last executing test programs: 1m17.90188791s ago: executing program 1 (id=6462): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0xa, @local}, 0x10, &(0x7f00000001c0)}, 0x20000084) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0d00000000000000df2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x4bc, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="5e68d63877c887e14e9d56e2d61e48ff276a74d1874ae37fca7011d3b0340fe64e0a63e6f044143bef694d8b3555769efec5cd71da69304f6d82682db450029c6afe85d94cd4411fc3a472ec0c6207f5aadfab301390ca1290a5353b7f1400eaf273c15e3bd8f8ac2b8f0730d59b78f717e39419828bc83ad770ed68d91dc4243147ce72"], 0x0) 1m14.806924042s ago: executing program 1 (id=6478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) 1m13.981881647s ago: executing program 1 (id=6483): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x100, 0x9, 0x1, 0x2, 0xb, 0x7, 0x0, 0x2, 0xffffff9b, 0x6, 0xffff, 0xc12, 0x1, 0x6, 0x0, 0x1a, {0x3, 0x8}, 0x7}}) 1m13.862894294s ago: executing program 1 (id=6484): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2000, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, @multicast1, @private=0xa010100}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', r3, 0x40, 0x7, 0x10001, 0xfffffffe, {{0xf, 0x4, 0x1, 0x7, 0x3c, 0x65, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x4, [{@local, 0xeaf}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@empty, 0x3ff}]}, @lsrr={0x83, 0xb, 0xc, [@local, @rand_addr=0x64010101]}]}}}}}) (async) r4 = openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r4, &(0x7f0000000240)={'some', 0x20, 0x8, 0x20, 0xd74}, 0x2f) 1m13.747482112s ago: executing program 1 (id=6487): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x404c011, 0x0, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101880, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) (fail_nth: 1) ioctl$TCSBRKP(r2, 0x5425, 0x7) r4 = socket(0x6, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4042805}, 0x4000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1f3, 0x1090, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="158d7acda0b2", 0x0, 0x0, 0x0, 0x4, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x10020f5b, 0x0, [{}, {}, {0x0, 0x0, 0x7}, {0x0, 0x35, 0x0, '\x00', 0x3}, {0x20}, {0x5, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x0, 0x9}, {0x0, 0x6, 0x0, '\x00', 0x7}, {0x0, 0x1}, {0x6, 0x1, 0x2, '\x00', 0x1}, {0x3b, 0x0, 0xfe}, {0xd}, {0xfe}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0xa, 0x0, '\x00', 0x8}, {0x8, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x1}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) ioctl$KVM_RUN(r7, 0x8004ae98, 0x20e10000) unshare(0x24020400) lseek(0xffffffffffffffff, 0x8000000000008, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x37b1, &(0x7f00000003c0)={0x0, 0x800000, 0x2000, 0x1, 0x14b}) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x3}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m11.167517985s ago: executing program 1 (id=6499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="81b7ebfa142b577800000000000041f1f384370cb6", 0x15}], 0x1}, 0x4048081) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="81b7ebfa142b577800000000000041f1f384370cb6", 0x15}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) close(0x3) close(r5) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x10, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 55.794915487s ago: executing program 32 (id=6499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="81b7ebfa142b577800000000000041f1f384370cb6", 0x15}], 0x1}, 0x4048081) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="81b7ebfa142b577800000000000041f1f384370cb6", 0x15}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) close(0x3) close(r5) userfaultfd(0x80001) (async) r6 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x10, 0x0, @private2}}, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.866776676s ago: executing program 0 (id=6753): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x1800004, 0x80010, r2, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000000000000013000000050001"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="96e823fee70221986420038e3ad325b5c82cade3ba90f8a6577f25bf5eb0c8a4db7c43bd1278cc40239ecaedc962a5315c97b9b69dcf9948f4741e143af046ce1decd3932fbdf17e81427013190e3cb4f9a48c8041c27e129aad58281a7d21638f038a13904c31b1b68a97d4fbffa4a6e5d281561e69326de718ecaa4440c1c0fd76659cccf6015ce6808dbfe5f796b815e3f91fa12675cc6e0c49037d050e0558626be823927d93bd73ee28972aafafb60a0048863b86aa11ea0b8e7a5f8efe47c9471eb0f656dee132d84c61bd1b0a43a69b6cc77a8cf55d1e70b6", 0xdc) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 10.689021779s ago: executing program 0 (id=6760): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') read$FUSE(r4, &(0x7f0000002d80)={0x2020}, 0x2025) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3001}, 0x4) pread64(r4, &(0x7f0000000080)=""/110, 0x6e, 0x400) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r8, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r9, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/118, 0x76}], 0x1) write$FUSE_BMAP(r6, &(0x7f0000000040)={0x18, 0x0, r7, {0x8}}, 0x18) read(r4, &(0x7f0000000380)=""/167, 0xa7) 7.905017582s ago: executing program 5 (id=6777): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x3}, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r3, 0xffffffff) unshare(0x2a040c00) 7.845137997s ago: executing program 5 (id=6778): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x488dc1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) close(0xffffffffffffffff) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async) sigaltstack(0x0, &(0x7f00000002c0)={0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) (async) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 64) write$binfmt_misc(r2, &(0x7f0000000380)="66b36b1c0fdc20a6a280e11987ce0cb75926943a32b8694570a12ea2daa4311cec2f3ed4e1abc19441e7d1fe9067191d7748f841322068c8cf7fc4c126c016651955", 0x42) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0xffffffff, 0x2, 0xa, 0x6, 0xa, "8a2d8c3fa88ea34cd4b66fd09f38854a6a5f64"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.710539003s ago: executing program 5 (id=6779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000076000d9d9f7c46f8492e874221ff0b00"], 0x18}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001080)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000100)="0b4bacadadd51b4aa15e84740bed781dd1c91b7add41c37dfa03c07174bfbe88bc941b33d5e9f75efb40", 0x2a}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000500)="730eb794c0574aa75f3518f8037e6dc8dd79b1c9dc816884b6feaab1e4056bf3a46227ecfe7c02f229fe02a84e4b008fa9eac1003ba3f36363fe797c79127d06a1e53b5158004d96d5a37e1ff693ef6ba64d553899e9795fbf36d38da00e81928097aa21eac40495290614c9b37aa149af13c4b42b16dba5482cb6edccaa68287af0c06b5d117f43934a06f7193515cb3ba67b9f0ba133d177edd1501f347cd4dabf557bcf7cd9ba", 0xa8}, {&(0x7f00000005c0)="4e7ea7fa59075f8358915bdaed4d1cc381923eea2dfdeb363d954675ec5781d4c337a21857dea8913a37b8683ecba2fd85d1328fce9df9b1c294ad3d8dc7e359b59bbae9a17863e9ededbd4b1f1c1cc94fae82f86e98a038a2460ec13954dac350dac21dde44ed0e04333064c8e674532f32384bb4951c590bea8300444b38dcc5f5de56269cd3e7e8cb71d13335beeec2eecc7c8de94b2ebf11d091d418cb60648125cadb90de4f2ca1e0a3707d768809fd6fd837ae910570c26b0a56cef5", 0xbf}, {&(0x7f0000000680)="28c55ceffc1e46fe5b1ed2457e4f627029037725f7b7e89dd4ae88f9a7464ece132ae1e4d458150548f33720cf25abae6406dbbbfcda7390b89f92ac94ae0482844b84659a006891aa2be03e1e73c35600ee5f3e5815a22e346e585b4c8b9c2ffd3d337183d9", 0x66}, {&(0x7f0000000240)="c69900c6a472d0ba71b9d28763ef", 0xe}, {&(0x7f0000000700)="cefd0407710595fbd20deb32ea28f2d133d23f9fd5ce7061d4fe3274de3f223d2d23f8a8da4d0257bd4d5b4aa77deff2ecbeb033181f3c0ec0619b5cb02e7204bc9624288bcf307ec8c618286b62cde4bdd29c6910e8e2be6a18ca6844cd93907e758a129df3ae918639657836f7523a662a5ed40ab79acd3de948731084eb8802a5966f8b876b38b5b0605be1f12af0c05479a75724d21b69bf16e81dc2014d47d148279dae71b9ad61e7f7f38b913812877323c0614c19ccc61f26b01652dec8da9eee1c3f9ecfac281034735d09175ec97f214f130317cb1c0fbceb2c954054e752e8273ef8499e73020d40b909d9b6851239584697", 0xf7}], 0x7, &(0x7f0000005c80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="210000000400000021000000da4001eefee282342c0aee21796cba19f3a7e94e025978bd22966d6f669515abc8f4d3b30f139146585feccf42a1d184b4b95dfaac391e3e0af3a6bb0156c3d261509550e22a9b14e921650e18647c6a3902cd09223f0241cfcab2f8351da94824e88aa43fecaea628ed832ee615b1ff674ee31728f703220a", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1], 0xa0, 0x1}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000dc0)="a7846b1ee04aab9b69005a59f4819a36e32ac0ef16ad6ea20ac556a8daa10cd653fe638b5a08aa688e641504738dda9609c4131522047d65f1a01de2ddf92bbb7b3bd1e54696edca87acb37fa03ef30122af34e19ebbc7aed9145806aa5808eeb78e4a6a3c0a34123533fed500f0d1fcf2e9c5f81952c0aa03f9e181b10bef38dfde6ab9f3731a50c755fd341a2be86ee97e72b370f8087f7a856fb478abfb186af718618ad88307eb6926189080e1", 0xaf}, {&(0x7f0000000e80)="4a9cde883383bd359a2e232e464f09dfe761779d1ea3ed61a536181ee2100d87a1aafc2d89244e0fd495c1a17f792e36e31314feac8dcab4d99da1645a0b05c5553114d1d15c4fe235be017c8b06a9e8d066fcad9e581e56ab4d24f8bac6ba56efc679cd3c158250932cdf30c122013d51adef09435edc67d8067eb69394c261f463df6572d8b3af3ae0a1ed6d05ce9791740ba697452f76f681d37bcef7f5b1352029350f8b61ca3a5400f9b1e674462667c06e141be6a6edca458edf573ff3ab9e", 0xc2}, {&(0x7f0000000f80)="785434fb0095d3b54b02fb04ed4866a2d76e7237de932a9e553dad1ebc268b8c27c2ceab988ff615f373c7fccb9afc5b93f4333f3fcb142d2f7e5ede5a619925651d897fe9757217b402b4635d479cf04c28e0869acd524dcba3d6ca2d95e481fc578166d07b691f4d280d714c807793bcc831361d1d9adbbf904773cba16e3e1f751415664c4a3005620ba6ffec0d7b3772eed7864886de79817613467a193c007e2032d0e2582a6070c15b815be4036ec6ab9e2efa14c76045f138c58ac0f2970fab634dca2d047dcc47ecca5bad2d7f45c681c73a7a21d3b3d1e14b7fd2099b6c5a271cd1772a", 0xe8}], 0x3, &(0x7f0000000d40)=[@rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x48000}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000007240001800a00010072656469720000001000028008000140000000170800024000ffff140900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000440)=""/157, 0x0, 0x9d, '\x00', 0x0, @fallback=0x10}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000305020400"/20, @ANYRES32=0x0, @ANYBLOB="00020000000000001c0012800b0001006d616373656300000c0016800500030010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000005a80)=[{{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000003340)=[{&(0x7f0000000a00)=""/246, 0xfe}, {&(0x7f0000000b00)=""/118, 0x76}, {&(0x7f0000002200)=""/156, 0x9c}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/128, 0x80}], 0x5, &(0x7f00000033c0)=""/133, 0x85}, 0x9}, {{&(0x7f0000003480)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000400)}, 0x9}, {{&(0x7f0000000bc0)=@ax25={{0x3, @rose}, [@bcast, @remote, @rose, @null, @bcast, @default, @bcast, @netrom]}, 0x80, &(0x7f0000003980)=[{&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000003580)=""/155, 0x9b}, {&(0x7f0000003640)=""/208, 0xd0}, {&(0x7f0000003740)=""/246, 0xf6}, {&(0x7f0000001100)=""/4, 0x4}, {&(0x7f0000001180)=""/54, 0x36}, {&(0x7f0000003840)=""/76, 0x4c}, {&(0x7f00000038c0)=""/5, 0x5}, {&(0x7f0000003900)=""/56, 0x38}, {&(0x7f0000003940)=""/33, 0x21}], 0xa, &(0x7f0000003a40)=""/44, 0x2c}, 0x9}, {{&(0x7f0000003a80)=@phonet, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003b00)=""/44, 0x2c}, {&(0x7f0000003b40)=""/29, 0x1d}], 0x2, &(0x7f0000003bc0)=""/24, 0x18}, 0x1000}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c00)=""/166, 0xa6}, {&(0x7f0000003cc0)=""/200, 0xc8}, {&(0x7f0000003dc0)=""/3, 0x3}, {&(0x7f0000003e00)=""/189, 0xbd}, {&(0x7f0000003ec0)=""/98, 0x62}], 0x5}, 0x3}, {{&(0x7f0000003fc0)=@isdn, 0x80, &(0x7f0000004240)=[{&(0x7f0000004040)=""/230, 0xe6}, {&(0x7f0000004140)=""/74, 0x4a}, {&(0x7f00000041c0)=""/108, 0x6c}], 0x3, &(0x7f0000004280)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000005280)=@qipcrtr, 0x80, &(0x7f0000005480)=[{&(0x7f0000005300)=""/11, 0xb}, {&(0x7f0000005340)=""/110, 0x6e}, {&(0x7f00000053c0)=""/144, 0x90}], 0x3, &(0x7f00000054c0)=""/203, 0xcb}, 0x2}, {{&(0x7f00000055c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005640)=""/126, 0x7e}, {&(0x7f00000056c0)=""/105, 0x69}, {&(0x7f0000005740)=""/124, 0xfffffffffffffe38}, {&(0x7f00000057c0)=""/148, 0x94}, {&(0x7f0000005880)=""/120, 0x78}, {&(0x7f0000005900)=""/66, 0x42}], 0x6, &(0x7f0000005a00)=""/92, 0x5c}, 0x1000}], 0x8, 0x42, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f00000011c0)={0x30, 0x0, 0x1c3a49af9a55c053, 0x0, 0xe4d1, 0x4, 0x5fe1, 0x0}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x300, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1, 0x6}, {0x8}, {}, {0x0, 0x4}], 0x6, 0x6}}) r10 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 7.591768337s ago: executing program 5 (id=6781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000010010902120001000000"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000500)=[{0x1e, 0x0, [0x1, 0x2, 0x7, 0x200, 0x4, 0x9, 0xfffffffc, 0x2, 0x1, 0x70, 0x9, 0xa, 0xc, 0x2ee, 0xc, 0xf]}, {0x14, 0x0, [0x8, 0x2, 0x3, 0x3eb, 0x9, 0xd, 0x18a2, 0x9, 0x4, 0x91f8, 0x4, 0x2, 0x7fff, 0x2, 0x3, 0x8]}, {0x0, 0x0, [0x7, 0x5, 0x3ff, 0x7, 0x4, 0x4, 0x800, 0x500000, 0x282, 0x0, 0x1, 0x3ff, 0xfffffffc, 0xa, 0x49ee, 0x97db839]}, {0x1, 0x0, [0x6, 0x7, 0x401, 0x6, 0x4, 0xf, 0xae, 0x3, 0x400, 0x10, 0xffffff08, 0x3, 0xd5, 0x2, 0x6, 0x1]}, {0xa, 0x0, [0x2, 0x1, 0x3, 0x101, 0xfff, 0x899, 0x6, 0x1, 0x9, 0x9, 0x10b, 0xfffffe3c, 0xf8c0, 0x9, 0xff, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x440c4}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x0, @can, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, @nfc={0x27, 0x0, 0x0, 0x2}, 0xdaee, 0x0, 0x0, 0x0, 0xfffb, &(0x7f00000001c0)='veth1_virt_wifi\x00', 0xf, 0x2, 0x9}) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x404c080) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r7, @ANYBLOB, @ANYRES64, @ANYRES8=r8, @ANYRES8=r8, @ANYRES8=r8, @ANYRES16=r7, @ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x18f}], 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r5, r9) 7.343633945s ago: executing program 4 (id=6783): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x2114, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0x383}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0xc60b, 0x100, 0x0, 0xefeffc03}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000004800)=[{{&(0x7f0000000480)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0xc}}], 0x18}}], 0x1, 0x4000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x181) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) write$char_usb(r5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) 6.847078072s ago: executing program 3 (id=6785): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'security.', '/dev/fuse\x00'}) ioctl$FS_IOC_RESVSP(r5, 0x80086601, 0x0) r6 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x3c, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x2}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, 0x0, 0x14) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) 6.75638273s ago: executing program 0 (id=6786): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xc, 0x4, 0x278, 0xffffffff, 0x1e0, 0xb0, 0xb000, 0x98, 0xffffffff, 0x1e0, 0x1e0, 0x1e0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xffffffff, 0xfffffff1, 0x1c0000, 0x5, 0x6a020431, 0x3, 0x4]}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff, 'pimreg0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x89, 0x1, 0x11}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x9, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_emit_ethernet(0x447, &(0x7f00000014c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6020064804113afffe80000000000000000000000000002efe8000000000000000000000000000aa"], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000400d70000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x1, 0x3, 0x7e, @local, @rand_addr=' \x01\x00', 0x40, 0x10, 0x8000, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x6, 0x7, 0x19340, r2, 0x6e56, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0xd}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) io_uring_enter(0xffffffffffffffff, 0x1ea, 0xe9ad, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) gettid() syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0xffffffff, 0x20080000000, 0x0, 0x1ff}) 5.69368302s ago: executing program 2 (id=6789): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r4, &(0x7f0000000040), 0x2) (async) close(r4) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x4200}}, 0x20}}, 0x20008040) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r9, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) (async) syz_genetlink_get_family_id$devlink(0x0, r7) 5.522174958s ago: executing program 2 (id=6790): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0xfffffffb, 0xa1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x48ce, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000110) 5.298051391s ago: executing program 3 (id=6791): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000200), 0x0) 4.48682428s ago: executing program 2 (id=6792): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x85, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x5, 0xe0, 0xf9, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "c358279da8"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3d0, 0xd}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x30}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x4, 0xc1, 0xb, 0x33c4, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc4}, @dmm={0x7, 0x24, 0x14, 0x200, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x72, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x4, 0x9}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x8, 0xe, 0x10, 0x10, 0x3}, 0xe5, &(0x7f00000001c0)={0x5, 0xf, 0xe5, 0x4, [@generic={0xc2, 0x10, 0xa, "9fb82f99a03738f3643bf0f073ffcc443da0926eec6289256ce629bcc9d649878922cb27539c42a1fbee77b77d277bbc7472964f241962e52dc695e89fdfe8fcc16b77b6e1692465a6c56126b367b8235706222e0dd80bce39cac4c4060c5b592e57fbaf4303bdb166403c926812e337234fbc96bc77c707cea39aa8b49c496ae75644898068dd91516885cfad24757f29fc2f2662199b788d51bef4df586560ddad763f5aa26f2f918f7b56f05e547aa00c0f0009b20ba379fda80b361caf"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x6, 0x8000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "f9aa2053c4c2c268ba0cd347f84637d3"}]}, 0x5, [{0xda, &(0x7f0000000480)=ANY=[@ANYBLOB="da038ed35e9ae01a56528b1cd7fcca4d33c356dc90fd56688074a612ff0d417611843d38192f11d6f83802d164943c6393f2643d3227e5c88a9516ad77a4a78c0672f7d44b7e592a1025e1b1f24dab991a2cbe28499833f4a9296a2610a018589127084fab26732744f8085132d149b6f6aeb8a645aff0f133776f871cc1abbe7451667cfaa1188ff60fca244d5d17ef29f3cc2cab823396e053f6925b64fd3d099b061573f6ea9c77e889c8c25f576a24b812c2800af917d66245950fd5563de5723a8aa7a9760ae623a40a"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x812}}, {0x96, &(0x7f00000005c0)=@string={0x96, 0x3, "5ea9c19d85a3a7c31a75c46180b3d0e5d796e988e684c4a4f39de090cb9b73a09f13185b508e4c078a95ca1197fbbf76f1c39c5ef1009b7b7a34961f84755980744bcad1067c1edf9767712ac01afbf6b437a4d119f85153db27aac924c0856e3752e0fd3ba700879c0e3c0c13167f8b09f50f12d51f1b49caa856593687fb4d6bdafc580f0b178ea975e16be8830d953f32a7d3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 4.478054701s ago: executing program 5 (id=6793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r6], 0x50}}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1000) sendfile(r1, r1, 0x0, 0x24002de8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)="024ba05135fae8fa3436554e0f8ff126", 0x10) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x7a, 0x6f, 0x72, 0x20, 0x17cc, 0xbaff, 0xe11f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xec, 0x0, 0x0, [{{0x9, 0x4, 0x96, 0x0, 0x0, 0x69, 0x3c, 0xd1, 0xbe}}]}}]}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r8, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0) r9 = syz_open_dev$loop(&(0x7f0000003100), 0x7ff, 0x2) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f00000031c0)={0x0, {}, 0x0, {}, 0xfffffffb, 0x5, 0x5, 0xc, "4ca4f6daab7b5ff723f40077da819c51b78030051dcd312a341c73e5011a6b3642628601ab5ac67e501b4fb3b2e8a0d38dee12703063c74a115b77e1bc69a689", "5f0ed1a45df3cf70490e6aadcc6a0207c7393d7212e283da3715b785579b1612", [0x507, 0x4]}) sendmmsg(r0, &(0x7f0000006c00)=[{{&(0x7f0000000280)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="a739db27fa95c3a3785bef217a0714101a230fe81d0e9f5c131b8dae7a63672f0b8414a61010bd03dc7f4f8b9a651dadf7250f5ccfd5204df90edb3fb40125bb8f3955ee0880a2fc6131f15e05424ef8cee7569b944f055b38c1ddbfd1", 0x5d}], 0x1, &(0x7f0000000380)=[{0x50, 0x114, 0xb046a6a4, "cf7865fa355231063c83ff68c0b778460c62ec660772a5a91ec8628ac35ec5d2975b361efe2710c0a6c1f122fde402a21122948380a51ebb4566cc231a6be8d3"}], 0x50}}, {{&(0x7f0000000400)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)="7b7cd36ba7d0174bd9becd4e0d5fcf4aaee1d5933a0ffabea75bdfdff4a215c498c9dafe2f9db5827242b1ee14f1b08d1af30a8d84a0a26b78e221088fabb00616db0eed4b55ea00d2da65117a1a525439004da86d06295a258b19a0712991588a767435229c35cd381671821a67b6c93a2aa197533d536d3f7ead1ad9bca46f656bd3123fee897b41a8b4ba3d33ee05164ec30248b8a9c5", 0x98}, {&(0x7f0000000540)="cde472a8afaad2153ceb2d8846ef3a3358013074fa597ef6f8702edde8a535b92b9aae972b0226004e02d971ffc73d9792bc9f234db008947cfa1b57e4af06e4497f05d9da8cca36be7f196bda3dea473fa4bad5de98f22954905ad53c8d0198a34ff85acdc0baf0a5d1fb1cf54e536af7d6b744b27f383668eff92fe85782f544761a808d66e6b4c9cba531dbf7879c90ed7d1939e635531e3fbe986e70c1d1", 0xa0}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0xfe0}, {&(0x7f0000000600)="d87637fadd6425ebf5c01c1dd7202452bd224468645317eb2c3a86d458f4220ddd6160d5ae718e9768e300ce0109d95c71dbcf243c2c09be8ce2dcb0d18ee1c7b2d5f9a62635b6b67178267820aaf8b9c05ebe824342f6ae73328911303a1819f2520783ae61678f443912cb02791f3ad100c03b1f84f26d371691a3c1d1c374c0073f60a8307a6f9eadae5c8eef8281de24aaf264ebde023a8a367d8392eac19f4dd6589652003b64cc76c6d6278eef091881ed7dcff39f28e92d70692dd9bbd14544fe9c3ca887b479781d40680dabb6ff661ce6045b02c3127bbf915d1bd55b", 0xe1}], 0x5, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)="0f48883e2b7a7e99a6d82a8dfbf16ae6a78ad8c4ae96204d91726604", 0x1c}, {&(0x7f0000000780)="709760e23b7a90a65cb07d10527d3e9bc0959e7a371685b4e278ef999e708f9056eeef5714b39de390e81b11a64ea718ccd69c97432e9a1f4e42cbd0592b6e0c93ed5b8a7c372cb4650605a07dded8d2a3c728cbf900680da9e3bea803cca8c9c0fc14ff8aa2cf89676e1620beb81b13", 0x70}, {&(0x7f0000002ac0)="ab2f8f002c0d567c334fb58233758bb69122041e1c3b9297a877b357a024071f11754f644f1805c6cb6253d4de84232e9a0493861092bc356baead2d063adde427ce6c684e11ccc0c23e88131942e39438ceb19f1ee60a4dc500308df1fadf67c1a884c74cf2e96de61978135d468e05663413f6cacf2e2c1c52a99483e60672e50aa925e0cf3d2df40982f6ea26d8c4973d378efe8baa2f44c9f019b620a1260ae4e18ba3eee9abf74469d955d2b090f1f6a95e0a10eb218ee464c136ff8a0461963db679607d69402697b86003c364cb49b7a217f08e8c3ced89f3b3fd970372925d0fa3ec5fe46ac568d399efc19f48f04c", 0xf3}], 0x3, &(0x7f0000002bc0)=[{0x20, 0x108, 0xfffffff7, "21988030e93c1c87ae"}, {0x18, 0x1, 0x0, "dc"}, {0xc8, 0x101, 0xf7, "f315e1b8cc5f2e24d0c69c28c90a2e10c30e9b4908c110c70667955469b21e86d817156a96d33df1661806e05e47083d680e4cec45b5acbf29abe6a466fc4371a65d47b37e3f6fce3ba0566e57442a62ecf6e44e59c51cb29d94c4119750f6b344a027c47e1d8d0d60f9acdd9a74fab23d61bcbbfce8a8aadf189642f271f809d44289466bed51a4922e3de18e1790978b090bcfb052472debd19141ed0ccb05133db12989c9f768dd454713428d10bb4f2039a8f73c"}, {0xe8, 0x115, 0x7, "f0a963f591bf87f9634a5d793fed22046c546a7036e70404932f8d3cd65f7501a00341abe7814f8050d13eec69bdbe7b1018054ec2d5556eedd5b04f352b1eac4f1ec601ebd4ac19d5536bb0d97b9f9f1cfa1a8235ab3700c897ee6722ca723cb9a6cc444cd56ada87037c95de0c81a7ed462d35294eee51db580cb110ed47344bbe8b803bfb37df35b46177c66a1a5fad38f4ef2a31960ff243bf68e3a7a97a7bf1bcafb0ac99fa37c1c35e162bd6064600d593732b4a94483eded4ab06dd48c30a227ffa85fbc2edc2accf11a31117efde904e469c7b42"}, {0x100, 0x116, 0x4, "e92865a4737ad6f776010395d44169ce7c325d7a4ee4b72d1decb2f08a8d4d2db17932032877cc26da6008de639bd8a7be81d83d1a0570675e2179c6f355ff61b5a0c15ad644bf7e3280be7f118b24cf8f4c43867fdad6a082a67337dc8e824574598db572b0397c99edce369dddab03ef75c75f166c57dd43378b438b7bde85479e7fd1ef8a3737586e87fd8dcbeedd043cce4d291c5785b7768cb2902a62b5e47f6fed65934a09369dee23307d5034be493c9df05c11a6eab0210e748ff1c14e585566d58f6c887212b76c88163bc571c173a061cd152c1134b2ae1e5b6b6c66b01db1ac4f1e3c1bb443465710f7"}, {0x48, 0xff, 0x7, "910e8db66ab7e2f4e0ed44b575cbd26ec2d0b705db0339388c6e486cb44836fc06e8eb0a40be74fbc252a2189ef05147494915"}, {0x58, 0x10d, 0x1, "9510256b6b58e7ff7feeb904cffe25b0b4fccdad2b6785ac8bfe85d1bdc3b4ad9887b421cbc7ee192d9262c35815367a828d5b2cbd004d62f679c6bfdf00d33cc3766f2b"}, {0xe8, 0x110, 0x6, "eb156d4ca213007dc60e97cd6f2700cf76d65f54bc1e1f6809c04275f29dcb9578258a39ed5cc216e3803455493e42f77e3c086a6212f15b0dea228a503d098f11266c86591efec4f78e53e44e7013545a889adb9bfba3de62f33893dca0f54c9194bb5502f809b8002e2a63e98f05e29133626c867bdacf4b2d7de7b3c2f06926bc3f24c55dfba25cc494ed2ff0bd8e1e737c51ff13c4fc96a29a1f73fa480c8f7913369e88fc52cf6d587f6062fa73c643cf111c12d5c88eca61a9ea59bbb23c28e01052c4de015771125fca437846f10ed919a1412702"}, {0xc8, 0x10e, 0x0, "a892be9cb389301adc44b7442c2f4c9758a0b52ea67957c0fbf98e554d81b2249f0622a2da3cf9f5098c66b5adcf2b4ddbed7e18ef5f0dfb927c6e038ce71bedfa6eb2d0c9797e48395022adcddbb8e81558c5eb5849a835fb4ffcdae2dc3b01325ec46929c518fb63196ac4456cca570175132b42678c54c237cb1987190c55164f7c9f0a76d7eb7535de9ff52851e12b7515958b9aec672bced64b5ab706f8548f35f0f261e0d928a8d74cce9156b379f52a30e74bd71a"}], 0x538}}, {{&(0x7f0000003140)=@caif=@dgm={0x25, 0x9, 0x7}, 0x80, &(0x7f0000000840)=[{&(0x7f00000031c0)}, {&(0x7f00000032c0)="e3f57eb324bc6d0c6080ee6bd1ec953f42cd613bb3ecc3dee848344b2c29f004d849b94e0c2bca9a04253e67708f1059316a5942d23851c9b60901eea4a8c3d71583848a5678e82cd0af93fa13c8e1d610560bc7db5d20d7e59322b3daa9", 0x5e}, {&(0x7f0000003340)}], 0x3}}, {{&(0x7f0000003440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000005740), 0x0, &(0x7f00000057c0)=[{0xb0, 0x1, 0x5, "d53f46aadeb02a68f64e267aa39d00221ec3960c9d824473636c54b63bebf070e002a249ccace027e5011e89606734ac9e0daebbb9bfcf40b7416c626241724a4c491ad225fa4e282bcc57aec7a1c549cab758265275aa69bd1e36befc7b6bbd3ab79fbb8c680d3ec04fed0e7decc86e78413875c2f94aac73b6c35d428388ad14b4dc96caa7bdbc61c0d36e3f60dff78ef61b7c62331e2fac41bf92"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000005880), 0x0, &(0x7f00000058c0)=[{0xc0, 0x10c, 0x7, "a554664060b2e5485f8fc944a3aa5a20af351f4a6184af8f6a15c4387e314343faa6c2837d4890eaf54ffa81a42bc1bf9f4b0370b7477d9613c8eb066d4b44bb5b6aaf0df7b63ddcde1357eea8b2f02d571ed9f3fdcb71ab388a2c1907f584ca852b8f6a32a0b7be48e31d66bea1f3a5653fc09288a86d8fdc99934ccd2b42d2b0dde81a8d4608c0e93f60e475f28d16ff355bf9b18ef5d451a0f730ebfa92365f3722a4a6aed8ff0689"}, {0x68, 0x104, 0x3, "31e747fdc557fcd87aa30dfc05781c4fd3e2c5fc015df189613033f24c85a789c24ae53a25787e9a821a881b55cce7699c6a5cc3e23cb57bc996bd26282dd2a488aedc70a622fe01f9a78e8bafa0ba9a4ce66f006db0e2"}, {0x38, 0x101, 0x5, "9b41ca9eeb440b8c9bfab4b6f174600e7def3e30a48b096cbb0ed3aa25beaa5dbd58e7719309"}, {0x18, 0x29, 0x3, "0728ce"}, {0x80, 0x10e, 0xffffffff, "391c36dac8457e1a96b6188e655bb04cb1e815a20b25e3c0c3b606b9212bfa3f7c26a45cfd68d95163b4c02d83800971819c8f27a6111016ec923dc7ec7d63915bd3f8e3ec58b6b031f17d9badccc41ba1232e38c7f4e57f09cb6045cf5a48e8f5e8fc51762b92a9e184d78a80ba94"}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005b00)="059ff9f4b935dcef7deb5cc81633b2b63d82bd3164e048204484c8ee779d5be1d52ee6508cbb1f2f668a071a5df451eca2fc687aefa2aa8dbacff486b09ef489a282c9aacd8b2c606c0b3413b1817e1913d5dcc801dec19eeea217391d2938e61a4e7829bc473c7349d3ddd912f1744b", 0x70}, {&(0x7f0000005b80)="383023dbb155cb12109d1e0bcdb9f2992529d190ca6c072ab04d68ad7e00212153a3b2f11ce8de7e32bd9a7e6bb23bcd14185b445025fbfc4f229f5d20a138abacc92352fedd8665ee8a1e5a99d947eda9515d721eb0d8284b749a5b98524a9b420699334cb7028e21c605989aaaa19acd98b01e8f533203dc34abd6a557d17e1256988b87a10a26d0107643593714d209c6fac91796bac9b57ae3d48c45563ff125a42f6e25dc227f6cbde18bb6440b447eeb33689de585d862a984a3de9a86e229065f2c2c6c03236a31d717e8a3595a0350d3dd8006559c0f72e8dac4c8fb", 0xe0}, {&(0x7f0000005c80)="a6b57bc1d71b7c4decdbdcf5119144ca747fc416d0e9dea6d81456c070762ab6eecbfff87497745fd8e44cd999c292d0cf2db9130c38c4ed4bcb9d1913b19bc6df597bf60b977a8be5b8b30b669d54", 0x4f}], 0x3, &(0x7f0000005d40)=ANY=[@ANYBLOB="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"], 0x1d8}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005f40)="e258ad8f64ffc358f5ab30baba6e68dea562a5f6889e886467f10bdc6649ca1f3b03907612c159297d0263dd341e3b0e57d8381add90524ba92fbf933bb748af0830e27ca20c3bcb870a05d481ee9f221831f095d137c7d35ac91cc1c514299e113a9e173f537d39d47b4397f816834f76a65ac308364f085d6e8c1ddd62f4edf51ccb79070cddd36db47cd974169a6388c8b448cf69fbbdcd827f40bc3ee14eea1dbe5e3cc17fb62c665c50a304da", 0xaf}, {&(0x7f0000006000)="25e4cc1f21091684f9bda882203ac18a8d062470fd79c8f30cb2debde7099f28aa7a5d6fec0c30a0c9ed021a142d1935c35ae98c161b86920ad9cadfe03b8a0ba48578584ce75aded60f49678e03653f5645c77083a1d4a2f49dd084888cdecfe95a621c38b9cf45556bfb21e565a0befba5234125316b03628564c4ed1c62aad84aea262345493aaa6587c7a31940e4a9c68cb717d92d5013ad0cf974fc2c296f061d7b962a1ab60e2f311b151595a51ca9985e3c0f5a9351cb05022526d05b20f36d45674ec59ac7be79ac6a0cb5b203e4c0b7d00ddf15e57a6a45", 0xdc}, {&(0x7f0000006100)="fe365d1968de219b21df12993b30e8af27144948279cb8a24969c4439ee5dd7626e016a2d860632710e9b417e7a4f1418b9324d17101c9e65306ad4a06e8f565d942adfed0267a1ca7d58a630dffa33e93f61b3cc35f275e522ae42302699957e7a1508568", 0x65}, {&(0x7f0000006180)="a275dcd1cf0821d1f841083109c3f537b5df2eaa47d755f4128068e8d753d6e18548432ad06b35e90731a0500f850c95a7ad5089", 0x34}, {&(0x7f00000061c0)="eef23b8a100ec8471844e4833bf2c6a85654d9b8d406e0d38cd54b70c99e9afaba783b9ca54821c3a4006570b714cf21612961d132b4c66fe5512978fcdcb4bbc1e4edcde07413027a3c9ea82131b2f42e050d3ae62319829ea4f23ada6306270233", 0x62}, {&(0x7f0000006240)="0c078d3fe81e3bb6e6228337a09d4e9d6de518f61765770bafbf805e5581d8527f77a41511d686a1a592d2d393f1591eaeb634d0db8dc3292e81077a0940dcf33b6dbe9668d2476989e736df8298a1e9c04fdca78303252d68e79b2239b9dbe75ce5683ee24ce78da522a45ae275a775f6668a8c27ae27bb8eb612c1faa2bc65a1f6cf25d77fcd31c45b046e29d6db5275ed6f5c7490210d09b0a7bff5acb618a85b6d66747d", 0xa6}], 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="100220100006000000407b6f0d81775f7de909750cc4fa"], 0x10}}, {{&(0x7f0000006400)=@generic={0x2b, "1cbda85079cc054817e7d339e941b80c485493c090bbe3d434de91df23f1b81acb3511596599095084832bf750f0e6cb67fc91d70837d5c550213634022b2e1883e618de151cad208cc01059a4414eaf4d3516e0b209c8e2ebfe87969c615e5097c336830103831587b2a7a68f86728399cb3bf91880d6598d9a76dcc60f"}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006480)="1e742e666adc232c85cad319bac0deb0d7d4ac78ef0a1732fef32f0dadef3ab610e97a77cfb9c09158a0be038a63ee697ecee96245c60c91980a515ce24b4ac92e6f3edee6754e8200d5", 0x4a}, {&(0x7f0000006500)="76eb8dbb40b1ebf4b5ab52bb42656db3666f850b03266ec036309ec221e0a432134e8b3d7cc2fd02fb10491938354619e7c57dc106f13494f844f5c1eec8ec174c43f1fe11d96d72b665f3458152ba850709dbffa573dbb023de3adaac0bcac122d41882a3dbf96d09cbbd2c505763f414710f6631561bb7b64c8521233a6074de4c0f8a63d2e7edd2647d20eee0d80263ffa14c20deafed440fd5817b282a99882e47351944562cbd9517c6360a2968273a05f49066fa01de3012af9c250144f574ef53bb509a437752c095fb55978e1a572c5c17a8cf29", 0xd8}, {&(0x7f0000006600)="455fe00e9b0d79e546e1a8e4456411f4c44fecd2eebbb95399076ea345ed85941034ae0b4dce4f319a5949aea2e8f734d1a5821ac46897f9966ce870e0a16cc3fa17b0cce130220976170aee9c09b78220548bfc606b96a24bb7cf4a23402f2b3a57d1d817439d326845068bad08d804dc3041f6937a37186d00fd5e797562214c1e8d0bd98196099f7f736f823ed838d3669a3a95116e8a322951fd51e21c231fe794f3b8a836dd06df4e13c40730188a6a3a2133aec88dc797ac277aae631f61f522bf6ae186f05966eb14c047aaa8ded100ac5691d91f2e008140e704c5ccec8c862c609d2a65340d144d13e0f34cbfd028e5119e99", 0xf7}, {&(0x7f0000006700)="0885", 0x2}, {&(0x7f0000006740)="5b8977e7541e24b7b98aacae6b06acf5957b5ae792b5429cff57ca7b741f3f7c91ca1edc87", 0x25}, {&(0x7f0000006780)="f86462b3fb7b10d138d29823", 0xc}, {&(0x7f00000067c0)="285f79bda3acc1b0994cc25cc706445b2227f18ae63acad0705e", 0x1a}, {&(0x7f0000006800)="0d007bf8581bd8a0e4651a988ef876e7ff2d03191352af6d0920cd205b18199b76a9be18a78f6590179980196d7e07f2591eecf21424c71d64b28b40714906a20cc5ee34a5b2dd9a5ab30bcc4ee49cab06f52654f8612c365b552daddb7e25f8e4f713e30c08fcf2075356526d779fc69ea1051fdddfa2a9a1b3afa8c773bd8696cd429b389f818454e99bc2ce2aaa5cc20afaee4ab3c1f21d43f07b40d2ac90978b29cb035f661570fa319dc45ead241910e9f65815a14a4a6a50e9b81dc603d9695c9cb015827611a385801be38ad1189c20a831b45643c8d54845af83d07659", 0xe1}, {&(0x7f0000006900)}, {&(0x7f0000006940)="1150207c55c6acc1ebdf9bee5d9fb13a529e02583eb4a4efb8deae148416b9e9d0461ad86c7ed71f18c2b6e5c15d6a0f9df0d1380953474c10ef6dd1490798e6c0a1b72c1aeeab49b3f5c05860019ec3363699b3448105789e5e418ecc9380e8c234147f6d7193537cba17b48a3e5c35", 0x70}], 0xa, &(0x7f0000006f40)=ANY=[@ANYBLOB="4000000000000000030100000900000045f179b08e3eea83c1ebe40dd8224849eacda58f0cc79cff7e943f01efc72ebe89295e7c5d060a3cc4d910d854eb0000180000000000000015010000010000004bd066d6e1d9b10000010000000000000c01000002000000d23378f07fab1b644b8dec74bcc5380600000000000000bacb3f0d1f6ac50d00e35bbd6048114fdc12f503b9d299dce4bce173f62a08acf78142cf4f01a8e2d9e905846d6728e1de7537e278068ef46062ffeee7219f80c90dc3ca855676636b5d79658d1a1a310b4f642a2dad8eaf1ad677e23d2a0500d9fcd9bbcc5982d3d50f002aef7ac9ae694ce13bb28964ed87cf94070fe8b7d9be4170f8e733ff07decc7ee2ba64b6be1d67238c0585dea74274617d350f0da616fd1963097e3d09afcc851667ef539c459596875b4d8a5d0a152737fc032a5150752472a262b769d597e92ab38e14a35c5d65a2536f30d22f008923f40000b762f3569d584b9112f7fe2739632a5e654c518cd8d7ae7f"], 0x158}}], 0x9, 0x40) 4.198146543s ago: executing program 4 (id=6794): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './file1/../file0', [], 0xa, "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"}, 0x2b8) write$UHID_INPUT(r1, &(0x7f0000002480)={0x8, {"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", 0x1000}}, 0x101a) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x7aba, 0x100, 0x22, 0x352}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 3.962809489s ago: executing program 3 (id=6795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) r4 = landlock_create_ruleset(&(0x7f0000001240)={0x20, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x1) mount$fuse(0x0, &(0x7f000000d140)='.\x00', 0x0, 0x8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x25dfdbfe, {0x2, 0x40, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x20000) close_range(r1, 0xffffffffffffffff, 0x200000000000000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="380000000b0601020000000086d4491bcfd7d5df05"], 0x38}}, 0x8000) 3.827525254s ago: executing program 3 (id=6796): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@ipv4_newnexthop={0x94, 0x68, 0x20, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x64}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_ENCAP={0x30, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0x2c, 0x2, {0x87, 0x4, 0x4, 0x2, 0x0, 0x5c, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @local]}}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x9}}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r3}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x22f, 0x0, 0x1, 0xca, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), 0x0}, 0x20) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3.702609404s ago: executing program 3 (id=6797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800) r5 = syz_io_uring_setup(0x1ea0, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r4], 0x24}}, 0x20000844) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0xa880) close_range(r1, r7, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.48888053s ago: executing program 0 (id=6798): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600", @ANYRES64=r1, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x4040) 3.209387965s ago: executing program 0 (id=6799): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000540)="679c6eb4892d5d75bb2b655d0be60fd67c9d3affe49f99685776480fecb3d8a591940ab0f5c2a4ce10abf98a3275c4446fc81b1b7baf6cdd9b1d3ccc0d97cd38da921c9473ce5f18d87f9998da96091b", 0x50}, {&(0x7f00000005c0)="12bb93a4965a101894b10b0294df514a52bd9d3af2c016a911499e4cc9d6431a85671079df9d2be69e5c", 0x2a}, {&(0x7f0000000fc0)="85f0f6f51375e6138175492d6b5ed7d281c30846fbb5dfd97eb5fbeb148c15f16b4e08042308c330717c428c3f69a9c6333c7f227b7e89decc", 0x39}, {&(0x7f0000000680)="88e4cc972db8ee843234e703faf6259efc246b423a24851cbfccc9d77fbdc10d55928d5300a1fea76e143127f7d86d5ebf5df0cda75756f6150287c0b10cbb01c952cf1cdb1603a1d8cfb70d5d7864e687bb12c32861ab74885fcbedd98844b456d463930ab80a9a", 0x68}, {&(0x7f0000001040)="38a1ee9e6029eb3aee66ac419a703eb128f9", 0x12}, {&(0x7f0000002300)="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", 0x3ce}], 0x6) 2.882530568s ago: executing program 0 (id=6800): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x105100, 0x10, 0x20}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000940)=[{&(0x7f0000000240)="01000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702711e629acda76933ddd0c20574eb4d4d28f9", 0x1b}, {&(0x7f00000001c0)="c27d037369597e0a4e6d", 0xa}], 0x3, 0xfff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000100)={0x0, 0x0, 0x180000, 0x7, 0x7fffffff, 0x3, 0x8001, 0x3, 0xdc}) unshare(0x20000400) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 2.754769974s ago: executing program 5 (id=6801): r0 = fsopen(0x0, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00000000c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x1, 0x584, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0xc5, 0xb3, 0xab, 0xff, 0x19d2, 0x1120, 0xcb76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x572, 0x3, 0x3, 0x80, 0x80, 0x9, [{{0x9, 0x4, 0xe3, 0x2, 0x1, 0xff, 0xff, 0xff, 0x8, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "e45e3f48763b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xbd61, 0x7c, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x1, 0xc}}], [{{0x9, 0x5, 0x3, 0x10, 0x50, 0x8, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x5}, @generic={0xcc, 0x31, "6344d47a9fee53a2baac17453b1807811a2a2d7672dd8bb775f1453ced6b50eb39ff4d9d2e56f26e3d9b36ae698079c7daa428076162b6478e340fbbf51de399be2f03c6233bfd0ea12a193c6e1aed319d78f3e5f5d0cdb21fde8ce14721b578ba42cdfc40065acf07c9d2b1f8d7ee00a7cf178043670f2faf301ad52a7a29f18c4d1e1beb0541d483b41b8916cb5b83b3432852abacd9c75a3d945efcf405521762a5c14fa3989ff75cf2ab692ffa2d5df8fabf4f794ef7748463d4797450333685efe8236c2941502b"}]}}]}}, {{0x9, 0x4, 0xa5, 0x80, 0x0, 0xc5, 0x6e, 0xe6, 0x5, [@hid_hid={0x9, 0x21, 0xa, 0x0, 0x1, {0x22, 0xcb6}}, @uac_control={{0xa, 0x24, 0x1, 0x9}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x3, 0x2, "e537"}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x4, "b70ce38cb0"}]}]}}, {{0x9, 0x4, 0xdc, 0x8e, 0x8, 0x56, 0xa0, 0x2, 0x8, [], [{{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0x4, 0x5, [@generic={0xf, 0x1, "26afdd03ea81b3137d24294f44"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x4, 0x7, [@generic={0xdc, 0xd, "59619599d37c47ed3eaa1b2c87b1814c1173eb85643909c0d80bb2bd0f65460d8f85d0c1e7d263afc4adf37b1771be6ee5b1f2b827c01b89226b44c795349276cd66242c875c1760ed61fc7d9a8fe7fd2fab6f590f8eda4534c08bc538f7d6551270900ac3aab9edb9e5db8cb4cc173e27157335cece59cf6d1b8011b9676e910daa388d460893f5b714d6f30959b02ddad6dde4ca35ecb0df6b1db3b77f4aba0d441b926b08d5fcf5827154b60edf6c1b487e2e6bf6d2f3e961f5fc808f4352f9ed699a1c2b25b81277cb2f5e0e9dd0bc0f9b804de15bf54926"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x78, 0x81, 0x10, [@generic={0xd4, 0x4, "fab3585ff2339e908a1f3f744f592d7d9c92a874a76129adc4085d242974310643b937831895a2202d6735caa81409cf8b2a90ef9b3561bc85e17cbf41d5ef281902e7d6f1355f4ce56db82281b091b86b65000a1132e9042d58014dd3104fda5849206acb6fa330b5911750597c16611329aabb07ab992315d6ba12c512fd768fc22c4252bda3e790d045f0ec5d79301662ce97335ca4d9c6a0c5531f13edcd58538df0557bf12a155378b38716bfb7265770decee5b6f1b3da92425194d5d90275f7d17f9495739fae156ab4064d3eeb3f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x0, 0x12, 0x4, [@generic={0x98, 0x22, "7c0ed3e671b433b793a91a2c2745bca318b64aa84a491edcffc079c645f7d1f0280d0b4734783ab7bf065a27c242857791e3dcc0422d87746ee852c15bdfe8255f2810da3195c85a739ef3e78748dceaf1f9b5f68f4a01459d6dec3aeac00cb98ba29af19c8d0e89db1126523fe248f84fdc0430b4098399e4833b5fbc832a2ba37a55edc4f65e5de801e723fbfb0d6bcb598d9f2c48"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x65, 0xe, 0x7, [@generic={0x2e, 0x5, "4d4b4f089a874fc2ea0229cc87cb917e67a7a98079a9480ed04350a0edb01685591684fbc1b086cb3147d5d4"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0xa0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xf799}, @generic={0x6f, 0x5, "a39d7bc0b77d9755da7cde3a253afd34e9f6de029226ce816ec4a8876e7ed06ec0025d94b03d83f87358afd25a68a0924ab23f571c2cb93011dc67b658adb9fab389a921fda00d8dd933f8cbebc7f596409bbfcdc3a7bd228f9e7266b88d11b4eb9743cd88de6e1bec894d70d3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x0, 0x1, 0x7, [@generic={0xd9, 0x30, "d2acd7d9baf10e079ea4cb1ffb9b786ca609d465abe068387a6cbc7df0390a3b13960e44d440e6ca4902e275f2c7e89ac87b3179d9e466b8130a65e734e920ffbcca4a20d952092d9d85a8bdf4790d00e2f0c2f607b25abaded12875acde9d40699dac44ff1a595c938d93bf13d86955c1b9267902566bdb72ced0fa01cfe0bef3727013c2eafade990a8b7938be5405780a72edd6789883b4255751a19ba6152a631b14de5887cd175057704b20ae97643ada4c636360326ac89b6d118070fb802b1b8cfebee23a144da1e11dac23d47f65fbe8dd9ed8"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x54, 0x6, 0x5}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x1, 0x2, 0x4, 0x1b6, 0x6}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0xd, &(0x7f0000000340)=@string={0xd, 0x3, "f01a2f459666635824445b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="000f02000000"], 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="40000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_create(0x7, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[], 0x0) 2.618387503s ago: executing program 2 (id=6802): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0xfffffffb, 0xa1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x48ce, 0x0, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000110) 2.322108996s ago: executing program 3 (id=6803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000010010902120001000000"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000c00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000500)=[{0x1e, 0x0, [0x1, 0x2, 0x7, 0x200, 0x4, 0x9, 0xfffffffc, 0x2, 0x1, 0x70, 0x9, 0xa, 0xc, 0x2ee, 0xc, 0xf]}, {0x14, 0x0, [0x8, 0x2, 0x3, 0x3eb, 0x9, 0xd, 0x18a2, 0x9, 0x4, 0x91f8, 0x4, 0x2, 0x7fff, 0x2, 0x3, 0x8]}, {0x0, 0x0, [0x7, 0x5, 0x3ff, 0x7, 0x4, 0x4, 0x800, 0x500000, 0x282, 0x0, 0x1, 0x3ff, 0xfffffffc, 0xa, 0x49ee, 0x97db839]}, {0x1, 0x0, [0x6, 0x7, 0x401, 0x6, 0x4, 0xf, 0xae, 0x3, 0x400, 0x10, 0xffffff08, 0x3, 0xd5, 0x2, 0x6, 0x1]}, {0xa, 0x0, [0x2, 0x1, 0x3, 0x101, 0xfff, 0x899, 0x6, 0x1, 0x9, 0x9, 0x10b, 0xfffffe3c, 0xf8c0, 0x9, 0xff, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x440c4}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x0, @can, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, @nfc={0x27, 0x0, 0x0, 0x2}, 0xdaee, 0x0, 0x0, 0x0, 0xfffb, &(0x7f00000001c0)='veth1_virt_wifi\x00', 0xf, 0x2, 0x9}) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x404c080) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r7, @ANYBLOB, @ANYRES64, @ANYRES8=r8, @ANYRES8=r8, @ANYRES8=r8, @ANYRES16=r7, @ANYRES8=r8], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)="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", 0x18f}], 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r5, r9) 2.178565765s ago: executing program 4 (id=6804): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r4}, {r4}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x101}, &(0x7f0000000280)=0x90) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x2, 0x9, @generic=0x6, 0x9, 0x9, 0x6}) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000340)={r5, 0x7a}, 0x8) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000240)=0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r13, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r14, @ANYBLOB="01"], 0x3c}}, 0x0) 1.638231815s ago: executing program 4 (id=6805): openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newsa={0x150, 0x10, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x1000, 0xfffffffffffffffd, 0x8, 0x88, 0x81}, {0xfffffffffffffffd, 0x5, 0xcc, 0x6}, {0x0, 0x7}, 0x0, 0x0, 0x2, 0x4, 0xb}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.540665711s ago: executing program 2 (id=6806): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20080000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x424, 0x3f4, 0x400, 0x70bd28, 0x25dfdbfe, {0x1, 0x2, 0x36, [0x9, 0xafd, 0xee93, 0x8, 0x7, 0x5, 0x7f, 0x8, 0x7ff, 0x9, 0x9, 0xb0000000, 0x8d, 0x1, 0x4, 0x6, 0xad, 0xe6f81ee, 0xfffffe01, 0xffffffff, 0x8000, 0x8001, 0x6, 0x9, 0x8, 0xd, 0x800, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0xfffff801, 0x2b, 0x6, 0x0, 0x9, 0x5, 0xc, 0x3dd5, 0x5, 0x800, 0x7ff, 0x9, 0x2, 0x0, 0x0, 0x9, 0x1, 0x6, 0x1ff, 0x5, 0x7d2, 0xcf, 0x4, 0x6, 0x8, 0x2, 0x10, 0x8, 0x280000, 0x5, 0x7], [0xe, 0x1, 0x5, 0x7, 0x8, 0x3, 0xffff0000, 0x8, 0x2, 0xe, 0x8, 0xfff, 0x5, 0xffffffff, 0x2, 0x0, 0x7, 0x6e, 0x1, 0x9, 0x4, 0x2, 0x80000001, 0x5, 0x400, 0x8, 0x8, 0x4, 0x6, 0x2, 0xe908, 0x7fff, 0x2a7, 0xffff18cb, 0x3ff, 0x80, 0x80, 0x3, 0x2, 0x7, 0x1, 0x3, 0x0, 0x1000, 0x5, 0x8d, 0x1, 0x6, 0xab02, 0x2, 0x80000001, 0x4, 0x7, 0x10000, 0xd, 0x9, 0x7, 0x100, 0x4, 0x58, 0xf, 0x4000000, 0x8001, 0xfd7], [0x9, 0x540d, 0x1, 0x8, 0x0, 0x9, 0x6d92, 0x10000, 0x5, 0x4, 0x3, 0xde6c, 0x135b3869, 0x8, 0xee, 0xe, 0xfffffe00, 0x7, 0x6, 0xfffffffd, 0x4, 0x6, 0x7, 0x666, 0x8c, 0x257a, 0xfffffffa, 0x1, 0x6, 0xb, 0x0, 0x9, 0x80, 0x9, 0xff, 0x8, 0xffffffff, 0xff, 0x4, 0xfffffffd, 0x228, 0x4, 0x1, 0x4, 0x6, 0x2, 0xfffffffa, 0x6, 0xffff, 0x6, 0x1c818404, 0x7f, 0xbf6, 0x5, 0xf, 0x10001, 0xffffffc0, 0xf, 0x0, 0x1, 0xfffffffb, 0x400, 0xffff723a, 0xb328], [0x1, 0x80ba, 0xa, 0xfff, 0x80000000, 0x4, 0x4, 0x2, 0x7f, 0x3, 0xdea8, 0x7ff, 0x10001, 0x2, 0x5, 0x9, 0x80, 0x10000, 0x101, 0xfffffffc, 0x7b24, 0x4, 0x7, 0x7, 0x2, 0xc9e, 0x51f3, 0xfffffff9, 0x6b36b035, 0x4, 0x2, 0xfffffffa, 0x8, 0x44, 0x3, 0x80000000, 0x2, 0x5, 0x9, 0x4, 0x8, 0xff, 0x4f6d, 0x9e6, 0x4a9f, 0xffffffff, 0x7, 0x5, 0x0, 0xca0, 0x0, 0x8, 0x7, 0x50000000, 0xfffffff8, 0x29, 0xd1, 0x5, 0x2, 0x3, 0x9, 0x1, 0x8, 0x7], 0x2, ['\xdb\x00']}, ["", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x20008085) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'lc\x00', 0x39, 0x2, 0x48}, 0x2c) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (fail_nth: 8) 614.893574ms ago: executing program 4 (id=6807): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@ipv4_newnexthop={0x94, 0x68, 0x20, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x64}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@multicast1}, @NHA_ENCAP={0x30, 0x8, 0x0, 0x1, @SEG6_LOCAL_SRH={0x2c, 0x2, {0x87, 0x4, 0x4, 0x2, 0x0, 0x5c, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @local]}}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x9}}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r3}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x22f, 0x0, 0x1, 0xca, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 395.959789ms ago: executing program 4 (id=6808): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x34000, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=6809): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600", @ANYRES64=r1, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x4040) kernel console output (not intermixed with test programs): 1731.816901][ T5831] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1731.828172][ T5912] usb 2-1: device descriptor read/8, error -71 [ 1732.012420][T28993] usb 4-1: USB disconnect, device number 91 [ 1732.048526][T29924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.061281][T29924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.083373][ T5912] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1732.114441][ T5912] usb 2-1: device descriptor read/8, error -71 [ 1732.233389][ T5912] usb usb2-port1: unable to enumerate USB device [ 1732.623149][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1732.630243][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1732.691090][ T5831] usb 5-1: USB disconnect, device number 40 [ 1732.968443][T29948] kAFS: unable to lookup cell '' [ 1733.089929][T29948] netlink: 536 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1733.119344][T29948] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1733.140892][T29951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1733.184498][ T5831] usb 3-1: USB disconnect, device number 45 [ 1733.241527][ T30] audit: type=1800 audit(1751490841.766:1897): pid=29948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6474" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1733.353013][T28993] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1733.483918][T28993] usb 4-1: device descriptor read/64, error -71 [ 1733.643521][T29024] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1733.663177][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1733.670247][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1733.686940][T29964] dummy0: entered allmulticast mode [ 1733.736010][T28993] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1733.804606][T29024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.824332][T29024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.843292][T29024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1733.857184][T29024] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1733.868387][T29024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.890509][T28993] usb 4-1: device descriptor read/64, error -71 [ 1733.931528][T29024] usb 5-1: config 0 descriptor?? [ 1733.967926][T29967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.014084][T28993] usb usb4-port1: attempt power cycle [ 1734.323178][ T5912] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1734.363335][T28993] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1734.389058][T29024] usbhid 5-1:0.0: can't add hid device: -71 [ 1734.398282][T28993] usb 4-1: device descriptor read/8, error -71 [ 1734.405763][T29024] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1734.427623][T29024] usb 5-1: USB disconnect, device number 41 [ 1734.497992][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1734.514702][ T5912] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 1734.524333][ T5912] usb 3-1: config 0 has no interface number 0 [ 1734.530455][ T5912] usb 3-1: config 0 interface 161 has no altsetting 0 [ 1734.554322][ T5912] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1734.572942][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.591241][ T5912] usb 3-1: Product: syz [ 1734.601360][ T5912] usb 3-1: Manufacturer: syz [ 1734.618308][ T5912] usb 3-1: SerialNumber: syz [ 1734.651316][ T5912] usb 3-1: config 0 descriptor?? [ 1734.656503][T28993] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1734.677436][ T5912] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 1734.703168][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1734.710322][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1734.718428][ T5912] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1734.726622][T28993] usb 4-1: device descriptor read/8, error -71 [ 1734.843485][T28993] usb usb4-port1: unable to enumerate USB device [ 1734.862588][T23006] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1734.888447][T29969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.901566][T29969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.033252][ T5831] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1735.054963][T23006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.069387][T23006] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1735.078969][T23006] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1735.090913][T23006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.106587][T23006] usb 2-1: config 0 descriptor?? [ 1735.117198][T23006] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1735.127733][T23006] dvb-usb: bulk message failed: -22 (3/0) [ 1735.138033][T23006] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1735.152230][T23006] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1735.161374][T23006] usb 2-1: media controller created [ 1735.172090][T23006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1735.193128][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 1735.202079][T23006] dvb-usb: bulk message failed: -22 (6/0) [ 1735.212737][ T5831] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 1735.221218][ T5831] usb 5-1: config 0 has no interface number 0 [ 1735.230169][ T5831] usb 5-1: config 0 interface 108 has no altsetting 0 [ 1735.243735][T23006] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1735.251012][ T5831] usb 5-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 1735.260170][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.270039][ T5831] usb 5-1: Product: syz [ 1735.274714][ T5831] usb 5-1: Manufacturer: syz [ 1735.279571][ T5831] usb 5-1: SerialNumber: syz [ 1735.298469][T23006] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input134 [ 1735.315349][ T5831] usb 5-1: config 0 descriptor?? [ 1735.328470][ T5831] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1735.336571][T23006] dvb-usb: schedule remote query interval to 150 msecs. [ 1735.349997][T23006] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1735.505821][T23006] dvb-usb: bulk message failed: -22 (1/0) [ 1735.516304][T29985] FAULT_INJECTION: forcing a failure. [ 1735.516304][T29985] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.557022][T23006] dvb-usb: error while querying for an remote control event. [ 1735.567182][T29985] CPU: 1 UID: 0 PID: 29985 Comm: syz.1.6487 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1735.567208][T29985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1735.567220][T29985] Call Trace: [ 1735.567228][T29985] [ 1735.567236][T29985] dump_stack_lvl+0x189/0x250 [ 1735.567263][T29985] ? __pfx____ratelimit+0x10/0x10 [ 1735.567286][T29985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1735.567310][T29985] ? __pfx__printk+0x10/0x10 [ 1735.567334][T29985] ? __pfx___might_resched+0x10/0x10 [ 1735.567357][T29985] ? fs_reclaim_acquire+0x7d/0x100 [ 1735.567381][T29985] should_fail_ex+0x414/0x560 [ 1735.567406][T29985] should_failslab+0xa8/0x100 [ 1735.567425][T29985] __kmalloc_noprof+0xcb/0x4f0 [ 1735.567440][T29985] ? kfree+0x4d/0x440 [ 1735.567459][T29985] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1735.567486][T29985] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1735.567510][T29985] ? tomoyo_domain+0xd9/0x130 [ 1735.567537][T29985] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1735.567555][T29985] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1735.567577][T29985] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1735.567612][T29985] ? __lock_acquire+0xab9/0xd20 [ 1735.567654][T29985] ? __fget_files+0x2a/0x420 [ 1735.567675][T29985] ? __fget_files+0x2a/0x420 [ 1735.567691][T29985] ? __fget_files+0x3a0/0x420 [ 1735.567707][T29985] ? __fget_files+0x2a/0x420 [ 1735.567729][T29985] security_file_ioctl+0xcb/0x2d0 [ 1735.567749][T29985] __se_sys_ioctl+0x47/0x170 [ 1735.567774][T29985] do_syscall_64+0xfa/0x3b0 [ 1735.567798][T29985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.567814][T29985] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1735.567830][T29985] ? clear_bhb_loop+0x60/0xb0 [ 1735.567851][T29985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.567866][T29985] RIP: 0033:0x7f316f58e929 [ 1735.567898][T29985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1735.567913][T29985] RSP: 002b:00007f3170321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.567931][T29985] RAX: ffffffffffffffda RBX: 00007f316f7b5fa0 RCX: 00007f316f58e929 [ 1735.567943][T29985] RDX: 0000200000000140 RSI: 0000000040084504 RDI: 0000000000000006 [ 1735.567955][T29985] RBP: 00007f3170321090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.567969][T29985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.567980][T29985] R13: 0000000000000000 R14: 00007f316f7b5fa0 R15: 00007f316f8dfa28 [ 1735.568008][T29985] [ 1735.568088][T29985] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1735.648727][T29988] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1735.753080][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1735.788978][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1735.797081][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1735.805848][T23020] dvb-usb: error while querying for an remote control event. [ 1735.899222][T23006] IPVS: starting estimator thread 0... [ 1735.965815][T23020] usb 3-1: USB disconnect, device number 46 [ 1736.074319][T29999] IPVS: using max 29 ests per chain, 69600 per kthread [ 1736.083658][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 1736.099407][ T5831] usb 5-1: USB disconnect, device number 42 [ 1736.123023][ T5941] dvb-usb: error while querying for an remote control event. [ 1736.294003][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1736.299935][T23020] dvb-usb: error while querying for an remote control event. [ 1736.493013][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1736.498809][T23020] dvb-usb: error while querying for an remote control event. [ 1736.682997][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1736.689010][T23020] dvb-usb: error while querying for an remote control event. [ 1736.783055][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1736.790119][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1736.886098][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1736.897388][T23020] dvb-usb: error while querying for an remote control event. [ 1736.974844][ T5912] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1737.101552][T23020] usb 2-1: USB disconnect, device number 30 [ 1737.165203][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1737.177273][T30029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1737.187622][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1737.249912][T30030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1737.309952][T23020] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1737.323376][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1737.333464][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1737.348231][ T5912] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1737.357521][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.366623][ T5912] usb 1-1: Product: syz [ 1737.371071][ T5912] usb 1-1: Manufacturer: syz [ 1737.375827][ T5912] usb 1-1: SerialNumber: syz [ 1737.382151][ T5912] usb 1-1: config 0 descriptor?? [ 1737.389974][ T5912] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1737.402956][ T5912] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1737.431258][ T5912] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1737.624668][T30016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.634708][T30016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.803205][T29024] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1737.823241][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1737.830325][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1737.953136][T29024] usb 5-1: Using ep0 maxpacket: 16 [ 1737.972758][T29024] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 1738.062944][T29024] usb 5-1: config 0 has no interface number 0 [ 1738.075969][T29024] usb 5-1: config 0 interface 161 has no altsetting 0 [ 1738.110300][T29024] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1738.151253][T29024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.183140][T29024] usb 5-1: Product: syz [ 1738.187347][T29024] usb 5-1: Manufacturer: syz [ 1738.284879][T29024] usb 5-1: SerialNumber: syz [ 1738.310642][T29024] usb 5-1: config 0 descriptor?? [ 1738.332378][T29024] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 1738.359367][T30041] kAFS: unable to lookup cell '' [ 1738.373486][T29024] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1738.538794][T30034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.592545][T30041] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1738.625523][T30034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.675596][T30045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1738.744653][T30041] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1738.821461][ T30] audit: type=1800 audit(1751490847.336:1898): pid=30047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6502" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1738.873083][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1738.874375][T23020] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1738.880208][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1739.092965][T23020] usb 4-1: Using ep0 maxpacket: 16 [ 1739.507871][T30056] FAULT_INJECTION: forcing a failure. [ 1739.507871][T30056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.533689][ T5941] usb 1-1: USB disconnect, device number 68 [ 1739.549257][T30056] CPU: 0 UID: 0 PID: 30056 Comm: syz.0.6505 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1739.549281][T30056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1739.549292][T30056] Call Trace: [ 1739.549300][T30056] [ 1739.549307][T30056] dump_stack_lvl+0x189/0x250 [ 1739.549336][T30056] ? __pfx____ratelimit+0x10/0x10 [ 1739.549362][T30056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1739.549387][T30056] ? __pfx__printk+0x10/0x10 [ 1739.549415][T30056] should_fail_ex+0x414/0x560 [ 1739.549441][T30056] _copy_to_user+0x31/0xb0 [ 1739.549460][T30056] simple_read_from_buffer+0xe1/0x170 [ 1739.549483][T30056] proc_fail_nth_read+0x1df/0x250 [ 1739.549506][T30056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1739.549528][T30056] ? rw_verify_area+0x258/0x650 [ 1739.549551][T30056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1739.549572][T30056] vfs_read+0x200/0x980 [ 1739.549600][T30056] ? __pfx___mutex_lock+0x10/0x10 [ 1739.549626][T30056] ? __pfx_vfs_read+0x10/0x10 [ 1739.549649][T30056] ? __fget_files+0x2a/0x420 [ 1739.549671][T30056] ? __fget_files+0x3a0/0x420 [ 1739.549688][T30056] ? __fget_files+0x2a/0x420 [ 1739.549714][T30056] ksys_read+0x145/0x250 [ 1739.549745][T30056] ? __pfx_ksys_read+0x10/0x10 [ 1739.549765][T30056] ? rcu_is_watching+0x15/0xb0 [ 1739.549793][T30056] ? do_syscall_64+0xbe/0x3b0 [ 1739.549820][T30056] do_syscall_64+0xfa/0x3b0 [ 1739.549841][T30056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1739.549863][T30056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.549877][T30056] ? clear_bhb_loop+0x60/0xb0 [ 1739.549896][T30056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.549912][T30056] RIP: 0033:0x7fa096b8d33c [ 1739.549928][T30056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1739.549943][T30056] RSP: 002b:00007fa097961030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1739.549961][T30056] RAX: ffffffffffffffda RBX: 00007fa096db5fa0 RCX: 00007fa096b8d33c [ 1739.549973][T30056] RDX: 000000000000000f RSI: 00007fa0979610a0 RDI: 0000000000000005 [ 1739.549984][T30056] RBP: 00007fa097961090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.549994][T30056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.550004][T30056] R13: 0000000000000000 R14: 00007fa096db5fa0 R15: 00007fa096edfa28 [ 1739.550030][T30056] [ 1739.903102][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1740.130307][T28993] usb 5-1: USB disconnect, device number 43 [ 1740.273697][T30060] FAULT_INJECTION: forcing a failure. [ 1740.273697][T30060] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.293222][T30060] CPU: 0 UID: 0 PID: 30060 Comm: syz.0.6508 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1740.293251][T30060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1740.293263][T30060] Call Trace: [ 1740.293271][T30060] [ 1740.293279][T30060] dump_stack_lvl+0x189/0x250 [ 1740.293308][T30060] ? __pfx____ratelimit+0x10/0x10 [ 1740.293331][T30060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1740.293355][T30060] ? __pfx__printk+0x10/0x10 [ 1740.293380][T30060] ? __pfx___might_resched+0x10/0x10 [ 1740.293403][T30060] ? fs_reclaim_acquire+0x7d/0x100 [ 1740.293435][T30060] should_fail_ex+0x414/0x560 [ 1740.293460][T30060] should_failslab+0xa8/0x100 [ 1740.293480][T30060] __kmalloc_noprof+0xcb/0x4f0 [ 1740.293495][T30060] ? kfree+0x4d/0x440 [ 1740.293515][T30060] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1740.293542][T30060] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1740.293565][T30060] ? tomoyo_domain+0xd9/0x130 [ 1740.293593][T30060] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1740.293611][T30060] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1740.293633][T30060] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1740.293667][T30060] ? __lock_acquire+0xab9/0xd20 [ 1740.293709][T30060] ? __fget_files+0x2a/0x420 [ 1740.293730][T30060] ? __fget_files+0x2a/0x420 [ 1740.293746][T30060] ? __fget_files+0x3a0/0x420 [ 1740.293763][T30060] ? __fget_files+0x2a/0x420 [ 1740.293784][T30060] security_file_ioctl+0xcb/0x2d0 [ 1740.293805][T30060] __se_sys_ioctl+0x47/0x170 [ 1740.293832][T30060] do_syscall_64+0xfa/0x3b0 [ 1740.293856][T30060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.293870][T30060] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1740.293886][T30060] ? clear_bhb_loop+0x60/0xb0 [ 1740.293907][T30060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.293923][T30060] RIP: 0033:0x7fa096b8e929 [ 1740.293939][T30060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1740.293954][T30060] RSP: 002b:00007fa097961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.293972][T30060] RAX: ffffffffffffffda RBX: 00007fa096db5fa0 RCX: 00007fa096b8e929 [ 1740.293983][T30060] RDX: 0000200000000340 RSI: 000000008048ae66 RDI: 0000000000000004 [ 1740.293995][T30060] RBP: 00007fa097961090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.294005][T30060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.294016][T30060] R13: 0000000000000000 R14: 00007fa096db5fa0 R15: 00007fa096edfa28 [ 1740.294044][T30060] [ 1740.294073][T30060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1740.939861][T23006] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1740.943075][ C1] net_ratelimit: 1 callbacks suppressed [ 1740.943091][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1740.960037][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1741.135893][T23006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1741.144483][T23006] usb 5-1: can't read configurations, error -22 [ 1741.273123][T23006] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1741.438125][T23006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1741.453264][T23006] usb 5-1: can't read configurations, error -22 [ 1741.470438][T23006] usb usb5-port1: attempt power cycle [ 1741.643176][T23020] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1741.671588][T23020] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1741.691431][T23020] usb 4-1: can't read configurations, error -71 [ 1741.816025][T23006] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1741.846213][T23006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1741.863055][T23006] usb 5-1: can't read configurations, error -22 [ 1741.983108][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1741.990253][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1742.022967][T23006] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1742.028968][T30077] kAFS: unable to lookup cell '' [ 1742.065571][T23006] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1742.092993][T23006] usb 5-1: can't read configurations, error -22 [ 1742.099748][T30077] netlink: 536 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1742.100332][T23006] usb usb5-port1: unable to enumerate USB device [ 1742.116533][T30077] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1742.127473][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6514'. [ 1742.138779][ T30] audit: type=1800 audit(1751490850.666:1899): pid=30077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6514" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1742.762962][T23006] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1742.866067][T30095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6520'. [ 1742.923126][T23006] usb 3-1: Using ep0 maxpacket: 16 [ 1742.936385][T23006] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 1742.968272][T23006] usb 3-1: config 0 has no interface number 0 [ 1742.983415][T23006] usb 3-1: config 0 interface 161 has no altsetting 0 [ 1742.996750][T23006] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1743.016507][T23006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.024762][T23006] usb 3-1: Product: syz [ 1743.029039][T23006] usb 3-1: Manufacturer: syz [ 1743.033159][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1743.034079][T23006] usb 3-1: SerialNumber: syz [ 1743.040658][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1743.064768][T23006] usb 3-1: config 0 descriptor?? [ 1743.077051][T23006] ums-jumpshot 3-1:0.161: USB Mass Storage device detected [ 1743.092177][T23006] ums-jumpshot 3-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1743.286619][T30088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.302321][T30088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.313197][T30105] dlm: Unknown command passed to DLM device : 16 [ 1743.313197][T30105] [ 1743.935596][T23006] usb 3-1: USB disconnect, device number 47 [ 1743.947296][T30116] kAFS: unable to lookup cell '' [ 1744.063087][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1744.070200][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1744.108703][T30116] netlink: 536 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1744.131708][T30116] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1744.151269][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1744.166460][ T30] audit: type=1800 audit(1751490852.696:1900): pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6525" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1744.573601][T23006] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1744.736352][T23006] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1744.751757][T23006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1744.768509][T23006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1744.788134][T23006] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1744.814612][T23006] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1744.826043][T23006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.849193][T23006] usb 1-1: config 0 descriptor?? [ 1744.866845][T30122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1745.103088][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1745.110167][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1745.351447][T23006] usbhid 1-1:0.0: can't add hid device: -71 [ 1745.358075][T23006] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1745.374140][T23006] usb 1-1: USB disconnect, device number 69 [ 1746.143102][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1746.150150][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1746.218932][T30140] netlink: 'syz.0.6532': attribute type 23 has an invalid length. [ 1746.286842][T30140] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 1746.313235][T29024] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1746.462989][T29024] usb 3-1: Using ep0 maxpacket: 8 [ 1746.471049][T29024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1746.515310][T29024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1746.532535][T29024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1746.556878][T29024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1746.579323][T29024] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1746.627462][T29024] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1746.637159][T29024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.683729][T29024] usb 3-1: config 0 descriptor?? [ 1746.689453][T30138] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1746.762958][T23011] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1747.048262][T23011] usb 1-1: config 0 has no interfaces? [ 1747.062200][T23011] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1747.072536][T23011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.084046][T23011] usb 1-1: Product: syz [ 1747.097907][T23011] usb 1-1: Manufacturer: syz [ 1747.110356][T23020] usb 3-1: USB disconnect, device number 48 [ 1747.116489][T25414] Bluetooth: hci2: Opcode 0x0c03 failed: -19 [ 1747.140894][T23011] usb 1-1: SerialNumber: syz [ 1747.183181][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1747.190199][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1747.202429][T23011] usb 1-1: config 0 descriptor?? [ 1747.286110][T30152] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6535'. [ 1747.470385][T30152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.484683][T30152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.497071][T30152] bond0 (unregistering): Released all slaves [ 1747.733017][T23011] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1747.920583][T23011] usb 5-1: Using ep0 maxpacket: 16 [ 1747.949180][T23011] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 1747.958565][T23011] usb 5-1: config 0 has no interface number 0 [ 1747.964766][T23011] usb 5-1: config 0 interface 161 has no altsetting 0 [ 1748.077320][T23011] usb 5-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1748.091395][T23011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.233238][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1748.240359][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1748.288188][T23011] usb 5-1: Product: syz [ 1748.312366][T23011] usb 5-1: Manufacturer: syz [ 1748.327033][T23011] usb 5-1: SerialNumber: syz [ 1748.342543][T23011] usb 5-1: config 0 descriptor?? [ 1748.360131][T23011] ums-jumpshot 5-1:0.161: USB Mass Storage device detected [ 1748.382562][T23011] ums-jumpshot 5-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 1748.581582][T30154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.596589][T30154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.671985][T30174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6542'. [ 1749.263071][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1749.270088][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1749.284676][ T5831] usb 5-1: USB disconnect, device number 48 [ 1749.528755][T23011] usb 1-1: USB disconnect, device number 70 [ 1749.831122][T30208] kAFS: unable to lookup cell '' [ 1749.867131][T30208] netlink: 536 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1749.902973][T30208] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1749.921289][T30209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1749.962092][ T30] audit: type=1800 audit(1751490858.486:1901): pid=30208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6554" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1750.303167][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1750.846863][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6558'. [ 1751.343040][ C1] net_ratelimit: 1 callbacks suppressed [ 1751.343058][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1751.355692][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1751.718769][T30239] tipc: Failed to remove unknown binding: 66,1,1/0:3255043041/3255043043 [ 1751.727697][T30239] tipc: Failed to remove unknown binding: 66,1,1/0:3255043041/3255043043 [ 1752.383071][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1752.390160][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1752.518986][T30245] kAFS: unable to lookup cell '' [ 1752.580434][T30245] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1752.632806][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1752.689702][ T30] audit: type=1800 audit(1751490861.216:1902): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6565" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1752.731413][T30245] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1753.191337][T30254] netlink: 'syz.0.6567': attribute type 1 has an invalid length. [ 1753.391728][T30254] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1753.411384][T30254] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1753.423055][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1753.430017][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1753.490103][T30254] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1753.528751][T30254] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1753.550885][T30254] bond1: (slave geneve2): making interface the new active one [ 1753.615541][T30254] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1753.915867][T30261] FAULT_INJECTION: forcing a failure. [ 1753.915867][T30261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.937269][T30261] CPU: 1 UID: 0 PID: 30261 Comm: syz.2.6570 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1753.937293][T30261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1753.937304][T30261] Call Trace: [ 1753.937312][T30261] [ 1753.937318][T30261] dump_stack_lvl+0x189/0x250 [ 1753.937346][T30261] ? __pfx____ratelimit+0x10/0x10 [ 1753.937368][T30261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1753.937391][T30261] ? __pfx__printk+0x10/0x10 [ 1753.937408][T30261] ? __might_fault+0xb0/0x130 [ 1753.937440][T30261] should_fail_ex+0x414/0x560 [ 1753.937465][T30261] _copy_from_user+0x2d/0xb0 [ 1753.937482][T30261] ___sys_sendmsg+0x158/0x2a0 [ 1753.937505][T30261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1753.937558][T30261] ? __fget_files+0x2a/0x420 [ 1753.937575][T30261] ? __fget_files+0x3a0/0x420 [ 1753.937601][T30261] __x64_sys_sendmsg+0x19b/0x260 [ 1753.937624][T30261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1753.937653][T30261] ? __pfx_ksys_write+0x10/0x10 [ 1753.937665][T30261] ? rcu_is_watching+0x15/0xb0 [ 1753.937691][T30261] ? do_syscall_64+0xbe/0x3b0 [ 1753.937716][T30261] do_syscall_64+0xfa/0x3b0 [ 1753.937737][T30261] ? lockdep_hardirqs_on+0x9c/0x150 [ 1753.937756][T30261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.937771][T30261] ? clear_bhb_loop+0x60/0xb0 [ 1753.937789][T30261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.937804][T30261] RIP: 0033:0x7f9a4158e929 [ 1753.937820][T30261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.937834][T30261] RSP: 002b:00007f9a42466038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1753.937852][T30261] RAX: ffffffffffffffda RBX: 00007f9a417b5fa0 RCX: 00007f9a4158e929 [ 1753.937866][T30261] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1753.937877][T30261] RBP: 00007f9a42466090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.937887][T30261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.937896][T30261] R13: 0000000000000000 R14: 00007f9a417b5fa0 R15: 00007f9a418dfa28 [ 1753.937923][T30261] [ 1754.294070][T30147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1754.306837][T30147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1754.323525][T30147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1754.332271][T30147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1754.340711][T30147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1754.448641][T30268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1754.463058][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1754.470117][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1754.600400][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6575'. [ 1754.793177][T23011] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1754.821618][T30267] chnl_net:caif_netlink_parms(): no params data found [ 1754.956203][T23011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.977366][T23011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.002863][T23011] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1755.028784][T23011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.039601][T30267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.053629][T30267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.064759][T23011] usb 5-1: config 0 descriptor?? [ 1755.070774][T30267] bridge_slave_0: entered allmulticast mode [ 1755.085303][T30267] bridge_slave_0: entered promiscuous mode [ 1755.094444][T30267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.101781][T30267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.113754][T30267] bridge_slave_1: entered allmulticast mode [ 1755.124585][T30267] bridge_slave_1: entered promiscuous mode [ 1755.219139][T30267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1755.242504][T30267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1755.392998][T29024] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1755.489851][T23011] hid-steam 0003:28DE:1142.0069: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1755.503042][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1755.510025][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1755.542118][T30293] FAULT_INJECTION: forcing a failure. [ 1755.542118][T30293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.549523][T30267] team0: Port device team_slave_0 added [ 1755.565036][T29024] usb 1-1: config 0 has no interfaces? [ 1755.571378][T30293] CPU: 0 UID: 0 PID: 30293 Comm: syz.2.6580 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1755.571401][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1755.571411][T30293] Call Trace: [ 1755.571419][T30293] [ 1755.571427][T30293] dump_stack_lvl+0x189/0x250 [ 1755.571456][T30293] ? __pfx____ratelimit+0x10/0x10 [ 1755.571480][T30293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1755.571504][T30293] ? __pfx__printk+0x10/0x10 [ 1755.571523][T30293] ? __might_fault+0xb0/0x130 [ 1755.571550][T30293] should_fail_ex+0x414/0x560 [ 1755.571576][T30293] _copy_from_user+0x2d/0xb0 [ 1755.571593][T30293] ppp_ioctl+0xa8a/0x19a0 [ 1755.571620][T30293] ? __pfx_ppp_ioctl+0x10/0x10 [ 1755.571644][T30293] ? __fget_files+0x2a/0x420 [ 1755.571660][T30293] ? __fget_files+0x3a0/0x420 [ 1755.571677][T30293] ? __fget_files+0x2a/0x420 [ 1755.571698][T30293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1755.571722][T30293] ? __pfx_ppp_ioctl+0x10/0x10 [ 1755.571742][T30293] __se_sys_ioctl+0xf9/0x170 [ 1755.571767][T30293] do_syscall_64+0xfa/0x3b0 [ 1755.571789][T30293] ? lockdep_hardirqs_on+0x9c/0x150 [ 1755.571810][T30293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.571827][T30293] ? clear_bhb_loop+0x60/0xb0 [ 1755.571848][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.571865][T30293] RIP: 0033:0x7f9a4158e929 [ 1755.571880][T30293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.571895][T30293] RSP: 002b:00007f9a42424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.571913][T30293] RAX: ffffffffffffffda RBX: 00007f9a417b6160 RCX: 00007f9a4158e929 [ 1755.571931][T30293] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 1755.571943][T30293] RBP: 00007f9a42424090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.571954][T30293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.571963][T30293] R13: 0000000000000001 R14: 00007f9a417b6160 R15: 00007f9a418dfa28 [ 1755.571990][T30293] [ 1755.573012][T23011] hid-steam 0003:28DE:1142.0069: Steam wireless receiver connected [ 1755.799590][T29024] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1755.808751][T29024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.816887][T29024] usb 1-1: Product: syz [ 1755.821033][T29024] usb 1-1: Manufacturer: syz [ 1755.825928][T29024] usb 1-1: SerialNumber: syz [ 1755.836636][T29024] usb 1-1: config 0 descriptor?? [ 1755.838220][T30267] team0: Port device team_slave_1 added [ 1755.852303][T23011] hid-steam 0003:28DE:1142.006A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 1755.978590][T30267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.101101][T30267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.107299][T30296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1756.136204][T30267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.253832][T30296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1756.292079][T30267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.331607][T23011] usb 5-1: USB disconnect, device number 49 [ 1756.343744][T23011] hid-steam 0003:28DE:1142.0069: Steam wireless receiver disconnected [ 1756.384493][T30147] Bluetooth: hci2: command tx timeout [ 1756.415925][T30267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.487965][T30267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.543061][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1756.550169][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1756.710437][T30267] hsr_slave_0: entered promiscuous mode [ 1756.726484][T30267] hsr_slave_1: entered promiscuous mode [ 1756.735153][T30267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1756.743295][T23020] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1756.773387][T30267] Cannot create hsr debugfs directory [ 1756.913393][T23020] usb 4-1: Using ep0 maxpacket: 8 [ 1756.959099][T23020] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1756.982701][T23020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1757.018924][T23020] usb 4-1: Product: syz [ 1757.051379][T23020] usb 4-1: Manufacturer: syz [ 1757.062184][T30304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6583'. [ 1757.098090][T23020] usb 4-1: SerialNumber: syz [ 1757.138801][T23020] usb 4-1: config 0 descriptor?? [ 1757.170111][T23020] usbtest 4-1:0.0: FX2 device [ 1757.187742][T23020] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1757.583070][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1757.590128][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1758.158310][T30267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1758.200465][T30267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1758.350869][T30267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1758.414977][T30267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1758.473360][T25414] Bluetooth: hci2: command tx timeout [ 1758.623085][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1758.630099][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1758.721120][T30267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1758.780952][T30267] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.808734][T15698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.815872][T15698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1758.954259][ T5919] usb 1-1: USB disconnect, device number 71 [ 1759.035679][ T2116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.042809][ T2116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.217728][T30335] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 1759.241879][T30336] PKCS7: Unknown OID: [5] (bad) [ 1759.249096][T30336] PKCS7: Only support pkcs7_signedData type [ 1759.263054][T30336] usb usb8: usbfs: process 30336 (syz.2.6590) did not claim interface 0 before use [ 1759.288657][T30335] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 1759.332474][T30335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1759.621246][T30267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.663070][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1759.670126][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1759.790947][T30267] veth0_vlan: entered promiscuous mode [ 1759.811514][T30267] veth1_vlan: entered promiscuous mode [ 1759.963065][ T5919] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1759.971324][T30267] veth0_macvtap: entered promiscuous mode [ 1760.036533][T30267] veth1_macvtap: entered promiscuous mode [ 1760.125505][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.125975][ T5831] usb 4-1: USB disconnect, device number 98 [ 1760.142010][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.180088][T30267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.233404][ T5919] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1760.253362][T30267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.262830][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.293503][T30267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.328677][T30267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.337549][T30267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.338423][ T5919] usb 1-1: config 0 descriptor?? [ 1760.397811][T30267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.403618][T30344] kAFS: unable to lookup cell '' [ 1760.543885][T25414] Bluetooth: hci2: command tx timeout [ 1760.590484][ T2116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.653109][ T2116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.663294][T29024] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1760.703155][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1760.736151][T30344] netlink: 536 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1760.745634][T30344] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1760.761582][T30344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1760.763904][T15698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.779277][T15698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.807388][ T5919] hid-steam 0003:28DE:1142.006B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1760.819962][T29024] usb 4-1: Using ep0 maxpacket: 8 [ 1760.859762][ T30] audit: type=1800 audit(1751490869.356:1903): pid=30344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6595" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1760.908335][T29024] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1760.938596][T29024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1760.947441][ T5919] hid-steam 0003:28DE:1142.006B: Steam wireless receiver connected [ 1761.003001][T29024] usb 4-1: Product: syz [ 1761.007194][T29024] usb 4-1: Manufacturer: syz [ 1761.022126][ T5919] hid-steam 0003:28DE:1142.006C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1761.090751][T29024] usb 4-1: SerialNumber: syz [ 1761.127702][T29024] usb 4-1: config 0 descriptor?? [ 1761.146115][T29024] usbtest 4-1:0.0: FX2 device [ 1761.496784][T30365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.555033][T30365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.573975][T29024] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1761.654456][ T5831] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1761.714754][T29024] usb 1-1: USB disconnect, device number 72 [ 1761.743084][ C1] net_ratelimit: 1 callbacks suppressed [ 1761.743100][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1761.755702][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1761.770553][T29024] hid-steam 0003:28DE:1142.006B: Steam wireless receiver disconnected [ 1761.904744][ T5831] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1761.931334][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1761.960095][ T5831] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1761.990529][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1762.012576][ T5831] usb 3-1: Product: syz [ 1762.019350][ T5831] usb 3-1: Manufacturer: syz [ 1762.027656][ T5831] usb 3-1: SerialNumber: syz [ 1762.041238][ T5831] usb 3-1: config 0 descriptor?? [ 1762.074674][ T5831] usb 3-1: selecting invalid altsetting 0 [ 1762.623288][T25414] Bluetooth: hci2: command tx timeout [ 1762.783082][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1762.790060][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1762.811595][T30380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.835509][T30382] netlink: 'syz.4.6606': attribute type 1 has an invalid length. [ 1762.867696][T30382] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1762.875362][T30382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1762.887893][T30382] dummy0: entered allmulticast mode [ 1762.930081][T30380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.945870][T25414] Bluetooth: hci0: command 0x0406 tx timeout [ 1762.998246][ T5919] usb 3-1: USB disconnect, device number 49 [ 1763.305948][T23006] usb 4-1: USB disconnect, device number 99 [ 1763.363341][T30373] ptrace attach of "./syz-executor exec"[30267] was attempted by "./syz-executor exec"[30373] [ 1763.380456][T30373] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6603'. [ 1763.823182][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1763.830346][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1764.863051][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1764.870155][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1765.602496][T30411] netlink: 'syz.4.6614': attribute type 10 has an invalid length. [ 1765.903274][ T5912] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1766.071343][ T5912] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1766.082963][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.110483][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.173419][T30432] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2593221251/2593221253 [ 1766.182709][T30432] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2593221251/2593221253 [ 1766.409794][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.445703][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.481495][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.501791][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.534341][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.565559][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.578828][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.599651][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.610960][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.639568][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.652522][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.693358][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.719154][T30436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1766.735926][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.753380][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.762746][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.774136][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.782391][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.839220][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1766.915169][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1766.936170][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1766.945282][ C1] net_ratelimit: 2 callbacks suppressed [ 1766.945298][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1766.945472][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1766.979750][ T5912] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1767.070947][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1767.091280][ T5912] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1767.100634][ T5912] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1767.126840][ T5912] usb 1-1: Product: syz [ 1767.131229][ T5912] usb 1-1: Manufacturer: syz [ 1767.136432][ T5912] usb 1-1: SerialNumber: syz [ 1767.165285][ T5912] usb 1-1: config 0 descriptor?? [ 1767.188322][ T5912] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1767.293283][T29024] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1767.457618][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 1767.520926][T29024] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1767.560046][T29024] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1767.681331][ T5912] usb 1-1: USB disconnect, device number 73 [ 1767.743603][ T5912] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1767.774558][T29024] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1767.813077][T29024] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1767.830498][T29024] usb 4-1: Product: syz [ 1767.841139][T29024] usb 4-1: Manufacturer: syz [ 1767.862742][T29024] usb 4-1: SerialNumber: syz [ 1767.901242][T29024] usb 4-1: config 0 descriptor?? [ 1767.963302][T29024] usb 4-1: selecting invalid altsetting 0 [ 1767.983065][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1767.990175][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1768.314967][T30453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.326896][T30453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.352193][T23020] usb 4-1: USB disconnect, device number 100 [ 1768.950560][T30463] FAULT_INJECTION: forcing a failure. [ 1768.950560][T30463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.980462][T30463] CPU: 0 UID: 0 PID: 30463 Comm: syz.5.6629 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1768.980487][T30463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1768.980499][T30463] Call Trace: [ 1768.980506][T30463] [ 1768.980516][T30463] dump_stack_lvl+0x189/0x250 [ 1768.980537][T30463] ? __pfx____ratelimit+0x10/0x10 [ 1768.980552][T30463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1768.980567][T30463] ? __pfx__printk+0x10/0x10 [ 1768.980578][T30463] ? __might_fault+0xb0/0x130 [ 1768.980593][T30463] should_fail_ex+0x414/0x560 [ 1768.980607][T30463] _copy_from_iter+0x1db/0x16f0 [ 1768.980623][T30463] ? rcu_is_watching+0x15/0xb0 [ 1768.980639][T30463] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1768.980652][T30463] ? __pfx__copy_from_iter+0x10/0x10 [ 1768.980665][T30463] ? __build_skb_around+0x257/0x3e0 [ 1768.980679][T30463] ? netlink_sendmsg+0x642/0xb30 [ 1768.980689][T30463] ? skb_put+0x11b/0x210 [ 1768.980700][T30463] netlink_sendmsg+0x6b2/0xb30 [ 1768.980716][T30463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.980728][T30463] ? aa_sock_msg_perm+0x94/0x160 [ 1768.980741][T30463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1768.980753][T30463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.980764][T30463] __sock_sendmsg+0x21c/0x270 [ 1768.980780][T30463] ____sys_sendmsg+0x52d/0x830 [ 1768.980794][T30463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.980810][T30463] ? import_iovec+0x74/0xa0 [ 1768.980820][T30463] ___sys_sendmsg+0x21f/0x2a0 [ 1768.980832][T30463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.980865][T30463] ? __might_fault+0xb0/0x130 [ 1768.980876][T30463] __sys_sendmmsg+0x227/0x430 [ 1768.980890][T30463] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1768.980905][T30463] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1768.980932][T30463] ? ksys_write+0x22a/0x250 [ 1768.980943][T30463] ? __pfx_ksys_write+0x10/0x10 [ 1768.980950][T30463] ? rcu_is_watching+0x15/0xb0 [ 1768.980967][T30463] __x64_sys_sendmmsg+0xa0/0xc0 [ 1768.980979][T30463] do_syscall_64+0xfa/0x3b0 [ 1768.980992][T30463] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.981005][T30463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.981014][T30463] ? clear_bhb_loop+0x60/0xb0 [ 1768.981026][T30463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.981036][T30463] RIP: 0033:0x7f152a38e929 [ 1768.981045][T30463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.981054][T30463] RSP: 002b:00007f152b1a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1768.981065][T30463] RAX: ffffffffffffffda RBX: 00007f152a5b5fa0 RCX: 00007f152a38e929 [ 1768.981072][T30463] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1768.981079][T30463] RBP: 00007f152b1a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.981085][T30463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.981091][T30463] R13: 0000000000000000 R14: 00007f152a5b5fa0 R15: 00007f152a6dfa28 [ 1768.981105][T30463] [ 1769.023051][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1769.276970][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1770.063046][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1770.070067][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1770.374607][T30476] FAULT_INJECTION: forcing a failure. [ 1770.374607][T30476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.408624][T30476] CPU: 1 UID: 0 PID: 30476 Comm: syz.2.6634 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1770.408645][T30476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1770.408655][T30476] Call Trace: [ 1770.408661][T30476] [ 1770.408668][T30476] dump_stack_lvl+0x189/0x250 [ 1770.408693][T30476] ? __pfx____ratelimit+0x10/0x10 [ 1770.408711][T30476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.408731][T30476] ? __pfx__printk+0x10/0x10 [ 1770.408756][T30476] should_fail_ex+0x414/0x560 [ 1770.408775][T30476] _copy_to_iter+0x575/0x16f0 [ 1770.408800][T30476] ? __pfx__copy_to_iter+0x10/0x10 [ 1770.408814][T30476] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1770.408835][T30476] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1770.408854][T30476] __skb_datagram_iter+0xf8/0x990 [ 1770.408871][T30476] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1770.408893][T30476] skb_copy_datagram_iter+0xc5/0x230 [ 1770.408911][T30476] netlink_recvmsg+0x2ab/0xa30 [ 1770.408933][T30476] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1770.408950][T30476] ? __lock_acquire+0xab9/0xd20 [ 1770.408965][T30476] ? aa_sock_msg_perm+0x94/0x160 [ 1770.408982][T30476] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1770.408997][T30476] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1770.409012][T30476] sock_recvmsg_nosec+0x183/0x1c0 [ 1770.409033][T30476] ____sys_recvmsg+0x3aa/0x460 [ 1770.409055][T30476] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1770.409081][T30476] ? import_iovec+0x74/0xa0 [ 1770.409096][T30476] ___sys_recvmsg+0x1b5/0x510 [ 1770.409115][T30476] ? __pfx____sys_recvmsg+0x10/0x10 [ 1770.409154][T30476] ? __might_fault+0xb0/0x130 [ 1770.409169][T30476] do_recvmmsg+0x307/0x770 [ 1770.409190][T30476] ? __pfx_do_recvmmsg+0x10/0x10 [ 1770.409215][T30476] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1770.409247][T30476] __x64_sys_recvmmsg+0x190/0x240 [ 1770.409264][T30476] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1770.409277][T30476] ? rcu_is_watching+0x15/0xb0 [ 1770.409299][T30476] ? do_syscall_64+0xbe/0x3b0 [ 1770.409319][T30476] do_syscall_64+0xfa/0x3b0 [ 1770.409335][T30476] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.409351][T30476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.409363][T30476] ? clear_bhb_loop+0x60/0xb0 [ 1770.409378][T30476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.409391][T30476] RIP: 0033:0x7f9a4158e929 [ 1770.409403][T30476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.409414][T30476] RSP: 002b:00007f9a42466038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1770.409430][T30476] RAX: ffffffffffffffda RBX: 00007f9a417b5fa0 RCX: 00007f9a4158e929 [ 1770.409439][T30476] RDX: 0000000000000004 RSI: 0000200000002c00 RDI: 0000000000000003 [ 1770.409447][T30476] RBP: 00007f9a42466090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.409456][T30476] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000001 [ 1770.409464][T30476] R13: 0000000000000000 R14: 00007f9a417b5fa0 R15: 00007f9a418dfa28 [ 1770.409485][T30476] [ 1770.702960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.926347][T30477] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 1770.935255][T30477] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 1770.964831][T30478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6633'. [ 1770.973854][T30478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6633'. [ 1771.104987][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1771.112083][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1771.760338][T30498] fuse: Unknown parameter '0x0000000000000005' [ 1772.143082][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1772.150193][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1773.183184][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1773.190283][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1773.313011][T23006] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1773.401164][T30512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6645'. [ 1773.522952][T23006] usb 6-1: Using ep0 maxpacket: 8 [ 1773.621625][T23006] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 1773.667291][T30533] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6651'. [ 1773.689085][T23006] usb 6-1: config 0 has no interface number 0 [ 1773.713168][T23006] usb 6-1: config 0 interface 235 has no altsetting 0 [ 1773.729019][T23006] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 1773.738451][T23006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.746803][T23006] usb 6-1: Product: syz [ 1773.751007][T23006] usb 6-1: Manufacturer: syz [ 1773.755626][T23006] usb 6-1: SerialNumber: syz [ 1773.787559][T23006] usb 6-1: config 0 descriptor?? [ 1774.187686][T30516] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1774.223063][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1774.230132][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1774.262490][T30516] team0: Port device batadv1 added [ 1774.277261][T30539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1774.322028][T30540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1774.581378][T30544] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6653'. [ 1774.913065][T29024] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1775.073518][T29024] usb 4-1: Using ep0 maxpacket: 8 [ 1775.080031][T29024] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 1775.093100][T29024] usb 4-1: config 0 has no interface number 0 [ 1775.099307][T29024] usb 4-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1775.118228][T29024] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1775.130927][T29024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.163496][T29024] usb 4-1: Product: syz [ 1775.174839][T29024] usb 4-1: Manufacturer: syz [ 1775.188980][T29024] usb 4-1: SerialNumber: syz [ 1775.206613][T29024] usb 4-1: config 0 descriptor?? [ 1775.264880][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1775.272036][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1775.803016][T23006] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1775.839593][ T5919] usb 6-1: USB disconnect, device number 2 [ 1775.889889][T29024] msi2500 4-1:0.246: Registered as swradio24 [ 1775.985306][T23006] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.004926][T29024] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1776.005192][T23006] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1776.095826][T29024] usb 4-1: USB disconnect, device number 101 [ 1776.204006][T23006] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.204044][T23006] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1776.204057][T23006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.206564][T30578] tipc: Failed to remove unknown binding: 66,1,1/0:2153661639/2153661641 [ 1776.302343][T23006] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1776.303083][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1776.316367][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1776.357479][T23006] usb 3-1: invalid MIDI out EP 0 [ 1776.398389][T30578] tipc: Failed to remove unknown binding: 66,1,1/0:2153661639/2153661641 [ 1776.517796][T30564] delete_channel: no stack [ 1776.604530][T23006] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1776.607114][ T7662] udevd[7662]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1776.808463][T23006] usb 3-1: USB disconnect, device number 50 [ 1776.925358][T30582] kAFS: unable to lookup cell '' [ 1777.242966][T23020] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1777.280133][T30582] netlink: 536 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1777.343115][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1777.350193][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1777.357186][T30582] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1777.398833][T30585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1777.409390][T23020] usb 4-1: Using ep0 maxpacket: 16 [ 1777.418480][T23020] usb 4-1: config 0 has no interfaces? [ 1777.445031][T23020] usb 4-1: New USB device found, idVendor=187f, idProduct=0302, bcdDevice=25.27 [ 1777.473195][T23020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.482955][ T30] audit: type=1800 audit(1751490886.006:1904): pid=30582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6663" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1777.558185][T23020] usb 4-1: Product: syz [ 1777.576856][T23020] usb 4-1: Manufacturer: syz [ 1777.609257][T23020] usb 4-1: SerialNumber: syz [ 1777.635730][T23020] usb 4-1: config 0 descriptor?? [ 1777.877266][T23020] usb 4-1: USB disconnect, device number 102 [ 1777.974295][T30588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6665'. [ 1778.179333][ T30] audit: type=1326 audit(1751490886.706:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.278777][ T30] audit: type=1326 audit(1751490886.706:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.301209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.383063][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1778.390198][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1778.393238][ T30] audit: type=1326 audit(1751490886.736:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.419431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.507204][ T30] audit: type=1326 audit(1751490886.736:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.578914][ T30] audit: type=1326 audit(1751490886.736:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.601390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.603859][T30599] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1778.657462][ T30] audit: type=1326 audit(1751490886.736:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.680608][ T30] audit: type=1326 audit(1751490886.736:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.704140][ T30] audit: type=1326 audit(1751490886.736:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1778.732749][ T30] audit: type=1326 audit(1751490886.736:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30590 comm="syz.5.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152a38e929 code=0x7ffc0000 [ 1779.033713][T30611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1779.045214][T30611] bridge_slave_1: left allmulticast mode [ 1779.063441][T30611] bridge_slave_1: left promiscuous mode [ 1779.088850][T30611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.116862][T30615] fuse: Unknown parameter '0x0000000000000005' [ 1779.125239][T30611] bridge_slave_0: left allmulticast mode [ 1779.131022][T30611] bridge_slave_0: left promiscuous mode [ 1779.166107][T30611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.423171][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1779.430268][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1779.449278][T30627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1779.458858][T30627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6677'. [ 1779.916271][T30633] tipc: Failed to remove unknown binding: 66,1,1/595682197:3706723876/3706723878 [ 1779.925508][T30633] tipc: Failed to remove unknown binding: 66,1,1/595682197:3706723876/3706723878 [ 1780.034397][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1780.463143][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1780.470286][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1780.663791][ T5912] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1780.828900][ T5912] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1780.962987][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.989647][ T5912] usb 5-1: config 0 has no interface number 0 [ 1781.016680][ T5912] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1781.072965][ T5912] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1781.113026][ T5912] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1781.156943][ T5912] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1781.204378][ T5912] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1781.219624][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1781.237880][ T5912] usb 5-1: SerialNumber: syz [ 1781.255352][ T5912] usb 5-1: config 0 descriptor?? [ 1781.477157][ T5912] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1781.484580][ T5912] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1781.497349][ T5912] usb 5-1: USB disconnect, device number 50 [ 1781.503387][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1781.503494][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1781.664082][T23011] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1781.679365][T30664] kAFS: unable to lookup cell '.,' [ 1781.826250][T23011] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1781.837739][T23011] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1781.848826][T23011] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1781.859805][T23011] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1781.868235][T23011] usb 4-1: Product: syz [ 1781.872614][T23011] usb 4-1: Manufacturer: syz [ 1781.883168][T23011] usb 4-1: SerialNumber: syz [ 1781.913571][T23011] usb 4-1: config 0 descriptor?? [ 1781.928205][T23011] usb 4-1: selecting invalid altsetting 0 [ 1782.437409][T30680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.450707][T30680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.477164][ T5912] usb 4-1: USB disconnect, device number 103 [ 1782.543057][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1782.550152][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1782.823091][T23006] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1782.986239][T23006] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1783.039346][T23006] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1783.046326][T23020] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1783.069195][T23006] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1783.150661][T23006] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1783.159131][T23006] usb 6-1: Product: syz [ 1783.163537][T23006] usb 6-1: Manufacturer: syz [ 1783.168220][T23006] usb 6-1: SerialNumber: syz [ 1783.185409][T23006] usb 6-1: config 0 descriptor?? [ 1783.219568][T23006] usb 6-1: selecting invalid altsetting 0 [ 1783.227826][T23020] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.239600][T23020] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1783.262306][T23020] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1783.399676][T23020] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1783.442929][T23020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.583058][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1783.590114][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1783.641416][T23020] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1783.661051][T23020] usb 1-1: invalid MIDI out EP 0 [ 1783.678734][T30694] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3 [ 1783.731858][T30704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.741662][T30704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.776249][T23011] usb 6-1: USB disconnect, device number 3 [ 1784.267574][ T7662] udevd[7662]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1784.358679][T23020] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1784.623054][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1784.630144][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1784.934444][T30717] Cannot find set identified by id 0 to match [ 1785.663075][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1785.670113][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1785.759095][ T5912] usb 1-1: USB disconnect, device number 74 [ 1785.870232][T30723] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1786.464469][T23020] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1786.466989][ T5919] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1786.659434][T23020] usb 5-1: Using ep0 maxpacket: 8 [ 1786.663004][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1786.677128][ T5919] usb 1-1: too many configurations: 195, using maximum allowed: 8 [ 1786.686687][T23020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1786.687315][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1786.706227][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1786.727256][T23020] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1786.728293][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1786.754180][T23020] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1786.762818][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1786.773970][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1786.825140][T23020] usb 5-1: Product: syz [ 1786.825565][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1786.829332][T23020] usb 5-1: Manufacturer: syz [ 1786.829350][T23020] usb 5-1: SerialNumber: syz [ 1786.859636][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1786.880026][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1786.988693][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.021161][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1787.040686][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.052976][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1787.065034][T23020] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1787.065156][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.105426][T23020] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 1787.139257][T23020] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 1787.151400][T23020] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1787.183571][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1787.221131][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.397564][ T5919] usb 1-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1787.408468][ T5919] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.420124][ T5919] usb 1-1: New USB device found, idVendor=061d, idProduct=a3c1, bcdDevice=75.92 [ 1787.430624][ T5919] usb 1-1: New USB device strings: Mfr=244, Product=72, SerialNumber=251 [ 1787.441455][ T5919] usb 1-1: Product: syz [ 1787.447188][ T5919] usb 1-1: Manufacturer: syz [ 1787.451959][ T5919] usb 1-1: SerialNumber: syz [ 1787.465078][ T5919] usb 1-1: config 0 descriptor?? [ 1787.499039][T23020] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 1787.529500][T23020] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1787.580426][T23020] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1787.623076][T23020] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1787.666236][T23020] usb 5-1: USB disconnect, device number 51 [ 1787.686468][T23020] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1787.744021][ C1] net_ratelimit: 1 callbacks suppressed [ 1787.744037][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1787.756735][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1787.840562][T30751] overlayfs: missing 'lowerdir' [ 1787.885024][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6717'. [ 1787.889529][T23020] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1787.930867][T23020] visor 5-1:1.0: device disconnected [ 1788.545077][T25414] Bluetooth: hci5: command 0x0406 tx timeout [ 1788.603010][T23020] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1788.775183][T23020] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.783148][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1788.786183][T23020] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1788.792336][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1788.821988][T23020] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1788.861461][T23020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.900414][T30763] dlm: Unknown command passed to DLM device : 16 [ 1788.900414][T30763] [ 1788.935733][T23020] usb 5-1: config 0 descriptor?? [ 1788.975815][T23020] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1789.020312][T23020] dvb-usb: bulk message failed: -22 (3/0) [ 1789.064736][T23020] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1789.114160][T23020] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1789.121394][T23020] usb 5-1: media controller created [ 1789.137140][T23020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1789.244548][ T5919] usb 1-1: USB disconnect, device number 75 [ 1789.273953][T23020] dvb-usb: bulk message failed: -22 (6/0) [ 1789.302422][T23020] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1789.340695][T23020] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input135 [ 1789.391898][T23020] dvb-usb: schedule remote query interval to 150 msecs. [ 1789.403149][T23020] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1789.701471][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1789.724077][T23020] dvb-usb: error while querying for an remote control event. [ 1789.823055][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1789.830037][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1789.966533][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1789.972324][T23020] dvb-usb: error while querying for an remote control event. [ 1790.061183][T30779] FAULT_INJECTION: forcing a failure. [ 1790.061183][T30779] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.096372][T30779] CPU: 1 UID: 0 PID: 30779 Comm: syz.3.6726 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1790.096397][T30779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1790.096408][T30779] Call Trace: [ 1790.096416][T30779] [ 1790.096424][T30779] dump_stack_lvl+0x189/0x250 [ 1790.096457][T30779] ? __pfx____ratelimit+0x10/0x10 [ 1790.096478][T30779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1790.096500][T30779] ? __pfx__printk+0x10/0x10 [ 1790.096524][T30779] ? __pfx___might_resched+0x10/0x10 [ 1790.096544][T30779] ? fs_reclaim_acquire+0x7d/0x100 [ 1790.096568][T30779] should_fail_ex+0x414/0x560 [ 1790.096602][T30779] should_failslab+0xa8/0x100 [ 1790.096622][T30779] __kmalloc_cache_noprof+0x70/0x3d0 [ 1790.096640][T30779] ? snd_seq_oss_open+0xe3/0xea0 [ 1790.096664][T30779] snd_seq_oss_open+0xe3/0xea0 [ 1790.096684][T30779] ? do_dentry_open+0x35e/0x1970 [ 1790.096702][T30779] ? vfs_open+0x3b/0x340 [ 1790.096718][T30779] ? path_openat+0x2ee5/0x3830 [ 1790.096738][T30779] ? do_filp_open+0x1fa/0x410 [ 1790.096757][T30779] ? do_sys_openat2+0x121/0x1c0 [ 1790.096775][T30779] ? __x64_sys_creat+0x8f/0xc0 [ 1790.096794][T30779] ? do_syscall_64+0xfa/0x3b0 [ 1790.096814][T30779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.096834][T30779] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1790.096866][T30779] ? __lock_acquire+0xab9/0xd20 [ 1790.096896][T30779] ? __mutex_trylock_common+0x153/0x260 [ 1790.096916][T30779] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1790.096939][T30779] ? rcu_is_watching+0x15/0xb0 [ 1790.096962][T30779] ? trace_contention_end+0x39/0x120 [ 1790.096980][T30779] ? __mutex_lock+0x330/0xe80 [ 1790.097004][T30779] ? __lock_acquire+0xab9/0xd20 [ 1790.097031][T30779] ? odev_open+0x5c/0xa0 [ 1790.097053][T30779] ? __pfx___mutex_lock+0x10/0x10 [ 1790.097083][T30779] ? do_raw_spin_unlock+0x122/0x240 [ 1790.097106][T30779] ? soundcore_open+0x2da/0x490 [ 1790.097131][T30779] odev_open+0x67/0xa0 [ 1790.097152][T30779] chrdev_open+0x4c9/0x5e0 [ 1790.097171][T30779] ? __pfx_chrdev_open+0x10/0x10 [ 1790.097195][T30779] ? __pfx_chrdev_open+0x10/0x10 [ 1790.097211][T30779] do_dentry_open+0xdf0/0x1970 [ 1790.097246][T30779] vfs_open+0x3b/0x340 [ 1790.097263][T30779] ? path_openat+0x2ecd/0x3830 [ 1790.097285][T30779] path_openat+0x2ee5/0x3830 [ 1790.097305][T30779] ? arch_stack_walk+0xfc/0x150 [ 1790.097349][T30779] ? __pfx_path_openat+0x10/0x10 [ 1790.097368][T30779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.097405][T30779] do_filp_open+0x1fa/0x410 [ 1790.097425][T30779] ? __lock_acquire+0xab9/0xd20 [ 1790.097448][T30779] ? __pfx_do_filp_open+0x10/0x10 [ 1790.097491][T30779] ? _raw_spin_unlock+0x28/0x50 [ 1790.097511][T30779] ? alloc_fd+0x64c/0x6c0 [ 1790.097540][T30779] do_sys_openat2+0x121/0x1c0 [ 1790.097564][T30779] ? __pfx_do_sys_openat2+0x10/0x10 [ 1790.097591][T30779] ? ksys_write+0x22a/0x250 [ 1790.097609][T30779] ? __pfx_ksys_write+0x10/0x10 [ 1790.097621][T30779] ? rcu_is_watching+0x15/0xb0 [ 1790.097649][T30779] __x64_sys_creat+0x8f/0xc0 [ 1790.097674][T30779] do_syscall_64+0xfa/0x3b0 [ 1790.097695][T30779] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.097717][T30779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.097733][T30779] ? clear_bhb_loop+0x60/0xb0 [ 1790.097753][T30779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.097768][T30779] RIP: 0033:0x7fe4b038e929 [ 1790.097784][T30779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.097796][T30779] RSP: 002b:00007fe4b1149038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1790.097814][T30779] RAX: ffffffffffffffda RBX: 00007fe4b05b5fa0 RCX: 00007fe4b038e929 [ 1790.097827][T30779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1790.097836][T30779] RBP: 00007fe4b1149090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.097845][T30779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.097856][T30779] R13: 0000000000000000 R14: 00007fe4b05b5fa0 R15: 00007fe4b06dfa28 [ 1790.097884][T30779] [ 1790.499240][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1790.508976][T23020] dvb-usb: error while querying for an remote control event. [ 1790.673005][T23006] dvb-usb: bulk message failed: -22 (1/0) [ 1790.681633][T23006] dvb-usb: error while querying for an remote control event. [ 1790.720238][T30785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6728'. [ 1790.863105][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1790.870275][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1790.903038][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1790.909072][ T5831] dvb-usb: error while querying for an remote control event. [ 1791.013774][T23006] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1791.103159][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1791.109125][T23020] dvb-usb: error while querying for an remote control event. [ 1791.154776][T23006] usb 4-1: device descriptor read/64, error -71 [ 1791.273527][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1791.280851][T23020] dvb-usb: error while querying for an remote control event. [ 1791.393016][T23006] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1791.441325][T30798] fuse: Bad value for 'user_id' [ 1791.443393][T23020] dvb-usb: bulk message failed: -22 (1/0) [ 1791.447289][T30798] fuse: Bad value for 'user_id' [ 1791.500615][T23020] dvb-usb: error while querying for an remote control event. [ 1791.551240][ T5831] usb 5-1: USB disconnect, device number 52 [ 1791.557451][T23006] usb 4-1: device descriptor read/64, error -71 [ 1791.562361][T30802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1791.594283][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.611052][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.673489][T23006] usb usb4-port1: attempt power cycle [ 1791.687150][ T5831] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1791.783144][T23020] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1791.903075][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1792.017722][T23020] usb 6-1: no configurations [ 1792.022407][T23020] usb 6-1: can't read configurations, error -22 [ 1792.084142][T23006] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1792.113788][T23006] usb 4-1: device descriptor read/8, error -71 [ 1792.165745][T23020] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1792.191601][T30815] FAULT_INJECTION: forcing a failure. [ 1792.191601][T30815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.205008][T30815] CPU: 1 UID: 0 PID: 30815 Comm: syz.2.6738 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1792.205032][T30815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1792.205041][T30815] Call Trace: [ 1792.205048][T30815] [ 1792.205055][T30815] dump_stack_lvl+0x189/0x250 [ 1792.205081][T30815] ? __pfx____ratelimit+0x10/0x10 [ 1792.205103][T30815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1792.205123][T30815] ? __pfx__printk+0x10/0x10 [ 1792.205137][T30815] ? __might_fault+0xb0/0x130 [ 1792.205158][T30815] should_fail_ex+0x414/0x560 [ 1792.205177][T30815] _copy_from_user+0x2d/0xb0 [ 1792.205189][T30815] ___sys_recvmsg+0x12e/0x510 [ 1792.205209][T30815] ? __pfx____sys_recvmsg+0x10/0x10 [ 1792.205247][T30815] ? __might_fault+0xb0/0x130 [ 1792.205261][T30815] do_recvmmsg+0x307/0x770 [ 1792.205283][T30815] ? __pfx_do_recvmmsg+0x10/0x10 [ 1792.205307][T30815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1792.205338][T30815] __x64_sys_recvmmsg+0x190/0x240 [ 1792.205375][T30815] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1792.205389][T30815] ? rcu_is_watching+0x15/0xb0 [ 1792.205411][T30815] ? do_syscall_64+0xbe/0x3b0 [ 1792.205431][T30815] do_syscall_64+0xfa/0x3b0 [ 1792.205447][T30815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1792.205463][T30815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.205475][T30815] ? clear_bhb_loop+0x60/0xb0 [ 1792.205491][T30815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.205503][T30815] RIP: 0033:0x7f9a4158e929 [ 1792.205515][T30815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.205526][T30815] RSP: 002b:00007f9a42466038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1792.205540][T30815] RAX: ffffffffffffffda RBX: 00007f9a417b5fa0 RCX: 00007f9a4158e929 [ 1792.205550][T30815] RDX: 0000000000000008 RSI: 0000200000002d00 RDI: 0000000000000003 [ 1792.205558][T30815] RBP: 00007f9a42466090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.205566][T30815] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1792.205574][T30815] R13: 0000000000000000 R14: 00007f9a417b5fa0 R15: 00007f9a418dfa28 [ 1792.205594][T30815] [ 1792.674743][T30819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.696213][T30819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.776786][T30821] FAULT_INJECTION: forcing a failure. [ 1792.776786][T30821] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.793651][ T5919] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1792.807940][T23006] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1792.815595][T30821] CPU: 1 UID: 0 PID: 30821 Comm: syz.2.6740 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1792.815617][T30821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1792.815627][T30821] Call Trace: [ 1792.815635][T30821] [ 1792.815643][T30821] dump_stack_lvl+0x189/0x250 [ 1792.815670][T30821] ? __pfx____ratelimit+0x10/0x10 [ 1792.815693][T30821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1792.815716][T30821] ? __pfx__printk+0x10/0x10 [ 1792.815738][T30821] ? __pfx___might_resched+0x10/0x10 [ 1792.815761][T30821] ? fs_reclaim_acquire+0x7d/0x100 [ 1792.815783][T30821] should_fail_ex+0x414/0x560 [ 1792.815806][T30821] should_failslab+0xa8/0x100 [ 1792.815825][T30821] __kmalloc_noprof+0xcb/0x4f0 [ 1792.815841][T30821] ? tomoyo_encode+0x28b/0x550 [ 1792.815865][T30821] tomoyo_encode+0x28b/0x550 [ 1792.815891][T30821] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1792.815914][T30821] ? tomoyo_domain+0xd9/0x130 [ 1792.815940][T30821] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1792.815959][T30821] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1792.815980][T30821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1792.816015][T30821] ? __lock_acquire+0xab9/0xd20 [ 1792.816056][T30821] ? __fget_files+0x2a/0x420 [ 1792.816079][T30821] ? __fget_files+0x2a/0x420 [ 1792.816095][T30821] ? __fget_files+0x3a0/0x420 [ 1792.816111][T30821] ? __fget_files+0x2a/0x420 [ 1792.816132][T30821] security_file_ioctl+0xcb/0x2d0 [ 1792.816153][T30821] __se_sys_ioctl+0x47/0x170 [ 1792.816176][T30821] do_syscall_64+0xfa/0x3b0 [ 1792.816200][T30821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.816215][T30821] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1792.816231][T30821] ? clear_bhb_loop+0x60/0xb0 [ 1792.816252][T30821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.816267][T30821] RIP: 0033:0x7f9a4158e929 [ 1792.816282][T30821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.816304][T30821] RSP: 002b:00007f9a42466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.816322][T30821] RAX: ffffffffffffffda RBX: 00007f9a417b5fa0 RCX: 00007f9a4158e929 [ 1792.816334][T30821] RDX: 0000200000000340 RSI: 000000008048ae66 RDI: 0000000000000004 [ 1792.816346][T30821] RBP: 00007f9a42466090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.816356][T30821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.816366][T30821] R13: 0000000000000000 R14: 00007f9a417b5fa0 R15: 00007f9a418dfa28 [ 1792.816394][T30821] [ 1792.816413][T30821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1792.930070][T23006] usb 4-1: device descriptor read/8, error -71 [ 1792.953061][ C1] net_ratelimit: 1 callbacks suppressed [ 1792.953077][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1792.958074][ T5831] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1792.962698][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1792.970127][T23020] usb 6-1: no configurations [ 1793.119427][T23020] usb 6-1: can't read configurations, error -22 [ 1793.126994][T23020] usb usb6-port1: attempt power cycle [ 1793.139223][ T5919] usb 5-1: config 0 has no interfaces? [ 1793.150197][ T5919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1793.161281][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.184168][ T5919] usb 5-1: Product: syz [ 1793.189414][ T5919] usb 5-1: Manufacturer: syz [ 1793.201602][ T5919] usb 5-1: SerialNumber: syz [ 1793.225803][T23006] usb usb4-port1: unable to enumerate USB device [ 1793.243457][ T5919] usb 5-1: config 0 descriptor?? [ 1793.263012][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 1793.278750][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1793.289001][ T5831] usb 1-1: config 4 has too many interfaces: 33, using maximum allowed: 32 [ 1793.301725][ T5831] usb 1-1: config 4 has an invalid interface number: 177 but max is 32 [ 1793.310302][ T5831] usb 1-1: config 4 has an invalid descriptor of length 10, skipping remainder of the config [ 1793.326042][ T5831] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 33 [ 1793.338059][ T5831] usb 1-1: config 4 has no interface number 0 [ 1793.344620][ T5831] usb 1-1: config 4 interface 177 has no altsetting 0 [ 1793.354875][ T5831] usb 1-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35 [ 1793.364917][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.382168][ T5831] usb 1-1: Product: syz [ 1793.387321][ T5831] usb 1-1: Manufacturer: syz [ 1793.392619][ T5831] usb 1-1: SerialNumber: syz [ 1793.473132][T23020] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1793.506916][T23020] usb 6-1: no configurations [ 1793.513016][T23020] usb 6-1: can't read configurations, error -22 [ 1793.638810][ T5831] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1793.664359][ T5831] usb 1-1: USB disconnect, device number 76 [ 1793.673307][T23020] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1793.682493][T30825] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1793.725559][T23020] usb 6-1: no configurations [ 1793.747965][T23020] usb 6-1: can't read configurations, error -22 [ 1793.765954][T23020] usb usb6-port1: unable to enumerate USB device [ 1793.983114][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1793.990094][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1794.490558][T30837] netlink: 'syz.5.6744': attribute type 3 has an invalid length. [ 1794.530468][T30837] netlink: 766 bytes leftover after parsing attributes in process `syz.5.6744'. [ 1795.023050][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1795.030154][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1795.118601][ T5912] usb 5-1: USB disconnect, device number 53 [ 1795.503245][T23011] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1795.523005][ T5919] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1795.643043][T23020] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1795.644255][T23011] usb 4-1: device descriptor read/64, error -71 [ 1795.683042][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1795.689754][ T5919] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1795.700076][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1795.709856][ T5919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1795.722543][ T5919] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.750727][ T5919] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1795.765198][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.823536][T23020] usb 5-1: Using ep0 maxpacket: 8 [ 1795.833331][T23020] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 64, using maximum allowed: 30 [ 1795.845399][T23020] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1795.895117][T23011] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1795.912226][T23020] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1795.923618][T23020] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1795.932826][T23020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1795.947724][T23020] usb 5-1: Product: syz [ 1795.952381][T23020] usb 5-1: Manufacturer: syz [ 1795.959176][T23020] usb 5-1: SerialNumber: syz [ 1795.978666][T23020] usb 5-1: config 0 descriptor?? [ 1795.986757][T30851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.997228][T30851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.006931][ T5919] usb 3-1: GET_CAPABILITIES returned 0 [ 1796.022649][ T5919] usbtmc 3-1:16.0: can't read capabilities [ 1796.033766][T23011] usb 4-1: device descriptor read/64, error -71 [ 1796.063066][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1796.070096][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1796.149092][T23011] usb usb4-port1: attempt power cycle [ 1796.210314][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1796.232824][ T5912] usb 3-1: USB disconnect, device number 51 [ 1796.272665][T23020] usbtest 5-1:0.0: FX2 device [ 1796.284840][T23020] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1796.473926][T30865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.482988][T30865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.493211][T23011] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1796.513723][T23011] usb 4-1: device descriptor read/8, error -71 [ 1796.835664][T23011] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1796.899125][ T5831] usb 5-1: USB disconnect, device number 54 [ 1796.913729][T23011] usb 4-1: device descriptor read/8, error -71 [ 1797.029870][T23011] usb usb4-port1: unable to enumerate USB device [ 1797.103058][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1797.110180][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1797.799385][T30887] bridge0: port 1(vlan2) entered blocking state [ 1797.814339][T30887] bridge0: port 1(vlan2) entered disabled state [ 1797.851931][T30889] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.6762'. [ 1797.858361][T30887] vlan2: entered allmulticast mode [ 1797.908432][T30887] bond0: entered allmulticast mode [ 1797.924563][T30887] vlan2: entered promiscuous mode [ 1797.929617][T30887] bond0: entered promiscuous mode [ 1797.963392][T30889] debugfs: Directory 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²' with parent 'ieee80211' already present! [ 1798.025301][ T5941] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1798.143050][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1798.150142][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1798.187285][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.202204][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.232985][ T5941] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1798.259601][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.296440][ T5941] usb 1-1: config 0 descriptor?? [ 1798.435431][T30908] QAT: failed to copy from user cfg_data. [ 1798.793190][T23011] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1798.877764][ T5941] cp2112 0003:10C4:EA90.006D: unknown main item tag 0x0 [ 1798.886897][ T5941] cp2112 0003:10C4:EA90.006D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1798.953645][T23011] usb 5-1: Using ep0 maxpacket: 8 [ 1798.961958][T23011] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1798.982192][T23011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1799.009435][ T5831] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1799.011623][T23011] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1799.193043][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1799.193972][T30913] FAULT_INJECTION: forcing a failure. [ 1799.193972][T30913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.200085][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1799.247892][T23011] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.258125][ T5941] cp2112 0003:10C4:EA90.006D: Part Number: 0x82 Device Version: 0xFE [ 1799.261567][T23011] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1799.303066][T30913] CPU: 1 UID: 0 PID: 30913 Comm: syz.2.6772 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1799.303089][T30913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1799.303099][T30913] Call Trace: [ 1799.303106][T30913] [ 1799.303114][T30913] dump_stack_lvl+0x189/0x250 [ 1799.303143][T30913] ? __pfx____ratelimit+0x10/0x10 [ 1799.303166][T30913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.303189][T30913] ? __pfx__printk+0x10/0x10 [ 1799.303205][T30913] ? __might_fault+0xb0/0x130 [ 1799.303229][T30913] should_fail_ex+0x414/0x560 [ 1799.303252][T30913] _copy_from_user+0x2d/0xb0 [ 1799.303269][T30913] ppp_ioctl+0xa8a/0x19a0 [ 1799.303294][T30913] ? __pfx_ppp_ioctl+0x10/0x10 [ 1799.303317][T30913] ? __fget_files+0x2a/0x420 [ 1799.303334][T30913] ? __fget_files+0x3a0/0x420 [ 1799.303350][T30913] ? __fget_files+0x2a/0x420 [ 1799.303370][T30913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1799.303392][T30913] ? __pfx_ppp_ioctl+0x10/0x10 [ 1799.303413][T30913] __se_sys_ioctl+0xf9/0x170 [ 1799.303438][T30913] do_syscall_64+0xfa/0x3b0 [ 1799.303458][T30913] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.303478][T30913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.303494][T30913] ? clear_bhb_loop+0x60/0xb0 [ 1799.303514][T30913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.303531][T30913] RIP: 0033:0x7f9a4158e929 [ 1799.303546][T30913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.303560][T30913] RSP: 002b:00007f9a42466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.303578][T30913] RAX: ffffffffffffffda RBX: 00007f9a417b5fa0 RCX: 00007f9a4158e929 [ 1799.303591][T30913] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 1799.303603][T30913] RBP: 00007f9a42466090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.303614][T30913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.303624][T30913] R13: 0000000000000000 R14: 00007f9a417b5fa0 R15: 00007f9a418dfa28 [ 1799.303652][T30913] [ 1799.308528][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.551879][T23011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.556709][ T5941] cp2112 0003:10C4:EA90.006D: error requesting SMBus config [ 1799.569507][ T5941] cp2112 0003:10C4:EA90.006D: probe with driver cp2112 failed with error -5 [ 1799.582784][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1799.591944][ T5831] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1799.602043][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.680095][ T5831] usb 4-1: config 0 descriptor?? [ 1799.711116][ T5831] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1799.734333][ T5831] dvb-usb: bulk message failed: -22 (3/0) [ 1799.754020][ T5831] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1799.776366][ T5831] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1799.786770][ T5831] usb 4-1: media controller created [ 1799.814289][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1799.844930][ T5831] dvb-usb: bulk message failed: -22 (6/0) [ 1799.852064][ T5831] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1799.857347][T30902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.879664][T30902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.892103][T23011] usb 5-1: GET_CAPABILITIES returned 0 [ 1799.900575][T23011] usbtmc 5-1:16.0: can't read capabilities [ 1799.946718][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input136 [ 1799.992115][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 1800.002484][ T5831] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1800.121927][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1800.150175][T30919] dvb-usb: bulk message failed: -22 (4/0) [ 1800.162545][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1800.183312][ T5831] dvb-usb: error while querying for an remote control event. [ 1800.186760][ T5919] usb 5-1: USB disconnect, device number 55 [ 1800.223096][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1800.230276][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1800.363200][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1800.369007][ T5831] dvb-usb: error while querying for an remote control event. [ 1800.554542][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1800.560337][ T5831] dvb-usb: error while querying for an remote control event. [ 1800.589025][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6779'. [ 1800.598818][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6779'. [ 1800.620430][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6779'. [ 1800.733386][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1800.739372][ T5831] dvb-usb: error while querying for an remote control event. [ 1800.800378][T30941] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1800.885209][T30941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6782'. [ 1800.933153][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1800.939342][ T5831] dvb-usb: error while querying for an remote control event. [ 1800.994019][T23011] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1801.103030][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 1801.131175][ T5831] dvb-usb: error while querying for an remote control event. [ 1801.139482][T23020] usb 4-1: USB disconnect, device number 112 [ 1801.157087][T23011] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.181195][T23011] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1801.263127][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1801.270191][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1801.283163][ T5941] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1801.289939][T23011] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1801.319828][T23011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1801.330165][T23020] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1801.332267][ T5912] usb 1-1: USB disconnect, device number 77 [ 1801.362644][T23011] usb 6-1: SerialNumber: syz [ 1801.413042][ T5941] usb 5-1: device descriptor read/64, error -71 [ 1801.424659][T23011] usb 6-1: config 0 descriptor?? [ 1801.663014][ T5941] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1801.842987][ T5941] usb 5-1: device descriptor read/64, error -71 [ 1801.893172][ T5912] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1801.953354][ T5941] usb usb5-port1: attempt power cycle [ 1802.076935][ T5912] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 1802.086339][ T5912] usb 1-1: config 0 has no interface number 0 [ 1802.099377][ T5912] usb 1-1: config 0 interface 98 has no altsetting 0 [ 1802.121051][ T5912] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1802.130933][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.153548][T30960] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1802.170612][T30960] [U] J"—e:ÀÆ" [ 1802.303031][ T5941] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1802.304374][ T5912] usb 1-1: Product: syz [ 1802.315072][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1802.315171][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1802.330511][ T5912] usb 1-1: Manufacturer: syz [ 1802.512697][ T5912] usb 1-1: SerialNumber: syz [ 1802.520484][ T5912] usb 1-1: config 0 descriptor?? [ 1802.534641][ T5941] usb 5-1: device descriptor read/8, error -71 [ 1802.760540][ T5912] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1802.773805][ T5941] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1802.804075][ T5941] usb 5-1: device descriptor read/8, error -71 [ 1802.943712][ T5941] usb usb5-port1: unable to enumerate USB device [ 1803.235214][ T5912] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 1803.246771][ T5919] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1803.343022][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1803.350070][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1803.403004][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1803.418126][ T5919] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1803.429621][ T5919] usb 4-1: config 0 has no interface number 0 [ 1803.441954][ T5919] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1803.451404][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.459663][ T5919] usb 4-1: Product: syz [ 1803.463906][ T5919] usb 4-1: Manufacturer: syz [ 1803.468675][ T5919] usb 4-1: SerialNumber: syz [ 1803.478723][ T5919] usb 4-1: config 0 descriptor?? [ 1803.486520][ T5919] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1803.495679][ T5919] usb 4-1: selecting invalid altsetting 1 [ 1803.501423][ T5919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1803.513930][ T5919] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1803.525171][ T5919] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1803.533962][ T5919] usb 4-1: media controller created [ 1803.555305][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1803.691158][ T5919] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1803.698500][ T5919] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1803.707650][ T5919] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1803.782307][T23011] usb 6-1: USB disconnect, device number 8 [ 1803.848442][ T5919] usb 4-1: USB disconnect, device number 113 [ 1803.949849][T30977] loop8: detected capacity change from 0 to 16384 [ 1804.173408][T29024] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1804.336020][T29024] usb 3-1: Using ep0 maxpacket: 8 [ 1804.343407][ T5919] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1804.355710][T29024] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1804.363740][T30978] loop8: detected capacity change from 16384 to 0 [ 1804.370575][ C1] I/O error, dev loop8, sector 14848 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 1804.383603][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1804.390529][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1804.401148][T30984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6795'. [ 1804.405364][T29024] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1804.425453][T29024] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1804.442404][T29024] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1804.455809][T29024] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1804.468335][T29024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.485813][T23006] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1804.513289][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 1804.524783][ T5919] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 1804.542305][ T5919] usb 6-1: config 0 has no interface number 0 [ 1804.549920][ T5919] usb 6-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 1804.559510][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.571866][ T5919] usb 6-1: config 0 descriptor?? [ 1804.662998][T23006] usb 5-1: Using ep0 maxpacket: 8 [ 1804.669724][T23006] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1804.679186][T23006] usb 5-1: config 179 has no interface number 0 [ 1804.685964][T23006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1804.716088][ T5912] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1804.725681][T23006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1804.725714][T23006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1804.725739][T23006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1804.725764][T23006] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1804.725808][T23006] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1804.725829][T23006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.736825][T30975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.809069][T30975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.828057][T30982] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1804.834761][ T5912] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1804.846624][T29024] usb 3-1: GET_CAPABILITIES returned 0 [ 1804.852152][T29024] usbtmc 3-1:16.0: can't read capabilities [ 1804.909461][ T5919] usb 6-1: string descriptor 0 read error: -71 [ 1804.926804][ T5912] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1804.937017][T28993] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1804.950137][ T5919] snd-usb-caiaq 6-1:0.150: can't set alt interface. [ 1804.973664][T28993] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1804.987625][ T5919] usb 6-1: unable to init card! (ret=-5) [ 1804.999832][ T5912] usb 1-1: USB disconnect, device number 78 [ 1805.010972][ T5919] snd-usb-caiaq 6-1:0.150: probe with driver snd-usb-caiaq failed with error -5 [ 1805.062582][ T5941] usb 3-1: USB disconnect, device number 52 [ 1805.138397][ T5919] usb 6-1: USB disconnect, device number 9 [ 1805.164730][T23020] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input137 [ 1805.294678][ T5831] usb 5-1: USB disconnect, device number 60 [ 1805.294733][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1805.308935][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1805.410842][ T5831] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1805.423071][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1805.430189][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1805.574029][T31001] netlink: 'syz.5.6801': attribute type 3 has an invalid length. [ 1805.605400][T31001] netlink: 'syz.5.6801': attribute type 3 has an invalid length. [ 1805.653708][T31001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6801'. [ 1805.923197][T23020] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1806.083356][T23020] usb 6-1: device descriptor read/64, error -71 [ 1806.156188][T31009] netlink: 'syz.4.6804': attribute type 1 has an invalid length. [ 1806.222731][T31009] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1806.233100][T31009] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1806.241896][T31009] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1806.251122][ T5831] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1806.268510][T31009] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1806.299211][T31009] bond1: (slave geneve2): making interface the new active one [ 1806.323187][T23020] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1806.349017][T31009] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1806.406867][T31009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1806.416248][T31011] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1806.453189][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.463074][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1806.464977][T31009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1806.470318][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1806.482942][ T5831] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1806.493237][T23020] usb 6-1: device descriptor read/64, error -71 [ 1806.513532][ T5831] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1806.522578][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1806.552938][ T5831] usb 4-1: SerialNumber: syz [ 1806.555717][ T5831] usb 4-1: config 0 descriptor?? [ 1806.613581][T23020] usb usb6-port1: attempt power cycle [ 1807.015686][T31018] FAULT_INJECTION: forcing a failure. [ 1807.015686][T31018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.059163][T31018] CPU: 1 UID: 0 PID: 31018 Comm: syz.2.6806 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1807.059195][T31018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1807.059205][T31018] Call Trace: [ 1807.059213][T31018] [ 1807.059220][T31018] dump_stack_lvl+0x189/0x250 [ 1807.059248][T31018] ? __pfx____ratelimit+0x10/0x10 [ 1807.059272][T31018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.059296][T31018] ? __pfx__printk+0x10/0x10 [ 1807.059314][T31018] ? __might_fault+0xb0/0x130 [ 1807.059341][T31018] should_fail_ex+0x414/0x560 [ 1807.059366][T31018] _copy_from_user+0x2d/0xb0 [ 1807.059383][T31018] ___sys_sendmsg+0x158/0x2a0 [ 1807.059406][T31018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.059468][T31018] ? __might_fault+0xb0/0x130 [ 1807.059488][T31018] __sys_sendmmsg+0x227/0x430 [ 1807.059513][T31018] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1807.059530][T31018] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1807.059579][T31018] ? ksys_write+0x22a/0x250 [ 1807.059597][T31018] ? __pfx_ksys_write+0x10/0x10 [ 1807.059611][T31018] ? rcu_is_watching+0x15/0xb0 [ 1807.059641][T31018] __x64_sys_sendmmsg+0xa0/0xc0 [ 1807.059662][T31018] do_syscall_64+0xfa/0x3b0 [ 1807.059685][T31018] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.059706][T31018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.059723][T31018] ? clear_bhb_loop+0x60/0xb0 [ 1807.059743][T31018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.059760][T31018] RIP: 0033:0x7f9a4158e929 [ 1807.059776][T31018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.059791][T31018] RSP: 002b:00007f9a42424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1807.059808][T31018] RAX: ffffffffffffffda RBX: 00007f9a417b6160 RCX: 00007f9a4158e929 [ 1807.059821][T31018] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000008 [ 1807.059833][T31018] RBP: 00007f9a42424090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.059844][T31018] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 1807.059854][T31018] R13: 0000000000000000 R14: 00007f9a417b6160 R15: 00007f9a418dfa28 [ 1807.059882][T31018] [ 1807.152986][T23020] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1807.414444][T31021] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1807.423063][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1807.430065][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1807.529031][T31021] [U] J"—e:ÀÆ" [ 1807.713627][T23020] usb 6-1: device descriptor read/8, error -71 [ 1807.983134][T23020] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1808.045197][T23020] usb 6-1: device descriptor read/8, error -71 [ 1808.080289][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6808'. [ 1808.153301][T23020] usb usb6-port1: unable to enumerate USB device [ 1808.223244][ T31] INFO: task kworker/1:12:23012 blocked for more than 143 seconds. [ 1808.235777][ T31] Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 [ 1808.248068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1808.281120][ T31] task:kworker/1:12 state:D stack:20344 pid:23012 tgid:23012 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1808.317756][ T31] Workqueue: usb_hub_wq hub_event [ 1808.322850][ T31] Call Trace: [ 1808.339958][ T31] [ 1808.347443][ T31] __schedule+0x16f5/0x4d00 [ 1808.352005][ T31] ? schedule+0x165/0x360 [ 1808.356906][ T31] ? __pfx___schedule+0x10/0x10 [ 1808.361964][ T31] ? schedule+0x91/0x360 [ 1808.366935][ T31] schedule+0x165/0x360 [ 1808.371190][ T31] schedule_preempt_disabled+0x13/0x30 [ 1808.377653][ T31] __mutex_lock+0x724/0xe80 [ 1808.382290][ T31] ? __mutex_lock+0x51b/0xe80 [ 1808.387626][ T31] ? hub_event+0x21cb/0x4a00 [ 1808.408743][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1808.418082][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1808.436305][ T31] hub_event+0x21cb/0x4a00 [ 1808.450607][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1808.472084][ T31] ? __pfx_hub_event+0x10/0x10 [ 1808.477785][ C1] net_ratelimit: 2 callbacks suppressed [ 1808.477801][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1808.477947][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1808.513366][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1808.519311][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1808.524660][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1808.531365][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1808.537550][ T31] process_scheduled_works+0xade/0x17b0 [ 1808.543322][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1808.543484][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1808.557554][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1808.564000][ T31] worker_thread+0x8a0/0xda0 [ 1808.568736][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1808.590293][ T31] ? __kthread_parkme+0x7b/0x200 [ 1808.595700][ T31] kthread+0x70e/0x8a0 [ 1808.614383][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1808.619545][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.630107][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1808.636386][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1808.641606][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.646241][ T31] ret_from_fork+0x3fc/0x770 [ 1808.650997][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1808.656503][ T31] ? __switch_to_asm+0x39/0x70 [ 1808.661280][ T31] ? __switch_to_asm+0x33/0x70 [ 1808.666680][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.671283][ T31] ret_from_fork_asm+0x1a/0x30 [ 1808.676126][ T31] [ 1808.692465][ T31] [ 1808.692465][ T31] Showing all locks held in the system: [ 1808.701152][ T31] 1 lock held by khungtaskd/31: [ 1808.713262][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1808.737441][ T31] 2 locks held by getty/5587: [ 1808.742205][ T31] #0: ffff88814c07b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1808.752127][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1808.762485][ T31] 5 locks held by kworker/1:7/23007: [ 1808.767807][ T31] #0: ffff888144281548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1808.779260][ T31] #1: ffffc900051cfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1808.791708][ T31] #2: ffff888144fc7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1808.800722][ T31] #3: ffff888144feb510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1808.810725][ T31] #4: ffff888144b3de68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1808.822383][ T31] 5 locks held by kworker/1:12/23012: [ 1808.829708][ T31] #0: ffff888144281548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1808.842394][ T31] #1: ffffc9000b94fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1808.858556][ T31] #2: ffff888144ff6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1808.867725][ T31] #3: ffff888145319510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1808.880038][ T31] #4: ffff888144b3de68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1808.889985][ T31] 3 locks held by kworker/1:0/28993: [ 1808.895503][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1808.906534][ T31] #1: ffffc9000b8efbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1808.918769][ T31] #2: ffffffff8dfe44d0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xff/0x210 [ 1808.929415][ T31] [ 1808.931750][ T31] ============================================= [ 1808.931750][ T31] [ 1808.940927][ T31] NMI backtrace for cpu 1 [ 1808.940941][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1808.940961][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1808.940978][ T31] Call Trace: [ 1808.940986][ T31] [ 1808.940993][ T31] dump_stack_lvl+0x189/0x250 [ 1808.941018][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1808.941039][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1808.941062][ T31] ? __pfx__printk+0x10/0x10 [ 1808.941093][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1808.941116][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1808.941133][ T31] ? _printk+0xcf/0x120 [ 1808.941154][ T31] ? __pfx__printk+0x10/0x10 [ 1808.941171][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1808.941193][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1808.941214][ T31] watchdog+0xfee/0x1030 [ 1808.941237][ T31] ? watchdog+0x1de/0x1030 [ 1808.941264][ T31] kthread+0x70e/0x8a0 [ 1808.941284][ T31] ? __pfx_watchdog+0x10/0x10 [ 1808.941301][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.941321][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1808.941342][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1808.941362][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.941381][ T31] ret_from_fork+0x3fc/0x770 [ 1808.941404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1808.941428][ T31] ? __switch_to_asm+0x39/0x70 [ 1808.941442][ T31] ? __switch_to_asm+0x33/0x70 [ 1808.941456][ T31] ? __pfx_kthread+0x10/0x10 [ 1808.941475][ T31] ret_from_fork_asm+0x1a/0x30 [ 1808.941506][ T31] [ 1808.941513][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1809.100672][ C0] NMI backtrace for cpu 0 [ 1809.100688][ C0] CPU: 0 UID: 0 PID: 27279 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1809.100713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1809.100724][ C0] RIP: 0010:__lock_acquire+0x316/0xd20 [ 1809.100750][ C0] Code: 8b 54 24 0c 83 e2 01 c1 e2 12 44 09 e2 41 c1 e6 14 41 09 d6 8b 54 24 10 c1 e2 13 c1 e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 <45> 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f [ 1809.100764][ C0] RSP: 0018:ffffc90005837ab0 EFLAGS: 00000006 [ 1809.100779][ C0] RAX: 0000000000000000 RBX: ffffffff99d3bc58 RCX: 0000000000000000 [ 1809.100790][ C0] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffff888024ce3c00 [ 1809.100801][ C0] RBP: 00000000000c0000 R08: 0000000000000000 R09: ffffffff84c7e275 [ 1809.100812][ C0] R10: dffffc0000000000 R11: fffffbfff1f420df R12: 0000000000000000 [ 1809.100823][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: ffff888024ce46f0 [ 1809.100835][ C0] FS: 00005555708a5500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 1809.100849][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1809.100860][ C0] CR2: 00007fe36f380ab8 CR3: 0000000071612000 CR4: 00000000003526f0 [ 1809.100874][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1809.100884][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1809.100894][ C0] Call Trace: [ 1809.100901][ C0] [ 1809.100910][ C0] ? __debug_object_init+0x85/0x3c0 [ 1809.100926][ C0] lock_acquire+0x120/0x360 [ 1809.100945][ C0] ? __debug_object_init+0x85/0x3c0 [ 1809.100965][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1809.100983][ C0] ? __debug_object_init+0x85/0x3c0 [ 1809.100998][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1809.101020][ C0] __debug_object_init+0x85/0x3c0 [ 1809.101034][ C0] ? __might_fault+0xb0/0x130 [ 1809.101052][ C0] hrtimer_nanosleep+0xab/0x360 [ 1809.101076][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1809.101099][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1809.101122][ C0] __se_sys_clock_nanosleep+0x2f1/0x380 [ 1809.101144][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1809.101163][ C0] ? rcu_is_watching+0x15/0xb0 [ 1809.101186][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1809.101208][ C0] do_syscall_64+0xfa/0x3b0 [ 1809.101230][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.101245][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1809.101260][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1809.101276][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.101291][ C0] RIP: 0033:0x7fe4b03c11e5 [ 1809.101304][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1809.101316][ C0] RSP: 002b:00007fe4b06dfd40 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1809.101331][ C0] RAX: ffffffffffffffda RBX: 00000000000002c6 RCX: 00007fe4b03c11e5 [ 1809.101342][ C0] RDX: 00007fe4b06dfd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1809.101353][ C0] RBP: 00007fe4b06dfdec R08: 0000000000000000 R09: 0000000000000000 [ 1809.101363][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000d9 [ 1809.101373][ C0] R13: 000000000000004c R14: 00000000001b968a R15: 00007fe4b06dfe40 [ 1809.101390][ C0] [ 1809.101964][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1809.430816][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1809.442605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1809.452650][ T31] Call Trace: [ 1809.455923][ T31] [ 1809.458872][ T31] dump_stack_lvl+0x99/0x250 [ 1809.463467][ T31] ? __asan_memcpy+0x40/0x70 [ 1809.468050][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1809.473243][ T31] ? __pfx__printk+0x10/0x10 [ 1809.477832][ T31] panic+0x2db/0x790 [ 1809.481727][ T31] ? __pfx_panic+0x10/0x10 [ 1809.486141][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1809.491952][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1809.497316][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1809.503474][ T31] watchdog+0x102d/0x1030 [ 1809.507805][ T31] ? watchdog+0x1de/0x1030 [ 1809.512217][ T31] kthread+0x70e/0x8a0 [ 1809.516279][ T31] ? __pfx_watchdog+0x10/0x10 [ 1809.520950][ T31] ? __pfx_kthread+0x10/0x10 [ 1809.525531][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1809.530718][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1809.535905][ T31] ? __pfx_kthread+0x10/0x10 [ 1809.540491][ T31] ret_from_fork+0x3fc/0x770 [ 1809.545076][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1809.550182][ T31] ? __switch_to_asm+0x39/0x70 [ 1809.554941][ T31] ? __switch_to_asm+0x33/0x70 [ 1809.559692][ T31] ? __pfx_kthread+0x10/0x10 [ 1809.564273][ T31] ret_from_fork_asm+0x1a/0x30 [ 1809.569037][ T31] [ 1809.572277][ T31] Kernel Offset: disabled [ 1809.576591][ T31] Rebooting in 86400 seconds..