last executing test programs: 3m8.173585331s ago: executing program 1 (id=1079): io_setup(0x8, &(0x7f00000001c0)) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000340)=0x7) 3m7.891308515s ago: executing program 1 (id=1081): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x60682, 0x2) flock(r0, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xff5f) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="3d0000006f010004000404000000080000b873b8bb4dbce7b1c6afd309e1144e0000000000010000000000000000000000000001000000060000000000000000000000000000000080000000b9ed1329aaf3b887466e131923b968005ee696319a4cf40ae3b06d21a21f99780d426da55573a6473d6f912e161bb5f99987581066ccac023be80831bfc465ba3dbbecf7b7c36badbc5d29ef609b60d7ddc4cd643e0b407da06552c4119fa2903b31c010e5765df6e0c7432e2c"], 0x3d) unshare(0x22020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3f, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x45, [0x0, 0x8]}}) r2 = gettid() getpriority(0x1, r2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 3m7.497100796s ago: executing program 1 (id=1082): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mmap(&(0x7f0000b08000/0x4000)=nil, 0x4000, 0xa, 0x10011, 0xffffffffffffffff, 0x9a974000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={0x0, 0xfffffe1e}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040)) r3 = fcntl$dupfd(r2, 0x406, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x3]}}, {0x0, 0x0, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35c", @ANYRESOCT]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x3}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), &(0x7f0000000940)=r4}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)={@val={0x0, 0xa00}, @val={0x2, 0x4, 0x7, 0x9, 0x101}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @multicast2, @remote, @local}}, 0x2a) write$UHID_CREATE2(r8, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4]}}) syz_io_uring_setup(0x274f, &(0x7f0000000080)={0x0, 0xfb5f, 0x8000, 0x0, 0xa6, 0x0, r3}, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r10 = inotify_init1(0x800) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000001a40)={{r10}, "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"}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast2, r9}, 0x14) 3m6.939182984s ago: executing program 1 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000700)={@remote, @empty, @val={@val, {0x88ca}}, {@x25={0x805, {0x0, 0x0, 0x0, "a67fb3ede2addfa3f1"}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x30, 0x6}]}}}]}, 0x3c}}, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000007300001802c00018014000300fe88000000000000000000100000000114000400fe8800000000000000000000000001013c0003800c00028005000100000000002c00018014000300fe88000000000000000000000000010114000400"], 0xbc}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000200)=0xfffffff1, 0x4) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) 3m5.894914099s ago: executing program 1 (id=1088): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x1000004, 0x9c7, 0x4, {0x9, @vbi={0x6, 0x400, 0x6a, 0x41416770, [0x7, 0x4], [0x9, 0x7], 0x108}}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget(0x3, 0x2, 0x323) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) fchdir(r4) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3m3.990845519s ago: executing program 1 (id=1094): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000500000000002800128009000100766c616e00000000180002800c0002001e0000000f00000006000100fe0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r8, 0xfffffffc, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @loopback}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x80000001, 0x0, 0x400000000}}}, 0x118) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560b, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@random="286cb991b564", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x81}, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}}, 0x0) 2m48.77173668s ago: executing program 32 (id=1094): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x16}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000500000000002800128009000100766c616e00000000180002800c0002001e0000000f00000006000100fe0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r8, 0xfffffffc, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @loopback}, @ib={0x1b, 0x7ac, 0x0, {"b2000000000000d24d93cfe66ee5a001"}, 0x80000001, 0x0, 0x400000000}}}, 0x118) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560b, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@random="286cb991b564", @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x81}, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}}, 0x0) 51.237403557s ago: executing program 2 (id=1499): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x3001800c, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x2, 0x6}}}}]}, 0x44}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)=@newtfilter={0x340, 0x2c, 0xd27, 0x70bd24, 0x25dbdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x310, 0x2, [@TCA_CGROUP_EMATCHES={0x30c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x7ff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x2bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x88, 0x1, 0x0, 0x0, {{0x200, 0x0, 0x5}, "f250768f3f7eadb3506e0c9e84639439cd88917d9f720b93d10ec927986f0ba15e09c05649adba5cbeee5a1eb7c4aa667bf03f7d54d41eb3af43f8ce91d5452945a4eabfe7d30cd93fa7b8560a396a3d23459b02d4b0b26b6927d07bc0eb919296f150601eb554a8dcadbaf713feac3793bb11dd6b66e99b0e"}}, @TCF_EM_CONTAINER={0xd4, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x3}, "badd0c960444e21a41bcdaa531cb068be3430f8bbc8adf696847b4ddfe291018ad2472c6cb3f190f55fa3ec6bc1cdfd1d0627bab8b16662700bd267cceed5b72a6c44a486134976b6c271ea26d880924b8d7f329359223977a4b3bfcb79cc2eadc29db810845d66d0edd3f351b541bfafee913344da6c1d45460cf6e76fd8d2ae4352db9aed91e8422d1d40141893448d2ed4e3414276c527bd7b9b235084e82de92c479c490cb794953d5093a3123857998073b77126e4777cb7b2fcc4b31abae3dcdc1b6606632"}}, @TCF_EM_IPT={0xe0, 0x2, 0x0, 0x0, {{0x826, 0x9, 0x8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x59, 0x5, "4b855538e020affb15b6f422c57ef6b3379101e0568ec777a24f66a28cb4fe9fce67ed1dc018614a3ea7209bd6d68866e08b90ef47905ee53e0900ce24979668169e7332ae24056f2d1828ed8a22286ecd6f837c1d"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x80}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x46, 0x5, "da8e49ea14d7f181d6fc2848e5d5ab04348e75fdbf0aa62403ec63f5a622e0cbb962371fba2feb57787e97c781b3e1aae2f62fa1158cd8dfe05555fc07505a9dae59"}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x6, 0x9, 0x1, "82596b7ed77fa67add"}}}, @TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x1}, "42e38e02ea44a6c5"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xb, 0x1, 0x7}, {0x11a1c0, 0x800, 0xff, 0x0, 0x7, 0x0, 0x2}}}, @TCF_EM_META={0x34, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="f99f349a830d", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8bbe33", @TCF_META_TYPE_VAR="301874"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff5c}}]}]}}]}, 0x340}}, 0x4804) 50.863446706s ago: executing program 2 (id=1501): io_uring_enter(0xffffffffffffffff, 0x6dba, 0x45f8, 0x60, &(0x7f0000000000)={[0x3]}, 0x8) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000000) ioctl$VT_DISALLOCATE(r0, 0x5608) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x2, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}}}, 0x88) ioctl$KIOCSOUND(r0, 0x4b2f, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, 0x37, 0x300, 0x70bd26, 0x25dfdbfb, {0x11}, [@typed={0x8, 0xb6, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x75, 0x0, 0x0, @uid=r3}, @generic="9ea8312b50837ed48943c44b1affdae7faf00eff2922f969be082f0c2f5d6c8f40f0b46d3e029763fb7d0c544ebf044144aa5ba58a95fe9d1d6e826307886a6a837042c0206ba8bd12612b9de5adde83", @generic="9c9aab51121427556c95917d7cca88f94504766436c1347a68d42e1be3b5d4e5c3684c", @generic="0598d8430d0235", @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x9}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) syz_usb_connect(0x4, 0x875, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x5a, 0x71, 0xd, 0x0, 0x1199, 0x9000, 0xc844, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x863, 0x4, 0x1, 0xfe, 0x20, 0x6, [{{0x9, 0x4, 0x2d, 0xe, 0xd, 0xed, 0xb2, 0xf7, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x897, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x11}, [@dmm={0x7, 0x24, 0x14, 0xb, 0x5}, @obex={0x5, 0x24, 0x15, 0x9}, @country_functional={0x8, 0x24, 0x7, 0x10, 0x1, [0x4]}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x1}, @acm={0x4, 0x24, 0x2, 0xf}]}, @hid_hid={0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xd40}}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x0, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xce, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x1, 0xe, 0x6}}, {{0x9, 0x5, 0x83, 0x0, 0x400, 0x81, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @generic={0x1a, 0x3, "98997bf8d93161e57f628367d39ee43e22cebd7e1cbc4522"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x0, 0x1, 0x1, [@generic={0x43, 0xe, "f33a99dbebe07bac034a4d349fb640fd30346f67a91fea4c322f6d7242f066c9a588de11d70e3694f172f80628d83604df1050d0a9d93bfc7910d3866cb5ab537b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x5, 0xdb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1000}, @generic={0x13, 0x21, "3fcdf92d156543e017fd2adeaadb4d4768"}]}}, {{0x9, 0x5, 0xd, 0x7a0f1505307e9382, 0x240, 0x3, 0x8, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0xdbeb6c9bbd7c8135, 0x29, 0x6}]}}, {{0x9, 0x5, 0xc, 0x1c, 0x10, 0xe2, 0xb1, 0x5f, [@generic={0xa4, 0x3, "be0b70b13ce93e11b41e9d09211dc062114a0cf978733778d913d40664c9daf456a3df6dd504a4cb39acf698d6e92604c1c846ea6f4a9681f83628089cf4128119573237ac1611052dcd7dd0f7f49247c8127cb46b3033c3e84a74ee91c9bb5b1a0b9092b4ce597b309f129116fc98a11d9c71f1661f7cc297767d1385588fc0ea796e55e184c8b1f2129bca1ebda3e4be45afe20b48304760e17abc897083af94d2"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x5, 0xfc, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0xf}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xf, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x430, 0x52, 0x5, 0xc}}]}}, {{0x9, 0x4, 0x8e, 0x5, 0x9, 0xff, 0xd1, 0x17, 0xff, [], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x3, 0x1}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x7, 0x4, 0x53, [@generic={0xec, 0x6, "9478fd33f9dca5a9c44e83c361eca500db722a5df02cea6db349d84832e05ccd49cb987feb1c61e72bfbe05c4ae13439fbdba548dfbda183b0dd24e8a757efb55bbdc567620ad5eecd3a087daa3e962c083f97ed63702ddf043e002641df65398f23e8aee6eefd68962123f978ac09d509cbe06025cea87e879ea85e3635fcfda26e4f08f2293fe21e034071fdd96b2914645e56ef04a66d1cb19950591b14ed997f547788e53514f698c299f1abfa698312cc4ba107581cda189959a64a0ee6e7bda80c914caa2c32d9c3213bccc0c6771f4427559474c21c1fa525442e3b7f268713bde57347d0d8af"}, @generic={0xcf, 0xd, "9db45f3788d8554053a10c8c3e5ce1409142d2b632d47d82e4e603536ddd52a7f4b19e2a1068910fc271552ba7001ae702bd12bf85659d535b6a5f2f79fdeae63d8ae50a98247ea278f3e1a370f5247549fa2a64865275c278ee0665fad374a16ca773ab3a1d4fafb4c5061bc145c0dadca7a04a04606c81016e92277b041f65b1aee10b80b297ee9c0aa59a228cea5858e9c2cd6478218fea8763fbf72db7e862c949e6253b1da28069a3e50192c3d7e924a881c17d704e974bb48e382f930feb749cd11e74c741e480ba612b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0xf7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x97172edacaf6285a, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x7, 0x5, 0x9, [@generic={0x7, 0x22, "93e668ba42"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x2a}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xb, 0xa6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0xb0, 0x2856}, @generic={0xad, 0x11, "aa45c9344feef4c5d0b7e59dcb43f2abae774be6ecdad41d6790a138a764501455457792df53b153eb7c50c5d41fd5f27626202ba7391209d25bc44c95d660c5bb7075d92a1ac7c7537cbed2639a39b596eb3b5c2dc336355084b22ce797bf2d164d557d9fb561e66a94933ba48118288b6397170853041aa1cd01df45e52cb758870da3420b5779fdef69294a56a9c1260873bd99337d06842e8f2adf31853723d422cac902dd9cad3d47"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x450, 0xe, 0xbc, 0x5, [@generic={0x5, 0xf, "b91e9d"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x0, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}, @generic={0xe7, 0xe, "714d276b2c895dcff892b18bcc9c2db6c5d7ce347ef7d92625f45824c3710e3d24a12beb2646687fd2e4ae0364969937cd46bdde0700a61ee62d052b9fdde34dd0a432f6e0f74f4f218ea86d75f94c10e0bd01d5b87997e319cfcc5ddd22cabd36cb0bcc3afd09e6c8f28af1a96006629c06f0d2c2317a3aeb89e96305fa69cb71030a892d1ec5b820588b477e6b85aa2a2d6a3edc2e0dfe2228f6b9895d4ae13d8ee0ec9fb266e39ddd529be799440a99468507cd9d368bf913b3ad4972b1362f1005f34775e0469a3bd4ca419fbf0e4f870820ad14524ead872edb215bd63ac6c7593159"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x4, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x2, 0xff, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7a, 0x10}]}}]}}, {{0x9, 0x4, 0x55, 0xf1, 0x10, 0x4a, 0x5, 0xe0, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x4, 0x5, 0x8}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x8], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x2, 0x1, 0xc1}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x3, 0x5}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x3, 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0xff, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1800}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x7, 0x81, 0x87}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x6, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x1f, 0x10, 0x4, 0x7, 0x80}}, {{0x9, 0x5, 0x8f, 0xc, 0x8, 0x2, 0x9b, 0x9}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x9, 0xfa, [@generic={0x23, 0xc, "4b82d7616b8e7666c2b1e052331340561049692f1d4f259c618600f8ad1418f2a4"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0x8, 0x7, 0xa}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x60, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @generic={0x57, 0x9, "08cd984eee1a451a2f5282c0d96338061f6fcbf4158b0057d57faa6b3f226899359fe6596100cb3c5b3e0496f5b0ec2c03e3c0cea9015fdedc58ce73f7a5e8a9e562bfc94fe31371a1e6e5e0e22c9f14e3fe0bbb72"}]}}, {{0x9, 0x5, 0x86, 0x0, 0x8, 0x4, 0x2, 0xfd, [@generic={0x96, 0x879fd74814693741, "e2c646974be5fc0a2aafe0d5051292a329e7e30855b34d6e7d1df1f45508a14a802d12220c7fcdebb4cd79a2354c3cb84c0e3e6094e2dec7a884401890ec15cad424036429dac853f1da65119a796872d4616621f441e2c1239bef14c5943ae6ee87d0b2e93744b5b7e32f2fc513a20f1366a7b07a53028efec6639f8418339996d402366b4f30dcc7afd21c1ed38a125bf30842"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x53, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x11, 0x8, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xec, 0x3, 0x5}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0xd, 0x2, 0x1}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xb, 0xf8, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x3}]}}]}}, {{0x9, 0x4, 0x2d, 0x5, 0x6, 0x38, 0xc6, 0x15, 0x2, [], [{{0x9, 0x5, 0xb, 0x1, 0x20, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x7f, 0x3, 0x3}}, {{0x9, 0x5, 0xd, 0x931c55bc46313080, 0x400, 0x6, 0x8, 0x9, [@generic={0x2a, 0x10, "da45157752683fd2e66a16d99f644974dd11ed67f39fe526568621c5ea4f5b8694d7b57ab4fd3923"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xf0, 0x40}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xde, 0xe, 0x3}}, {{0x9, 0x5, 0xc, 0x3, 0x5b7, 0x8, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x6, 0x7}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x300, 0x6d, 0x4, 0x7, 0x10, 0x5}, 0xb9, &(0x7f0000000c40)={0x5, 0xf, 0xb9, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4a, 0x6, 0x10, 0x7ff, 0x1}, @generic={0x8b, 0x10, 0x2, "d8bdafd16067a321c72de0fd894a4f738cf5207969d084fba40a4371c801231589850d148b9acaf93e6f46d9eb441885d23ccfbe165fec4b47dd0c0760c05fe91442663c3a428d5813c1aad75e50dba4a74f583b6f58dbadd82b538635821d5df0bd8278875cb4b7262fc7c61fc03b3d1d8236feceb6a202a37df24da136a472efa6a48d5a6ec718"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b585cb3370d21eeaf9d2eefdcf91ea6b"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x42c}}, {0xf2, &(0x7f0000000dc0)=@string={0xf2, 0x3, "b84b61ee8942de9401bfc60066a0f642c993ed62c2def9c95d2700b61a92bb7bd540825af4c58d5b7473a325f42772c72d4ec855bab0198316dad94e098bdcc7ca5c69d008ca5336815200e2ac3fb6ce6d2fd04aa7d54f3990d916a9c6905d545e70a09245532a1b06a083b76b6a00299e764476322bc815438acade6f848ea607846ea52afde544a05650adc52e7fb5b0bc9339e3e4f638336936e9d3f89edde55c15e4f966ca7b320c4b9681ae59d60447bb307bfefc0689bf687b887eaa6aa38ad186948f6204473f1b615b4ebf34922c5c312dbdf77871ede581cd1bd0ef3d74b576f56054b5568d29f1d48bcb7c"}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = fspick(r4, &(0x7f0000000f80)='./file0\x00', 0x1) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000fc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x81, 0xc}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x110, 0xa, 0x1, 0x7, 0x20, 0x47}, 0x54, &(0x7f0000001040)={0x5, 0xf, 0x54, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x4, 0xff0f, 0xbe, [0xc000, 0xff3f00, 0xc00f, 0x0, 0x8130, 0xffff00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0xc, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "05aefb33f1d3d8ee6fd16df56fc29498"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x401}}, {0xf0, &(0x7f0000001140)=@string={0xf0, 0x3, "627fd000faf3050efc00c864ae17998badc405a1526caf56283739e780fe87ab68a4a077554a9a58e10ab143f90c5dc5fecdf85e7770209338ccf160784d7c3e80691caa621c586318515f41915cd8d9af4e83e68b4bd01dcd8aa203e189713f7cee5b59448e653c1c128d066416df3801522457d3a7392b040eaa6cf7a679cb558a9fe09ac241c00a9ae15ad9b50ecbd32c5d96b232dd51b900073fc641e78c4b7f45e8265f7d1162e1c429f37aa758128e301737ed5b5ad6f090af9d61dd4d7903c2be5aba7a9950bba4c7548bbeb18b2f8509ace36d0208d54bc7aa1e6efcb2528cd072a6d184347d4393ad5e"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x827}}]}) io_setup(0x4, &(0x7f0000001300)=0x0) r7 = syz_open_pts(r4, 0x80000) r8 = openat$cgroup_ro(r4, &(0x7f0000001400)='io.stat\x00', 0x0, 0x0) r9 = eventfd2(0x0, 0x81001) io_submit(r6, 0x5, &(0x7f00000017c0)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0x2ad, r7, &(0x7f0000001340)="16536dec2f7dd06a38d7817df26625d4ee84883de3ce2beb8aa2c09fbe79e2d6176361e5cf7d472b792f815a00bc9f2fcfe00e686071400e9e2a2e37e72ae77ef3e555dd33", 0x45, 0x4, 0x0, 0x0, r4}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x1, 0x7, r8, &(0x7f0000001440)="ee7461e0bb1600986b32fa36bab4ff4213e66a679936a6524e5b37cdab87ff04184ac0e4f1843d25455afa343d5590ed048dd5667a33ed28dd4161954f", 0x3d, 0x6, 0x0, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0x6, r4, &(0x7f00000014c0)="f91a195561cb8ccb538cb15377d4dd76265d2b8e4046d8f5d37bfce60d4744b2fdc65a0a35f7d54297b28d263db8bcc6af102c1181d97bd4b72c64fbb4e7c0625cf21269112a8588878a72363ea3b2af657b20d5b9fb5d231f8f79dcc91d715de597e1f64213ba2f1e065ef19c7e36379f9a58c00d26d696db88a13dc88e3d36e7e4282f653d951fb39a63cd90f3d423a99bfed2f59b1fed9bea2738feb811ea59a2c7f43ea2bb0ce17d6ac1a3370a20b2e0f256ea52fb92eff4c476899cf7d111cf194a8147d138f876a62edf06d78c0eae8441675dbdd9c8c525", 0xdb, 0x9e, 0x0, 0x0, r4}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x5, 0x101, r5, &(0x7f0000001600)="f26d2e31ca248019fff763245884", 0xe, 0x8, 0x0, 0x7, r9}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x6, r4, &(0x7f0000001680)="c7168341aeec2f22e9cdb790357a6db4b84e6006e7ba8786d96f51511931b7f2d5868875b63bdd667dc13f9b609de167a0ce4123bffcbcc980ad39a2b19f6a91f2ee9181188ae3bcd772b85cdf792ab64729f91aa22d743d4e97796fcae4822a6857a422d48f8b569ea785a38d7d41e68eb02949e70740894fdddae0e69ade7fb5f3b36d2803233cba8c81279695edac81d911191172ccd9ccf2717b9bf352bf154aaea83b7d3f4b2a0f7f4964835b33bfa08bfb4cec204165b91af8a1bbd3e07319a903afad3eeadba59b9a03c8e670d053c9fae82187f800244d864828a41dfeed938c83a20be71a3368fc2aeef61154811084", 0xf4, 0x484, 0x0, 0x1}]) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000001800)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000001880)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000001940)={0x28, 0x1, r10, r11, 0x0, 0x0, 0x0, 0x75, &(0x7f00000018c0)="7ed6a63db578d6e4ad82eecc05f4e8bef3118012eb064cbe710bdd0668bbf3180131151d1e67a6bdc5cc5b58eb4a6b427ffbd178532702014457b10b65154604711fcbf547c5ae2993262a00405306a6b5594d8c9a32fb65b3252bac8f8134cf35488631469b6355194f2e96747292429cd03842d4"}) unshare(0x40000000) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001980)={0x8, 0x0, 0x0, r8, 0x4}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000019c0)="614f2ea694bcb6ffcc81e9b05e813457deff6af5aaa61a3cb949737cdc061b6ef4aaa487d24f3816a571c208ca195d3f7d76f13749ba7ef26d419efbe063a4b1b0027a1e27a836bd7206da96e076b2ee", 0x50) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000001a40)) write$rfkill(r8, &(0x7f0000001a80)={0x6, 0x9, 0x2, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000001ac0)={0x48, 0x2, r11}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001b40)) 48.565210441s ago: executing program 2 (id=1510): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1/file0\x00'}) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r7 = socket$inet(0xa, 0x4, 0x8001) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x0, 0x20006, 0xffffffff}, 0x10) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 45.615745278s ago: executing program 2 (id=1513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getpgrp(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xe, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d5", 0x15}], 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x4003, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000640)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000010c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xe0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1d0, 0x20a, 0x278, 0x1d0, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfe}, {0xffff, 0x4}, {0xffffffffffffffff, 0x6, 0x2}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x600000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0x9, 0x2, 0x5], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0xffff, 0x6, 0x8, 0xf, 0x3, 0xe, 0xe]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 40.435265504s ago: executing program 2 (id=1528): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x10000, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 40.137231595s ago: executing program 2 (id=1530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x1, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) syz_usb_disconnect(r1) epoll_create(0x10000e9) r3 = syz_io_uring_setup(0x231, &(0x7f0000002100)={0x0, 0xffffffff, 0xc601, 0x0, 0x8000000}, &(0x7f00000021c0)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x9}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0xfffffffb, 0x2000}) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0xb000203d}) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x5509, &(0x7f0000000180)=0x7) r9 = socket(0x6, 0x2, 0x3) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0xd30be2831201c0b) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000002340)="8f", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100003040000000000000000000000003453b0b722029d0c7e0562db76e0dacd2a6baace17a42acad68530fb657c27914cb5097ec6f0b698486812456c2e98e9c1698d603f0a09f63bcc6edbebac82b640ff5d1bea28cf7e2a846e6dea011c1a972918eef7b3f7f9e0dded03e0adf4b38db51cba3fe3fc077df724cf1c923dbc4e0d7ca557abbb6102eec08543d8fb5e6c41bc6373d3738a9e6b9ba518acd4de96b5cedfdc00000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x8000) 25.104296106s ago: executing program 33 (id=1530): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000006c0)={0x1, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) syz_usb_disconnect(r1) epoll_create(0x10000e9) r3 = syz_io_uring_setup(0x231, &(0x7f0000002100)={0x0, 0xffffffff, 0xc601, 0x0, 0x8000000}, &(0x7f00000021c0)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x9}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0xfffffffb, 0x2000}) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000080)={0xb000203d}) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x5509, &(0x7f0000000180)=0x7) r9 = socket(0x6, 0x2, 0x3) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0xd30be2831201c0b) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000002340)="8f", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xfb3, 0x9}, 0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100003040000000000000000000000003453b0b722029d0c7e0562db76e0dacd2a6baace17a42acad68530fb657c27914cb5097ec6f0b698486812456c2e98e9c1698d603f0a09f63bcc6edbebac82b640ff5d1bea28cf7e2a846e6dea011c1a972918eef7b3f7f9e0dded03e0adf4b38db51cba3fe3fc077df724cf1c923dbc4e0d7ca557abbb6102eec08543d8fb5e6c41bc6373d3738a9e6b9ba518acd4de96b5cedfdc00000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x8000) 14.593460708s ago: executing program 3 (id=1592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) close(r2) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r6, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.527304425s ago: executing program 3 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = syz_io_uring_setup(0x7a8e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000100)) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000140)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0, 0x0, 0x30}]) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x48041}, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xfefffffffffffffe, 0xfffffffc}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 11.872960444s ago: executing program 3 (id=1601): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x300}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x40000000, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r1, 0x141601) syz_open_dev$sndmidi(&(0x7f0000000180), 0x1, 0x290000) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4d, 0x0, 0x1}, {0x4, 0xfd}, {0x6}]}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x10, 0x8, 0x7f, 0x0, 0xb, "4d698651cc975436"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11.156270712s ago: executing program 3 (id=1602): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000000009040000010300000009210700000022040009058103"], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) r6 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x14c, &(0x7f0000001340)={[{0xcf, 0x4e00, "ef50edecc65e6ef284341bafbdb25369a2d88b77365b38a5f9e4a15f640770d52b9700d7f97c4aec5b8ddfc00a03ed76dcfa1b6d99a0c23ec0b494134fdc7917465d2d9bd0fc295761f8913f35dcc2649917164a5186f47ed2a0ccc30048eb22acca93bf871de57fe85677a4ec5b0fdb5dacc425ffa9e3920dc135635110ee562b008f1c03206cc7f36ee99ebc156c010bac785bf7e131bfafaee4324504d09b86c79082c94fda693688e1db9f31adc3437a55464cd6b2515e4c080f5892e43725956d19ed9b20518a8ea1d9949f0e"}, {}, {0x27, 0x4e00, "906d33c0dfa8c83df7b378ef9c23812c583bf7b6a1f092a7c0fc4a3d948abea7263387d0bb7890"}, {0x43, 0x4e00, "6817735fc3dfba37e4df3975ee5b69efa77504451e3ee991308f71489669077938a477d70c5468e9bb54ec994a66bb6ef8e4263c9add2bd55bd58bf0bf9e4981401a49"}]}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)="96", 0x1, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r1, 0x0, &(0x7f0000000900)='7J', 0x2, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4068, 0xfe4}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d11, &(0x7f0000000380)={0x0, 0x613c, 0x1000, 0x1, 0x3cd}, &(0x7f0000000400), &(0x7f0000000440)) r5 = syz_io_uring_setup(0x4e5d, &(0x7f0000000000)={0x0, 0x967f, 0x0, 0x0, 0xe4, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000100)) io_uring_enter(r5, 0x4ab7, 0x2e30, 0x22, &(0x7f0000000140)={[0x3d]}, 0x8) bind$netlink(r2, 0x0, 0x3d) r6 = socket$inet6(0xa, 0x80003, 0x101) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8000) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r11, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r12}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r11, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r12}, 0x10, &(0x7f0000000280)={&(0x7f0000001480)=ANY=[@ANYBLOB="05000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000001000040380200000246edc82ce55b5f1b2de2bb15fb359e891ecedc8a19d9e2a6b06697f2f60a1a9eb36af22b85adb38ffbb7bcd880081ffe6a5a6f86fb13cee7f8529f2552182ebd5d1bf8670d46d8db1f0db3c4936dc7d77f2c5ffe3d9cbbc0e3e88bec99c9f4c3061f924237442601d6a1fa2037"], 0x80}}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r13, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7, 0x3, "d8568c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8891) 9.653344843s ago: executing program 5 (id=1604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r2, &(0x7f0000000340)=""/129, 0x81) 9.509724703s ago: executing program 0 (id=1606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) close(r2) r3 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r6, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.209587942s ago: executing program 6 (id=1608): socket(0x22, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600"}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x4, 0x1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9002d00010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 8.75277254s ago: executing program 4 (id=1609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000002c0)=0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6", 0xc2}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x8be}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_getattr(r3, &(0x7f0000000300)={0x38}, 0x38, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x48100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c643c, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8.343000386s ago: executing program 0 (id=1610): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a4", 0xc1}, {&(0x7f0000000380)="3f82090c", 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x147}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001fff00000000fedbdf2500200000", @ANYRES32=0x0, @ANYBLOB="81fdffff000000003c0012800b00010067656e65766500002c0002801400070000000000000000000000000000000001050009000100000008000b4000000009040006"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x458}}, {0x5f, &(0x7f00000000c0)=ANY=[@ANYBLOB="5f03"]}, {0x0, 0x0}, {0x0, 0x0}]}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.792634736s ago: executing program 3 (id=1611): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x80) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="fecadd1dbd0f"}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000c80)={@rand_addr, 0x0}, &(0x7f0000000cc0)=0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000003000)=ANY=[@ANYBLOB="a00a0000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="0001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c0001002400000000000000006c696e6b75700000000000000000000000000000000000000000000500030006000000040004000800060048fb3ed29891cb25be42efec3b26125e0a835beabc509d99e447a14f35cc56df2bfd0c3dc5ea8f801c6c549fd5af26e161529b5a34c98692a3e066f7e84509ead823db8fede745e0d2d0cb5f5e94988f062a3221b75a2e6562fa1d62037ca7de243702723953030bc2162380fdee22a79ca9e1ed0e52fae1eb7a5b5035c55dffda2ac14cc7e80f1ba9e43d361ca0f8863ff7d18af8729e8cd3b664f1d7473f000000000000000000", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4001028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004005e00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700070000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0002028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000011000400616374697665626163df9bd66b7570000000003800010024000100616374697665706f7274000000000000000000000000f2000000000000000000050003000300000008", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000540004000900f77f0500000002008102060000000200000403000000018003030000008081000305c61cf61e0200050202000000050005070100000003000910b10d0000ff7f09f107000000400080dbf9ffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000900c6751db9309fa0d5f248e3fb5b7db38e84d24081400bdf3bfb782d2d9d245d22795a7bb6afd9a2f1981e60eca4764b77dba16c41cebe28d71308f66b6f7f055b05aba4ddddf4bbb28baf210fd280eb517ef1afd843435b26ce16317282641aa76bcf99656baa56a6aac8ef8d6d63bc550a9e8be88eb6c4832f3f12c8fda58f8e2eca6db0cc6c368b596c8effd1631a3c783eb00b2f9153d5be40cf82ed5bbd07ff87acdde69ab2c707e98c9627c281e122f38b0958b5c35b5acf7315d95545945ad0", @ANYRES32=0x0, @ANYBLOB="ac01028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002e0100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040035000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000c00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0xaa0}, 0x1, 0x0, 0x0, 0x4000}, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) r10 = dup(r5) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) preadv2(r11, &(0x7f0000000840)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000500)=""/232, 0xe8}, {0x0}], 0x3, 0x3, 0x7, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b000100000000090444"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 7.538919388s ago: executing program 4 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfea7) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x7c, 0x1000000000000, 0x0, 0x1fffffffe, 0x200100}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000001d80)={0x2, 0x4}, 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x10000016, 0x9, 0x3, 0xfffffffffffffffb, 0x0, 0x5, 0x5, 0x7fffffff}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400d4}, 0x40001) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0d2176399e936a366fee98a"}}, &(0x7f0000044000)) 7.173407767s ago: executing program 0 (id=1613): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x54, r4, 0x1, 0x70bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}]}, 0x54}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0x10, 0x800, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000340)="baf80c66b880cf898966efbafc0cec0fc7b88d19f3f30f20426667660f388242aaf20f09f32667660f320fa39d418166b99909000066b80040000066ba000000000f300f84dd002e0f01ca", 0x4b}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000a80)={{}, "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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.114843184s ago: executing program 5 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (fail_nth: 6) 6.086827769s ago: executing program 0 (id=1615): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x680) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0xa, @pix={0x4, 0x3, 0x38416761, 0x9, 0x1, 0x0, 0xc, 0x114c, 0x0, 0x3, 0x2, 0x5}}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x7, 0x5, 0x3, 0x3}, 0x40, [0x10, 0x200, 0x63, 0x6, 0x10001, 0x9, 0x3626, 0xffff, 0x3b, 0x4, 0xff, 0x5f19, 0x6, 0x3, 0x3, 0x6, 0x8, 0x7, 0xfffffff4, 0x23, 0xfffffff7, 0x1, 0x20003, 0x6, 0x6, 0x8, 0x10001, 0x0, 0x0, 0xb2, 0x0, 0x1, 0x6, 0x3, 0x6, 0x8, 0x8, 0x0, 0x80000001, 0x3, 0x1, 0x7, 0x4, 0x7ff, 0xfffffffd, 0x3, 0x9f, 0x1, 0x8f2, 0x9, 0x0, 0x100, 0x0, 0x6, 0x6, 0x7, 0x4, 0x9, 0x81, 0x2, 0x1aff, 0x8, 0x9, 0x7f], [0xd, 0x2, 0x9, 0xfffffffe, 0x4, 0x4, 0x87c5, 0x800, 0x9, 0xd, 0x10, 0x80000000, 0x5, 0x7, 0x4, 0xed2f, 0x8, 0x400, 0x6002, 0x7, 0x10001, 0x2, 0xdbf, 0x401, 0x8001, 0x5f58, 0x10, 0x200, 0x6, 0x4, 0x18, 0x80, 0x101, 0x8, 0x2, 0x4, 0x3, 0x63, 0x0, 0x7f, 0x0, 0x0, 0x101, 0x9, 0x42a4, 0x6, 0x5, 0x5, 0x7, 0x3, 0xfffffff3, 0x8d, 0x6, 0x6, 0x4, 0x0, 0x0, 0xff, 0x1, 0xffff, 0x36cc, 0x7, 0xa, 0x43d], [0x0, 0x80000000, 0xf, 0x400, 0x3, 0xd9, 0x0, 0x2, 0x1, 0x6586de57, 0x1ff, 0x6, 0x7, 0xec, 0x7, 0xfffffe00, 0x1, 0x1005, 0x80, 0x6, 0x5, 0x80000000, 0xfffffffc, 0x80, 0x1, 0xeb9, 0x1000, 0xec5, 0x0, 0x400, 0x1, 0xb54, 0x101, 0x3f, 0x100, 0x7, 0x0, 0x2, 0x4, 0x4, 0x9, 0x4, 0x69, 0x3, 0x3c5, 0x0, 0x6, 0x9, 0x8, 0x400000, 0x1, 0xe32, 0x2, 0xffff0000, 0xfffffff9, 0x85ebe063, 0x1, 0xc, 0x400, 0x2, 0x2, 0x3, 0xf, 0xa48], [0x1, 0x1, 0x8, 0x9, 0x8009, 0x5, 0x2351, 0x7, 0x6, 0xfff, 0x2, 0x6, 0x10, 0x1, 0x80000000, 0x1, 0xd, 0xa7f, 0x0, 0x100, 0x1, 0x4, 0xd2, 0x3, 0x8000002, 0x2b, 0x9, 0x4, 0x6, 0x7f, 0xea6b, 0x7, 0x2, 0x0, 0xffff8d95, 0xec, 0x0, 0x7f, 0xfffffffb, 0x10, 0x3, 0x9, 0xb, 0xfffffffe, 0x8, 0x5, 0x7e, 0xb, 0x3ff, 0x5, 0xe, 0x7, 0x7f, 0x6, 0x9, 0x93, 0x8, 0x6, 0x7f, 0x0, 0x7, 0x7, 0x0, 0x4]}, 0x45c) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000003800)=@newtfilter={0x15f0, 0x2c, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x9, 0xffe4}, {0x3, 0xc}}, [@f_tcindex={{0xc}, {0x159c, 0x2, [@TCA_TCINDEX_ACT={0x1598, 0x7, [@m_xt={0xf4, 0xd, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x98, 0x6, {0xff, 'mangle\x00', 0x9, 0x23, "63d31ac8e70448738db85cc3d96b14f53cff1199a44dd9072f86e5dd47e382dad96013f8bd26b462ec696ca5326b37fed9311b8b463de319384728fcc661094f7f57e8a01483d99c35931da1de770eaadd8f647ce1b318fcd3d9c2e79eaf090eee855b2f2df49f00b8216e07a422"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x8, 0x6, "4f7c87fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x90, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x11b6, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1900, 0x3}}]}, {0x4c, 0x6, "04e2ec0229ef5161072db00ec215c102609dd181c1db399b5dfcda8154be8a56a5ff84386f04b645ada9b449ae1b20a10bccc3f7198ec4b1709b2214c717a65c3c6ae88ac4751020"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x16c, 0x1f, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6d2, 0x0, 0x2, 0x9, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x4, 0x3, 0x10001, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1f5}]}, {0xf8, 0x6, "c750e80079f46f73ca5711c1d4734f6bb836b8b00ec7daa8ab3c1bf88bf75b37f020b7dce392cfb4bbf5b0506d6cb964b3a4596c748d6a177dc244860396e657d46817b97ee7cb302340f5fb1452663e826d627e849ee56636609519507c523fafa0b2bce474c7ebc9220d0a5f233c1a802fa40ade204cd976d34dc67af9f88873a0684f0b608d4595e0c42ac06f807bd35e421b268f8923fc6c0b8be231fce081e7be5b41196138db0996b9ad3a7715b90438955714891487ab333f5b213dbfd5e7283eedba2724bfc68bbf3f170c86bd0eb4361601135adbb5e32db71c3ba86bca957ee7c4c472880c14e23535eaec808ad6d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x6c, 0x14, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x5d, 0xffffffffffffffff, 0x8, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x194, 0x14, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1ff, 0x1, 0x1, 0x6}}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x6, 0xcdee, 0x3ff}}, @TCA_DEF_DATA={0x7, 0x3, '!&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x85a, 0xa4da, 0x2, 0x9, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0xffffffffffffffff, 0x8, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8fd, 0x0, 0x10000000, 0xffff, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3d, 0x4, 0x7, 0x1ff, 0xee6e}}, @TCA_DEF_DATA={0x10, 0x3, '/dev/uinput\x00'}]}, {0xa6, 0x6, "48031742d67af0ad2bbe16ade365ac65510b7a78d88a1247eb2944b4ff7e6f6243e1527bd9554ffd6c2fb2eefacc6f32116d37a68c4b22281a72cc8acb96e6415aebd52ef8a57b5f742d6c6662ddbb81db89b41e9c73e726c3364cd894a728bdc52572b9aeff620bb9da32dee6a15ba820420b6159b178e3391d834c0c0b14ea223c2f9d09a1d0717482ab8a7d2718844a27062abffb791ea37ec6a870dde08e3b75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x10a4, 0xb, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8e74000, 0x0, 0x10000000, 0x8, 0x427}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x6, 0x40, 0x375}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x7, 0x7, 0x56c}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xf, 0x3, 0x622, 0xeb}, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x15f0}, 0x1, 0x0, 0x0, 0x4040}, 0x8015) syz_io_uring_setup(0x536, &(0x7f0000000300)={0x0, 0x265c, 0x4, 0x2, 0xf9}, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_io_uring_setup(0x29f8, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@newtaction={0x2c0, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2a8, 0x1, [@m_csum={0x4c, 0x14, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x128, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0xf9, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426620f308c5e7fdb41bd5c78d6dfc4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x130, 0x5, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}]}, {0xed, 0x6, "6142159063a4e72a674acce86fe8ef91cd4871fbeeb1590ec80a2080de5dca9377dbae8c5896243675b06a41e97608570ef4a0894d030f1ff735f91a042aab26819b102710db983ca9649c90a3f7793dfb4d044e1aba254e3386f8f28e8759295bb95440d5d952bc34acd48332e9c116c984faa697ed0477606aa472b03627a1d9f850c1f61d4bb263fe30b9f09908f5def39ac6706b12ace6a93c048ae5e460631c4a334df40c1857ea8fb3395af34bba31f152a97324649f9aa03c654290d32a389f22d51a622de27a825cbe383c4819910137eb0856fe25d09ebf3f6019fe3d4951ff7eb54f48de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x453, 0x2, 0x2, 0x25dfdbfe, "451c405e7a191fa1807df4e40d6ea9261563b877ce393e289ee0a9b10b0738ab965fe86f4a0359", ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4008040) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.393520933s ago: executing program 5 (id=1616): rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88306, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 4.508386748s ago: executing program 6 (id=1617): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pipe2(&(0x7f0000000140), 0x0) fsetxattr$security_capability(r2, &(0x7f0000000080), &(0x7f0000000200)=@v2={0x2000000, [{0xa9e4, 0x7}, {0xfffff688, 0x2}]}, 0x14, 0x1) r3 = socket(0x1e, 0x4, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x2c) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="1ff19c8c1841b52bfc"], 0x0) r7 = open$dir(&(0x7f0000000240)='./file0\x00', 0x270640, 0x0) getdents(r7, &(0x7f0000000280)=""/22, 0x16) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000000)="11c3f175c5f2adc002202ff97f4ac0e0986f5bbec2de82ec7774957990ac8abf06b8ae382bcd458d77c1a4cfe1db55f85541b1808f4c39faccbafc1a7d0106c4cbd038dd09e9d332aaa644fa165da53a05a575eed75a704e07d2ba5dbe94a7f57c267bfb75af0ec03da768aa185ee7f78bb7a06acf2dc1626adcca3a2e7838a1a379e891d8c133bbb5992b856dd1511680fe9533c8fa6b3e338a396d07ff5ed7688d2f2686bbed2843c59e1edceff1293046322a405b8f3bc393344d7ea2a2623dc6d53831405da34cb3d49096c901c8a7c064165f8796e568", 0xd9}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="c8000000000000000f0100000400000031ca9f13e55c273df1591836846fd2542e60532faeb2cb52221f6544100b6cc5de5c5564dcf4c312059d6e67634ec599bcc0a93f147756ef0d63393d7b7530cc5055cb15c79a3ac37f8bced63474e18a59e958fca17e0a07596148da7771dc24fd9520de4a1cb9e72051f1630826cf6af3e20157745c885a02b93630f29bec26d303022dbce3f93b7000ca6b8f451393814e9de7990294c032e99dded525aa3200eb20a44488f4d35527487fd3fe4fc91d2664aa529caac6c937d33a280000000000007e3a46ab8334a6edafc0c77b8fc25955d3f8232737e1d6bfb4e042363fe23e73e08f05f9a3c267435bcec8ed8e565cc920d3f09f0849865e382c4460c236efe96ce6dc508293638c364a042f9dd21ae8ad8f78813459e8fc29235d9e16412309ad30f453fb4f42bfd81a9d0b6b"], 0xc8}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) 3.94458745s ago: executing program 3 (id=1618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getpgrp(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xe, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d5", 0x15}], 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x4003, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000640)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000010c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xe0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1d0, 0x20a, 0x278, 0x1d0, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfe}, {0xffff, 0x4}, {0xffffffffffffffff, 0x6, 0x2}, 0x3, 0x80000001}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {0x0, 0x600000000000000}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0x9, 0x2, 0x5], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0xffff, 0x6, 0x8, 0xf, 0x3, 0xe, 0xe]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3.647537894s ago: executing program 0 (id=1619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffc, 0x6, 0x9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="1ef7751b68fe", 0x0, 0xfffffffe, 0x10012, 0xffffffffffffffff, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}, {"c0be1c21bdad2977c3ffebe162c71801ce7f100f0d45b6e1ec942f5b4d6e7090722728ddff603d6e249b78cc265d6d49b49524d1aeaf93a3fc71854b5a2adcfa893307bbe29fbde4489b0558d0277ab82f73a567bea81dea7fe0382e"}}}}}}, 0x0) 2.837651031s ago: executing program 4 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 2.837239931s ago: executing program 0 (id=1621): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000000009040000010300000009210700000022040009058103"], 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) r6 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x14c, &(0x7f0000001340)={[{0xcf, 0x4e00, "ef50edecc65e6ef284341bafbdb25369a2d88b77365b38a5f9e4a15f640770d52b9700d7f97c4aec5b8ddfc00a03ed76dcfa1b6d99a0c23ec0b494134fdc7917465d2d9bd0fc295761f8913f35dcc2649917164a5186f47ed2a0ccc30048eb22acca93bf871de57fe85677a4ec5b0fdb5dacc425ffa9e3920dc135635110ee562b008f1c03206cc7f36ee99ebc156c010bac785bf7e131bfafaee4324504d09b86c79082c94fda693688e1db9f31adc3437a55464cd6b2515e4c080f5892e43725956d19ed9b20518a8ea1d9949f0e"}, {}, {0x27, 0x4e00, "906d33c0dfa8c83df7b378ef9c23812c583bf7b6a1f092a7c0fc4a3d948abea7263387d0bb7890"}, {0x43, 0x4e00, "6817735fc3dfba37e4df3975ee5b69efa77504451e3ee991308f71489669077938a477d70c5468e9bb54ec994a66bb6ef8e4263c9add2bd55bd58bf0bf9e4981401a49"}]}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x40000000}, 0x8}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3e8, 0x2a8, 0x2a8, 0x3e8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4e0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x7f, 0x4) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioperm(0x0, 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000200)={0x18, r7, 0x2, 0x0, &(0x7f0000000080)=[{0x40000000007fff, 0x3}, {0x4003fffa, 0x501b6456}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r7, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) 2.160699032s ago: executing program 6 (id=1623): io_setup(0x8, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000340)=0x7) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x10040, 0x191) 1.912429104s ago: executing program 4 (id=1624): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_vhci(0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fc, 0x0, 0x200000, 0x1, 0x0, 0x3, 0xfffffffffffffffd, 0x5, 0x7, 0x9], 0x3000, 0x280384}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r3, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xbf, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x41) 1.577377481s ago: executing program 6 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open$dir(&(0x7f0000000000)='./file1\x00', 0x880, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semop(0x0, &(0x7f0000000400)=[{0x4, 0xffe0}, {0x1, 0x3, 0x1000}], 0x2) sendfile(r4, r3, 0x0, 0x100000002) 1.309477927s ago: executing program 6 (id=1626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040000000000180"]) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sync() syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000e65d00000000000000000000000a20000000000a03000000ffffffeb0000070000040900010073797a30000000008c000000090a010400000000000000000700000408000a40020000000900020073797a30000000000900010073797a3000000000080005400000000e48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001800b00010064796e7365740000080003400000012014000000"], 0xd4}}, 0x20050800) 579.700036ms ago: executing program 5 (id=1627): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002280)={0x0, 0x5, 0xe08}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x48, 0x7, 0x5}) 357.392391ms ago: executing program 4 (id=1628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x3, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0xb8}, {0xfa, 0x0, 0x6}, {}, {0x1, 0x8f, 0xd4, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x6, '\x00', 0xff}, {0x20, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x70}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x13}, {0x48, 0x0, 0xf}, {0x1, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xa, 0x3, '\x00', 0x7}]}}) 25.565806ms ago: executing program 4 (id=1629): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000280)={0x3}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_emit_ethernet(0x5cf, &(0x7f0000001580)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa32884866e12c3805992f0020010000000000000000000000000002fe80000000000000000000000000002f0206040300380000fc010000000000000000000000000000ff010000000000000000000000000001fe880000000000000000000000000101ff1204090008010000000000000000000000ffffac1e010100000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000060000000000000000000000000000000000000100000000000000000000ffffac1414bbfc010000000000000000000000000001fe8000000000000000000000000000aaff0200000000000000000000000000010001000000000000000100010800000000000000000000005c0002c1660000002b0000000000000000010000000000005c2b000000000000040181c910fe8000000000000000000000000000110502000708ae91783643b74891ce67cf1db59ccfdca219b991ee2e3727273b03ccfe8fca466eb3708761ced96edfa6c1fdee1baf0645fcd84247fd3a8cf8dbe1ef72319d34c106ddfa3c7fce64ffdd06857c821cb2a8b4a9138954f05fca3448522ac55765cc1db41631c7bd27ab41f5254be2af5741e6025940dfcb03b7ce81d64722e04b264cd8f3f296af3dfe815afaf68e9414120314ba9c289c6d698e242768d57e1a16d893839716990111aa994f8a0190c204000004000688e02b5249a1d3483ce168cec7d1b3082286ba13eab72b6aef6466e4c30c521a42f9211fb18b899fb0def76ec2240ed596640bcdaad064c13e7558671b2c87f7e75600f9ff8cbaf97d4d1a27ffa1440be0a624c7b34b164301dfeca0bbb649381f9fbd0852cecdb12f428fc41360a0ecbe85241aa8cac86ce520c1bc1d75b1ebe18bbd762dc1432bd6000000000000003a2000000000000004b5815a1e8ddddc57cc01850ec4ca7c89cfeb8136fbc60c548e32a85062571393d231cab7a94b4012e9da7125c72e928c2b86d7fd0858f9a3eb8aff1cb13570c6d89c188e10b033175c4268ae615a21abc4ed6501aefa3dc5d85fa9a6a9c82884501b82a0d481938dc33989247e7100522e4dab056f3df7ffae46d89c0d035e671845ac23c6a66b0c54e87bbc50b3aa70595143d7288ad4387552389b3e5292ca1ff01ee44f9c42f74199d06de4472c0826c89096e4e407180000000304fc0900ff0f00000000000001000000000000000502032107280000000308080400000000000000000005000000000000002e9e000000000000010000000000008004016a0000000000008800010b000000000420880b00120002c2eaaf110a8f22ae54d8c0952aa57d5dbddb040008000004000300990da517cf071dbc34002066eb8f77ecdc47dec2e067fe915f53528b2acb1ed5692ccb3180b834d99ed3bcfe71020c69eef478d1cc9f6b70c42129f5945b32c053ada5173dadbf09879b962dd6dbecbf5f4f4ff5573167a5b719963049afcd6c390319ac3cac2bd8441ac26a8583e119bd5f0807d6986b25b3ef96003a991be750e927304b57c91efa27cac5d5446c0d0086dd0001c457c772c17f7af244c7ad86bd03e7a91f2789779523246747f019753eb5507087a31ec0c2b8653288c4dc45814f6ac086f607fcf0e3ff514f14badc3f747ffd8cc61d75602d4fc7d3f5dfb4d06e621676b306c407334d1d562ae7ba0f4c7c522ee22486d65a4a634af245e700c771aabda6dfb750d47184080088be000000001901cb070100000000000001080022eb0000000428008f06020000000000bd3e2145171f0800655800000002f944fb7adfa0161a99a781b63f2f1164a2f58c5dcf92b99366e5663230d24669591c443ee6fa8346e172c3c5cbef60b2126b653442eea9b0324b769c176e6b8db46dd5f325762412c918cc38c84cadeccea3dabc7014ee02689e2bf74c7cf4a092f6e5dc66a0b4e7cf9f106d32f7f42809339c3ff34924dcba6ceaa09e97399cd7379aaaa23157f2186622d180dd3059eeae232c06b6a4c799909d0c4c662cd2a1b0c5d813025e51b3f43c3bbb49fbb322a3f89fcd52d5bddf8290898c24b2cea35b360102bdadfee10479721afb726fc8e9d6ad65d4fee74dd301204570493307997169"], &(0x7f0000000080)={0x0, 0x4, [0x3d5, 0x593, 0xc12, 0xc3a]}) r7 = syz_open_dev$video(0x0, 0x485, 0x40400) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x0, 0x3}, 0x0) 0s ago: executing program 5 (id=1630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r5, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000001d80)={0x2, 0x4}, 0x2) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400d4}, 0x40001) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0d2176399e936a366fee98ac668a2"}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r7, &(0x7f0000000000), 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, 0x0, 0x840) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) kernel console output (not intermixed with test programs): T10576] dump_stack_lvl+0x189/0x250 [ 752.982117][T10576] ? __pfx____ratelimit+0x10/0x10 [ 752.982151][T10576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.982170][T10576] ? __pfx__printk+0x10/0x10 [ 752.982190][T10576] ? __might_fault+0xb0/0x130 [ 752.982225][T10576] should_fail_ex+0x414/0x560 [ 752.982262][T10576] _copy_from_user+0x2d/0xb0 [ 752.982287][T10576] ___sys_recvmsg+0x12e/0x510 [ 752.982321][T10576] ? __pfx____sys_recvmsg+0x10/0x10 [ 752.982362][T10576] ? __fget_files+0x3a0/0x420 [ 752.982406][T10576] do_recvmmsg+0x307/0x770 [ 752.982443][T10576] ? __pfx_do_recvmmsg+0x10/0x10 [ 752.982484][T10576] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 752.982512][T10576] __x64_sys_recvmmsg+0x190/0x240 [ 752.982548][T10576] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 752.982583][T10576] ? do_syscall_64+0xbe/0x3b0 [ 752.982607][T10576] do_syscall_64+0xfa/0x3b0 [ 752.982625][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.982640][T10576] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 752.982655][T10576] ? clear_bhb_loop+0x60/0xb0 [ 752.982678][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.982700][T10576] RIP: 0033:0x7fc2aff8e929 [ 752.982718][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.982736][T10576] RSP: 002b:00007fc2b0d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 752.982759][T10576] RAX: ffffffffffffffda RBX: 00007fc2b01b5fa0 RCX: 00007fc2aff8e929 [ 752.982773][T10576] RDX: 0000000000000700 RSI: 0000200000001440 RDI: 0000000000000004 [ 752.982783][T10576] RBP: 00007fc2b0d17090 R08: 0000000000000000 R09: 0000000000000000 [ 752.982792][T10576] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000001 [ 752.982801][T10576] R13: 0000000000000000 R14: 00007fc2b01b5fa0 R15: 00007fc2b02dfa28 [ 752.982827][T10576] [ 753.751508][ T5878] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 753.901079][T10589] create_pit_timer: 17 callbacks suppressed [ 753.901099][T10589] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.106902][T10589] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 754.547160][ T5878] usb 5-1: config 3 has an invalid interface number: 161 but max is 0 [ 754.566772][ T5878] usb 5-1: config 3 has no interface number 0 [ 754.583121][ T5878] usb 5-1: config 3 interface 161 has no altsetting 0 [ 754.583489][T10589] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 754.696133][T10589] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 754.734836][ T5878] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 754.771691][T10589] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 754.797722][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.811435][ T5878] usb 5-1: Product: syz [ 754.821728][ T5878] usb 5-1: Manufacturer: syz [ 754.829845][ T5878] usb 5-1: SerialNumber: syz [ 754.842896][T10589] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 754.853144][T10589] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 754.865199][T10589] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 754.914767][T10589] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 754.984425][T10589] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 755.109797][ T5878] go7007 5-1:3.161: probe with driver go7007 failed with error -12 [ 755.129751][ T5948] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 755.227841][ T5878] usb 5-1: USB disconnect, device number 68 [ 755.305144][ T5948] usb 6-1: USB disconnect, device number 6 [ 755.484893][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.492600][T10601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.531434][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.604918][T10601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.963065][ T979] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 756.102900][T10610] FAULT_INJECTION: forcing a failure. [ 756.102900][T10610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.161851][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.4.1247 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 756.161880][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 756.161890][T10610] Call Trace: [ 756.161897][T10610] [ 756.161903][T10610] dump_stack_lvl+0x189/0x250 [ 756.161927][T10610] ? __pfx____ratelimit+0x10/0x10 [ 756.161950][T10610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.161968][T10610] ? __pfx__printk+0x10/0x10 [ 756.161989][T10610] ? __might_fault+0xb0/0x130 [ 756.162014][T10610] should_fail_ex+0x414/0x560 [ 756.162039][T10610] _copy_from_iter+0x1db/0x16f0 [ 756.162057][T10610] ? rcu_is_watching+0x15/0xb0 [ 756.162076][T10610] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 756.162102][T10610] ? __pfx__copy_from_iter+0x10/0x10 [ 756.162118][T10610] ? __build_skb_around+0x257/0x3e0 [ 756.162143][T10610] ? netlink_sendmsg+0x642/0xb30 [ 756.162161][T10610] ? skb_put+0x11b/0x210 [ 756.162181][T10610] netlink_sendmsg+0x6b2/0xb30 [ 756.162206][T10610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.162227][T10610] ? aa_sock_msg_perm+0x94/0x160 [ 756.162250][T10610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 756.162273][T10610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.162292][T10610] __sock_sendmsg+0x219/0x270 [ 756.162318][T10610] ____sys_sendmsg+0x505/0x830 [ 756.162352][T10610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.162388][T10610] ? import_iovec+0x74/0xa0 [ 756.162417][T10610] ___sys_sendmsg+0x21f/0x2a0 [ 756.162445][T10610] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.162490][T10610] ? __fget_files+0x2a/0x420 [ 756.162509][T10610] ? __fget_files+0x3a0/0x420 [ 756.162536][T10610] __x64_sys_sendmsg+0x19b/0x260 [ 756.162558][T10610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 756.162584][T10610] ? __pfx_ksys_write+0x10/0x10 [ 756.162600][T10610] ? rcu_is_watching+0x15/0xb0 [ 756.162620][T10610] ? do_syscall_64+0xbe/0x3b0 [ 756.162637][T10610] do_syscall_64+0xfa/0x3b0 [ 756.162650][T10610] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.162672][T10610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.162686][T10610] ? clear_bhb_loop+0x60/0xb0 [ 756.162704][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.162718][T10610] RIP: 0033:0x7fab1e58e929 [ 756.162732][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.162744][T10610] RSP: 002b:00007fab1f377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.162761][T10610] RAX: ffffffffffffffda RBX: 00007fab1e7b5fa0 RCX: 00007fab1e58e929 [ 756.162772][T10610] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 756.162782][T10610] RBP: 00007fab1f377090 R08: 0000000000000000 R09: 0000000000000000 [ 756.162792][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.162800][T10610] R13: 0000000000000000 R14: 00007fab1e7b5fa0 R15: 00007fab1e8dfa28 [ 756.162822][T10610] [ 756.454012][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.764252][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 756.773597][ T979] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.816977][ T979] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 756.826425][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.837029][ T979] usb 6-1: config 0 descriptor?? [ 757.011976][ T30] audit: type=1326 audit(1752056492.485:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 757.223954][ T979] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 757.250037][ T30] audit: type=1326 audit(1752056492.505:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 757.281502][ T5948] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 757.411712][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 757.546977][ T979] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 757.562157][ T30] audit: type=1326 audit(1752056492.535:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 757.584668][ T979] usb 5-1: config 0 has no interface number 0 [ 757.584727][ T979] usb 5-1: config 0 interface 12 has no altsetting 0 [ 757.616099][ T979] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 757.645671][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.671402][ T979] usb 5-1: Product: syz [ 757.675647][ T979] usb 5-1: Manufacturer: syz [ 757.735309][ T979] usb 5-1: SerialNumber: syz [ 757.765014][ T979] usb 5-1: config 0 descriptor?? [ 757.853556][T10606] could not allocate digest TFM handle poly1305-simd [ 758.471551][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 758.789176][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.829179][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.896288][ T979] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 758.915003][ T979] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 758.939874][ T979] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 758.964957][ T979] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 758.984029][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.999060][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.008931][ T30] audit: type=1326 audit(1752056492.545:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 759.051012][ T979] usb 5-1: USB disconnect, device number 69 [ 759.255663][ T30] audit: type=1326 audit(1752056492.545:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 759.268125][ T979] usb 6-1: USB disconnect, device number 7 [ 759.563952][ T30] audit: type=1326 audit(1752056492.545:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 760.096422][ T30] audit: type=1326 audit(1752056492.545:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x7ffc0000 [ 760.181907][ T30] audit: type=1326 audit(1752056492.545:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ba698d290 code=0x7ffc0000 [ 760.564323][ T30] audit: type=1326 audit(1752056492.545:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ba698e52b code=0x7ffc0000 [ 760.790903][T10652] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 760.800486][ T30] audit: type=1326 audit(1752056492.545:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.3.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ba698e52b code=0x7ffc0000 [ 761.188083][ T5948] usb 4-1: unable to get BOS descriptor or descriptor too short [ 761.601769][ T5948] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 761.609441][ T5948] usb 4-1: can't read configurations, error -71 [ 761.721059][T10671] create_pit_timer: 22 callbacks suppressed [ 761.721079][T10671] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 762.000014][T10671] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 762.016819][T10671] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 762.068021][T10671] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 762.122196][T10671] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 762.171738][T10671] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 762.190474][T10671] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 762.208652][T10671] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 762.218125][T10671] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 762.226525][T10671] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 763.375146][T10689] vivid-000: disconnect [ 763.390023][T10688] vivid-000: reconnect [ 763.861455][ T979] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 764.033259][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.064067][ T979] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 764.087237][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.113718][ T979] usb 5-1: config 0 descriptor?? [ 764.188333][ T979] usb 5-1: Found UVC 0.00 device (10c4:ea90) [ 764.207156][ T979] usb 5-1: No valid video chain found. [ 764.302903][T10678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1265'. [ 764.477506][ T5989] usb 5-1: USB disconnect, device number 70 [ 765.183595][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.240874][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.330081][T10715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.339970][T10715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 765.579993][T10723] SET target dimension over the limit! [ 765.678598][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.725409][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.322357][T10723] could not allocate digest TFM handle poly1305-simd [ 766.415581][ T5897] Bluetooth: hci5: command 0x0c1a tx timeout [ 766.768016][T10746] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 766.919034][T10751] sctp: [Deprecated]: syz.2.1283 (pid 10751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.919034][T10751] Use struct sctp_sack_info instead [ 767.012186][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 767.281618][ T5948] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 767.506831][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 767.540537][ T5948] usb 3-1: not running at top speed; connect to a high speed hub [ 767.566282][ T5948] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 767.614433][ T5948] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 767.696660][ T5948] usb 3-1: Dual-Role OTG device on HNP port [ 767.716312][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 767.771027][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.824111][ T5948] usb 3-1: Product: syz [ 767.828430][ T5948] usb 3-1: Manufacturer: syz [ 767.879092][ T5948] usb 3-1: SerialNumber: syz [ 768.114224][ T5948] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 768.127252][ T5948] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 768.176977][ T5948] usb 3-1: USB disconnect, device number 45 [ 768.509334][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1288'. [ 768.668788][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.680286][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.981658][ T979] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 768.994551][ T5948] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 769.111471][ T5978] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 769.158252][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 769.175527][T10772] FAULT_INJECTION: forcing a failure. [ 769.175527][T10772] name failslab, interval 1, probability 0, space 0, times 0 [ 769.188356][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.5.1290 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 769.188386][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.188400][T10772] Call Trace: [ 769.188409][T10772] [ 769.188419][T10772] dump_stack_lvl+0x189/0x250 [ 769.188452][T10772] ? __pfx____ratelimit+0x10/0x10 [ 769.188486][T10772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.188534][T10772] ? __pfx__printk+0x10/0x10 [ 769.188569][T10772] ? __lock_acquire+0xab9/0xd20 [ 769.188611][T10772] should_fail_ex+0x414/0x560 [ 769.188671][T10772] should_failslab+0xa8/0x100 [ 769.188704][T10772] kmem_cache_alloc_noprof+0x73/0x3c0 [ 769.188730][T10772] ? skb_clone+0x212/0x3a0 [ 769.188770][T10772] ? __pfx_skb_network_protocol+0x10/0x10 [ 769.188804][T10772] skb_clone+0x212/0x3a0 [ 769.188831][T10772] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 769.188860][T10772] dev_queue_xmit_nit+0x416/0xcc0 [ 769.188887][T10772] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 769.188926][T10772] dev_hard_start_xmit+0x1be/0x830 [ 769.188975][T10772] __dev_queue_xmit+0x1adf/0x3a70 [ 769.189013][T10772] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 769.189043][T10772] ? __dev_queue_xmit+0x27e/0x3a70 [ 769.189075][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.189112][T10772] ? __pfx___dev_queue_xmit+0x10/0x10 [ 769.189161][T10772] ? __copy_skb_header+0xa7/0x550 [ 769.189190][T10772] ? __asan_memcpy+0x40/0x70 [ 769.189212][T10772] ? __skb_clone+0x63/0x7a0 [ 769.189246][T10772] ? __skb_clone+0x483/0x7a0 [ 769.189283][T10772] ? skb_clone+0x246/0x3a0 [ 769.189318][T10772] __netlink_deliver_tap+0x5ad/0x850 [ 769.189359][T10772] ? netlink_deliver_tap+0x2e/0x1b0 [ 769.189388][T10772] netlink_deliver_tap+0x19c/0x1b0 [ 769.189417][T10772] netlink_unicast+0x72f/0x8d0 [ 769.189453][T10772] netlink_sendmsg+0x805/0xb30 [ 769.189492][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.189523][T10772] ? aa_sock_msg_perm+0x94/0x160 [ 769.189558][T10772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.189591][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.189627][T10772] __sock_sendmsg+0x219/0x270 [ 769.189666][T10772] ____sys_sendmsg+0x505/0x830 [ 769.189701][T10772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.189739][T10772] ? import_iovec+0x74/0xa0 [ 769.189764][T10772] ___sys_sendmsg+0x21f/0x2a0 [ 769.189789][T10772] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.189843][T10772] ? __fget_files+0x2a/0x420 [ 769.189867][T10772] ? __fget_files+0x3a0/0x420 [ 769.189899][T10772] __x64_sys_sendmsg+0x19b/0x260 [ 769.189925][T10772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.189956][T10772] ? __pfx_ksys_write+0x10/0x10 [ 769.189985][T10772] ? rcu_is_watching+0x15/0xb0 [ 769.190009][T10772] ? do_syscall_64+0xbe/0x3b0 [ 769.190029][T10772] do_syscall_64+0xfa/0x3b0 [ 769.190043][T10772] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.190068][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.190084][T10772] ? clear_bhb_loop+0x60/0xb0 [ 769.190104][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.190120][T10772] RIP: 0033:0x7f2fbf78e929 [ 769.190135][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.190150][T10772] RSP: 002b:00007f2fc0672038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.190169][T10772] RAX: ffffffffffffffda RBX: 00007f2fbf9b5fa0 RCX: 00007f2fbf78e929 [ 769.190182][T10772] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 769.190193][T10772] RBP: 00007f2fc0672090 R08: 0000000000000000 R09: 0000000000000000 [ 769.190203][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.190213][T10772] R13: 0000000000000000 R14: 00007f2fbf9b5fa0 R15: 00007f2fbfadfa28 [ 769.190237][T10772] [ 769.554750][ C0] vkms_vblank_simulate: vblank timer overrun [ 769.562496][T10784] netlink: 'syz.4.1294': attribute type 5 has an invalid length. [ 769.580805][ T5948] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 769.594212][ T5948] usb 4-1: config 0 has no interface number 0 [ 769.609820][ T5948] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 769.652128][ T5978] usb 3-1: config 0 has no interfaces? [ 769.661253][T10784] ip6erspan0: entered promiscuous mode [ 769.673885][ T5978] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 769.691042][ T5948] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.717284][T10772] vlan2: entered promiscuous mode [ 770.051619][T10772] dummy0: entered promiscuous mode [ 770.051758][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.076449][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'. [ 770.105630][ T5948] usb 4-1: config 0 interface 85 has no altsetting 0 [ 770.115097][ T5978] usb 3-1: Product: syz [ 770.119368][ T5978] usb 3-1: Manufacturer: syz [ 770.124838][ T5978] usb 3-1: SerialNumber: syz [ 770.135318][ T5948] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 770.144597][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.157596][ T5948] usb 4-1: Product: syz [ 770.162035][ T5948] usb 4-1: Manufacturer: syz [ 770.167555][ T5978] usb 3-1: config 0 descriptor?? [ 770.209409][ T5948] usb 4-1: SerialNumber: syz [ 770.215405][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 770.226332][ T5948] usb 4-1: config 0 descriptor?? [ 770.235269][ T979] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 770.249524][ T979] usb 6-1: can't read configurations, error -71 [ 770.450190][ T5948] appletouch 4-1:0.85: Failed to read mode from device. [ 770.481902][ T5948] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 770.552063][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.569571][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.587260][ T5948] usb 4-1: USB disconnect, device number 75 [ 771.621575][ T5956] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 771.836158][T10800] SET target dimension over the limit! [ 772.131563][ T5948] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 772.147011][ T979] usb 3-1: USB disconnect, device number 46 [ 772.546590][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 772.616410][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.657471][ T5948] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 772.688492][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.723769][ T5948] usb 5-1: config 0 descriptor?? [ 772.875390][T10814] netlink: 'syz.0.1303': attribute type 5 has an invalid length. [ 772.887798][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 773.774101][T10800] could not allocate digest TFM handle poly1305-simd [ 774.589169][T10825] lo: entered allmulticast mode [ 774.596548][T10824] lo: left allmulticast mode [ 774.900083][ T5989] usb 5-1: USB disconnect, device number 71 [ 775.005933][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 775.102616][ T5956] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 775.142544][ T5956] usb 4-1: can't read configurations, error -71 [ 775.187648][T10832] Cannot find add_set index 0 as target [ 775.337286][T10838] tipc: Started in network mode [ 775.345794][T10838] tipc: Node identity 0a13a44e7b63, cluster identity 4711 [ 775.354108][T10838] tipc: Enabled bearer , priority 0 [ 775.363292][T10838] syzkaller0: entered promiscuous mode [ 775.373641][T10838] syzkaller0: entered allmulticast mode [ 775.415577][T10838] FAULT_INJECTION: forcing a failure. [ 775.415577][T10838] name failslab, interval 1, probability 0, space 0, times 0 [ 775.574698][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.0.1311 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 775.574728][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 775.574742][T10838] Call Trace: [ 775.574750][T10838] [ 775.574759][T10838] dump_stack_lvl+0x189/0x250 [ 775.574789][T10838] ? __pfx____ratelimit+0x10/0x10 [ 775.574819][T10838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.574843][T10838] ? __pfx__printk+0x10/0x10 [ 775.574877][T10838] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 775.574910][T10838] should_fail_ex+0x414/0x560 [ 775.574946][T10838] should_failslab+0xa8/0x100 [ 775.574975][T10838] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 775.575000][T10838] ? __alloc_skb+0x112/0x2d0 [ 775.575028][T10838] __alloc_skb+0x112/0x2d0 [ 775.575056][T10838] __ipv6_ifa_notify+0x1e8/0xac0 [ 775.575093][T10838] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 775.575122][T10838] ? __lock_acquire+0xab9/0xd20 [ 775.575150][T10838] ? __local_bh_enable_ip+0x12d/0x1c0 [ 775.575174][T10838] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.575213][T10838] ? __local_bh_enable_ip+0x12d/0x1c0 [ 775.575236][T10838] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 775.575270][T10838] addrconf_ifdown+0xe69/0x1880 [ 775.575303][T10838] ? tls_dev_event+0x717/0xec0 [ 775.575323][T10838] ? __pfx_addrconf_ifdown+0x10/0x10 [ 775.575363][T10838] addrconf_notify+0x1bc/0x1010 [ 775.575396][T10838] notifier_call_chain+0x1b3/0x3e0 [ 775.575447][T10838] netif_set_mtu_ext+0x438/0x620 [ 775.575474][T10838] ? __lock_acquire+0xab9/0xd20 [ 775.575501][T10838] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 775.575530][T10838] ? __mutex_trylock_common+0x153/0x260 [ 775.575569][T10838] ? rcu_is_watching+0x15/0xb0 [ 775.575602][T10838] netif_set_mtu+0xa4/0x150 [ 775.575629][T10838] ? __pfx_netif_set_mtu+0x10/0x10 [ 775.575654][T10838] ? __lock_acquire+0xab9/0xd20 [ 775.575689][T10838] ? netdev_name_node_lookup+0xdf/0x120 [ 775.575731][T10838] dev_set_mtu+0x126/0x260 [ 775.575762][T10838] dev_ioctl+0x7b4/0x1150 [ 775.575789][T10838] sock_do_ioctl+0x22c/0x300 [ 775.575825][T10838] ? __pfx_sock_do_ioctl+0x10/0x10 [ 775.575855][T10838] ? __lock_acquire+0xab9/0xd20 [ 775.575895][T10838] sock_ioctl+0x576/0x790 [ 775.575930][T10838] ? __pfx_sock_ioctl+0x10/0x10 [ 775.575962][T10838] ? __fget_files+0x2a/0x420 [ 775.575990][T10838] ? __fget_files+0x3a0/0x420 [ 775.576017][T10838] ? __fget_files+0x2a/0x420 [ 775.576050][T10838] ? bpf_lsm_file_ioctl+0x9/0x20 [ 775.576073][T10838] ? __pfx_sock_ioctl+0x10/0x10 [ 775.576103][T10838] __se_sys_ioctl+0xfc/0x170 [ 775.576129][T10838] do_syscall_64+0xfa/0x3b0 [ 775.576149][T10838] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.576188][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.576210][T10838] ? clear_bhb_loop+0x60/0xb0 [ 775.576236][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.576256][T10838] RIP: 0033:0x7fa836f8e929 [ 775.576275][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.576294][T10838] RSP: 002b:00007fa837ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.576318][T10838] RAX: ffffffffffffffda RBX: 00007fa8371b5fa0 RCX: 00007fa836f8e929 [ 775.576334][T10838] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 775.576348][T10838] RBP: 00007fa837ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 775.576361][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.576373][T10838] R13: 0000000000000000 R14: 00007fa8371b5fa0 R15: 00007fa8372dfa28 [ 775.576405][T10838] [ 775.577475][T10838] tipc: Resetting bearer [ 775.943938][ T5948] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 776.023983][T10837] tipc: Resetting bearer [ 776.067946][T10837] tipc: Disabling bearer [ 776.126119][T10849] syzkaller1: entered promiscuous mode [ 776.148530][T10849] syzkaller1: entered allmulticast mode [ 776.211820][ T5948] usb 6-1: Using ep0 maxpacket: 8 [ 776.226860][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.237305][ T5948] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 776.256097][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.280298][T10853] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 776.351276][ T5948] usb 6-1: config 0 descriptor?? [ 777.061610][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.076757][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.109221][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1319'. [ 777.627187][T10839] could not allocate digest TFM handle poly1305-simd [ 777.749367][T10875] pim6reg: entered allmulticast mode [ 777.763421][T10875] pim6reg: left allmulticast mode [ 778.552852][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1323'. [ 778.562120][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 780.526097][ T5989] usb 6-1: USB disconnect, device number 10 [ 780.644331][T10898] syzkaller1: entered promiscuous mode [ 780.679030][T10898] syzkaller1: entered allmulticast mode [ 781.064268][T10911] FAULT_INJECTION: forcing a failure. [ 781.064268][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.084898][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.4.1333 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 781.084931][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 781.084945][T10911] Call Trace: [ 781.084955][T10911] [ 781.084965][T10911] dump_stack_lvl+0x189/0x250 [ 781.084997][T10911] ? __pfx____ratelimit+0x10/0x10 [ 781.085031][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.085057][T10911] ? __pfx__printk+0x10/0x10 [ 781.085088][T10911] ? __might_fault+0xb0/0x130 [ 781.085126][T10911] should_fail_ex+0x414/0x560 [ 781.085163][T10911] _copy_from_user+0x2d/0xb0 [ 781.085191][T10911] snd_seq_oss_write+0x515/0x930 [ 781.085230][T10911] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 781.085266][T10911] ? common_file_perm+0x199/0x200 [ 781.085304][T10911] ? security_file_permission+0x75/0x290 [ 781.085337][T10911] odev_write+0x5a/0x80 [ 781.085368][T10911] vfs_writev+0x4b3/0x960 [ 781.085404][T10911] ? __pfx_odev_write+0x10/0x10 [ 781.085445][T10911] ? __pfx_vfs_writev+0x10/0x10 [ 781.085491][T10911] ? __fget_files+0x2a/0x420 [ 781.085525][T10911] ? __fget_files+0x3a0/0x420 [ 781.085553][T10911] ? __fget_files+0x2a/0x420 [ 781.085596][T10911] do_writev+0x14d/0x2d0 [ 781.085635][T10911] ? __pfx_do_writev+0x10/0x10 [ 781.085663][T10911] ? rcu_is_watching+0x15/0xb0 [ 781.085696][T10911] ? do_syscall_64+0xbe/0x3b0 [ 781.085722][T10911] do_syscall_64+0xfa/0x3b0 [ 781.085742][T10911] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.085775][T10911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.085797][T10911] ? clear_bhb_loop+0x60/0xb0 [ 781.085824][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.085846][T10911] RIP: 0033:0x7fab1e58e929 [ 781.085867][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.085886][T10911] RSP: 002b:00007fab1f377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 781.085910][T10911] RAX: ffffffffffffffda RBX: 00007fab1e7b5fa0 RCX: 00007fab1e58e929 [ 781.085927][T10911] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 781.085942][T10911] RBP: 00007fab1f377090 R08: 0000000000000000 R09: 0000000000000000 [ 781.085956][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 781.085970][T10911] R13: 0000000000000000 R14: 00007fab1e7b5fa0 R15: 00007fab1e8dfa28 [ 781.086003][T10911] [ 782.253874][ T5948] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 782.492698][ T5948] usb 4-1: device descriptor read/64, error -71 [ 782.741450][ T5948] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 782.931844][ T5948] usb 4-1: device descriptor read/64, error -71 [ 783.081740][ T5948] usb usb4-port1: attempt power cycle [ 783.683539][T10936] capability: warning: `syz.4.1339' uses deprecated v2 capabilities in a way that may be insecure [ 783.699373][ T5948] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 783.738801][ T5948] usb 4-1: device descriptor read/8, error -71 [ 783.971618][ T5948] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 784.030038][ T5948] usb 4-1: device descriptor read/8, error -71 [ 784.167207][ T5948] usb usb4-port1: unable to enumerate USB device [ 784.363119][T10952] syzkaller1: entered promiscuous mode [ 784.379087][T10952] syzkaller1: entered allmulticast mode [ 784.476330][T10958] netlink: 'syz.0.1345': attribute type 5 has an invalid length. [ 784.490979][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1345'. [ 784.821894][ T979] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 784.972336][ T979] usb 3-1: device descriptor read/64, error -71 [ 785.271831][ T979] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 785.442188][ T979] usb 3-1: device descriptor read/64, error -71 [ 785.522170][T10979] binder: BINDER_SET_CONTEXT_MGR already set [ 785.528718][T10980] bond0: entered allmulticast mode [ 785.596161][ T979] usb usb3-port1: attempt power cycle [ 785.599869][T10979] binder: 10976:10979 ioctl 4018620d 200000000440 returned -16 [ 785.610574][T10980] bond_slave_0: entered allmulticast mode [ 785.619795][T10980] bond_slave_1: entered allmulticast mode [ 785.731497][ T5989] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 785.903017][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 785.948999][ T5989] usb 4-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 785.991622][ T979] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 786.013602][ T5989] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10304, setting to 1024 [ 786.098167][ T979] usb 3-1: device descriptor read/8, error -71 [ 786.141824][ T5989] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 786.187355][ T5989] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 786.205369][ T5989] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 786.214932][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.235065][ T5989] usb 4-1: Product: syz [ 786.248922][ T5989] usb 4-1: Manufacturer: syz [ 786.254756][ T5989] usb 4-1: SerialNumber: syz [ 786.303095][T10977] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 786.320034][ T5989] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 786.343498][ T5989] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 786.370256][ T5989] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 786.421784][ T979] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 786.472201][ T979] usb 3-1: device descriptor read/8, error -71 [ 786.558457][T10974] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1352' resets device [ 786.572176][T10974] loop2: detected capacity change from 0 to 7 [ 786.598919][ T5956] usb 4-1: USB disconnect, device number 82 [ 786.614789][ T979] usb usb3-port1: unable to enumerate USB device [ 787.004738][T10993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.199217][T11001] trusted_key: encrypted_key: keyword 'ne' not recognized [ 787.376867][T11006] SET target dimension over the limit! [ 787.460299][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.517411][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.941319][T11011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 787.966393][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 788.228102][T11006] could not allocate digest TFM handle poly1305-simd [ 788.281566][ T5956] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 788.464372][ T5956] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.475067][ T5956] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 788.486196][ T5956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.498698][ T5956] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 788.520370][ T5956] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 788.541739][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 788.599900][ T5956] usb 6-1: Product: syz [ 788.618499][ T5956] usb 6-1: Manufacturer: syz [ 788.661522][ T5948] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 788.692265][ T5956] cdc_wdm 6-1:1.0: skipping garbage [ 788.697578][ T5956] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 788.882095][ T5989] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 788.901010][ T5956] usb 6-1: USB disconnect, device number 11 [ 788.914087][ T5948] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 788.930318][ T5948] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 788.943204][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 788.959269][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.054771][ T5989] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 789.069660][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.071524][ T5963] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 789.095046][ T5989] usb 5-1: config 0 descriptor?? [ 789.145750][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.162158][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.251791][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1365'. [ 789.368706][ T5989] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 789.371469][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 789.384550][ T5963] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 789.395964][ T5963] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 789.405558][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.431449][ T5963] usb 4-1: Product: syz [ 789.446900][ T5963] usb 4-1: Manufacturer: syz [ 789.470903][ T5963] usb 4-1: SerialNumber: syz [ 789.497505][ T5963] usb 4-1: config 0 descriptor?? [ 789.528825][ T5963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 789.538880][ T5963] usb 4-1: setting power ON [ 789.546882][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 789.695812][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 789.706388][ T5963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 789.715849][ T5963] usb 4-1: media controller created [ 790.120396][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.283921][ T5963] usb 4-1: selecting invalid altsetting 6 [ 790.516377][ T5963] usb 4-1: digital interface selection failed (-22) [ 790.531168][ T5963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 790.759010][ T5963] usb 4-1: setting power OFF [ 790.820990][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 790.836520][ T5989] [drm:udl_init] *ERROR* Selecting channel failed [ 790.879128][ T5989] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 790.917674][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 790.947650][ T5989] [drm] Initialized udl on minor 2 [ 790.982469][ T5963] (NULL device *): no alternate interface [ 791.000473][ T5989] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 791.059945][ T5989] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 791.078016][ T979] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 791.095774][ T5989] usb 5-1: USB disconnect, device number 72 [ 791.110945][ T979] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 791.322567][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 791.436790][ T5963] usb 4-1: USB disconnect, device number 83 [ 791.901510][ T5963] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 791.930302][ T5989] usb 3-1: USB disconnect, device number 51 [ 792.095334][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 792.172515][ T5963] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 792.299540][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.413331][ T5963] usb 4-1: Product: syz [ 792.417577][ T5963] usb 4-1: Manufacturer: syz [ 792.461619][ T5963] usb 4-1: SerialNumber: syz [ 792.525480][ T5963] usb 4-1: config 0 descriptor?? [ 793.085162][T11074] netlink: 'syz.5.1378': attribute type 6 has an invalid length. [ 793.093291][T11074] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1378'. [ 793.803564][T11086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 793.821250][ T5989] usb 4-1: USB disconnect, device number 84 [ 795.131939][ T5885] Bluetooth: hci5: command 0x0c1a tx timeout [ 795.213457][T11071] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 795.521794][ T5948] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 795.536785][ T5978] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 795.800831][ T5978] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 795.811744][ T5978] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 795.868739][ T5978] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 795.940727][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.060151][ T5948] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 796.077182][ T5948] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 796.177223][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 796.196494][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.246185][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 796.762259][ T5948] usb 3-1: can't set config #27, error -71 [ 796.769525][ T5948] usb 3-1: USB disconnect, device number 52 [ 797.233028][ T5948] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 797.393943][ T5948] usb 3-1: config 0 has an invalid interface number: 252 but max is 0 [ 797.417671][ T5948] usb 3-1: config 0 has no interface number 0 [ 797.425075][ T5963] usb 5-1: USB disconnect, device number 73 [ 797.441808][ T5978] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 797.462327][ T5948] usb 3-1: config 0 interface 252 has no altsetting 0 [ 797.485669][ T5948] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=2a.0f [ 797.506757][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.530221][ T5948] usb 3-1: Product: syz [ 797.536320][ T5948] usb 3-1: Manufacturer: syz [ 797.543065][ T5948] usb 3-1: SerialNumber: syz [ 797.566099][ T5948] usb 3-1: config 0 descriptor?? [ 797.576661][T11124] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 797.594710][T11124] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 797.623226][T11125] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1396'. [ 797.643930][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 797.669881][ T5948] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 797.707206][ T5978] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 797.740786][ T5939] tipc: Subscription rejected, illegal request [ 797.759702][T11125] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 797.769990][ T5948] dvb-usb: bulk message failed: -22 (2/0) [ 797.786388][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.899390][ T5948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 797.924844][ T5978] usb 4-1: Product: syz [ 797.929085][ T5978] usb 4-1: Manufacturer: syz [ 797.936812][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1398'. [ 797.981614][ T5978] usb 4-1: SerialNumber: syz [ 797.998194][ T5948] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) error while loading driver (-19) [ 798.038010][ T5978] usb 4-1: config 0 descriptor?? [ 798.045661][ T5948] dvb_usb_cxusb 3-1:0.252: probe with driver dvb_usb_cxusb failed with error -22 [ 798.084874][ T5948] usb 3-1: USB disconnect, device number 53 [ 798.391828][ T979] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 798.611458][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 798.644748][ T979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 798.744788][ T979] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.862502][ T979] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 798.882087][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.890516][ T979] usb 5-1: Product: syz [ 798.895105][ T979] usb 5-1: Manufacturer: syz [ 798.899829][ T979] usb 5-1: SerialNumber: syz [ 798.975058][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 799.034606][T11158] FAULT_INJECTION: forcing a failure. [ 799.034606][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 799.047327][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz.2.1405 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 799.047347][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.047357][T11158] Call Trace: [ 799.047364][T11158] [ 799.047371][T11158] dump_stack_lvl+0x189/0x250 [ 799.047393][T11158] ? __pfx____ratelimit+0x10/0x10 [ 799.047417][T11158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.047436][T11158] ? __pfx__printk+0x10/0x10 [ 799.047459][T11158] ? __lock_acquire+0xab9/0xd20 [ 799.047480][T11158] should_fail_ex+0x414/0x560 [ 799.047506][T11158] should_failslab+0xa8/0x100 [ 799.047529][T11158] kmem_cache_alloc_noprof+0x73/0x3c0 [ 799.047547][T11158] ? skb_clone+0x212/0x3a0 [ 799.047567][T11158] ? __pfx_skb_network_protocol+0x10/0x10 [ 799.047591][T11158] skb_clone+0x212/0x3a0 [ 799.047609][T11158] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 799.047629][T11158] dev_queue_xmit_nit+0x416/0xcc0 [ 799.047653][T11158] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 799.047684][T11158] dev_hard_start_xmit+0x1be/0x830 [ 799.047733][T11158] __dev_queue_xmit+0x1adf/0x3a70 [ 799.047773][T11158] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 799.047793][T11158] ? __dev_queue_xmit+0x27e/0x3a70 [ 799.047815][T11158] ? do_splice_direct+0x181/0x270 [ 799.047834][T11158] ? __se_sys_sendfile64+0x13e/0x190 [ 799.047854][T11158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.047877][T11158] ? __pfx___dev_queue_xmit+0x10/0x10 [ 799.047910][T11158] ? __copy_skb_header+0xa7/0x550 [ 799.047932][T11158] ? __asan_memcpy+0x40/0x70 [ 799.047946][T11158] ? __skb_clone+0x63/0x7a0 [ 799.047970][T11158] ? __skb_clone+0x483/0x7a0 [ 799.047994][T11158] ? skb_clone+0x246/0x3a0 [ 799.048017][T11158] __netlink_deliver_tap+0x5ad/0x850 [ 799.048045][T11158] ? netlink_deliver_tap+0x2e/0x1b0 [ 799.048064][T11158] netlink_deliver_tap+0x19c/0x1b0 [ 799.048084][T11158] netlink_unicast+0x72f/0x8d0 [ 799.048108][T11158] netlink_sendmsg+0x805/0xb30 [ 799.048133][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.048154][T11158] ? aa_sock_msg_perm+0x94/0x160 [ 799.048178][T11158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 799.048202][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 799.048221][T11158] __sock_sendmsg+0x219/0x270 [ 799.048248][T11158] sock_sendmsg+0x158/0x230 [ 799.048273][T11158] ? __pfx_sock_sendmsg+0x10/0x10 [ 799.048306][T11158] ? __asan_memset+0x22/0x50 [ 799.048320][T11158] ? iov_iter_bvec+0xb8/0x180 [ 799.048339][T11158] splice_to_socket+0x8ff/0xf10 [ 799.048373][T11158] ? __pfx_splice_to_socket+0x10/0x10 [ 799.048421][T11158] ? register_lock_class+0x51/0x320 [ 799.048442][T11158] ? __pfx_splice_to_socket+0x10/0x10 [ 799.048461][T11158] direct_splice_actor+0x101/0x160 [ 799.048483][T11158] splice_direct_to_actor+0x5a5/0xcc0 [ 799.048517][T11158] ? __pfx_direct_splice_actor+0x10/0x10 [ 799.048537][T11158] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 799.048556][T11158] ? __pfx_aa_file_perm+0x10/0x10 [ 799.048576][T11158] do_splice_direct+0x181/0x270 [ 799.048597][T11158] ? __pfx_do_splice_direct+0x10/0x10 [ 799.048616][T11158] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 799.048638][T11158] ? bpf_lsm_file_permission+0x9/0x20 [ 799.048659][T11158] ? security_file_permission+0x75/0x290 [ 799.048680][T11158] ? rw_verify_area+0x258/0x650 [ 799.048699][T11158] do_sendfile+0x4da/0x7e0 [ 799.048720][T11158] ? __pfx_vfs_write+0x10/0x10 [ 799.048742][T11158] ? __pfx_do_sendfile+0x10/0x10 [ 799.048763][T11158] ? __fget_files+0x3a0/0x420 [ 799.048792][T11158] __se_sys_sendfile64+0x13e/0x190 [ 799.048827][T11158] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 799.048859][T11158] ? __secure_computing+0xe2/0x2a0 [ 799.048890][T11158] do_syscall_64+0xfa/0x3b0 [ 799.048906][T11158] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.048929][T11158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.048944][T11158] ? clear_bhb_loop+0x60/0xb0 [ 799.048962][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.048977][T11158] RIP: 0033:0x7fc2aff8e929 [ 799.048991][T11158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.049005][T11158] RSP: 002b:00007fc2b0d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.049022][T11158] RAX: ffffffffffffffda RBX: 00007fc2b01b5fa0 RCX: 00007fc2aff8e929 [ 799.049034][T11158] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000d [ 799.049043][T11158] RBP: 00007fc2b0d17090 R08: 0000000000000000 R09: 0000000000000000 [ 799.049053][T11158] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 799.049062][T11158] R13: 0000000000000000 R14: 00007fc2b01b5fa0 R15: 00007fc2b02dfa28 [ 799.049084][T11158] [ 799.684777][T11134] netlink: 'syz.4.1399': attribute type 27 has an invalid length. [ 800.544248][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 800.561004][ T5978] usb 4-1: USB disconnect, device number 85 [ 800.661666][ T5989] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 800.860755][ T5989] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 800.890134][T11134] bond0: left allmulticast mode [ 800.906042][ T5989] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 800.915909][T11134] bond_slave_0: left allmulticast mode [ 800.940171][T11134] bond_slave_1: left allmulticast mode [ 800.981983][ T5989] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 800.991757][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.267930][T11170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1407'. [ 801.696193][T11134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.724520][T11134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.949085][T11134] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.961841][T11134] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.971063][T11134] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.983978][T11134] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.059378][T11134] hsr1: left allmulticast mode [ 802.068032][T11134] syz_tun: left allmulticast mode [ 802.074190][T11134] batadv_slave_0: left allmulticast mode [ 802.092873][T11134] ip6erspan0: left promiscuous mode [ 802.168704][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.185040][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.206144][T11163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.819683][ T979] usbhid 5-1:1.0: can't add hid device: -71 [ 802.840186][ T979] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 802.906642][ T979] usb 5-1: USB disconnect, device number 74 [ 803.170755][T11202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.267139][ T979] usb 6-1: USB disconnect, device number 12 [ 803.310880][T11202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.867412][ T5963] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 804.313117][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 804.330872][ T5963] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 804.341528][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.363492][ T5963] usb 4-1: Product: syz [ 804.378009][ T5963] usb 4-1: Manufacturer: syz [ 804.425885][ T5963] usb 4-1: SerialNumber: syz [ 804.446260][ T5963] usb 4-1: config 0 descriptor?? [ 805.524878][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1426'. [ 805.875851][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.902039][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.918916][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'. [ 806.819136][ T5956] usb 4-1: USB disconnect, device number 86 [ 807.164163][T11262] input: syz0 as /devices/virtual/input/input34 [ 807.198663][T11262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1432'. [ 807.217963][T11267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1435'. [ 807.971008][T11279] SET target dimension over the limit! [ 808.102379][ T979] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 808.298539][ T979] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 808.310933][ T979] usb 5-1: can't read configurations, error -61 [ 808.311872][ T5948] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 808.452184][ T979] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 808.571460][ T5948] usb 4-1: device descriptor read/64, error -71 [ 808.638172][ T979] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 808.688207][ T979] usb 5-1: can't read configurations, error -61 [ 808.743917][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.750403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.784509][ T979] usb usb5-port1: attempt power cycle [ 808.831460][ T5948] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 808.972168][ T5948] usb 4-1: device descriptor read/64, error -71 [ 809.102152][ T5948] usb usb4-port1: attempt power cycle [ 809.181890][ T979] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 809.255949][ T979] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 809.287172][ T979] usb 5-1: can't read configurations, error -61 [ 809.492109][ T5956] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 809.531735][ T5948] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 809.563106][ T5948] usb 4-1: device descriptor read/8, error -71 [ 809.646406][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 809.682473][ T979] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 809.682754][ T5956] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 809.682782][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.682804][ T5956] usb 3-1: Product: syz [ 809.682821][ T5956] usb 3-1: Manufacturer: syz [ 809.682837][ T5956] usb 3-1: SerialNumber: syz [ 809.685430][ T5956] usb 3-1: config 0 descriptor?? [ 809.801431][ T5948] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 809.841856][ T5948] usb 4-1: device descriptor read/8, error -71 [ 809.850563][ T979] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 809.858480][ T5956] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 809.872130][ T979] usb 5-1: can't read configurations, error -61 [ 809.879192][ T979] usb usb5-port1: unable to enumerate USB device [ 809.952722][ T5948] usb usb4-port1: unable to enumerate USB device [ 810.065597][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 810.083437][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.120771][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.143249][ T5956] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 810.259925][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.322786][ T5956] usb 6-1: config 0 descriptor?? [ 810.510106][ T5956] usbhid 6-1:0.0: can't add hid device: -22 [ 810.568084][ T5956] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 811.118697][T11315] delete_channel: no stack [ 811.341680][ T5888] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 811.391592][ T979] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 811.513145][ T5888] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 811.530038][ T5888] usb 5-1: config 0 has no interface number 0 [ 811.531699][ T979] usb 4-1: device descriptor read/64, error -71 [ 811.551052][ T5888] usb 5-1: config 0 interface 151 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 8 [ 811.571424][ T5888] usb 5-1: config 0 interface 151 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 811.590140][ T5888] usb 5-1: config 0 interface 151 altsetting 3 endpoint 0xE has an invalid bInterval 186, changing to 11 [ 811.609340][ T5888] usb 5-1: config 0 interface 151 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 811.691784][ T5888] usb 5-1: config 0 interface 151 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 811.734793][ T5888] usb 5-1: config 0 interface 151 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 32 [ 811.799712][ T5888] usb 5-1: config 0 interface 151 has no altsetting 0 [ 811.831528][ T5888] usb 5-1: New USB device found, idVendor=1da5, idProduct=4512, bcdDevice=86.18 [ 811.876765][ T979] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 811.897194][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.906303][ T5888] usb 5-1: Product: syz [ 811.911583][ T5888] usb 5-1: Manufacturer: syz [ 811.916504][ T5888] usb 5-1: SerialNumber: syz [ 811.952606][ T5888] usb 5-1: config 0 descriptor?? [ 811.960146][T11311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.971870][T11311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.981972][T11311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.999769][ T5888] option 5-1:0.151: GSM modem (1-port) converter detected [ 812.025938][ T5888] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 812.104588][ T979] usb 4-1: device descriptor read/64, error -71 [ 812.180454][ T5956] usb 3-1: USB disconnect, device number 54 [ 812.197505][ T5888] usb 5-1: USB disconnect, device number 79 [ 812.211783][ T5888] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 812.225508][ T979] usb usb4-port1: attempt power cycle [ 812.243375][ T5888] option 5-1:0.151: device disconnected [ 812.611514][ T979] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 812.664843][ T979] usb 4-1: device descriptor read/8, error -71 [ 812.932263][ T979] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 813.002814][ T5888] usb 6-1: USB disconnect, device number 13 [ 813.062772][ T979] usb 4-1: device descriptor read/8, error -71 [ 813.198098][ T979] usb usb4-port1: unable to enumerate USB device [ 813.365332][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.427622][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.626075][ T5948] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 813.811683][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 814.400741][ T5948] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 814.458465][ T5888] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 814.473806][T11347] TCP: TCP_TX_DELAY enabled [ 814.490019][ T5948] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 814.542191][ T5888] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 814.597581][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.768304][ T5888] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=bb.9d [ 814.798492][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.881578][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.138932][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1453'. [ 815.952191][T11353] SET target dimension over the limit! [ 816.081718][ T5878] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 816.211630][ T5963] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 816.231952][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 816.265021][ T5878] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 816.274415][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.288225][ T5878] usb 4-1: Product: syz [ 816.321013][ T5878] usb 4-1: Manufacturer: syz [ 816.385085][ T5963] usb 5-1: device descriptor read/64, error -71 [ 816.539764][ T5948] usb 3-1: USB disconnect, device number 55 [ 816.623627][ T5878] usb 4-1: SerialNumber: syz [ 816.641652][ T5963] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 816.657143][ T5878] usb 4-1: config 0 descriptor?? [ 816.781462][ T5963] usb 5-1: device descriptor read/64, error -71 [ 816.885412][ T5956] usb 6-1: USB disconnect, device number 14 [ 816.904466][ T5963] usb usb5-port1: attempt power cycle [ 817.019066][T11358] FAULT_INJECTION: forcing a failure. [ 817.019066][T11358] name failslab, interval 1, probability 0, space 0, times 0 [ 817.080160][T11358] CPU: 0 UID: 0 PID: 11358 Comm: syz.5.1458 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 817.080193][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.080207][T11358] Call Trace: [ 817.080217][T11358] [ 817.080227][T11358] dump_stack_lvl+0x189/0x250 [ 817.080259][T11358] ? __pfx____ratelimit+0x10/0x10 [ 817.080293][T11358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.080320][T11358] ? __pfx__printk+0x10/0x10 [ 817.080356][T11358] ? __pfx___might_resched+0x10/0x10 [ 817.080381][T11358] ? fs_reclaim_acquire+0x7d/0x100 [ 817.080416][T11358] should_fail_ex+0x414/0x560 [ 817.080453][T11358] should_failslab+0xa8/0x100 [ 817.080483][T11358] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 817.080510][T11358] ? __alloc_skb+0x112/0x2d0 [ 817.080540][T11358] __alloc_skb+0x112/0x2d0 [ 817.080571][T11358] netlink_ack+0x146/0xa50 [ 817.080594][T11358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.080624][T11358] ? ref_tracker_free+0x63a/0x7d0 [ 817.080660][T11358] ? __pfx_ref_tracker_free+0x10/0x10 [ 817.080705][T11358] netlink_rcv_skb+0x28c/0x470 [ 817.080732][T11358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.080766][T11358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.080810][T11358] ? down_read+0x1ad/0x2e0 [ 817.080836][T11358] genl_rcv+0x28/0x40 [ 817.080866][T11358] netlink_unicast+0x758/0x8d0 [ 817.080901][T11358] netlink_sendmsg+0x805/0xb30 [ 817.080939][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.080977][T11358] ? aa_sock_msg_perm+0x94/0x160 [ 817.081012][T11358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 817.081045][T11358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.081073][T11358] __sock_sendmsg+0x219/0x270 [ 817.081114][T11358] sock_sendmsg+0x158/0x230 [ 817.081150][T11358] ? __pfx_sock_sendmsg+0x10/0x10 [ 817.081196][T11358] ? __asan_memset+0x22/0x50 [ 817.081218][T11358] ? iov_iter_bvec+0xb8/0x180 [ 817.081245][T11358] splice_to_socket+0x8ff/0xf10 [ 817.081296][T11358] ? __pfx_splice_to_socket+0x10/0x10 [ 817.081361][T11358] ? register_lock_class+0x51/0x320 [ 817.081391][T11358] ? __pfx_splice_to_socket+0x10/0x10 [ 817.081418][T11358] direct_splice_actor+0x101/0x160 [ 817.081450][T11358] splice_direct_to_actor+0x5a5/0xcc0 [ 817.081496][T11358] ? __pfx_direct_splice_actor+0x10/0x10 [ 817.081523][T11358] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 817.081552][T11358] ? __pfx_aa_file_perm+0x10/0x10 [ 817.081581][T11358] do_splice_direct+0x181/0x270 [ 817.081619][T11358] ? __pfx_do_splice_direct+0x10/0x10 [ 817.081648][T11358] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 817.081680][T11358] ? bpf_lsm_file_permission+0x9/0x20 [ 817.081701][T11358] ? security_file_permission+0x75/0x290 [ 817.081731][T11358] ? rw_verify_area+0x258/0x650 [ 817.081760][T11358] do_sendfile+0x4da/0x7e0 [ 817.081791][T11358] ? __pfx_vfs_write+0x10/0x10 [ 817.081823][T11358] ? __pfx_do_sendfile+0x10/0x10 [ 817.081853][T11358] ? __fget_files+0x3a0/0x420 [ 817.081895][T11358] __se_sys_sendfile64+0x13e/0x190 [ 817.081928][T11358] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 817.081962][T11358] ? rcu_is_watching+0x15/0xb0 [ 817.081994][T11358] ? do_syscall_64+0xbe/0x3b0 [ 817.082018][T11358] do_syscall_64+0xfa/0x3b0 [ 817.082039][T11358] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.082071][T11358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.082093][T11358] ? clear_bhb_loop+0x60/0xb0 [ 817.082120][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.082140][T11358] RIP: 0033:0x7f2fbf78e929 [ 817.082160][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.082178][T11358] RSP: 002b:00007f2fc0672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 817.082203][T11358] RAX: ffffffffffffffda RBX: 00007f2fbf9b5fa0 RCX: 00007f2fbf78e929 [ 817.082220][T11358] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 817.082233][T11358] RBP: 00007f2fc0672090 R08: 0000000000000000 R09: 0000000000000000 [ 817.082247][T11358] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 817.082261][T11358] R13: 0000000000000000 R14: 00007f2fbf9b5fa0 R15: 00007f2fbfadfa28 [ 817.082294][T11358] [ 817.484569][ T5963] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 817.503319][ T5878] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 817.535823][ T5963] usb 5-1: device descriptor read/8, error -71 [ 817.582730][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 817.582751][ T30] audit: type=1326 audit(1752056553.135:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.611269][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.658749][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.667315][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 817.674505][ T5878] usb 3-1: config 162 has an invalid interface number: 161 but max is 1 [ 817.683041][ T5878] usb 3-1: config 162 has an invalid descriptor of length 244, skipping remainder of the config [ 817.683061][ T5878] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 817.683077][ T5878] usb 3-1: config 162 has no interface number 0 [ 817.683110][ T5878] usb 3-1: config 162 interface 161 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.683129][ T5878] usb 3-1: config 162 interface 161 has no altsetting 0 [ 817.686522][ T5878] usb 3-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 817.741156][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.749267][ T5878] usb 3-1: Product: syz [ 817.753649][ T5878] usb 3-1: Manufacturer: syz [ 817.758257][ T5878] usb 3-1: SerialNumber: syz [ 817.792446][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.803017][ T30] audit: type=1326 audit(1752056553.135:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.822007][ T5963] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 817.826734][ T30] audit: type=1326 audit(1752056553.225:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.855891][ T30] audit: type=1326 audit(1752056553.225:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.878466][ T30] audit: type=1326 audit(1752056553.225:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.888960][ T5963] usb 5-1: device descriptor read/8, error -71 [ 817.901660][ T30] audit: type=1326 audit(1752056553.225:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.930648][ T30] audit: type=1326 audit(1752056553.225:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 817.991043][ T30] audit: type=1326 audit(1752056553.225:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 818.037802][ T5878] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 818.039821][ T30] audit: type=1326 audit(1752056553.225:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 818.075216][ T5963] usb usb5-port1: unable to enumerate USB device [ 818.109825][T11367] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1459'. [ 818.269998][ T5878] usb 3-1: USB disconnect, device number 56 [ 818.288231][ T30] audit: type=1326 audit(1752056553.225:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11362 comm="syz.5.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2fbf78e929 code=0x7ffc0000 [ 818.310666][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.692110][ T5888] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 818.835456][ T5978] usb 4-1: USB disconnect, device number 95 [ 818.873161][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 818.890239][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.909180][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.956621][ T5888] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 819.005782][T11374] FAULT_INJECTION: forcing a failure. [ 819.005782][T11374] name failslab, interval 1, probability 0, space 0, times 0 [ 819.018053][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.036374][ T5888] usb 6-1: config 0 descriptor?? [ 819.049224][ T5888] usbhid 6-1:0.0: can't add hid device: -22 [ 819.059429][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 819.082117][T11374] CPU: 1 UID: 0 PID: 11374 Comm: syz.4.1463 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 819.082149][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.082162][T11374] Call Trace: [ 819.082171][T11374] [ 819.082181][T11374] dump_stack_lvl+0x189/0x250 [ 819.082214][T11374] ? __pfx____ratelimit+0x10/0x10 [ 819.082248][T11374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.082274][T11374] ? __pfx__printk+0x10/0x10 [ 819.082311][T11374] ? __pfx___might_resched+0x10/0x10 [ 819.082343][T11374] should_fail_ex+0x414/0x560 [ 819.082381][T11374] should_failslab+0xa8/0x100 [ 819.082412][T11374] __kmalloc_node_noprof+0xd1/0x4e0 [ 819.082439][T11374] ? alloc_pages_mpol+0x3cd/0x4a0 [ 819.082464][T11374] ? allocate_slab+0x17c/0x3b0 [ 819.082503][T11374] allocate_slab+0x17c/0x3b0 [ 819.082540][T11374] ___slab_alloc+0xbfc/0x1480 [ 819.082576][T11374] ? io_sqe_buffers_register+0x133/0x8d0 [ 819.082610][T11374] __kvmalloc_node_noprof+0x429/0x5f0 [ 819.082639][T11374] ? io_sqe_buffers_register+0x133/0x8d0 [ 819.082671][T11374] io_sqe_buffers_register+0x133/0x8d0 [ 819.082698][T11374] ? __se_sys_io_uring_register+0x1e1/0x11b0 [ 819.082729][T11374] ? __fget_files+0x2a/0x420 [ 819.082759][T11374] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 819.082795][T11374] ? __fget_files+0x2a/0x420 [ 819.082823][T11374] ? __fget_files+0x3a0/0x420 [ 819.082851][T11374] ? __fget_files+0x2a/0x420 [ 819.082883][T11374] ? io_is_uring_fops+0xd/0x50 [ 819.082916][T11374] __se_sys_io_uring_register+0xb85/0x11b0 [ 819.082950][T11374] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 819.082971][T11374] ? ksys_write+0x22a/0x250 [ 819.083000][T11374] ? __pfx_ksys_write+0x10/0x10 [ 819.083023][T11374] ? rcu_is_watching+0x15/0xb0 [ 819.083057][T11374] ? do_syscall_64+0xbe/0x3b0 [ 819.083083][T11374] do_syscall_64+0xfa/0x3b0 [ 819.083103][T11374] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.083137][T11374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.083160][T11374] ? clear_bhb_loop+0x60/0xb0 [ 819.083187][T11374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.083208][T11374] RIP: 0033:0x7fab1e58e929 [ 819.083229][T11374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.083249][T11374] RSP: 002b:00007fab1f377038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 819.083273][T11374] RAX: ffffffffffffffda RBX: 00007fab1e7b5fa0 RCX: 00007fab1e58e929 [ 819.083290][T11374] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 819.083304][T11374] RBP: 00007fab1f377090 R08: 0000000000000000 R09: 0000000000000000 [ 819.083319][T11374] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 819.083334][T11374] R13: 0000000000000000 R14: 00007fab1e7b5fa0 R15: 00007fab1e8dfa28 [ 819.083368][T11374] [ 819.369566][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.842914][T11384] fuse: Bad value for 'fd' [ 819.882278][ T979] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 819.934421][T11384] netlink: 'syz.3.1466': attribute type 12 has an invalid length. [ 820.054281][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 820.062632][ T979] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 820.075355][ T979] usb 5-1: config 0 has no interface number 0 [ 820.086396][ T979] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 820.096528][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.108445][ T979] usb 5-1: Product: syz [ 820.113751][ T979] usb 5-1: Manufacturer: syz [ 820.118707][ T979] usb 5-1: SerialNumber: syz [ 820.150308][ T979] usb 5-1: config 0 descriptor?? [ 820.163612][ T979] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 820.373871][ T979] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 820.596771][T11381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.642214][T11381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.659318][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 820.731899][ T5888] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 820.862066][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 820.940532][ T979] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 820.981471][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 821.027117][ T5888] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 821.040006][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 821.070228][ T5888] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 821.099433][ T979] usb 5-1: USB disconnect, device number 84 [ 821.113587][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.200906][ T979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 821.215237][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 821.240392][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.289090][ T5888] usb 3-1: Product: syz [ 821.300480][ T979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 821.351433][ T5888] usb 3-1: Manufacturer: syz [ 821.454380][ T979] quatech2 5-1:0.51: device disconnected [ 821.476476][ T5888] usb 3-1: SerialNumber: syz [ 821.708946][T11394] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 821.719999][ T5888] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 821.722418][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 821.746240][ T5963] usb 6-1: USB disconnect, device number 15 [ 821.758696][ T5888] usbtest 3-1:1.0: Linux user mode ISO test driver [ 821.894168][ T5888] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 821.929392][T11394] loop2: detected capacity change from 0 to 7 [ 822.026067][ T5888] usb 3-1: USB disconnect, device number 57 [ 822.630144][T11412] SET target dimension over the limit! [ 822.760506][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.774444][T11416] FAULT_INJECTION: forcing a failure. [ 822.774444][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 822.791658][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.839830][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.4.1475 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 822.839864][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.839879][T11416] Call Trace: [ 822.839888][T11416] [ 822.839899][T11416] dump_stack_lvl+0x189/0x250 [ 822.839931][T11416] ? __pfx____ratelimit+0x10/0x10 [ 822.839967][T11416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.839994][T11416] ? __pfx__printk+0x10/0x10 [ 822.840041][T11416] should_fail_ex+0x414/0x560 [ 822.840083][T11416] should_failslab+0xa8/0x100 [ 822.840115][T11416] __kmalloc_cache_noprof+0x70/0x3d0 [ 822.840143][T11416] ? sctp_add_bind_addr+0x8c/0x370 [ 822.840171][T11416] sctp_add_bind_addr+0x8c/0x370 [ 822.840200][T11416] sctp_copy_local_addr_list+0x30b/0x4e0 [ 822.840228][T11416] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 822.840252][T11416] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 822.840278][T11416] ? sctp_v6_is_any+0x64/0x80 [ 822.840306][T11416] ? sctp_copy_one_addr+0x93/0x360 [ 822.840334][T11416] sctp_bind_addr_copy+0xb3/0x3c0 [ 822.840359][T11416] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 822.840397][T11416] sctp_connect_new_asoc+0x2e0/0x690 [ 822.840438][T11416] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 822.840465][T11416] ? __local_bh_enable_ip+0x12d/0x1c0 [ 822.840500][T11416] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 822.840523][T11416] ? security_sctp_bind_connect+0x7e/0x2e0 [ 822.840556][T11416] sctp_sendmsg+0x155c/0x2810 [ 822.840598][T11416] ? __pfx_sctp_sendmsg+0x10/0x10 [ 822.840631][T11416] ? aa_sk_perm+0x81e/0x950 [ 822.840668][T11416] ? __pfx_aa_sk_perm+0x10/0x10 [ 822.840703][T11416] ? sock_rps_record_flow+0x19/0x410 [ 822.840729][T11416] ? inet_sendmsg+0x2f4/0x370 [ 822.840755][T11416] __sock_sendmsg+0x19c/0x270 [ 822.840795][T11416] __sys_sendto+0x3bd/0x520 [ 822.840825][T11416] ? __pfx___sys_sendto+0x10/0x10 [ 822.840848][T11416] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 822.840885][T11416] ? __fget_files+0x3a0/0x420 [ 822.840928][T11416] ? ksys_write+0x22a/0x250 [ 822.840957][T11416] ? __pfx_ksys_write+0x10/0x10 [ 822.840979][T11416] ? rcu_is_watching+0x15/0xb0 [ 822.841012][T11416] __x64_sys_sendto+0xde/0x100 [ 822.841043][T11416] do_syscall_64+0xfa/0x3b0 [ 822.841064][T11416] ? lockdep_hardirqs_on+0x9c/0x150 [ 822.841097][T11416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.841120][T11416] ? clear_bhb_loop+0x60/0xb0 [ 822.841147][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.841169][T11416] RIP: 0033:0x7fab1e58e929 [ 822.841188][T11416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.841208][T11416] RSP: 002b:00007fab1f377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 822.841233][T11416] RAX: ffffffffffffffda RBX: 00007fab1e7b5fa0 RCX: 00007fab1e58e929 [ 822.841250][T11416] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 822.841265][T11416] RBP: 00007fab1f377090 R08: 000020000005ffe4 R09: 000000000000001c [ 822.841280][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.841294][T11416] R13: 0000000000000000 R14: 00007fab1e7b5fa0 R15: 00007fab1e8dfa28 [ 822.841326][T11416] [ 823.260223][ T5888] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 823.671769][ T5888] usb 6-1: device descriptor read/64, error -71 [ 823.911449][ T5888] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 824.061818][ T5888] usb 6-1: device descriptor read/64, error -71 [ 824.182049][ T5888] usb usb6-port1: attempt power cycle [ 824.610809][T11428] SET target dimension over the limit! [ 824.682003][ T5888] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 824.731890][ T5888] usb 6-1: device descriptor read/8, error -71 [ 824.971548][ T5888] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 824.992764][ T5888] usb 6-1: device descriptor read/8, error -71 [ 825.111700][ T5888] usb usb6-port1: unable to enumerate USB device [ 825.603471][T11431] could not allocate digest TFM handle poly1305-simd [ 825.637168][T11443] bridge0: entered promiscuous mode [ 825.756815][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 825.989956][T11453] syz.0.1483(11453): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 826.331455][T11457] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 826.971710][ T5888] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 827.140894][ T5888] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 827.149954][ T5888] usb 4-1: config 0 has no interface number 0 [ 827.227025][ T5888] usb 4-1: config 0 interface 29 has no altsetting 0 [ 827.239554][ T5888] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 827.249238][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.267635][ T5888] usb 4-1: Product: syz [ 827.272298][ T5888] usb 4-1: Manufacturer: syz [ 827.277077][ T5888] usb 4-1: SerialNumber: syz [ 827.287351][ T5888] usb 4-1: config 0 descriptor?? [ 827.631775][ T5888] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v65 fw v224.204.25 (2 channels) [ 828.150723][ T5888] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 828.164999][ T5888] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 828.383105][ T5888] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 828.452002][ T5888] usb 4-1: USB disconnect, device number 96 [ 829.349147][T11489] SET target dimension over the limit! [ 829.621959][ T5978] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 829.702467][ T5888] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 829.783710][T11495] only policy match revision 0 supported [ 829.783738][T11495] unable to load match [ 829.798740][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 829.808540][ T5978] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 829.829577][ T5978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 829.850449][ T5978] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 829.860450][ T5888] usb 4-1: device descriptor read/64, error -71 [ 829.887617][ T5978] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.942026][ T5978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 829.952020][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.960251][ T5978] usb 6-1: Product: syz [ 829.979606][ T5978] usb 6-1: Manufacturer: syz [ 829.986152][ T5978] usb 6-1: SerialNumber: syz [ 830.004931][T11481] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 830.023287][ T5978] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 830.035664][ T5978] usbtest 6-1:1.0: Linux user mode ISO test driver [ 830.051406][ T5978] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 830.114471][ T5888] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 830.261822][ T5888] usb 4-1: device descriptor read/64, error -71 [ 830.279399][T11481] loop2: detected capacity change from 0 to 7 [ 830.298033][ T5978] usb 6-1: USB disconnect, device number 20 [ 830.382172][ T5888] usb usb4-port1: attempt power cycle [ 830.754181][ T5888] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 830.793594][ T5888] usb 4-1: device descriptor read/8, error -71 [ 830.800687][T11502] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (33) [ 831.051700][ T5888] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 831.112596][ T5888] usb 4-1: device descriptor read/8, error -71 [ 831.230195][ T5888] usb usb4-port1: unable to enumerate USB device [ 831.662341][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 831.662363][ T30] audit: type=1800 audit(1752056567.205:261): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1492" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 832.321994][ T5888] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 832.506896][ T5888] usb 3-1: not running at top speed; connect to a high speed hub [ 832.518892][ T5888] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 832.532234][ T5888] usb 3-1: config 1 interface 0 has no altsetting 0 [ 832.549131][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 832.558593][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.573120][T11530] FAULT_INJECTION: forcing a failure. [ 832.573120][T11530] name failslab, interval 1, probability 0, space 0, times 0 [ 832.601824][ T5888] usb 3-1: Product: 罢Ðฅü擈ឮ讙쒭ꄅ汒嚯㜨ﺀꮇꑨ瞠䩕墚ૡ䎱೹앝췾廸灷錠참惱䵸㹼榀ꨜᱢ捘儘䅟岑亯䮋᷐諍΢觡㽱奛蹄㱥ሜڍᙤ㣟刁圤ꟓ⬹ค沪꛷쭹評슚쁁騊嫡뗙쬎ⳓ陝㊲凝¹㼇䇆賧罋弦ᅽ⧄竳墧踒ᜰ婛꾐憝䷝͹뻂멚饺뭐잤譔놾⾋অɭ픈읋Ẫﱮ劲킌꙲蓑紴鍃庭 [ 832.635960][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.642748][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.3.1503 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 832.642778][T11530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.642792][T11530] Call Trace: [ 832.642801][T11530] [ 832.642811][T11530] dump_stack_lvl+0x189/0x250 [ 832.642844][T11530] ? __pfx____ratelimit+0x10/0x10 [ 832.642879][T11530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.642906][T11530] ? __pfx__printk+0x10/0x10 [ 832.642953][T11530] should_fail_ex+0x414/0x560 [ 832.642991][T11530] should_failslab+0xa8/0x100 [ 832.643023][T11530] __kmalloc_cache_noprof+0x70/0x3d0 [ 832.643050][T11530] ? sctp_add_bind_addr+0x8c/0x370 [ 832.643079][T11530] sctp_add_bind_addr+0x8c/0x370 [ 832.643107][T11530] sctp_copy_local_addr_list+0x30b/0x4e0 [ 832.643135][T11530] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 832.643159][T11530] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 832.643185][T11530] ? sctp_v6_is_any+0x64/0x80 [ 832.643212][T11530] ? sctp_copy_one_addr+0x93/0x360 [ 832.643239][T11530] sctp_bind_addr_copy+0xb3/0x3c0 [ 832.643264][T11530] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 832.643303][T11530] sctp_connect_new_asoc+0x2e0/0x690 [ 832.643338][T11530] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 832.643365][T11530] ? __local_bh_enable_ip+0x12d/0x1c0 [ 832.643399][T11530] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 832.643421][T11530] ? security_sctp_bind_connect+0x7e/0x2e0 [ 832.643454][T11530] sctp_sendmsg+0x155c/0x2810 [ 832.643497][T11530] ? __pfx_sctp_sendmsg+0x10/0x10 [ 832.643529][T11530] ? aa_sk_perm+0x81e/0x950 [ 832.643566][T11530] ? __pfx_aa_sk_perm+0x10/0x10 [ 832.643600][T11530] ? sock_rps_record_flow+0x19/0x410 [ 832.643624][T11530] ? inet_sendmsg+0x2f4/0x370 [ 832.643650][T11530] __sock_sendmsg+0x19c/0x270 [ 832.643688][T11530] __sys_sendto+0x3bd/0x520 [ 832.643724][T11530] ? __pfx___sys_sendto+0x10/0x10 [ 832.643747][T11530] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 832.643784][T11530] ? __fget_files+0x3a0/0x420 [ 832.643826][T11530] ? ksys_write+0x22a/0x250 [ 832.643853][T11530] ? __pfx_ksys_write+0x10/0x10 [ 832.643875][T11530] ? rcu_is_watching+0x15/0xb0 [ 832.643907][T11530] __x64_sys_sendto+0xde/0x100 [ 832.643937][T11530] do_syscall_64+0xfa/0x3b0 [ 832.643957][T11530] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.643989][T11530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.644010][T11530] ? clear_bhb_loop+0x60/0xb0 [ 832.644036][T11530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.644057][T11530] RIP: 0033:0x7f6ba698e929 [ 832.644076][T11530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.644096][T11530] RSP: 002b:00007f6ba47f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 832.644119][T11530] RAX: ffffffffffffffda RBX: 00007f6ba6bb5fa0 RCX: 00007f6ba698e929 [ 832.644136][T11530] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 832.644150][T11530] RBP: 00007f6ba47f6090 R08: 0000200000000080 R09: 000000000000001c [ 832.644166][T11530] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 832.644179][T11530] R13: 0000000000000000 R14: 00007f6ba6bb5fa0 R15: 00007f6ba6cdfa28 [ 832.644213][T11530] [ 832.992637][ T5888] usb 3-1: Manufacturer: Ё [ 832.997251][ T5888] usb 3-1: SerialNumber: ࠧ [ 833.007346][T11525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.653554][ T5888] usb 3-1: USB disconnect, device number 58 [ 833.661708][ T5878] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 833.831620][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 833.842740][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 833.852828][ T5956] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 833.865477][ T5878] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 833.879749][ T5878] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 833.893765][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.907227][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.919301][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.934281][ T5878] usb 5-1: Product: syz [ 833.945831][ T5878] usb 5-1: Manufacturer: syz [ 834.012853][ T5878] usb 5-1: SerialNumber: syz [ 834.042206][ T5956] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 834.087931][ T5878] usb 5-1: config 0 descriptor?? [ 834.101279][ T5956] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 834.159473][ T5878] hub 5-1:0.0: bad descriptor, ignoring hub [ 834.176761][ T5956] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 834.237860][ T5878] hub 5-1:0.0: probe with driver hub failed with error -5 [ 834.306521][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.363465][ T5878] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 834.375866][T11553] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 834.611620][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1505'. [ 836.134620][T11575] ALSA: mixer_oss: invalid index 40000 [ 837.552558][T11581] SET target dimension over the limit! [ 837.589265][ T5999] usb 4-1: USB disconnect, device number 101 [ 837.597127][ T979] usb 5-1: USB disconnect, device number 85 [ 837.811432][ T5956] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 838.201823][ T979] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 838.209628][ T5956] usb 3-1: device descriptor read/64, error -71 [ 838.362898][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 838.370281][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 838.380030][ T979] usb 5-1: config 8 has an invalid interface number: 137 but max is 0 [ 838.399942][ T979] usb 5-1: config 8 has no interface number 0 [ 838.420749][ T979] usb 5-1: config 8 interface 137 altsetting 5 bulk endpoint 0xF has invalid maxpacket 84 [ 838.446392][ T979] usb 5-1: config 8 interface 137 has no altsetting 0 [ 838.461082][T11594] Invalid logical block size (64) [ 838.467563][ T5956] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 838.487430][ T979] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=e5.0d [ 838.508666][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.524328][ T979] usb 5-1: Product: syz [ 838.534375][ T979] usb 5-1: Manufacturer: syz [ 838.550482][ T979] usb 5-1: SerialNumber: syz [ 838.606861][T11584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 838.621571][ T5956] usb 3-1: device descriptor read/64, error -71 [ 838.745238][ T5956] usb usb3-port1: attempt power cycle [ 838.852816][ T979] cyberjack 5-1:8.137: Reiner SCT Cyberjack USB card reader converter detected [ 838.885831][ T979] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 838.908056][ T979] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 838.959920][ T979] usb 5-1: USB disconnect, device number 86 [ 838.989057][ T979] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 839.141527][ T5956] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 839.184685][ T5956] usb 3-1: device descriptor read/8, error -71 [ 839.200639][ T979] cyberjack 5-1:8.137: device disconnected [ 839.302016][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 839.524351][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 839.541443][ T5956] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 839.578572][ T5956] usb 3-1: device descriptor read/8, error -71 [ 839.599831][T11605] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1521'. [ 839.615952][T11605] FAULT_INJECTION: forcing a failure. [ 839.615952][T11605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.660846][T11605] CPU: 0 UID: 0 PID: 11605 Comm: syz.4.1521 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 839.660879][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 839.660892][T11605] Call Trace: [ 839.660901][T11605] [ 839.660911][T11605] dump_stack_lvl+0x189/0x250 [ 839.660943][T11605] ? __pfx____ratelimit+0x10/0x10 [ 839.660968][T11605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.660988][T11605] ? __pfx__printk+0x10/0x10 [ 839.661032][T11605] should_fail_ex+0x414/0x560 [ 839.661071][T11605] _copy_to_user+0x31/0xb0 [ 839.661099][T11605] simple_read_from_buffer+0xe1/0x170 [ 839.661129][T11605] proc_fail_nth_read+0x1df/0x250 [ 839.661153][T11605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.661189][T11605] ? rw_verify_area+0x258/0x650 [ 839.661214][T11605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.661247][T11605] vfs_read+0x200/0x980 [ 839.661280][T11605] ? __pfx___mutex_lock+0x10/0x10 [ 839.661301][T11605] ? __pfx_vfs_read+0x10/0x10 [ 839.661328][T11605] ? __fget_files+0x2a/0x420 [ 839.661363][T11605] ? __fget_files+0x3a0/0x420 [ 839.661390][T11605] ? __fget_files+0x2a/0x420 [ 839.661428][T11605] ksys_read+0x145/0x250 [ 839.661448][T11605] ? __pfx_ksys_read+0x10/0x10 [ 839.661465][T11605] ? rcu_is_watching+0x15/0xb0 [ 839.661495][T11605] ? do_syscall_64+0xbe/0x3b0 [ 839.661522][T11605] do_syscall_64+0xfa/0x3b0 [ 839.661542][T11605] ? lockdep_hardirqs_on+0x9c/0x150 [ 839.661573][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.661593][T11605] ? clear_bhb_loop+0x60/0xb0 [ 839.661613][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.661631][T11605] RIP: 0033:0x7fab1e58d33c [ 839.661654][T11605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 839.661674][T11605] RSP: 002b:00007fab1f377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.661698][T11605] RAX: ffffffffffffffda RBX: 00007fab1e7b5fa0 RCX: 00007fab1e58d33c [ 839.661713][T11605] RDX: 000000000000000f RSI: 00007fab1f3770a0 RDI: 0000000000000004 [ 839.661727][T11605] RBP: 00007fab1f377090 R08: 0000000000000000 R09: 0000000000000000 [ 839.661742][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.661774][T11605] R13: 0000000000000000 R14: 00007fab1e7b5fa0 R15: 00007fab1e8dfa28 [ 839.661813][T11605] [ 839.893332][ C0] vkms_vblank_simulate: vblank timer overrun [ 839.921139][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 839.923599][ T5956] usb usb3-port1: unable to enumerate USB device [ 840.251878][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54016, setting to 1024 [ 840.294805][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 840.315401][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.380813][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 840.392358][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.428434][ T24] usb 6-1: Product: syz [ 840.446632][ T24] usb 6-1: Manufacturer: syz [ 840.468460][ T24] usb 6-1: SerialNumber: syz [ 840.493346][T11599] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 840.507447][T11599] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 840.571137][T11613] usb usb8: usbfs: process 11613 (syz.3.1523) did not claim interface 0 before use [ 840.735201][T11599] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1519' resets device [ 840.757632][T11599] loop2: detected capacity change from 0 to 7 [ 840.921987][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 840.943336][ T24] usbtest 6-1:1.0: Linux user mode ISO test driver [ 840.987604][ T24] usbtest 6-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 841.027782][ T24] usb 6-1: USB disconnect, device number 21 [ 842.281849][ T5888] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 842.402462][T11629] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1527'. [ 842.436332][T11629] create_pit_timer: 22 callbacks suppressed [ 842.436350][T11629] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 842.486054][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.533824][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 842.543341][ T5888] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 842.554885][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.587265][ T5888] usb 5-1: config 0 descriptor?? [ 843.717163][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1530'. [ 845.031102][ T979] usb 5-1: USB disconnect, device number 87 [ 846.534833][T11659] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1534'. [ 847.694762][T11671] fuse: Bad value for 'fd' [ 848.074263][T11679] SET target dimension over the limit! [ 848.411583][ T979] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 848.591739][ T979] usb 6-1: device descriptor read/64, error -71 [ 848.833238][ T979] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 848.871617][ T5956] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 848.994021][ T979] usb 6-1: device descriptor read/64, error -71 [ 849.023668][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 849.032918][ T5956] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 849.042538][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.053740][ T5956] usb 5-1: Product: syz [ 849.058344][ T5956] usb 5-1: Manufacturer: syz [ 849.063668][ T5956] usb 5-1: SerialNumber: syz [ 849.073292][ T5956] usb 5-1: config 0 descriptor?? [ 849.086353][ T5956] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 849.112002][ T979] usb usb6-port1: attempt power cycle [ 849.249425][T11683] tipc: Started in network mode [ 849.260559][T11683] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 849.271790][T11683] tipc: Enabling of bearer rejected, failed to enable media [ 849.521797][ T979] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 849.557999][ T979] usb 6-1: device descriptor read/8, error -71 [ 849.801536][ T979] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 849.823866][ T979] usb 6-1: device descriptor read/8, error -71 [ 849.937862][ T979] usb usb6-port1: unable to enumerate USB device [ 850.339989][ T5956] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 850.350142][ T5956] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 851.423701][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 851.460354][T11717] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1550'. [ 851.478608][T11717] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 851.615238][T11724] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1552'. [ 851.709401][ T5956] usb 5-1: USB disconnect, device number 88 [ 851.821450][ T979] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 851.830494][T11728] syzkaller1: entered promiscuous mode [ 851.859398][T11728] syzkaller1: entered allmulticast mode [ 852.278758][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.307172][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.882555][ T5956] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 853.081528][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 853.091154][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.102573][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.115049][ T5956] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 853.195295][T11761] netlink: 'syz.3.1560': attribute type 6 has an invalid length. [ 853.203825][T11761] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1560'. [ 853.224034][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.253072][ T5956] usb 5-1: config 0 descriptor?? [ 853.274948][ T5956] usbhid 5-1:0.0: can't add hid device: -22 [ 853.285685][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 855.291740][ T5888] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 855.500910][ T5888] usb 6-1: config 0 has no interfaces? [ 855.511584][ T5888] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 855.520902][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.535748][ T5888] usb 6-1: Product: syz [ 855.540120][ T5888] usb 6-1: Manufacturer: syz [ 855.548444][ T5888] usb 6-1: SerialNumber: syz [ 855.563059][ T5888] usb 6-1: config 0 descriptor?? [ 855.923545][ T5956] usb 5-1: USB disconnect, device number 89 [ 857.769364][T11795] syzkaller1: entered promiscuous mode [ 857.787224][T11795] syzkaller1: entered allmulticast mode [ 858.580690][ T979] usb 6-1: USB disconnect, device number 27 [ 858.680666][ T5897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 858.695079][ T5897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 858.704343][ T5897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 858.712813][ T5897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 858.730398][ T5897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 858.785594][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 858.804251][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 858.816259][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 858.831537][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 858.842169][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 859.127078][T11823] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1576'. [ 859.368065][T11833] netlink: 'syz.0.1575': attribute type 6 has an invalid length. [ 859.377772][T11833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1575'. [ 860.288614][T11829] fuse: Bad value for 'fd' [ 861.931936][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 861.940618][T11828] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 861.994251][T11828] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 862.009189][T11828] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 863.343364][T11814] chnl_net:caif_netlink_parms(): no params data found [ 863.991151][T11867] fuse: Bad value for 'fd' [ 864.021728][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 864.233276][T11814] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.240541][T11814] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.263349][T11814] bridge_slave_0: entered allmulticast mode [ 864.281875][T11814] bridge_slave_0: entered promiscuous mode [ 864.290945][T11814] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.317296][T11814] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.379535][T11814] bridge_slave_1: entered allmulticast mode [ 864.833487][T11814] bridge_slave_1: entered promiscuous mode [ 864.995562][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1582'. [ 865.165897][T11814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.210625][T11814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.294668][T11814] team0: Port device team_slave_0 added [ 865.310771][T11814] team0: Port device team_slave_1 added [ 865.358446][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.379592][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.500253][T11814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.509747][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.538042][T11814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.558599][T11814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.568059][T11814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.594025][ C1] vkms_vblank_simulate: vblank timer overrun [ 865.605656][T11814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.750076][T11814] hsr_slave_0: entered promiscuous mode [ 865.785376][ T5888] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 865.794271][T11814] hsr_slave_1: entered promiscuous mode [ 865.829168][T11814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 865.848219][T11814] Cannot create hsr debugfs directory [ 866.001498][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 866.010020][ T5888] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.018800][ T5888] usb 6-1: config 0 has no interface number 0 [ 866.043345][ T5888] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 866.057765][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.093938][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 866.121438][ T5888] usb 6-1: Product: syz [ 866.132287][ T5888] usb 6-1: Manufacturer: syz [ 866.161147][ T5888] usb 6-1: SerialNumber: syz [ 866.183890][T11893] netlink: 'syz.4.1590': attribute type 6 has an invalid length. [ 866.192234][T11893] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1590'. [ 866.270738][ T5888] usb 6-1: config 0 descriptor?? [ 866.294970][ T5888] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 866.307636][ T5888] usb 6-1: selecting invalid altsetting 1 [ 866.331057][ T5888] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 866.370111][ T5888] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 866.398315][ T5888] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 866.419378][ T5888] usb 6-1: media controller created [ 866.464028][T11814] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.479156][T11814] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.498633][T11814] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.579788][T11814] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.589805][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.908816][T11814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.998575][T11814] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.050444][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.057719][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.088820][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.096076][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.331147][T11814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.451768][T11814] veth0_vlan: entered promiscuous mode [ 867.493826][T11814] veth1_vlan: entered promiscuous mode [ 867.588661][T11814] veth0_macvtap: entered promiscuous mode [ 867.611094][T11814] veth1_macvtap: entered promiscuous mode [ 867.665777][T11814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.692059][ T5888] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 867.704784][T11814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.718204][ T5888] zl10353_read_register: readreg error (reg=127, ret==-110) [ 867.753671][T11814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.776779][T11814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.801788][T11814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.825813][T11814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.172994][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 868.192772][T11892] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 868.252389][ T5978] usb 6-1: USB disconnect, device number 28 [ 868.423452][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.433934][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.490574][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.500281][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.673362][ T979] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 869.900535][ T979] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 869.945413][ T979] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 869.984152][ T979] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.039953][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.161788][ T24] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 870.178421][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.185164][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.291115][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 870.386908][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 870.401644][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 870.415527][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.425861][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.746147][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1597'. [ 870.951608][ T5999] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 871.125091][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.172114][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.218148][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.270528][ T5999] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 871.336923][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.387005][T11945] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1601'. [ 871.401011][ T5999] usb 7-1: config 0 descriptor?? [ 871.491512][ T30] audit: type=1326 audit(1752056607.035:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.3.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba698e929 code=0x0 [ 872.211587][ T979] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 872.332461][ T5885] Bluetooth: hci6: command 0x041b tx timeout [ 872.440237][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 872.468494][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.492254][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.527842][ T979] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 872.607700][ T24] usb 6-1: USB disconnect, device number 29 [ 872.637953][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.709675][ T5999] usb 7-1: string descriptor 0 read error: -71 [ 872.717722][ T5999] uclogic 0003:5543:0047.000F: failed retrieving string descriptor #200: -71 [ 872.750102][ T979] usb 4-1: config 0 descriptor?? [ 872.760976][ T5999] uclogic 0003:5543:0047.000F: failed retrieving pen parameters: -71 [ 872.806922][ T979] usbhid 4-1:0.0: can't add hid device: -22 [ 872.813135][ T5999] uclogic 0003:5543:0047.000F: failed probing pen v2 parameters: -71 [ 872.846970][ T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 872.883787][ T5999] uclogic 0003:5543:0047.000F: failed probing parameters: -71 [ 872.904135][ T5999] uclogic 0003:5543:0047.000F: probe with driver uclogic failed with error -71 [ 872.952030][ T5999] usb 7-1: USB disconnect, device number 2 [ 873.369179][ T5888] usb 5-1: USB disconnect, device number 90 [ 874.264581][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 874.521781][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 874.617033][ T5888] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.679104][ T5888] usb 7-1: config 0 has no interfaces? [ 874.780564][ T5888] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 874.805703][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 874.805762][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.854605][ T5888] usb 7-1: Product: syz [ 874.859100][ T5888] usb 7-1: Manufacturer: syz [ 874.870114][ T5888] usb 7-1: SerialNumber: syz [ 874.903547][ T5888] usb 7-1: config 0 descriptor?? [ 874.931757][ T5989] usb 4-1: USB disconnect, device number 102 [ 874.985578][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.801448][ T979] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 876.167402][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 876.187394][ T979] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 876.201425][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.212738][ T979] usb 4-1: config 0 has no interface number 0 [ 876.271727][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 876.358977][ T979] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 876.492373][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.500440][ T979] usb 4-1: Product: syz [ 876.523786][ T979] usb 4-1: Manufacturer: syz [ 876.528527][ T979] usb 4-1: SerialNumber: syz [ 876.542120][ T24] usb 5-1: device descriptor read/64, error -71 [ 876.586982][ T979] usb 4-1: config 0 descriptor?? [ 876.792513][T12000] FAULT_INJECTION: forcing a failure. [ 876.792513][T12000] name failslab, interval 1, probability 0, space 0, times 0 [ 876.819162][T12000] CPU: 1 UID: 0 PID: 12000 Comm: syz.5.1614 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 876.819184][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 876.819195][T12000] Call Trace: [ 876.819202][T12000] [ 876.819210][T12000] dump_stack_lvl+0x189/0x250 [ 876.819240][T12000] ? __pfx____ratelimit+0x10/0x10 [ 876.819265][T12000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.819285][T12000] ? __pfx__printk+0x10/0x10 [ 876.819309][T12000] ? __pfx___might_resched+0x10/0x10 [ 876.819328][T12000] ? fs_reclaim_acquire+0x7d/0x100 [ 876.819354][T12000] should_fail_ex+0x414/0x560 [ 876.819395][T12000] should_failslab+0xa8/0x100 [ 876.819416][T12000] __kmalloc_noprof+0xcb/0x4f0 [ 876.819433][T12000] ? tomoyo_encode+0x28b/0x550 [ 876.819451][T12000] tomoyo_encode+0x28b/0x550 [ 876.819472][T12000] tomoyo_realpath_from_path+0x58d/0x5d0 [ 876.819498][T12000] tomoyo_path2_perm+0x265/0x680 [ 876.819520][T12000] ? tomoyo_path2_perm+0x235/0x680 [ 876.819542][T12000] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 876.819600][T12000] tomoyo_path_rename+0x114/0x190 [ 876.819617][T12000] ? __d_lookup+0x66/0x780 [ 876.819633][T12000] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 876.819660][T12000] security_path_rename+0x250/0x490 [ 876.819680][T12000] do_renameat2+0x64d/0xc50 [ 876.819714][T12000] ? __pfx_do_renameat2+0x10/0x10 [ 876.819745][T12000] ? getname_flags+0x1e5/0x540 [ 876.819769][T12000] __x64_sys_renameat2+0xce/0xe0 [ 876.819790][T12000] do_syscall_64+0xfa/0x3b0 [ 876.819805][T12000] ? lockdep_hardirqs_on+0x9c/0x150 [ 876.819828][T12000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.819842][T12000] ? clear_bhb_loop+0x60/0xb0 [ 876.819861][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.819876][T12000] RIP: 0033:0x7f2fbf78e929 [ 876.819890][T12000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.819904][T12000] RSP: 002b:00007f2fc0672038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 876.819922][T12000] RAX: ffffffffffffffda RBX: 00007f2fbf9b5fa0 RCX: 00007f2fbf78e929 [ 876.819933][T12000] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 876.819945][T12000] RBP: 00007f2fc0672090 R08: 0000000000000002 R09: 0000000000000000 [ 876.819954][T12000] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 876.819964][T12000] R13: 0000000000000000 R14: 00007f2fbf9b5fa0 R15: 00007f2fbfadfa28 [ 876.819987][T12000] [ 876.820004][T12000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 877.107700][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 877.290741][T12007] input: syz1 as /devices/virtual/input/input36 [ 877.331412][ T24] usb 5-1: device descriptor read/64, error -71 [ 877.353114][ T979] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 877.381683][ T6014] usb 4-1: Failed to submit usb control message: -71 [ 877.401396][ T6014] usb 4-1: unable to send the bmi data to the device: -71 [ 877.408591][ T6014] usb 4-1: unable to get target info from device [ 877.416853][ T6014] usb 4-1: could not get target info (-71) [ 877.423384][ T6014] usb 4-1: could not probe fw (-71) [ 877.441750][ T24] usb usb5-port1: attempt power cycle [ 877.705249][ T979] usb 4-1: USB disconnect, device number 103 [ 878.061750][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 878.209880][ T24] usb 5-1: device descriptor read/8, error -71 [ 878.228401][ T979] usb 7-1: USB disconnect, device number 3 [ 878.547130][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 879.577729][T12019] SET target dimension over the limit! [ 879.871724][ T5989] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 879.959590][ T24] usb 5-1: device descriptor read/8, error -71 [ 880.191525][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 880.192081][ T24] usb usb5-port1: unable to enumerate USB device [ 880.343821][T12027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.362522][ T5989] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.379532][T12027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.407806][T12028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1622'. [ 880.440421][ T5989] usb 4-1: config 0 has no interfaces? [ 880.457875][ T5989] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 880.507914][T12028] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 880.519654][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.629847][ T5989] usb 4-1: config 0 descriptor?? [ 880.660385][T12030] tap0: tun_chr_ioctl cmd 1074025677 [ 880.707185][T12030] tap0: linktype set to 0 [ 880.957306][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1623'. [ 881.789161][T12036] could not allocate digest TFM handle poly1305-simd [ 882.132365][ T5989] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 882.435410][T12053] program syz.5.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 882.476101][ T5989] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 882.523955][ T5989] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 882.568960][T12055] program syz.5.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 882.625340][ T5989] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.681455][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.971786][ T31] INFO: task syz.1.1094:10030 blocked for more than 163 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 883.037002][ T31] Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 [ 883.075875][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 883.240722][ T31] task:syz.1.1094 state:D stack:25016 pid:10030 tgid:10029 ppid:5903 task_flags:0x480040 flags:0x00004004 [ 883.365481][ T31] Call Trace: [ 883.381375][ T31] [ 883.411484][ T31] __schedule+0x16f5/0x4d00 [ 883.423776][ T31] ? schedule+0x165/0x360 [ 883.462837][ T5989] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 883.484820][ T31] ? __pfx___schedule+0x10/0x10 [ 883.528502][ T31] ? schedule+0x91/0x360 [ 883.541359][ T31] schedule+0x165/0x360 [ 883.549867][ T31] schedule_timeout+0x9a/0x270 [ 883.567751][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 883.601435][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.723153][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 883.728468][ T31] ? wait_for_completion+0x267/0x5d0 [ 883.791358][ T31] wait_for_completion+0x2bf/0x5d0 [ 883.796627][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 883.812200][ T31] i2c_del_adapter+0x581/0x6e0 [ 883.836724][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 883.852188][ T31] ? em28xx_release_resources+0xde/0x240 [ 883.858018][ T31] ? kfree+0x18e/0x440 [ 883.901344][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 883.906624][ T31] em28xx_release_resources+0x14c/0x240 [ 883.961380][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 883.968053][ T31] usb_unbind_interface+0x26b/0x8f0 [ 884.011492][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 884.017356][ T31] device_release_driver_internal+0x4d9/0x7c0 [ 884.031932][ T31] bus_remove_device+0x34d/0x410 [ 884.036934][ T31] device_del+0x511/0x8e0 [ 884.063414][ T31] ? kfree+0x18e/0x440 [ 884.101560][ T31] ? __pfx_device_del+0x10/0x10 [ 884.115317][ T31] ? kobject_put+0x446/0x480 [ 884.120003][ T31] usb_disable_device+0x3e9/0x8a0 [ 884.170733][ T31] usb_disconnect+0x330/0x950 [ 884.176050][ T31] hub_quiesce+0x171/0x330 [ 884.191432][ T31] hub_disconnect+0xc8/0x470 [ 884.211694][ T31] usb_unbind_interface+0x26b/0x8f0 [ 884.216994][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 884.231555][ T31] device_release_driver_internal+0x4d9/0x7c0 [ 884.248133][ T31] proc_disconnect_claim+0x2e1/0x350 [ 884.282486][ T31] ? rcu_is_watching+0x15/0xb0 [ 884.287316][ T31] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 884.321590][ T31] ? trace_contention_end+0x39/0x120 [ 884.327002][ T31] usbdev_ioctl+0x131b/0x20c0 [ 884.351757][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 884.356876][ T31] ? __fget_files+0x2a/0x420 [ 884.382020][ T31] ? __fget_files+0x3a0/0x420 [ 884.401473][ T31] ? __fget_files+0x2a/0x420 [ 884.406152][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 884.431741][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 884.436855][ T31] __se_sys_ioctl+0xfc/0x170 [ 884.471431][ T31] do_syscall_64+0xfa/0x3b0 [ 884.476010][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.521381][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.541636][ T31] ? clear_bhb_loop+0x60/0xb0 [ 884.546387][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.580363][ T31] RIP: 0033:0x7fdbfcf8e929 [ 884.591386][ T31] RSP: 002b:00007fdbfdecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.611623][ T31] RAX: ffffffffffffffda RBX: 00007fdbfd1b5fa0 RCX: 00007fdbfcf8e929 [ 884.619664][ T31] RDX: 0000200000000000 RSI: 000000008108551b RDI: 0000000000000003 [ 884.652243][ T31] RBP: 00007fdbfd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 884.660294][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.704686][ T31] R13: 0000000000000000 R14: 00007fdbfd1b5fa0 R15: 00007fdbfd2dfa28 [ 884.732115][ T31] [ 884.751809][ T31] INFO: task syz.1.1094:10033 blocked for more than 165 seconds. [ 884.759636][ T31] Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 [ 884.831440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.840190][ T31] task:syz.1.1094 state:D stack:28904 pid:10033 tgid:10029 ppid:5903 task_flags:0x400040 flags:0x00004004 [ 884.909095][ T31] Call Trace: [ 884.913618][ T31] [ 884.916627][ T31] __schedule+0x16f5/0x4d00 [ 884.921268][ T31] ? __lock_acquire+0x9f0/0xd20 [ 884.926998][ T31] ? schedule+0x165/0x360 [ 884.931668][ T31] ? __pfx___schedule+0x10/0x10 [ 884.936587][ T31] ? schedule+0x91/0x360 [ 884.940862][ T31] schedule+0x165/0x360 [ 884.952060][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.957695][ T31] __mutex_lock+0x724/0xe80 [ 884.962961][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 884.968657][ T31] ? __mutex_lock+0x51b/0xe80 [ 884.974263][ T31] ? usbdev_ioctl+0x140/0x20c0 [ 884.979081][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.984685][ T31] usbdev_ioctl+0x140/0x20c0 [ 884.990661][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 884.996694][ T31] ? __fget_files+0x2a/0x420 [ 885.011409][ T31] ? __fget_files+0x3a0/0x420 [ 885.016155][ T31] ? __fget_files+0x2a/0x420 [ 885.020771][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 885.040041][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 885.045528][ T31] __se_sys_ioctl+0xfc/0x170 [ 885.050162][ T31] do_syscall_64+0xfa/0x3b0 [ 885.054786][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 885.060061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.066529][ T31] ? clear_bhb_loop+0x60/0xb0 [ 885.071265][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.077316][ T31] RIP: 0033:0x7fdbfcf8e929 [ 885.081803][ T31] RSP: 002b:00007fdbfdeae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.090259][ T31] RAX: ffffffffffffffda RBX: 00007fdbfd1b6080 RCX: 00007fdbfcf8e929 [ 885.099850][ T31] RDX: 00002000000006c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 885.107995][ T31] RBP: 00007fdbfd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 885.116115][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.124502][ T31] R13: 0000000000000001 R14: 00007fdbfd1b6080 R15: 00007fdbfd2dfa28 [ 885.132606][ T31] [ 885.135726][ T31] [ 885.135726][ T31] Showing all locks held in the system: [ 885.311749][ T31] 1 lock held by khungtaskd/31: [ 885.316662][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 885.441417][ T31] 2 locks held by getty/5606: [ 885.446174][ T31] #0: ffff88814ca1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 885.521711][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 885.601729][ T31] 3 locks held by kworker/1:1/5888: [ 885.608298][ T31] 4 locks held by kworker/u8:0/5912: [ 885.661640][ T31] 5 locks held by kworker/0:5/5989: [ 885.666912][ T31] #0: ffff888020ada148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 885.805895][ T31] #1: ffffc900047dfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 885.891359][ T31] #2: ffff88802853c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 885.936541][ T31] #3: ffff88802853f510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 885.991427][ T31] #4: ffff8880282b6068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 886.001219][ T31] 4 locks held by kworker/0:6/5999: [ 886.081879][ T31] 1 lock held by syz.0.1064/9931: [ 886.086973][ T31] 5 locks held by syz.1.1094/10030: [ 886.181686][ T31] #0: ffff888028409198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20c0 [ 886.190952][ T31] #1: ffff888028432160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 886.291330][ T31] #2: ffff888026fde198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 886.300601][ T31] #3: ffff888024806160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 886.331398][ T31] #4: ffff8880118a1b88 (&dev->lock#3){+.+.}-{4:4}, at: em28xx_release_resources+0x75/0x240 [ 886.350466][ T31] 1 lock held by syz.1.1094/10033: [ 886.356091][ T31] #0: ffff888028409198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20c0 [ 886.369150][ T31] 1 lock held by syz.2.1530/11639: [ 886.385550][ T31] #0: ffff888028409198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 886.395730][ T31] 1 lock held by syz.3.1618/12018: [ 886.400883][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 886.415738][ T31] 1 lock held by syz.6.1626/12048: [ 886.420901][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 886.437030][ T31] 1 lock held by syz.4.1629/12059: [ 886.442493][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 886.456445][ T31] 2 locks held by syz.5.1630/12063: [ 886.462260][ T31] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 886.477124][ T31] #1: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 886.500085][ T31] [ 886.508699][ T31] ============================================= [ 886.508699][ T31] [ 886.546954][ T31] NMI backtrace for cpu 1 [ 886.546977][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 886.547003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.547016][ T31] Call Trace: [ 886.547025][ T31] [ 886.547036][ T31] dump_stack_lvl+0x189/0x250 [ 886.547065][ T31] ? __wake_up_klogd+0xd9/0x110 [ 886.547098][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.547124][ T31] ? __pfx__printk+0x10/0x10 [ 886.547166][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 886.547199][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 886.547224][ T31] ? _printk+0xcf/0x120 [ 886.547257][ T31] ? __pfx__printk+0x10/0x10 [ 886.547288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 886.547312][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 886.547350][ T31] watchdog+0xfee/0x1030 [ 886.547373][ T31] ? watchdog+0x1de/0x1030 [ 886.547400][ T31] kthread+0x70e/0x8a0 [ 886.547434][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.547453][ T31] ? __pfx_kthread+0x10/0x10 [ 886.547485][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.547516][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.547546][ T31] ? __pfx_kthread+0x10/0x10 [ 886.547577][ T31] ret_from_fork+0x3f9/0x770 [ 886.547604][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.547633][ T31] ? __switch_to_asm+0x39/0x70 [ 886.547659][ T31] ? __switch_to_asm+0x33/0x70 [ 886.547695][ T31] ? __pfx_kthread+0x10/0x10 [ 886.547724][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.547766][ T31] [ 886.547775][ T31] Sending NMI from CPU 1 to CPUs 0: [ 886.709809][ C0] NMI backtrace for cpu 0 [ 886.709826][ C0] CPU: 0 UID: 0 PID: 979 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 886.709846][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.709858][ C0] Workqueue: events_power_efficient gc_worker [ 886.709891][ C0] RIP: 0010:check_preemption_disabled+0x2d/0x120 [ 886.709913][ C0] Code: 41 56 53 48 83 ec 10 65 48 8b 05 0e 2e 31 07 48 89 44 24 08 65 8b 05 16 2e 31 07 65 8b 0d 0b 2e 31 07 f7 c1 ff ff ff 7f 74 23 <65> 48 8b 0d eb 2d 31 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 [ 886.709927][ C0] RSP: 0018:ffffc9000414f7f0 EFLAGS: 00000046 [ 886.709941][ C0] RAX: 0000000000000000 RBX: ffffffff899f78f8 RCX: 0000000080000000 [ 886.709971][ C0] RDX: 0000000000000000 RSI: ffffffff8d9e930d RDI: ffffffff8be29dc0 [ 886.709983][ C0] RBP: ffffc9000414f910 R08: 0000000000000000 R09: ffffffff89a02824 [ 886.709996][ C0] R10: dffffc0000000000 R11: fffffbfff1f43dff R12: 0000000000000200 [ 886.710009][ C0] R13: ffff8880250a7018 R14: 1ffff92000829f0c R15: dffffc0000000000 [ 886.710022][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 886.710037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.710049][ C0] CR2: 0000200000404030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 886.710065][ C0] Call Trace: [ 886.710073][ C0] [ 886.710082][ C0] ? seqcount_lockdep_reader_access+0xe8/0x1c0 [ 886.710107][ C0] lockdep_hardirqs_off+0xab/0x110 [ 886.710135][ C0] ? seqcount_lockdep_reader_access+0xe8/0x1c0 [ 886.710158][ C0] trace_hardirqs_off+0x12/0x40 [ 886.710186][ C0] seqcount_lockdep_reader_access+0xe8/0x1c0 [ 886.710210][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 886.710241][ C0] gc_worker+0x308/0x1380 [ 886.710279][ C0] ? gc_worker+0x264/0x1380 [ 886.710309][ C0] ? __pfx_gc_worker+0x10/0x10 [ 886.710336][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.710371][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 886.710390][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 886.710410][ C0] process_scheduled_works+0xae1/0x17b0 [ 886.710442][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.710469][ C0] worker_thread+0x8a0/0xda0 [ 886.710509][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 886.710539][ C0] ? __kthread_parkme+0x7b/0x200 [ 886.710566][ C0] kthread+0x70e/0x8a0 [ 886.710592][ C0] ? __pfx_worker_thread+0x10/0x10 [ 886.710613][ C0] ? __pfx_kthread+0x10/0x10 [ 886.710638][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.710663][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.710689][ C0] ? __pfx_kthread+0x10/0x10 [ 886.710719][ C0] ret_from_fork+0x3f9/0x770 [ 886.710740][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 886.710761][ C0] ? __switch_to_asm+0x39/0x70 [ 886.710785][ C0] ? __switch_to_asm+0x33/0x70 [ 886.710807][ C0] ? __pfx_kthread+0x10/0x10 [ 886.710832][ C0] ret_from_fork_asm+0x1a/0x30 [ 886.710863][ C0] [ 886.716335][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 886.716360][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 886.716390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.716407][ T31] Call Trace: [ 886.716417][ T31] [ 886.716430][ T31] dump_stack_lvl+0x99/0x250 [ 886.716466][ T31] ? __asan_memcpy+0x40/0x70 [ 886.716491][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.716530][ T31] ? __pfx__printk+0x10/0x10 [ 886.716578][ T31] panic+0x2db/0x790 [ 886.716614][ T31] ? __pfx_panic+0x10/0x10 [ 886.716642][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 886.716678][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 886.716704][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 886.716747][ T31] watchdog+0x102d/0x1030 [ 886.716773][ T31] ? watchdog+0x1de/0x1030 [ 886.716806][ T31] kthread+0x70e/0x8a0 [ 886.716844][ T31] ? __pfx_watchdog+0x10/0x10 [ 886.716867][ T31] ? __pfx_kthread+0x10/0x10 [ 886.716905][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 886.716940][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.716976][ T31] ? __pfx_kthread+0x10/0x10 [ 886.717012][ T31] ret_from_fork+0x3f9/0x770 [ 886.717043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 886.717077][ T31] ? __switch_to_asm+0x39/0x70 [ 886.717109][ T31] ? __switch_to_asm+0x33/0x70 [ 886.717143][ T31] ? __pfx_kthread+0x10/0x10 [ 886.717180][ T31] ret_from_fork_asm+0x1a/0x30 [ 886.717232][ T31] [ 887.146039][ T31] Kernel Offset: disabled [ 887.150388][ T31] Rebooting in 86400 seconds..