last executing test programs: 1m37.636794043s ago: executing program 3 (id=885): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x100) syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x2c, 0x6, 0x0, @local, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "8e35c852cd21e019c230df54e1d742073f52a61b"}]}}}}}}}}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r1, 0x9620}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0xa00, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x365e) 1m37.431722387s ago: executing program 4 (id=886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x102) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x2005}}}}]}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11", 0x3}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a"], 0x1e4}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000280)="de716c070000007300000000000000000000000000d564d8522c43be927c6dddb454bdc12c89d70aadbc8c76e35690af4bce2b8778aea8e9b7808f8c7b80c5b3dfb22228fef3c5ab78eb618f62f72a2b48c198d364029a96370be5fdd1dc49baa6e10413f9f8e3d7881e6e058f4a2a2b2a82e771020b7c95ea705bc42967534e5e02e5979b9f66c3c90af18a18409e8c41254fe6b4ad8cc964d1bf3e2bf15cd6d5856702f92e47aee4a8b48575332760b796b43d54b74700ac542b4d78ec512c39127b9c55a54a0fa1e21e0541474b121a0c1b2dde0acc7891d6855fc89ea7d47e9ce250d56098c14ff7ab87af9f788423a4", 0xf2) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.system.Security\x00') shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000380)={r6, 0xffff0000}, 0x8) 1m36.543762343s ago: executing program 3 (id=889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x428}, 0x1, 0x0, 0x0, 0x20048834}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1m35.925119205s ago: executing program 4 (id=890): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x5414c0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x24, 0x9, 0x0, 0x0, {0x7}, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private2}]}, 0x28}}, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f00000000c0)="0ebe", 0x2, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f00000000c0)={0x8, r2}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x34324142}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000140)=0x2) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000000300)={0x6, &(0x7f00000004c0)=[{0x3, 0x1000, &(0x7f0000000680)="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", 0x0, 0x1}, {0x7b, 0x22, &(0x7f00000001c0)="cc6501a1696486dc9a80405f3cf9590c459cb8882c51e3e653e5d5b4cc90601e0069", 0x1, 0x1}, {0x47d5722f, 0x81, &(0x7f0000000200)="fcb568d67d6aab03391b7c1cb8381f32d4f627aaacbee6c4e8b49570f05b93e26234243f4e55d36c75d1a0cda204bda53d820f9f6f31b61b5141930bf80d978b3896dbfeaaee578d66bcee410ff055799b1a6e0b0d55f443d5ce9c260873f9c12432fa4768572b7d637809f0983e1acfdb16a65b10ab9d2294704e8cd4692b9b70", 0x0, 0x1}, {0x80000001, 0x1000, &(0x7f0000001680)="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", 0x0, 0x1}, {0x2, 0x19, &(0x7f00000002c0)="a6714a149bd325ac26c8083fe9e779034b98fe4340c38f0267", 0x1}, {0xffffffff, 0x75, &(0x7f0000000380)="442b7fd4ac0fb7fe5189b6005b532cccade5739070e5fc1d52ff8bd644c5034d8ea8fdd28bd17ed7bbb547b63c99d91c7f23748a44fb4d14d64047eaa674b6845e75edb913a3d87e4f83f9d11739815a812865f679cad748cb6c9e73809497f04e44ca7232751de483e8fd143db074c9df3fee8ba1", 0x1, 0x1}]}) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1003, @multicast, 'ip_vti0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'veth1_to_batadv\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) socket(0x2, 0x2, 0x9) connect$pppoe(r6, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x20, 0xb, 0x4, "92e1904a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x85, 0x3, '9\x001'}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000002680)={0x48, 0x5, r2}) 1m35.320275029s ago: executing program 2 (id=893): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000100000018f200000000861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async, rerun: 64) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) (async) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) (async, rerun: 64) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x27) (async, rerun: 32) r8 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r4, 0x71) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) (async, rerun: 64) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (rerun: 64) 1m33.74679974s ago: executing program 4 (id=896): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002300)=@abs={0x0, 0x0, 0x10}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r3 = syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0xf5ff, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180), 0x0) 1m33.246081742s ago: executing program 3 (id=899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000940), 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) 1m32.698179495s ago: executing program 2 (id=902): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x40, 0x9, 0x50, @loopback, @rand_addr=' \x01\x00', 0x0, 0x1, 0xfff, 0x8}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x9, "b3451e9a5576dfebdfe00dd706369369afcf5a6b2cfd3faf2fa24c82f0837919"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8000000, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x280}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x7}, {0x4, 0x2, 0x4}, 0xff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x340) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 1m32.553919704s ago: executing program 0 (id=903): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000011c0)={0x0, 0x4, 0x8, 0x0, 0xfffffffe, 0xfa000, 0x65f40}) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m32.310950286s ago: executing program 1 (id=904): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000100)=0x336) 1m32.186168032s ago: executing program 0 (id=905): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)}}], 0x2, 0x240080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}}}], 0x38}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="39c55cca40047342a934efb1552f4356a8cb9d0f759a1f61b529901bd7829ef62b96f3fdd92b70eab9df17deedd8358b5fa8ea9433e1b93a10e6476e4f9c957dc1a5137551aefde34f72d5f75da954c74258bde6a364ecdd1e5217490a61d44222842921e1f622f6e9cf41217e1cdb5673938ec063856c6b233f2cc297e628ba363e087c988139d1ba31484f438efa4c8854b59c5858058691ef19d5c29a45f24f787bfc947bf0906ec356c3710c5d5f5214ce999a850769e56164e588ac01d9135c6099fdb15db428384a726e857faa32ad6c7a767ac6e2ed5c22d13b2bdbe996fefe3eb1a223b7c561bc515a8a87f80113", 0xf2}, {&(0x7f00000003c0)="a7977527599f45e201d222d7c50f440b58502d85cd5a07df98d675757315a15ea338cc0fa199ca71cc1d20ecb58d741c3b3846617fd7952785235ebab757e4311c29216862e905c6d3fe83057c476eb83964e94ce46e7ba2b3e2d1d3ae49a20d61200dd92fa0c277ec1baf5f2ac053bd2c411e346c00b913be0fc08120cc1056639c65f3c0d9ca177ec20c388c04da8a0657dc517194d06a31544ce937d51930c96e9dced93d4b0baaaf4773", 0xac}, {&(0x7f00000004c0)="8e70ce7c3656505d44ac4b23ead23e2c03e172a325045299d9fb4d50b39e17d485570a80311b15349a4eb0883dba3897ffecc26be8c151b83393f9ddc0f53f2fa09a50cb8ee00e86b02b7e47b2a547f3ecad1cbf2fcf657c3072ff2410d76c42a947f8ffc734b08a0365a99592558305fbca5de7bc3351edab41ba9feb2e90727e7643fa3dc3eb8b90f9715ed5ae217a99f2c3c8404af8a9f3f5401b89a7d8e7e400aa32dbc6b50f5d3a3ce0c3354c858dfda7a875437b115182a51b972f7889a680a3c942c8e1f6f2ba42c37afd3935eddc8df747c587d83cb1b53b56741ea53bc74e56450a9ec6a34c09", 0xeb}], 0x3, &(0x7f0000002b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4581ae0c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x64, 0x0, 0x7, {[@end, @end, @end, @timestamp={0x44, 0x24, 0x2c, 0x0, 0x3, [0x9, 0x7f, 0x80, 0x2, 0x3ff, 0x2, 0x1b, 0x95]}, @end, @end, @lsrr={0x83, 0x7, 0x5f, [@broadcast]}, @timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0xf, [{@broadcast, 0x2}, {@loopback, 0x4}, {@multicast2, 0x812a}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x600000}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_int={{0x14}}], 0xf8}}, {{&(0x7f0000001740)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002900), 0x0, &(0x7f0000002c80)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9d}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x7b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @rand_addr=0x64010100, @empty, @local, @multicast2, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x94, 0x0, 0x2, [0x9, 0x7fff, 0xfff, 0x5, 0x8, 0x6, 0xddd5, 0x8, 0x80, 0x8001]}, @end, @rr={0x7, 0x1b, 0xd7, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}]}, @end, @generic={0x86, 0x8, "e1eb28c93304"}, @cipso={0x86, 0x4f, 0x1, [{0x6, 0x6, "a8288b96"}, {0x6, 0x2}, {0x6, 0xb, "286fa9848b5ba365d0"}, {0x0, 0xd, "5016d2b1a579955637abdc"}, {0x0, 0x3, "ad"}, {0x2, 0xa, "5add38e8cc6719a0"}, {0x0, 0x10, "61afe2604c0e4fd70e2c79b7240a"}, {0x1, 0x5, "67ec96"}, {0x2, 0x7, "973b12bf6f"}]}, @end, @timestamp_prespec={0x44, 0x24, 0x9e, 0x3, 0x8, [{@empty, 0x200}, {@remote, 0x9}, {@multicast2, 0x5}, {@rand_addr=0x64010902, 0x10001}]}, @generic={0x82, 0x2}]}}}, @ip_retopts={{0x10}}], 0x180}}], 0x3, 0x40012) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="8a000000c0240000280012800b000100697036746e6c00001800028014000300ff8b"], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x82, 0xc0100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0xe) 1m31.879033871s ago: executing program 0 (id=906): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 1m31.383763111s ago: executing program 0 (id=907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000400100"]) ioctl$sock_proto_private(r1, 0x8913, &(0x7f0000000540)="d8d90ef9b33a") 1m31.083906379s ago: executing program 3 (id=908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'veth1_to_bond\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd26, 0xa5dfdbfb, {0x0, 0x0, 0x0, r3, 0x4008, 0x16201}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x26, r3}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 1m30.935781713s ago: executing program 0 (id=909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000140)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x428}, 0x1, 0x0, 0x0, 0x20048834}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1m30.813738845s ago: executing program 4 (id=910): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000001c0)={0x1, 0x1}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9911eaea", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542600008805c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c3400098028000080060001000a00000014000200fc0100000000000000000000000000010500030003000000040000805e000080"], 0xac}, 0x1, 0x0, 0x0, 0x44015}, 0x20000010) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)="b6b06897370bc199d3414a8edc54435e590b47c41260cd1c9f9c51146e4ed3a5a189d7e31d1e3f447a475603", 0x2c, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8, 0x41}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001200)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done={0x400c6313}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x400000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 1m30.419912483s ago: executing program 3 (id=911): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={{}, "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000080)=0x2) 1m30.080656165s ago: executing program 2 (id=912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x5000000) 1m30.00943865s ago: executing program 3 (id=913): open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x197600) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 1m29.751843248s ago: executing program 2 (id=914): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24c01, 0x90) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 1m29.388120973s ago: executing program 2 (id=915): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m29.172458444s ago: executing program 2 (id=916): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x10000, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x40}], 0x1, 0x4008000) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "91aac751"}]}}, 0x0}, 0x0) process_madvise(r3, &(0x7f00000010c0)=[{0x0}, {&(0x7f00000000c0)='|', 0x1}], 0x2, 0x10, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0xfffc, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x9, 0x100, @void}}}}}}}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000480)) 1m29.091802505s ago: executing program 1 (id=917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000", @ANYRES32=0x0], 0xb8}}, 0x0) (fail_nth: 4) 1m28.807143814s ago: executing program 1 (id=918): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x7ff, @mcast1, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x3c) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000a) 1m28.761524596s ago: executing program 0 (id=919): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000640)={0x7a, 0x7, {}, {0xee00}, 0x7, 0x8000000000000000}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000800)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000003c0)="b2b1ab71dd4daa2be984ce881bbf84d610372932b865e8c985c8a65a06f95d3a0baedb884c0d2f17b7e6fbfbc764198828c639c9c8feb65f959a604fe5852610a8549ef7550327e00fbf07e46c922cc7d9efa4a8979d0feba11ef9ca0b78d91a50fe79954fb0c17dbb52f5d80458d64d3ab69c44d6d359e4dd37201270b1938f2d9d1636344bca4a521c6a7aaaf1f89370f38a5bf4537fb2bb5a79d527a2ab76ff82655539834d5131cceb347f", 0xad}, {&(0x7f0000000480)="58645e3e45a361ed32224d98580e139a181ddede94d4b9d55dd5fa8cd93c50c6cafeb78ce6b05be83a31003fe903162bfcf6b07e252a9d4826411548a2e035e07b5827259fe279221a21ad22c145952513b7f15f886e23ca24b462edd2a42f4a2e8681235c54d948ca80379f1b60a86f68f9fe0e1b7dfd235e008b9a7e255483d910f0cf222dee56b021349343bf", 0x8e}], 0x2, 0x0, 0x0, 0x4000881}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="4dffba1cdd51a1f61979f73f19b3caf41a96d188f9ec64808aa8e1a95a96d04ab8f733161cf7a08533e48733582d01c0c502fad1f06ac075956cdef3d9e6065ca5fcae53b40c5ba03ca09ad9af9fbc7655464acfe55b50d3bc10635eddb56f6c3026060d69d7a782e411ef09f3a133968c23fac825e737661fb115106759f06e3abb777f3d39fe8c121c24f353cbf5e7bf5b8a3157dd7a55495eab995164ebf1729edac901427a190f3feba6662314425f107aba25591daa25ce6c11ebafe58cf6fa661198335553b6de5dd998634161de5430ab4264c871e592239f5d2fe299245448479d5c873f2df47ea560c25ec78a472a", 0xf3}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0]}}], 0x58, 0x40}}], 0x2, 0x20044044) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x6, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89fe3719ac50b348, 0x0) syz_usb_connect(0x3, 0x5f, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b3019c28", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0xfd3) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x1, 0x55, 0xf8, 0x6, 0xff, [], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x1}}]}}]}}]}}, 0x0) 1m28.551841445s ago: executing program 1 (id=920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r5 = accept4(r1, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r10, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) write$cgroup_pid(r9, &(0x7f0000000080), 0xfdef) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) 1m28.295425882s ago: executing program 1 (id=921): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2, 0x0, 0x0, 0xf000000}, 0x4000000) 1m28.003564349s ago: executing program 1 (id=922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x200, 0x2, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x64) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x80000001}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x8000000000000000, 0x8000}) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x40200) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f0000000140)=""/177, 0x3, 0xb1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x5, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0xc, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x6}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.501025602s ago: executing program 4 (id=923): r0 = socket(0x10, 0x3, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='c'], 0x0, 0x0, 0x2) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="009846b5360dbe042db6b03f5ac587fad2f1460b91c7233837014eef023512fb4fbca60befff00004c0a9edb77f8eda47e8df2a2844810fab156b9b5843ff0ddf4d8c464de2753da032ad7466fa533c9827c7b750c7fcfc842193bdb30d412f4846854d24432240492ce1ce6b2", 0x6d}], 0x1) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ioctl$UI_ABS_SETUP(r6, 0x401c5504, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x29, 0xb, 0x70bd27, 0x0, {0x5}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4080080) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRESOCT=r6, @ANYRES64=r7, @ANYRESHEX=r4, @ANYRES16=r4, @ANYRESOCT=0x0], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 1m12.67053746s ago: executing program 4 (id=924): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x54f5, 0x0, 0x0, 0x1], [0x20000000, 0x4fc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x6], [0x3ff, 0x5, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x3]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {0x0, 0x5}], '\x00', 0x6b4}) 1m3.51987707s ago: executing program 32 (id=919): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000640)={0x7a, 0x7, {}, {0xee00}, 0x7, 0x8000000000000000}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000800)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000003c0)="b2b1ab71dd4daa2be984ce881bbf84d610372932b865e8c985c8a65a06f95d3a0baedb884c0d2f17b7e6fbfbc764198828c639c9c8feb65f959a604fe5852610a8549ef7550327e00fbf07e46c922cc7d9efa4a8979d0feba11ef9ca0b78d91a50fe79954fb0c17dbb52f5d80458d64d3ab69c44d6d359e4dd37201270b1938f2d9d1636344bca4a521c6a7aaaf1f89370f38a5bf4537fb2bb5a79d527a2ab76ff82655539834d5131cceb347f", 0xad}, {&(0x7f0000000480)="58645e3e45a361ed32224d98580e139a181ddede94d4b9d55dd5fa8cd93c50c6cafeb78ce6b05be83a31003fe903162bfcf6b07e252a9d4826411548a2e035e07b5827259fe279221a21ad22c145952513b7f15f886e23ca24b462edd2a42f4a2e8681235c54d948ca80379f1b60a86f68f9fe0e1b7dfd235e008b9a7e255483d910f0cf222dee56b021349343bf", 0x8e}], 0x2, 0x0, 0x0, 0x4000881}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="4dffba1cdd51a1f61979f73f19b3caf41a96d188f9ec64808aa8e1a95a96d04ab8f733161cf7a08533e48733582d01c0c502fad1f06ac075956cdef3d9e6065ca5fcae53b40c5ba03ca09ad9af9fbc7655464acfe55b50d3bc10635eddb56f6c3026060d69d7a782e411ef09f3a133968c23fac825e737661fb115106759f06e3abb777f3d39fe8c121c24f353cbf5e7bf5b8a3157dd7a55495eab995164ebf1729edac901427a190f3feba6662314425f107aba25591daa25ce6c11ebafe58cf6fa661198335553b6de5dd998634161de5430ab4264c871e592239f5d2fe299245448479d5c873f2df47ea560c25ec78a472a", 0xf3}], 0x1, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0]}}], 0x58, 0x40}}], 0x2, 0x20044044) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x6, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$restrict_keyring(0x1f, 0xfffffffffffffffc, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x89fe3719ac50b348, 0x0) syz_usb_connect(0x3, 0x5f, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b3019c28", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10162, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r8, &(0x7f0000000bc0)={0x2020}, 0xfd3) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x9e, 0xc4, 0x5e, 0x20, 0x9fb, 0xebbe, 0x395d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xd, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x1, 0x55, 0xf8, 0x6, 0xff, [], [{{0x9, 0x5, 0x1, 0xc, 0x8, 0x3, 0x1}}]}}]}}]}}, 0x0) 0s ago: executing program 33 (id=922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x200, 0x2, 0x0, 0x7fffffff}]}) madvise(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x64) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x80000001}, &(0x7f0000000080)={&(0x7f0000000040)}) r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0xc) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x8000000000000000, 0x8000}) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x40200) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f0000000140)=""/177, 0x3, 0xb1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x5, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0xc, @loopback}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x6}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): lNumber: syz [ 297.492528][ T43] usb 1-1: config 0 descriptor?? [ 297.882391][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.892581][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.995814][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 298.338970][ T10] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 298.438606][ T8337] fuse: Bad value for 'user_id' [ 298.444661][ T8337] fuse: Bad value for 'user_id' [ 298.601560][ T8339] FAULT_INJECTION: forcing a failure. [ 298.601560][ T8339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.617264][ T8339] CPU: 0 UID: 0 PID: 8339 Comm: syz.3.640 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 298.617295][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.617308][ T8339] Call Trace: [ 298.617317][ T8339] [ 298.617326][ T8339] dump_stack_lvl+0x189/0x250 [ 298.617370][ T8339] ? __pfx____ratelimit+0x10/0x10 [ 298.617402][ T8339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.617436][ T8339] ? __pfx__printk+0x10/0x10 [ 298.617474][ T8339] should_fail_ex+0x414/0x560 [ 298.617513][ T8339] _copy_to_user+0x31/0xb0 [ 298.617543][ T8339] simple_read_from_buffer+0xe1/0x170 [ 298.617572][ T8339] proc_fail_nth_read+0x1df/0x250 [ 298.617603][ T8339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.617634][ T8339] ? rw_verify_area+0x258/0x650 [ 298.617668][ T8339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.617696][ T8339] vfs_read+0x1fd/0x980 [ 298.617723][ T8339] ? __pfx___mutex_lock+0x10/0x10 [ 298.617758][ T8339] ? __pfx_vfs_read+0x10/0x10 [ 298.617780][ T8339] ? __fget_files+0x2a/0x420 [ 298.617810][ T8339] ? __fget_files+0x3a0/0x420 [ 298.617834][ T8339] ? __fget_files+0x2a/0x420 [ 298.617870][ T8339] ksys_read+0x145/0x250 [ 298.617894][ T8339] ? __pfx_ksys_read+0x10/0x10 [ 298.617912][ T8339] ? rcu_is_watching+0x15/0xb0 [ 298.617938][ T8339] ? do_syscall_64+0xbe/0x3b0 [ 298.617975][ T8339] do_syscall_64+0xfa/0x3b0 [ 298.618006][ T8339] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.618037][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.618058][ T8339] ? clear_bhb_loop+0x60/0xb0 [ 298.618085][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.618106][ T8339] RIP: 0033:0x7f310878d33c [ 298.618134][ T8339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.618153][ T8339] RSP: 002b:00007f31096ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.618175][ T8339] RAX: ffffffffffffffda RBX: 00007f31089b5fa0 RCX: 00007f310878d33c [ 298.618192][ T8339] RDX: 000000000000000f RSI: 00007f31096ae0a0 RDI: 0000000000000004 [ 298.618205][ T8339] RBP: 00007f31096ae090 R08: 0000000000000000 R09: 0000000000000000 [ 298.618219][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.618232][ T8339] R13: 0000000000000000 R14: 00007f31089b5fa0 R15: 00007f3108adfa28 [ 298.618265][ T8339] [ 298.854882][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.964070][ T8329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.145478][ T8344] binder: 8343:8344 ioctl c018620c 200000000000 returned -1 [ 299.414457][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 299.544341][ T43] usb 4-1: device descriptor read/64, error -71 [ 299.785601][ T10] usb 3-1: USB disconnect, device number 31 [ 299.792879][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 299.814303][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 299.968029][ T43] usb 4-1: device descriptor read/64, error -71 [ 299.980234][ T5922] usb 1-1: USB disconnect, device number 27 [ 300.037910][ T8354] xt_TCPMSS: Only works on TCP SYN packets [ 300.085625][ T43] usb usb4-port1: attempt power cycle [ 300.184351][ T5896] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 300.394474][ T5922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 300.408429][ T5896] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.420278][ T5896] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.451789][ T5896] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.454324][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 300.466312][ T5896] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 300.489504][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.505089][ T43] usb 4-1: device descriptor read/8, error -71 [ 300.524126][ T5896] usb 5-1: config 0 descriptor?? [ 300.552018][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.625096][ T8369] netlink: 3 bytes leftover after parsing attributes in process `syz.2.649'. [ 300.664589][ T5922] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.672326][ T5922] usb 1-1: can't read configurations, error -71 [ 300.814573][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 300.835219][ T43] usb 4-1: device descriptor read/8, error -71 [ 300.945315][ T43] usb usb4-port1: unable to enumerate USB device [ 300.963690][ T5896] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 301.395197][ T8349] xt_connbytes: Forcing CT accounting to be enabled [ 301.424544][ T8349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.510715][ T8352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.894364][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 302.054318][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 302.066498][ T5922] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 302.078500][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.088927][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 302.102826][ T5922] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 302.112147][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.132274][ T5922] usb 1-1: config 0 descriptor?? [ 302.228859][ T5896] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 302.248174][ T5896] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 302.284269][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 302.434436][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 302.446685][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 302.459345][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 302.476532][ T10] usb 2-1: SerialNumber: syz [ 302.491050][ T10] usb 2-1: config 0 descriptor?? [ 302.531554][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 302.547209][ T10] usb 2-1: Detected FT232A [ 302.557557][ T5922] samsung 0003:0419:0001.000F: item fetching failed at offset 10/11 [ 302.571404][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 302.600195][ T5922] samsung 0003:0419:0001.000F: parse failed [ 302.623700][ T5922] samsung 0003:0419:0001.000F: probe with driver samsung failed with error -22 [ 302.810505][ T5922] usb 5-1: USB disconnect, device number 20 [ 302.851220][ T10] usb 1-1: USB disconnect, device number 29 [ 303.144634][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 303.324273][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 303.379217][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 303.395313][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.403583][ T9] usb 4-1: Product: syz [ 303.411581][ T9] usb 4-1: Manufacturer: syz [ 303.418507][ T9] usb 4-1: SerialNumber: syz [ 303.429120][ T9] usb 4-1: config 0 descriptor?? [ 303.447457][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 303.613785][ T8407] netlink: 56 bytes leftover after parsing attributes in process `syz.4.659'. [ 303.664132][ T8406] random: crng reseeded on system resumption [ 303.692290][ T8406] FAULT_INJECTION: forcing a failure. [ 303.692290][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 303.942089][ T8388] netlink: 'syz.3.654': attribute type 6 has an invalid length. [ 303.949982][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.0.660 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 303.950005][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.950017][ T8406] Call Trace: [ 303.950024][ T8406] [ 303.950030][ T8406] dump_stack_lvl+0x189/0x250 [ 303.950057][ T8406] ? __pfx____ratelimit+0x10/0x10 [ 303.950079][ T8406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.950103][ T8406] ? __pfx__printk+0x10/0x10 [ 303.950123][ T8406] ? __pfx___might_resched+0x10/0x10 [ 303.950140][ T8406] should_fail_ex+0x414/0x560 [ 303.950166][ T8406] should_failslab+0xa8/0x100 [ 303.950184][ T8406] __kmalloc_cache_noprof+0x70/0x3d0 [ 303.950199][ T8406] ? memory_bm_create+0x134/0xdc0 [ 303.950220][ T8406] memory_bm_create+0x134/0xdc0 [ 303.950246][ T8406] ? __kasan_kmalloc+0x93/0xb0 [ 303.950261][ T8406] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 303.950281][ T8406] create_basic_memory_bitmaps+0x98/0x3d0 [ 303.950304][ T8406] snapshot_open+0x1aa/0x280 [ 303.950326][ T8406] ? __pfx_snapshot_open+0x10/0x10 [ 303.950346][ T8406] misc_open+0x2b9/0x330 [ 303.950374][ T8406] chrdev_open+0x4cc/0x5e0 [ 303.950394][ T8406] ? __pfx_chrdev_open+0x10/0x10 [ 303.950416][ T8406] ? __pfx_chrdev_open+0x10/0x10 [ 303.950432][ T8406] do_dentry_open+0xdf3/0x1970 [ 303.950463][ T8406] vfs_open+0x3b/0x340 [ 303.950479][ T8406] ? path_openat+0x2ecd/0x3830 [ 303.950509][ T8406] path_openat+0x2ee5/0x3830 [ 303.950530][ T8406] ? arch_stack_walk+0xfc/0x150 [ 303.950570][ T8406] ? __pfx_path_openat+0x10/0x10 [ 303.950589][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.950619][ T8406] do_filp_open+0x1fa/0x410 [ 303.950639][ T8406] ? __lock_acquire+0xab9/0xd20 [ 303.950661][ T8406] ? __pfx_do_filp_open+0x10/0x10 [ 303.950698][ T8406] ? _raw_spin_unlock+0x28/0x50 [ 303.950716][ T8406] ? alloc_fd+0x64c/0x6c0 [ 303.950740][ T8406] do_sys_openat2+0x121/0x1c0 [ 303.950762][ T8406] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.950782][ T8406] ? ksys_write+0x22a/0x250 [ 303.950797][ T8406] ? __pfx_ksys_write+0x10/0x10 [ 303.950809][ T8406] ? rcu_is_watching+0x15/0xb0 [ 303.950825][ T8406] __x64_sys_openat+0x138/0x170 [ 303.950848][ T8406] do_syscall_64+0xfa/0x3b0 [ 303.950869][ T8406] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.950889][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.950903][ T8406] ? clear_bhb_loop+0x60/0xb0 [ 303.950920][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.950937][ T8406] RIP: 0033:0x7f99a038e929 [ 303.950950][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.950963][ T8406] RSP: 002b:00007f99a112a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.950978][ T8406] RAX: ffffffffffffffda RBX: 00007f99a05b5fa0 RCX: 00007f99a038e929 [ 303.950989][ T8406] RDX: 00000000000c2d41 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 303.950999][ T8406] RBP: 00007f99a112a090 R08: 0000000000000000 R09: 0000000000000000 [ 303.951008][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.951016][ T8406] R13: 0000000000000000 R14: 00007f99a05b5fa0 R15: 00007f99a06dfa28 [ 303.951038][ T8406] [ 304.011447][ T8388] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.098821][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.283758][ T5896] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 304.293856][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 304.301650][ T9] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 304.310397][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.371899][ T9] usb 4-1: USB disconnect, device number 48 [ 304.480341][ T5896] usb 5-1: config 0 has no interfaces? [ 304.497402][ T5896] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 304.506673][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.518478][ T5896] usb 5-1: Product: syz [ 304.525531][ T5896] usb 5-1: Manufacturer: syz [ 304.541513][ T5896] usb 5-1: SerialNumber: syz [ 304.565837][ T5896] usb 5-1: config 0 descriptor?? [ 304.731788][ T8418] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 304.829218][ T8407] : entered promiscuous mode [ 304.974068][ T9] usb 2-1: USB disconnect, device number 38 [ 305.013662][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 305.025113][ T5896] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 305.124772][ T9] ftdi_sio 2-1:0.0: device disconnected [ 305.141841][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.665'. [ 305.391575][ T5896] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.424506][ T5896] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.551474][ T5896] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.609011][ T8432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.666'. [ 305.638838][ T5896] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.726593][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.901036][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.917742][ T5896] usb 3-1: invalid MIDI out EP 0 [ 306.117660][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 306.351635][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.394334][ T5914] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 306.412203][ T5896] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 306.556030][ T5914] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.624365][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.670794][ T5914] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 306.688672][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.727391][ T5914] usb 1-1: config 0 descriptor?? [ 306.845912][ T5831] usb 5-1: USB disconnect, device number 21 [ 307.183494][ T5914] ntrig 0003:1B96:0009.0010: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.0-1/input0 [ 307.421605][ T5914] ntrig 0003:1B96:0009.0010: Firmware version: 0.0.0.0.0 (0000 0000) [ 307.953729][ T5896] usb 3-1: USB disconnect, device number 32 [ 307.971131][ T8417] delete_channel: no stack [ 308.113955][ T8459] FAULT_INJECTION: forcing a failure. [ 308.113955][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.154447][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.1.676 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 308.154475][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.154488][ T8459] Call Trace: [ 308.154495][ T8459] [ 308.154503][ T8459] dump_stack_lvl+0x189/0x250 [ 308.154537][ T8459] ? __pfx____ratelimit+0x10/0x10 [ 308.154567][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.154598][ T8459] ? __pfx__printk+0x10/0x10 [ 308.154619][ T8459] ? __might_fault+0xb0/0x130 [ 308.154650][ T8459] should_fail_ex+0x414/0x560 [ 308.154685][ T8459] _copy_from_iter+0x1db/0x16f0 [ 308.154709][ T8459] ? rcu_is_watching+0x15/0xb0 [ 308.154729][ T8459] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 308.154751][ T8459] ? __pfx__copy_from_iter+0x10/0x10 [ 308.154773][ T8459] ? __build_skb_around+0x257/0x3e0 [ 308.154841][ T8459] ? netlink_sendmsg+0x642/0xb30 [ 308.154862][ T8459] ? skb_put+0x11b/0x210 [ 308.154888][ T8459] netlink_sendmsg+0x6b2/0xb30 [ 308.154920][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.154948][ T8459] ? aa_sock_msg_perm+0x94/0x160 [ 308.154981][ T8459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.155008][ T8459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.155033][ T8459] __sock_sendmsg+0x219/0x270 [ 308.155067][ T8459] ____sys_sendmsg+0x505/0x830 [ 308.155099][ T8459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.155135][ T8459] ? import_iovec+0x74/0xa0 [ 308.155163][ T8459] ___sys_sendmsg+0x21f/0x2a0 [ 308.155191][ T8459] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.155254][ T8459] ? __fget_files+0x2a/0x420 [ 308.155278][ T8459] ? __fget_files+0x3a0/0x420 [ 308.155312][ T8459] __x64_sys_sendmsg+0x19b/0x260 [ 308.155341][ T8459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.155378][ T8459] ? __pfx_ksys_write+0x10/0x10 [ 308.155395][ T8459] ? rcu_is_watching+0x15/0xb0 [ 308.155420][ T8459] ? do_syscall_64+0xbe/0x3b0 [ 308.155455][ T8459] do_syscall_64+0xfa/0x3b0 [ 308.155485][ T8459] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.155514][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.155535][ T8459] ? clear_bhb_loop+0x60/0xb0 [ 308.155560][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.155580][ T8459] RIP: 0033:0x7f5d9cb8e929 [ 308.155599][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.155617][ T8459] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.155639][ T8459] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 308.155654][ T8459] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000004 [ 308.155667][ T8459] RBP: 00007f5d9da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.155680][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.155692][ T8459] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 308.155722][ T8459] [ 308.758682][ T8470] tipc: Started in network mode [ 308.763703][ T8470] tipc: Node identity 7f000001, cluster identity 4711 [ 308.771227][ T8470] tipc: New replicast peer: 0.0.0.0 [ 308.776968][ T8470] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 308.785232][ T8470] tipc: Enabled bearer , priority 10 [ 308.914562][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 308.994657][ T8438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.013511][ T8438] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 309.042121][ T8479] netlink: 148 bytes leftover after parsing attributes in process `syz.4.682'. [ 309.054423][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.194357][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.334607][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.375756][ T5831] usb 1-1: USB disconnect, device number 30 [ 309.462999][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 309.474435][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.564254][ T5914] IPVS: starting estimator thread 0... [ 309.590234][ T30] audit: type=1326 audit(1749075191.278:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 309.614384][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.659302][ T30] audit: type=1326 audit(1749075191.278:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 309.714423][ T8488] IPVS: using max 29 ests per chain, 69600 per kthread [ 309.754502][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 309.796154][ T8492] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 309.894484][ T5831] tipc: Node number set to 2130706433 [ 309.927913][ T30] audit: type=1326 audit(1749075191.298:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.034407][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 310.088036][ T30] audit: type=1326 audit(1749075191.298:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.111414][ T30] audit: type=1326 audit(1749075191.298:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.134345][ T30] audit: type=1326 audit(1749075191.328:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.156739][ T30] audit: type=1326 audit(1749075191.328:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.202652][ T30] audit: type=1326 audit(1749075191.338:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.304419][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 310.397899][ T30] audit: type=1326 audit(1749075191.338:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8485 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f310878e929 code=0x7ffc0000 [ 310.440543][ T9] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 310.594242][ T9] usb 1-1: device descriptor read/64, error -71 [ 310.844320][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 311.018645][ T9] usb 1-1: device descriptor read/64, error -71 [ 311.145076][ T9] usb usb1-port1: attempt power cycle [ 311.219362][ T5896] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 311.384447][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 311.392946][ T5896] usb 3-1: config 0 has an invalid interface number: 58 but max is 1 [ 311.402651][ T5896] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 311.419734][ T5896] usb 3-1: config 0 has no interface number 0 [ 311.430629][ T5896] usb 3-1: config 0 has no interface number 1 [ 311.438638][ T5896] usb 3-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 311.452894][ T5896] usb 3-1: config 0 interface 61 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 311.471184][ T5896] usb 3-1: config 0 interface 61 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 311.488586][ T5896] usb 3-1: config 0 interface 61 altsetting 0 endpoint 0x85 has an invalid bInterval 20, changing to 8 [ 311.499852][ T9] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 311.511331][ T5896] usb 3-1: config 0 interface 61 altsetting 0 endpoint 0x85 has invalid maxpacket 26305, setting to 1024 [ 311.524031][ T5896] usb 3-1: config 0 interface 61 altsetting 0 endpoint 0xD has an invalid bInterval 127, changing to 10 [ 311.541516][ T9] usb 1-1: device descriptor read/8, error -71 [ 311.544784][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 311.548893][ T5896] usb 3-1: config 0 interface 61 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.583624][ T5896] usb 3-1: New USB device found, idVendor=0c52, idProduct=2881, bcdDevice=fa.cd [ 311.631108][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.666745][ T5896] usb 3-1: config 0 descriptor?? [ 311.692927][ T5896] ftdi_sio 3-1:0.58: FTDI USB Serial Device converter detected [ 311.731000][ T5896] ftdi_sio ttyUSB0: unknown device type: 0xfacd [ 311.762578][ T5896] ftdi_sio 3-1:0.61: FTDI USB Serial Device converter detected [ 311.784342][ T9] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 311.805656][ T9] usb 1-1: device descriptor read/8, error -71 [ 311.813476][ T5896] ftdi_sio ttyUSB1: unknown device type: 0xfacd [ 311.914685][ T9] usb usb1-port1: unable to enumerate USB device [ 312.276914][ T8510] cgroup: fork rejected by pids controller in /syz1 [ 312.754576][ T5922] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 312.925466][ T5922] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 312.953198][ T5922] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 312.978575][ T5922] usb 5-1: can't read configurations, error -22 [ 313.164583][ T5922] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 313.317712][ T30] audit: type=1326 audit(1749075195.028:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.1.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 313.474423][ T5922] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 313.525063][ T5922] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 313.624342][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 313.652441][ T5922] usb 5-1: can't read configurations, error -22 [ 313.714713][ T5922] usb usb5-port1: attempt power cycle [ 313.934403][ C1] net_ratelimit: 3 callbacks suppressed [ 313.934425][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 314.074300][ T5922] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 314.235877][ T5922] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 314.245402][ T5922] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 314.253981][ T5922] usb 5-1: can't read configurations, error -22 [ 314.394289][ T5922] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 314.445566][ T5922] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 314.455504][ T5922] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 3 [ 314.463954][ T5922] usb 5-1: can't read configurations, error -22 [ 314.484508][ T5922] usb usb5-port1: unable to enumerate USB device [ 314.804342][ T5922] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 314.974632][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 315.019618][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.130714][ T5922] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.174325][ T5896] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 315.212428][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.285761][ T5922] usb 4-1: config 0 descriptor?? [ 315.301364][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 315.374539][ T5896] usb 1-1: device descriptor read/64, error -71 [ 315.634294][ T5896] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 315.906466][ T5896] usb 1-1: device descriptor read/64, error -71 [ 316.014389][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 316.064686][ T5896] usb usb1-port1: attempt power cycle [ 316.189667][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 316.217896][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 316.218321][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 316.264764][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 316.317733][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.343072][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.394072][ T5922] pwc: recv_control_msg error -32 req 04 val 1000 [ 316.413256][ T5922] pwc: recv_control_msg error -32 req 04 val 1300 [ 316.430844][ T5922] pwc: recv_control_msg error -32 req 04 val 1400 [ 316.439544][ T5922] pwc: recv_control_msg error -32 req 02 val 2000 [ 316.447105][ T5922] pwc: recv_control_msg error -32 req 02 val 2100 [ 316.564274][ T5896] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 316.674064][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 316.685772][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 316.685870][ T5896] usb 1-1: device descriptor read/8, error -71 [ 316.698874][ T9013] fuse: Unknown parameter 'fd0x0000000000000004' [ 316.715865][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 316.736265][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 316.763997][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 316.789514][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 316.806950][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 316.829062][ T5922] pwc: Registered as video103. [ 316.856075][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 317.054370][ T5896] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 317.054572][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 317.090433][ T5896] usb 1-1: device descriptor read/8, error -71 [ 317.124070][ T5922] usb 4-1: USB disconnect, device number 49 [ 317.218163][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224632][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.237469][ T5896] usb usb1-port1: unable to enumerate USB device [ 317.245489][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 317.312414][ T5896] usb 3-1: USB disconnect, device number 33 [ 317.319972][ T5896] ftdi_sio 3-1:0.58: device disconnected [ 317.383581][ T5896] ftdi_sio 3-1:0.61: device disconnected [ 317.389544][ T10] usb 2-1: device descriptor read/64, error -71 [ 317.664323][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 317.850269][ T10] usb 2-1: device descriptor read/64, error -71 [ 318.010571][ T10] usb usb2-port1: attempt power cycle [ 318.104357][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 318.302726][ T5914] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 318.407756][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 318.454568][ T5922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 318.465032][ T10] usb 2-1: device descriptor read/8, error -71 [ 318.484210][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 318.504879][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.516772][ T5914] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 318.533556][ T5914] usb 4-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.601999][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0 [ 318.661096][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.694363][ T5922] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.703491][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.734272][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 318.795744][ T10] usb 2-1: device descriptor read/8, error -71 [ 318.799669][ T5922] usb 3-1: config 0 descriptor?? [ 318.899325][ T5914] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 318.917218][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.917274][ T10] usb usb2-port1: unable to enumerate USB device [ 318.932202][ T5914] usb 4-1: Product: syz [ 318.939309][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 318.957085][ T5914] usb 4-1: Manufacturer: syz [ 318.972639][ T5914] usb 4-1: SerialNumber: syz [ 319.134588][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 319.268191][ T43] IPVS: starting estimator thread 0... [ 319.434611][ T9038] IPVS: using max 32 ests per chain, 76800 per kthread [ 319.758104][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.765727][ T5922] pwc: recv_control_msg error -32 req 02 val 2700 [ 319.772723][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.784565][ T9032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.793552][ T9032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.806799][ T5922] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.831717][ T5922] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.936818][ T5922] pwc: recv_control_msg error -32 req 04 val 1400 [ 320.010828][ T5922] pwc: recv_control_msg error -32 req 02 val 2000 [ 320.042200][ T5922] pwc: recv_control_msg error -32 req 02 val 2100 [ 320.184366][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 320.289761][ T5922] pwc: recv_control_msg error -71 req 02 val 2500 [ 320.306023][ T5922] pwc: recv_control_msg error -71 req 02 val 2400 [ 320.318038][ T5922] pwc: recv_control_msg error -71 req 02 val 2600 [ 320.339598][ T5922] pwc: recv_control_msg error -71 req 02 val 2900 [ 320.354309][ T5922] pwc: recv_control_msg error -71 req 02 val 2800 [ 320.380196][ T9054] fuse: Unknown parameter 'fd0x0000000000000004' [ 320.424951][ T5922] pwc: recv_control_msg error -71 req 04 val 1100 [ 320.460256][ T5922] pwc: recv_control_msg error -71 req 04 val 1200 [ 320.472472][ T5922] pwc: Registered as video103. [ 320.484383][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 320.505907][ T5922] usb 3-1: USB disconnect, device number 34 [ 320.909527][ T5914] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 320.966248][ T5914] usb 4-1: USB disconnect, device number 50 [ 321.214617][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 321.228272][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 321.228288][ T30] audit: type=1326 audit(1749075202.938:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.268374][ T9067] usb usb1: usbfs: process 9067 (syz.2.723) did not claim interface 0 before use [ 321.328351][ T30] audit: type=1326 audit(1749075202.968:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.399225][ T30] audit: type=1326 audit(1749075202.968:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.483091][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 321.738981][ T30] audit: type=1326 audit(1749075202.968:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.774671][ T5914] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 321.789973][ T9081] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.817504][ T30] audit: type=1326 audit(1749075202.968:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.854799][ T30] audit: type=1326 audit(1749075202.968:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.859607][ T9083] program syz.3.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.903842][ T30] audit: type=1326 audit(1749075202.968:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.926342][ T30] audit: type=1326 audit(1749075202.968:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa33fd8d290 code=0x7ffc0000 [ 321.949138][ T30] audit: type=1326 audit(1749075202.968:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 321.971955][ T30] audit: type=1326 audit(1749075202.968:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 322.000731][ T5914] usb 1-1: config 0 has no interfaces? [ 322.022845][ T5914] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 322.032847][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.044461][ T5914] usb 1-1: Product: syz [ 322.048732][ T5914] usb 1-1: Manufacturer: syz [ 322.064224][ T5914] usb 1-1: SerialNumber: syz [ 322.072211][ T5914] usb 1-1: config 0 descriptor?? [ 322.264327][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 322.436712][ T9097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.734'. [ 322.871329][ T9097] fuse: Bad value for 'fd' [ 323.304576][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 323.374346][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 323.568935][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.579498][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.602243][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.701195][ T10] usb 3-1: config 0 descriptor?? [ 323.765397][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 324.334381][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 324.424389][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 324.474292][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 324.504965][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 324.523132][ T5896] usb 1-1: USB disconnect, device number 39 [ 324.580728][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 324.625464][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 324.663048][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 324.695796][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 324.715935][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 324.723512][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 324.754635][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 324.815250][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 324.834788][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 324.854451][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 324.877485][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 325.285588][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 325.374670][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 325.981363][ T9132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.745'. [ 325.993034][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.745'. [ 326.003167][ T5896] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 326.014580][ T9132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.745'. [ 326.041651][ T9134] netlink: 232 bytes leftover after parsing attributes in process `syz.1.746'. [ 326.154306][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 326.180475][ T10] pwc: Registered as video103. [ 326.196450][ T5896] usb 1-1: No LPM exit latency info found, disabling LPM. [ 326.205794][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 326.226030][ T5896] usb 1-1: config 1 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 326.259481][ T5896] usb 1-1: config 1 interface 0 has no altsetting 0 [ 326.304204][ T5896] usb 1-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.40 [ 326.338461][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.364700][ T5896] usb 1-1: Product: 詹颔덊⨑⧶ƛ表㶨࡯珽᜗뺼߲豭ﲶ㍩ⲃ媡鳰阄낃鸾㨂섛쏰厪؁峝 [ 326.385347][ T10] usb 3-1: USB disconnect, device number 35 [ 326.414427][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 326.431854][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 326.431873][ T30] audit: type=1326 audit(1749075208.138:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 326.434236][ T5896] usb 1-1: Manufacturer: 쯜ૻ䛶䷎ܥ稡꯳誏 [ 326.506220][ T30] audit: type=1326 audit(1749075208.208:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 326.590573][ T5896] usb 1-1: SerialNumber: Т [ 326.650096][ T9127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.887618][ T5896] usbhid 1-1:1.0: can't add hid device: -71 [ 326.896966][ T5896] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 326.920312][ T5896] usb 1-1: USB disconnect, device number 40 [ 326.975068][ T10] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 326.997706][ T9157] FAULT_INJECTION: forcing a failure. [ 326.997706][ T9157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.016012][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.1.752 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 327.016041][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.016055][ T9157] Call Trace: [ 327.016063][ T9157] [ 327.016071][ T9157] dump_stack_lvl+0x189/0x250 [ 327.016118][ T9157] ? __pfx____ratelimit+0x10/0x10 [ 327.016149][ T9157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.016182][ T9157] ? __pfx__printk+0x10/0x10 [ 327.016205][ T9157] ? __might_fault+0xb0/0x130 [ 327.016238][ T9157] should_fail_ex+0x414/0x560 [ 327.016276][ T9157] _copy_from_user+0x2d/0xb0 [ 327.016302][ T9157] ___sys_recvmsg+0x12e/0x510 [ 327.016335][ T9157] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.016388][ T9157] ? __fget_files+0x3a0/0x420 [ 327.016424][ T9157] do_recvmmsg+0x307/0x770 [ 327.016461][ T9157] ? __pfx_do_recvmmsg+0x10/0x10 [ 327.016502][ T9157] ? _copy_from_user+0x94/0xb0 [ 327.016545][ T9157] __x64_sys_recvmmsg+0x1af/0x240 [ 327.016576][ T9157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.016601][ T9157] ? rcu_is_watching+0x15/0xb0 [ 327.016627][ T9157] ? do_syscall_64+0xbe/0x3b0 [ 327.016663][ T9157] do_syscall_64+0xfa/0x3b0 [ 327.016693][ T9157] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.016722][ T9157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.016744][ T9157] ? clear_bhb_loop+0x60/0xb0 [ 327.016769][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.016790][ T9157] RIP: 0033:0x7f5d9cb8e929 [ 327.016808][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.016827][ T9157] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.016850][ T9157] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 327.016866][ T9157] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 327.016881][ T9157] RBP: 00007f5d9da8e090 R08: 0000200000003700 R09: 0000000000000000 [ 327.016895][ T9157] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 327.016908][ T9157] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 327.016940][ T9157] [ 327.235781][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.350583][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.372502][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 327.411194][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 327.442764][ T10] usb 3-1: Product: syz [ 327.452912][ T10] usb 3-1: Manufacturer: syz [ 327.457370][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 327.480713][ T10] usb 3-1: SerialNumber: syz [ 327.492654][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 327.515196][ T10] usb 3-1: config 0 descriptor?? [ 328.341990][ T9174] FAULT_INJECTION: forcing a failure. [ 328.341990][ T9174] name failslab, interval 1, probability 0, space 0, times 0 [ 328.354823][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.1.757 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 328.354844][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.354853][ T9174] Call Trace: [ 328.354860][ T9174] [ 328.354867][ T9174] dump_stack_lvl+0x189/0x250 [ 328.354895][ T9174] ? __pfx____ratelimit+0x10/0x10 [ 328.354918][ T9174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.354942][ T9174] ? __pfx__printk+0x10/0x10 [ 328.354974][ T9174] should_fail_ex+0x414/0x560 [ 328.355002][ T9174] should_failslab+0xa8/0x100 [ 328.355022][ T9174] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 328.355038][ T9174] ? __alloc_skb+0x112/0x2d0 [ 328.355059][ T9174] __alloc_skb+0x112/0x2d0 [ 328.355078][ T9174] __pfkey_xfrm_state2msg+0x495/0x3d30 [ 328.355107][ T9174] dump_sa+0xad/0x590 [ 328.355126][ T9174] xfrm_state_walk+0x295/0xa60 [ 328.355148][ T9174] ? __pfx_dump_sa+0x10/0x10 [ 328.355168][ T9174] pfkey_do_dump+0x5f/0x420 [ 328.355190][ T9174] pfkey_sendmsg+0xbfe/0x1090 [ 328.355210][ T9174] ? __lock_acquire+0xab9/0xd20 [ 328.355236][ T9174] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 328.355271][ T9174] ? aa_sock_msg_perm+0x94/0x160 [ 328.355295][ T9174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.355314][ T9174] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 328.355330][ T9174] __sock_sendmsg+0x219/0x270 [ 328.355355][ T9174] ____sys_sendmsg+0x505/0x830 [ 328.355378][ T9174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.355403][ T9174] ? import_iovec+0x74/0xa0 [ 328.355424][ T9174] ___sys_sendmsg+0x21f/0x2a0 [ 328.355444][ T9174] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.355490][ T9174] ? __fget_files+0x2a/0x420 [ 328.355507][ T9174] ? __fget_files+0x3a0/0x420 [ 328.355532][ T9174] __x64_sys_sendmsg+0x19b/0x260 [ 328.355552][ T9174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.355578][ T9174] ? __pfx_ksys_write+0x10/0x10 [ 328.355590][ T9174] ? rcu_is_watching+0x15/0xb0 [ 328.355609][ T9174] ? do_syscall_64+0xbe/0x3b0 [ 328.355634][ T9174] do_syscall_64+0xfa/0x3b0 [ 328.355655][ T9174] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.355676][ T9174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.355690][ T9174] ? clear_bhb_loop+0x60/0xb0 [ 328.355708][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.355722][ T9174] RIP: 0033:0x7f5d9cb8e929 [ 328.355736][ T9174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.355749][ T9174] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.355766][ T9174] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 328.355777][ T9174] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 328.355786][ T9174] RBP: 00007f5d9da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 328.355795][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.355804][ T9174] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 328.355827][ T9174] [ 328.514661][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 329.058656][ T9180] fuse: Bad value for 'user_id' [ 329.063560][ T9180] fuse: Bad value for 'user_id' [ 329.154462][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 329.316195][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.335310][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.364343][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.410144][ T10] usb 2-1: config 0 descriptor?? [ 329.439767][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 329.534393][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 330.067793][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 330.116839][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 330.132203][ T5914] usb 3-1: USB disconnect, device number 36 [ 330.175337][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.184048][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 330.205706][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.230890][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 330.280516][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 330.302864][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 330.327278][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 330.352276][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 330.574354][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 330.615483][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 330.623664][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 330.651277][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 330.664434][ T5914] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 330.699389][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 330.766399][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 330.778594][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.786895][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.805615][ T10] pwc: Registered as video103. [ 330.821721][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 330.834531][ T5914] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 330.843319][ T5914] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 330.856026][ T10] usb 2-1: USB disconnect, device number 43 [ 330.888223][ T5914] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 330.902445][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.918725][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 330.920639][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'. [ 330.938588][ T5914] usb 5-1: config 0 has no interface number 0 [ 330.938648][ T5914] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.942347][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.968742][ T5831] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 330.980067][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.989120][ T5914] usb 5-1: Product: syz [ 330.993488][ T5914] usb 5-1: Manufacturer: syz [ 330.999094][ T5914] usb 5-1: SerialNumber: syz [ 331.017353][ T5914] usb 5-1: config 0 descriptor?? [ 331.104607][ T5831] usb 3-1: device descriptor read/64, error -71 [ 331.250816][ T5914] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 331.273652][ T5914] usb 5-1: MIDIStreaming interface descriptor not found [ 331.344278][ T5831] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 331.413135][ T5914] usb 5-1: USB disconnect, device number 26 [ 331.424259][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 331.588854][ T5831] usb 3-1: device descriptor read/64, error -71 [ 331.614319][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 331.676158][ T9] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 331.754729][ T5831] usb usb3-port1: attempt power cycle [ 331.784646][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.816510][ T9] usb 1-1: config 0 has no interfaces? [ 331.848620][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 331.999703][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.268836][ T9] usb 1-1: Product: syz [ 332.273184][ T9] usb 1-1: Manufacturer: syz [ 332.284686][ T5831] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 332.318571][ T5831] usb 3-1: device descriptor read/8, error -71 [ 332.326665][ T9] usb 1-1: SerialNumber: syz [ 332.354722][ T5922] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 332.384769][ T9] usb 1-1: config 0 descriptor?? [ 332.531120][ T5922] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.594343][ T5831] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 332.602002][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.630672][ T5922] usb 2-1: Product: syz [ 332.641689][ T5922] usb 2-1: Manufacturer: syz [ 332.649171][ T5831] usb 3-1: device descriptor read/8, error -71 [ 332.655659][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 332.663685][ T5922] usb 2-1: SerialNumber: syz [ 332.726871][ T5922] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.783234][ T5831] usb usb3-port1: unable to enumerate USB device [ 332.834820][ T5914] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.043341][ T9220] trusted_key: encrypted_key: insufficient parameters specified [ 333.513184][ T9235] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 333.694361][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 333.825084][ T5922] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 334.030018][ T5922] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 334.104389][ T5914] usb 2-1: Service connection timeout for: 256 [ 334.156617][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.167846][ T5922] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.182999][ T5914] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 334.282222][ T5922] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.316748][ T5914] ath9k_htc: Failed to initialize the device [ 334.478285][ T9] usb 1-1: USB disconnect, device number 41 [ 334.646983][ T5922] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.714256][ T5914] usb 2-1: ath9k_htc: USB layer deinitialized [ 334.734373][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 334.770882][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.884459][ T9249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'. [ 334.991889][ T5922] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.213036][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.252757][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.261503][ T5922] usb 4-1: invalid MIDI out EP 0 [ 335.627086][ T5922] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 335.699811][ T5831] usb 2-1: USB disconnect, device number 44 [ 335.784400][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 336.814362][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 336.966479][ T5922] usb 4-1: USB disconnect, device number 51 [ 336.987112][ T9230] delete_channel: no stack [ 337.113145][ T9279] syz.3.787: attempt to access beyond end of device [ 337.113145][ T9279] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.568101][ T10] IPVS: starting estimator thread 0... [ 337.589483][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 337.684687][ T9298] IPVS: using max 38 ests per chain, 91200 per kthread [ 337.800990][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 337.852277][ T9304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.854607][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 337.877789][ T9294] IPv4: Oversized IP packet from 172.20.20.24 [ 337.886230][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 337.893277][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 337.925120][ T5914] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.964216][ T9302] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 338.177119][ T5914] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 338.627438][ T5914] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.724777][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.754682][ T5914] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 338.814762][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.854992][ T5914] usb 3-1: config 0 descriptor?? [ 338.894341][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 339.272545][ T5914] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 339.478069][ T5914] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -71 [ 339.545541][ T5914] usb 3-1: USB disconnect, device number 41 [ 339.605069][ T9320] fido_id[9320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 339.857292][ T9330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.796'. [ 339.874462][ T5831] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.934506][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 340.056879][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 340.072333][ T5831] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 340.080854][ T5831] usb 2-1: config 0 has no interface number 0 [ 340.089483][ T5831] usb 2-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 340.099178][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.107596][ T5831] usb 2-1: Product: syz [ 340.111941][ T5831] usb 2-1: Manufacturer: syz [ 340.116909][ T5831] usb 2-1: SerialNumber: syz [ 340.151006][ T5831] usb 2-1: config 0 descriptor?? [ 340.163714][ T5831] ftdi_sio 2-1:0.151: FTDI USB Serial Device converter detected [ 340.186429][ T5831] ftdi_sio ttyUSB0: unknown device type: 0xadd6 [ 340.234812][ T9] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 340.413414][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 340.426432][ T9] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 340.458984][ T5831] usb 2-1: USB disconnect, device number 45 [ 340.463080][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.465352][ T5914] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 340.483717][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 340.499281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.515482][ T5831] ftdi_sio 2-1:0.151: device disconnected [ 340.547336][ T9] usb 4-1: Product: syz [ 340.551572][ T9] usb 4-1: Manufacturer: syz [ 340.594340][ T9] usb 4-1: SerialNumber: syz [ 340.610827][ T9] usb 4-1: config 0 descriptor?? [ 340.700332][ T5914] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 340.712239][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.764568][ T5914] usb 5-1: Product: syz [ 340.775599][ T5914] usb 5-1: Manufacturer: syz [ 340.794316][ T5914] usb 5-1: SerialNumber: syz [ 340.833548][ T5914] usb 5-1: config 0 descriptor?? [ 340.974346][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 341.572176][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.690595][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.710834][ T5914] usb 5-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 342.014515][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 342.166278][ T5914] usb 5-1: failed to fetch extended address, random address set [ 342.270150][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz.2.804'. [ 342.319944][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz.2.804'. [ 342.337810][ T5914] usb 5-1: USB disconnect, device number 27 [ 342.374517][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz.2.804'. [ 343.054373][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 343.094702][ T9] usb 4-1: USB disconnect, device number 52 [ 343.181214][ T9367] netlink: 84 bytes leftover after parsing attributes in process `syz.4.810'. [ 343.253263][ T9368] fuse: Bad value for 'fd' [ 343.341228][ T9373] FAULT_INJECTION: forcing a failure. [ 343.341228][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 343.384557][ T9373] CPU: 0 UID: 0 PID: 9373 Comm: syz.0.813 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 343.384586][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.384600][ T9373] Call Trace: [ 343.384608][ T9373] [ 343.384617][ T9373] dump_stack_lvl+0x189/0x250 [ 343.384656][ T9373] ? __pfx____ratelimit+0x10/0x10 [ 343.384687][ T9373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.384720][ T9373] ? __pfx__printk+0x10/0x10 [ 343.384749][ T9373] ? __pfx___might_resched+0x10/0x10 [ 343.384775][ T9373] should_fail_ex+0x414/0x560 [ 343.384812][ T9373] should_failslab+0xa8/0x100 [ 343.384838][ T9373] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 343.384860][ T9373] ? __alloc_skb+0x112/0x2d0 [ 343.384887][ T9373] __alloc_skb+0x112/0x2d0 [ 343.384914][ T9373] netlink_sendmsg+0x5c6/0xb30 [ 343.384949][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.384976][ T9373] ? aa_sock_msg_perm+0x94/0x160 [ 343.385009][ T9373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.385037][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.385060][ T9373] __sock_sendmsg+0x219/0x270 [ 343.385096][ T9373] ____sys_sendmsg+0x505/0x830 [ 343.385128][ T9373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.385164][ T9373] ? import_iovec+0x74/0xa0 [ 343.385193][ T9373] ___sys_sendmsg+0x21f/0x2a0 [ 343.385221][ T9373] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.385291][ T9373] ? __fget_files+0x2a/0x420 [ 343.385317][ T9373] ? __fget_files+0x3a0/0x420 [ 343.385353][ T9373] __x64_sys_sendmsg+0x19b/0x260 [ 343.385382][ T9373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.385419][ T9373] ? __pfx_ksys_write+0x10/0x10 [ 343.385437][ T9373] ? rcu_is_watching+0x15/0xb0 [ 343.385461][ T9373] ? do_syscall_64+0xbe/0x3b0 [ 343.385496][ T9373] do_syscall_64+0xfa/0x3b0 [ 343.385539][ T9373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.385559][ T9373] ? asm_sysvec_call_function_single+0x1a/0x20 [ 343.385581][ T9373] ? clear_bhb_loop+0x60/0xb0 [ 343.385607][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.385627][ T9373] RIP: 0033:0x7f99a038e929 [ 343.385647][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.385665][ T9373] RSP: 002b:00007f99a112a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.385701][ T9373] RAX: ffffffffffffffda RBX: 00007f99a05b5fa0 RCX: 00007f99a038e929 [ 343.385716][ T9373] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 343.385729][ T9373] RBP: 00007f99a112a090 R08: 0000000000000000 R09: 0000000000000000 [ 343.385740][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.385752][ T9373] R13: 0000000000000000 R14: 00007f99a05b5fa0 R15: 00007f99a06dfa28 [ 343.385781][ T9373] [ 343.854284][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 343.916331][ T30] audit: type=1326 audit(1749075225.628:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 343.938935][ T30] audit: type=1326 audit(1749075225.628:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 343.964903][ T30] audit: type=1326 audit(1749075225.628:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 343.979835][ T9379] netlink: 232 bytes leftover after parsing attributes in process `syz.1.815'. [ 343.988560][ T30] audit: type=1326 audit(1749075225.628:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 344.022706][ T5831] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 344.023860][ T30] audit: type=1326 audit(1749075225.668:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d9cb858e7 code=0x7ffc0000 [ 344.068598][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 344.093039][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.094459][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 344.126084][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.165727][ T30] audit: type=1326 audit(1749075225.668:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d9cb2ab19 code=0x7ffc0000 [ 344.189241][ T30] audit: type=1326 audit(1749075225.668:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 344.192907][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.212328][ T30] audit: type=1326 audit(1749075225.668:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d9cb858e7 code=0x7ffc0000 [ 344.275347][ T5831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.294483][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 344.306817][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 344.318543][ T9] usb 5-1: config 0 descriptor?? [ 344.329384][ T5831] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.335142][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 344.364461][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.379249][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 344.384553][ T5914] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 344.398352][ T30] audit: type=1326 audit(1749075225.668:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d9cb2ab19 code=0x7ffc0000 [ 344.409889][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 344.499631][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 344.527623][ T5831] usb 4-1: config 0 descriptor?? [ 344.545812][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 344.552512][ T30] audit: type=1326 audit(1749075225.668:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9378 comm="syz.1.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5d9cb8e929 code=0x7ffc0000 [ 344.626525][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.641260][ T5896] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 344.641324][ T5914] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 344.678546][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.684195][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 344.706215][ T5914] usb 1-1: Product: syz [ 344.706534][ T5896] usb 3-1: Product: syz [ 344.710458][ T5914] usb 1-1: Manufacturer: syz [ 344.710476][ T5914] usb 1-1: SerialNumber: syz [ 344.719444][ T5914] usb 1-1: config 0 descriptor?? [ 344.733925][ T5896] usb 3-1: Manufacturer: syz [ 344.741810][ T5896] usb 3-1: SerialNumber: syz [ 344.788176][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.815634][ T5896] usb 3-1: config 0 descriptor?? [ 344.829427][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.847791][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.856274][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.864607][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.871946][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 344.889755][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 344.916802][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 344.955525][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 344.973233][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 345.008266][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 345.034803][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 345.040155][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 345.083042][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 345.090405][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 345.102992][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.112635][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.131256][ T9] pwc: Registered as video103. [ 345.144354][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 345.233930][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 345.247437][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 345.287815][ T5831] pwc: recv_control_msg error -32 req 02 val 2700 [ 345.333485][ T5831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 345.340097][ T9] usb 5-1: USB disconnect, device number 28 [ 345.384570][ T5831] pwc: recv_control_msg error -32 req 04 val 1000 [ 345.396609][ T5831] pwc: recv_control_msg error -32 req 04 val 1300 [ 345.404980][ T5831] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.413678][ T5831] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.439155][ T5831] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.645316][ T9396] fuse: Unknown parameter '0x0000000000000007' [ 345.696608][ T9398] FAULT_INJECTION: forcing a failure. [ 345.696608][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 345.714822][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 345.723756][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 345.741114][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.1.820 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 345.741144][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.741157][ T9398] Call Trace: [ 345.741165][ T9398] [ 345.741174][ T9398] dump_stack_lvl+0x189/0x250 [ 345.741211][ T9398] ? __pfx____ratelimit+0x10/0x10 [ 345.741241][ T9398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.741287][ T9398] ? __pfx__printk+0x10/0x10 [ 345.741316][ T9398] ? __pfx___might_resched+0x10/0x10 [ 345.741334][ T9398] ? fs_reclaim_acquire+0x7d/0x100 [ 345.741365][ T9398] should_fail_ex+0x414/0x560 [ 345.741401][ T9398] ? traverse+0xd9/0x570 [ 345.741429][ T9398] should_failslab+0xa8/0x100 [ 345.741454][ T9398] __kvmalloc_node_noprof+0x161/0x5f0 [ 345.741477][ T9398] ? traverse+0xd9/0x570 [ 345.741512][ T9398] traverse+0xd9/0x570 [ 345.741542][ T9398] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 345.741582][ T9398] seq_read_iter+0xcfe/0xe10 [ 345.741622][ T9398] ? set_page_refcounted+0x76/0x160 [ 345.741659][ T9398] proc_reg_read_iter+0x1b7/0x280 [ 345.741691][ T9398] copy_splice_read+0x552/0x9b0 [ 345.741727][ T9398] ? __pfx_copy_splice_read+0x10/0x10 [ 345.741746][ T9398] ? look_up_lock_class+0x74/0x170 [ 345.741779][ T9398] ? register_lock_class+0x51/0x320 [ 345.741841][ T9398] ? alloc_pipe_info+0x374/0x4d0 [ 345.741866][ T9398] ? __pfx_copy_splice_read+0x10/0x10 [ 345.741886][ T9398] splice_direct_to_actor+0x4a9/0xcc0 [ 345.741933][ T9398] ? __pfx_direct_splice_actor+0x10/0x10 [ 345.741956][ T9398] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 345.741981][ T9398] ? __pfx_aa_file_perm+0x10/0x10 [ 345.742010][ T9398] do_splice_direct+0x181/0x270 [ 345.742037][ T9398] ? __pfx_do_splice_direct+0x10/0x10 [ 345.742061][ T9398] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 345.742092][ T9398] ? rw_verify_area+0x258/0x650 [ 345.742129][ T9398] do_sendfile+0x4da/0x7e0 [ 345.742166][ T9398] ? __pfx_do_sendfile+0x10/0x10 [ 345.742208][ T9398] __se_sys_sendfile64+0xd9/0x190 [ 345.742239][ T9398] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 345.742269][ T9398] ? rcu_is_watching+0x15/0xb0 [ 345.742295][ T9398] ? do_syscall_64+0xbe/0x3b0 [ 345.742332][ T9398] do_syscall_64+0xfa/0x3b0 [ 345.742362][ T9398] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.742391][ T9398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.742413][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 345.742439][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.742460][ T9398] RIP: 0033:0x7f5d9cb8e929 [ 345.742479][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.742497][ T9398] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 345.742520][ T9398] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 345.742536][ T9398] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 345.742550][ T9398] RBP: 00007f5d9da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 345.742563][ T9398] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 345.742576][ T9398] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 345.742609][ T9398] [ 346.174448][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 346.407648][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 346.442163][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 346.464947][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 346.504270][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 346.516596][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 346.587457][ T5831] pwc: Registered as video103. [ 346.632208][ T9403] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 346.638930][ T9403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.649471][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 346.684067][ T5831] usb 4-1: USB disconnect, device number 53 [ 346.690170][ T9403] vhci_hcd vhci_hcd.0: Device attached [ 346.925619][ T5914] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 346.933223][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 346.991528][ T5896] usb 3-1: USB disconnect, device number 42 [ 347.058628][ T9418] netlink: 232 bytes leftover after parsing attributes in process `syz.2.827'. [ 347.086522][ T9416] vlan2: entered promiscuous mode [ 347.091787][ T9416] erspan0: entered promiscuous mode [ 347.097492][ T43] usb 5-1: config 0 has no interfaces? [ 347.097578][ T9416] vlan2: entered allmulticast mode [ 347.103857][ T43] usb 5-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 347.108542][ T9416] erspan0: entered allmulticast mode [ 347.128950][ T9] usb 1-1: USB disconnect, device number 42 [ 347.140698][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.165455][ T43] usb 5-1: config 0 descriptor?? [ 347.214348][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 347.307100][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 347.514533][ T5914] usb 41-1: device descriptor read/64, error -2147352576 [ 347.625533][ T9435] netlink: 84 bytes leftover after parsing attributes in process `syz.3.832'. [ 347.641346][ T9435] fuse: Bad value for 'fd' [ 347.731583][ T9439] netlink: 168 bytes leftover after parsing attributes in process `syz.2.833'. [ 347.754282][ T5914] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 347.947746][ T43] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 348.108384][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.119976][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.131859][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.143166][ T43] usb 4-1: config 0 descriptor?? [ 348.155745][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 348.264404][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 349.094289][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.104584][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.127451][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.145663][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.227893][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.272755][ T9450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.835'. [ 349.294367][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 349.321228][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.338721][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.360563][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.371176][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.378524][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 349.387915][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 349.397937][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 349.405327][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 349.455061][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.462185][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 349.499599][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 349.525556][ T43] pwc: Registered as video103. [ 349.546320][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 349.600585][ T43] usb 4-1: USB disconnect, device number 54 [ 349.762629][ T5916] usb 5-1: USB disconnect, device number 29 [ 349.799862][ T9405] vhci_hcd: connection closed [ 349.820070][ T12] vhci_hcd: stop threads [ 349.844598][ T12] vhci_hcd: release socket [ 349.872250][ T12] vhci_hcd: disconnect device [ 350.334363][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 350.523610][ T30] kauditd_printk_skb: 116 callbacks suppressed [ 350.523628][ T30] audit: type=1326 audit(1749075232.208:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 350.606245][ T9464] netlink: 232 bytes leftover after parsing attributes in process `syz.2.840'. [ 350.613381][ T30] audit: type=1326 audit(1749075232.208:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 350.745210][ T30] audit: type=1326 audit(1749075232.228:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa33fd858e7 code=0x7ffc0000 [ 350.771199][ T30] audit: type=1326 audit(1749075232.228:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33fd2ab19 code=0x7ffc0000 [ 350.774843][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.841'. [ 350.802572][ T43] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 350.834119][ T30] audit: type=1326 audit(1749075232.228:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 350.857427][ T30] audit: type=1326 audit(1749075232.228:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 350.881487][ T30] audit: type=1326 audit(1749075232.268:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa33fd858e7 code=0x7ffc0000 [ 350.905048][ T30] audit: type=1326 audit(1749075232.268:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33fd2ab19 code=0x7ffc0000 [ 350.957897][ T30] audit: type=1326 audit(1749075232.268:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33fd8e929 code=0x7ffc0000 [ 351.005697][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.021897][ T43] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 351.047629][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 351.092239][ T43] usb 2-1: Product: syz [ 351.092317][ T30] audit: type=1326 audit(1749075232.278:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.2.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa33fd858e7 code=0x7ffc0000 [ 351.134398][ T43] usb 2-1: Manufacturer: syz [ 351.139063][ T43] usb 2-1: SerialNumber: syz [ 351.260198][ T43] usb 2-1: config 0 descriptor?? [ 351.374363][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 351.550553][ T9485] netlink: 84 bytes leftover after parsing attributes in process `syz.0.847'. [ 351.569466][ T9485] fuse: Bad value for 'fd' [ 351.590414][ T9486] usb usb1: usbfs: process 9486 (syz.3.845) did not claim interface 0 before use [ 351.726086][ T9493] Unknown options in mask 5 [ 351.738878][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 351.761956][ T9493] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.846'. [ 352.218870][ T9497] fuse: Unknown parameter '0x0000000000000007' [ 352.292580][ T9494] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 352.384300][ T5897] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 352.414416][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 352.536052][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.559531][ T5897] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 352.569989][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.581135][ T5897] usb 1-1: config 0 descriptor?? [ 352.592994][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 352.804017][ T9505] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 352.894561][ T5914] vhci_hcd: vhci_device speed not set [ 352.992360][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 352.999927][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 353.008050][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 353.015606][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 353.023738][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 353.032553][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 353.042048][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 353.050244][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 353.060255][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 353.067803][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 353.096408][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 353.103925][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 353.111586][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 353.118837][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 353.128013][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 353.135132][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 353.146898][ T5897] pwc: Registered as video103. [ 353.175837][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 353.232687][ T5897] usb 1-1: USB disconnect, device number 43 [ 353.398757][ T5922] usb 2-1: USB disconnect, device number 46 [ 353.454364][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 353.575714][ T9512] netlink: 'syz.1.852': attribute type 30 has an invalid length. [ 354.162374][ T9521] __nla_validate_parse: 1 callbacks suppressed [ 354.162406][ T9521] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 354.235272][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 354.494338][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 354.896174][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 354.905115][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 354.912973][ T9531] netlink: 'syz.3.851': attribute type 5 has an invalid length. [ 354.921193][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.851'. [ 354.967401][ T9531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 354.981092][ T9531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 354.990085][ T9531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 355.000350][ T9531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 355.066634][ T9531] geneve2: entered promiscuous mode [ 355.072129][ T9531] geneve2: entered allmulticast mode [ 355.092357][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 355.114434][ T5914] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 355.143320][ T43] usb 5-1: config 2 has an invalid interface number: 45 but max is 0 [ 355.157877][ T43] usb 5-1: config 2 has no interface number 0 [ 355.269487][ T43] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 355.291495][ T43] usb 5-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 355.314682][ T43] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 355.326403][ T5914] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 355.340014][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.348300][ T5914] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 355.364284][ T43] usb 5-1: Product: syz [ 355.385508][ T5914] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 355.398040][ T43] usb 5-1: Manufacturer: syz [ 355.402656][ T43] usb 5-1: SerialNumber: syz [ 355.410383][ T5914] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 355.435570][ T43] kobil_sct 5-1:2.45: KOBIL USB smart card terminal converter detected [ 355.445095][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 355.450684][ T5914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 355.484557][ T43] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 355.500801][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.534542][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 355.658951][ T5916] usb 5-1: USB disconnect, device number 30 [ 355.668772][ T5916] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 355.745230][ T5916] kobil_sct 5-1:2.45: device disconnected [ 355.786720][ T5914] ath6kl: Failed to submit usb control message: -71 [ 355.793508][ T5914] ath6kl: unable to send the bmi data to the device: -71 [ 355.885387][ T5914] ath6kl: Unable to send get target info: -71 [ 355.920419][ T9542] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 355.938826][ T5914] ath6kl: Failed to init ath6kl core: -71 [ 355.940402][ T5914] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 355.978579][ T5914] usb 3-1: USB disconnect, device number 43 [ 356.574415][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 356.912712][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.865'. [ 357.050510][ T9562] netlink: 84 bytes leftover after parsing attributes in process `syz.1.864'. [ 357.095790][ T9562] fuse: Bad value for 'fd' [ 357.285134][ T9572] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 357.414931][ T5897] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 357.614425][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 357.650469][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.694331][ T5897] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 357.708716][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.751981][ T5897] usb 2-1: config 0 descriptor?? [ 357.825744][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 358.432980][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 358.440460][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 358.451585][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 358.471448][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 358.502700][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 358.567227][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 358.617004][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 358.635099][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 358.652579][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 358.663492][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 358.664453][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 358.684929][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 358.692175][ T5897] pwc: recv_control_msg error -32 req 02 val 2400 [ 358.699649][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 358.707704][ T5897] pwc: recv_control_msg error -32 req 02 val 2600 [ 358.714753][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 358.721849][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 358.729369][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 358.736746][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 358.751534][ T5897] pwc: Registered as video103. [ 358.773786][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 358.876065][ T5897] usb 2-1: USB disconnect, device number 47 [ 358.969700][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 359.218090][ T9587] netlink: 48 bytes leftover after parsing attributes in process `syz.4.871'. [ 359.320867][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 359.694406][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 359.750525][ T9597] FAULT_INJECTION: forcing a failure. [ 359.750525][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.841455][ T9600] netlink: 'syz.3.876': attribute type 2 has an invalid length. [ 359.930518][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 360.103852][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.0.875 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 360.103884][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.103898][ T9597] Call Trace: [ 360.103906][ T9597] [ 360.103916][ T9597] dump_stack_lvl+0x189/0x250 [ 360.103954][ T9597] ? __pfx____ratelimit+0x10/0x10 [ 360.103984][ T9597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.104016][ T9597] ? __pfx__printk+0x10/0x10 [ 360.104039][ T9597] ? __might_fault+0xb0/0x130 [ 360.104071][ T9597] should_fail_ex+0x414/0x560 [ 360.104107][ T9597] _copy_from_user+0x2d/0xb0 [ 360.104134][ T9597] binder_ioctl_write_read+0xb24/0xa090 [ 360.104206][ T9597] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 360.104231][ T9597] ? __kasan_kmalloc+0x93/0xb0 [ 360.104251][ T9597] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 360.104271][ T9597] ? binder_get_thread+0x1c8/0x6d0 [ 360.104294][ T9597] ? binder_ioctl+0x273/0x19c0 [ 360.104317][ T9597] ? __se_sys_ioctl+0xf9/0x170 [ 360.104345][ T9597] ? do_syscall_64+0xfa/0x3b0 [ 360.104375][ T9597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.104428][ T9597] ? __lock_acquire+0xab9/0xd20 [ 360.104456][ T9597] ? binder_debug+0x13f/0x1b0 [ 360.104487][ T9597] ? __pfx_binder_debug+0x10/0x10 [ 360.104517][ T9597] ? do_raw_spin_lock+0x121/0x290 [ 360.104558][ T9597] ? _raw_spin_unlock+0x28/0x50 [ 360.104583][ T9597] ? binder_get_thread+0x598/0x6d0 [ 360.104612][ T9597] binder_ioctl+0x3e0/0x19c0 [ 360.104638][ T9597] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 360.104669][ T9597] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 360.104699][ T9597] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 360.104726][ T9597] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 360.104756][ T9597] ? __pfx_binder_ioctl+0x10/0x10 [ 360.104799][ T9597] ? __lock_acquire+0xab9/0xd20 [ 360.104848][ T9597] ? __fget_files+0x2a/0x420 [ 360.104875][ T9597] ? __fget_files+0x2a/0x420 [ 360.104897][ T9597] ? __fget_files+0x3a0/0x420 [ 360.104920][ T9597] ? __fget_files+0x2a/0x420 [ 360.104946][ T9597] ? bpf_lsm_file_ioctl+0x9/0x20 [ 360.104978][ T9597] ? __pfx_binder_ioctl+0x10/0x10 [ 360.105003][ T9597] __se_sys_ioctl+0xf9/0x170 [ 360.105037][ T9597] do_syscall_64+0xfa/0x3b0 [ 360.105067][ T9597] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.105095][ T9597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.105115][ T9597] ? clear_bhb_loop+0x60/0xb0 [ 360.105140][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.105160][ T9597] RIP: 0033:0x7f99a038e929 [ 360.105178][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.105215][ T9597] RSP: 002b:00007f99a112a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.105251][ T9597] RAX: ffffffffffffffda RBX: 00007f99a05b5fa0 RCX: 00007f99a038e929 [ 360.105267][ T9597] RDX: 0000200000001200 RSI: 00000000c0306201 RDI: 0000000000000003 [ 360.105280][ T9597] RBP: 00007f99a112a090 R08: 0000000000000000 R09: 0000000000000000 [ 360.105293][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.105305][ T9597] R13: 0000000000000000 R14: 00007f99a05b5fa0 R15: 00007f99a06dfa28 [ 360.105337][ T9597] [ 360.465407][ T9597] binder: 9596:9597 ioctl c0306201 200000001200 returned -14 [ 360.734439][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 361.432267][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'. [ 361.620633][ T9620] netlink: 84 bytes leftover after parsing attributes in process `syz.2.884'. [ 361.638655][ T9620] fuse: Bad value for 'fd' [ 361.784418][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 361.829743][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 361.850157][ T9629] openvswitch: netlink: Unknown nsh attribute 0 [ 361.856800][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.964740][ T5897] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 362.144279][ T9] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 362.156114][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.188152][ T5897] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 362.204231][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.231366][ T5897] usb 3-1: config 0 descriptor?? [ 362.257953][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 362.322022][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.334555][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.346063][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.364338][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 362.383177][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.407846][ T9] usb 5-1: config 0 descriptor?? [ 362.459008][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 362.656785][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 362.665090][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 362.675078][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 362.695340][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 362.716787][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 362.723852][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 362.731148][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 362.739918][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 362.747711][ T5194] bcm5974 5-1:0.0: could not read from device [ 362.757285][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 362.769217][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 362.778240][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 362.814702][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 362.885620][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 362.892261][ T9] usb 5-1: USB disconnect, device number 31 [ 362.912289][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 362.921668][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 362.934347][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 362.972951][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 362.980983][ T6006] udevd[6006]: Error opening device "/dev/input/event4": No such file or directory [ 363.057514][ T5897] pwc: Registered as video103. [ 363.072564][ T6006] udevd[6006]: Unable to EVIOCGABS device "/dev/input/event4" [ 363.151493][ T9648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'. [ 363.194274][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 363.195240][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input28 [ 363.222408][ T6006] udevd[6006]: Unable to EVIOCGABS device "/dev/input/event4" [ 363.251071][ T6006] udevd[6006]: Unable to EVIOCGABS device "/dev/input/event4" [ 363.281227][ T6006] udevd[6006]: Unable to EVIOCGABS device "/dev/input/event4" [ 363.313237][ T5897] usb 3-1: USB disconnect, device number 44 [ 363.514549][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 363.734404][ T43] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 363.734436][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.734461][ T43] usb 1-1: Product: syz [ 363.734477][ T43] usb 1-1: Manufacturer: syz [ 363.734493][ T43] usb 1-1: SerialNumber: syz [ 363.737626][ T43] usb 1-1: config 0 descriptor?? [ 363.742948][ T43] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 363.844393][ T5916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 363.860965][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 363.978332][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 363.997813][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.997864][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 363.997909][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.002680][ T5916] usb 5-1: config 0 descriptor?? [ 364.078121][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 364.163442][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 364.163476][ T9] usb 2-1: config 0 has no interface number 0 [ 364.163518][ T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 364.163555][ T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 364.163581][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 364.163613][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 364.163635][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.167492][ T9] usb 2-1: config 0 descriptor?? [ 364.501762][ T9] usb 2-1: string descriptor 0 read error: -71 [ 364.509408][ T9] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 364.739321][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 364.742944][ T9] usb 2-1: USB disconnect, device number 48 [ 364.774314][ T5916] pwc: recv_control_msg error -71 req 02 val 2c00 [ 364.809632][ T5916] pwc: recv_control_msg error -71 req 04 val 1000 [ 364.894329][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 364.943359][ T5916] pwc: recv_control_msg error -71 req 04 val 1300 [ 365.013532][ T5916] pwc: recv_control_msg error -71 req 04 val 1400 [ 365.020764][ T5916] pwc: recv_control_msg error -71 req 02 val 2000 [ 365.028368][ T5916] pwc: recv_control_msg error -71 req 02 val 2100 [ 365.035929][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 365.045883][ T43] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 365.056060][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 365.063008][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 365.081849][ T43] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 365.098656][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 365.121271][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 365.145292][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 365.160319][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 365.171207][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 365.181934][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 365.238286][ T5916] pwc: Registered as video103. [ 365.271177][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 365.311379][ T5916] usb 5-1: USB disconnect, device number 32 [ 365.371724][ T9670] FAULT_INJECTION: forcing a failure. [ 365.371724][ T9670] name failslab, interval 1, probability 0, space 0, times 0 [ 365.456428][ T9670] CPU: 1 UID: 0 PID: 9670 Comm: syz.1.895 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 365.456459][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.456487][ T9670] Call Trace: [ 365.456495][ T9670] [ 365.456504][ T9670] dump_stack_lvl+0x189/0x250 [ 365.456541][ T9670] ? __pfx____ratelimit+0x10/0x10 [ 365.456575][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.456607][ T9670] ? __pfx__printk+0x10/0x10 [ 365.456635][ T9670] ? __pfx___might_resched+0x10/0x10 [ 365.456653][ T9670] ? fs_reclaim_acquire+0x7d/0x100 [ 365.456683][ T9670] should_fail_ex+0x414/0x560 [ 365.456719][ T9670] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 365.456740][ T9670] should_failslab+0xa8/0x100 [ 365.456765][ T9670] __kvmalloc_node_noprof+0x161/0x5f0 [ 365.456788][ T9670] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 365.456816][ T9670] rhashtable_init_noprof+0x4ee/0xbb0 [ 365.456846][ T9670] rhltable_init_noprof+0x1e/0x60 [ 365.456870][ T9670] nf_tables_newtable+0x68f/0x1890 [ 365.456945][ T9670] nfnetlink_rcv+0x112f/0x2520 [ 365.457012][ T9670] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 365.457062][ T9670] ? ref_tracker_free+0x63a/0x7d0 [ 365.457116][ T9670] ? __netlink_deliver_tap+0x807/0x850 [ 365.457151][ T9670] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.457174][ T9670] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.457204][ T9670] netlink_unicast+0x75b/0x8d0 [ 365.457238][ T9670] netlink_sendmsg+0x805/0xb30 [ 365.457273][ T9670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.457301][ T9670] ? aa_sock_msg_perm+0x94/0x160 [ 365.457336][ T9670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.457363][ T9670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.457389][ T9670] __sock_sendmsg+0x219/0x270 [ 365.457436][ T9670] ____sys_sendmsg+0x505/0x830 [ 365.457468][ T9670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.457503][ T9670] ? import_iovec+0x74/0xa0 [ 365.457533][ T9670] ___sys_sendmsg+0x21f/0x2a0 [ 365.457561][ T9670] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.457626][ T9670] ? __fget_files+0x2a/0x420 [ 365.457649][ T9670] ? __fget_files+0x3a0/0x420 [ 365.457684][ T9670] __x64_sys_sendmsg+0x19b/0x260 [ 365.457712][ T9670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.457747][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 365.457764][ T9670] ? rcu_is_watching+0x15/0xb0 [ 365.457788][ T9670] ? do_syscall_64+0xbe/0x3b0 [ 365.457824][ T9670] do_syscall_64+0xfa/0x3b0 [ 365.457852][ T9670] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.457881][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.457901][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 365.457931][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.457951][ T9670] RIP: 0033:0x7f5d9cb8e929 [ 365.457968][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.457986][ T9670] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.458007][ T9670] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 365.458022][ T9670] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 365.458034][ T9670] RBP: 00007f5d9da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 365.458047][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.458059][ T9670] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 365.458090][ T9670] [ 365.934417][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 366.621754][ T9] usb 1-1: USB disconnect, device number 44 [ 366.984339][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 367.089178][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'. [ 367.195654][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 367.350338][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 367.359502][ T9701] netlink: 'syz.2.902': attribute type 5 has an invalid length. [ 367.367369][ T9701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.902'. [ 367.482700][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 368.024407][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 368.624647][ T9720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.909'. [ 368.813111][ T9723] binder: 9717:9723 ioctl c0306201 200000001200 returned -22 [ 369.064412][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 369.784321][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 369.954411][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 369.994650][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 370.007879][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.074574][ T9] usb 4-1: Product: syz [ 370.084600][ T9] usb 4-1: Manufacturer: syz [ 370.094608][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 370.117839][ T9] usb 4-1: SerialNumber: syz [ 370.196385][ T9] usb 4-1: config 0 descriptor?? [ 370.200774][ T9742] FAULT_INJECTION: forcing a failure. [ 370.200774][ T9742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.251190][ T9] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 370.312168][ T9742] CPU: 1 UID: 0 PID: 9742 Comm: syz.1.917 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 370.312200][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.312215][ T9742] Call Trace: [ 370.312223][ T9742] [ 370.312233][ T9742] dump_stack_lvl+0x189/0x250 [ 370.312275][ T9742] ? __pfx____ratelimit+0x10/0x10 [ 370.312315][ T9742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.312348][ T9742] ? __pfx__printk+0x10/0x10 [ 370.312370][ T9742] ? __might_fault+0xb0/0x130 [ 370.312400][ T9742] should_fail_ex+0x414/0x560 [ 370.312435][ T9742] _copy_from_iter+0x1db/0x16f0 [ 370.312457][ T9742] ? rcu_is_watching+0x15/0xb0 [ 370.312475][ T9742] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 370.312495][ T9742] ? __pfx__copy_from_iter+0x10/0x10 [ 370.312514][ T9742] ? __build_skb_around+0x257/0x3e0 [ 370.312540][ T9742] ? netlink_sendmsg+0x642/0xb30 [ 370.312561][ T9742] ? skb_put+0x11b/0x210 [ 370.312583][ T9742] netlink_sendmsg+0x6b2/0xb30 [ 370.312610][ T9742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.312633][ T9742] ? aa_sock_msg_perm+0x94/0x160 [ 370.312667][ T9742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.312697][ T9742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.312718][ T9742] __sock_sendmsg+0x219/0x270 [ 370.312747][ T9742] ____sys_sendmsg+0x505/0x830 [ 370.312773][ T9742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.312802][ T9742] ? import_iovec+0x74/0xa0 [ 370.312831][ T9742] ___sys_sendmsg+0x21f/0x2a0 [ 370.312855][ T9742] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.312906][ T9742] ? __fget_files+0x2a/0x420 [ 370.312925][ T9742] ? __fget_files+0x3a0/0x420 [ 370.312956][ T9742] __x64_sys_sendmsg+0x19b/0x260 [ 370.312983][ T9742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.313027][ T9742] ? __pfx_ksys_write+0x10/0x10 [ 370.313041][ T9742] ? rcu_is_watching+0x15/0xb0 [ 370.313060][ T9742] ? do_syscall_64+0xbe/0x3b0 [ 370.313088][ T9742] do_syscall_64+0xfa/0x3b0 [ 370.313115][ T9742] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.313144][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.313161][ T9742] ? clear_bhb_loop+0x60/0xb0 [ 370.313181][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.313198][ T9742] RIP: 0033:0x7f5d9cb8e929 [ 370.313213][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.313228][ T9742] RSP: 002b:00007f5d9da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.313247][ T9742] RAX: ffffffffffffffda RBX: 00007f5d9cdb5fa0 RCX: 00007f5d9cb8e929 [ 370.313260][ T9742] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 370.313274][ T9742] RBP: 00007f5d9da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 370.313285][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.313295][ T9742] R13: 0000000000000000 R14: 00007f5d9cdb5fa0 R15: 00007f5d9cedfa28 [ 370.313319][ T9742] [ 370.524435][ T5897] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 370.676960][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 370.678775][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.678808][ T5897] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 370.678824][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.681013][ T5897] usb 3-1: config 0 descriptor?? [ 370.894491][ T5831] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 371.024230][ T5831] usb 1-1: device descriptor read/64, error -71 [ 371.138658][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 371.233229][ T5897] aquacomputer_d5next 0003:0C70:F014.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 371.264234][ T5831] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 371.347374][ T9757] netlink: 232 bytes leftover after parsing attributes in process `syz.1.922'. [ 371.394368][ T5831] usb 1-1: device descriptor read/64, error -71 [ 371.505525][ T5831] usb usb1-port1: attempt power cycle [ 371.844448][ T5831] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 371.865393][ T5831] usb 1-1: device descriptor read/8, error -71 [ 371.914377][ T9] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 371.959809][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 372.124433][ T5831] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 372.145602][ T5831] usb 1-1: device descriptor read/8, error -71 [ 372.174474][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 372.285209][ T5831] usb usb1-port1: unable to enumerate USB device [ 373.221913][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 374.259841][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 375.300303][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 376.345376][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 377.380887][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 378.076404][ T5831] usb 4-1: USB disconnect, device number 55 [ 378.418425][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 378.887136][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.895207][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.457030][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 380.495061][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 381.554368][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 382.591734][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 383.615560][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 384.657241][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 384.803097][ T5209] sched: DL replenish lagged too much [ 385.699237][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 386.744327][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 387.782360][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 388.824343][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 389.856780][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 390.906477][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 391.941738][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 392.979274][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 394.030527][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 395.064372][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 396.096847][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 397.137666][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 398.181080][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 399.216903][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 400.259481][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 401.301061][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 402.338113][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 403.375955][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 404.419350][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 405.461261][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 406.500058][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 407.537424][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 408.578776][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 409.621702][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 410.662642][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 411.694946][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 412.739620][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 413.784467][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 414.815075][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 415.861544][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 416.896106][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 417.940938][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 418.977162][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 420.015582][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 421.068221][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 422.095719][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 423.151092][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 424.179932][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 425.224399][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 426.266375][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 427.302387][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 428.342337][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 429.391813][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 430.416002][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 431.461789][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 432.500007][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 433.539263][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 434.581961][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 435.618601][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 436.655970][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 437.694315][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 438.749599][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 439.782964][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 440.609975][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.617828][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.814363][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 441.859902][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 442.901403][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 443.936601][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 444.978134][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 446.020358][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 447.055392][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 448.102364][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 449.136888][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 450.181458][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 451.228919][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 452.255584][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 453.295339][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 454.344755][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 455.379185][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 456.416966][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 457.462391][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 458.505469][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 459.549502][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 460.578333][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 461.623217][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 462.660028][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 463.697422][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 464.740752][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 465.781126][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 466.814345][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 467.854807][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 468.899939][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 469.936599][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 470.992285][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 472.029980][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 473.056868][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 474.099675][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 475.138473][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 476.179974][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 477.223025][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 478.271756][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 479.296274][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 480.339509][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 481.379580][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 482.420596][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 483.460461][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 484.495435][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 485.538961][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 486.581869][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 487.618966][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 488.654297][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 489.694302][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 490.734292][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 491.774290][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 492.824293][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 493.864386][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 494.894308][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 495.937462][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 496.977090][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 498.019024][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 499.060293][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 500.112825][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 501.140754][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 502.174432][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 503.230600][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 504.261279][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 505.304273][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 505.318873][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.327064][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.335432][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 507.379111][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 508.418510][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 509.461254][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 510.511238][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 511.539163][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 512.578070][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 513.620422][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 514.660290][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 515.699381][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 516.736200][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 517.777572][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 518.826346][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 519.857236][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 520.757284][ T31] INFO: task syz.2.916:9743 blocked for more than 149 seconds. [ 520.757316][ T31] Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 [ 520.757331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.757344][ T31] task:syz.2.916 state:D stack:26984 pid:9743 tgid:9739 ppid:5857 task_flags:0x400140 flags:0x00004004 [ 520.757419][ T31] Call Trace: [ 520.757429][ T31] [ 520.757447][ T31] __schedule+0x16f5/0x4d00 [ 520.757499][ T31] ? __lock_acquire+0xa70/0xd20 [ 520.757537][ T31] ? schedule+0x165/0x360 [ 520.757573][ T31] ? __pfx___schedule+0x10/0x10 [ 520.757623][ T31] ? schedule+0x91/0x360 [ 520.757658][ T31] schedule+0x165/0x360 [ 520.757692][ T31] schedule_preempt_disabled+0x13/0x30 [ 520.757724][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 520.757750][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 520.757776][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 520.757817][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 520.757843][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.757897][ T31] ? n_tty_ioctl+0xa7/0x2f0 [ 520.757936][ T31] ? __ldsem_down_read_nested+0x196/0x7c0 [ 520.757981][ T31] ? __pfx_vt_ioctl+0x10/0x10 [ 520.758009][ T31] down_write+0x1ab/0x1f0 [ 520.758033][ T31] ? __pfx_down_write+0x10/0x10 [ 520.758066][ T31] n_tty_ioctl+0xa7/0x2f0 [ 520.758104][ T31] ? __pfx_n_tty_ioctl+0x10/0x10 [ 520.758138][ T31] tty_ioctl+0x9c3/0xde0 [ 520.758168][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 520.758194][ T31] do_vfs_ioctl+0x1256/0x1990 [ 520.758234][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 520.758277][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 520.758324][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.758358][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.758404][ T31] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 520.758433][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 520.758466][ T31] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 520.758505][ T31] ? vfs_write+0x8e2/0xa90 [ 520.758535][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.758588][ T31] ? __fget_files+0x2a/0x420 [ 520.758618][ T31] ? __fget_files+0x2a/0x420 [ 520.758643][ T31] ? __fget_files+0x3a0/0x420 [ 520.758667][ T31] ? __fget_files+0x2a/0x420 [ 520.758698][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 520.758735][ T31] __se_sys_ioctl+0x82/0x170 [ 520.758771][ T31] do_syscall_64+0xfa/0x3b0 [ 520.758808][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.758830][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 520.758853][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.758893][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.758916][ T31] RIP: 0033:0x7fa33fd8e929 [ 520.758936][ T31] RSP: 002b:00007fa340c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.758961][ T31] RAX: ffffffffffffffda RBX: 00007fa33ffb6080 RCX: 00007fa33fd8e929 [ 520.758979][ T31] RDX: 0000200000000480 RSI: 000000000000541b RDI: 0000000000000003 [ 520.758995][ T31] RBP: 00007fa33fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 520.759010][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.759024][ T31] R13: 0000000000000000 R14: 00007fa33ffb6080 R15: 00007fa3400dfa28 [ 520.759059][ T31] [ 520.759070][ T31] INFO: task syz.0.919:9748 blocked for more than 149 seconds. [ 520.759086][ T31] Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 [ 520.759099][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.759110][ T31] task:syz.0.919 state:D stack:27816 pid:9748 tgid:9745 ppid:5852 task_flags:0x400040 flags:0x00004004 [ 520.759178][ T31] Call Trace: [ 520.759187][ T31] [ 520.759201][ T31] __schedule+0x16f5/0x4d00 [ 520.759251][ T31] ? schedule+0x165/0x360 [ 520.759286][ T31] ? __pfx___schedule+0x10/0x10 [ 520.759334][ T31] ? schedule+0x91/0x360 [ 520.759368][ T31] schedule+0x165/0x360 [ 520.759401][ T31] schedule_timeout+0x9a/0x270 [ 520.759428][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 520.759468][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.759497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.759532][ T31] __down_common+0x319/0x6a0 [ 520.759565][ T31] ? __pfx___down_common+0x10/0x10 [ 520.759586][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 520.759620][ T31] ? __mutex_lock+0x330/0xe80 [ 520.759653][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 520.759687][ T31] down+0x80/0xd0 [ 520.759709][ T31] console_lock+0x145/0x1b0 [ 520.759737][ T31] con_install+0x9b/0x700 [ 520.759789][ T31] ? __pfx_con_install+0x10/0x10 [ 520.759829][ T31] tty_init_dev+0xd7/0x4d0 [ 520.759867][ T31] tty_open+0x5ab/0xd10 [ 520.759913][ T31] ? __pfx_tty_open+0x10/0x10 [ 520.759949][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 520.759982][ T31] chrdev_open+0x4cc/0x5e0 [ 520.760013][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.760048][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 520.760083][ T31] do_dentry_open+0xdf3/0x1970 [ 520.760132][ T31] vfs_open+0x3b/0x340 [ 520.760160][ T31] ? path_openat+0x2ecd/0x3830 [ 520.760196][ T31] path_openat+0x2ee5/0x3830 [ 520.760230][ T31] ? arch_stack_walk+0xfc/0x150 [ 520.760292][ T31] ? __pfx_path_openat+0x10/0x10 [ 520.760324][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.760372][ T31] do_filp_open+0x1fa/0x410 [ 520.760404][ T31] ? __lock_acquire+0xab9/0xd20 [ 520.760439][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 520.760498][ T31] ? _raw_spin_unlock+0x28/0x50 [ 520.760527][ T31] ? alloc_fd+0x64c/0x6c0 [ 520.760566][ T31] do_sys_openat2+0x121/0x1c0 [ 520.760597][ T31] ? __se_sys_futex+0x36f/0x400 [ 520.760626][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.760677][ T31] ? rcu_is_watching+0x15/0xb0 [ 520.760703][ T31] __x64_sys_openat+0x138/0x170 [ 520.760740][ T31] do_syscall_64+0xfa/0x3b0 [ 520.760772][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.760821][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.760845][ T31] ? clear_bhb_loop+0x60/0xb0 [ 520.760881][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.760904][ T31] RIP: 0033:0x7f99a038d290 [ 520.760923][ T31] RSP: 002b:00007f999e1f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 520.760949][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f99a038d290 [ 520.760966][ T31] RDX: 0000000000000002 RSI: 00007f999e1f5c10 RDI: 00000000ffffff9c [ 520.760983][ T31] RBP: 00007f999e1f5c10 R08: 0000000000000000 R09: 00007f999e1f5987 [ 520.761000][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 520.761014][ T31] R13: 0000000000000000 R14: 00007f99a05b6080 R15: 00007f99a06dfa28 [ 520.761050][ T31] [ 520.761078][ T31] [ 520.761078][ T31] Showing all locks held in the system: [ 520.761089][ T31] 2 locks held by kthreadd/2: [ 520.761105][ T31] 4 locks held by kworker/0:0/9: [ 520.761119][ T31] 4 locks held by kworker/u8:0/12: [ 520.761135][ T31] 1 lock held by khungtaskd/31: [ 520.761148][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 520.761214][ T31] 4 locks held by kworker/u8:2/36: [ 520.761229][ T31] 3 locks held by kworker/1:1/43: [ 520.761243][ T31] 4 locks held by kworker/u8:3/49: [ 520.761258][ T31] 3 locks held by kworker/u8:4/78: [ 520.761272][ T31] #0: ffff88814c95b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 520.761348][ T31] #1: ffffc9000211fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 520.761422][ T31] #2: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 520.761509][ T31] 3 locks held by kworker/u8:7/3441: [ 520.761524][ T31] 3 locks held by kworker/u8:9/3480: [ 520.761538][ T31] 8 locks held by kworker/u8:10/3495: [ 520.761552][ T31] 2 locks held by kworker/u8:11/3529: [ 520.761568][ T31] 2 locks held by klogd/5198: [ 520.761581][ T31] 4 locks held by udevd/5209: [ 520.761595][ T31] 1 lock held by dhcpcd/5503: [ 520.761609][ T31] 1 lock held by dhcpcd/5504: [ 520.761623][ T31] 2 locks held by getty/5599: [ 520.761636][ T31] #0: ffff8880351220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 520.761700][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 520.761774][ T31] 4 locks held by kworker/1:3/5831: [ 520.761789][ T31] 2 locks held by syz-executor/5854: [ 520.761810][ T31] 1 lock held by syz-executor/5858: [ 520.761828][ T31] 4 locks held by kworker/0:3/5895: [ 520.761841][ T31] #0: ffff88805a58c548 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 520.761937][ T31] #1: ffffc90004e7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 520.762024][ T31] #2: ffff888033d01308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 520.762095][ T31] #3: ffff888059368338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 520.762167][ T31] 3 locks held by kworker/0:5/5897: [ 520.762182][ T31] 3 locks held by kworker/1:5/5900: [ 520.762195][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 520.762268][ T31] #1: ffffc90004eafbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 520.762340][ T31] #2: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 520.762402][ T31] 3 locks held by kworker/1:7/5916: [ 520.762416][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 520.762490][ T31] #1: ffffc90004f5fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 520.762574][ T31] #2: ffffffff8f50ec88 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 520.762639][ T31] 3 locks held by kworker/1:8/5922: [ 520.762655][ T31] 2 locks held by syz.1.293/6970: [ 520.762670][ T31] 6 locks held by syz.2.916/9741: [ 520.762684][ T31] 2 locks held by syz.2.916/9743: [ 520.762698][ T31] #0: ffff88807b36e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 520.762761][ T31] #1: ffff88807b36e2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_ioctl+0xa7/0x2f0 [ 520.762832][ T31] 2 locks held by syz.0.919/9748: [ 520.762845][ T31] #0: ffffffff8e99e508 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x200/0xd10 [ 520.762919][ T31] #1: ffff8880309cc1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev+0x74/0x4d0 [ 520.762982][ T31] 4 locks held by syz.1.922/9757: [ 520.762998][ T31] 6 locks held by syz-executor/9764: [ 520.763012][ T31] 4 locks held by kworker/u8:1/9765: [ 520.763026][ T31] 4 locks held by kworker/u8:6/9766: [ 520.763040][ T31] 4 locks held by kworker/1:2/9767: [ 520.763053][ T31] #0: ffff88805a58c548 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 520.763133][ T31] #1: ffffc9000435fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 520.763227][ T31] #2: ffff888033d01308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 520.763301][ T31] #3: ffff888059368338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x267/0xb00 [ 520.763375][ T31] 3 locks held by kworker/u8:8/9768: [ 520.763390][ T31] 2 locks held by dhcpcd/9769: [ 520.763403][ T31] #0: ffff88802fec4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 520.763473][ T31] #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 520.763537][ T31] 4 locks held by syz-executor/9770: [ 520.763552][ T31] [ 520.763560][ T31] ============================================= [ 520.763560][ T31] [ 520.763586][ T31] NMI backtrace for cpu 0 [ 520.763602][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 520.763626][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.763639][ T31] Call Trace: [ 520.763647][ T31] [ 520.763656][ T31] dump_stack_lvl+0x189/0x250 [ 520.763689][ T31] ? __wake_up_klogd+0xd9/0x110 [ 520.763717][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.763750][ T31] ? __pfx__printk+0x10/0x10 [ 520.763786][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 520.763817][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 520.763840][ T31] ? _printk+0xcf/0x120 [ 520.763875][ T31] ? __pfx__printk+0x10/0x10 [ 520.763899][ T31] ? debug_show_all_locks+0x2e/0x180 [ 520.763918][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 520.763950][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 520.763979][ T31] watchdog+0xfee/0x1030 [ 520.764011][ T31] ? watchdog+0x1de/0x1030 [ 520.764048][ T31] kthread+0x711/0x8a0 [ 520.764078][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.764105][ T31] ? __pfx_kthread+0x10/0x10 [ 520.764131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.764159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.764187][ T31] ? __pfx_kthread+0x10/0x10 [ 520.764213][ T31] ret_from_fork+0x3f9/0x770 [ 520.764257][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.764294][ T31] ? __switch_to_asm+0x39/0x70 [ 520.764313][ T31] ? __switch_to_asm+0x33/0x70 [ 520.764333][ T31] ? __pfx_kthread+0x10/0x10 [ 520.764358][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.764396][ T31] [ 520.781668][ T31] Sending NMI from CPU 0 to CPUs 1: [ 520.781706][ C1] NMI backtrace for cpu 1 [ 520.781722][ C1] CPU: 1 UID: 0 PID: 3495 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 520.781743][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.781756][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 520.781780][ C1] RIP: 0010:synproxy_send_tcp_ipv6+0x1b2/0x680 [ 520.781804][ C1] Code: 03 42 0f b6 04 28 84 c0 0f 85 a3 03 00 00 66 c7 03 10 00 ba 58 00 00 00 48 8d 9c 24 80 00 00 00 48 89 df 31 f6 e8 9e 27 84 f8 84 24 92 00 00 00 06 48 8d 7b 38 ba 10 00 00 00 48 8b 74 24 28 [ 520.781820][ C1] RSP: 0018:ffffc90000a07fc0 EFLAGS: 00000246 [ 520.781835][ C1] RAX: ffffc90000a08040 RBX: ffffc90000a08040 RCX: 0000000000000000 [ 520.781847][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a08098 [ 520.781859][ C1] RBP: ffffc90000a08120 R08: ffffc90000a08097 R09: 0000000000000000 [ 520.781878][ C1] R10: ffffc90000a08040 R11: fffff52000141013 R12: ffff888035bb2640 [ 520.781891][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888040e46ee8 [ 520.781904][ C1] FS: 0000000000000000(0000) GS:ffff888125d5c000(0000) knlGS:0000000000000000 [ 520.781919][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.781930][ C1] CR2: 000055bebbf13168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 520.781947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.781957][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.781968][ C1] Call Trace: [ 520.781974][ C1] [ 520.781986][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 520.782015][ C1] ? __build_skb_around+0x257/0x3e0 [ 520.782036][ C1] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 520.782057][ C1] ? skb_put+0x11b/0x210 [ 520.782077][ C1] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 520.782106][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 520.782129][ C1] ? nft_tproxy_eval+0x1af4/0x1c00 [ 520.782152][ C1] ? synproxy_pernet+0x45/0x270 [ 520.782179][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 520.782207][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 520.782233][ C1] ? nf_ip_checksum+0x13c/0x510 [ 520.782258][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 520.782286][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 520.782311][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 520.782346][ C1] nft_do_chain+0x409/0x1920 [ 520.782370][ C1] ? ip6t_do_table+0x1376/0x1560 [ 520.782395][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 520.782420][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 520.782441][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 520.782481][ C1] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 520.782509][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 520.782540][ C1] nft_do_chain_inet+0x25d/0x340 [ 520.782563][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 520.782585][ C1] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 520.782616][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 520.782645][ C1] ? NF_HOOK+0x9a/0x3a0 [ 520.782669][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 520.782693][ C1] nf_hook_slow+0xc2/0x220 [ 520.782714][ C1] NF_HOOK+0x206/0x3a0 [ 520.782738][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 520.782761][ C1] ? NF_HOOK+0x9a/0x3a0 [ 520.782783][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 520.782807][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 520.782837][ C1] ip6_input+0x16a/0x270 [ 520.782860][ C1] ? ip6_input+0x23/0x270 [ 520.782889][ C1] NF_HOOK+0x309/0x3a0 [ 520.782911][ C1] ? skb_orphan+0xaf/0xd0 [ 520.782936][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 520.782959][ C1] ? NF_HOOK+0x9a/0x3a0 [ 520.782981][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 520.783005][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 520.783033][ C1] __netif_receive_skb+0xd3/0x380 [ 520.783062][ C1] ? process_backlog+0x2d5/0x14f0 [ 520.783080][ C1] process_backlog+0x60e/0x14f0 [ 520.783105][ C1] ? __pfx_process_backlog+0x10/0x10 [ 520.783124][ C1] ? do_raw_spin_lock+0x121/0x290 [ 520.783147][ C1] __napi_poll+0xc7/0x480 [ 520.783172][ C1] ? net_rx_action+0x46d/0xe30 [ 520.783202][ C1] net_rx_action+0x707/0xe30 [ 520.783228][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 520.783263][ C1] handle_softirqs+0x283/0x870 [ 520.783289][ C1] ? do_softirq+0xec/0x180 [ 520.783317][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 520.783346][ C1] ? kernel_fpu_end+0xc8/0x120 [ 520.783365][ C1] do_softirq+0xec/0x180 [ 520.783390][ C1] [ 520.783395][ C1] [ 520.783402][ C1] ? __pfx_do_softirq+0x10/0x10 [ 520.783432][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 520.783456][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 520.783482][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 520.783510][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 520.783531][ C1] kernel_fpu_end+0xd2/0x120 [ 520.783549][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 520.783567][ C1] ? chacha_crypt_generic+0x8c0/0x910 [ 520.783586][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 520.783614][ C1] poly1305_blocks_arch+0x5b/0xe0 [ 520.783639][ C1] poly1305_update+0xd6/0x1b0 [ 520.783663][ C1] __chacha20poly1305_encrypt+0x26e/0x310 [ 520.783684][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 520.783705][ C1] ? __pfx___chacha20poly1305_encrypt+0x10/0x10 [ 520.783747][ C1] ? ktime_get_real_ts64+0xa2/0x390 [ 520.783771][ C1] chacha20poly1305_encrypt+0x2f4/0x700 [ 520.783791][ C1] ? ktime_get_real_ts64+0xa2/0x390 [ 520.783809][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 520.783831][ C1] ? __pfx_chacha20poly1305_encrypt+0x10/0x10 [ 520.783855][ C1] ? read_tsc+0x9/0x20 [ 520.783887][ C1] ? ktime_get_real_ts64+0x2e8/0x390 [ 520.783906][ C1] ? __pfx_ktime_get_real_ts64+0x10/0x10 [ 520.783925][ C1] ? __asan_memset+0x22/0x50 [ 520.783952][ C1] wg_noise_handshake_create_initiation+0x4dd/0x7e0 [ 520.783982][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 520.784009][ C1] ? __lock_acquire+0xab9/0xd20 [ 520.784038][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 520.784068][ C1] ? ktime_get_coarse_with_offset+0x83/0x140 [ 520.784088][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 520.784119][ C1] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 520.784141][ C1] wg_packet_handshake_send_worker+0x163/0x320 [ 520.784162][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 520.784195][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.784220][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 520.784249][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 520.784280][ C1] process_scheduled_works+0xade/0x17b0 [ 520.784327][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 520.784368][ C1] worker_thread+0x8a0/0xda0 [ 520.784401][ C1] kthread+0x711/0x8a0 [ 520.784426][ C1] ? __pfx_worker_thread+0x10/0x10 [ 520.784444][ C1] ? __pfx_kthread+0x10/0x10 [ 520.784467][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.784492][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.784519][ C1] ? __pfx_kthread+0x10/0x10 [ 520.784542][ C1] ret_from_fork+0x3f9/0x770 [ 520.784572][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 520.784603][ C1] ? __switch_to_asm+0x39/0x70 [ 520.784624][ C1] ? __switch_to_asm+0x33/0x70 [ 520.784643][ C1] ? __pfx_kthread+0x10/0x10 [ 520.784665][ C1] ret_from_fork_asm+0x1a/0x30 [ 520.784695][ C1] [ 520.898169][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 521.934468][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 522.987520][ C1] IPVS: lblc: UDP 0.0.0.0:0 - no destination available [ 523.563736][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 523.563761][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(full) [ 523.563789][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.563804][ T31] Call Trace: [ 523.563814][ T31] [ 523.563825][ T31] dump_stack_lvl+0x99/0x250 [ 523.563865][ T31] ? __asan_memcpy+0x40/0x70 [ 523.563899][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.563933][ T31] ? __pfx__printk+0x10/0x10 [ 523.563971][ T31] panic+0x2db/0x790 [ 523.564011][ T31] ? __pfx_panic+0x10/0x10 [ 523.564043][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 523.564070][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 523.564110][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 523.564140][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 523.564176][ T31] watchdog+0x102d/0x1030 [ 523.564210][ T31] ? watchdog+0x1de/0x1030 [ 523.564249][ T31] kthread+0x711/0x8a0 [ 523.564278][ T31] ? __pfx_watchdog+0x10/0x10 [ 523.564308][ T31] ? __pfx_kthread+0x10/0x10 [ 523.564336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.564366][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.564395][ T31] ? __pfx_kthread+0x10/0x10 [ 523.564422][ T31] ret_from_fork+0x3f9/0x770 [ 523.564456][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 523.564494][ T31] ? __switch_to_asm+0x39/0x70 [ 523.564516][ T31] ? __switch_to_asm+0x33/0x70 [ 523.564537][ T31] ? __pfx_kthread+0x10/0x10 [ 523.564565][ T31] ret_from_fork_asm+0x1a/0x30 [ 523.564605][ T31] [ 523.564985][ T31] Kernel Offset: disabled