={0xd9, 0x21, "4f21374becdd49ab7a32e99c36739576fc7d16dc57919b330423998fe6c03066d4b7a04de38e50dadc782a5c4e3334e911d68a96c75ebb6e72898af4df1e21b7556585d2d5a1664bd8fe3be492c0fdede8234a602349d71c58357a892b01485f5956dd3797479796bb1ede2c98007941749468cf3400cf3c610cc37f7c4964aca40bf6082aa8e95aca519cc667c59b3cf17eeda128121a3b02522fc0409a8fec876a471930a66a50efb0fa14d5d754750f72a14a41c0f2648436accc7608c7da9efed6751aed9237f9f5a3a8038dd68123ed466a38aed8"}, @generic={0x99, 0xc, "4a6f332058605dc6c722ec3707e4bfb85fecb6842cda3647802aeaaf512d47fd1f852c5491896b9d38a65246bdde79f9bc9fcf5902398f30c8fbb11bbc41ad963186506a879c1fee48d995651686acf67cd0b0a9304db03fb78530f46679e8ec17a4db858e9f20d9c88544158be8f5ed1ea200c6cb71647c3d0a9edde7aa6af5cdb6ed508dc6f21cd327fa9248573b72ccfe446bd43c48"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0xb, 0x2}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x1, 0xa7, 0x4, [@generic={0x37, 0x22, "65a1e594e1e3969e6388448ec4c5169c384701ad9b5f0ac84a2e76c0ff9bb62d776ee42501dfeac2eb557f31b5be1063416c4c9e21"}]}}, {{0x9, 0x5, 0xf, 0xac2cf32def94f68b, 0x40, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x200}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x5, 0x88, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x8}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x8, 0x6a, 0xe}}]}}, {{0x9, 0x4, 0xd8, 0xf8, 0x0, 0x66, 0xc9, 0xd2, 0xd}}, {{0x9, 0x4, 0xd5, 0x81, 0x10, 0xad, 0x5d, 0x93, 0xae, [], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0xe}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x7f, 0xaf, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x90}]}}, {{0x9, 0x5, 0x80, 0x10, 0x260, 0x4, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3ff}, @generic={0xcd, 0x30, "b07cc1f1726741b55467c70eaaffb65cd70f25fe0472f62ccfdfffa145a7ba94edf32b0357ac203c54f8c4efcdfe7b59f9d9e39173a1d3f3059f70012452b96444fe01cd567c03624b36bb5a71c15c7922fb984361af273b51d6526475fa1368da95561a78b033fb7bc746ea63c9a01a42829c0af6ca67c9d2ca93d8abebac849e124a3c7f56a2996b663d04d7d68b51e7260fedbc829b98840df3ca7badc99aa3de24554192b996038634f8d59e34bc06179d8363e77aee29506ff5a205509d5125eebc10d0382166bc74"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x6, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x80, 0x19, 0x34}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x8, 0x0, 0xdd}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x3, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x9, 0x5b, 0x4a}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xd, 0x10, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x7, 0x40}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x0, 0x5, 0x7, [@generic={0xdb, 0xc, "0f61b5d04e0346d8e161e1ea3c610f3dae711d1572cac9ba0911a91d6a0e277abcfe785df519340ff172510c19f9648a7a2d9d5d7d9b1806e979710b0e006a8eb12fb3c52fcdaf5048a3ecf2961411605ad09bfd9e81829c6a5e1deebe7fb9b19a7ffbeb337c0d776aa15a744ecd8eb144a01bc240ddca51b19f52bfc9e591e9109c4e0df2dc4d57a3e888de8b9f1ef6703a91b14900569d35d17942e031c55af5172988ac81111d988a55a91daaaa6f7fd8f52c0b806cca8564819abd9c01316aeb784b3db01709354659d52dad958cfd1e43f18d55f45f48"}, @generic={0x71, 0xa, "47fb1c70f6c9510bf59fd08cd5577ee828a5ee4af95ad100191591e33cfc9e06ae9e3c7cf6c0a98f17981f25dfa62ae9599d3527f19db13e1f65b8c1c8b3f764bd5eda980e624ec7fcdb24ca33a8cb58e154baf0afb03896266b27ab4db56ba117b10044f8894157596e14105e9dbb"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x1, 0xba, 0x9}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x2, 0x7f, 0x81, [@generic={0x6e, 0x30, "923e91ea94cf88352aadc5be6aa788b2b19b1f2631f27c834ad8346753e7c34d8ccf8bc4dd0e821c983b2193a0f5cacbcf934124254f455841a653f3bfd9808647ffb8cebdb88fc7516973a10e2b3c010292d722ffcbe0ff81de1ca72affad818501bfaf53046f6a8fe60e62"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x77, 0x0, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x1}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0xfd, 0xa, [@generic={0x4f, 0x30, "a27c0a7bbba814c811c73d80f2075eea1e609e78a3d23b45de6f6a7a1690cc111161d0b735af3ac0ac2cbe8db5fed4b556c05fede23237bc7acb3fbe25183a428550321dbc9190106b41ca92e6"}]}}]}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x111, 0x8, 0x5a, 0x1, 0xff, 0x3}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x9, [{0x58, &(0x7f0000000340)=@string={0x58, 0x3, "2e0712dc48de5a188839907ee2db66ea92868a8b0c5ee46697d33a4d38f0fd29872c7789c1dd5b161f38e6fadde2e476f744bc9b4c1e61b8918caf4622a9ab3cef2430e84ffa28f31c726aed6ea4fcbcc5147318e79d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x1c, &(0x7f00000003c0)=@string={0x1c, 0x3, "36b7c54c2599ebb881dcc62006ba9f972b648e7fefdca6697343"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xb93c69ee5e2ede1e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x546b91c9b4a1dd76}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x100, &(0x7f0000001ac0)=@string={0x100, 0x3, "0e0f4fb039f8a66c89bc20e6b7a87d12565a59f98c08a9d4bc8a5c49689ec079ec274d04efefa6eb63c544dd5fa544823751d121db85ed40c4b915f157c33d68f215e9a5f600d4d90df77b68468c25462c3a731fe277e361284874dc3e94ecb9cc0b0ee0e0fbda6c1b18aef2119afa6e896b2a1a67d5548ffb151af85d608fb505b9cbf0ebcbfbf253a9cc3173aca6367ed4aab0db51b6260deac6f926b977452840fb344251a5ac8093daf5251ae3e709ce67bc662d1ee297ad34d946cf2b313dafd484edbe65b8da2ad46d5e2c2b01da869b6d7cb477af8f3f120b2bb5bf1a84c8c34ec78c18253c2660a067a570a967d22f64eac2e7a71ddc6ba69fbc"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0xc01}}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240)="48b12300", 0x8, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m49.280387407s ago: executing program 5 (id=4276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010025bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000b4fc14000300080000000000000000000000000000041400010000000000000000000001"], 0x44}}, 0x0) 1m47.861902807s ago: executing program 5 (id=4282): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000140)) flistxattr(r4, &(0x7f0000000240)=""/56, 0x38) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0xffffffff]}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="084a41c3708187f4102f68dda7431f9d71287de8e4bc8c05cde9"], 0x54}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) dup(r2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000140)) (async) flistxattr(r4, &(0x7f0000000240)=""/56, 0x38) (async) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f0000000080)) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0xffffffff]}}) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="084a41c3708187f4102f68dda7431f9d71287de8e4bc8c05cde9"], 0x54}}, 0x0) (async) 1m46.111499158s ago: executing program 34 (id=4282): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = dup(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000140)) flistxattr(r4, &(0x7f0000000240)=""/56, 0x38) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0xffffffff]}}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="084a41c3708187f4102f68dda7431f9d71287de8e4bc8c05cde9"], 0x54}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) dup(r2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000140)) (async) flistxattr(r4, &(0x7f0000000240)=""/56, 0x38) (async) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f0000000080)) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0xffffffff]}}) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=0x0, @ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="084a41c3708187f4102f68dda7431f9d71287de8e4bc8c05cde9"], 0x54}}, 0x0) (async) 12.594923594s ago: executing program 2 (id=4652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[], 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r4 = getpid() openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000000480)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0xc080) 9.672938056s ago: executing program 4 (id=4662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000000001010400000000000000000200000024006601801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000002080007400000000018000d8008000100000000000c000380060001004e230000"], 0x7c}}, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000200)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1000000000000}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000272b46d79ebc04e00368600ff0200"/28], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x27) (async) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRESDEC=r5, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) (async) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x4000000000, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0xd, 0x8, 0x0) (async) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000010e000/0x3000)=nil, 0x2) 9.225842908s ago: executing program 4 (id=4664): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x101101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000180)={0x0, 0x4533, 0x400, 0x1, 0x1fb, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r2, 0x2ded, 0x4000, 0x48, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000840)={0xd, 0x8, 0x400}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001400090500000800fddbdf25020852fe", @ANYRES32=r6, @ANYBLOB="08000200ffffffff080001000b00000000000000"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) setgid(r8) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0xa802, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000280)={r11, 0x8000, 0x7, 0x7, 0x3, 0x7ffc}, 0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000140)={r11, 0xebc5}, 0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={r11, 0x1, 0x10000, 0x6}, &(0x7f0000000240)=0x10) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8940, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) dup(r15) 9.173471896s ago: executing program 2 (id=4665): r0 = socket(0x10, 0x3, 0x0) (async) userfaultfd(0x801) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket(0x22, 0x2, 0x24) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0xfffffedc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) (async) shutdown(r6, 0x1) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r8) (async) sendmmsg$inet(r4, 0x0, 0x0, 0xf00) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/keys\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002200), &(0x7f0000002280)=0x4) (async) read$FUSE(r10, &(0x7f0000000180)={0x2020}, 0x2024) 8.340922261s ago: executing program 2 (id=4667): syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r3 = syz_io_uring_setup(0x7dca, 0x0, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x1100000000000000, 0x0, 0x3000137) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) close(0xffffffffffffffff) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) close(0x3) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000002580)={0x0}) 7.205825071s ago: executing program 1 (id=4670): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = inotify_init1(0x0) socket$kcm(0x10, 0x2, 0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2000775) r3 = socket$unix(0x1, 0x1, 0x0) getpid() gettid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x8, 0xdf, {}, {0xee00}, 0x116f, 0xed8c}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6fe, @void, @value}, 0x94) syz_open_procfs(r4, &(0x7f00000001c0)='net/ip_vs\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xfffbfff7, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b19, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, 0x0, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv(r9, &(0x7f00000013c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2, 0x7924, 0xfff, 0x3ff, 0x17}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 7.205341733s ago: executing program 4 (id=4671): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write(r0, &(0x7f0000000280)="7ed04e1cb7bffb495d4608", 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x408, 0x1, 0x1, "cfbb2ecec59dfcb0ebc77b5204d4e62a192717f1750b5c4480c7318617e7d0dd7b948c184ef2515133291cafb804d185dede6b6b6708bd3c902d2c60beecc2e18d5718479d501005bed750b7916f5ddcb2552be2e0e87934ff66986ae7c3ecc02c661722fe2e2aa8c252d882d68542a8ee8ce0a8c51bf6e9faa4af64f1c80f5bd7a7716d957ac88e26526f97343086efd8a35a10dc8fa12e8a3c103f330d335c12e926a0cf99a2822d3b83667cd37f376b000b7703005468ca621cbb92b998b04d850a8eadf74cd071014502986a874d13770240dc0ee1bc264863be0c7f477c68f0ad27c1c5e0fd62af55d7f53e356d731f7141ea8541a6e042d7d8da28ec256850526ddbe236a5488a44a84c274a7062b4cb8e5699066800d42053d208a4be8c59a0faad27d49280cc66947fc2b126529c9a18c66fc1386f5370bb12da352cb7e1209b8a19622831043f83253b1b88fe95494c29152768ffcdc4bc81e66fc9dde1909080bd6d2314fefbc277263610c7f602317e91b6ac7fc3c33f7c2296af89626623a27dbe374d212c4369250b1c4ca8078ca6b736a16b36294d34604b0c33c47129cb59a7920c5a3c6138d217d8e68cad599c5bd70787865f0e5e8ef43a90c6176b77962bb3410fea1853b24ff2742bdcd15738b2ccee6b431b6e1979b869beebc8744014185bae622a399f186ccba01276b91ded85b140e66ee4d40c4549e1352ba7bff47a98ea0a10a8bcaec884cca9d704aa6db867cf81976d241a3f2b19ecb77ecfd0b860a544b2deec08445664f268e847a65d2091e019ad35d7ff365d58397fda62c8bce0ec370304663a2f16750adc56fd60b92d719e9ad4a2eb442d630fe925c6122f7a20c891681189f1f4d3059bdc02eeea468412a94704b2a5540e5124d0e3e9d59c727b434da8758ef5cece2c60ba4e657a81ea2f2c07997464f0a5ddb7bdf479bceebbbc913cfe615fa75111448da7f8a4c423242592433efdaeab88c604995960093693a037e2c7706edd876e7f2657f174dce1630d2699e599724c20c6d81f5e02774bf409515cc4cfc757156e9f556bee95386cfc2b56f140e2105ba01ac134a66242630b78455458392cfc27bedcb4a69cca416dfb4d8e5a56cf517adfbaadd21901f4712db72e59c9c55f8cf701c363513126687035048bb32dc845080c7568d658e2a24b1fa89f43bec080430a94b9c65ff029ce8b818451ec13fc46eafdd5bdc6e445059f0fbcb9a8f08ec7e74fcdf2d036279ee391ef802c706f83ba51da04d55a6d574e3f6cd5c0e509523d46578455787a5f57ae9158e88f88eb52a4fda7264bb5062ebdb019bb041fbcc23e796fa12c5b1ae0f1ef280f7f68a2a5f3673c4a5b355a3a412f2d3d3f73835d1d9f85582950c1452e94115a45a6cd478435de02ed7f59cf"}], 0x408}, 0x8800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000000)="a6cc04e2d8f1c38afbf14b29b86e3a") sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000004a0085a123c90000000000000a0042"], 0x24}}, 0x20004040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001"], 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000082}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x17, 0xa, 0x804, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 6.906659695s ago: executing program 1 (id=4673): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 6.494694435s ago: executing program 1 (id=4675): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffe}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x8007, 'syz0\x00', 0x0}) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) 5.43312755s ago: executing program 1 (id=4678): socket$nl_route(0x10, 0x3, 0x0) socket(0x22, 0x2, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x800800) 5.320799881s ago: executing program 1 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0xe9, 0x7}, {0x2000000, 0x1}]}, 0x14, 0x1) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x3, 0xf}, {0xffe0, 0xf}}}, 0x24}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) socket$rxrpc(0x21, 0x2, 0x2) r6 = syz_open_dev$dri(0x0, 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571104100000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 5.141718039s ago: executing program 2 (id=4681): syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x100000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000200)=""/56, 0x38, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x9d) r8 = fsopen(&(0x7f0000000300)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) keyctl$set_timeout(0xf, r7, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000003000000380100002adf000080200000", @ANYRES32=r5, @ANYBLOB="959c0000000000000000000000000001000000ec70d54acfdaebe464c335238edbb922d6808060a9f70059ac158388367fa2ca783c7c6cbe1144aaccfa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000400"/28], 0x50) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033060000000008000080e0000002000000000000000000000000fe80000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d232000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000001000000000000000000000000000000000000050000000000000000000000200000000000000000000000050000000000000000000000000000000000000002000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000001800"/240], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r9, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r9, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 4.699555925s ago: executing program 4 (id=4682): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x55aa, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.341942081s ago: executing program 4 (id=4684): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r3, 0x4, 0x9, 0x0, 0x9, 0x4c, @empty, @private1, 0x7800, 0x1, 0x0, 0x3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)={'#! ', '', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '-.+'}]}, 0x10) recvmmsg(r7, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/108, 0x6c}], 0x1}, 0x8}], 0x1, 0x100, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x4ef8) preadv(r9, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x60b, 0x0) ioctl$SCSI_IOCTL_SYNC(r9, 0x4) 3.701978478s ago: executing program 7 (id=4687): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000006800)}, 0xa000000}], 0x1, 0x0) 3.403831409s ago: executing program 1 (id=4688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r2, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8, 0x8000, 0x1000, 0x756, {{0x5, 0x4, 0x2, 0x37, 0x14, 0x66, 0x0, 0xe9, 0x2f, 0x0, @remote, @multicast1}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x5}, @TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x40}}, 0x4001) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x8, r8, r9, 0x6000, '\x00', 0x8000000000000000, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x2b, 0x1, 0x0, 0x0, 0x8}}, 0x55) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0xf, 0xa}, {0xffe0}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8055}, 0x4000) 3.289779001s ago: executing program 7 (id=4689): pipe(0x0) clock_gettime(0x0, &(0x7f0000003440)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mknod(0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x0, 0x2) write$FUSE_INTERRUPT(r3, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/77, 0x4d}], 0x1, 0x0, 0x0, 0xf0ffffff}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002040)=""/73, 0x49}], 0x1}}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000380)=""/22, 0x16}, {0x0}], 0x6, &(0x7f0000000680)=""/28, 0x1c}, 0x7}, {{&(0x7f0000000a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/97, 0x61}, {&(0x7f0000000b80)=""/175, 0xaf}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000cc0)=""/121, 0x79}], 0x4}, 0x8}], 0x6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000050024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0x0) 3.122076433s ago: executing program 2 (id=4690): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, 0x0, 0x20008000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev, 0x6}}, 0x9, 0x7, 0x0, 0x5000000, 0x54}, 0x9c) 2.923853627s ago: executing program 7 (id=4691): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4c01d}, 0x24000800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b"], 0x44}}, 0x1000000) 2.654524991s ago: executing program 7 (id=4692): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xfdf5, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x1003, 0x4, 0x180000, 0x7, 0x5, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x6, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x6, 0x40, 0x8, 0x4, 0xc, 0x401, 0x5, 0x8, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000e0000002000007000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000020000000000000000000044010500"], 0x1fc}}, 0x0) 2.337742598s ago: executing program 7 (id=4694): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) listxattr(0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x1f8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x462) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xffffffffffff7a09}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x48}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015001b0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000040)) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8a001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000004c0)={{0x4000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x2, 0x8, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0xd000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x3, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee0000, 0xeeee8000, 0xf, 0x0, 0xff}, {0x6000, 0x0, 0x9, 0x82}, {0x6000, 0x8000}, {0x1, 0xfffe}, 0x10d, 0x0, 0x1111e004, 0x90, 0x100000000000000, 0x100, 0x900, [0xae6f, 0x0, 0x0, 0x400000004]}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) ppoll(&(0x7f0000000080)=[{r5, 0x100}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2.191743783s ago: executing program 6 (id=4695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0xf2ff) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x400c884) 1.53361542s ago: executing program 6 (id=4696): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000e0000002000003000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000020000000000000000000044010500e0000001000000000000000000000000000004d63c00000002000000e00000010000000000000000000000000735000004"], 0x1fc}}, 0x0) 1.313614981s ago: executing program 6 (id=4697): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x1f, 0x8000000, 0xa041000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1e", 0x1}], 0x1) (async) close(r6) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="5d65961d0508752f2bbd700000001c7c99f95cf0f579756fdc6bd0fdf6a9609f4b9e5b277b89817e27c0eeef6e4d014c27bb25f7e602949c68c94d94933119e339b1bf84b035ec10ee6c8be0c7a81a3ea49597fb71bae7dde2db8a85a7d67f0d51630278f24fc91281dfbb91f7e5083320e799950a81a715e207516a682d6ed9d522d08859372202c235050d399535166e9c0b7ef8e61d2a50317a4f4254ce3491afc39073775bca4b5a3f611b84656a39"], 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.108163594s ago: executing program 6 (id=4698): r0 = socket$packet(0x11, 0x2, 0x300) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0xf) close_range(r1, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x2000000b}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040094}, 0x4004090) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) 1.045917885s ago: executing program 7 (id=4699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601040000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000fae4aefdff36b8fac9e98250ba352d000311000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) r9 = socket(0x18, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r9, 0x80047453, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 598.651471ms ago: executing program 6 (id=4700): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_io_uring_setup(0x23b, &(0x7f00000003c0)={0x0, 0x3, 0x10100, 0x0, 0xfffffffa}, &(0x7f00000002c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0xfffffffffffffffe, 0x1) syz_pidfd_open(0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7fffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 353.218905ms ago: executing program 4 (id=4701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000001900017c00000400fc800c00018006000600655800000800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000140)="80", 0xffffffffffffff00, 0x0, 0x0, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x10fea7, 0xa) openat$sequencer(0xffffffffffffff9c, 0x0, 0x103201, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 270.432149ms ago: executing program 2 (id=4702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330050904000801030101000921ff000e0122b00b09058103100002ba07"], 0x0) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 0s ago: executing program 6 (id=4703): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff3d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x46, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0x5, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x4, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x56eb, &(0x7f0000000140)={0x0, 0x72f, 0x80, 0x1, 0x3e6}, &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583c945"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x209, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}}, 0x18}}, 0x4048844) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 1438.045703][T21790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.975621][ T8215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.993786][ T8215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.008470][ T8215] bond0 (unregistering): Released all slaves [ 1439.301052][T21797] netlink: 'syz.2.4300': attribute type 10 has an invalid length. [ 1439.350821][ T8215] bond1 (unregistering): Released all slaves [ 1439.522834][ T8215] bond2 (unregistering): Released all slaves [ 1439.607615][T21797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.698239][T21797] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1439.962697][ T55] Bluetooth: hci1: command tx timeout [ 1439.999301][T21757] chnl_net:caif_netlink_parms(): no params data found [ 1440.114921][T21814] xt_socket: unknown flags 0xd0 [ 1440.196988][T21818] delete_channel: no stack [ 1440.280050][T21818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.370560][T21818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.576280][T21826] netlink: 'syz.2.4307': attribute type 2 has an invalid length. [ 1440.600230][T21826] netlink: 'syz.2.4307': attribute type 8 has an invalid length. [ 1440.635623][T21826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4307'. [ 1440.690699][T21835] syz_tun: entered allmulticast mode [ 1440.879075][ T8215] hsr_slave_0: left promiscuous mode [ 1440.907919][ T8215] hsr_slave_1: left promiscuous mode [ 1440.935561][ T8215] batman_adv: batadv0: Interface deactivated: dummy0 [ 1440.960089][ T8215] batman_adv: batadv0: Removing interface: dummy0 [ 1440.996204][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.008765][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.027771][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.041867][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.140264][ T8215] veth1_macvtap: left promiscuous mode [ 1441.172768][ T8215] veth0_macvtap: left promiscuous mode [ 1441.193273][ T8215] veth1_vlan: left promiscuous mode [ 1441.220194][ T8215] veth0_vlan: left promiscuous mode [ 1441.238853][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.271375][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.351608][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.392984][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.895943][T21845] FAULT_INJECTION: forcing a failure. [ 1441.895943][T21845] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1441.910332][T21845] CPU: 0 UID: 0 PID: 21845 Comm: syz.4.4309 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1441.910356][T21845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1441.910366][T21845] Call Trace: [ 1441.910381][T21845] [ 1441.910389][T21845] dump_stack_lvl+0x189/0x250 [ 1441.910425][T21845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1441.910447][T21845] ? __pfx__printk+0x10/0x10 [ 1441.910463][T21845] ? fs_reclaim_acquire+0x7d/0x100 [ 1441.910493][T21845] should_fail_ex+0x414/0x560 [ 1441.910521][T21845] prepare_alloc_pages+0x213/0x610 [ 1441.910549][T21845] __alloc_frozen_pages_noprof+0x123/0x370 [ 1441.910575][T21845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1441.910606][T21845] ? policy_nodemask+0x27c/0x720 [ 1441.910629][T21845] alloc_pages_mpol+0x232/0x4a0 [ 1441.910653][T21845] vma_alloc_folio_noprof+0xe4/0x200 [ 1441.910676][T21845] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1441.910693][T21845] ? percpu_ref_put+0x19/0x180 [ 1441.910713][T21845] ? __pfx___might_resched+0x10/0x10 [ 1441.910727][T21845] ? percpu_ref_put+0xf9/0x180 [ 1441.910751][T21845] mfill_atomic_pte_copy+0x8b/0x370 [ 1441.910779][T21845] mfill_atomic_copy+0x675/0x1470 [ 1441.910811][T21845] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 1441.910841][T21845] userfaultfd_ioctl+0x2023/0x4900 [ 1441.910862][T21845] ? do_vfs_ioctl+0xf36/0x1eb0 [ 1441.910876][T21845] ? __se_sys_ioctl+0x47/0x170 [ 1441.910888][T21845] ? do_syscall_64+0xf6/0x210 [ 1441.910913][T21845] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1441.910930][T21845] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1441.910967][T21845] ? kasan_quarantine_put+0xdd/0x220 [ 1441.910990][T21845] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1441.911014][T21845] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1441.911041][T21845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1441.911069][T21845] ? vfs_write+0x8d8/0xa90 [ 1441.911114][T21845] ? ksys_write+0x1e1/0x250 [ 1441.911130][T21845] ? rcu_is_watching+0x15/0xb0 [ 1441.911155][T21845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1441.911174][T21845] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1441.911190][T21845] __se_sys_ioctl+0xf9/0x170 [ 1441.911206][T21845] do_syscall_64+0xf6/0x210 [ 1441.911225][T21845] ? clear_bhb_loop+0x45/0xa0 [ 1441.911243][T21845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.911258][T21845] RIP: 0033:0x7fc38278e969 [ 1441.911272][T21845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1441.911285][T21845] RSP: 002b:00007fc38357d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.911301][T21845] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278e969 [ 1441.911312][T21845] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 1441.911327][T21845] RBP: 00007fc38357d090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.911337][T21845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.911346][T21845] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fc382adfa28 [ 1441.911373][T21845] [ 1442.207006][ T55] Bluetooth: hci1: command tx timeout [ 1442.710891][T21855] netlink: 'syz.1.4314': attribute type 16 has an invalid length. [ 1442.729548][T21855] netlink: 'syz.1.4314': attribute type 17 has an invalid length. [ 1442.828099][T21857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.847636][T21857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.937707][ T8215] team0 (unregistering): Port device team_slave_1 removed [ 1443.003804][ T8215] team0 (unregistering): Port device team_slave_0 removed [ 1443.915933][T21867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.934153][T21867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.953085][T21757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.960452][T21757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.978587][T21757] bridge_slave_0: entered allmulticast mode [ 1443.998882][T21757] bridge_slave_0: entered promiscuous mode [ 1444.052952][T21757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.080677][T21757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.105122][T21757] bridge_slave_1: entered allmulticast mode [ 1444.121958][T21757] bridge_slave_1: entered promiscuous mode [ 1444.132882][T21872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.195759][T21874] FAULT_INJECTION: forcing a failure. [ 1444.195759][T21874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1444.251481][T21874] CPU: 0 UID: 0 PID: 21874 Comm: syz.6.4321 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1444.251513][T21874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1444.251527][T21874] Call Trace: [ 1444.251534][T21874] [ 1444.251544][T21874] dump_stack_lvl+0x189/0x250 [ 1444.251581][T21874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1444.251609][T21874] ? __pfx__printk+0x10/0x10 [ 1444.251631][T21874] ? fs_reclaim_acquire+0x7d/0x100 [ 1444.251668][T21874] should_fail_ex+0x414/0x560 [ 1444.251706][T21874] prepare_alloc_pages+0x213/0x610 [ 1444.251742][T21874] __alloc_frozen_pages_noprof+0x123/0x370 [ 1444.251777][T21874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1444.251828][T21874] alloc_pages_mpol+0x232/0x4a0 [ 1444.251860][T21874] alloc_pages_noprof+0xa9/0x190 [ 1444.251887][T21874] folio_alloc_noprof+0x1e/0x30 [ 1444.251913][T21874] filemap_alloc_folio_noprof+0xdf/0x470 [ 1444.251942][T21874] ? filemap_get_entry+0xad/0x2f0 [ 1444.251970][T21874] ? filemap_get_entry+0xad/0x2f0 [ 1444.252000][T21874] ? filemap_get_entry+0x28f/0x2f0 [ 1444.252030][T21874] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1444.252065][T21874] ? folio_add_lru+0x1b3/0x3d0 [ 1444.252087][T21874] ? filemap_add_folio+0x1af/0x270 [ 1444.252120][T21874] __filemap_get_folio+0x3f2/0xaf0 [ 1444.252149][T21874] aio_setup_ring+0x3bc/0xd50 [ 1444.252187][T21874] ? __pfx_aio_setup_ring+0x10/0x10 [ 1444.252222][T21874] ioctx_alloc+0x32f/0x7a0 [ 1444.252265][T21874] __se_sys_io_setup+0x7b/0x1a0 [ 1444.252290][T21874] do_syscall_64+0xf6/0x210 [ 1444.252316][T21874] ? clear_bhb_loop+0x45/0xa0 [ 1444.252341][T21874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.252359][T21874] RIP: 0033:0x7fae2cf8e969 [ 1444.252378][T21874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.252400][T21874] RSP: 002b:00007fae2dd1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1444.252421][T21874] RAX: ffffffffffffffda RBX: 00007fae2d1b5fa0 RCX: 00007fae2cf8e969 [ 1444.252436][T21874] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000010000 [ 1444.252449][T21874] RBP: 00007fae2dd1c090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.252463][T21874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.252475][T21874] R13: 0000000000000000 R14: 00007fae2d1b5fa0 R15: 00007fae2d2dfa28 [ 1444.252507][T21874] [ 1444.514828][T21757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.567661][ T55] Bluetooth: hci1: command tx timeout [ 1444.568533][T21757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.718093][T21878] dlm: non-version read from control device 36 [ 1444.726443][T21757] team0: Port device team_slave_0 added [ 1444.773969][T21757] team0: Port device team_slave_1 added [ 1445.011264][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1445.027932][T21891] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 1445.041763][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1445.075539][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1445.075555][T21757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.075571][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.103606][T21891] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1445.183934][T21757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.310279][T21757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.335448][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.337771][T21904] FAULT_INJECTION: forcing a failure. [ 1445.337771][T21904] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.378130][T21757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.387684][T21904] CPU: 1 UID: 0 PID: 21904 Comm: syz.1.4329 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1445.387717][T21904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1445.387731][T21904] Call Trace: [ 1445.387741][T21904] [ 1445.387762][T21904] dump_stack_lvl+0x189/0x250 [ 1445.387805][T21904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1445.387837][T21904] ? __pfx__printk+0x10/0x10 [ 1445.387866][T21904] ? __pfx___might_resched+0x10/0x10 [ 1445.387886][T21904] ? fs_reclaim_acquire+0x7d/0x100 [ 1445.387924][T21904] should_fail_ex+0x414/0x560 [ 1445.387965][T21904] should_failslab+0xa8/0x100 [ 1445.387997][T21904] __kmalloc_cache_noprof+0x70/0x3d0 [ 1445.388025][T21904] ? nft_limit_clone+0x1af/0x350 [ 1445.388057][T21904] nft_limit_clone+0x1af/0x350 [ 1445.388089][T21904] nft_set_elem_expr_clone+0x1e5/0xa90 [ 1445.388133][T21904] nf_tables_newsetelem+0x13f2/0x4340 [ 1445.388221][T21904] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1445.388249][T21904] ? __lock_acquire+0xaac/0xd20 [ 1445.388302][T21904] ? nla_validate_array+0xfc/0x260 [ 1445.388361][T21904] ? __pfx___nla_validate_parse+0x10/0x10 [ 1445.388394][T21904] ? __lock_acquire+0xaac/0xd20 [ 1445.388434][T21904] ? nfnl_pernet+0x23/0x240 [ 1445.388474][T21904] ? __nla_parse+0x40/0x60 [ 1445.388504][T21904] nfnetlink_rcv+0x113f/0x2530 [ 1445.388569][T21904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1445.388596][T21904] ? stack_depot_save_flags+0x40/0x910 [ 1445.388687][T21904] ? netlink_deliver_tap+0x2e/0x1b0 [ 1445.388707][T21904] ? netlink_deliver_tap+0x2e/0x1b0 [ 1445.388734][T21904] netlink_unicast+0x758/0x8d0 [ 1445.388774][T21904] netlink_sendmsg+0x805/0xb30 [ 1445.388806][T21904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.388836][T21904] ? aa_sock_msg_perm+0x94/0x160 [ 1445.388863][T21904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1445.388887][T21904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1445.388914][T21904] __sock_sendmsg+0x219/0x270 [ 1445.388952][T21904] ____sys_sendmsg+0x505/0x830 [ 1445.388988][T21904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1445.389025][T21904] ? import_iovec+0x74/0xa0 [ 1445.389060][T21904] ___sys_sendmsg+0x21f/0x2a0 [ 1445.389091][T21904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1445.389167][T21904] ? __fget_files+0x2a/0x420 [ 1445.389196][T21904] ? __fget_files+0x3a0/0x420 [ 1445.389237][T21904] __x64_sys_sendmsg+0x19b/0x260 [ 1445.389268][T21904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1445.389315][T21904] ? do_syscall_64+0xba/0x210 [ 1445.389346][T21904] do_syscall_64+0xf6/0x210 [ 1445.389374][T21904] ? clear_bhb_loop+0x45/0xa0 [ 1445.389401][T21904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.389422][T21904] RIP: 0033:0x7f70def8e969 [ 1445.389442][T21904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.389461][T21904] RSP: 002b:00007f70dfecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1445.389485][T21904] RAX: ffffffffffffffda RBX: 00007f70df1b5fa0 RCX: 00007f70def8e969 [ 1445.389502][T21904] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1445.389516][T21904] RBP: 00007f70dfecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.389529][T21904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.389542][T21904] R13: 0000000000000000 R14: 00007f70df1b5fa0 R15: 00007f70df2dfa28 [ 1445.389575][T21904] [ 1445.602712][T10626] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1445.819082][T21757] hsr_slave_0: entered promiscuous mode [ 1445.821077][T21913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.833938][T21757] hsr_slave_1: entered promiscuous mode [ 1445.842264][T21913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.861019][T21757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.871899][T21757] Cannot create hsr debugfs directory [ 1445.902746][T10626] usb 5-1: Using ep0 maxpacket: 32 [ 1445.911671][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4331'. [ 1446.113862][T10626] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1446.123172][T10626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.173949][T10626] usb 5-1: Product: syz [ 1446.180919][T10626] usb 5-1: Manufacturer: syz [ 1446.187368][T10626] usb 5-1: SerialNumber: syz [ 1446.209215][T10626] usb 5-1: config 0 descriptor?? [ 1446.225717][T10626] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1446.451660][T10626] gspca_topro: reg_w err -71 [ 1446.482592][T10626] gspca_topro: Sensor soi763a [ 1446.535206][T10626] usb 5-1: USB disconnect, device number 91 [ 1446.630574][T21841] syz_tun: left allmulticast mode [ 1446.683493][T21928] dlm: non-version read from control device 36 [ 1446.867634][T21931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.900140][T21931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.045983][T21935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1447.153151][ T5829] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1447.323421][ T5829] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1447.341258][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.357368][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.381158][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.409469][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.421279][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.452598][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.476349][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.486354][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.522085][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.559943][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.577796][T21757] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1447.593696][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.598733][T21757] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1447.628591][T21757] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1447.647915][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.671287][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.685639][T21757] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1447.696425][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.735264][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.769169][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.807925][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.849710][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.895395][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1447.909885][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1447.985873][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1448.062063][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1448.085745][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1448.111328][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1448.127977][T21757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.163009][ T5829] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1448.184114][T21757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.191258][ T5829] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1448.226097][T19273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.233317][T19273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.270359][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.277513][ T5829] usb 3-1: Product: syz [ 1448.277539][ T5829] usb 3-1: Manufacturer: syz [ 1448.281790][T19273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.360491][ T5829] usb 3-1: SerialNumber: syz [ 1448.433780][ T5829] usb 3-1: config 0 descriptor?? [ 1448.470196][ T5829] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1448.573758][T19490] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1448.644908][T21757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.734603][T19490] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.772267][T19490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1448.793264][T21962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4335'. [ 1448.810551][T19490] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1448.874895][T19490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.915269][T21757] veth0_vlan: entered promiscuous mode [ 1448.929452][T19490] usb 5-1: Product: syz [ 1448.949035][T19490] usb 5-1: Manufacturer: syz [ 1448.966517][T21757] veth1_vlan: entered promiscuous mode [ 1448.979217][T19490] usb 5-1: SerialNumber: syz [ 1448.988271][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4335'. [ 1449.300304][T21757] veth0_macvtap: entered promiscuous mode [ 1449.348000][T21757] veth1_macvtap: entered promiscuous mode [ 1449.424466][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.450669][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.476312][T19490] usb 5-1: cannot find UAC_HEADER [ 1449.497289][T21757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.549064][T19490] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1449.563991][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1449.593404][T19490] usb 5-1: USB disconnect, device number 92 [ 1449.603981][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.641898][T21757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.658560][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1449.669463][T21757] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.700183][T21757] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.758400][T21757] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.801117][T21757] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.120047][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4339'. [ 1450.401827][T19274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.435608][T19274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.545821][ T8214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.572503][ T8214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.622508][ T5829] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1450.854448][ T5829] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1450.874099][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.921970][ T5829] usb 5-1: config 0 descriptor?? [ 1451.175423][T21997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.184644][T21997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.914717][T22008] dlm: non-version read from control device 36 [ 1452.536366][T10626] usb 3-1: USB disconnect, device number 117 [ 1452.588743][T10626] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1452.729179][ T5829] usb 5-1: Cannot set autoneg [ 1452.735079][ T5829] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1452.800558][ T5829] usb 5-1: USB disconnect, device number 93 [ 1453.771930][T22031] xt_socket: unknown flags 0xd0 [ 1453.970195][T22037] FAULT_INJECTION: forcing a failure. [ 1453.970195][T22037] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.993014][T22037] CPU: 0 UID: 0 PID: 22037 Comm: syz.2.4351 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1453.993047][T22037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1453.993061][T22037] Call Trace: [ 1453.993069][T22037] [ 1453.993078][T22037] dump_stack_lvl+0x189/0x250 [ 1453.993117][T22037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.993146][T22037] ? __pfx__printk+0x10/0x10 [ 1453.993170][T22037] ? __pfx___might_resched+0x10/0x10 [ 1453.993202][T22037] ? fs_reclaim_acquire+0x7d/0x100 [ 1453.993237][T22037] should_fail_ex+0x414/0x560 [ 1453.993274][T22037] should_failslab+0xa8/0x100 [ 1453.993301][T22037] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1453.993327][T22037] ? __kernfs_new_node+0x9c/0x7f0 [ 1453.993361][T22037] kstrdup+0x42/0x100 [ 1453.993382][T22037] __kernfs_new_node+0x9c/0x7f0 [ 1453.993409][T22037] ? __lock_acquire+0xaac/0xd20 [ 1453.993442][T22037] ? __pfx___kernfs_new_node+0x10/0x10 [ 1453.993470][T22037] ? kernfs_root+0x1c/0x230 [ 1453.993503][T22037] ? kernfs_root+0x1c/0x230 [ 1453.993529][T22037] ? kernfs_root+0x1c/0x230 [ 1453.993560][T22037] kernfs_new_node+0x102/0x210 [ 1453.993593][T22037] kernfs_create_link+0xa7/0x200 [ 1453.993619][T22037] sysfs_do_create_link_sd+0x83/0x110 [ 1453.993647][T22037] device_add_class_symlinks+0x1cf/0x240 [ 1453.993675][T22037] device_add+0x475/0xb50 [ 1453.993701][T22037] device_create+0x25b/0x2f0 [ 1453.993727][T22037] ? format_decode+0x5ee/0xe30 [ 1453.993755][T22037] ? string+0x279/0x2b0 [ 1453.993781][T22037] ? widen_string+0x3b/0x2a0 [ 1453.993799][T22037] ? __pfx_device_create+0x10/0x10 [ 1453.993838][T22037] bdi_register_va+0x9c/0x740 [ 1453.993871][T22037] super_setup_bdi_name+0xe6/0x200 [ 1453.993895][T22037] ? __pfx_preempt_schedule+0x10/0x10 [ 1453.993920][T22037] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1453.993946][T22037] ? preempt_schedule_thunk+0x16/0x30 [ 1453.993975][T22037] fuse_fill_super_common+0x64a/0x1150 [ 1453.994007][T22037] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 1453.994028][T22037] ? __init_swait_queue_head+0xa9/0x150 [ 1453.994055][T22037] ? shrinker_register+0x16b/0x230 [ 1453.994078][T22037] ? sget_fc+0x962/0xa40 [ 1453.994099][T22037] fuse_fill_super+0x176/0x1f0 [ 1453.994119][T22037] ? __pfx_fuse_fill_super+0x10/0x10 [ 1453.994142][T22037] get_tree_nodev+0xb8/0x150 [ 1453.994166][T22037] fuse_get_tree+0x2eb/0x4e0 [ 1453.994193][T22037] vfs_get_tree+0x8f/0x2b0 [ 1453.994218][T22037] do_new_mount+0x24a/0xa40 [ 1453.994252][T22037] __se_sys_mount+0x317/0x410 [ 1453.994303][T22037] ? __pfx___se_sys_mount+0x10/0x10 [ 1453.994334][T22037] ? do_syscall_64+0xba/0x210 [ 1453.994357][T22037] ? __x64_sys_mount+0x20/0xc0 [ 1453.994385][T22037] do_syscall_64+0xf6/0x210 [ 1453.994411][T22037] ? clear_bhb_loop+0x45/0xa0 [ 1453.994436][T22037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.994456][T22037] RIP: 0033:0x7fa5db78e969 [ 1453.994475][T22037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.994492][T22037] RSP: 002b:00007fa5dc6a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1453.994515][T22037] RAX: ffffffffffffffda RBX: 00007fa5db9b5fa0 RCX: 00007fa5db78e969 [ 1453.994530][T22037] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1453.994543][T22037] RBP: 00007fa5dc6a9090 R08: 0000200000002140 R09: 0000000000000000 [ 1453.994557][T22037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1453.994569][T22037] R13: 0000000000000000 R14: 00007fa5db9b5fa0 R15: 00007fa5dbadfa28 [ 1453.994601][T22037] [ 1454.739262][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.860816][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.880463][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.908409][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.994301][T22054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4356'. [ 1455.072947][ T5829] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1455.142777][T18536] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1455.323517][T18536] usb 8-1: Using ep0 maxpacket: 16 [ 1455.328746][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 1455.353071][T18536] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.359934][T22061] bridge0: port 3(netdevsim0) entered blocking state [ 1455.364902][T22058] dlm: non-version read from control device 36 [ 1455.388974][T22061] bridge0: port 3(netdevsim0) entered disabled state [ 1455.415881][T22061] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1455.446723][ T5829] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 1455.455627][T18536] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.484050][T22061] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1455.491600][ T5829] usb 5-1: config 0 has no interface number 0 [ 1455.547411][T18536] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1455.559092][ T5829] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1455.586473][T18536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.594941][ T5829] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1455.617051][T18536] usb 8-1: config 0 descriptor?? [ 1455.631926][ T5829] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1455.673405][ T5829] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1455.684673][ T5829] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1455.697436][ T5829] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1455.717789][ T5829] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1455.746042][ T5829] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1455.764204][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.772337][ T5829] usb 5-1: Product: syz [ 1455.792468][ T5829] usb 5-1: Manufacturer: syz [ 1455.797194][ T5829] usb 5-1: SerialNumber: syz [ 1455.816716][ T5829] usb 5-1: config 0 descriptor?? [ 1455.823393][T22048] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1455.852202][ T5829] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 1455.878053][T22074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.909924][T22074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.084897][T18536] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0029/input/input94 [ 1456.112801][ T5829] usb 5-1: USB disconnect, device number 94 [ 1456.220543][T18536] appleir 0003:05AC:8241.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 1456.602646][T18536] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1456.644160][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'. [ 1456.663926][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'. [ 1456.696912][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'. [ 1456.728219][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4366'. [ 1456.760695][T22096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.771642][T22096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.794344][T18536] usb 3-1: Using ep0 maxpacket: 32 [ 1456.812845][T18536] usb 3-1: config 0 has no interfaces? [ 1456.818074][T22093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.818869][T18536] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1456.861108][T18536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.869903][T22100] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 1456.880788][T18536] usb 3-1: config 0 descriptor?? [ 1456.892296][T22093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.271342][T22084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.286037][T22084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.311456][T13424] usb 3-1: USB disconnect, device number 118 [ 1457.560004][T22109] xt_CT: No such helper "pptp" [ 1457.622725][ T5829] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1457.773909][ T5829] usb 5-1: device descriptor read/64, error -71 [ 1458.033997][ T5829] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1458.054875][T19490] usb 8-1: USB disconnect, device number 2 [ 1458.196864][ T5829] usb 5-1: device descriptor read/64, error -71 [ 1458.275011][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1458.275031][ T30] audit: type=1326 audit(1746587258.054:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22126 comm="syz.2.4372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5db78e969 code=0x0 [ 1458.326450][ T5829] usb usb5-port1: attempt power cycle [ 1458.682904][ T5829] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1458.745946][ T5829] usb 5-1: device descriptor read/8, error -71 [ 1459.012565][ T5829] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1459.033333][ T5829] usb 5-1: device descriptor read/8, error -71 [ 1459.152128][T22147] netlink: 204172 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1459.209589][ T5829] usb usb5-port1: unable to enumerate USB device [ 1459.220848][T22148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4375'. [ 1459.841585][T22148] team0 (unregistering): Port device team_slave_0 removed [ 1459.885293][T22148] team0 (unregistering): Port device team_slave_1 removed [ 1460.912006][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.013283][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.833077][T18536] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1461.874356][T22190] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.4383'. [ 1461.938576][T22190] openvswitch: netlink: Message has 5 unknown bytes. [ 1462.002656][T18536] usb 5-1: Using ep0 maxpacket: 32 [ 1462.067686][T18536] usb 5-1: config 0 has no interfaces? [ 1462.089395][T18536] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1462.129697][T18536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.179788][T18536] usb 5-1: config 0 descriptor?? [ 1462.307372][T22206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1462.348999][T22207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.358153][T22207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.414414][T22180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.424158][T22180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.470702][T18536] usb 5-1: USB disconnect, device number 99 [ 1462.895588][T22222] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1462.991795][T22224] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1463.288665][T22230] FAULT_INJECTION: forcing a failure. [ 1463.288665][T22230] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.373256][T22230] CPU: 1 UID: 0 PID: 22230 Comm: syz.4.4395 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1463.373288][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1463.373301][T22230] Call Trace: [ 1463.373310][T22230] [ 1463.373323][T22230] dump_stack_lvl+0x189/0x250 [ 1463.373361][T22230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.373391][T22230] ? __pfx__printk+0x10/0x10 [ 1463.373417][T22230] ? __pfx___might_resched+0x10/0x10 [ 1463.373436][T22230] ? fs_reclaim_acquire+0x7d/0x100 [ 1463.373471][T22230] should_fail_ex+0x414/0x560 [ 1463.373507][T22230] should_failslab+0xa8/0x100 [ 1463.373536][T22230] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1463.373562][T22230] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 1463.373592][T22230] ? __alloc_skb+0x112/0x2d0 [ 1463.373620][T22230] __alloc_skb+0x112/0x2d0 [ 1463.373648][T22230] netlink_ack+0x146/0xa50 [ 1463.373673][T22230] ? sock_diag_rcv_msg+0xd0/0x610 [ 1463.373698][T22230] ? sock_diag_rcv_msg+0x401/0x610 [ 1463.373722][T22230] netlink_rcv_skb+0x2a0/0x490 [ 1463.373745][T22230] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1463.373767][T22230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1463.373807][T22230] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.373828][T22230] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.373855][T22230] netlink_unicast+0x758/0x8d0 [ 1463.373905][T22230] netlink_sendmsg+0x805/0xb30 [ 1463.373937][T22230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.373964][T22230] ? aa_sock_msg_perm+0x94/0x160 [ 1463.373989][T22230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1463.374011][T22230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.374034][T22230] __sock_sendmsg+0x219/0x270 [ 1463.374070][T22230] ____sys_sendmsg+0x505/0x830 [ 1463.374102][T22230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.374138][T22230] ? import_iovec+0x74/0xa0 [ 1463.374169][T22230] ___sys_sendmsg+0x21f/0x2a0 [ 1463.374198][T22230] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.374261][T22230] ? __fget_files+0x2a/0x420 [ 1463.374286][T22230] ? __fget_files+0x3a0/0x420 [ 1463.374323][T22230] __x64_sys_sendmsg+0x19b/0x260 [ 1463.374357][T22230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1463.374401][T22230] ? do_syscall_64+0xba/0x210 [ 1463.374430][T22230] do_syscall_64+0xf6/0x210 [ 1463.374455][T22230] ? clear_bhb_loop+0x45/0xa0 [ 1463.374481][T22230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.374501][T22230] RIP: 0033:0x7fc38278e969 [ 1463.374519][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1463.374537][T22230] RSP: 002b:00007fc38357d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.374560][T22230] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278e969 [ 1463.374575][T22230] RDX: 0000000004004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1463.374589][T22230] RBP: 00007fc38357d090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.374603][T22230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.374615][T22230] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fc382adfa28 [ 1463.374647][T22230] [ 1463.681100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.362751][T19490] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1465.577425][T22262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1465.592147][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'. [ 1465.632486][T19490] usb 8-1: Using ep0 maxpacket: 8 [ 1465.663185][T19490] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1465.672612][T19490] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.782645][T19490] usb 8-1: Product: syz [ 1465.791620][T19490] usb 8-1: Manufacturer: syz [ 1465.803155][T19490] usb 8-1: SerialNumber: syz [ 1465.844624][T19490] usb 8-1: config 0 descriptor?? [ 1466.101390][T19490] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1466.287733][T22274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.335508][T22274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.802342][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1467.148114][T22289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.202939][T22289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.423952][T22298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.476872][T22298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.612614][ T5832] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1467.799627][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 1467.825768][ T5832] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1467.862600][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.903578][ T5832] usb 5-1: config 0 descriptor?? [ 1467.946486][ T5832] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1468.155921][T22256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.165128][T22256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.367369][ T30] audit: type=1326 audit(1746587268.144:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.442259][ T30] audit: type=1326 audit(1746587268.144:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.512280][ T30] audit: type=1326 audit(1746587268.144:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.582742][ T30] audit: type=1326 audit(1746587268.144:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.683327][ T30] audit: type=1326 audit(1746587268.144:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.792521][ T30] audit: type=1326 audit(1746587268.174:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.856646][T22343] FAULT_INJECTION: forcing a failure. [ 1468.856646][T22343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1468.861420][ T5832] gspca_sunplus: reg_r err -71 [ 1468.902645][ T5832] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1468.912564][ T30] audit: type=1326 audit(1746587268.174:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1468.936087][T22343] CPU: 1 UID: 0 PID: 22343 Comm: syz.6.4423 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1468.936115][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1468.936128][T22343] Call Trace: [ 1468.936136][T22343] [ 1468.936146][T22343] dump_stack_lvl+0x189/0x250 [ 1468.936181][T22343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1468.936211][T22343] ? __pfx__printk+0x10/0x10 [ 1468.936233][T22343] ? fs_reclaim_acquire+0x7d/0x100 [ 1468.936269][T22343] should_fail_ex+0x414/0x560 [ 1468.936308][T22343] prepare_alloc_pages+0x213/0x610 [ 1468.936369][T22343] __alloc_frozen_pages_noprof+0x123/0x370 [ 1468.936405][T22343] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1468.936445][T22343] ? policy_nodemask+0x27c/0x720 [ 1468.936475][T22343] alloc_pages_mpol+0x232/0x4a0 [ 1468.936546][T22343] folio_alloc_mpol_noprof+0x39/0x70 [ 1468.936574][T22343] shmem_alloc_and_add_folio+0x447/0xf60 [ 1468.936604][T22343] ? filemap_get_entry+0xad/0x2f0 [ 1468.936638][T22343] ? filemap_get_entry+0xad/0x2f0 [ 1468.936666][T22343] ? filemap_get_entry+0xad/0x2f0 [ 1468.936699][T22343] ? shmem_huge_global_enabled+0x174/0x3a0 [ 1468.936722][T22343] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1468.936752][T22343] ? shmem_allowable_huge_orders+0x414/0x420 [ 1468.936782][T22343] shmem_get_folio_gfp+0x597/0x15f0 [ 1468.936825][T22343] shmem_fault+0x179/0x390 [ 1468.936860][T22343] __do_fault+0x135/0x390 [ 1468.936893][T22343] __handle_mm_fault+0x363e/0x5380 [ 1468.936935][T22343] ? __pfx___handle_mm_fault+0x10/0x10 [ 1468.936971][T22343] ? follow_page_pte+0x888/0x13c0 [ 1468.937006][T22343] handle_mm_fault+0x3f6/0x8c0 [ 1468.937041][T22343] __get_user_pages+0x16f0/0x2a40 [ 1468.937071][T22343] ? mt_find+0x15c/0x5f0 [ 1468.937115][T22343] ? __pfx___get_user_pages+0x10/0x10 [ 1468.937149][T22343] populate_vma_page_range+0x26b/0x340 [ 1468.937176][T22343] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1468.937197][T22343] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1468.937223][T22343] ? down_read+0x1ad/0x2e0 [ 1468.937253][T22343] __mm_populate+0x24c/0x380 [ 1468.937278][T22343] ? __pfx___mm_populate+0x10/0x10 [ 1468.937304][T22343] ? up_write+0x1c4/0x420 [ 1468.937331][T22343] vm_mmap_pgoff+0x3f0/0x4c0 [ 1468.937359][T22343] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1468.937378][T22343] ? ksys_write+0x1f0/0x250 [ 1468.937399][T22343] ? rcu_is_watching+0x15/0xb0 [ 1468.937435][T22343] ? ksys_mmap_pgoff+0xf4/0x760 [ 1468.937461][T22343] ? __x64_sys_mmap+0x7f/0x140 [ 1468.937496][T22343] do_syscall_64+0xf6/0x210 [ 1468.937521][T22343] ? clear_bhb_loop+0x45/0xa0 [ 1468.937546][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.937566][T22343] RIP: 0033:0x7fae2cf8e969 [ 1468.937584][T22343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1468.937603][T22343] RSP: 002b:00007fae2dd1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1468.937624][T22343] RAX: ffffffffffffffda RBX: 00007fae2d1b5fa0 RCX: 00007fae2cf8e969 [ 1468.937639][T22343] RDX: 00000000027fffff RSI: 0000000000600000 RDI: 0000200000000000 [ 1468.937652][T22343] RBP: 00007fae2dd1c090 R08: ffffffffffffffff R09: 0000000000000000 [ 1468.937666][T22343] R10: 0000000004082031 R11: 0000000000000246 R12: 0000000000000002 [ 1468.937680][T22343] R13: 0000000000000000 R14: 00007fae2d1b5fa0 R15: 00007fae2d2dfa28 [ 1468.937711][T22343] [ 1468.963452][ T5832] usb 5-1: USB disconnect, device number 100 [ 1469.182610][ T30] audit: type=1326 audit(1746587268.174:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1469.252858][T19490] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1469.256609][ T30] audit: type=1326 audit(1746587268.174:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1469.365249][ T30] audit: type=1326 audit(1746587268.174:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22327 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70def8e969 code=0x7ffc0000 [ 1469.387715][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.448278][T22350] FAULT_INJECTION: forcing a failure. [ 1469.448278][T22350] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.477446][T22350] CPU: 1 UID: 0 PID: 22350 Comm: syz.2.4425 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1469.477479][T22350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1469.477492][T22350] Call Trace: [ 1469.477500][T22350] [ 1469.477509][T22350] dump_stack_lvl+0x189/0x250 [ 1469.477546][T22350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1469.477575][T22350] ? __pfx__printk+0x10/0x10 [ 1469.477602][T22350] ? __pfx___might_resched+0x10/0x10 [ 1469.477621][T22350] ? fs_reclaim_acquire+0x7d/0x100 [ 1469.477656][T22350] should_fail_ex+0x414/0x560 [ 1469.477693][T22350] should_failslab+0xa8/0x100 [ 1469.477730][T22350] __kmalloc_noprof+0xcb/0x4f0 [ 1469.477755][T22350] ? nft_set_elem_init+0xa8/0x7e0 [ 1469.477781][T22350] ? nft_limit_clone+0x23b/0x350 [ 1469.477811][T22350] nft_set_elem_init+0xa8/0x7e0 [ 1469.477838][T22350] ? nft_set_elem_expr_clone+0x96b/0xa90 [ 1469.477876][T22350] nf_tables_newsetelem+0x220e/0x4340 [ 1469.477944][T22350] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1469.477969][T22350] ? __lock_acquire+0xaac/0xd20 [ 1469.478015][T22350] ? nla_validate_array+0xfc/0x260 [ 1469.478071][T22350] ? __pfx___nla_validate_parse+0x10/0x10 [ 1469.478102][T22350] ? __lock_acquire+0xaac/0xd20 [ 1469.478137][T22350] ? nfnl_pernet+0x23/0x240 [ 1469.478174][T22350] ? __nla_parse+0x40/0x60 [ 1469.478206][T22350] nfnetlink_rcv+0x113f/0x2530 [ 1469.478268][T22350] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1469.478292][T22350] ? stack_depot_save_flags+0x40/0x910 [ 1469.478384][T22350] ? netlink_deliver_tap+0x2e/0x1b0 [ 1469.478406][T22350] ? netlink_deliver_tap+0x2e/0x1b0 [ 1469.478434][T22350] netlink_unicast+0x758/0x8d0 [ 1469.478478][T22350] netlink_sendmsg+0x805/0xb30 [ 1469.478511][T22350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.478537][T22350] ? aa_sock_msg_perm+0x94/0x160 [ 1469.478561][T22350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1469.478584][T22350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1469.478608][T22350] __sock_sendmsg+0x219/0x270 [ 1469.478644][T22350] ____sys_sendmsg+0x505/0x830 [ 1469.478676][T22350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1469.478720][T22350] ? import_iovec+0x74/0xa0 [ 1469.478751][T22350] ___sys_sendmsg+0x21f/0x2a0 [ 1469.478781][T22350] ? __pfx____sys_sendmsg+0x10/0x10 [ 1469.478846][T22350] ? __fget_files+0x2a/0x420 [ 1469.478871][T22350] ? __fget_files+0x3a0/0x420 [ 1469.478924][T22350] __x64_sys_sendmsg+0x19b/0x260 [ 1469.478955][T22350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1469.479008][T22350] ? do_syscall_64+0xba/0x210 [ 1469.479037][T22350] do_syscall_64+0xf6/0x210 [ 1469.479063][T22350] ? clear_bhb_loop+0x45/0xa0 [ 1469.479089][T22350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.479109][T22350] RIP: 0033:0x7fa5db78e969 [ 1469.479127][T22350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.479145][T22350] RSP: 002b:00007fa5dc6a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1469.479167][T22350] RAX: ffffffffffffffda RBX: 00007fa5db9b5fa0 RCX: 00007fa5db78e969 [ 1469.479182][T22350] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1469.479196][T22350] RBP: 00007fa5dc6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1469.479209][T22350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1469.479221][T22350] R13: 0000000000000000 R14: 00007fa5db9b5fa0 R15: 00007fa5dbadfa28 [ 1469.479253][T22350] [ 1469.811114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.981205][T13424] usb 8-1: USB disconnect, device number 3 [ 1470.105433][T22365] FAULT_INJECTION: forcing a failure. [ 1470.105433][T22365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.179030][T22365] CPU: 0 UID: 0 PID: 22365 Comm: syz.7.4429 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1470.179061][T22365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1470.179074][T22365] Call Trace: [ 1470.179082][T22365] [ 1470.179092][T22365] dump_stack_lvl+0x189/0x250 [ 1470.179130][T22365] ? __lock_acquire+0xaac/0xd20 [ 1470.179162][T22365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.179192][T22365] ? __pfx__printk+0x10/0x10 [ 1470.179213][T22365] ? __might_fault+0xb0/0x130 [ 1470.179253][T22365] should_fail_ex+0x414/0x560 [ 1470.179291][T22365] _copy_from_user+0x2d/0xb0 [ 1470.179320][T22365] snd_ctl_ioctl+0xaa2/0x1ad0 [ 1470.179353][T22365] ? stack_trace_save+0x9c/0xe0 [ 1470.179375][T22365] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1470.179403][T22365] ? stack_depot_save_flags+0x40/0x910 [ 1470.179481][T22365] ? kasan_quarantine_put+0xdd/0x220 [ 1470.179514][T22365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1470.179549][T22365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1470.179581][T22365] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1470.179612][T22365] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1470.179646][T22365] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1470.179707][T22365] ? __lock_acquire+0xaac/0xd20 [ 1470.179755][T22365] ? __fget_files+0x2a/0x420 [ 1470.179786][T22365] ? __fget_files+0x3a0/0x420 [ 1470.179811][T22365] ? __fget_files+0x2a/0x420 [ 1470.179841][T22365] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1470.179867][T22365] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1470.179895][T22365] __se_sys_ioctl+0xf9/0x170 [ 1470.179919][T22365] do_syscall_64+0xf6/0x210 [ 1470.179946][T22365] ? clear_bhb_loop+0x45/0xa0 [ 1470.179971][T22365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.179991][T22365] RIP: 0033:0x7fdad398e969 [ 1470.180010][T22365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.180027][T22365] RSP: 002b:00007fdad17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.180049][T22365] RAX: ffffffffffffffda RBX: 00007fdad3bb5fa0 RCX: 00007fdad398e969 [ 1470.180064][T22365] RDX: 0000200000000040 RSI: 00000000c1105518 RDI: 0000000000000003 [ 1470.180078][T22365] RBP: 00007fdad17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.180091][T22365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.180104][T22365] R13: 0000000000000000 R14: 00007fdad3bb5fa0 R15: 00007fdad3cdfa28 [ 1470.180134][T22365] [ 1470.592740][T19490] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1470.814751][T19490] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1470.835035][T19490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.858569][T19490] usb 3-1: Product: syz [ 1470.872746][T19490] usb 3-1: Manufacturer: syz [ 1470.892609][T19490] usb 3-1: SerialNumber: syz [ 1470.911020][T19490] usb 3-1: config 0 descriptor?? [ 1470.981716][T22379] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4432'. [ 1471.031370][T22379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.059043][T22385] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1471.229440][T22388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.238758][T22388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.343968][T22362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.353620][T22362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.391361][T19490] usb 3-1: Firmware version (0.0) predates our first public release. [ 1471.410690][T19490] usb 3-1: Please update to version 0.2 or newer [ 1471.474399][T19490] usb 3-1: USB disconnect, device number 119 [ 1471.840400][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4437'. [ 1471.865766][T22399] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1471.933204][T22399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1474.433606][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 1475.140073][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4444'. [ 1475.332178][T22445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.352094][T22445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.404382][T22449] FAULT_INJECTION: forcing a failure. [ 1475.404382][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.478527][T22449] CPU: 1 UID: 0 PID: 22449 Comm: syz.1.4446 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1475.478560][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1475.478574][T22449] Call Trace: [ 1475.478582][T22449] [ 1475.478592][T22449] dump_stack_lvl+0x189/0x250 [ 1475.478625][T22449] ? __lock_acquire+0xaac/0xd20 [ 1475.478656][T22449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.478685][T22449] ? __pfx__printk+0x10/0x10 [ 1475.478705][T22449] ? __might_fault+0xb0/0x130 [ 1475.478743][T22449] should_fail_ex+0x414/0x560 [ 1475.478781][T22449] _copy_from_iter+0x1db/0x15a0 [ 1475.478813][T22449] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1475.478836][T22449] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1475.478861][T22449] ? __pfx__copy_from_iter+0x10/0x10 [ 1475.478887][T22449] ? __build_skb_around+0x257/0x3e0 [ 1475.478913][T22449] ? netlink_sendmsg+0x642/0xb30 [ 1475.478934][T22449] ? skb_put+0x11b/0x210 [ 1475.478961][T22449] netlink_sendmsg+0x6b2/0xb30 [ 1475.478991][T22449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.479016][T22449] ? aa_sock_msg_perm+0x94/0x160 [ 1475.479041][T22449] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1475.479063][T22449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.479086][T22449] __sock_sendmsg+0x219/0x270 [ 1475.479122][T22449] ____sys_sendmsg+0x505/0x830 [ 1475.479153][T22449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.479187][T22449] ? import_iovec+0x74/0xa0 [ 1475.479215][T22449] ___sys_sendmsg+0x21f/0x2a0 [ 1475.479252][T22449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.479310][T22449] ? __fget_files+0x2a/0x420 [ 1475.479335][T22449] ? __fget_files+0x3a0/0x420 [ 1475.479372][T22449] __x64_sys_sendmsg+0x19b/0x260 [ 1475.479402][T22449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1475.479445][T22449] ? do_syscall_64+0xba/0x210 [ 1475.479475][T22449] do_syscall_64+0xf6/0x210 [ 1475.479501][T22449] ? clear_bhb_loop+0x45/0xa0 [ 1475.479525][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.479544][T22449] RIP: 0033:0x7f70def8e969 [ 1475.479564][T22449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.479580][T22449] RSP: 002b:00007f70dfecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.479602][T22449] RAX: ffffffffffffffda RBX: 00007f70df1b5fa0 RCX: 00007f70def8e969 [ 1475.479616][T22449] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1475.479628][T22449] RBP: 00007f70dfecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.479641][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.479653][T22449] R13: 0000000000000000 R14: 00007f70df1b5fa0 R15: 00007f70df2dfa28 [ 1475.479684][T22449] [ 1475.745428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.884181][T16632] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1476.098247][T16632] usb 5-1: Using ep0 maxpacket: 32 [ 1476.109095][T16632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1476.119576][T22453] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 48 [ 1476.123625][T16632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1476.198787][T22455] netlink: 'syz.1.4448': attribute type 1 has an invalid length. [ 1476.222781][T22457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.233648][T16632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1476.247734][T22457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.333412][T16632] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1476.376353][T16632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.506470][T22459] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1476.512459][T16632] usb 5-1: Product: syz [ 1476.561469][T16632] usb 5-1: Manufacturer: syz [ 1476.596340][T16632] usb 5-1: SerialNumber: syz [ 1476.650266][T22455] veth3: entered promiscuous mode [ 1476.665007][T16632] usb 5-1: config 0 descriptor?? [ 1476.665856][T22455] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 1477.138091][T22475] snd_dummy snd_dummy.0: control 0:0:0:syz1:-2 is already present [ 1477.254194][T16632] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1477.301967][T22481] ptrace attach of "./syz-executor exec"[18283] was attempted by "./syz-executor exec"[22481] [ 1477.317297][T22481] netlink: 4224 bytes leftover after parsing attributes in process `syz.6.4450'. [ 1477.844038][T16632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.858204][T16632] usb 3-1: config 0 has no interfaces? [ 1477.887755][T16632] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1477.920259][T16632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.976328][T16632] usb 3-1: config 0 descriptor?? [ 1478.120807][ T5832] usb 5-1: USB disconnect, device number 101 [ 1479.809736][T22518] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1480.323080][T22522] ptrace attach of "./syz-executor exec"[17799] was attempted by "./syz-executor exec"[22522] [ 1481.058360][T13424] usb 3-1: USB disconnect, device number 120 [ 1481.080509][T22471] delete_channel: no stack [ 1482.596897][T22564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1482.643215][T22564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1483.592770][T18536] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1483.744655][T18536] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1483.806522][T18536] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1483.838984][T18536] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1483.924262][T18536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.015983][T22575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1484.064849][T18536] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1484.543091][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.549712][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.058741][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4475'. [ 1485.074829][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4475'. [ 1485.800871][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.813593][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.740015][T16632] usb 5-1: USB disconnect, device number 102 [ 1487.099123][T22634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.143122][T22634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.452870][T16632] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1487.639425][T16632] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1487.700831][T16632] usb 5-1: config 95 has no interface number 0 [ 1487.812941][T16632] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1487.853482][T16632] usb 5-1: string descriptor 0 read error: -22 [ 1487.863858][T16632] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1487.893380][T16632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.096067][T22654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1488.184362][T18536] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1488.382570][T18536] usb 8-1: Using ep0 maxpacket: 8 [ 1488.400753][T18536] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.427283][T18536] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1488.516671][T13424] usb 5-1: USB disconnect, device number 103 [ 1488.525033][T18536] usb 8-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 1488.543617][T18536] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.601437][T22661] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4486'. [ 1488.612211][T18536] usb 8-1: config 0 descriptor?? [ 1488.665010][T18536] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input97 [ 1488.679532][T22663] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1488.742594][T22663] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1488.800868][T22661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.977656][T22661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.006131][T22647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.043052][T22647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.248444][ T5832] usb 8-1: USB disconnect, device number 4 [ 1489.250157][ T6106] bcm5974 8-1:0.0: could not read from device [ 1489.269077][ T5186] bcm5974 8-1:0.0: could not read from device [ 1489.972097][T22671] netlink: 'syz.7.4489': attribute type 16 has an invalid length. [ 1490.035145][T22671] netlink: 'syz.7.4489': attribute type 17 has an invalid length. [ 1490.267653][ T5832] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1490.314367][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.454841][ T5832] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.465523][ T5832] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1490.493238][ T5832] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1490.507080][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.525088][ T5832] usb 8-1: Product: syz [ 1490.537094][ T5832] usb 8-1: Manufacturer: syz [ 1490.557298][ T5832] usb 8-1: SerialNumber: syz [ 1490.693411][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.743127][T22671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.182760][T22671] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.202972][T22671] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.242228][T22671] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.295264][T22671] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.738745][ T5832] usb 8-1: 0:2 : does not exist [ 1491.831936][ T5832] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1491.900885][ T5832] usb 8-1: USB disconnect, device number 5 [ 1492.045497][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.328704][T22700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.351259][T22700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.424892][T18536] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1493.593027][T18536] usb 3-1: Using ep0 maxpacket: 8 [ 1493.601718][T18536] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1493.610874][T18536] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1493.628662][T18536] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1493.645392][T18536] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1493.743762][T18536] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.798496][T18536] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1493.836680][T18536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.066560][T18536] usb 3-1: GET_CAPABILITIES returned 0 [ 1494.078896][T18536] usbtmc 3-1:16.0: can't read capabilities [ 1494.273533][T22711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.284341][T22711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.348305][ T5832] usb 3-1: USB disconnect, device number 121 [ 1494.366746][T22711] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1494.865672][T22716] FAULT_INJECTION: forcing a failure. [ 1494.865672][T22716] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.012751][T22716] CPU: 1 UID: 0 PID: 22716 Comm: syz.1.4502 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1495.012783][T22716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1495.012797][T22716] Call Trace: [ 1495.012806][T22716] [ 1495.012815][T22716] dump_stack_lvl+0x189/0x250 [ 1495.012857][T22716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1495.012886][T22716] ? __pfx__printk+0x10/0x10 [ 1495.012914][T22716] ? __pfx___might_resched+0x10/0x10 [ 1495.012939][T22716] should_fail_ex+0x414/0x560 [ 1495.012977][T22716] should_failslab+0xa8/0x100 [ 1495.013005][T22716] __kmalloc_node_noprof+0xd1/0x4e0 [ 1495.013030][T22716] ? crypto_create_tfm_node+0x83/0x3e0 [ 1495.013064][T22716] crypto_create_tfm_node+0x83/0x3e0 [ 1495.013099][T22716] crypto_spawn_tfm2+0x5c/0x90 [ 1495.013122][T22716] crypto_rfc4309_init_tfm+0x45/0x150 [ 1495.013146][T22716] crypto_create_tfm_node+0x16a/0x3e0 [ 1495.013179][T22716] crypto_spawn_tfm2+0x5c/0x90 [ 1495.013201][T22716] aead_init_geniv+0x192/0x270 [ 1495.013233][T22716] crypto_create_tfm_node+0x16a/0x3e0 [ 1495.013267][T22716] crypto_alloc_tfm_node+0x172/0x3f0 [ 1495.013307][T22716] esp_init_state+0x36b/0x1140 [ 1495.013329][T22716] ? __sock_sendmsg+0x219/0x270 [ 1495.013359][T22716] ? ____sys_sendmsg+0x505/0x830 [ 1495.013382][T22716] ? ___sys_sendmsg+0x21f/0x2a0 [ 1495.013406][T22716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.013436][T22716] ? __pfx_esp_init_state+0x10/0x10 [ 1495.013470][T22716] ? __lock_acquire+0xaac/0xd20 [ 1495.013521][T22716] ? __xfrm_init_state+0x7ef/0x13f0 [ 1495.013548][T22716] __xfrm_init_state+0xa73/0x13f0 [ 1495.013567][T22716] ? __xfrm_init_state+0x7ef/0x13f0 [ 1495.013593][T22716] xfrm_add_sa+0x2f5d/0x4050 [ 1495.013624][T22716] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1495.013649][T22716] ? apparmor_capable+0x137/0x1b0 [ 1495.013682][T22716] ? __nla_parse+0x40/0x60 [ 1495.013710][T22716] xfrm_user_rcv_msg+0x7a0/0xab0 [ 1495.013738][T22716] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1495.013802][T22716] ? __mutex_trylock_common+0x153/0x260 [ 1495.013826][T22716] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1495.013845][T22716] ? __lock_acquire+0xaac/0xd20 [ 1495.013883][T22716] netlink_rcv_skb+0x219/0x490 [ 1495.013908][T22716] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1495.013930][T22716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1495.013977][T22716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.013998][T22716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.014023][T22716] xfrm_netlink_rcv+0x79/0x90 [ 1495.014044][T22716] netlink_unicast+0x758/0x8d0 [ 1495.014088][T22716] netlink_sendmsg+0x805/0xb30 [ 1495.014120][T22716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.014147][T22716] ? aa_sock_msg_perm+0x94/0x160 [ 1495.014170][T22716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1495.014193][T22716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.014216][T22716] __sock_sendmsg+0x219/0x270 [ 1495.014251][T22716] ____sys_sendmsg+0x505/0x830 [ 1495.014284][T22716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.014320][T22716] ? import_iovec+0x74/0xa0 [ 1495.014351][T22716] ___sys_sendmsg+0x21f/0x2a0 [ 1495.014384][T22716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.014445][T22716] ? __fget_files+0x2a/0x420 [ 1495.014478][T22716] ? __fget_files+0x3a0/0x420 [ 1495.014504][T22716] __x64_sys_sendmsg+0x19b/0x260 [ 1495.014525][T22716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.014557][T22716] ? do_syscall_64+0xba/0x210 [ 1495.014578][T22716] do_syscall_64+0xf6/0x210 [ 1495.014595][T22716] ? clear_bhb_loop+0x45/0xa0 [ 1495.014613][T22716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.014627][T22716] RIP: 0033:0x7f70def8e969 [ 1495.014645][T22716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.014658][T22716] RSP: 002b:00007f70dfecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.014675][T22716] RAX: ffffffffffffffda RBX: 00007f70df1b5fa0 RCX: 00007f70def8e969 [ 1495.014686][T22716] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 1495.014695][T22716] RBP: 00007f70dfecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.014704][T22716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.014713][T22716] R13: 0000000000000000 R14: 00007f70df1b5fa0 R15: 00007f70df2dfa28 [ 1495.014735][T22716] [ 1495.433218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.715097][T22718] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4505'. [ 1495.924883][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1496.273689][T22728] netlink: 'syz.4.4507': attribute type 1 has an invalid length. [ 1496.305427][T18536] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1496.334109][T22728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1496.363228][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 1496.417063][T22728] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1496.439229][T22728] vlan0: entered allmulticast mode [ 1496.447788][T22728] veth1: entered allmulticast mode [ 1496.454102][T22728] bond3: (slave vlan0): Opening slave failed [ 1496.462913][T18536] usb 3-1: Using ep0 maxpacket: 32 [ 1496.473784][T18536] usb 3-1: config 0 has no interfaces? [ 1496.485324][T18536] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1496.503679][T18536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.535284][T18536] usb 3-1: config 0 descriptor?? [ 1496.774709][T22722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.783957][T22722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.807044][ T5832] usb 3-1: USB disconnect, device number 122 [ 1497.296334][T22758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4518'. [ 1497.647330][T22766] FAULT_INJECTION: forcing a failure. [ 1497.647330][T22766] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.682589][T22766] CPU: 1 UID: 0 PID: 22766 Comm: syz.4.4521 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1497.682621][T22766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1497.682636][T22766] Call Trace: [ 1497.682657][T22766] [ 1497.682667][T22766] dump_stack_lvl+0x189/0x250 [ 1497.682709][T22766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.682743][T22766] ? __pfx__printk+0x10/0x10 [ 1497.682772][T22766] ? __pfx___might_resched+0x10/0x10 [ 1497.682799][T22766] should_fail_ex+0x414/0x560 [ 1497.682842][T22766] should_failslab+0xa8/0x100 [ 1497.682872][T22766] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1497.682902][T22766] ? __alloc_skb+0x112/0x2d0 [ 1497.682933][T22766] __alloc_skb+0x112/0x2d0 [ 1497.682963][T22766] netlink_sendmsg+0x5c6/0xb30 [ 1497.683000][T22766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.683029][T22766] ? aa_sock_msg_perm+0x94/0x160 [ 1497.683055][T22766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1497.683080][T22766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.683112][T22766] __sock_sendmsg+0x219/0x270 [ 1497.683152][T22766] ____sys_sendmsg+0x505/0x830 [ 1497.683189][T22766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1497.683228][T22766] ? import_iovec+0x74/0xa0 [ 1497.683263][T22766] ___sys_sendmsg+0x21f/0x2a0 [ 1497.683297][T22766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1497.683369][T22766] ? __fget_files+0x2a/0x420 [ 1497.683397][T22766] ? __fget_files+0x3a0/0x420 [ 1497.683438][T22766] __x64_sys_sendmsg+0x19b/0x260 [ 1497.683471][T22766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1497.683521][T22766] ? do_syscall_64+0xba/0x210 [ 1497.683553][T22766] do_syscall_64+0xf6/0x210 [ 1497.683582][T22766] ? clear_bhb_loop+0x45/0xa0 [ 1497.683610][T22766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.683632][T22766] RIP: 0033:0x7fc38278e969 [ 1497.683662][T22766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.683683][T22766] RSP: 002b:00007fc38357d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.683707][T22766] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278e969 [ 1497.683725][T22766] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000003 [ 1497.683740][T22766] RBP: 00007fc38357d090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.683754][T22766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.683768][T22766] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fc382adfa28 [ 1497.683802][T22766] [ 1497.934773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1497.951207][T22769] FAULT_INJECTION: forcing a failure. [ 1497.951207][T22769] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.963965][T22769] CPU: 1 UID: 0 PID: 22769 Comm: syz.7.4522 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1497.963990][T22769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1497.964004][T22769] Call Trace: [ 1497.964014][T22769] [ 1497.964023][T22769] dump_stack_lvl+0x189/0x250 [ 1497.964061][T22769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.964085][T22769] ? __pfx__printk+0x10/0x10 [ 1497.964105][T22769] ? __pfx___might_resched+0x10/0x10 [ 1497.964118][T22769] ? fs_reclaim_acquire+0x7d/0x100 [ 1497.964143][T22769] should_fail_ex+0x414/0x560 [ 1497.964170][T22769] should_failslab+0xa8/0x100 [ 1497.964191][T22769] __kmalloc_cache_noprof+0x70/0x3d0 [ 1497.964209][T22769] ? nft_limit_clone+0x1af/0x350 [ 1497.964231][T22769] nft_limit_clone+0x1af/0x350 [ 1497.964252][T22769] nft_set_elem_expr_setup+0x4af/0x830 [ 1497.964282][T22769] nf_tables_newsetelem+0x24b1/0x4340 [ 1497.964330][T22769] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1497.964348][T22769] ? __lock_acquire+0xaac/0xd20 [ 1497.964384][T22769] ? nla_validate_array+0xfc/0x260 [ 1497.964424][T22769] ? __pfx___nla_validate_parse+0x10/0x10 [ 1497.964447][T22769] ? __lock_acquire+0xaac/0xd20 [ 1497.964474][T22769] ? nfnl_pernet+0x23/0x240 [ 1497.964499][T22769] ? __nla_parse+0x40/0x60 [ 1497.964519][T22769] nfnetlink_rcv+0x113f/0x2530 [ 1497.964561][T22769] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1497.964578][T22769] ? stack_depot_save_flags+0x40/0x910 [ 1497.964641][T22769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1497.964657][T22769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1497.964676][T22769] netlink_unicast+0x758/0x8d0 [ 1497.964713][T22769] netlink_sendmsg+0x805/0xb30 [ 1497.964736][T22769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.964755][T22769] ? aa_sock_msg_perm+0x94/0x160 [ 1497.964772][T22769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1497.964788][T22769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.964805][T22769] __sock_sendmsg+0x219/0x270 [ 1497.964830][T22769] ____sys_sendmsg+0x505/0x830 [ 1497.964853][T22769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1497.964879][T22769] ? import_iovec+0x74/0xa0 [ 1497.964901][T22769] ___sys_sendmsg+0x21f/0x2a0 [ 1497.964922][T22769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1497.964967][T22769] ? __fget_files+0x2a/0x420 [ 1497.964986][T22769] ? __fget_files+0x3a0/0x420 [ 1497.965026][T22769] __x64_sys_sendmsg+0x19b/0x260 [ 1497.965048][T22769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1497.965079][T22769] ? do_syscall_64+0xba/0x210 [ 1497.965106][T22769] do_syscall_64+0xf6/0x210 [ 1497.965133][T22769] ? clear_bhb_loop+0x45/0xa0 [ 1497.965159][T22769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.965176][T22769] RIP: 0033:0x7fdad398e969 [ 1497.965189][T22769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.965202][T22769] RSP: 002b:00007fdad17f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1497.965218][T22769] RAX: ffffffffffffffda RBX: 00007fdad3bb5fa0 RCX: 00007fdad398e969 [ 1497.965229][T22769] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1497.965238][T22769] RBP: 00007fdad17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.965247][T22769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.965256][T22769] R13: 0000000000000000 R14: 00007fdad3bb5fa0 R15: 00007fdad3cdfa28 [ 1497.965278][T22769] [ 1498.296704][ C1] vkms_vblank_simulate: vblank timer overrun [ 1498.705777][T22772] FAULT_INJECTION: forcing a failure. [ 1498.705777][T22772] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.809127][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1498.818213][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.4.4524 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1498.818242][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1498.818255][T22772] Call Trace: [ 1498.818264][T22772] [ 1498.818273][T22772] dump_stack_lvl+0x189/0x250 [ 1498.818312][T22772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1498.818341][T22772] ? __pfx__printk+0x10/0x10 [ 1498.818367][T22772] ? __pfx___might_resched+0x10/0x10 [ 1498.818384][T22772] ? fs_reclaim_acquire+0x7d/0x100 [ 1498.818424][T22772] should_fail_ex+0x414/0x560 [ 1498.818461][T22772] should_failslab+0xa8/0x100 [ 1498.818488][T22772] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1498.818513][T22772] ? __d_alloc+0x31/0x6f0 [ 1498.818547][T22772] __d_alloc+0x31/0x6f0 [ 1498.818581][T22772] d_alloc_pseudo+0x1f/0xb0 [ 1498.818612][T22772] alloc_file_pseudo+0xcc/0x210 [ 1498.818645][T22772] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1498.818682][T22772] ? alloc_fd+0x64c/0x6c0 [ 1498.818711][T22772] sock_alloc_file+0xb8/0x2e0 [ 1498.818740][T22772] ? __sys_socket+0x12c/0x1b0 [ 1498.818763][T22772] __sys_socket+0x13d/0x1b0 [ 1498.818787][T22772] __x64_sys_socket+0x7a/0x90 [ 1498.818809][T22772] do_syscall_64+0xf6/0x210 [ 1498.818835][T22772] ? clear_bhb_loop+0x45/0xa0 [ 1498.818860][T22772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.818880][T22772] RIP: 0033:0x7fc38278e969 [ 1498.818898][T22772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1498.818916][T22772] RSP: 002b:00007fc38357d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1498.818937][T22772] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278e969 [ 1498.818952][T22772] RDX: 0000000000000084 RSI: 0000000000000003 RDI: 0000000000000002 [ 1498.818964][T22772] RBP: 00007fc38357d090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.818977][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.818989][T22772] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fc382adfa28 [ 1498.819019][T22772] [ 1499.034571][T22777] netlink: 'syz.7.4525': attribute type 1 has an invalid length. [ 1499.042363][T22777] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1499.051879][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1499.060787][T22777] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4525'. [ 1499.235890][T22783] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 1499.317427][T22788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1499.651380][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4529'. [ 1500.898668][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.898956][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.901678][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.901935][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.962934][T22840] xt_socket: unknown flags 0xd0 [ 1503.524860][T22850] x_tables: ip_tables: limit.0 match: invalid size 40 (kernel) != (user) 48 [ 1504.399559][T22863] __nla_validate_parse: 2 callbacks suppressed [ 1504.399649][T22863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4545'. [ 1507.258134][T22888] FAULT_INJECTION: forcing a failure. [ 1507.258134][T22888] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.322718][T22888] CPU: 1 UID: 0 PID: 22888 Comm: syz.2.4556 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1507.322751][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1507.322764][T22888] Call Trace: [ 1507.322773][T22888] [ 1507.322782][T22888] dump_stack_lvl+0x189/0x250 [ 1507.322820][T22888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1507.322851][T22888] ? __pfx__printk+0x10/0x10 [ 1507.322878][T22888] ? __pfx___might_resched+0x10/0x10 [ 1507.322896][T22888] ? fs_reclaim_acquire+0x7d/0x100 [ 1507.322930][T22888] should_fail_ex+0x414/0x560 [ 1507.322969][T22888] should_failslab+0xa8/0x100 [ 1507.322997][T22888] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1507.323023][T22888] ? __d_alloc+0x31/0x6f0 [ 1507.323065][T22888] __d_alloc+0x31/0x6f0 [ 1507.323094][T22888] ? __lock_acquire+0xaac/0xd20 [ 1507.323125][T22888] d_alloc_parallel+0xe0/0x14e0 [ 1507.323155][T22888] ? __d_lookup+0x66/0x780 [ 1507.323172][T22888] ? __d_lookup+0x66/0x780 [ 1507.323184][T22888] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1507.323202][T22888] ? __raw_spin_lock_init+0x45/0x100 [ 1507.323220][T22888] ? __init_waitqueue_head+0xa9/0x150 [ 1507.323254][T22888] proc_fill_cache+0x252/0x3d0 [ 1507.323272][T22888] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 1507.323290][T22888] ? __pfx_proc_fill_cache+0x10/0x10 [ 1507.323303][T22888] ? snprintf+0xda/0x120 [ 1507.323333][T22888] ? fget_task_next+0x572/0x5f0 [ 1507.323358][T22888] proc_readfd_common+0x3fe/0x5c0 [ 1507.323378][T22888] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 1507.323395][T22888] ? __pfx_proc_readfd_common+0x10/0x10 [ 1507.323413][T22888] ? end_current_label_crit_section+0x152/0x180 [ 1507.323432][T22888] ? iterate_dir+0x49f/0x770 [ 1507.323446][T22888] ? down_read_killable+0x1d1/0x350 [ 1507.323469][T22888] iterate_dir+0x5ac/0x770 [ 1507.323488][T22888] __se_sys_getdents64+0xe4/0x260 [ 1507.323506][T22888] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1507.323520][T22888] ? ksys_write+0x1f0/0x250 [ 1507.323534][T22888] ? __pfx_filldir64+0x10/0x10 [ 1507.323556][T22888] ? do_syscall_64+0xba/0x210 [ 1507.323576][T22888] do_syscall_64+0xf6/0x210 [ 1507.323594][T22888] ? clear_bhb_loop+0x45/0xa0 [ 1507.323611][T22888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.323625][T22888] RIP: 0033:0x7fa5db78e969 [ 1507.323638][T22888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.323650][T22888] RSP: 002b:00007fa5dc6a9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1507.323665][T22888] RAX: ffffffffffffffda RBX: 00007fa5db9b5fa0 RCX: 00007fa5db78e969 [ 1507.323676][T22888] RDX: 000000000000100f RSI: 0000200000001f00 RDI: 000000000000000a [ 1507.323685][T22888] RBP: 00007fa5dc6a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.323694][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1507.323702][T22888] R13: 0000000000000000 R14: 00007fa5db9b5fa0 R15: 00007fa5dbadfa28 [ 1507.323730][T22888] [ 1507.621815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.974242][T22891] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4557'. [ 1508.542838][T22904] xt_socket: unknown flags 0xd0 [ 1508.734031][T22898] tipc: Started in network mode [ 1508.743939][T22898] tipc: Node identity 8000008, cluster identity 4711 [ 1508.770137][T22898] tipc: Node number set to 134217736 [ 1509.829906][T22921] input: syz1 as /devices/virtual/input/input98 [ 1510.089059][T22926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1510.751570][T22943] tipc: Started in network mode [ 1510.763920][T22943] tipc: Node identity , cluster identity 4711 [ 1510.808777][T22943] tipc: Failed to set node id, please configure manually [ 1510.852981][T18536] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1510.891597][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4576'. [ 1510.905200][T22943] tipc: Enabling of bearer rejected, failed to enable media [ 1511.014633][T18536] usb 3-1: Using ep0 maxpacket: 16 [ 1511.031615][T18536] usb 3-1: config 0 has no interfaces? [ 1511.060361][T18536] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1511.104028][T18536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.179905][T18536] usb 3-1: config 0 descriptor?? [ 1511.407806][T22958] xt_socket: unknown flags 0xd0 [ 1512.212544][T18536] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1512.374763][T18536] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1512.393528][T10626] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1512.409729][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.433140][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.459838][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.475293][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.490347][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.527631][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.540822][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.551556][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.564108][T10626] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1512.574961][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.582621][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.602275][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.622677][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1512.629723][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.651940][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.661917][T22977] ptrace attach of "./syz-executor exec"[20089] was attempted by "./syz-executor exec"[22977] [ 1512.685111][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.713642][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.725005][T22977] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.4573'. [ 1512.735642][T22975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.744767][T22975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.764754][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.773286][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.783000][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.795543][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.810827][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.824501][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1512.844016][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.854346][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.881252][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.914946][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.939112][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1512.946031][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1512.967262][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1512.974257][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1512.987640][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.004231][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.020444][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.031709][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1513.049246][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.059999][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1513.078250][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.100859][T18536] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.125361][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1513.138730][T18536] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.164401][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.184715][T18536] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1513.302361][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.320964][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1513.330854][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.340832][T18536] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1513.350627][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.368556][T18536] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1513.436459][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1513.445144][T18536] usb 5-1: Product: syz [ 1513.489058][T18536] usb 5-1: Manufacturer: syz [ 1513.496988][T10626] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1513.508018][T18536] usb 5-1: SerialNumber: syz [ 1513.521270][T10626] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1513.543472][T18536] usb 5-1: config 0 descriptor?? [ 1513.560061][T18536] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1513.574011][T10626] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1513.601149][T10626] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1513.623106][T10626] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1513.655743][T22982] netlink: 'syz.6.4587': attribute type 10 has an invalid length. [ 1513.669133][T10626] usb 8-1: Product: syz [ 1513.672791][T22982] veth1_vlan: entered allmulticast mode [ 1513.676743][T10626] usb 8-1: Manufacturer: syz [ 1513.696912][T10626] usb 8-1: SerialNumber: syz [ 1513.716988][T22982] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4587'. [ 1513.720217][T10626] usb 8-1: config 0 descriptor?? [ 1513.813962][T10626] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 1513.830335][T22983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4582'. [ 1514.064726][T22987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4582'. [ 1514.400426][T22989] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4583'. [ 1514.576193][T22993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.585923][T22993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.632639][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1514.632659][ T30] audit: type=1326 audit(1746587314.374:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1514.760719][ T30] audit: type=1326 audit(1746587314.374:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1514.847637][T22994] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4583'. [ 1514.915517][ T5832] usb 3-1: USB disconnect, device number 123 [ 1515.205798][ T30] audit: type=1326 audit(1746587314.374:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1515.278715][ T30] audit: type=1326 audit(1746587314.374:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1515.558283][ T30] audit: type=1326 audit(1746587314.374:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1515.870496][ T30] audit: type=1326 audit(1746587314.374:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1515.965607][ T30] audit: type=1326 audit(1746587314.374:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1516.132602][ T30] audit: type=1326 audit(1746587314.374:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1516.342361][ T30] audit: type=1326 audit(1746587314.374:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1516.455017][ T30] audit: type=1326 audit(1746587314.374:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.6.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1516.639850][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1516.649484][T23000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4591'. [ 1516.698050][T23000] bridge0: entered promiscuous mode [ 1516.733729][T23000] ip6gretap0: entered promiscuous mode [ 1516.754620][T23000] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1516.778440][T23000] Cannot create hsr debugfs directory [ 1516.792845][T23000] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 1516.820973][T23000] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1517.050091][T10626] usb 8-1: USB disconnect, device number 6 [ 1517.061553][T10626] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 1518.009060][T19490] usb 5-1: USB disconnect, device number 104 [ 1518.018695][T19490] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1518.157442][T23017] netlink: 'syz.2.4596': attribute type 27 has an invalid length. [ 1518.196536][T23017] vlan2: left promiscuous mode [ 1518.212961][T23017] vlan2: left allmulticast mode [ 1518.226859][T23017] hsr_slave_1: left allmulticast mode [ 1518.352718][T10626] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1518.430702][T23030] input: syz1 as /devices/virtual/input/input99 [ 1518.489856][T23031] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.4599'. [ 1518.515885][T23031] openvswitch: netlink: Message has 5 unknown bytes. [ 1518.552759][T10626] usb 8-1: Using ep0 maxpacket: 8 [ 1518.600261][T10626] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.631694][T10626] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1518.674789][T10626] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.721832][T10626] usb 8-1: config 0 descriptor?? [ 1518.758303][T10626] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1518.774641][T23023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.790953][T23023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1519.442615][ T5829] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1519.603304][ T5829] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1519.612865][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1519.642265][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1519.682567][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1519.721056][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1519.741689][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1519.756699][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1519.766709][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1519.785343][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1519.817150][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1519.855067][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1519.887708][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1519.931508][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1519.946333][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1519.980331][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.005230][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.020199][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.031119][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.062673][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.089771][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.112679][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.153248][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.208961][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.222691][ T5829] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.251679][ T5829] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1520.280782][ T5829] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1520.293281][ T5829] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1520.307161][ T5829] usb 3-1: Product: syz [ 1520.311494][ T5829] usb 3-1: Manufacturer: syz [ 1520.318643][T23064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.334477][T23064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.343127][ T5829] usb 3-1: SerialNumber: syz [ 1520.354121][ T5829] usb 3-1: config 0 descriptor?? [ 1520.405163][ T5829] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1520.712260][T23074] FAULT_INJECTION: forcing a failure. [ 1520.712260][T23074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.726528][T23075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1520.731966][T23074] CPU: 0 UID: 0 PID: 23074 Comm: syz.4.4615 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1520.731998][T23074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1520.732013][T23074] Call Trace: [ 1520.732022][T23074] [ 1520.732032][T23074] dump_stack_lvl+0x189/0x250 [ 1520.732072][T23074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.732104][T23074] ? __pfx__printk+0x10/0x10 [ 1520.732140][T23074] should_fail_ex+0x414/0x560 [ 1520.732179][T23074] _copy_to_user+0x31/0xb0 [ 1520.732212][T23074] simple_read_from_buffer+0xe1/0x170 [ 1520.732243][T23074] proc_fail_nth_read+0x1df/0x250 [ 1520.732276][T23074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1520.732310][T23074] ? rw_verify_area+0x258/0x650 [ 1520.732331][T23074] ? aa_sk_perm+0x81e/0x950 [ 1520.732349][T23074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1520.732385][T23074] vfs_read+0x1fd/0x980 [ 1520.732411][T23074] ? tomoyo_socket_bind_permission+0x1e7/0x290 [ 1520.732441][T23074] ? __pfx_inet_bind_sk+0x10/0x10 [ 1520.732472][T23074] ? __pfx_vfs_read+0x10/0x10 [ 1520.732497][T23074] ? bpf_lsm_socket_bind+0x9/0x20 [ 1520.732525][T23074] ? __sys_bind+0x2e9/0x3e0 [ 1520.732550][T23074] ? __pfx___sys_bind+0x10/0x10 [ 1520.732579][T23074] ksys_read+0x145/0x250 [ 1520.732606][T23074] ? __pfx_ksys_read+0x10/0x10 [ 1520.732652][T23074] ? do_syscall_64+0xba/0x210 [ 1520.732682][T23074] do_syscall_64+0xf6/0x210 [ 1520.732708][T23074] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1520.732731][T23074] ? clear_bhb_loop+0x45/0xa0 [ 1520.732765][T23074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.732787][T23074] RIP: 0033:0x7fc38278d37c [ 1520.732808][T23074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1520.732826][T23074] RSP: 002b:00007fc38357d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1520.732848][T23074] RAX: ffffffffffffffda RBX: 00007fc3829b5fa0 RCX: 00007fc38278d37c [ 1520.732865][T23074] RDX: 000000000000000f RSI: 00007fc38357d0a0 RDI: 0000000000000004 [ 1520.732877][T23074] RBP: 00007fc38357d090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.732891][T23074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.732903][T23074] R13: 0000000000000000 R14: 00007fc3829b5fa0 R15: 00007fc382adfa28 [ 1520.732935][T23074] [ 1520.915843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1521.077794][T23082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.107938][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1521.135948][T23082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.263865][T23082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.275711][T23082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.422153][ T5832] usb 8-1: USB disconnect, device number 7 [ 1521.495008][T19490] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1521.682855][T19490] usb 5-1: Using ep0 maxpacket: 8 [ 1521.719660][T19490] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1521.747721][T19490] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1521.890259][T19490] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1521.954904][T19490] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.028382][T19490] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.192296][T19490] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.232968][T19490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.535504][T19490] usb 5-1: usb_control_msg returned -32 [ 1522.585090][T19490] usbtmc 5-1:16.0: can't read capabilities [ 1522.883129][T19490] usb 5-1: USB disconnect, device number 105 [ 1524.723167][T19490] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1524.825084][T16632] usb 3-1: USB disconnect, device number 124 [ 1524.835420][T16632] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1525.056860][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4630'. [ 1525.103457][T19490] usb 8-1: config 0 has no interfaces? [ 1525.109251][T19490] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1525.136720][T19490] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.160891][T19490] usb 8-1: config 0 descriptor?? [ 1525.232053][T23130] xt_socket: unknown flags 0xd0 [ 1525.301882][T23133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.385622][T23133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.449456][T23137] usb usb8: usbfs: process 23137 (syz.2.4634) did not claim interface 0 before use [ 1525.647720][T23141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.727858][T23141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.746113][T23141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.769838][T23141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.000944][T23146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1526.020234][T23146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1526.379107][T23150] vivid-000: disconnect [ 1526.516894][T23140] vivid-000: reconnect [ 1527.428439][ T5829] usb 8-1: USB disconnect, device number 8 [ 1527.834995][T23180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.903665][T23180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.182241][T23192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.238548][T23190] xt_socket: unknown flags 0xd0 [ 1528.359893][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1528.359913][ T30] audit: type=1326 audit(1746587328.134:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.411589][T23195] Cannot find set identified by id 0 to match [ 1528.418691][T23192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.472536][T19490] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1528.570171][ T30] audit: type=1326 audit(1746587328.134:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.642842][ T30] audit: type=1326 audit(1746587328.134:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.665383][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.714735][T19490] usb 3-1: config 0 has no interfaces? [ 1528.731799][ T30] audit: type=1326 audit(1746587328.134:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.780579][ T30] audit: type=1326 audit(1746587328.134:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.825762][ T30] audit: type=1326 audit(1746587328.164:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.848415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.875352][ T30] audit: type=1326 audit(1746587328.164:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1528.897898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.981471][ T30] audit: type=1326 audit(1746587328.164:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1529.062850][T19490] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1529.071963][T19490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.087058][T19490] usb 3-1: Product: syz [ 1529.095489][T19490] usb 3-1: Manufacturer: syz [ 1529.100115][T19490] usb 3-1: SerialNumber: syz [ 1529.167754][ T30] audit: type=1326 audit(1746587328.474:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1529.251690][ T30] audit: type=1326 audit(1746587328.474:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23179 comm="syz.6.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2cf8e969 code=0x7ffc0000 [ 1529.289118][T19490] usb 3-1: config 0 descriptor?? [ 1530.996798][T23223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1531.352765][T19490] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1531.802240][T23243] FAULT_INJECTION: forcing a failure. [ 1531.802240][T23243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.923430][T23243] CPU: 0 UID: 0 PID: 23243 Comm: syz.7.4666 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1531.923460][T23243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1531.923473][T23243] Call Trace: [ 1531.923482][T23243] [ 1531.923491][T23243] dump_stack_lvl+0x189/0x250 [ 1531.923522][T23243] ? __lock_acquire+0xaac/0xd20 [ 1531.923554][T23243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.923582][T23243] ? __pfx__printk+0x10/0x10 [ 1531.923603][T23243] ? __might_fault+0xb0/0x130 [ 1531.923640][T23243] should_fail_ex+0x414/0x560 [ 1531.923678][T23243] _copy_from_iter+0x1db/0x15a0 [ 1531.923700][T23243] ? schedule+0x165/0x360 [ 1531.923720][T23243] ? __mutex_lock+0x51b/0xe80 [ 1531.923750][T23243] ? anon_pipe_write+0xbf4/0x1360 [ 1531.923777][T23243] ? __pfx__copy_from_iter+0x10/0x10 [ 1531.923800][T23243] ? __pfx___mutex_lock+0x10/0x10 [ 1531.923832][T23243] ? schedule+0x91/0x360 [ 1531.923850][T23243] ? page_copy_sane+0x4e/0x280 [ 1531.923876][T23243] copy_page_from_iter+0x7b/0x100 [ 1531.923903][T23243] anon_pipe_write+0x99a/0x1360 [ 1531.923934][T23243] ? anon_pipe_write+0xb61/0x1360 [ 1531.923975][T23243] ? __pfx_anon_pipe_write+0x10/0x10 [ 1531.924002][T23243] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1531.924029][T23243] ? bpf_lsm_file_permission+0x9/0x20 [ 1531.924053][T23243] ? security_file_permission+0x75/0x290 [ 1531.924092][T23243] vfs_write+0x548/0xa90 [ 1531.924120][T23243] ? __pfx_anon_pipe_write+0x10/0x10 [ 1531.924147][T23243] ? __pfx_vfs_write+0x10/0x10 [ 1531.924180][T23243] ? __fget_files+0x2a/0x420 [ 1531.924216][T23243] ksys_write+0x145/0x250 [ 1531.924244][T23243] ? rcu_is_watching+0x15/0xb0 [ 1531.924276][T23243] ? __pfx_ksys_write+0x10/0x10 [ 1531.924302][T23243] ? do_syscall_64+0xba/0x210 [ 1531.924330][T23243] do_syscall_64+0xf6/0x210 [ 1531.924355][T23243] ? clear_bhb_loop+0x45/0xa0 [ 1531.924386][T23243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.924405][T23243] RIP: 0033:0x7fdad398e969 [ 1531.924446][T23243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.924464][T23243] RSP: 002b:00007fdad17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1531.924485][T23243] RAX: ffffffffffffffda RBX: 00007fdad3bb5fa0 RCX: 00007fdad398e969 [ 1531.924501][T23243] RDX: 0000000000011000 RSI: 0000200000000340 RDI: 0000000000000004 [ 1531.924515][T23243] RBP: 00007fdad17f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.924528][T23243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1531.924541][T23243] R13: 0000000000000000 R14: 00007fdad3bb5fa0 R15: 00007fdad3cdfa28 [ 1531.924573][T23243] [ 1532.290375][T23247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1532.585091][ T5829] usb 3-1: USB disconnect, device number 125 [ 1532.717316][T23256] FAULT_INJECTION: forcing a failure. [ 1532.717316][T23256] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.767562][T23256] CPU: 0 UID: 0 PID: 23256 Comm: syz.1.4668 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1532.767594][T23256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1532.767608][T23256] Call Trace: [ 1532.767616][T23256] [ 1532.767625][T23256] dump_stack_lvl+0x189/0x250 [ 1532.767664][T23256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.767692][T23256] ? __pfx__printk+0x10/0x10 [ 1532.767719][T23256] ? __pfx___might_resched+0x10/0x10 [ 1532.767737][T23256] ? fs_reclaim_acquire+0x7d/0x100 [ 1532.767772][T23256] should_fail_ex+0x414/0x560 [ 1532.767810][T23256] should_failslab+0xa8/0x100 [ 1532.767838][T23256] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1532.767863][T23256] ? __kernfs_new_node+0xd7/0x7f0 [ 1532.767896][T23256] __kernfs_new_node+0xd7/0x7f0 [ 1532.767925][T23256] ? __lock_acquire+0xaac/0xd20 [ 1532.767960][T23256] ? __pfx___kernfs_new_node+0x10/0x10 [ 1532.767989][T23256] ? kernfs_root+0x1c/0x230 [ 1532.768023][T23256] ? kernfs_root+0x1c/0x230 [ 1532.768047][T23256] ? kernfs_root+0x1c/0x230 [ 1532.768072][T23256] ? kernfs_root+0x1c/0x230 [ 1532.768103][T23256] kernfs_new_node+0x102/0x210 [ 1532.768137][T23256] __kernfs_create_file+0x4b/0x2e0 [ 1532.768172][T23256] sysfs_add_file_mode_ns+0x238/0x300 [ 1532.768205][T23256] internal_create_group+0x66d/0x1110 [ 1532.768232][T23256] ? __lock_acquire+0xaac/0xd20 [ 1532.768275][T23256] ? __pfx_internal_create_group+0x10/0x10 [ 1532.768316][T23256] sysfs_create_groups+0x59/0x120 [ 1532.768348][T23256] device_add_attrs+0xe0/0x5a0 [ 1532.768379][T23256] ? __pfx_device_add_attrs+0x10/0x10 [ 1532.768399][T23256] ? kobject_put+0x43f/0x480 [ 1532.768433][T23256] ? device_add_class_symlinks+0x21f/0x240 [ 1532.768460][T23256] device_add+0x496/0xb50 [ 1532.768487][T23256] device_create+0x25b/0x2f0 [ 1532.768514][T23256] ? format_decode+0x5ee/0xe30 [ 1532.768542][T23256] ? string+0x279/0x2b0 [ 1532.768570][T23256] ? widen_string+0x3b/0x2a0 [ 1532.768589][T23256] ? __pfx_device_create+0x10/0x10 [ 1532.768627][T23256] bdi_register_va+0x9c/0x740 [ 1532.768653][T23256] super_setup_bdi_name+0xe6/0x200 [ 1532.768677][T23256] ? fuse_dev_install+0x8d/0x1a0 [ 1532.768702][T23256] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 1532.768733][T23256] ? do_raw_spin_unlock+0x122/0x240 [ 1532.768762][T23256] fuse_fill_super_common+0x64a/0x1150 [ 1532.768795][T23256] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 1532.768816][T23256] ? __init_swait_queue_head+0xa9/0x150 [ 1532.768844][T23256] ? shrinker_register+0x16b/0x230 [ 1532.768868][T23256] ? sget_fc+0x962/0xa40 [ 1532.768890][T23256] fuse_fill_super+0x176/0x1f0 [ 1532.768912][T23256] ? __pfx_fuse_fill_super+0x10/0x10 [ 1532.768935][T23256] get_tree_nodev+0xb8/0x150 [ 1532.768958][T23256] fuse_get_tree+0x2eb/0x4e0 [ 1532.768985][T23256] vfs_get_tree+0x8f/0x2b0 [ 1532.769010][T23256] do_new_mount+0x24a/0xa40 [ 1532.769045][T23256] __se_sys_mount+0x317/0x410 [ 1532.769077][T23256] ? __pfx___se_sys_mount+0x10/0x10 [ 1532.769108][T23256] ? do_syscall_64+0xba/0x210 [ 1532.769131][T23256] ? __x64_sys_mount+0x20/0xc0 [ 1532.769169][T23256] do_syscall_64+0xf6/0x210 [ 1532.769195][T23256] ? clear_bhb_loop+0x45/0xa0 [ 1532.769220][T23256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.769240][T23256] RIP: 0033:0x7f70def8e969 [ 1532.769259][T23256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.769277][T23256] RSP: 002b:00007f70dfecb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1532.769300][T23256] RAX: ffffffffffffffda RBX: 00007f70df1b5fa0 RCX: 00007f70def8e969 [ 1532.769315][T23256] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 1532.769328][T23256] RBP: 00007f70dfecb090 R08: 0000200000002140 R09: 0000000000000000 [ 1532.769342][T23256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1532.769354][T23256] R13: 0000000000000000 R14: 00007f70df1b5fa0 R15: 00007f70df2dfa28 [ 1532.769385][T23256] [ 1533.721447][T23270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4672'. [ 1533.773490][T19490] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1533.942473][T19490] usb 5-1: Using ep0 maxpacket: 16 [ 1533.949771][T19490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.961279][T19490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.982931][T19490] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1534.042148][T19490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.065550][T19490] usb 5-1: config 0 descriptor?? [ 1534.208189][T23278] snd_dummy snd_dummy.0: control 0:0:0:syz1:-2 is already present [ 1534.641959][T19490] playstation 0003:054C:05C4.002A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 1534.834342][T19490] playstation 0003:054C:05C4.002A: Invalid byte count transferred, expected 16 got 0 [ 1534.880007][T19490] playstation 0003:054C:05C4.002A: Failed to retrieve DualShock4 pairing info: -22 [ 1534.906045][T19490] playstation 0003:054C:05C4.002A: Failed to get MAC address from DualShock4 [ 1534.915070][T19490] playstation 0003:054C:05C4.002A: Failed to create dualshock4. [ 1534.927960][T19490] playstation 0003:054C:05C4.002A: probe with driver playstation failed with error -22 [ 1535.044397][T19490] usb 5-1: USB disconnect, device number 107 [ 1536.098384][T23302] Invalid logical block size (21930) [ 1536.439605][T23310] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4681'. [ 1536.812718][T10626] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1536.929506][T23320] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1537.451760][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1537.451774][ T30] audit: type=1326 audit(1746587337.224:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1537.492834][T23327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.502063][T23327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.610533][ T30] audit: type=1326 audit(1746587337.294:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1537.767187][ T30] audit: type=1326 audit(1746587337.294:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1537.824519][ T30] audit: type=1326 audit(1746587337.294:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1537.958823][ T30] audit: type=1326 audit(1746587337.294:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1538.081366][ T30] audit: type=1326 audit(1746587337.294:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1538.292735][ T30] audit: type=1326 audit(1746587337.294:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1538.401429][ T30] audit: type=1326 audit(1746587337.294:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1538.539822][ T30] audit: type=1326 audit(1746587337.294:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1538.641432][ T30] audit: type=1326 audit(1746587337.294:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23324 comm="syz.7.4689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad398e969 code=0x7ffc0000 [ 1540.536188][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1540.545802][T23371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1540.815455][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.906716][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.302791][T23375] ================================================================== [ 1541.310902][T23375] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1541.319523][T23375] Write of size 1280 at addr ffffc900046c7b40 by task vivid-000-vid-c/23375 [ 1541.328217][T23375] [ 1541.330548][T23375] CPU: 0 UID: 0 PID: 23375 Comm: vivid-000-vid-c Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1541.330568][T23375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1541.330578][T23375] Call Trace: [ 1541.330586][T23375] [ 1541.330593][T23375] dump_stack_lvl+0x189/0x250 [ 1541.330620][T23375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1541.330641][T23375] ? __pfx__printk+0x10/0x10 [ 1541.330656][T23375] ? __pfx__printk+0x10/0x10 [ 1541.330668][T23375] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1541.330684][T23375] ? __virt_addr_valid+0xc3/0x540 [ 1541.330706][T23375] print_report+0xb4/0x290 [ 1541.330723][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1541.330740][T23375] kasan_report+0x118/0x150 [ 1541.330760][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1541.330779][T23375] kasan_check_range+0x29a/0x2b0 [ 1541.330798][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1541.330814][T23375] __asan_memcpy+0x40/0x70 [ 1541.330829][T23375] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1541.330873][T23375] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 1541.330900][T23375] ? kvm_sched_clock_read+0x11/0x20 [ 1541.330917][T23375] ? __lock_acquire+0xaac/0xd20 [ 1541.330940][T23375] ? ktime_get+0x3e/0x1f0 [ 1541.330957][T23375] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1541.330979][T23375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1541.330999][T23375] vivid_thread_vid_cap+0x8d8/0x10d0 [ 1541.331024][T23375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1541.331039][T23375] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1541.331054][T23375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1541.331071][T23375] ? __kthread_parkme+0x7b/0x200 [ 1541.331086][T23375] ? __kthread_parkme+0x1a1/0x200 [ 1541.331102][T23375] kthread+0x70e/0x8a0 [ 1541.331120][T23375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1541.331154][T23375] ? __pfx_kthread+0x10/0x10 [ 1541.331171][T23375] ? __pfx_kthread+0x10/0x10 [ 1541.331186][T23375] ? _raw_spin_unlock_irq+0x23/0x50 [ 1541.331200][T23375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1541.331216][T23375] ? __pfx_kthread+0x10/0x10 [ 1541.331231][T23375] ret_from_fork+0x4b/0x80 [ 1541.331246][T23375] ? __pfx_kthread+0x10/0x10 [ 1541.331262][T23375] ret_from_fork_asm+0x1a/0x30 [ 1541.331287][T23375] [ 1541.331292][T23375] [ 1541.547833][T23375] The buggy address belongs to the virtual mapping at [ 1541.547833][T23375] [ffffc900046c5000, ffffc900046c9000) created by: [ 1541.547833][T23375] vb2_vmalloc_alloc+0xef/0x340 [ 1541.565764][T23375] [ 1541.568124][T23375] The buggy address belongs to the physical page: [ 1541.574572][T23375] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806448b000 pfn:0x6448b [ 1541.584675][T23375] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1541.591846][T23375] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1541.600609][T23375] raw: ffff88806448b000 0000000000000000 00000001ffffffff 0000000000000000 [ 1541.609225][T23375] page dumped because: kasan: bad access detected [ 1541.615765][T23375] page_owner tracks the page as allocated [ 1541.621500][T23375] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23373, tgid 23372 (syz.6.4703), ts 1541286286498, free_ts 1540503372740 [ 1541.641081][T23375] post_alloc_hook+0x1d8/0x230 [ 1541.645891][T23375] get_page_from_freelist+0x21ce/0x22b0 [ 1541.651477][T23375] __alloc_frozen_pages_noprof+0x181/0x370 [ 1541.657328][T23375] alloc_pages_mpol+0x232/0x4a0 [ 1541.662214][T23375] alloc_pages_noprof+0xa9/0x190 [ 1541.667288][T23375] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 1541.673217][T23375] vmalloc_user_noprof+0x74/0x80 [ 1541.678196][T23375] vb2_vmalloc_alloc+0xef/0x340 [ 1541.683081][T23375] __vb2_queue_alloc+0x9bf/0x15a0 [ 1541.688130][T23375] vb2_core_reqbufs+0xc31/0x1420 [ 1541.693100][T23375] __vb2_init_fileio+0x318/0xff0 [ 1541.698067][T23375] vb2_core_poll+0x4c1/0x840 [ 1541.702689][T23375] vb2_fop_poll+0x168/0x380 [ 1541.707220][T23375] v4l2_poll+0x144/0x2c0 [ 1541.711495][T23375] do_sys_poll+0x8be/0x1050 [ 1541.716023][T23375] __se_sys_ppoll+0x1ff/0x260 [ 1541.720749][T23375] page last free pid 23 tgid 23 stack trace: [ 1541.726745][T23375] __free_frozen_pages+0xb0e/0xcd0 [ 1541.731887][T23375] __tlb_remove_table+0x2d2/0x3b0 [ 1541.736946][T23375] tlb_remove_table_rcu+0x85/0x100 [ 1541.742081][T23375] rcu_core+0xca5/0x1710 [ 1541.746357][T23375] handle_softirqs+0x283/0x870 [ 1541.751156][T23375] run_ksoftirqd+0x9b/0x100 [ 1541.755683][T23375] smpboot_thread_fn+0x53f/0xa60 [ 1541.760656][T23375] kthread+0x70e/0x8a0 [ 1541.764756][T23375] ret_from_fork+0x4b/0x80 [ 1541.769209][T23375] ret_from_fork_asm+0x1a/0x30 [ 1541.774014][T23375] [ 1541.776355][T23375] Memory state around the buggy address: [ 1541.782007][T23375] ffffc900046c7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1541.790308][T23375] ffffc900046c7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1541.798397][T23375] >ffffc900046c8000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1541.806479][T23375] ^ [ 1541.810565][T23375] ffffc900046c8080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1541.818739][T23375] ffffc900046c8100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1541.826821][T23375] ================================================================== [ 1541.891898][T23376] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4699'. [ 1542.372745][T23375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1542.380013][T23375] CPU: 0 UID: 0 PID: 23375 Comm: vivid-000-vid-c Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1542.392549][T23375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1542.402723][T23375] Call Trace: [ 1542.406033][T23375] [ 1542.408990][T23375] dump_stack_lvl+0x99/0x250 [ 1542.413623][T23375] ? __asan_memcpy+0x40/0x70 [ 1542.418275][T23375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1542.423516][T23375] ? __pfx__printk+0x10/0x10 [ 1542.428138][T23375] panic+0x2db/0x790 [ 1542.432066][T23375] ? __pfx_panic+0x10/0x10 [ 1542.436602][T23375] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1542.442524][T23375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1542.448873][T23375] ? print_memory_metadata+0x314/0x400 [ 1542.454366][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1542.460032][T23375] check_panic_on_warn+0x89/0xb0 [ 1542.465002][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1542.470662][T23375] end_report+0x78/0x160 [ 1542.474935][T23375] kasan_report+0x129/0x150 [ 1542.479468][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1542.485114][T23375] kasan_check_range+0x29a/0x2b0 [ 1542.490064][T23375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1542.495742][T23375] __asan_memcpy+0x40/0x70 [ 1542.500202][T23375] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1542.505728][T23375] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 1542.511482][T23375] ? kvm_sched_clock_read+0x11/0x20 [ 1542.516706][T23375] ? __lock_acquire+0xaac/0xd20 [ 1542.521585][T23375] ? ktime_get+0x3e/0x1f0 [ 1542.525950][T23375] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1542.532216][T23375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1542.537526][T23375] vivid_thread_vid_cap+0x8d8/0x10d0 [ 1542.542831][T23375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1542.548559][T23375] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1542.554634][T23375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1542.560971][T23375] ? __kthread_parkme+0x7b/0x200 [ 1542.565914][T23375] ? __kthread_parkme+0x1a1/0x200 [ 1542.570949][T23375] kthread+0x70e/0x8a0 [ 1542.575043][T23375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1542.580788][T23375] ? __pfx_kthread+0x10/0x10 [ 1542.585490][T23375] ? __pfx_kthread+0x10/0x10 [ 1542.590160][T23375] ? _raw_spin_unlock_irq+0x23/0x50 [ 1542.595371][T23375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1542.600580][T23375] ? __pfx_kthread+0x10/0x10 [ 1542.605216][T23375] ret_from_fork+0x4b/0x80 [ 1542.609726][T23375] ? __pfx_kthread+0x10/0x10 [ 1542.614325][T23375] ret_from_fork_asm+0x1a/0x30 [ 1542.619204][T23375] [ 1542.622610][T23375] Kernel Offset: disabled [ 1542.626938][T23375] Rebooting in 86400 seconds..