last executing test programs: 2m32.418647516s ago: executing program 4 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x30040015) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 2m31.815505147s ago: executing program 4 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x80) 2m31.452173468s ago: executing program 4 (id=287): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x0, 0xfffffffffffffffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x45) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000005cc96b560000000800040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB="befd0091", @ANYRES32, @ANYBLOB], 0x44}}, 0x20000000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8c0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) 2m28.571058033s ago: executing program 4 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x30040015) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) 2m28.465910205s ago: executing program 4 (id=306): close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000002c0)) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) close(r4) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}], 0x3, 0x9, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x2, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f00000005c0)={0xe5a, 0x1, 0x10, 0x6, &(0x7f0000000480)=[{}]}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 2m26.139228218s ago: executing program 2 (id=314): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) getdents64(r0, &(0x7f0000000400)=""/233, 0xe9) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8bd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x39, 0x1, 0x0, "d52b3d000000fa44166262631e8ac11e000000000000000000000000ebff00", 0x47504a4d}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f0000001600)=ANY=[@ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYBLOB="f44be6dcc4acb647725c4cd3d095ea9431d0b280763c448e031db10dc3451c82e91be84c951992aed24e8caf6b0167375d5d89eff32e4e851b7cc8f3291055d42d6c3442914a33f8e0478e88759921034d1a2729a7c8c6b9116fb82d3081f361a535f37ae7ae1bd453638e0938901800f1df594bed9989a5cac5e6a6d4cb4016ed3c894bcef6dc22cdd6c2168bb9d152d60244de3e87690e75ea5b879da22f310404c485809a90ea7190778c379df2b50206b193422e42b06231c3f8df8bbcae40ba8de5d2616b3195c3551a2d", @ANYRES64=0x0, @ANYBLOB="45a987e877200462d24f0d48663edf1459f0a55aebef2b421e71d3324cd0e5ba6ecae25c4154", @ANYRES16=r0, @ANYRESOCT=r1]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xfffffffc, 0x10400, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x9ec, 0x0, 0x0, {0x6, 0x0, 0x0, 0x4000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x101001, 0x241) r5 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x101001, 0x1a5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000300)={0xc0000000, 0x100, "bd446adb65b8aea4ecdcf3a2f26181ab5648e1232705e6461aebb9b7d37304e8", 0x9, 0x8, 0x3, 0x10000, 0x1, 0x8, 0xfffffff8, 0x200, [0x4, 0x4484, 0x2]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x10) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f0000000000)='_', 0x1}], 0x1, 0x81, 0x0, 0x2) close(0xffffffffffffffff) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mq_timedsend(r7, &(0x7f0000000600)="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", 0xfd1, 0x9, 0x0) mknodat(r4, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) 2m25.135715616s ago: executing program 4 (id=318): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 2m23.090309049s ago: executing program 2 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c00000400128014000180", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}}, 0x0) 2m22.879156733s ago: executing program 3 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00"], 0x138}}, 0x0) 2m22.838459067s ago: executing program 2 (id=326): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008aec1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000015c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x6, 0x4, 0x2698, 0x8cf}}, 0x118) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x5402, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m22.590130023s ago: executing program 3 (id=329): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x7, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x20000, 0x0, 0x320}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r4, r7, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) socket$inet(0x2b, 0x801, 0x0) ftruncate(r1, 0x2007ffb) openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m21.414784445s ago: executing program 3 (id=331): syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xde23, 0x1, 0x0, 0x1a9}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3de8, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x30a, 0x4) close(r1) socket(0x1, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 2m21.20687895s ago: executing program 2 (id=332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000080000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff0000000003000600000000feffffffffffffff010000000000000000"], 0x50}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) syz_io_uring_setup(0x48a5, &(0x7f0000000340)={0x0, 0x9e92, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000180009002dbd70000038d8232f6fab6b30fe4500001c1410"], 0x1c}}, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000080), &(0x7f00000000c0), 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000100), &(0x7f0000000140), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) write(r7, &(0x7f0000000180)="01010101", 0x4) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f00000003c0), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 2m20.267700735s ago: executing program 2 (id=334): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x52c89}, @IFLA_TXQLEN={0x8, 0xd, 0xc}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 2m17.143947299s ago: executing program 2 (id=336): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) faccessat2(r0, &(0x7f0000000400)='./file0\x00', 0x104, 0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000240)={0x0, 0x9}) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x530, 0xc, 0x8, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000540)={[0xfffffffffffffffb, 0x1, 0xe, 0x5, 0x4, 0x9, 0x558, 0xcb7b, 0xfff, 0xa2, 0x0, 0x7, 0x3, 0x7ff, 0x4a900000, 0xf], 0x0, 0x1}) 2m17.143614434s ago: executing program 3 (id=337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000004}], 0x1, 0x40044) recvmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000a40)}, 0x0) 2m16.927431616s ago: executing program 3 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) socket$netlink(0x10, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m16.64829421s ago: executing program 3 (id=343): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x52f, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 2m9.439391343s ago: executing program 32 (id=318): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x15555555, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 2m2.064798288s ago: executing program 33 (id=336): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) faccessat2(r0, &(0x7f0000000400)='./file0\x00', 0x104, 0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000240)={0x0, 0x9}) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8, 0x530, 0xc, 0x8, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000540)={[0xfffffffffffffffb, 0x1, 0xe, 0x5, 0x4, 0x9, 0x558, 0xcb7b, 0xfff, 0xa2, 0x0, 0x7, 0x3, 0x7ff, 0x4a900000, 0xf], 0x0, 0x1}) 2m1.576106051s ago: executing program 34 (id=343): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x52f, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 1m51.577132852s ago: executing program 1 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) 1m51.545631296s ago: executing program 1 (id=422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x399, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='nv\x00', 0x3) shutdown(r2, 0x1) syz_emit_vhci(0x0, 0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000080)={0x100, 0x480, 0x690, 0x960, 0xfffffff8, 0x1000000f, 0x2, 0x2, {0x115559cb, 0x6, 0x1}, {0x8, 0xfffffffd}, {0x9, 0xabd0, 0x1}, {0xcde2, 0x3, 0x2}, 0x1, 0x1, 0xfffffff9, 0x5, 0x1, 0x1, 0x4, 0x0, 0x2, 0x6, 0x3d, 0x41, 0x18, 0x100, 0x3, 0x2}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000600)=0xe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="38000000200001000000000000000000020000000000000000000000140003006c6f000000000000000000000008000008000b"], 0x38}}, 0x0) 1m49.624819605s ago: executing program 1 (id=426): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000600", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m48.920805726s ago: executing program 1 (id=429): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x2000000) 1m48.636752296s ago: executing program 1 (id=430): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) 1m48.287891524s ago: executing program 1 (id=431): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast2, 0xf}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 1m32.858471369s ago: executing program 35 (id=431): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast2, 0xf}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r7, 0x1276, 0x20000000) 17.717012743s ago: executing program 5 (id=725): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x73ea, @private1, 0x3b}, {0xa, 0x4e21, 0x4, @remote, 0x4}, 0x0, {[0x80000001, 0xfd, 0x3, 0x7ff, 0x8, 0x6ae, 0xdb1, 0x1380000]}}, 0x5c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xefff, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 17.239489168s ago: executing program 5 (id=728): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000050003000000ebff"], 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004010) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20081, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x30, r5, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x6) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c010000150010001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x4000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000200001000400000000000000020000100000000009050100050019003c000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x48850) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r11 = dup(r10) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89ff, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xfffffffd, 0x4}}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000001980)={0xbe, 0x0, 0x80001}) socket(0x0, 0x5, 0x80000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) 16.142957604s ago: executing program 5 (id=733): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_io_uring_setup(0x54fd, &(0x7f0000000300)={0x0, 0x59bc, 0x8, 0x2, 0xe8}, &(0x7f0000000280), &(0x7f0000000380)) io_uring_enter(r4, 0x6e10, 0x93b4, 0x2, &(0x7f00000003c0)={[0x7ff]}, 0x8) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="d3410000fcc40000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071105f00000000000600001c000000009500000000020000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000540)={&(0x7f0000000440), &(0x7f0000000480)=""/184, 0xb8}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_TYPES(r6, 0x4068aea3, &(0x7f0000000180)={0xeb, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000240)={&(0x7f0000000200)="162f8333f8dfc501109a5a0e0c2a6a70010a68f16eb1577a79a2f8bb88157763bddd57966ac33a37f808c834762f037eb4d39830", 0x34}) 15.016137135s ago: executing program 5 (id=736): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xffff7034}, {0x808}, {0xa, 0x37, 0x0, 0x9}]}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0xd888, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa1fcbc06868da"], 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="79aaaaaaaa0dbbbbbbbbbbbb080045be003c006500004906907800000000ffffffff0000000000000000000000000200004e2300004e220000000400000002000000000000000000000005000000040000000500000008000000090000000300000020000000060000000500000100000000020000ffff000000100000001800000009fffffffd00000177000000040000009800000005000000e0000000010000000e000000050000010000000005000000060000a020"], 0x0) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x1fc}, 0x20) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x1}, 0x20) (rerun: 32) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) (async) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e80b0000", @ANYRES16=r4, @ANYBLOB="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"/3029], 0xbe8}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r4, @ANYRES8=r4], 0x4c}}, 0x0) (rerun: 64) 14.616036013s ago: executing program 5 (id=738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x1800}}], 0x400000000000181, 0x9200000000000000) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) 13.496107232s ago: executing program 5 (id=742): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000020605000000000000000000000000020500050014f013b40500010006000000050005000700000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x50}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0xc0}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005002000010000001400018008000100ac1414aa08000200000000000c001980080001000a"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) 9.610432901s ago: executing program 7 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005"], 0x138}}, 0x0) 9.452573737s ago: executing program 7 (id=758): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\"M'], 0x2b) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x4e25, @multicast1}}, 0x1}, 0x90) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x10000}, @in6={0xa, 0x4e23, 0xfffffff5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @in6={0xa, 0x4e24, 0x800, @mcast1, 0x1000}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xc}], 0x70) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x29) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r11, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r12, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005"], 0x138}}, 0x0) 7.716099036s ago: executing program 7 (id=762): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000080)=[@in6={0xa, 0x5, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0xe, @mcast2, 0xd2b}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x8001, @remote, 0xe}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4, 0xab}, &(0x7f0000000140)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 6.347311328s ago: executing program 7 (id=765): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0xb, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0xffffffffffff664c, 0x8, 0x9, 0x1, 0x0, 0x5, 0x5, 0x80, 0x300000000000, 0x3, 0x2, 0x3, 0x1db, 0x0, 0x8001, 0x502], 0x6000, 0x4050}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="00dbae15010504600007a9af78ac53536dc8c560c8eda0c5e4932e4e685a1a0bdf22d66b8dc33f5d0b60302df0c9d618eafa788f42d0e54c0f4de2bb4930fc054a57c5196c347afd910de7233934a23f03b6d92fa4319588c4f05edab0d239ea26e3a437961c104b0a842f17c817"], 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0xe1, 0x0, 0xff, 0x0}) 6.036029451s ago: executing program 6 (id=766): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000080000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff0000000003000600000000feffffffffffffff010000000000000000"], 0x50}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000002e00)=[{&(0x7f0000001980)=""/128, 0x80}], 0x1, 0x372, 0x0) syz_io_uring_setup(0x48a5, &(0x7f0000000340)={0x0, 0x9e92, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000180009002dbd70000038d8232f6fab6b30fe4500001c1410"], 0x1c}}, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f0000000100), &(0x7f0000000140), 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) write(r8, &(0x7f0000000180)="01010101", 0x4) close(r8) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r9) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f00000003c0), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 5.126550511s ago: executing program 6 (id=769): r0 = socket$pppoe(0x18, 0x1, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x35000000) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'macvlan1\x00'}}, 0x1e) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'macvlan1\x00'}}, 0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x189c40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x78, 0x80a0000, 0x4, 0xffffffffffffffff, 0xc8140ee6e279b533}) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x78, 0x80a0000, 0x4, 0xffffffffffffffff, 0xc8140ee6e279b533}) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401", @ANYRES64], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2) connect$qrtr(r6, 0x0, 0x0) (async) connect$qrtr(r6, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) listen(0xffffffffffffffff, 0x3) (async) listen(0xffffffffffffffff, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507de9881a1ffff00000204be04020506050e020409470009003f000c0010004600000085080000000000000065", 0x34, 0x800, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r9 = getpgrp(r8) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000000)={0x2, 0x4, 0x8}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000800050000008000080004000000000004cd2cda1e3cb216e43155bda93f86e8e0e5e4fced8aa527708a723ceeb03099a123e2802c8e3578e012f6f92f7e"], 0x48}}, 0x0) unshare(0x40000000) landlock_create_ruleset(0x0, 0x0, 0x0) (async) landlock_create_ruleset(0x0, 0x0, 0x0) 4.808152876s ago: executing program 0 (id=770): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) epoll_create(0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="d4e7db1d52d52f023458b201056f6c20ef323f7cb87e94c96d4115eda7ae5939707ede9fc0c28be674f6", 0x2a, 0x8940, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000000100001000200"/19, @ANYRES32=0x0, @ANYBLOB="000000006e65040008000400d9ff001008001b0000000000892b60d27630c1676d102d8d56e8f1c1221ba1154079b592e0599f994bc24de8dd40a7819783efaecf957a419feb0fdb5c8676af3e0a6a269dc0521fbb8144c46816fa95f818da71701210baf310453f49feaca2c405e4188fa7d2149e53c74bbd9488cb05dbbee3075212651f7f5b424bf1606e0d081375226d2acf30d079b003d45d3f0247f48fff991bf0ff54dd2988a1ad40000000"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x8}, {r3, 0xa001}, {r3, 0x8000}, {r3, 0x3150}, {r3, 0x4093}], 0x5, &(0x7f0000000080), &(0x7f00000000c0)={[0x2400000]}, 0x8) syz_open_dev$mouse(&(0x7f0000000240), 0xa, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x5, 0x1, 0x0, 0x3}) 3.754980269s ago: executing program 6 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYRES8=r0], 0x8c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, 0x0, &(0x7f0000001540)) bind$inet6(r1, &(0x7f00000010c0)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40669}, 0x1c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) syz_usb_connect(0x1, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x40, 0x98, 0x8, 0xc2e, 0x720, 0x9bf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x83, 0x4b, 0x3c, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "976362d424"}]}}]}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mount$fuse(0x0, 0x0, 0x0, 0x80008, &(0x7f0000001280)=ANY=[@ANYRES8=r5, @ANYRESOCT=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r4, @ANYBLOB="47f15bde7407a14b804e00893c8b60db7a3a229c81a009fc5ccc2ce6", @ANYRESDEC=r2]) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r6 = open(&(0x7f0000001140)='./file0\x00', 0x4100c0, 0x0) mkdirat(r6, &(0x7f0000001100)='./control\x00', 0x75) rmdir(&(0x7f0000000040)='./control\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000ea47ebb50862ce2c44b100000000008f5ad9394a798884e435b4af66680000000000000000"], 0x50) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000007, 0x4010, r4, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x100}) r10 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r10, 0x2007ffb) write$P9_RVERSION(r10, 0x0, 0x13) lseek(r10, 0x0, 0x4) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000040)=0x7, 0x0, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) 3.095264923s ago: executing program 7 (id=773): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x80802, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "a9acd29c080063467526aeb5ab2c7b9ca5fa07448139ede6dc04270ee04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x100, "56b9595931028deda525e19bdeffaf31060000006500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"10628c1965c61e00", r2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000400)=0x6) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000102505a8a440000102030109021b0001ed7547f30036113772937a910568b20999e12c257d04"], 0x0) pselect6(0x40, &(0x7f0000000140)={0x11, 0xfffffffffffffffc, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x4, 0xfffffffffffffc01}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0x40}, 0x0, 0x0) close(0x3) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @remote, 0x4e22, 0x2, 'rr\x00', 0x25, 0x4, 0x4}, {@multicast2, 0x4e22, 0x2000, 0xe, 0x950f, 0x8000}}, 0x44) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000005780)=[{{&(0x7f0000000240)=@ethernet, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/71, 0x47}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/102, 0x66}, {&(0x7f0000005880)=""/230, 0xe6}, {&(0x7f00000005c0)=""/191, 0xbf}], 0x6, &(0x7f00000008c0)=""/81, 0x51}, 0x9}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/235, 0xeb}], 0x2, &(0x7f0000002b40)=""/241, 0xf1}, 0xe336}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000002c40)=""/129, 0x81}, {&(0x7f0000002d00)=""/242, 0xf2}, {&(0x7f0000002e00)=""/208, 0xd0}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/154, 0x9a}, {&(0x7f0000003fc0)=""/131, 0x83}], 0x7, &(0x7f0000004100)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000005100)=@pptp, 0x80, &(0x7f00000055c0)=[{&(0x7f0000000ac0)=""/28, 0x1c}, {&(0x7f0000005180)=""/113, 0x71}, {&(0x7f0000005200)=""/81, 0x51}, {&(0x7f0000005280)=""/210, 0xd2}, {&(0x7f0000005380)=""/33, 0x21}, {&(0x7f00000053c0)=""/36, 0x24}, {&(0x7f0000005400)=""/40, 0x28}, {&(0x7f0000005440)=""/112, 0x70}, {&(0x7f00000054c0)=""/77, 0x4d}, {&(0x7f0000005540)=""/119, 0x77}], 0xa, &(0x7f0000005680)=""/217, 0xd9}}], 0x4, 0x30042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r8) 2.410571054s ago: executing program 8 (id=776): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x4, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000000)=0x8, 0x4) unshare(0x2c020400) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 2.155910028s ago: executing program 6 (id=777): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010001fff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="28000d800900009e"], 0x64}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x20, 0x0, 0xc000, 0x0, r7, r8, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r9, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)) 1.836177537s ago: executing program 8 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.726475017s ago: executing program 6 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000001020101000000000000000002000001240001800c0002800500010001000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x240088d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001, 0x0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil) mlock2(&(0x7f00008cf000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.725921133s ago: executing program 8 (id=780): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x0) 1.554073527s ago: executing program 0 (id=781): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7fff, 0x0, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x4040840) (fail_nth: 7) 1.469980152s ago: executing program 8 (id=782): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4102}, 0x80) 1.224285627s ago: executing program 0 (id=783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 944.358919ms ago: executing program 0 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f000043f000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltaction={0x84, 0x31, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000055c0)=@newtclass={0x2c, 0x28, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffea, 0xfff3}, {0x18, 0x3}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c015) 920.061545ms ago: executing program 8 (id=785): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc2010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000ffffffa00000aaff0200000000000000000000000000013a"], 0xfdef) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[]) read$FUSE(r5, &(0x7f000000e440)={0x2020}, 0x2020) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x100000001, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000006800)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 654.040723ms ago: executing program 8 (id=786): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000e0ffff69020000000000000000000000000002"]) r4 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x40, 0x81, 0x1b5}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000257000/0x1000)=nil, 0x1000, 0x11) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = signalfd4(r5, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10, 0x8000003, 0x1bb, 0x0, r6}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0x0, 0x0) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r12 = socket$inet(0x2, 0x5, 0x5b9) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r12, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) listen(r13, 0x6) accept4$inet6(r13, 0x0, 0x0, 0x800) 314.177435ms ago: executing program 0 (id=787): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x4) write$binfmt_register(r0, &(0x7f0000000740)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x3, 0x3a, '/dev/input/mice\x00', 0x3a, 'ethtool\x00', 0x3a, './file0'}, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x4c040) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) syz_open_dev$dri(0x0, 0x1, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x81, 0xea, 0x32, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000f) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0x401}, 0x8) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xfec8, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') 154.4949ms ago: executing program 6 (id=788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x54d00000) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xffffffffffffffff, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$media(&(0x7f0000000340), 0x4, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, 0x0}) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) 74.22466ms ago: executing program 0 (id=789): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010001fff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="28000d800900009e"], 0x64}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x20, 0x0, 0xc000, 0x0, r7, r8, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r9, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)) 0s ago: executing program 7 (id=790): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x8008af26, &(0x7f0000000680)={0x22f}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000022f34f1e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x4}, 0x20) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) kernel console output (not intermixed with test programs): USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 194.165053][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.209712][ T24] usb 1-1: Product: syz [ 194.226367][ T24] usb 1-1: Manufacturer: syz [ 194.300737][ T7598] FAULT_INJECTION: forcing a failure. [ 194.300737][ T7598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.323491][ T24] usb 1-1: SerialNumber: syz [ 194.377588][ T24] usb 1-1: config 0 descriptor?? [ 194.446254][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.6.449 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 194.446282][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.446293][ T7598] Call Trace: [ 194.446299][ T7598] [ 194.446307][ T7598] dump_stack_lvl+0x241/0x360 [ 194.446342][ T7598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.446364][ T7598] ? __pfx__printk+0x10/0x10 [ 194.446396][ T7598] should_fail_ex+0x424/0x570 [ 194.446426][ T7598] _copy_to_user+0x31/0xb0 [ 194.446450][ T7598] simple_read_from_buffer+0xc4/0x170 [ 194.446479][ T7598] proc_fail_nth_read+0x1ef/0x260 [ 194.446499][ T7598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.446523][ T7598] ? rw_verify_area+0x246/0x630 [ 194.446544][ T7598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.446561][ T7598] vfs_read+0x21f/0xb90 [ 194.446589][ T7598] ? __pfx___mutex_lock+0x10/0x10 [ 194.446608][ T7598] ? __pfx_vfs_read+0x10/0x10 [ 194.446638][ T7598] ? __fget_files+0x2a/0x420 [ 194.446656][ T7598] ? __fget_files+0x39d/0x420 [ 194.446669][ T7598] ? __fget_files+0x2a/0x420 [ 194.446700][ T7598] ksys_read+0x19d/0x2d0 [ 194.446724][ T7598] ? __pfx_ksys_read+0x10/0x10 [ 194.446752][ T7598] ? do_syscall_64+0xb6/0x210 [ 194.446773][ T7598] do_syscall_64+0xf3/0x210 [ 194.446790][ T7598] ? clear_bhb_loop+0x45/0xa0 [ 194.446810][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.446826][ T7598] RIP: 0033:0x7fb219d8cb7c [ 194.446843][ T7598] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 194.446857][ T7598] RSP: 002b:00007fb21ac2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.446876][ T7598] RAX: ffffffffffffffda RBX: 00007fb219fb5fa0 RCX: 00007fb219d8cb7c [ 194.446888][ T7598] RDX: 000000000000000f RSI: 00007fb21ac2e0a0 RDI: 0000000000000004 [ 194.446899][ T7598] RBP: 00007fb21ac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.446909][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.446919][ T7598] R13: 0000000000000000 R14: 00007fb219fb5fa0 R15: 00007fb21a0dfa28 [ 194.446948][ T7598] [ 194.449843][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.562260][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.690642][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.980377][ T7603] dlm: no locking on control device [ 194.990796][ T7604] FAULT_INJECTION: forcing a failure. [ 194.990796][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 195.003749][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.7.393 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 195.003772][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.003782][ T7604] Call Trace: [ 195.003789][ T7604] [ 195.003796][ T7604] dump_stack_lvl+0x241/0x360 [ 195.003827][ T7604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.003849][ T7604] ? __pfx__printk+0x10/0x10 [ 195.003871][ T7604] ? __lock_acquire+0xad5/0xd80 [ 195.003903][ T7604] should_fail_ex+0x424/0x570 [ 195.003931][ T7604] should_failslab+0xac/0x100 [ 195.003949][ T7604] kmem_cache_alloc_noprof+0x78/0x390 [ 195.003966][ T7604] ? __nf_conntrack_alloc+0x8f/0x380 [ 195.003993][ T7604] __nf_conntrack_alloc+0x8f/0x380 [ 195.004020][ T7604] init_conntrack+0x1a2/0x1010 [ 195.004049][ T7604] ? __pfx_init_conntrack+0x10/0x10 [ 195.004075][ T7604] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 195.004095][ T7604] ? __local_bh_enable_ip+0x168/0x200 [ 195.004117][ T7604] ? lockdep_hardirqs_on+0x9d/0x150 [ 195.004143][ T7604] nf_conntrack_in+0xd61/0x18c0 [ 195.004163][ T7604] ? ipv6_ext_hdr+0x71/0x80 [ 195.004211][ T7604] ? __pfx_nf_conntrack_in+0x10/0x10 [ 195.004265][ T7604] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 195.004282][ T7604] nf_hook_slow+0xc8/0x220 [ 195.004306][ T7604] NF_HOOK+0x29b/0x450 [ 195.004325][ T7604] ? skb_orphan+0x4b/0xd0 [ 195.004346][ T7604] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 195.004365][ T7604] ? NF_HOOK+0x9e/0x450 [ 195.004384][ T7604] ? __pfx_NF_HOOK+0x10/0x10 [ 195.004407][ T7604] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 195.004447][ T7604] __netif_receive_skb+0x1ef/0x670 [ 195.004474][ T7604] ? __pfx___netif_receive_skb+0x10/0x10 [ 195.004508][ T7604] ? netif_receive_skb+0x133/0x890 [ 195.004525][ T7604] ? netif_receive_skb+0x133/0x890 [ 195.004544][ T7604] netif_receive_skb+0x1ea/0x890 [ 195.004563][ T7604] ? tun_rx_batched+0x14b/0x8d0 [ 195.004585][ T7604] ? __pfx_netif_receive_skb+0x10/0x10 [ 195.004615][ T7604] ? tun_rx_batched+0x14b/0x8d0 [ 195.004637][ T7604] tun_rx_batched+0x1a4/0x8d0 [ 195.004663][ T7604] ? __lock_acquire+0xad5/0xd80 [ 195.004686][ T7604] ? __pfx_tun_rx_batched+0x10/0x10 [ 195.004725][ T7604] ? tun_get_user+0x2a99/0x47c0 [ 195.004746][ T7604] ? tun_get_user+0x2a99/0x47c0 [ 195.004767][ T7604] tun_get_user+0x2fec/0x47c0 [ 195.004793][ T7604] ? tun_get_user+0x852/0x47c0 [ 195.004832][ T7604] ? aa_file_perm+0x139/0xf60 [ 195.004855][ T7604] ? aa_file_perm+0x3f1/0xf60 [ 195.004875][ T7604] ? __pfx_tun_get_user+0x10/0x10 [ 195.004918][ T7604] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 195.004953][ T7604] ? tun_get+0x1e/0x2f0 [ 195.004975][ T7604] ? tun_get+0x1e/0x2f0 [ 195.004995][ T7604] ? tun_get+0x27d/0x2f0 [ 195.005019][ T7604] tun_chr_write_iter+0x10d/0x1f0 [ 195.005044][ T7604] vfs_write+0x70f/0xd10 [ 195.005073][ T7604] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 195.005092][ T7604] ? __pfx_vfs_write+0x10/0x10 [ 195.005112][ T7604] ? __fget_files+0x2a/0x420 [ 195.005129][ T7604] ? __fget_files+0x2a/0x420 [ 195.005149][ T7604] ksys_write+0x19d/0x2d0 [ 195.005170][ T7604] ? __pfx_ksys_write+0x10/0x10 [ 195.005194][ T7604] ? do_syscall_64+0xb6/0x210 [ 195.005213][ T7604] do_syscall_64+0xf3/0x210 [ 195.005228][ T7604] ? clear_bhb_loop+0x45/0xa0 [ 195.005248][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.005263][ T7604] RIP: 0033:0x7fdb8b38cc1f [ 195.005279][ T7604] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 195.005294][ T7604] RSP: 002b:00007fdb8c232000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 195.005312][ T7604] RAX: ffffffffffffffda RBX: 00007fdb8b5b6080 RCX: 00007fdb8b38cc1f [ 195.005324][ T7604] RDX: 0000000000000046 RSI: 0000200000000340 RDI: 00000000000000c8 [ 195.005335][ T7604] RBP: 00007fdb8c232090 R08: 0000000000000000 R09: 0000000000000000 [ 195.005345][ T7604] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 195.005355][ T7604] R13: 0000000000000001 R14: 00007fdb8b5b6080 R15: 00007fdb8b6dfa28 [ 195.005383][ T7604] [ 195.923655][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.943748][ T7601] xt_CT: No such helper "snmp" [ 195.963743][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.104357][ T7609] netlink: 'syz.5.451': attribute type 10 has an invalid length. [ 196.126842][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 196.394010][ T7609] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.443366][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.445220][ T1543] usb 1-1: USB disconnect, device number 8 [ 196.517663][ T1543] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.590568][ T1543] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.641720][ T1543] quatech2 1-1:0.51: device disconnected [ 197.073599][ T5891] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 197.250314][ T5891] usb 8-1: Using ep0 maxpacket: 8 [ 197.293590][ T5891] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 197.340450][ T5927] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 197.398214][ T7628] netlink: 48 bytes leftover after parsing attributes in process `syz.5.458'. [ 197.430365][ T5891] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 197.439156][ T5891] usb 8-1: Product: syz [ 197.480568][ T5891] usb 8-1: Manufacturer: syz [ 197.485219][ T5891] usb 8-1: SerialNumber: syz [ 197.540454][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 197.552332][ T5927] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 197.588019][ T5927] usb 7-1: config 252 has no interface number 0 [ 197.599458][ T5891] usb 8-1: config 0 descriptor?? [ 197.618158][ T5927] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 197.663127][ T5927] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 197.663785][ T5891] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 197.672365][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.672394][ T5927] usb 7-1: Product: syz [ 197.672408][ T5927] usb 7-1: Manufacturer: syz [ 197.672423][ T5927] usb 7-1: SerialNumber: syz [ 197.716051][ T5927] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 197.840476][ T5888] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.014905][ T5888] usb 1-1: config 0 has no interfaces? [ 198.040592][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.452'. [ 198.072708][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.150427][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.179023][ T5888] usb 1-1: Product: syz [ 198.189155][ T5888] usb 1-1: Manufacturer: syz [ 198.207815][ T5888] usb 1-1: SerialNumber: syz [ 198.238415][ T5888] usb 1-1: config 0 descriptor?? [ 198.380567][ T5891] gspca_zc3xx: reg_r err -110 [ 198.395879][ T5891] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 198.813074][ T53] usb 7-1: Failed to submit usb control message: -110 [ 198.830713][ T53] usb 7-1: unable to send the bmi data to the device: -110 [ 198.854035][ T7642] netlink: 'syz.5.461': attribute type 10 has an invalid length. [ 198.866547][ T53] usb 7-1: unable to get target info from device [ 198.883816][ T53] usb 7-1: could not get target info (-110) [ 198.898315][ T53] usb 7-1: could not probe fw (-110) [ 199.301247][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.312190][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.088832][ T1543] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.166066][ T5891] usb 7-1: USB disconnect, device number 2 [ 200.265210][ T1543] usb 6-1: Using ep0 maxpacket: 32 [ 200.293320][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.323842][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.385648][ T1543] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.436204][ T1543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.493097][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.503628][ T1543] usb 6-1: config 0 descriptor?? [ 200.529538][ T1543] hub 6-1:0.0: USB hub found [ 200.556938][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.802895][ T1543] hub 6-1:0.0: 26 ports detected [ 200.811602][ T1543] hub 6-1:0.0: insufficient power available to use all downstream ports [ 200.917267][ T5889] usb 1-1: USB disconnect, device number 9 [ 201.051988][ T1543] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 201.080846][ T1543] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 201.132406][ T1543] usbhid 6-1:0.0: can't add hid device: -71 [ 201.138567][ T1543] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 201.171935][ T1543] usb 6-1: USB disconnect, device number 3 [ 201.397851][ T5835] usb 8-1: USB disconnect, device number 2 [ 201.683810][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 201.689996][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 201.690062][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 201.697231][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 202.115193][ T7657] bond_slave_0: entered promiscuous mode [ 202.121000][ T7657] bond_slave_1: entered promiscuous mode [ 202.190978][ T7657] vlan2: entered promiscuous mode [ 202.196281][ T7657] bond0: entered promiscuous mode [ 202.780454][ T7668] netlink: 56 bytes leftover after parsing attributes in process `syz.5.471'. [ 202.833020][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.472'. [ 202.833369][ T7669] input: syz0 as /devices/virtual/input/input11 [ 202.886560][ T7671] netlink: 'syz.6.472': attribute type 10 has an invalid length. [ 203.057501][ T7671] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.091895][ T5835] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 203.321459][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.360103][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.405204][ T5835] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 203.460620][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.531118][ T5835] usb 8-1: config 0 descriptor?? [ 203.720326][ T5929] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 203.778098][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.790945][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.863270][ T5835] usb 8-1: string descriptor 0 read error: -71 [ 203.876461][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 203.946866][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.969002][ T5835] usbhid 8-1:0.0: can't add hid device: -71 [ 203.980329][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.001723][ T5835] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 204.030757][ T5929] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 204.039846][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.051078][ T5835] usb 8-1: USB disconnect, device number 3 [ 204.183759][ T5929] usb 7-1: config 0 descriptor?? [ 204.452412][ T5835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 204.463418][ T5929] usbhid 7-1:0.0: can't add hid device: -71 [ 204.477831][ T5929] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 204.531820][ T5929] usb 7-1: USB disconnect, device number 3 [ 204.650384][ T5835] usb 8-1: Using ep0 maxpacket: 32 [ 204.681866][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.704707][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 204.804488][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 204.900353][ T5835] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 204.962417][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.092299][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 205.121092][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 205.139281][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 205.148048][ T5835] usb 8-1: config 0 descriptor?? [ 205.182091][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 205.190120][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 205.395241][ T7704] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.481'. [ 205.422717][ T7704] netlink: zone id is out of range [ 205.428010][ T7704] netlink: get zone limit has 8 unknown bytes [ 205.570875][ T5835] usb 8-1: string descriptor 0 read error: -71 [ 205.591471][ T5835] hub 8-1:0.0: bad descriptor, ignoring hub [ 205.802492][ T5835] hub 8-1:0.0: probe with driver hub failed with error -5 [ 205.880442][ T5835] usbhid 8-1:0.0: can't add hid device: -71 [ 205.886740][ T5835] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 206.062344][ T5835] usb 8-1: USB disconnect, device number 4 [ 206.393843][ T7717] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 206.680531][ T5835] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 206.903095][ T5835] usb 7-1: config 0 has an invalid interface number: 231 but max is 1 [ 206.923970][ T5835] usb 7-1: config 0 has an invalid interface number: 239 but max is 1 [ 206.979703][ T5835] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 207.104816][ T5835] usb 7-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config [ 207.164038][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 207.198462][ T5835] usb 7-1: config 0 has no interface number 0 [ 207.237902][ T5835] usb 7-1: config 0 has no interface number 1 [ 207.281890][ T5835] usb 7-1: config 0 interface 231 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 207.294171][ T55] Bluetooth: hci8: command tx timeout [ 207.303919][ T7730] netlink: 'syz.5.490': attribute type 5 has an invalid length. [ 207.320395][ T5835] usb 7-1: config 0 interface 231 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 207.331585][ T5835] usb 7-1: config 0 interface 231 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 1023 [ 207.341836][ T5835] usb 7-1: config 0 interface 239 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.365493][ T5835] usb 7-1: config 0 interface 231 has no altsetting 0 [ 207.378275][ T5835] usb 7-1: config 0 interface 239 has no altsetting 0 [ 207.389100][ T5835] usb 7-1: New USB device found, idVendor=12ab, idProduct=b97e, bcdDevice=be.b5 [ 207.406518][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.424821][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.490'. [ 207.447722][ T5835] usb 7-1: Product: syz [ 207.454786][ T5835] usb 7-1: Manufacturer: syz [ 207.472796][ T5835] usb 7-1: SerialNumber: syz [ 207.508305][ T5835] usb 7-1: config 0 descriptor?? [ 207.538583][ T7711] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 207.797739][ T5835] usb 7-1: USB disconnect, device number 4 [ 208.081278][ T7699] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.123674][ T7699] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.133896][ T7699] bridge_slave_0: entered allmulticast mode [ 208.142817][ T7699] bridge_slave_0: entered promiscuous mode [ 208.163826][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.200631][ T7699] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.346315][ T7699] bridge_slave_1: entered allmulticast mode [ 208.354820][ T7699] bridge_slave_1: entered promiscuous mode [ 208.693205][ T7699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.732014][ T7741] MPI: mpi too large (113288 bits) [ 208.761878][ T7699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.034346][ T7699] team0: Port device team_slave_0 added [ 209.100160][ T7699] team0: Port device team_slave_1 added [ 209.110449][ T1543] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 209.274949][ T1543] usb 8-1: device descriptor read/64, error -71 [ 209.300438][ T5889] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 209.360360][ T55] Bluetooth: hci8: command tx timeout [ 209.421672][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.476667][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.535591][ T1543] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 209.545817][ T5889] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 209.560420][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.600551][ T7699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.617923][ T7699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.632533][ T7699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.674640][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.686502][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 209.710426][ T1543] usb 8-1: device descriptor read/64, error -71 [ 209.720339][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.765043][ T7699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.795561][ T5889] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.867393][ T1543] usb usb8-port1: attempt power cycle [ 209.930302][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.978818][ T5889] usb 7-1: config 0 descriptor?? [ 210.006045][ T7699] hsr_slave_0: entered promiscuous mode [ 210.013858][ T7699] hsr_slave_1: entered promiscuous mode [ 210.022569][ T7699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.030473][ T7699] Cannot create hsr debugfs directory [ 210.045604][ T7752] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 210.280532][ T1543] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 210.361074][ T1543] usb 8-1: device descriptor read/8, error -71 [ 210.499070][ T5889] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 210.530124][ T5889] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 210.596794][ T5889] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 210.640816][ T1543] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 210.701430][ T1543] usb 8-1: device descriptor read/8, error -71 [ 210.785155][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.793931][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.827984][ T1543] usb usb8-port1: unable to enumerate USB device [ 210.846324][ T1543] usb 7-1: USB disconnect, device number 5 [ 210.875329][ T5891] IPVS: starting estimator thread 0... [ 210.980928][ T7762] IPVS: using max 52 ests per chain, 124800 per kthread [ 211.440358][ T55] Bluetooth: hci8: command tx timeout [ 211.942185][ T7699] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 212.117173][ T7699] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 212.192297][ T7780] FAULT_INJECTION: forcing a failure. [ 212.192297][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.266120][ T7780] CPU: 1 UID: 0 PID: 7780 Comm: syz.5.503 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 212.266157][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.266168][ T7780] Call Trace: [ 212.266175][ T7780] [ 212.266182][ T7780] dump_stack_lvl+0x241/0x360 [ 212.266213][ T7780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.266236][ T7780] ? __pfx__printk+0x10/0x10 [ 212.266271][ T7780] should_fail_ex+0x424/0x570 [ 212.266300][ T7780] _copy_from_user+0x2d/0xb0 [ 212.266322][ T7780] copy_msghdr_from_user+0xb3/0x580 [ 212.266348][ T7780] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.266365][ T7780] ? __fget_files+0x2a/0x420 [ 212.266385][ T7780] ? __fget_files+0x2a/0x420 [ 212.266409][ T7780] __sys_sendmmsg+0x361/0x7b0 [ 212.266437][ T7780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.266487][ T7780] ? rcu_read_lock_any_held+0xbb/0x160 [ 212.266509][ T7780] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 212.266530][ T7780] ? vfs_write+0xb29/0xd10 [ 212.266561][ T7780] ? ksys_write+0x24e/0x2d0 [ 212.266585][ T7780] ? __mutex_unlock_slowpath+0x229/0x800 [ 212.266632][ T7780] ? ksys_write+0x275/0x2d0 [ 212.266665][ T7780] __x64_sys_sendmmsg+0xa0/0xb0 [ 212.266683][ T7780] do_syscall_64+0xf3/0x210 [ 212.266700][ T7780] ? clear_bhb_loop+0x45/0xa0 [ 212.266719][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.266735][ T7780] RIP: 0033:0x7fcc9a98e169 [ 212.266749][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.266763][ T7780] RSP: 002b:00007fcc9b713038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.266782][ T7780] RAX: ffffffffffffffda RBX: 00007fcc9abb6080 RCX: 00007fcc9a98e169 [ 212.266794][ T7780] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000008 [ 212.266805][ T7780] RBP: 00007fcc9b713090 R08: 0000000000000000 R09: 0000000000000000 [ 212.266815][ T7780] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.266826][ T7780] R13: 0000000000000000 R14: 00007fcc9abb6080 R15: 00007fcc9acdfa28 [ 212.266853][ T7780] [ 212.623123][ T7699] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 212.637107][ T7699] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 212.844424][ T7699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.893823][ T7699] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.937364][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.944572][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.067027][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.074295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.348689][ T7699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.502656][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.505'. [ 213.521863][ T55] Bluetooth: hci8: command tx timeout [ 213.614770][ T7791] netlink: 'syz.5.505': attribute type 10 has an invalid length. [ 214.012468][ T7699] veth0_vlan: entered promiscuous mode [ 214.118430][ T7699] veth1_vlan: entered promiscuous mode [ 214.321386][ T7699] veth0_macvtap: entered promiscuous mode [ 214.370326][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.376605][ T7699] veth1_macvtap: entered promiscuous mode [ 214.397726][ T7802] FAULT_INJECTION: forcing a failure. [ 214.397726][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 214.410671][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.7.508 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 214.410687][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.410693][ T7802] Call Trace: [ 214.410698][ T7802] [ 214.410702][ T7802] dump_stack_lvl+0x241/0x360 [ 214.410721][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.410737][ T7802] ? __pfx__printk+0x10/0x10 [ 214.410759][ T7802] ? fib6_table_lookup+0xb98/0xbf0 [ 214.410782][ T7802] should_fail_ex+0x424/0x570 [ 214.410806][ T7802] ? __pfx_ip6_dst_gc+0x10/0x10 [ 214.410829][ T7802] should_failslab+0xac/0x100 [ 214.410846][ T7802] kmem_cache_alloc_noprof+0x78/0x390 [ 214.410856][ T7802] ? dst_alloc+0x12b/0x190 [ 214.410866][ T7802] ? __pfx_ip6_dst_gc+0x10/0x10 [ 214.410879][ T7802] dst_alloc+0x12b/0x190 [ 214.410890][ T7802] ip6_pol_route+0xb96/0x15f0 [ 214.410901][ T7802] ? ip6_pol_route+0x192/0x15f0 [ 214.410912][ T7802] ? __pfx_ip6_pol_route+0x10/0x10 [ 214.410926][ T7802] ? __pfx_ip6t_do_table+0x10/0x10 [ 214.410936][ T7802] ? __nf_ct_refresh_acct+0x254/0x300 [ 214.410953][ T7802] fib6_rule_lookup+0x590/0x7a0 [ 214.410962][ T7802] ? nf_nat_inet_fn+0x88e/0xcc0 [ 214.410976][ T7802] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 214.410986][ T7802] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 214.410993][ T7802] ? nf_nat_inet_fn+0x9de/0xcc0 [ 214.411011][ T7802] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 214.411029][ T7802] ip6_route_input+0x85b/0xda0 [ 214.411044][ T7802] ? __pfx_ip6_route_input+0x10/0x10 [ 214.411068][ T7802] ? ip6_rcv_finish_core+0x20f/0x410 [ 214.411084][ T7802] ip6_rcv_finish+0x140/0x3d0 [ 214.411098][ T7802] NF_HOOK+0x3a0/0x450 [ 214.411108][ T7802] ? skb_orphan+0x4b/0xd0 [ 214.411120][ T7802] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 214.411131][ T7802] ? NF_HOOK+0x9e/0x450 [ 214.411141][ T7802] ? __pfx_NF_HOOK+0x10/0x10 [ 214.411154][ T7802] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 214.411171][ T7802] __netif_receive_skb+0x1ef/0x670 [ 214.411185][ T7802] ? __pfx___netif_receive_skb+0x10/0x10 [ 214.411203][ T7802] ? netif_receive_skb+0x133/0x890 [ 214.411213][ T7802] ? netif_receive_skb+0x133/0x890 [ 214.411223][ T7802] netif_receive_skb+0x1ea/0x890 [ 214.411233][ T7802] ? tun_rx_batched+0x14b/0x8d0 [ 214.411246][ T7802] ? __pfx_netif_receive_skb+0x10/0x10 [ 214.411262][ T7802] ? tun_rx_batched+0x14b/0x8d0 [ 214.411274][ T7802] tun_rx_batched+0x1a4/0x8d0 [ 214.411289][ T7802] ? __lock_acquire+0xad5/0xd80 [ 214.411303][ T7802] ? __pfx_tun_rx_batched+0x10/0x10 [ 214.411323][ T7802] ? tun_get_user+0x2a99/0x47c0 [ 214.411336][ T7802] ? tun_get_user+0x2a99/0x47c0 [ 214.411348][ T7802] tun_get_user+0x2fec/0x47c0 [ 214.411361][ T7802] ? tun_get_user+0x852/0x47c0 [ 214.411382][ T7802] ? aa_file_perm+0x139/0xf60 [ 214.411395][ T7802] ? aa_file_perm+0x3f1/0xf60 [ 214.411407][ T7802] ? __pfx_tun_get_user+0x10/0x10 [ 214.411430][ T7802] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 214.411449][ T7802] ? tun_get+0x1e/0x2f0 [ 214.411461][ T7802] ? tun_get+0x1e/0x2f0 [ 214.411472][ T7802] ? tun_get+0x27d/0x2f0 [ 214.411485][ T7802] tun_chr_write_iter+0x10d/0x1f0 [ 214.411499][ T7802] vfs_write+0x70f/0xd10 [ 214.411516][ T7802] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 214.411529][ T7802] ? __pfx_vfs_write+0x10/0x10 [ 214.411543][ T7802] ? __fget_files+0x2a/0x420 [ 214.411554][ T7802] ? __fget_files+0x2a/0x420 [ 214.411567][ T7802] ksys_write+0x19d/0x2d0 [ 214.411581][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 214.411603][ T7802] ? do_syscall_64+0xb6/0x210 [ 214.411615][ T7802] do_syscall_64+0xf3/0x210 [ 214.411624][ T7802] ? clear_bhb_loop+0x45/0xa0 [ 214.411636][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.411645][ T7802] RIP: 0033:0x7fdb8b38cc1f [ 214.411654][ T7802] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 214.411662][ T7802] RSP: 002b:00007fdb8c232000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 214.411674][ T7802] RAX: ffffffffffffffda RBX: 00007fdb8b5b6080 RCX: 00007fdb8b38cc1f [ 214.411681][ T7802] RDX: 0000000000000046 RSI: 0000200000000340 RDI: 00000000000000c8 [ 214.411687][ T7802] RBP: 00007fdb8c232090 R08: 0000000000000000 R09: 0000000000000000 [ 214.411692][ T7802] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 214.411698][ T7802] R13: 0000000000000001 R14: 00007fdb8b5b6080 R15: 00007fdb8b6dfa28 [ 214.411713][ T7802] [ 214.540405][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 214.594905][ T7798] xt_CT: No such helper "snmp" [ 215.019128][ T24] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 215.043104][ T24] usb 6-1: config 0 has no interface number 0 [ 215.056614][ T24] usb 6-1: config 0 interface 101 has no altsetting 0 [ 215.075048][ T24] usb 6-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice=65.f1 [ 215.098027][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.120952][ T24] usb 6-1: Product: syz [ 215.125180][ T24] usb 6-1: Manufacturer: syz [ 215.129798][ T24] usb 6-1: SerialNumber: syz [ 215.172302][ T24] usb 6-1: config 0 descriptor?? [ 215.473283][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.526440][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.557102][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.582175][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.593144][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.609289][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.624693][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.636182][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.689032][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.703409][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.713389][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.724039][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.734266][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.745937][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.758423][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.816565][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.996316][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.024432][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.035186][ T5892] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 216.125658][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.137359][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.149236][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.270304][ T5892] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 216.290357][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.350514][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.358791][ T5892] usb 8-1: Product: syz [ 216.361003][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.363044][ T5892] usb 8-1: Manufacturer: syz [ 216.378605][ T5892] usb 8-1: SerialNumber: syz [ 216.533687][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.559668][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.582580][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.620661][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.632761][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.644227][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.654501][ T7699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.665308][ T7699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.689121][ T7699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.810059][ T7699] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.832127][ T5891] usb 8-1: USB disconnect, device number 9 [ 216.879693][ T7699] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.920510][ T7699] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.940131][ T7699] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.965909][ T7825] netlink: 'syz.0.516': attribute type 10 has an invalid length. [ 217.044404][ T7825] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 217.155918][ T5892] usb 6-1: USB disconnect, device number 4 [ 217.419039][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.469951][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.647869][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.665520][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.151676][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.469'. [ 218.304917][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.525'. [ 219.092613][ T5892] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 219.271121][ T1543] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.553443][ T5892] usb 9-1: config 0 has no interfaces? [ 219.660361][ T1543] usb 6-1: Using ep0 maxpacket: 32 [ 219.952000][ T1543] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 220.000327][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 220.031944][ T5892] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 220.036224][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 220.110393][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 220.130362][ T1543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 220.135686][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.169205][ T5892] usb 9-1: Product: syz [ 220.173577][ T5892] usb 9-1: Manufacturer: syz [ 220.179970][ T5892] usb 9-1: SerialNumber: syz [ 220.195264][ T5892] usb 9-1: config 0 descriptor?? [ 220.651242][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 220.784062][ T1543] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 220.841941][ T1543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.850103][ T1543] usb 6-1: Product: syz [ 220.874592][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 220.931742][ T7881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.962062][ T1543] usb 6-1: Manufacturer: syz [ 220.966713][ T1543] usb 6-1: SerialNumber: syz [ 220.975547][ T5892] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 221.026219][ T5892] usb 7-1: config 252 has no interface number 0 [ 221.045634][ T1543] usb 6-1: config 0 descriptor?? [ 221.064673][ T5892] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 221.500437][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 221.506636][ T1543] input input13: Device does not respond to id packet M [ 221.516599][ T7864] xt_cluster: node mask cannot exceed total number of nodes [ 221.584183][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 221.590479][ T5892] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 221.599566][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.622821][ T7884] FAULT_INJECTION: forcing a failure. [ 221.622821][ T7884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.644801][ T1543] input input13: Device does not respond to id packet P [ 221.657530][ T5892] usb 7-1: Product: syz [ 221.657719][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.0.532 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 221.657741][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.657751][ T7884] Call Trace: [ 221.657761][ T7884] [ 221.657769][ T7884] dump_stack_lvl+0x241/0x360 [ 221.657800][ T7884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.657822][ T7884] ? __pfx__printk+0x10/0x10 [ 221.657854][ T7884] should_fail_ex+0x424/0x570 [ 221.657883][ T7884] _copy_to_user+0x31/0xb0 [ 221.657906][ T7884] simple_read_from_buffer+0xc4/0x170 [ 221.657934][ T7884] proc_fail_nth_read+0x1ef/0x260 [ 221.657952][ T7884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.657971][ T7884] ? rw_verify_area+0x246/0x630 [ 221.657991][ T7884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.658008][ T7884] vfs_read+0x21f/0xb90 [ 221.658033][ T7884] ? __pfx___mutex_lock+0x10/0x10 [ 221.658052][ T7884] ? __pfx_vfs_read+0x10/0x10 [ 221.658074][ T7884] ? __fget_files+0x2a/0x420 [ 221.658091][ T7884] ? __fget_files+0x39d/0x420 [ 221.658104][ T7884] ? __fget_files+0x2a/0x420 [ 221.658128][ T7884] ksys_read+0x19d/0x2d0 [ 221.658151][ T7884] ? __pfx_ksys_read+0x10/0x10 [ 221.658178][ T7884] ? do_syscall_64+0xb6/0x210 [ 221.658197][ T7884] do_syscall_64+0xf3/0x210 [ 221.658213][ T7884] ? clear_bhb_loop+0x45/0xa0 [ 221.658232][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.658247][ T7884] RIP: 0033:0x7f2c3a78cb7c [ 221.658261][ T7884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.658275][ T7884] RSP: 002b:00007f2c3b5e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.658293][ T7884] RAX: ffffffffffffffda RBX: 00007f2c3a9b5fa0 RCX: 00007f2c3a78cb7c [ 221.658305][ T7884] RDX: 000000000000000f RSI: 00007f2c3b5e90a0 RDI: 0000000000000005 [ 221.658325][ T7884] RBP: 00007f2c3b5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 221.658335][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.658346][ T7884] R13: 0000000000000000 R14: 00007f2c3a9b5fa0 R15: 00007f2c3aadfa28 [ 221.658373][ T7884] [ 222.721534][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -110 [ 222.727713][ T1543] input input13: Device does not respond to id packet N [ 222.801021][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 222.828438][ T5892] usb 7-1: Manufacturer: syz [ 222.838359][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 222.867560][ T5892] usb 7-1: SerialNumber: syz [ 222.885920][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 222.940648][ T1543] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 222.989631][ T5892] usb 7-1: can't set config #252, error -71 [ 223.001057][ T1543] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 223.065304][ T5892] usb 7-1: USB disconnect, device number 6 [ 223.429068][ T1543] usb 9-1: USB disconnect, device number 2 [ 223.503828][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 223.829965][ T7915] netlink: 'syz.6.542': attribute type 10 has an invalid length. [ 223.875517][ T24] usb 6-1: USB disconnect, device number 5 [ 223.961873][ T7917] FAULT_INJECTION: forcing a failure. [ 223.961873][ T7917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.040019][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.0.543 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 224.040038][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.040044][ T7917] Call Trace: [ 224.040049][ T7917] [ 224.040054][ T7917] dump_stack_lvl+0x241/0x360 [ 224.040074][ T7917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.040087][ T7917] ? __pfx__printk+0x10/0x10 [ 224.040117][ T7917] should_fail_ex+0x424/0x570 [ 224.040134][ T7917] _copy_from_iter+0x211/0x1c70 [ 224.040149][ T7917] ? __build_skb_around+0x247/0x3d0 [ 224.040164][ T7917] ? __alloc_skb+0x298/0x480 [ 224.040176][ T7917] ? __pfx__copy_from_iter+0x10/0x10 [ 224.040195][ T7917] ? __pfx___alloc_skb+0x10/0x10 [ 224.040216][ T7917] ? skb_put+0x114/0x1f0 [ 224.040238][ T7917] netlink_sendmsg+0x73c/0xcd0 [ 224.040262][ T7917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.040275][ T7917] ? aa_sock_msg_perm+0x91/0x160 [ 224.040291][ T7917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.040301][ T7917] __sock_sendmsg+0x221/0x270 [ 224.040314][ T7917] ____sys_sendmsg+0x523/0x860 [ 224.040333][ T7917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.040345][ T7917] ? __fget_files+0x2a/0x420 [ 224.040357][ T7917] ? __fget_files+0x2a/0x420 [ 224.040370][ T7917] __sys_sendmsg+0x271/0x360 [ 224.040387][ T7917] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.040427][ T7917] ? do_syscall_64+0xb6/0x210 [ 224.040439][ T7917] do_syscall_64+0xf3/0x210 [ 224.040448][ T7917] ? clear_bhb_loop+0x45/0xa0 [ 224.040459][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.040468][ T7917] RIP: 0033:0x7f2c3a78e169 [ 224.040478][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.040486][ T7917] RSP: 002b:00007f2c3b5e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.040497][ T7917] RAX: ffffffffffffffda RBX: 00007f2c3a9b5fa0 RCX: 00007f2c3a78e169 [ 224.040504][ T7917] RDX: 0000000004000040 RSI: 0000200000000080 RDI: 0000000000000005 [ 224.040511][ T7917] RBP: 00007f2c3b5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 224.040516][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.040522][ T7917] R13: 0000000000000000 R14: 00007f2c3a9b5fa0 R15: 00007f2c3aadfa28 [ 224.040536][ T7917] [ 224.267929][ T7919] netlink: 40 bytes leftover after parsing attributes in process `syz.5.544'. [ 224.610413][ T5927] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 224.629683][ T7932] FAULT_INJECTION: forcing a failure. [ 224.629683][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.681050][ T7932] CPU: 0 UID: 0 PID: 7932 Comm: syz.0.548 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 224.681080][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.681091][ T7932] Call Trace: [ 224.681098][ T7932] [ 224.681106][ T7932] dump_stack_lvl+0x241/0x360 [ 224.681136][ T7932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.681159][ T7932] ? __pfx__printk+0x10/0x10 [ 224.681193][ T7932] should_fail_ex+0x424/0x570 [ 224.681222][ T7932] _copy_from_user+0x2d/0xb0 [ 224.681245][ T7932] copy_msghdr_from_user+0xb3/0x580 [ 224.681271][ T7932] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 224.681288][ T7932] ? __fget_files+0x2a/0x420 [ 224.681307][ T7932] ? __fget_files+0x2a/0x420 [ 224.681331][ T7932] __sys_recvmsg+0x210/0x3a0 [ 224.681352][ T7932] ? __pfx___sys_recvmsg+0x10/0x10 [ 224.681380][ T7932] ? __fget_files+0x2a/0x420 [ 224.681419][ T7932] ? do_syscall_64+0xb6/0x210 [ 224.681440][ T7932] do_syscall_64+0xf3/0x210 [ 224.681456][ T7932] ? clear_bhb_loop+0x45/0xa0 [ 224.681476][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.681492][ T7932] RIP: 0033:0x7f2c3a78e169 [ 224.681508][ T7932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.681522][ T7932] RSP: 002b:00007f2c3b5e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 224.681540][ T7932] RAX: ffffffffffffffda RBX: 00007f2c3a9b5fa0 RCX: 00007f2c3a78e169 [ 224.681552][ T7932] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 224.681563][ T7932] RBP: 00007f2c3b5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 224.681573][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.681583][ T7932] R13: 0000000000000000 R14: 00007f2c3a9b5fa0 R15: 00007f2c3aadfa28 [ 224.681610][ T7932] [ 224.820376][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 225.142303][ T5927] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 225.157350][ T5927] usb 8-1: can't read configurations, error -22 [ 225.320392][ T5889] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 225.381845][ T5927] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 225.480271][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 225.496831][ T5889] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 225.627169][ T5889] usb 7-1: config 252 has no interface number 0 [ 225.631920][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 225.634396][ T5889] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 225.661049][ T5889] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 225.670156][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.902412][ T5889] usb 7-1: Product: syz [ 225.909797][ T5892] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 225.919168][ T5889] usb 7-1: Manufacturer: syz [ 225.948076][ T5927] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 225.983969][ T5927] usb 8-1: can't read configurations, error -22 [ 225.990853][ T5889] usb 7-1: SerialNumber: syz [ 225.993247][ T5927] usb usb8-port1: attempt power cycle [ 226.100362][ T5892] usb 9-1: Using ep0 maxpacket: 8 [ 226.114538][ T5892] usb 9-1: config 255 has an invalid interface number: 148 but max is 1 [ 226.130384][ T5892] usb 9-1: config 255 has an invalid descriptor of length 26, skipping remainder of the config [ 226.135089][ T7938] sctp: failed to load transform for md5: -2 [ 226.141216][ T5892] usb 9-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 226.141253][ T5892] usb 9-1: config 255 has no interface number 0 [ 226.141310][ T5892] usb 9-1: config 255 interface 148 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 226.180575][ T5892] usb 9-1: config 255 interface 148 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 226.191956][ T5892] usb 9-1: config 255 interface 148 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 226.203149][ T5892] usb 9-1: config 255 interface 148 altsetting 8 has 13 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.216687][ T5892] usb 9-1: config 255 interface 148 has no altsetting 0 [ 226.227416][ T5892] usb 9-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=66.8e [ 226.232740][ T5889] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 226.237280][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.254245][ T5892] usb 9-1: Product: 퉒ʪ吊됀뵗팾褬٢䍮ി䞹㿽꣔켙뾄焘昺䋚終跓릖℅ᘞꤏ㙒伪濏鏁䚣뽞瓾瓞肜〤㨭弲㓵椂䖠↝ꎘ쭀뭉益ᓡ䁔揼灓浡骗声遀鶼괜潕ꪄ♦ﱢ풲 [ 226.280817][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.546'. [ 226.380532][ T5927] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 226.393862][ T5892] usb 9-1: Manufacturer: ᐊ [ 226.412688][ T5892] usb 9-1: SerialNumber: 囀螺绕匀ᚣ岣鋑뫆隡켐ﵹ쁾꘶䯙쮘竡ꔐ莵 [ 226.442470][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 226.452016][ T5927] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 226.470062][ T5927] usb 8-1: can't read configurations, error -22 [ 226.490162][ T7942] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 226.630454][ T5927] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 227.280114][ T5927] usb 8-1: Using ep0 maxpacket: 32 [ 227.304019][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.310418][ T3002] usb 7-1: Failed to submit usb control message: -110 [ 227.317347][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.319610][ T3002] usb 7-1: unable to send the bmi data to the device: -110 [ 227.330676][ T5927] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 227.364522][ T5927] usb 8-1: can't read configurations, error -22 [ 227.400584][ T5927] usb usb8-port1: unable to enumerate USB device [ 227.469110][ T5892] usb 9-1: USB disconnect, device number 3 [ 227.478893][ T3002] usb 7-1: unable to get target info from device [ 227.589332][ T3002] usb 7-1: could not get target info (-110) [ 227.596033][ T3002] usb 7-1: could not probe fw (-110) [ 227.603041][ T7959] netlink: 'syz.7.555': attribute type 10 has an invalid length. [ 228.093715][ T5927] usb 7-1: USB disconnect, device number 7 [ 228.140067][ T7959] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 228.214791][ T7959] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 228.285380][ T7959] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.323992][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.6.557'. [ 228.810341][ T5927] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 229.023248][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.553'. [ 229.157907][ T5927] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.218590][ T5927] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.243324][ T5927] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.265951][ T5927] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 229.275696][ T5927] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.288777][ T5927] usb 8-1: config 0 descriptor?? [ 229.710255][ T1543] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 229.880418][ T1543] usb 7-1: Using ep0 maxpacket: 16 [ 229.955111][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.965407][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.847527][ T1543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.908261][ T1543] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.121085][ T1543] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.275009][ T1543] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.397051][ T1543] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.708321][ T1543] usb 7-1: config 0 descriptor?? [ 232.181433][ T1543] microsoft 0003:045E:07DA.0004: unbalanced collection at end of report description [ 232.207615][ T1543] microsoft 0003:045E:07DA.0004: parse failed [ 232.257036][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.331380][ T1543] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 232.982412][ T5927] usbhid 8-1:0.0: can't add hid device: -71 [ 232.988560][ T5927] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 233.072736][ T5927] usb 8-1: USB disconnect, device number 14 [ 234.020413][ T5927] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.171104][ T8015] netlink: 'syz.8.570': attribute type 10 has an invalid length. [ 234.180615][ T5889] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 234.240486][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 234.313679][ T5927] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 234.356780][ T5927] usb 1-1: config 252 has no interface number 0 [ 234.390391][ T5927] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 234.406476][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.443594][ T8017] FAULT_INJECTION: forcing a failure. [ 234.443594][ T8017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.460834][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 234.500095][ T8017] CPU: 1 UID: 0 PID: 8017 Comm: syz.7.571 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 234.500114][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.500121][ T8017] Call Trace: [ 234.500125][ T8017] [ 234.500130][ T8017] dump_stack_lvl+0x241/0x360 [ 234.500150][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.500164][ T8017] ? __pfx__printk+0x10/0x10 [ 234.500185][ T8017] should_fail_ex+0x424/0x570 [ 234.500211][ T8017] prepare_alloc_pages+0x220/0x610 [ 234.500238][ T8017] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 234.500261][ T8017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.500278][ T8017] ? count_memcg_event_mm+0x388/0x440 [ 234.500300][ T8017] ? mtree_range_walk+0x700/0x8e0 [ 234.500334][ T8017] alloc_pages_mpol+0x339/0x690 [ 234.500354][ T8017] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.500370][ T8017] folio_alloc_mpol_noprof+0x36/0x70 [ 234.500380][ T8017] shmem_alloc_and_add_folio+0x490/0x1070 [ 234.500398][ T8017] ? shmem_huge_global_enabled+0x175/0x3b0 [ 234.500409][ T8017] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 234.500422][ T8017] ? shmem_allowable_huge_orders+0x200/0x430 [ 234.500436][ T8017] shmem_get_folio_gfp+0x655/0x1800 [ 234.500457][ T8017] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 234.500473][ T8017] shmem_write_begin+0x17e/0x3a0 [ 234.500487][ T8017] ? __pfx_shmem_write_begin+0x10/0x10 [ 234.500504][ T8017] generic_perform_write+0x329/0xa10 [ 234.500515][ T8017] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 234.500536][ T8017] ? __pfx_generic_perform_write+0x10/0x10 [ 234.500546][ T8017] ? __pfx_generic_write_checks+0x10/0x10 [ 234.500556][ T8017] ? rcu_read_lock_any_held+0xbb/0x160 [ 234.500568][ T8017] ? file_update_time+0x2ab/0x450 [ 234.500583][ T8017] shmem_file_write_iter+0xf9/0x120 [ 234.500596][ T8017] vfs_write+0x70f/0xd10 [ 234.500613][ T8017] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 234.500625][ T8017] ? __pfx_vfs_write+0x10/0x10 [ 234.500640][ T8017] ? __fget_files+0x2a/0x420 [ 234.500651][ T8017] ? __fget_files+0x2a/0x420 [ 234.500665][ T8017] ksys_write+0x19d/0x2d0 [ 234.500678][ T8017] ? __pfx_ksys_write+0x10/0x10 [ 234.500694][ T8017] ? do_syscall_64+0xb6/0x210 [ 234.500706][ T8017] do_syscall_64+0xf3/0x210 [ 234.500716][ T8017] ? clear_bhb_loop+0x45/0xa0 [ 234.500727][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.500736][ T8017] RIP: 0033:0x7fdb8b38e169 [ 234.500746][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.500754][ T8017] RSP: 002b:00007fdb8c253038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.500765][ T8017] RAX: ffffffffffffffda RBX: 00007fdb8b5b5fa0 RCX: 00007fdb8b38e169 [ 234.500772][ T8017] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000003 [ 234.500778][ T8017] RBP: 00007fdb8c253090 R08: 0000000000000000 R09: 0000000000000000 [ 234.500784][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.500789][ T8017] R13: 0000000000000000 R14: 00007fdb8b5b5fa0 R15: 00007fdb8b6dfa28 [ 234.500805][ T8017] [ 235.083453][ T5927] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 235.092811][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.100874][ T5927] usb 1-1: Product: syz [ 235.105044][ T5927] usb 1-1: Manufacturer: syz [ 235.109731][ T5927] usb 1-1: SerialNumber: syz [ 235.130662][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 235.173962][ T8015] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.231818][ T5927] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 235.234275][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.290876][ T9] usb 7-1: USB disconnect, device number 8 [ 235.306698][ T5889] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 235.317335][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.327261][ T5889] usb 6-1: Product: syz [ 235.335201][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 235.339856][ T5889] usb 6-1: Manufacturer: syz [ 235.348979][ T5889] usb 6-1: SerialNumber: syz [ 235.363586][ T5889] usb 6-1: config 0 descriptor?? [ 235.369816][ T8008] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 235.556277][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.572'. [ 235.585074][ T5889] rc_core: IR keymap rc-imon-rsc not found [ 235.600687][ T8028] netlink: 'syz.7.572': attribute type 10 has an invalid length. [ 235.614121][ T5889] Registered IR keymap rc-empty [ 235.633561][ T5889] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 235.743414][ T5889] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 235.842739][ T5889] usb 6-1: USB disconnect, device number 6 [ 236.258260][ T7987] usb 1-1: Failed to submit usb control message: -110 [ 236.366884][ T7987] usb 1-1: unable to send the bmi data to the device: -110 [ 236.571169][ T7987] usb 1-1: unable to get target info from device [ 236.713853][ T5889] usb 1-1: USB disconnect, device number 10 [ 236.816703][ T7987] usb 1-1: could not get target info (-110) [ 236.849568][ T7987] usb 1-1: could not probe fw (-110) [ 237.052369][ T8052] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.581'. [ 237.526725][ T5889] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 237.710891][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 237.752506][ T5889] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 237.760447][ T8061] netlink: 'syz.7.584': attribute type 10 has an invalid length. [ 237.773672][ T5889] usb 7-1: config 252 has no interface number 0 [ 237.779972][ T5889] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 237.860847][ T5889] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 237.874127][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.924180][ T5889] usb 7-1: Product: syz [ 237.928422][ T5889] usb 7-1: Manufacturer: syz [ 237.960682][ T5892] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.980417][ T5889] usb 7-1: SerialNumber: syz [ 237.991886][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 238.036682][ T8065] netlink: 'syz.5.586': attribute type 10 has an invalid length. [ 238.201174][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 238.231340][ T5889] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 238.247835][ T5892] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 238.256188][ T5892] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.267050][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.276950][ T5892] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.287090][ T5892] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.310056][ T5892] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.319850][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.382145][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.582'. [ 238.638817][ T5892] usb 1-1: usb_control_msg returned -32 [ 238.668793][ T5892] usbtmc 1-1:16.0: can't read capabilities [ 238.675132][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 238.882293][ T24] usb 8-1: config 0 has no interfaces? [ 239.040073][ T8060] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 239.078768][ T24] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 239.128128][ T5889] usb 1-1: USB disconnect, device number 11 [ 239.165174][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.247612][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.593'. [ 239.274234][ T8090] dummy0: entered promiscuous mode [ 239.306647][ T7984] usb 7-1: Failed to submit usb control message: -110 [ 239.310657][ T24] usb 8-1: Product: syz [ 239.328661][ T24] usb 8-1: Manufacturer: syz [ 239.339646][ T24] usb 8-1: SerialNumber: syz [ 239.348167][ T24] usb 8-1: config 0 descriptor?? [ 239.363104][ T8090] vlan2: entered promiscuous mode [ 239.381964][ T8093] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 239.390422][ T7984] usb 7-1: unable to send the bmi data to the device: -110 [ 239.522072][ T8095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.599270][ T7984] usb 7-1: unable to get target info from device [ 239.607454][ T7984] usb 7-1: could not get target info (-110) [ 239.640391][ T7984] usb 7-1: could not probe fw (-110) [ 240.129580][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.595'. [ 240.485180][ T5835] usb 7-1: USB disconnect, device number 9 [ 241.412634][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 241.422118][ T8115] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 241.991300][ T5889] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.020359][ T5927] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 242.416518][ T5889] usb 1-1: config 0 has no interfaces? [ 242.498300][ T5889] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.517233][ T5927] usb 7-1: config 0 has no interfaces? [ 242.532074][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 242.539326][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.620826][ T5889] usb 1-1: Product: syz [ 242.641090][ T5889] usb 1-1: Manufacturer: syz [ 242.647717][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 242.694002][ T5889] usb 1-1: SerialNumber: syz [ 242.708872][ T5889] usb 1-1: config 0 descriptor?? [ 242.749086][ T5927] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.820980][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.855131][ T24] usb 6-1: config 0 has no interfaces? [ 242.868864][ T5927] usb 7-1: Product: syz [ 242.890306][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 242.903359][ T5927] usb 7-1: Manufacturer: syz [ 242.908123][ T5927] usb 7-1: SerialNumber: syz [ 242.913267][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.925006][ T5927] usb 7-1: config 0 descriptor?? [ 242.935315][ T24] usb 6-1: Product: syz [ 242.939727][ T24] usb 6-1: Manufacturer: syz [ 243.086571][ T24] usb 6-1: SerialNumber: syz [ 243.367822][ T24] usb 6-1: config 0 descriptor?? [ 243.463645][ T9] usb 8-1: USB disconnect, device number 15 [ 243.860344][ T8140] misc userio: The device must be registered before sending interrupts [ 245.084292][ T5927] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 245.260530][ T5927] usb 8-1: device descriptor read/64, error -71 [ 245.510315][ T5927] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 245.690331][ T5927] usb 8-1: device descriptor read/64, error -71 [ 245.819262][ T5835] usb 1-1: USB disconnect, device number 12 [ 245.858752][ T5927] usb usb8-port1: attempt power cycle [ 246.083230][ T5835] usb 7-1: USB disconnect, device number 10 [ 246.270662][ T5927] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 246.354312][ T5927] usb 8-1: device descriptor read/8, error -71 [ 246.431459][ T5929] usb 6-1: USB disconnect, device number 7 [ 246.631348][ T5927] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 246.718102][ T5927] usb 8-1: device descriptor read/8, error -71 [ 246.833052][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.8.618'. [ 246.852897][ T5927] usb usb8-port1: unable to enumerate USB device [ 247.790978][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.063875][ T5929] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 248.124464][ T9] usb 1-1: config 0 has no interfaces? [ 248.190396][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.199492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.259307][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 248.346655][ T9] usb 1-1: Product: syz [ 248.353303][ T8205] xt_CT: No such helper "snmp" [ 248.363190][ T9] usb 1-1: Manufacturer: syz [ 248.368857][ T9] usb 1-1: SerialNumber: syz [ 248.397406][ T5929] usb 8-1: config 252 has an invalid interface number: 15 but max is 0 [ 248.412119][ T5929] usb 8-1: config 252 has no interface number 0 [ 248.418668][ T5929] usb 8-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 248.438165][ T5929] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 248.450830][ T5927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 248.464215][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.472954][ T5929] usb 8-1: Product: syz [ 248.478458][ T5929] usb 8-1: Manufacturer: syz [ 248.491729][ T9] usb 1-1: config 0 descriptor?? [ 248.495774][ T5929] usb 8-1: SerialNumber: syz [ 248.580114][ T5929] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 248.630399][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 248.639028][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 248.662907][ T5927] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 248.688459][ T5927] usb 6-1: config 7 has no interface number 0 [ 248.694961][ T5927] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 248.705334][ T5927] usb 6-1: config 7 interface 187 has no altsetting 0 [ 248.726053][ T5927] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 248.743513][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.7.623'. [ 248.773090][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.905390][ T5927] usb 6-1: Product: syz [ 248.910702][ T5927] usb 6-1: Manufacturer: syz [ 248.920363][ T5927] usb 6-1: SerialNumber: syz [ 248.977746][ T8208] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 249.214801][ T5927] usb 6-1: Limiting number of CPorts to U8_MAX [ 249.343447][ T5927] usb 6-1: Unknown endpoint type found, address 0x07 [ 249.350770][ T5927] usb 6-1: Not enough endpoints found in device, aborting! [ 249.424530][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.445266][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.490147][ T5927] usb 6-1: USB disconnect, device number 8 [ 249.522890][ T6023] udevd[6023]: setting mode of /dev/bus/usb/006/008 to 020664 failed: No such file or directory [ 249.599489][ T6023] udevd[6023]: setting owner of /dev/bus/usb/006/008 to uid=0, gid=0 failed: No such file or directory [ 249.681389][ T7983] usb 8-1: Failed to submit usb control message: -110 [ 249.688642][ T7983] usb 8-1: unable to send the bmi data to the device: -110 [ 249.769878][ T7983] usb 8-1: unable to get target info from device [ 249.833189][ T7983] usb 8-1: could not get target info (-110) [ 249.914744][ T7983] usb 8-1: could not probe fw (-110) [ 250.037650][ T8225] FAULT_INJECTION: forcing a failure. [ 250.037650][ T8225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.196995][ T8225] CPU: 1 UID: 0 PID: 8225 Comm: syz.6.628 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 250.197024][ T8225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.197035][ T8225] Call Trace: [ 250.197042][ T8225] [ 250.197047][ T8225] dump_stack_lvl+0x241/0x360 [ 250.197067][ T8225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.197080][ T8225] ? __pfx__printk+0x10/0x10 [ 250.197099][ T8225] should_fail_ex+0x424/0x570 [ 250.197116][ T8225] _copy_to_user+0x31/0xb0 [ 250.197138][ T8225] simple_read_from_buffer+0xc4/0x170 [ 250.197165][ T8225] proc_fail_nth_read+0x1ef/0x260 [ 250.197184][ T8225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.197202][ T8225] ? rw_verify_area+0x246/0x630 [ 250.197222][ T8225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.197239][ T8225] vfs_read+0x21f/0xb90 [ 250.197266][ T8225] ? __pfx___mutex_lock+0x10/0x10 [ 250.197278][ T8225] ? __pfx_vfs_read+0x10/0x10 [ 250.197291][ T8225] ? __fget_files+0x2a/0x420 [ 250.197302][ T8225] ? __fget_files+0x39d/0x420 [ 250.197310][ T8225] ? __fget_files+0x2a/0x420 [ 250.197323][ T8225] ksys_read+0x19d/0x2d0 [ 250.197337][ T8225] ? __pfx_ksys_read+0x10/0x10 [ 250.197352][ T8225] ? do_syscall_64+0xb6/0x210 [ 250.197364][ T8225] do_syscall_64+0xf3/0x210 [ 250.197373][ T8225] ? clear_bhb_loop+0x45/0xa0 [ 250.197384][ T8225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.197394][ T8225] RIP: 0033:0x7fb219d8cb7c [ 250.197403][ T8225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.197414][ T8225] RSP: 002b:00007fb21ac2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.197432][ T8225] RAX: ffffffffffffffda RBX: 00007fb219fb5fa0 RCX: 00007fb219d8cb7c [ 250.197444][ T8225] RDX: 000000000000000f RSI: 00007fb21ac2e0a0 RDI: 0000000000000005 [ 250.197453][ T8225] RBP: 00007fb21ac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.197461][ T8225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.197469][ T8225] R13: 0000000000000000 R14: 00007fb219fb5fa0 R15: 00007fb21a0dfa28 [ 250.197495][ T8225] [ 250.690757][ T8232] gretap0: entered promiscuous mode [ 250.701447][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.630'. [ 250.727425][ T8232] gretap0: left promiscuous mode [ 250.926427][ T9] usb 8-1: USB disconnect, device number 20 [ 251.345279][ T8241] netlink: 'syz.7.633': attribute type 3 has an invalid length. [ 251.449397][ T8241] xt_socket: unknown flags 0x4 [ 251.476182][ T8244] netlink: 'syz.5.634': attribute type 10 has an invalid length. [ 251.690550][ T9] usb 1-1: USB disconnect, device number 13 [ 252.240799][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 252.650906][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 252.677571][ T24] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 252.695123][ T24] usb 6-1: config 1 has no interface number 0 [ 252.707287][ T24] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.733264][ T24] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.746322][ T24] usb 6-1: config 1 interface 236 has no altsetting 0 [ 252.912899][ T24] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 252.923565][ T24] usb 6-1: config 1 has no interface number 0 [ 252.934801][ T24] usb 6-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.955312][ T24] usb 6-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.040154][ T8267] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 253.075669][ T24] usb 6-1: config 1 interface 236 has no altsetting 0 [ 253.111966][ T24] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 253.127088][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.140475][ T24] usb 6-1: Product: syz [ 253.145765][ T24] usb 6-1: Manufacturer: syz [ 253.152059][ T24] usb 6-1: SerialNumber: syz [ 253.161417][ T24] ti_usb_3410_5052 6-1:1.236: TI USB 5052 2 port adapter converter detected [ 254.638348][ T24] usb 6-1: USB disconnect, device number 9 [ 255.330690][ T5889] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 255.437646][ T8280] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 255.805516][ T5889] usb 6-1: config 0 has no interfaces? [ 255.836288][ T5889] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 255.866492][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.884165][ T5889] usb 6-1: Product: syz [ 255.938516][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980545][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.990981][ T5889] usb 6-1: Manufacturer: syz [ 255.995651][ T5889] usb 6-1: SerialNumber: syz [ 256.032878][ T5889] usb 6-1: config 0 descriptor?? [ 256.277360][ T8277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.288406][ T8277] xt_cluster: node mask cannot exceed total number of nodes [ 256.451880][ T8293] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 257.139463][ T8303] netlink: 'syz.6.648': attribute type 3 has an invalid length. [ 257.234409][ T8303] netlink: 134312 bytes leftover after parsing attributes in process `syz.6.648'. [ 257.390484][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 257.626341][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.820989][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 257.842199][ T9] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 257.863908][ T9] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 257.906083][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 63987, setting to 1024 [ 258.003819][ T9] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 258.251268][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 258.274449][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.303984][ T5889] usb 6-1: USB disconnect, device number 10 [ 258.370584][ T9] usb 1-1: Product: syz [ 258.387585][ T9] usb 1-1: Manufacturer: syz [ 258.432774][ T9] usb 1-1: SerialNumber: syz [ 258.498298][ T8307] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 258.518248][ T9] usb 1-1: ucan: probing device on interface #0 [ 258.559926][ T9] usb 1-1: ucan: invalid out_ep MaxPacketSize [ 258.587694][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 258.730344][ T5835] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 258.923449][ T5835] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.995365][ T5835] usb 8-1: config 0 interface 0 has no altsetting 0 [ 259.299470][ T5835] usb 8-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 259.372082][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.390443][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 259.424617][ T5835] usb 8-1: config 0 descriptor?? [ 259.645687][ T24] usb 7-1: config 0 has no interfaces? [ 259.663096][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 259.672328][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.707839][ T24] usb 7-1: Product: syz [ 259.729538][ T24] usb 7-1: Manufacturer: syz [ 259.750385][ T24] usb 7-1: SerialNumber: syz [ 259.804978][ T24] usb 7-1: config 0 descriptor?? [ 259.976423][ T5835] hid-alps 0003:044E:1215.0005: unknown main item tag 0x5 [ 260.014876][ T5889] usb 1-1: USB disconnect, device number 14 [ 260.027196][ T5835] hid-alps 0003:044E:1215.0005: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.7-1/input0 [ 260.471238][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 260.601852][ T8345] syz.0.658 (8345): drop_caches: 2 [ 260.632418][ T8345] syz.0.658 (8345): drop_caches: 2 [ 260.940968][ T7169] syz.4.318: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.045609][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.4.318 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 261.045628][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.045634][ T7169] Call Trace: [ 261.045639][ T7169] [ 261.045644][ T7169] dump_stack_lvl+0x241/0x360 [ 261.045664][ T7169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.045677][ T7169] ? __pfx__printk+0x10/0x10 [ 261.045690][ T7169] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 261.045711][ T7169] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 261.045721][ T7169] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 261.045733][ T7169] warn_alloc+0x27c/0x410 [ 261.045750][ T7169] ? __pfx_warn_alloc+0x10/0x10 [ 261.045766][ T7169] ? relay_open_buf+0x231/0xd30 [ 261.045775][ T7169] ? __get_vm_area_node+0x1c8/0x2d0 [ 261.045786][ T7169] ? __get_vm_area_node+0x25c/0x2d0 [ 261.045800][ T7169] __vmalloc_node_range_noprof+0x634/0x1390 [ 261.045827][ T7169] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.045839][ T7169] ? __kasan_kmalloc_large+0x1a/0xa0 [ 261.045856][ T7169] ? relay_open_buf+0x231/0xd30 [ 261.045866][ T7169] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 261.045878][ T7169] ? relay_open_buf+0x231/0xd30 [ 261.045886][ T7169] ? trace_kmalloc+0x1f/0xd0 [ 261.045894][ T7169] ? relay_open_buf+0x231/0xd30 [ 261.045902][ T7169] ? relay_open_buf+0x18c/0xd30 [ 261.045914][ T7169] relay_open_buf+0x231/0xd30 [ 261.045930][ T7169] relay_open+0x44b/0x960 [ 261.045944][ T7169] do_blk_trace_setup+0x57b/0x9c0 [ 261.045962][ T7169] blk_trace_setup+0x118/0x1f0 [ 261.045977][ T7169] ? __pfx_blk_trace_setup+0x10/0x10 [ 261.045998][ T7169] ? do_sys_openat2+0x165/0x1d0 [ 261.046021][ T7169] sg_ioctl+0xa12/0x2e20 [ 261.046036][ T7169] ? __lock_acquire+0xad5/0xd80 [ 261.046068][ T7169] ? __pfx_sg_ioctl+0x10/0x10 [ 261.046086][ T7169] ? __fget_files+0x2a/0x420 [ 261.046101][ T7169] ? __fget_files+0x2a/0x420 [ 261.046119][ T7169] ? __fget_files+0x2a/0x420 [ 261.046137][ T7169] ? __pfx_sg_ioctl+0x10/0x10 [ 261.046146][ T7169] __se_sys_ioctl+0xf1/0x160 [ 261.046160][ T7169] do_syscall_64+0xf3/0x210 [ 261.046173][ T7169] ? clear_bhb_loop+0x45/0xa0 [ 261.046185][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.046194][ T7169] RIP: 0033:0x7f846ef8e169 [ 261.046208][ T7169] Code: Unable to access opcode bytes at 0x7f846ef8e13f. [ 261.046213][ T7169] RSP: 002b:00007f846fe2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.046225][ T7169] RAX: ffffffffffffffda RBX: 00007f846f1b6240 RCX: 00007f846ef8e169 [ 261.046232][ T7169] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 000000000000000b [ 261.046239][ T7169] RBP: 00007f846f010a68 R08: 0000000000000000 R09: 0000000000000000 [ 261.046244][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.046250][ T7169] R13: 0000000000000000 R14: 00007f846f1b6240 R15: 00007f846f2dfa28 [ 261.046265][ T7169] [ 261.046287][ T7169] Mem-Info: [ 261.423724][ T24] usb 8-1: USB disconnect, device number 21 [ 261.468576][ T7169] active_anon:24775 inactive_anon:0 isolated_anon:0 [ 261.468576][ T7169] active_file:12908 inactive_file:185 isolated_file:0 [ 261.468576][ T7169] unevictable:768 dirty:315 writeback:0 [ 261.468576][ T7169] slab_reclaimable:6180 slab_unreclaimable:112077 [ 261.468576][ T7169] mapped:62287 shmem:20027 pagetables:1126 [ 261.468576][ T7169] sec_pagetables:0 bounce:0 [ 261.468576][ T7169] kernel_misc_reclaimable:0 [ 261.468576][ T7169] free:98997 free_pcp:3300 free_cma:0 [ 261.676552][ T7169] Node 0 active_anon:1104kB inactive_anon:0kB active_file:580kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158984kB dirty:24kB writeback:0kB shmem:1988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2884kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 261.710603][ T30] audit: type=1326 audit(1745382970.682:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.7.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb8b38e169 code=0x0 [ 261.871798][ T7169] Node 1 active_anon:96596kB inactive_anon:0kB active_file:51052kB inactive_file:660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89864kB dirty:1236kB writeback:0kB shmem:74720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1196kB pagetables:1720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.207978][ T7169] Node 0 DMA free:10088kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:28kB free_cma:0kB [ 262.235617][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.390905][ T5891] usb 7-1: USB disconnect, device number 11 [ 262.461885][ T7169] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 262.466499][ T8354] netlink: 'syz.8.660': attribute type 10 has an invalid length. [ 262.539789][ T7169] Node 0 DMA32 free:47884kB boost:2048kB min:36200kB low:44736kB high:53272kB reserved_highatomic:20480KB active_anon:1612kB inactive_anon:0kB active_file:580kB inactive_file:76kB unevictable:1536kB writepending:24kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:2664kB local_pcp:1392kB free_cma:0kB [ 262.570080][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.650824][ T7169] lowmem_reserve[]: 0 0 0 0 0 [ 262.655727][ T7169] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 262.772216][ T7169] lowmem_reserve[]: 0 0 0 0 0 [ 262.792528][ T7169] Node 1 Normal free:356124kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:89944kB inactive_anon:0kB active_file:51052kB inactive_file:664kB unevictable:1536kB writepending:1244kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1580kB local_pcp:520kB free_cma:0kB [ 262.822854][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.919431][ T7169] lowmem_reserve[]: 0 0 0 0 0 [ 262.949431][ T7169] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10088kB [ 262.965410][ T5891] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 262.996252][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.7.664'. [ 263.009979][ T7169] Node 0 DMA32: 60*4kB (UMEH) 122*8kB (UMEH) 266*16kB (UMEH) 258*32kB (UMEH) 165*64kB (UMEH) 82*128kB (UMEH) 25*256kB (UMH) 15*512kB (UMH) 1*1024kB (U) 0*2048kB 0*4096kB = 49888kB [ 263.043952][ T7169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 263.066071][ T7169] Node 1 Normal: 333*4kB (UM) 237*8kB (UM) 136*16kB (UME) 100*32kB (UME) 41*64kB (UME) 38*128kB (UME) 36*256kB (UME) 20*512kB (UME) 7*1024kB (UME) 1*2048kB (M) 77*4096kB (UM) = 360156kB [ 263.084763][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.135264][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.145549][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.163174][ T7169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.210661][ T5891] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 263.227721][ T7169] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.250389][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.261954][ T7169] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.272537][ T5927] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 263.282565][ T5891] usb 7-1: config 0 descriptor?? [ 263.291098][ T7169] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.303918][ T7169] 33311 total pagecache pages [ 263.308629][ T7169] 1050 pages in swap cache [ 263.327563][ T7169] Free swap = 64680kB [ 263.332543][ T7169] Total swap = 124996kB [ 263.337316][ T7169] 2097051 pages RAM [ 263.341828][ T7169] 0 pages HighMem/MovableOnly [ 263.346809][ T7169] 428577 pages reserved [ 263.352161][ T7169] 0 pages cma reserved [ 263.403185][ T8374] xt_CT: No such helper "snmp" [ 263.480713][ T5927] usb 9-1: Using ep0 maxpacket: 16 [ 263.499402][ T5927] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 263.520795][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.550418][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 263.574130][ T5927] usb 9-1: config 0 descriptor?? [ 263.623360][ T8378] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 263.702811][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 263.722477][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.828207][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.858205][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.882398][ T5835] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 263.888708][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.922300][ T9] usb 8-1: Product: syz [ 263.928152][ T9] usb 8-1: Manufacturer: syz [ 263.966590][ T9] usb 8-1: SerialNumber: syz [ 264.046792][ T5927] usbhid 9-1:0.0: can't add hid device: -71 [ 264.060366][ T5927] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 264.087722][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 264.108215][ T8389] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 264.132654][ T5927] usb 9-1: USB disconnect, device number 4 [ 264.375799][ T9] usb 8-1: USB disconnect, device number 22 [ 264.426174][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 264.616222][ T8392] xt_CT: No such helper "snmp" [ 264.630330][ T24] usb 6-1: Invalid ep0 maxpacket: 9 [ 264.710834][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.810157][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 264.813713][ T5891] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 264.858908][ T5891] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 264.897741][ T5891] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 264.971324][ T24] usb 6-1: Invalid ep0 maxpacket: 9 [ 264.977036][ T24] usb usb6-port1: attempt power cycle [ 265.312964][ T5891] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 265.330502][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 265.351073][ T24] usb 6-1: Invalid ep0 maxpacket: 9 [ 265.414735][ T5891] megaworld 0003:07B5:0312.0006: unknown main item tag 0x0 [ 265.500423][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 265.531309][ T24] usb 6-1: Invalid ep0 maxpacket: 9 [ 265.536842][ T24] usb usb6-port1: unable to enumerate USB device [ 265.871942][ T5891] megaworld 0003:07B5:0312.0006: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.6-1/input0 [ 265.956914][ T5891] megaworld 0003:07B5:0312.0006: no inputs found [ 266.090618][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.305535][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.340280][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 266.419766][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 266.460343][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 266.494207][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.506735][ T24] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 266.556555][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.570083][ T24] usb 1-1: Product: syz [ 266.578361][ T24] usb 1-1: Manufacturer: syz [ 266.593667][ T24] usb 1-1: SerialNumber: syz [ 266.605272][ T5892] usb 7-1: USB disconnect, device number 12 [ 266.639783][ T24] usb 1-1: config 0 descriptor?? [ 266.749822][ T24] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 267.030558][ T1543] usb 1-1: USB disconnect, device number 16 [ 267.216985][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.7.683'. [ 267.284466][ T8428] netlink: 'syz.7.683': attribute type 10 has an invalid length. [ 267.494773][ T8434] syzkaller1: entered promiscuous mode [ 267.512028][ T8434] syzkaller1: entered allmulticast mode [ 267.739457][ T8441] FAULT_INJECTION: forcing a failure. [ 267.739457][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.752669][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.5.687 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 267.752693][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.752703][ T8441] Call Trace: [ 267.752711][ T8441] [ 267.752718][ T8441] dump_stack_lvl+0x241/0x360 [ 267.752749][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.752771][ T8441] ? __pfx__printk+0x10/0x10 [ 267.752807][ T8441] should_fail_ex+0x424/0x570 [ 267.752836][ T8441] copy_page_from_iter_atomic+0x2d6/0x1de0 [ 267.752878][ T8441] ? fault_in_readable+0x169/0x2e0 [ 267.752908][ T8441] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 267.752926][ T8441] ? shmem_write_begin+0x216/0x3a0 [ 267.752948][ T8441] ? __pfx_shmem_write_begin+0x10/0x10 [ 267.752979][ T8441] generic_perform_write+0x687/0xa10 [ 267.752997][ T8441] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 267.753034][ T8441] ? __pfx_generic_perform_write+0x10/0x10 [ 267.753052][ T8441] ? __pfx_generic_write_checks+0x10/0x10 [ 267.753068][ T8441] ? rcu_read_lock_any_held+0xbb/0x160 [ 267.753090][ T8441] ? file_update_time+0x2ab/0x450 [ 267.753112][ T8441] shmem_file_write_iter+0xf9/0x120 [ 267.753135][ T8441] vfs_write+0x70f/0xd10 [ 267.753164][ T8441] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 267.753186][ T8441] ? __pfx_vfs_write+0x10/0x10 [ 267.753211][ T8441] ? __fget_files+0x2a/0x420 [ 267.753230][ T8441] ? __fget_files+0x2a/0x420 [ 267.753255][ T8441] ksys_write+0x19d/0x2d0 [ 267.753279][ T8441] ? __pfx_ksys_write+0x10/0x10 [ 267.753307][ T8441] ? do_syscall_64+0xb6/0x210 [ 267.753327][ T8441] do_syscall_64+0xf3/0x210 [ 267.753344][ T8441] ? clear_bhb_loop+0x45/0xa0 [ 267.753364][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.753380][ T8441] RIP: 0033:0x7fcc9a98e169 [ 267.753395][ T8441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.753409][ T8441] RSP: 002b:00007fcc9b734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.753428][ T8441] RAX: ffffffffffffffda RBX: 00007fcc9abb5fa0 RCX: 00007fcc9a98e169 [ 267.753440][ T8441] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000003 [ 267.753450][ T8441] RBP: 00007fcc9b734090 R08: 0000000000000000 R09: 0000000000000000 [ 267.753461][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.753470][ T8441] R13: 0000000000000000 R14: 00007fcc9abb5fa0 R15: 00007fcc9acdfa28 [ 267.753499][ T8441] [ 267.754168][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.7.686'. [ 268.237000][ T8446] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 268.264438][ T8446] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.313070][ T8446] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.708185][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.718407][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.009862][ T8453] xt_CT: No such helper "snmp" [ 269.270350][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 269.395753][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.695'. [ 269.411213][ T8470] netlink: 'syz.7.695': attribute type 10 has an invalid length. [ 269.462569][ T24] usb 6-1: config 0 has no interfaces? [ 269.479646][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 269.489107][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.511346][ T24] usb 6-1: Product: syz [ 269.517802][ T24] usb 6-1: Manufacturer: syz [ 269.527918][ T24] usb 6-1: SerialNumber: syz [ 269.543971][ T24] usb 6-1: config 0 descriptor?? [ 269.680488][ T5927] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 269.817171][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.7.696'. [ 269.842943][ T5927] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.854498][ T5927] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.881056][ T8474] netlink: 'syz.7.696': attribute type 10 has an invalid length. [ 269.907758][ T5927] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.926581][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.042664][ T5927] usb 9-1: Product: syz [ 270.052811][ T5927] usb 9-1: Manufacturer: syz [ 270.057482][ T5927] usb 9-1: SerialNumber: syz [ 270.204562][ T8462] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 270.278954][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 270.307061][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 270.350384][ T8479] netlink: 'syz.0.698': attribute type 11 has an invalid length. [ 270.415907][ T8479] netlink: 'syz.0.698': attribute type 12 has an invalid length. [ 270.857377][ T8489] fuse: Bad value for 'user_id' [ 270.944273][ T8489] fuse: Bad value for 'user_id' [ 272.085526][ T5835] usb 6-1: USB disconnect, device number 15 [ 272.136666][ T8502] Cannot find del_set index 4 as target [ 272.310515][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 272.460471][ T5927] usb 9-1: 0:2 : does not exist [ 272.473487][ T24] usb 7-1: device descriptor read/64, error -71 [ 272.512223][ T5927] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 272.660772][ T5927] usb 9-1: USB disconnect, device number 5 [ 272.763556][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 272.778398][ T8516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.706'. [ 272.908486][ T8514] netlink: 'syz.7.706': attribute type 10 has an invalid length. [ 272.980582][ T24] usb 7-1: device descriptor read/64, error -71 [ 273.099106][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.120507][ T5929] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 273.138890][ T24] usb usb7-port1: attempt power cycle [ 273.344410][ T5929] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 273.370505][ T5929] usb 1-1: config 0 has no interface number 0 [ 273.395325][ T5929] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 273.420567][ T8521] netlink: 'syz.8.708': attribute type 10 has an invalid length. [ 273.480351][ T5929] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.551477][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 273.580516][ T5929] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 273.589623][ T5929] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 273.651477][ T24] usb 7-1: device descriptor read/8, error -71 [ 273.679906][ T5929] usb 1-1: Manufacturer: syz [ 273.687407][ T8527] FAULT_INJECTION: forcing a failure. [ 273.687407][ T8527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.724886][ T5929] usb 1-1: config 0 descriptor?? [ 273.765943][ T5929] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 273.784644][ T8527] CPU: 1 UID: 0 PID: 8527 Comm: syz.8.711 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 273.784670][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.784695][ T8527] Call Trace: [ 273.784701][ T8527] [ 273.784708][ T8527] dump_stack_lvl+0x241/0x360 [ 273.784737][ T8527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.784757][ T8527] ? __pfx__printk+0x10/0x10 [ 273.784789][ T8527] should_fail_ex+0x424/0x570 [ 273.784818][ T8527] prepare_alloc_pages+0x220/0x610 [ 273.784849][ T8527] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 273.784874][ T8527] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.784893][ T8527] ? count_memcg_event_mm+0x388/0x440 [ 273.784916][ T8527] ? mtree_range_walk+0x700/0x8e0 [ 273.784948][ T8527] alloc_pages_mpol+0x339/0x690 [ 273.784970][ T8527] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.785000][ T8527] folio_alloc_mpol_noprof+0x36/0x70 [ 273.785018][ T8527] shmem_alloc_and_add_folio+0x490/0x1070 [ 273.785049][ T8527] ? shmem_huge_global_enabled+0x175/0x3b0 [ 273.785067][ T8527] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 273.785090][ T8527] ? shmem_allowable_huge_orders+0x200/0x430 [ 273.785116][ T8527] shmem_get_folio_gfp+0x655/0x1800 [ 273.785153][ T8527] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 273.785183][ T8527] shmem_write_begin+0x17e/0x3a0 [ 273.785207][ T8527] ? __pfx_shmem_write_begin+0x10/0x10 [ 273.785238][ T8527] generic_perform_write+0x329/0xa10 [ 273.785255][ T8527] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 273.785292][ T8527] ? __pfx_generic_perform_write+0x10/0x10 [ 273.785310][ T8527] ? __pfx_generic_write_checks+0x10/0x10 [ 273.785326][ T8527] ? rcu_read_lock_any_held+0xbb/0x160 [ 273.785348][ T8527] ? file_update_time+0x2ab/0x450 [ 273.785372][ T8527] shmem_file_write_iter+0xf9/0x120 [ 273.785394][ T8527] vfs_write+0x70f/0xd10 [ 273.785420][ T8527] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 273.785441][ T8527] ? __pfx_vfs_write+0x10/0x10 [ 273.785466][ T8527] ? __fget_files+0x2a/0x420 [ 273.785485][ T8527] ? __fget_files+0x2a/0x420 [ 273.785510][ T8527] ksys_write+0x19d/0x2d0 [ 273.785534][ T8527] ? __pfx_ksys_write+0x10/0x10 [ 273.785562][ T8527] ? do_syscall_64+0xb6/0x210 [ 273.785582][ T8527] do_syscall_64+0xf3/0x210 [ 273.785599][ T8527] ? clear_bhb_loop+0x45/0xa0 [ 273.785619][ T8527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.785634][ T8527] RIP: 0033:0x7fd00978e169 [ 273.785649][ T8527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.785662][ T8527] RSP: 002b:00007fd00a669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.785687][ T8527] RAX: ffffffffffffffda RBX: 00007fd0099b5fa0 RCX: 00007fd00978e169 [ 273.785699][ T8527] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000003 [ 273.785709][ T8527] RBP: 00007fd00a669090 R08: 0000000000000000 R09: 0000000000000000 [ 273.785719][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.785729][ T8527] R13: 0000000000000000 R14: 00007fd0099b5fa0 R15: 00007fd009adfa28 [ 273.785758][ T8527] [ 274.093839][ T5929] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 274.112850][ T5929] usb 1-1: USB disconnect, device number 17 [ 274.181491][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 274.183165][ T8531] usb usb8: usbfs: process 8531 (syz.7.712) did not claim interface 0 before use [ 274.218101][ T24] usb 7-1: device descriptor read/8, error -71 [ 274.351019][ T24] usb usb7-port1: unable to enumerate USB device [ 274.633062][ T8537] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 274.935480][ T8539] xt_CT: No such helper "snmp" [ 275.047338][ T8545] dummy0: entered promiscuous mode [ 275.101897][ T8545] vlan2: entered promiscuous mode [ 275.110323][ T5891] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 275.218243][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.715'. [ 275.560631][ T8558] input: syz1 as /devices/virtual/input/input18 [ 275.630595][ T5927] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 275.792009][ T5927] usb 9-1: config 0 has no interfaces? [ 275.813933][ T5927] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.845019][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.877603][ T5927] usb 9-1: Product: syz [ 275.890467][ T5927] usb 9-1: Manufacturer: syz [ 275.890528][ T5891] usb 7-1: device descriptor read/64, error -71 [ 275.900792][ T5927] usb 9-1: SerialNumber: syz [ 275.928794][ T5927] usb 9-1: config 0 descriptor?? [ 276.011424][ T8562] bond_slave_0: entered promiscuous mode [ 276.017206][ T8562] bond_slave_1: entered promiscuous mode [ 276.058787][ T8562] vlan2: entered promiscuous mode [ 276.145529][ T8562] bond0: entered promiscuous mode [ 276.205598][ T5891] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 276.220848][ T8562] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 276.298574][ T8564] netlink: 'syz.7.721': attribute type 10 has an invalid length. [ 276.429738][ T5891] usb 7-1: config 0 has no interfaces? [ 276.446369][ T5891] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.471696][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.484511][ T8566] FAULT_INJECTION: forcing a failure. [ 276.484511][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 276.525576][ T5891] usb 7-1: Product: syz [ 276.527768][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.7.722 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 276.527794][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.527804][ T8566] Call Trace: [ 276.527812][ T8566] [ 276.527819][ T8566] dump_stack_lvl+0x241/0x360 [ 276.527848][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.527870][ T8566] ? __pfx__printk+0x10/0x10 [ 276.527895][ T8566] ? __pfx___might_resched+0x10/0x10 [ 276.527915][ T8566] should_fail_ex+0x424/0x570 [ 276.527942][ T8566] should_failslab+0xac/0x100 [ 276.527961][ T8566] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 276.527979][ T8566] ? __alloc_skb+0x1c2/0x480 [ 276.528003][ T8566] __alloc_skb+0x1c2/0x480 [ 276.528029][ T8566] ? __pfx___alloc_skb+0x10/0x10 [ 276.528052][ T8566] ? netlink_autobind+0xd6/0x2f0 [ 276.528084][ T8566] ? netlink_autobind+0x2b0/0x2f0 [ 276.528108][ T8566] netlink_sendmsg+0x638/0xcd0 [ 276.528139][ T8566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.528161][ T8566] ? aa_sock_msg_perm+0x91/0x160 [ 276.528186][ T8566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.528204][ T8566] __sock_sendmsg+0x221/0x270 [ 276.528225][ T8566] ____sys_sendmsg+0x523/0x860 [ 276.528257][ T8566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.528280][ T8566] ? __fget_files+0x2a/0x420 [ 276.528299][ T8566] ? __fget_files+0x2a/0x420 [ 276.528322][ T8566] __sys_sendmsg+0x271/0x360 [ 276.528355][ T8566] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.528426][ T8566] ? do_syscall_64+0xb6/0x210 [ 276.528446][ T8566] do_syscall_64+0xf3/0x210 [ 276.528462][ T8566] ? clear_bhb_loop+0x45/0xa0 [ 276.528480][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.528495][ T8566] RIP: 0033:0x7fdb8b38e169 [ 276.528511][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.528525][ T8566] RSP: 002b:00007fdb8c253038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.528543][ T8566] RAX: ffffffffffffffda RBX: 00007fdb8b5b5fa0 RCX: 00007fdb8b38e169 [ 276.528555][ T8566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 276.528565][ T8566] RBP: 00007fdb8c253090 R08: 0000000000000000 R09: 0000000000000000 [ 276.528575][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.528585][ T8566] R13: 0000000000000000 R14: 00007fdb8b5b5fa0 R15: 00007fdb8b6dfa28 [ 276.528610][ T8566] [ 276.893953][ T8568] FAULT_INJECTION: forcing a failure. [ 276.893953][ T8568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.019812][ T8568] CPU: 0 UID: 0 PID: 8568 Comm: syz.7.723 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 277.019840][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.019850][ T8568] Call Trace: [ 277.019857][ T8568] [ 277.019864][ T8568] dump_stack_lvl+0x241/0x360 [ 277.019895][ T8568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.019917][ T8568] ? __pfx__printk+0x10/0x10 [ 277.019951][ T8568] should_fail_ex+0x424/0x570 [ 277.019979][ T8568] _copy_from_iter+0x211/0x1c70 [ 277.020005][ T8568] ? __build_skb_around+0x247/0x3d0 [ 277.020030][ T8568] ? __alloc_skb+0x298/0x480 [ 277.020050][ T8568] ? __pfx__copy_from_iter+0x10/0x10 [ 277.020071][ T8568] ? __pfx___alloc_skb+0x10/0x10 [ 277.020095][ T8568] ? skb_put+0x114/0x1f0 [ 277.020121][ T8568] netlink_sendmsg+0x73c/0xcd0 [ 277.020154][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.020178][ T8568] ? aa_sock_msg_perm+0x91/0x160 [ 277.020204][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.020220][ T8568] __sock_sendmsg+0x221/0x270 [ 277.020240][ T8568] ____sys_sendmsg+0x523/0x860 [ 277.020272][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.020299][ T8568] ? __fget_files+0x2a/0x420 [ 277.020318][ T8568] ? __fget_files+0x2a/0x420 [ 277.020342][ T8568] __sys_sendmsg+0x271/0x360 [ 277.020370][ T8568] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.020445][ T8568] ? do_syscall_64+0xb6/0x210 [ 277.020465][ T8568] do_syscall_64+0xf3/0x210 [ 277.020482][ T8568] ? clear_bhb_loop+0x45/0xa0 [ 277.020501][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.020517][ T8568] RIP: 0033:0x7fdb8b38e169 [ 277.020532][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.020546][ T8568] RSP: 002b:00007fdb8c253038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.020565][ T8568] RAX: ffffffffffffffda RBX: 00007fdb8b5b5fa0 RCX: 00007fdb8b38e169 [ 277.020577][ T8568] RDX: 0000000004040840 RSI: 0000200000000280 RDI: 0000000000000003 [ 277.020588][ T8568] RBP: 00007fdb8c253090 R08: 0000000000000000 R09: 0000000000000000 [ 277.020599][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.020608][ T8568] R13: 0000000000000000 R14: 00007fdb8b5b5fa0 R15: 00007fdb8b6dfa28 [ 277.020635][ T8568] [ 277.567821][ T5891] usb 7-1: Manufacturer: syz [ 277.577949][ T5891] usb 7-1: SerialNumber: syz [ 277.606049][ T5891] usb 7-1: config 0 descriptor?? [ 277.708872][ T8571] dummy0: entered promiscuous mode [ 277.753152][ T8571] vlan2: entered promiscuous mode [ 277.924923][ T8575] gretap0: entered promiscuous mode [ 277.943387][ T8575] gretap0: left promiscuous mode [ 278.111629][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 278.280507][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 278.324151][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.330028][ T5927] usb 9-1: USB disconnect, device number 6 [ 278.394510][ T9] usb 1-1: config 0 has no interface number 0 [ 278.433328][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.508637][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 278.544496][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.620125][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.880688][ T5891] usb 7-1: USB disconnect, device number 18 [ 278.936815][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.019105][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 279.079250][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.153568][ T9] usb 1-1: config 0 descriptor?? [ 279.209377][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.276204][ T8597] netlink: 'syz.7.732': attribute type 10 has an invalid length. [ 280.600767][ T5929] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 280.798954][ T24] usb 1-1: USB disconnect, device number 18 [ 280.809771][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 280.848196][ T5929] usb 7-1: config 195 has too many interfaces: 134, using maximum allowed: 32 [ 280.866803][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 280.906078][ T5929] usb 7-1: config 195 has 1 interface, different from the descriptor's value: 134 [ 280.974240][ T5929] usb 7-1: config 195 has no interface number 0 [ 280.992372][ T5929] usb 7-1: config 195 interface 85 has no altsetting 0 [ 281.003102][ T5929] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 281.020593][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.028879][ T5929] usb 7-1: Product: syz [ 281.033775][ T5929] usb 7-1: Manufacturer: syz [ 281.039051][ T5929] usb 7-1: SerialNumber: syz [ 281.147663][ T8623] xt_CT: No such helper "snmp" [ 281.730478][ T5927] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 282.056833][ T5927] usb 1-1: config 0 has no interfaces? [ 282.071301][ T5927] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.086066][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.127950][ T5927] usb 1-1: Product: syz [ 282.134150][ T5927] usb 1-1: Manufacturer: syz [ 282.154377][ T5927] usb 1-1: SerialNumber: syz [ 282.180447][ T5927] usb 1-1: config 0 descriptor?? [ 282.657318][ T8642] netlink: 'syz.8.744': attribute type 10 has an invalid length. [ 283.045604][ T5929] appletouch 7-1:195.85: Could not find int-in endpoint [ 283.151463][ T5929] appletouch 7-1:195.85: probe with driver appletouch failed with error -5 [ 283.214165][ T5929] usbhid 7-1:195.85: couldn't find an input interrupt endpoint [ 283.280574][ T5929] usb 7-1: USB disconnect, device number 19 [ 283.572101][ T8651] netlink: 68 bytes leftover after parsing attributes in process `syz.6.750'. [ 283.668158][ T8654] vlan2: entered promiscuous mode [ 284.234007][ T8665] netlink: 'syz.7.753': attribute type 72 has an invalid length. [ 284.241930][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.7.753'. [ 284.252151][ T8665] netlink: 'syz.7.753': attribute type 10 has an invalid length. [ 284.502525][ T5929] usb 1-1: USB disconnect, device number 19 [ 284.543883][ T8671] IPv6: NLM_F_REPLACE set, but no existing node found! [ 284.604364][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 284.788603][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 284.822235][ T24] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 284.838582][ T24] usb 7-1: config 252 has no interface number 0 [ 284.855668][ T24] usb 7-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 284.915140][ T24] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 284.949483][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.983422][ T24] usb 7-1: Product: syz [ 284.995779][ T24] usb 7-1: Manufacturer: syz [ 285.010585][ T24] usb 7-1: SerialNumber: syz [ 285.177764][ T24] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 285.372085][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.6.752'. [ 285.649612][ T8680] netlink: 'syz.7.756': attribute type 10 has an invalid length. [ 285.864469][ T8682] netlink: 232 bytes leftover after parsing attributes in process `syz.7.757'. [ 285.883800][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.7.757'. [ 286.129015][ T8684] ALSA: mixer_oss: invalid OSS volume 'M' [ 286.415424][ T6773] usb 7-1: Failed to submit usb control message: -110 [ 286.427215][ T8686] netlink: 232 bytes leftover after parsing attributes in process `syz.7.758'. [ 286.437177][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.758'. [ 286.466676][ T6773] usb 7-1: unable to send the bmi data to the device: -110 [ 286.486816][ T6773] usb 7-1: unable to get target info from device [ 286.524641][ T6773] usb 7-1: could not get target info (-110) [ 286.576069][ T6773] usb 7-1: could not probe fw (-110) [ 287.191438][ T1543] usb 7-1: USB disconnect, device number 20 [ 287.775259][ T8692] sctp: [Deprecated]: syz.7.762 (pid 8692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.775259][ T8692] Use struct sctp_sack_info instead [ 287.853261][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.762'. [ 288.076484][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.290384][ T5892] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 288.314263][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.341128][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.373566][ T24] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 288.393643][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.500535][ T5892] usb 9-1: config 0 has no interfaces? [ 288.517688][ T5892] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 288.537117][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.546456][ T24] usb 1-1: config 0 descriptor?? [ 288.560331][ T5892] usb 9-1: Product: syz [ 288.573946][ T5892] usb 9-1: Manufacturer: syz [ 288.585724][ T5892] usb 9-1: SerialNumber: syz [ 288.710848][ T5892] usb 9-1: config 0 descriptor?? [ 288.874208][ T8694] ptrace attach of "./syz-executor exec"[8703] was attempted by "./syz-executor exec"[8694] [ 289.191376][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.204439][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.362125][ T24] megaworld 0003:07B5:0312.0007: unknown main item tag 0x7 [ 289.455714][ T24] megaworld 0003:07B5:0312.0007: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 289.498753][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 289.518526][ T24] megaworld 0003:07B5:0312.0007: no inputs found [ 289.530484][ T1543] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 289.577369][ T24] usb 1-1: USB disconnect, device number 20 [ 289.695747][ T1543] usb 8-1: config 0 has no interfaces? [ 289.713524][ T1543] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.750455][ T1543] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.758948][ T1543] usb 8-1: Product: syz [ 289.763515][ T1543] usb 8-1: Manufacturer: syz [ 289.768265][ T1543] usb 8-1: SerialNumber: syz [ 289.799903][ T1543] usb 8-1: config 0 descriptor?? [ 290.090482][ T8716] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 290.496427][ T8718] xt_CT: No such helper "snmp" [ 290.700528][ T24] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 290.898634][ T24] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 290.938203][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.992403][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.039404][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.084536][ T24] usb 7-1: SerialNumber: syz [ 291.197336][ T5889] usb 9-1: USB disconnect, device number 7 [ 291.210884][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 291.352080][ T24] usb 7-1: invalid UAC_HEADER (v1) [ 291.381033][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 291.395198][ T5892] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 291.424843][ T5892] usb 1-1: config 252 has no interface number 0 [ 291.478715][ T5892] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 291.506622][ T8734] bond_slave_0: entered promiscuous mode [ 291.512445][ T8734] bond_slave_1: entered promiscuous mode [ 291.521292][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 291.538196][ T24] usb 7-1: USB disconnect, device number 21 [ 291.548920][ T5892] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 291.576031][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.593797][ T8734] vlan2: entered promiscuous mode [ 291.601526][ T5892] usb 1-1: Product: syz [ 291.605897][ T8734] bond0: entered promiscuous mode [ 291.644611][ T5892] usb 1-1: Manufacturer: syz [ 291.663644][ T8734] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 291.679031][ T5892] usb 1-1: SerialNumber: syz [ 291.741327][ T5892] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 291.938659][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'. [ 292.090423][ T24] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 292.251970][ T5892] usb 8-1: USB disconnect, device number 23 [ 292.293191][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 292.333833][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 292.365550][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 54370, setting to 8 [ 292.382793][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.397384][ T24] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 292.414082][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.434171][ T24] usb 7-1: config 0 descriptor?? [ 292.440032][ T8736] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 292.454854][ T24] metro_usb 7-1:0.0: Metrologic USB to Serial converter detected [ 292.470342][ T24] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 292.487563][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.665899][ T24] usb 7-1: USB disconnect, device number 22 [ 292.681273][ T24] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 292.705547][ T24] metro_usb 7-1:0.0: device disconnected [ 292.801065][ T6773] usb 1-1: Failed to submit usb control message: -110 [ 292.820999][ T6773] usb 1-1: unable to send the bmi data to the device: -110 [ 292.864151][ T6773] usb 1-1: unable to get target info from device [ 292.892342][ T6773] usb 1-1: could not get target info (-110) [ 292.909950][ T6773] usb 1-1: could not probe fw (-110) [ 293.320471][ T8753] netlink: 68 bytes leftover after parsing attributes in process `syz.6.777'. [ 293.417088][ T8755] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.605432][ T8757] netlink: 'syz.8.778': attribute type 10 has an invalid length. [ 293.779687][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.6.779'. [ 293.816055][ T24] usb 1-1: USB disconnect, device number 21 [ 293.842337][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 293.872498][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.780'. [ 294.640588][ T8771] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 295.525907][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.790'. [ 296.023031][ T8796] netlink: 68 bytes leftover after parsing attributes in process `syz.0.789'. [ 296.250906][ T31] INFO: task syz.4.318:7172 blocked for more than 143 seconds. [ 296.361782][ T8798] fuse: Unknown parameter 'group_i00000000000000000000' [ 296.410972][ T31] Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 [ 296.428763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.441293][ T31] task:syz.4.318 state:D stack:27112 pid:7172 tgid:7160 ppid:5854 task_flags:0x400040 flags:0x00000004 [ 296.486256][ T31] Call Trace: [ 296.489624][ T31] [ 296.639688][ T31] __schedule+0x1b88/0x5240 [ 296.654969][ T31] ? schedule+0x163/0x360 [ 296.662116][ T31] ? __pfx___schedule+0x10/0x10 [ 296.670069][ T31] ? schedule+0x90/0x360 [ 296.675032][ T31] ? schedule+0x90/0x360 [ 296.680176][ T31] schedule+0x163/0x360 [ 296.684901][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 296.689802][ T31] schedule_preempt_disabled+0x13/0x30 [ 296.699965][ T31] __mutex_lock+0x805/0x10c0 [ 296.778099][ T31] ? __mutex_lock+0x5f3/0x10c0 [ 296.798308][ T31] ? blk_trace_remove+0x20/0x40 [ 296.838581][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.845838][ T31] ? tomoyo_path_number_perm+0x215/0x790 [ 296.865172][ T31] ? __schedule+0x1ba6/0x5240 [ 296.870072][ T31] blk_trace_remove+0x20/0x40 [ 296.877188][ T31] sg_ioctl+0x4a3/0x2e20 [ 296.897506][ T31] ? __lock_acquire+0xad5/0xd80 [ 296.902713][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 296.907458][ T31] ? __fget_files+0x2a/0x420 [ 296.912114][ T31] ? __fget_files+0x2a/0x420 [ 296.916834][ T31] ? __fget_files+0x2a/0x420 [ 296.921518][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 296.926300][ T31] __se_sys_ioctl+0xf1/0x160 [ 296.931098][ T31] do_syscall_64+0xf3/0x210 [ 296.935624][ T31] ? clear_bhb_loop+0x45/0xa0 [ 296.940395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.946321][ T31] RIP: 0033:0x7f846ef8e169 [ 296.979722][ T31] RSP: 002b:00007f846fe0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.013911][ T31] RAX: ffffffffffffffda RBX: 00007f846f1b6320 RCX: 00007f846ef8e169 [ 297.040629][ T31] RDX: 0000000020000000 RSI: 0000000000001276 RDI: 000000000000000b [ 297.048799][ T31] RBP: 00007f846f010a68 R08: 0000000000000000 R09: 0000000000000000 [ 297.058543][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.083963][ T31] R13: 0000000000000000 R14: 00007f846f1b6320 R15: 00007f846f2dfa28 [ 297.101539][ T31] [ 297.108065][ T31] [ 297.108065][ T31] Showing all locks held in the system: [ 297.185155][ T31] 2 locks held by kworker/u8:0/12: [ 297.220899][ T31] 1 lock held by khungtaskd/31: [ 297.238758][ T31] #0: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 297.269569][ T31] 3 locks held by kworker/u9:0/55: [ 297.297740][ T31] #0: ffff88805a638148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 297.378911][ T31] #1: ffffc9000121fc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 297.396149][ T31] #2: ffff888034e14d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 297.435815][ T31] 2 locks held by getty/5595: [ 297.447925][ T31] #0: ffff88814df6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.478958][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 297.510293][ T31] 3 locks held by kworker/u9:4/5841: [ 297.533715][ T31] #0: ffff88805b2bf948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 297.564369][ T31] #1: ffffc900042cfc60 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 297.611755][ T31] #2: ffff88807ac40d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 297.627260][ T31] 2 locks held by syz.4.318/7169: [ 297.639539][ T31] 1 lock held by syz.4.318/7172: [ 297.649585][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 297.668221][ T31] 1 lock held by syz.2.336/7247: [ 297.680284][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 297.697985][ T31] 1 lock held by syz.3.343/7267: [ 297.741750][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfd/0x1f0 [ 297.806802][ T31] 1 lock held by syz.3.343/7268: [ 297.820003][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 297.848795][ T31] 1 lock held by syz.1.431/7558: [ 297.862164][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfd/0x1f0 [ 297.892102][ T31] 1 lock held by syz.1.431/7559: [ 297.897270][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 297.909227][ T31] 2 locks held by kworker/u8:10/7983: [ 297.937837][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 297.978204][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 298.024152][ T31] 3 locks held by kworker/u8:11/7984: [ 298.030516][ T31] #0: ffff888030a65948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 298.042698][ T31] #1: ffffc9000e647c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 298.057490][ T31] #2: ffffffff900fd608 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 298.068320][ T31] 2 locks held by kworker/u8:12/7985: [ 298.074143][ T31] #0: ffff88801e7f4948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 298.086011][ T31] #1: ffffc9000e657c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 298.143744][ T31] 3 locks held by kworker/u8:13/7987: [ 298.149342][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 298.174555][ T31] #1: ffffc9000e667c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 298.189029][ T31] #2: ffffffff900fd608 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 298.200140][ T31] 1 lock held by syz.5.742/8635: [ 298.209698][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfd/0x1f0 [ 298.224126][ T31] 1 lock held by syz.5.742/8636: [ 298.281722][ T31] #0: ffff888143b6b9d8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_remove+0x20/0x40 [ 298.301125][ T31] 2 locks held by syz.6.788/8785: [ 298.306647][ T31] #0: ffffffff900fd608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 298.317743][ T31] #1: ffffffff8ed43438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 298.329687][ T31] [ 298.338792][ T31] ============================================= [ 298.338792][ T31] [ 298.377679][ T31] NMI backtrace for cpu 1 [ 298.377696][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 298.377709][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.377715][ T31] Call Trace: [ 298.377719][ T31] [ 298.377724][ T31] dump_stack_lvl+0x241/0x360 [ 298.377743][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.377756][ T31] ? __pfx__printk+0x10/0x10 [ 298.377774][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 298.377791][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 298.377803][ T31] ? irqentry_exit+0x63/0x90 [ 298.377812][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 298.377826][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 298.377836][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 298.377850][ T31] watchdog+0x1058/0x10a0 [ 298.377864][ T31] ? watchdog+0x1ea/0x10a0 [ 298.377877][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.377888][ T31] kthread+0x7b7/0x940 [ 298.377900][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.377912][ T31] ? __pfx_kthread+0x10/0x10 [ 298.377921][ T31] ? __pfx_kthread+0x10/0x10 [ 298.377930][ T31] ? __pfx_kthread+0x10/0x10 [ 298.377940][ T31] ? __pfx_kthread+0x10/0x10 [ 298.377950][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.377963][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 298.377971][ T31] ? __pfx_kthread+0x10/0x10 [ 298.377982][ T31] ret_from_fork+0x4b/0x80 [ 298.377991][ T31] ? __pfx_kthread+0x10/0x10 [ 298.378001][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.378017][ T31] [ 298.378020][ T31] Sending NMI from CPU 1 to CPUs 0: [ 298.536566][ C0] NMI backtrace for cpu 0 [ 298.536584][ C0] CPU: 0 UID: 0 PID: 7169 Comm: syz.4.318 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 298.536604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.536614][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40 [ 298.536637][ C0] Code: f3 0f 1e fa 31 c0 83 3d 47 2e 30 04 00 74 1e 83 3d 1a 5c 30 04 00 74 15 65 48 8b 0c 25 08 60 68 93 31 c0 83 b9 ec 0a 00 00 00 <0f> 94 c0 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 298.536650][ C0] RSP: 0018:ffffc9000408f660 EFLAGS: 00000246 [ 298.536666][ C0] RAX: 0000000000000000 RBX: ffffc9000408f740 RCX: ffff88802648bc00 [ 298.536677][ C0] RDX: dffffc0000000000 RSI: ffffc90004088000 RDI: ffffc9000408f748 [ 298.536689][ C0] RBP: dffffc0000000001 R08: ffffc9000408fa20 R09: 0000000000000000 [ 298.536700][ C0] R10: ffffc9000408f790 R11: fffff52000811ef4 R12: ffffc9000408f750 [ 298.536711][ C0] R13: dffffc0000000000 R14: ffffc9000408fa30 R15: ffffffff816d9bc8 [ 298.536723][ C0] FS: 00007f846fe2f6c0(0000) GS:ffff888124f9a000(0000) knlGS:0000000000000000 [ 298.536737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.536748][ C0] CR2: 00007f2c3a980178 CR3: 000000007c5c0000 CR4: 00000000003526f0 [ 298.536762][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.536771][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.536780][ C0] Call Trace: [ 298.536786][ C0] [ 298.536792][ C0] unwind_next_frame+0x1a52/0x23b0 [ 298.536815][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 298.536833][ C0] ? __reset_page_owner+0x76/0x1e0 [ 298.536857][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.536876][ C0] arch_stack_walk+0x11e/0x150 [ 298.536897][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 298.536918][ C0] stack_trace_save+0x11a/0x1d0 [ 298.536934][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 298.536956][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 298.536971][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 298.536987][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 298.537010][ C0] ? __lock_acquire+0xad5/0xd80 [ 298.537035][ C0] save_stack+0xfc/0x1f0 [ 298.537057][ C0] ? __pfx_save_stack+0x10/0x10 [ 298.537084][ C0] ? page_ext_put+0x97/0xc0 [ 298.537108][ C0] __reset_page_owner+0x76/0x1e0 [ 298.537137][ C0] __free_frozen_pages+0xde8/0x10a0 [ 298.537160][ C0] relay_destroy_buf+0x112/0x3a0 [ 298.537179][ C0] relay_open+0x78d/0x960 [ 298.537197][ C0] do_blk_trace_setup+0x57b/0x9c0 [ 298.537221][ C0] blk_trace_setup+0x118/0x1f0 [ 298.537243][ C0] ? __pfx_blk_trace_setup+0x10/0x10 [ 298.537266][ C0] ? do_sys_openat2+0x165/0x1d0 [ 298.537286][ C0] sg_ioctl+0xa12/0x2e20 [ 298.537299][ C0] ? __lock_acquire+0xad5/0xd80 [ 298.537325][ C0] ? __pfx_sg_ioctl+0x10/0x10 [ 298.537340][ C0] ? __fget_files+0x2a/0x420 [ 298.537355][ C0] ? __fget_files+0x2a/0x420 [ 298.537370][ C0] ? __fget_files+0x2a/0x420 [ 298.537385][ C0] ? __pfx_sg_ioctl+0x10/0x10 [ 298.537399][ C0] __se_sys_ioctl+0xf1/0x160 [ 298.537419][ C0] do_syscall_64+0xf3/0x210 [ 298.537435][ C0] ? clear_bhb_loop+0x45/0xa0 [ 298.537452][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.537467][ C0] RIP: 0033:0x7f846ef8e169 [ 298.537486][ C0] Code: Unable to access opcode bytes at 0x7f846ef8e13f. [ 298.537494][ C0] RSP: 002b:00007f846fe2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.537509][ C0] RAX: ffffffffffffffda RBX: 00007f846f1b6240 RCX: 00007f846ef8e169 [ 298.537520][ C0] RDX: 0000200000000b40 RSI: 00000000c0481273 RDI: 000000000000000b [ 298.537531][ C0] RBP: 00007f846f010a68 R08: 0000000000000000 R09: 0000000000000000 [ 298.537541][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.537550][ C0] R13: 0000000000000000 R14: 00007f846f1b6240 R15: 00007f846f2dfa28 [ 298.537568][ C0] [ 298.628096][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 298.628118][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(full) [ 298.628140][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.628151][ T31] Call Trace: [ 298.628158][ T31] [ 298.628166][ T31] dump_stack_lvl+0x241/0x360 [ 298.628196][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.628219][ T31] ? __pfx__printk+0x10/0x10 [ 298.628246][ T31] ? vscnprintf+0x5d/0x90 [ 298.628270][ T31] panic+0x349/0x880 [ 298.628289][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 298.628313][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.628337][ T31] ? __pfx_panic+0x10/0x10 [ 298.628372][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 298.628391][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.628412][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 298.628435][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 298.628459][ T31] watchdog+0x1097/0x10a0 [ 298.628482][ T31] ? watchdog+0x1ea/0x10a0 [ 298.628506][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.628526][ T31] kthread+0x7b7/0x940 [ 298.628547][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.628567][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628583][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628600][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628617][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628633][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.628654][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 298.628670][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628689][ T31] ret_from_fork+0x4b/0x80 [ 298.628704][ T31] ? __pfx_kthread+0x10/0x10 [ 298.628722][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.628751][ T31] [ 299.085472][ T31] Kernel Offset: disabled [ 299.089885][ T31] Rebooting in 86400 seconds..