last executing test programs: 4m44.907332323s ago: executing program 0 (id=3305): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x154, 0x30, 0x8, 0x0, 0x0, {}, [{0x140, 0x1, [@m_skbmod={0xac, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x5, 0x0, 0x0, 0x7}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x4, 0x3, 0x2, 0x6}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9d}]}, {0xa, 0x6, "42475a9569c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x90, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0xa576}}}]}, {0x4c, 0x6, "f30200f9965895d00b053ae8b9fcd33c5cc1bcfceea60000000000000008c3279687577bb4def8a8a903cf99d8ae73dfda0d83160eac026ed017cc4e751197915419659101b15756"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) creat(&(0x7f0000000100)='./file0\x00', 0x120) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0xfffffffb) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) 4m43.528278511s ago: executing program 0 (id=3308): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000300)='clear_refs\x00') r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x8006, 0xed}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fchmod(r5, 0xc2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff) keyctl$link(0x8, r6, r6) getpgid(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x33) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 4m41.924666741s ago: executing program 0 (id=3313): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0xc080) close(0x3) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 4m41.815224145s ago: executing program 0 (id=3314): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x80000002, 0x0, &(0x7f0000000000), 0x0) r1 = getpgid(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, r2) fallocate(r2, 0x0, 0x5, 0x2) syz_pidfd_open(r1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000140)={{0xa, 0x2, 0x5a1f742d, 0x5, '\x00', 0x8}, 0x3, 0x2, 0x4, r1, 0x2, 0x5, 'syz0\x00', &(0x7f0000000080)=['\x00', '/\x00'], 0x3}) syz_clone3(&(0x7f00000002c0)={0xca082480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m41.121979491s ago: executing program 0 (id=3317): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000a40)="82"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) 4m40.43967363s ago: executing program 0 (id=3320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee", 0xda}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab5", 0x4e}, {&(0x7f0000003d80)="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", 0x116}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479", 0x33}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaea", 0x8}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e7376", 0x65}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m39.77948324s ago: executing program 32 (id=3320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee", 0xda}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab5", 0x4e}, {&(0x7f0000003d80)="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", 0x116}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479", 0x33}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaea", 0x8}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e7376", 0x65}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m18.128245736s ago: executing program 1 (id=3378): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8040, 0x3a) r3 = fanotify_init(0x200, 0x40800) fanotify_mark(r3, 0x261, 0x40000000, r2, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd7) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r8, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000023893) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)) 4m14.56684377s ago: executing program 1 (id=3389): socket$alg(0x26, 0x5, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hsr0\x00', 0x4}) (fail_nth: 3) 4m13.467321361s ago: executing program 1 (id=3391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f0000000300)='clear_refs\x00') r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x8006, 0xed}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fchmod(r5, 0xc2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff) keyctl$link(0x8, r6, r6) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x33) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 4m11.381786436s ago: executing program 1 (id=3395): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000880)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffc, 0x30808c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[], 0xc8}}, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009140)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x5, {0x405, 0x4, 0x1, 0x4}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800) preadv2(r5, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000000580)=""/18, 0x12}, {&(0x7f0000000680)=""/250, 0xfa}], 0x9, 0x40, 0x2, 0x9) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000300)) 4m11.177338737s ago: executing program 1 (id=3397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000027c0), 0x42, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r0 = userfaultfd(0x80001) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4m10.888185584s ago: executing program 1 (id=3401): add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000010ef1747600000000000010902240001000000000904000001030002000921010100012205000905810300040c000039db8536ed0d15adb2946ea3067d9bf2f60cbdfbb901ed92dfe6fb29401e537f3bca9a171444a24a23db0a7c09b8fba653f51c1312e75ffe324c45509794ee903e537063bc20358c6da826cf737565fb6cad1db08f0f4e173e491c313a8e6919876d450a595f0377519fd7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x18, {0x18, 0x24, "a7ea3173fdb07da9dbf98251e10efefb9f65ba78a92d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="4053bb6b7664a788"]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x100048ed, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0xd8, r2, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xd8}}, 0xc801) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket(0x40000000015, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r8 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000280)=0xffffff4a) 4m9.941420758s ago: executing program 33 (id=3401): add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000200000010ef1747600000000000010902240001000000000904000001030002000921010100012205000905810300040c000039db8536ed0d15adb2946ea3067d9bf2f60cbdfbb901ed92dfe6fb29401e537f3bca9a171444a24a23db0a7c09b8fba653f51c1312e75ffe324c45509794ee903e537063bc20358c6da826cf737565fb6cad1db08f0f4e173e491c313a8e6919876d450a595f0377519fd7"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x3, 0x18, {0x18, 0x24, "a7ea3173fdb07da9dbf98251e10efefb9f65ba78a92d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="4053bb6b7664a788"]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x100048ed, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0xd8, r2, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xd8}}, 0xc801) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket(0x40000000015, 0x2, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r8 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000280)=0xffffff4a) 14.449762121s ago: executing program 6 (id=4296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x95}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001180)="985b66cb6ad1834e7846cdfaa04bcb508a2dc657cc73a832f7b734eb3ce6edbd13a641e6d90fc93d7c6a599510944bf535f32dfc8de2a684ced1800d6b12da0076d1261969b7bb76cd429794f70e9a944dd5b80763ff5e8175d27d0e260ae4d4d20aa894903c70aa8b607c0d0c9914d017ead9f3af88e1a7d662a9facab0f53ab33401071cc297b5385a023f58c7366c6fb0c7888633dec84dcc98a1f1869f7d9ace48b34071382f6c55e144dd61dab575c974928edc65cfc3eaf0b0c0119fcefcd8d3b6609c3db56cc21ba31eabf5f83082cc67adfe7440343eb57a046b33d4618ec19f061a673c5397c934a6ab010fcbe4a008906bbb2f95f05a83a613c9f77893a547e2a8083697f738d696f622c34b325b39ae4de96438c5410376c1d28620267dc785068ae4c29ae53ec6097439d7e6ec64727151c8f2c8e58ca830a638eb8f97f30382bbc905f7a7735e454f9b7aa9c5b077c03b1fb90cc36ed85ac760633e6fc6e68a641b56c5bb4b533a3931d0a5d59003648bbeac5611eb570a1ac1d3b5e5e4180971c002c6e48c66204a7e35fca64e304e9921128ca3a7d16aa61519caf48facac71ced71849e82d4593ee608ef2c04b77bae4ddee7dc2adb22427b1f2fd3cb385d984fbba50d8601dfc793591690293475220205ea65880118d28297b3e004d974fd7fad10136d5ddbc0d3469835ce368116f567ba79c890612454ffe8e869b08db1efe58972b6e388bd00a2dbefa56e06dc3a6e5593d2d7c8fb85c04dcd018c8a876077d952513bbada0fe2b636598071e978b5a32b50dfdfcf0bad8c1533219a5a12ef3a610a2176c7c282d52653eb855431c59cde0634525e7f7e1743081fb0fb465860764baa4ab518e2a953c398ebc5bd38bb1f83240f84cd8128baf9fcca2082906eb227fa2ff4fb401b273c7bf8e409283d34f9e4120c1505c151005ebc46664aa219ab66bfff4ead1d2588e0b2ee7a154276ff3121966f9092383fcbc2145445afc895cc1833b128be5adc4952db0e7a4b51b885557b0ae379885c52bfd8b7b229efe20b67dfdd9f103c4342c609ca49373f3bd755b57db7d1cc4ce1c987dc537bf84fe64bc870fc4901c6200d89e09ef08573c0e0787a8dde31e979496d986c28977e82274c03b296c8acf8c09ddb4bdf79a91478f0f2fc0cb697f0044722e548fd8610e0cc7d55be151beed483b9188774c236c0ee410ce74340d47efec3a552f63d785087019521a237e6a5f4779a78a7d258c2bcb780cf11b43c4737ef6b8c97701a77ad032c476fe21f09494d00f92945226daeade4bf4b5f68288933739f63194eedd9a6a150c8dd0410a7e722819f9f57ecb62335a98b9e2f32784ac5ca07aaa2c44ea0bcf9a27e8877bce9b55455393778356f1f770feb636562f76cb301c3bd3d48dad5585c9d45e4c10171eca6f69c6cb97c8cd81b071a5fa37b4ed7ba1385064bce6ce3d683b8800756c42fa6c37238b6e7a0c0044a23c84d45959c7687439883c1912e07766e9b5b6372d1b0989764b9e3b7929ba221e6303aeb6f3cd774e54c478b31daed2916f9aedd5f119df73545cc663e17c5a990c469429b3e685ae3d1912cec9cb157b0b95d293925ddf673d6575f62333ec26e167c40fcd9e39d32d29f7dc718a22625cfed9286ed775fe9735a8f417a817c792c388771f35acbfa3031831b1336e4bc5a5ed051a5976bad5d47bdf468d88e0f570057a8cd39ea0cf5a8dc897d1489f4efb105d54d3bba2791cfc977e39f38a8fa4d48777c5f593c63758a36b37bd4477e8b24a1acf5d5b9424e9c3658bb498c4b0bb38b980db68bbb6699b250fbc9f8c9b8cdc5d6eb352b65ec60a5139245dcd44d068cb572eba5f9df960bac5d9cfec6b780f7450becce93673b198a5a2637430d9d62c3bbf077424903f3e5de682ba089622a9b043d3a530419577ebca6a0e34d2ad5aef7d9cfb6320567f447c333815359c80f0f48c36e5f6f5ed6060ab5491575b0b7a7f5427788ee180f2bff5049524bca95ee5c9e25ceac346f18a66d48a526901cfe682c66d908a45d6965f02244bffc443a2baa3b4d28c66bf7b5d3800fa1c68f2df7f2aef279602c4f8e8276f1790f7b160c96c48667fe4da96bb1d44b3dad5567a3573ace172959f2a881e60b4671ccaecd07da5834c5961ba45d8af22a97baebd3bf6ff3af55036ccbf1737d8d432aefea7cbee1001540803e42439f82c56079bf73cc22d603139c1a02c699a16bb5fceb1115095695e70fb30ff6337a82baf249259968bf97b6c04ee748c4fa4", 0x65a) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x4) 12.766665714s ago: executing program 5 (id=4305): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x1e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x80002, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="5baf8d0f1fb539695fb77646f9ed6faf94a907959ed2ce12274a59f36d8d9eeb9aa8333043b16ae8bf2ded3ebe294b8f4773e1186b4460f1c1", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 12.101140774s ago: executing program 6 (id=4307): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x496, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x200014, 0xce}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000", @ANYRES16=r0], 0x40c}}, 0x0) 11.883200155s ago: executing program 6 (id=4308): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x3) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x4, 0x8, &(0x7f00000001c0)={0x11, "694b68174bf36f5aec48ed65bbb44df72cbbe29ca8a535bed614dfa2844c483711"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', 0x0, 0x0, 0x0, 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_notify(r5, &(0x7f0000000300)={0x0, 0x3e, 0x4, @tid=r1}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="93fa85ff30d22ecafcc67ab208ff7f000024d8000000002fa27800000006e000000132004e23001e9078a7c56bcce48cbbdb"], 0x0) 10.524760876s ago: executing program 5 (id=4313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x24000000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1a000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.950090034s ago: executing program 6 (id=4314): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x500, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 9.849856339s ago: executing program 2 (id=4315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000380)={0x8, 0x0, 0x3, 0x0, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000002180)=r4) 9.755411481s ago: executing program 6 (id=4316): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000600)={r2, 0xada, 0x1}, &(0x7f0000000640)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 9.39935573s ago: executing program 5 (id=4320): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000030de0f10dc0518000100010203010902120001000000140904a1050096913a00"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x9, 0xf9, 0x7, 0x8000}]}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x200, 0x4) 8.651122442s ago: executing program 6 (id=4323): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f00002cf000/0x1000)=nil, 0x1000, 0xb, 0x2012, r1, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ed000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x5, 0x53, {0x53, 0x23, "9d7026be657d218fe754c53a8702a09fb189c162833c08eeebfac251e3f8d5316ba5ad99610fb480517c58df088994b2dd7fe36c90c9e78b44317aed79526cc81a6686c77dcbe5b4b1cbbb15f10fa8443d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0xf, 0x8f, "efaca5127017a64a9d88b36ea1e63ed3d864bbd9162537a348445974006212b0c9b451ea9ff28161a4b7d5715979febfbe49d74ec41418fd40cbe0fb99d248450ba5ca0619daef6066f4fa34706a26dbc81c0bf7f1d9afa5ec6f9ec81465958ebe342ef58b84e24f0eab67b7f7e94e1194f93fd14b77886f7da76f87a5d2b0b60af86766646a5cdf5ac60f04589cfa"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000280)={0x20, 0x81, 0x0, "f492d0"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "87"}, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x84, 0x3, "bd058c"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "3b2a95"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, &(0x7f0000000fc0)=""/4096, 0x1000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)=0x28) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x53) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7, 0x68ae}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r7, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 7.715371882s ago: executing program 2 (id=4326): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000700)={0x0, 0xec22, 0x8, 0x0, 0x40000334}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x800, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.349389264s ago: executing program 5 (id=4329): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000001) read$FUSE(r1, 0x0, 0x4e) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000100)={{0x5, 0xa6}, 'port1\x00', 0x80, 0x1020, 0x2, 0xe, 0xfffffff8, 0x9, 0x5b, 0x0, 0x0, 0x2}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}, 0xa6}], 0x1, 0x4008440) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) 5.618539414s ago: executing program 2 (id=4332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8930, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.332968481s ago: executing program 5 (id=4333): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x5d, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) eventfd2(0x9, 0x80001) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r10, 0x11, 0x0, 0x7c000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x781f, 0x7800, 0x7f, 0x4, {{0x14, 0x4, 0x1, 0x7, 0x50, 0x66, 0x0, 0x1, 0x2d, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @noop, @noop, @ssrr={0x89, 0xf, 0x24, [@private=0xa010100, @remote, @loopback]}, @end, @ssrr={0x89, 0x27, 0x76, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @private=0xa010100]}]}}}}}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0xfffffffffffffffe}) 5.083841597s ago: executing program 4 (id=4334): bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 4.797736642s ago: executing program 2 (id=4335): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x8c, 0xd615, 0x9, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) timer_create(0x7, 0x0, &(0x7f00000007c0)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000840)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, &(0x7f0000000040)) r7 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmmsg$sock(r3, &(0x7f0000006200)=[{{&(0x7f0000000a40)=@l2={0x1f, 0x6, @any, 0x2}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)="619c4f470d3f6a87e7bbc65d306fe5bbd966d1223de1b99819fdc0a14350b97ce31ed3937022c257d3dd", 0x2a}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="63ec413280d44114988d3448610d2766fafcf12a1b3cc837a2a9567f074c92a565daa249e154e5fb33a033e032b50a11faee319a14aa4cd86f335869dc27d8981c0b3ac468ebe5f719b2499c9cb47d90559c0aa2b31a5d9ed5adf58a75a2bee789f038bd12888577c9796b6dcdc04b71f8638b6758c3b1e1eda7c60e06b6a25b6b1325f393bb792014ce7ba31b", 0x8d}], 0x3, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}, {{&(0x7f0000001c40)=@phonet={0x23, 0x5, 0xe9, 0xd1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001cc0)="71b3e6c4df6067fd0362cce5aad8a50427eb1af2614653f3784c9cfebcf3ad9996ea8b1923385d4ddc70072fd428d784bc09f443239b4ab2480f4aab2d948766d4cc05aea350f89fc33631deb5702a751448681c03df7bd19e8eaaabfedd59f384207335a5af6218a53eebb6df", 0x6d}, {&(0x7f0000001d40)="2110ff2ccf3caa780faa64ec08", 0xd}, {&(0x7f0000001d80)="e36961174c02b6f4c64897cdf9d85dae0718c5919dae4dacb695bd1b8488060edd", 0x21}, {&(0x7f0000001dc0)="4d3c457107a4d0bb78353b358a0ce178051a58a25f6d123a9663185d3e9688f5a5ba85cc134201b800d4e8ad26b308b516e79722578adee2eea0986a554d21ed912e7d2da0e0b75c516b21", 0x4b}, {&(0x7f0000001e40)="253371a79c8240b9860997e6efa503103f4e27ee9d12e61c2b2f1d2e88291c66f86528a29400f82678fcca658acbca4f717fbb540d76882bf13d04b03466506501", 0x41}], 0x5, &(0x7f0000001f40)}}, {{&(0x7f0000001f80)=@nl=@unspec, 0x80, &(0x7f0000004380)=[{&(0x7f0000002040)="087e25f025b97f59c6edf8a5220c0b9794d756c70348fa74c4b4f4c2198c21d572a2db712648eda2ca66078e0387de3c11860b5830021dd6ef2d5c1dc7fe20521f58d111c7696911979c4742473f9f6492df1017e1a6f1f046adf4a2b31f7e677b31eb", 0x63}, {&(0x7f00000020c0)="c14b1537209acda32c3e9372c92643cc227e590994d9181d855da22f86fe0b9441e28f4509c49241e2f5bec31838d1d7f9a081ffb376e1ebb6defaa815e4a2cac13370918ae247be167931866088e5557c137447522a54f9", 0x58}, {&(0x7f0000002140)="90784bc8e78c043a57eeaf117f3aa5d72ff349fc60b07314dc5f8798fdde79fa2180f260bdeb5475eda0ed86028107e537dd74641377ce2e8b56a794593cbfcfb1c5fd35d111f627373d007fa6b774474be0426b0e7fdd3b83cf38e63e3f780847be1aa663b0f7772680da6cf23225fd5dbdced26c9be11b1602064af63478d2fc12247b68606bb25f358bf1f0d6a50e284d143563b41c5aa6e7f36fdbc606385fe5bfba319e91b47dded258244af47bc39a", 0xb2}, {&(0x7f0000002200)="d392e9a4e1cb99abfc20c2b4e6ffccf32e3a2398f54bb93a02927eb32fb3", 0x1e}, {&(0x7f0000002240)="b9f239a9f5cdc67704d828243084d48dee66c996816fba4964e6126da68251176eea054fa566cfc524561697abd6229aee1b19170da28a353a72be71f150e2", 0x3f}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="b62acf9d6bce448532137d47c4bbe4b1b28547b8e1c807cd3c037be574397f95123762b4d77afb879cf6dc9a887a5bef2d7247f82c60f9e650fcdc6abaa62acfd4be1cae072f1110c40d5bd3f9589af49e7047315168499d7c63a0cbd568ccac14f3897838fe", 0x66}, {&(0x7f0000004300)="57dc14954e4c5916c174b92bb2295078b9d5adeb0ae22fd7def558626153abe07f357b7ed1f12a8f950f757d3a3b6321926206f420e920119e407bceddaf9def601ab41cf735899129a8c3f21bed5d13dd2cbe49278041b6bfeba987990770a501547b28b504b57dc2717f79", 0x6c}], 0x9, &(0x7f0000004440)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x32}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x60}}, {{&(0x7f00000044c0)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004540)="400774c97fbd70d86e069a0300", 0xd}, {&(0x7f0000004580)="c514b2575380393b969482eae4d42625f6624c287ab2bdbe2f1299f356a807a88b75", 0x22}, {&(0x7f00000045c0)="c463aea01bc0bf3fcf2344f9d06e67ee9a39e6a3fe60b97f8ca279adc0f4354beba669f686e63da1ec987e1f9e6aa92d052fabb7395c8cd59bc3a8cee06274e7b85f309a243b88de1e4614f169cb3254d9de037d7e40acc61c46e83b45e772205d2fc094dfb6add351f692a82d9d6a73916f8b74bc8f1c1be8d8db701a5e4db2231314", 0x83}], 0x3, &(0x7f00000046c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xb30}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004780)="79a759c02ac3b81d39ddf273e0a861d2888edb658f9b311242a85a19ef2cbec050460d5e1ad022fe8863e3140977af5e8e90348f0dbfb6c4e932ffd52c80a89844588c8a62f272524560cac644e844c25d9f2daf90b5c404e600b6ac6360e8ee7d0ec373625bd93dd41b61416250137d69fee6179bd8b3503ab3d76560082fd78f92a0192f2c9b09042e015cd04931a5e5228bf50cfde8bbb541010f1a59ba0542174c62b3e7cd9000d611587a354163b1c35eb5d2c5537a5aaa666c4716bcf96195794f6e3f84a13b8aa62bebeb", 0xce}], 0x1, &(0x7f00000048c0)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xb0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x60}}, {{&(0x7f0000004940)=@x25, 0x80, &(0x7f0000005b40)=[{&(0x7f00000049c0)="716661399cd061f1cb461d5336cf50b7de65c84054fd6b92b3880cbb86ddee2593fc8de44b803fd2125d00b90012035cb8142d8b912df7c4514e79bee8681438284c78e3002a46ac0a954a2d6f493718ce977d64b719645ab5d9e1fe6a0ac4d154b63059ae643e6ee0b0c2cd8f364b211db890aeb55c3fcb4cf94b8c07dde61d7d1bc0879028efdc474ea3578847e9bc57ef0ade4e543b7a5a88261de22ee312d954c6c01ef3e9022782c7ac7ece60d548b43b0f82ae0cea08b7a6cf2383c6dbaf", 0xc1}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="695809cec089e8e68eff3d903991beba9088553320a4e4d59ec9ec841ba8d69905ba97abf1a8918b33a285be87c8b22450cbd01584b9b4edc0b151dd066d3709facc72a349beb078310108799443c6dc78a4bc4eb48eaec63214cbdfef7e8d3aca2c4beda13ba24553e3acf943599a4bcdb33abcfefcc9b2", 0x78}], 0x3, &(0x7f0000005b80)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x48}}, {{&(0x7f0000005c00)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @empty}, 0x2, 0x2}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005c80)="b54da0459676307474621a6744f1e6efbf890fce4c1bd93ec933e117e49cd6d5187953175a6bf6e6d8163d2420664ab7e3605a5a89c5dd677055bc218dc89767f5486555ccc498baab25c59194c7903030458ed399b504411e279bbf673c678145500b944234a8f2f533cda2626d745f62fbec05b646f387f0eb0a0c4e908e6584efe3fe1f9d833bb70e112dff8d407b120fccc8ca7fbd7dece3035d6d8fba2a8406ce05f63cfe45b6318ee21e56df43b0e627c05935", 0xb6}, {&(0x7f0000005d40)="a2411c4c3b0bc384acb6a9c760ac57327fa882b1a6f65bad500c6c2fbdbb314db4f989347ee3dedbfb1dec07f1b2c9d3b0e491c7c746b1df2be04a889bad4cd8b6213611bd3594ac8940", 0x4a}, {&(0x7f0000005dc0)="22ec85ca1a6f1f3952ea4499866607bec49c2ef2f64f8b33a4b3781bb4382e11cfb401a9", 0x24}, {&(0x7f0000005e00)="26860e8ba04fdb8cf8aa6bc498d6247e603e4975f08b98a92f1c1e78d11ade93e41495c05b8c5c4a4b5d16359d1bba8f00381d517de626deaf6bd8e4c417ba359759a8c171d6c841decec62819d612446121aa63d859b861f5071a8d45119413d8099d2a629d5c6777a651fb41f6f7bcfecbd1b5a3ce865952d4f19e91c8d9fc377c3f462ddc680ab0d3aa365fc31915c0dc9ecb78984c11240617c803572eddfd8ce8caf1e4c0a493d24fa0f03020b4b3ae", 0xb2}, {&(0x7f0000005ec0)="16e8e4d47a0ae5db62bfbb4849c3cd598857b7343ca06b0e5229e4aa733ff539c52c173cd6694bd47fd43b4ad06273f6f3f9a93c353c815251a118b4f6aae59ce67e93bcf2b9051ac48d93bd6c945b126465de76c01de54d98e27c63446ed788b2202e9e1d47328d9e977e4f9325436e7ab5b52ff05c30e614b1d30f9bc9e360a022d27bbfd27850055fab75f0f7a7614c3241b7ee340cc6dcfc560c6c72221488303337c4a6dd653ef6798e18040bbd33e37e3e5c777049679e5daa3fffe68fb76a2100315276c1d28bbe4c2efb174376673c5d94f2183a502f1564b9c19052c11f9cb3a2c9dd030126878a203e9ab8", 0xf0}, {&(0x7f0000005fc0)="04acf603d310a5bf6c6310d8aef0035d27cf8a5db11e2faef52ec07fbbb9e067a15266ede839d04e7673cec99c5f7f93b579f3d1f9f07180c4ee24261cf91f621980200c8cf1cb0f470e540f2a9fbb5a569467bc29d503480f0fa4fbf208153c4fee3f6dfea4f80b769b488f79fe6b56914093cec9de60a9c315239ab8d23bbcdbebf6fd54c4b054b3e440af8484f8dad71c", 0x92}, {&(0x7f0000006080)="5534eb25f9e0626ac6a8e19718eec46e9f9193502968125b997a43116cefdec8748e22dc1af71371ef1529dea3883eb48abc57b7d88df49656dc129a5dd5498a27fb837140005a72eb02", 0x4a}], 0x7, &(0x7f0000006180)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x47}}], 0x60}}], 0x7, 0x10) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r8 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r8, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000002000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1}) 4.340942655s ago: executing program 4 (id=4336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xee24, 0xffffffffffffffff, 0x0, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r2 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000380)={0x8, 0x0, 0x3, 0x0, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000002180)=r4) 3.493235557s ago: executing program 3 (id=4337): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x496, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x200014, 0xce}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adff", @ANYRES16=r0], 0x40c}}, 0x0) 3.141288629s ago: executing program 3 (id=4338): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904", @ANYRES64, @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x8, 0x5b, {0x5b, 0x6, "d077a924b76637b7c8021239ab4d5c69633ebe86d031ca810db4d67d5b4d2e3aff4c5a471f8792b10ba13b4bcdecf616139b55a469071008230ab214e1ab5d230566ca9e3843d3420c26295927617031b2770abfb8a2ecab1d"}}, &(0x7f0000000100)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "0a5aa5f2ef0b5afaf9f261f0d3cb0e83b131097de9825130474be3b051db8fa2fa1264bc96731b102b134aac6a7c0895e926a29a2aeff058932fd15ddfa1ffdac3f1c0e4a0e8c937aec30a34b3f9d7a590b937adc5278c8f4bf1c225f3074208a1632627a5976f464106636fb98be8b580da07ec8dae077e8399873db555cc38e8adf343d6c8ee14ec1b53547a"}}, &(0x7f0000000200)={0x0, 0xf, 0x93, {0x5, 0xf, 0x93, 0x1, [@generic={0x8e, 0x10, 0x5, "8c8e610d2f976163c55ea4d693f88f2661df9c139e11f1962c3cc174f10c31a55263e738f361da2685abfda466eb5045be653c1479f65ec9e1d498cbd6ccd00260edf22615ebd5a17c6120d092895d9a946dffa2893617739234a7393df4090dd5fea1c0153ad08c61ec27ecab615d3fe11acd7c4577ca81346b0661c53d3782e11564d2475820b8a98a41"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x3, 0x8, 0x6, "a9dff133", "dea75e82"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7ff}}}, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x16, 0xba, "db769908a033929834952d02ff0e0462162800237093d92f336cacf517c1f4ff842c4a53bdaa0a71cf13bd0341725b7a3238e4f75776c3aab2a1332fca8b249376027f5648931bda15a1e8d21112b5dab15d88df05ea895b283c24e0b716b15c1a7d78e790777808f957fab27cb9c772c91fdc5f6a5fb6dae02f7c830e6947457eb9a7296b0c17245aef6dcf3c9546e0e58b51727113bc28914705519a16c2a547f990983f2d75159ccc097c8dd5a6512fb1334e967d6b093c4e"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x60, 0x4}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000600)={0x40, 0xb, 0x2, "be49"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "014c"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xc}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0xcb8d100fd5513edb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.88649975s ago: executing program 2 (id=4339): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x2, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x8, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0xfffffffffffffffe, 0x438c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000000)="208a94057a775c1b76f05504a09ee132c2595469b18f63ec54de9facecb972ea109ebbffff7a81956287873190bc642c0b798682e3b2fa6eea94", 0x3a}, {&(0x7f0000000300)="222b08b90690dbbeeb050e2fe9c1e075ff2ddb241e3477f015700a94f69314959511ebe417d36a41ebb9f8a9eb6c6e46aaf6e65be52250c813b6f919e260bbe8d855acf165b4888db1afb18694bcc858651f9e2c774295686afe1fd62c3e71074ab6d4a82b250116b505c808c903dc97d865952cadbda37b95a560d1f00048a47fc789", 0x83}, {&(0x7f0000002f40)="d667301bd1d1849d2ed9ee986a446dea6ddf48d9a3209415e30258227da4df470cbcd6f3511ca7e001220e6ca9b07fce7f082de3c4bb263b78e42da8ab9cbeecde70fa7977de1988de2094ff483ee62a485d0271f7c2c1ded4a5858e090abf701d6f5ec78b442ef52a73544f5173bd7a9d79db8fbbb6956240a46a6a50df4128ac0e8cdc3c8f3821bb0408a07f5319ac61c303d8235939d3f17a23bdc1de478e09245ebe7828368152e74708d69dfc93d58c73d0d2b07f0528a7e05a67e739020a5790b1d9bbaab1e96e8debd205235c1a9fc1cfd60d76fb6bbbc7a2da4116c956eef8bb15156ee90324b598db7f06ecd38a6b0772f793c4baf172aaf595f890715ada1928d016d3890d73bc6842edd1bc33fdda5398a0ab1301fe7311ef8858c3bf68b81deab9daf5a6cbf396d62e7806f7f0e6b0b7208270d0e3598b4861796d876423caf80cc75b0699c43bc2c94fb3702ddcaafefa637e23504c474b4248fe4887788dad66d4e88429e5cff282ff3b27feb30666b29bcadf617b3db6f1e4848a2041fbecf689423a256876740e7263748c520facd3eec8edda43c109e81e27d91f1e4e13af3e738f5b557f1a32b13f99874b1257c7e36e0b5a32187459fc93500e08325937b196e40c0c65e06dbbe5bd52fe9b6db42b350c9a96a4d996ff1a05a5cffebfcf56716ae9a3c7f9768db96b5e034f0ba8837e9936a17df353702dbf4463b15d64010a65e75805dbb749598511d3330b30d1bc61631fadcdf7755e6de3ae61e855680479219d9f89311ec02dbd878f49292ae1405ca09cc1fc2f8ebbfcb8ee79bbfd1948357986390605f5032cc4f4baf8556cdbce22fa90059fb6e38bfeae2f9b283d6dbbbb90b536b02746212a9822c249d641a6a68aaf3a8fbb111b4fcfad46b3bed94c0a2bbd8471edb26ee5fd21276e6e6fe3d0053461ede35eee03312834b20e5ded2281a834317b2a4a17e10ff283e3f91e65603f8b50219e61138f414cf257c25baba5d6eef6756ee0c9bfc8bc7856004f5ceca6081aca71998f8ed38e70303ead19eabd86f7c21eddc8293892c1d19528aa820f8780b11829d72b858dfa6ac6a10d3f798629fda18f171431628ca9eabf4e3f3fddc2a1e936ea8edebc1940494c3525d12a1115203db9bcd7e4c024cc1cfbdeb553880cb9e9d39dfd322c4f97d8381fa3aed0bafac36eb0813e75ee8bf32b0e7fc9785fcf1d55950b8e8263df973665e762c2d3b4bedf974fdbaf2a3ce0cdaa190df9708ffe3e1452fcb8efa2343d7db8274086abf7cc07f02fb683a233d8538d37f2f852d639dd0ae9837508341e92ce84145d113a98022b8cb3d55fa9346ec4f0327903a3d8c447e4db070ddfed58e33fc6781f51677941dd17d2b83e996197bb738196b0dbb5b552feb27b69c6d1fa196c8f56c4a83b61c2565e0a816e23d2dcadd0e23d2cdcd97606502ceba7c4b4c1c71a39633c2ef369fb06c4f9ba8199761a790baac2714ce2f871b6f7242fadfac37ff3e8d257430af226dbe0f10ebbd04417baf03b798b2e562b0d70e3f455430df46bbc38df4580b1c58639562b7314dc8ffe5e74cb148348dad6e4f907c6c823fd70a35160c5dd4ae3c6fe45045d5cc02fb76320c7ecb8df284bd98056dc37ce262d178e883e7ddef84c42d1ff7ae7b6fc8364e645c2ed48ffb91cb9115a922cf52517caf4d660555e432a2eaf986e3af8e90fe9c89d54c920911a39eaa47518799a2e3bfa8691ba1caeb4699d9273fad8936f2115c0f49cf11ec26a56e608a926f07caefcdd23c06e954c6efa32e7fcca7d5af5d07014d1b44b2c0216570357d81bf91e3cce5d5a006f924be74f05e2667b4df27e7be5c0be626f9f917090eb895ad5698b2dc438f9c113e3cb38c7c434188276a5e6b43a30d3f4caae94b39263f5821a730c4dffeb54b7f2f37cd5f5251d42e7be6c40eb78679378d0b29d117e1f1572a62ea12c339a252438e4896a0c345a312f1ddf1d9430fb24162e6f72e16d701ff8acaddcac4547b735a96444880f01b48bbb6acc75d1846274ad4aa1b0bff114678437dcd4f2e42b38dbd2f2fc127aacd68258c334f57a9016115a42efb7c8a738a34d7e06005ec453f89de5a777d9438df63f815c50eb3222c4d3faa6d05f76124477783e24f716f78dd800fbfc2959b9e56098c8a2b4df3d7e47450d05165c215d23ea305d809ac7078a7d5b7bf3be6520aa6468df5dea2e26167d02b7e3c6345b92b778fcfbd1364ce4128239358b1edd2c77b46287e4dee4a4561bf9c0bdd8683d1244b142189d8b428475a0215ff3ea129d2cd6fc7ba7b444ef2e895a71db276846af7121151146cc171d28e287be882712e22abe54d132a8085ef506b275390f06f874220adfe773862cd1a8eaab2602d9e91d283c0c79b658af4448e0fa0c6d3053ae27b0d6888adaa00e34bd29eacc12b2b8ebebf201fed062a063db72b3cc3c8a333a7eee73d28af952d79094f08376cadf81b5a18bc6c413bf0662810ad537cd9f22ebac0a7acf7d0bb6a538ff8d76315bdd08708abace2513c71d301a3bbfdcf3d16377abb9402e1deedefa7527437b4a976a3e3c1f031789b7ed45f6dbc6131c49fa7da221ef1172d9f88728f883d63a6652b73ef60a02fee83269429d9a0c00d08217c6e16ed475ee912eed39f15e70b45970a1e31b9f6ebe5e2e5144130dbf22e3cbac96aa6b7c7cd8ecc0e727a81f10b286a1325571f3926db583c120d3f50e8a8c99f7dd20e06cac9829743fd9ed3fd19f9279d67cafeb1cf6f826ed2da00f1bb8e26edc76f22c074d3af8e597e627f762739a08fab681daebca1700acd7dc23d07b6b0b04bcd293f952d1606d865751ad5de5b3f76a71cf3c42cd2fbb1197b75e05cf4ed31474921debd74a0852019699f7ac2b8e6f1f1e2970db6269158616e3437cb7e0a0bf9da089dd6fb55684e775d2eea9f7f7c5278248f32d44da0fea62dc21c77bf1cc45e484773717ff4f6bbe509cc8c071e8eb3cfea137a8cd515ee0903ff2072c58a118cada663dc1e00d015f0bef74ebd20fee51d76a4ede0b7b60fa1e3e96922c247ed8b5acf26aaa510ae22a98624e42b0347f785f23a4f047ff6ab3b48fa67eb14ae1fa76825bdaec6f30f012d6e19e4514d53cb8f11b06dd5ce116ef779e0edf06099653c4291cb7d0fcd19d66d163072eb581a757b9fb383e2f8ab830dc3d3f6312dcf92b6b2cae567883ca010b6f47cc0858cad58f90373820e41185a0541df63f1bb64de44da330155e7f931cf46e9f8b1c2af92f02d71f23d24c3ac22c4808f6828e1a54017918e213df57447c32516cc668a3f0d5725a475de7fbce88591805bebd0cc58fb07629a0348781544d50babb45d739eafb75391f19d4771721ebca75d29286d6c1e99a5e6505ce4a89bc5389b6590e2558b9bb9f3a0d62cacd85159453b4e6494ab77ffd36c74e80721b599ec9c93b6427f32cd23c0b3b46cad92c024e9a8af6a886f675b6b378d8e7f3e87c077652ddf1b2519fc488c573cc324ec79a29a574767f3ffdb65d35fc3c304b1ca313e70de86466a73c19e2aa50c816dd2ac7686c81da7084fbabc349f2c22432b0ef39f5b8474e55a4aa6db80771404831b715602fcab2f760c071bc4a151d2d49575d0006869ef2d571c02341a99770b4102027644bb92bcc02bb9d18131ff62f65f778d1f484ed189c29d7758422cd34eefb4183d03ffa55516d9ec59be5357acfa37ceeb645787348fb1372392704c397d8d083f32164ad89f3954091c62cdee8199cba0566523e06c56cea129ac33e0ddef59a2aa7649732d28a4c157842d92dc4d0ac26d9477928939365f69391b6c818a722788ff492adf32783c87a64ab1cece9d638c6e97ce30b19f1b2ce4eb9c85660de51be4013b05bd5621e0ab815793420d5709d7d94498a5a7b15e6f70f0dbd3817cb8fff098b5b93decf407601ceb7af6cec8e2514a22a7493d4bc9ab50bca2664e938612c8649b3ccddaef9394dbdf2bd11e1a16efecf50c353ab70f1737414d003583b58a6d5c852f72a3ec86d0c596593d5725ca840fb002bef19219a92a6cf4a774eee230b71a47edceca3c47f327aa3b45080f6a68a9404b79c825e1d47ad0315c50c903c6ab2fd5552fef399b0efa7c56e9e70b63c9d3714554733e992b59c1845aa8382f7bd57d902662ee2514fe1888f5f65ba2ba351d4364f9ebd7546d6c60dcefa7ce1e31fb1d868efb3141c5c97a9c909c415124d3d4df631f3aed371962bee4b2d95d6443b84a8c8edae1a99f0f94e767a295a77b25e6dfbc37ed7546ed445e2c9fc75d5b3b0c14a71e52b449dcb0a45d1266c0bd28f118bc45f36626145d88c7b12677b50c41107e9bcd9b589fde9f1f916e61ba44922dec23472fc0e97ffa4fb0c810e704f83d9805c7937aa95543a51259068d4540530da8e34d618d01d1ff133be245ea0095b904aee1d9f1cf95cdc13e2e5c60ea4b925aefd2c9b1511f1b2f0a0b13101f3df5f23cd4bf5eb36ccb37e134a6d09631f1afefba9d391705a0dce50bd2e44bb3fabbb86398931e1d35af87cdf250df0627065218fdcdee1cd0480c788864e06f21bab2c8c4e3a56ca0eee1a0b24757041bf37073ec04533bd9e05a7d97a1b3510ceadb339c3d531b4b718a870077a9286bd87d9c1fd882b2001c63ed3ba8c8c32cc70a5b09be8fdd9762ff309666978daf2945dbb392f78fe6c55eee66f7dacfd759b97fc4bde28e4a66cc435c90a8c6868c70d97f69cad45c75b35f0d3bac257fe97a40f79a2e08afe762168067f5c411198270836b420b0cd30f4d1dfd522bde0467ac3fb2c73479485077abf13acd381f534267ecca2430fa8f091de005c61abe2c0decd0913e14275444c22237468f42f2725874e910c9405753e88357770798091d11b2f39b1550dfa40d650df4de57b05fe877855ed45ff7659ccc9d17094ea09d6e05cd4875798847e2509ad233ac9af42515bca9334c1eb705d236809f2afdecdac5fb6e9f93c3cbb2fc14e1ea28349cc7f6e58b4ac756f81726ea975d70d6962515deee64ca418130a0a2b49a713466bbe6ae379ba594ea4e1cf592bee0ff0f46502383c137fa32c3466ae9fac480c2e273a2955797cb0ffba71d279178261fe904413286e21d3e74e41b586d5d6eb13e4be85aa86744bd518c7cace263dddc4d341f9f2d63a3bc660f161e71d16a9dc08d3b9ee59fc00583fd11b958f5aabbd2368bd9c5af5c494da01df1e951ddecf76cdad0eedc384b59ba6fcf5c46d66d2badc88e231256e49928e6652feae56aaa2394f2be5133258e0e0ab6f97d398a51b80d4310027e43d677082f61f9216a4ebf14d8777f84ab67f19e80c460714a52d88277d11480b597ac1428307ee59b15e1db9c3b84af96affea00fada29bcd3fd6141b3ad2855958f63d019dbf89c4540322af266132d9e6210fc47f5d49f95a51434f168d565731952111962f64db13a98bfd741ba591d4869767c4c5f82d00359efe16e21", 0xf43}], 0x3) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 2.557000352s ago: executing program 4 (id=4340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.983105428s ago: executing program 4 (id=4341): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0xc0c4) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) 1.709411412s ago: executing program 5 (id=4342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000700)={0x0, 0xec22, 0x8, 0x0, 0x40000334}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x800, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.299569919s ago: executing program 2 (id=4343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x0, 0x5}, 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x16, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb701) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000300)=0x7ff) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x200003, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) shutdown(r4, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) 1.108314371s ago: executing program 3 (id=4344): r0 = socket(0x10, 0x3, 0x0) r1 = io_uring_setup(0x1baa, &(0x7f0000000340)={0x0, 0x53e6, 0x40, 0x1, 0x19f}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 995.220973ms ago: executing program 3 (id=4345): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000480)={0x0, 0xc4bc, 0x10100, 0x4, 0x2a1}, &(0x7f0000002000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$alg(r4, 0x0, 0x4c040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() getpriority(0x0, r5) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x62}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x47}}, 0xf0}}, 0x0) r6 = syz_open_pts(r2, 0x0) dup3(r6, r2, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000304fcfffeff3d00000000000000", @ANYRES32=0x0, @ANYBLOB="ebb6ae29315ed81d0f316146ba6160da20bc54845e4a3e23648f49706fbce693b9bd4a3efd8baf4ad90c57997045903726546d473b6347fcef3d0edb96cef100040000000000004afefec6eee3f2ad1da88c6f12664c2dd24a07f56b2a89d422c6ce941b17fa81ff9168aa56f94938c36e42d1d3272428b55591a08bf382a3cccb6000"], 0x28}, 0x1, 0x0, 0x0, 0x40000001}, 0x4804) 982.149218ms ago: executing program 4 (id=4346): syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0xc4) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0x800006dc, 0x0, 0xfffffff7, 0xfffffffe, 0x2, "10120003000000001bff0000d42509cb6b00"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0x800006dc, 0x0, 0xfffffff7, 0xfffffffe, 0x2, "10120003000000001bff0000d42509cb6b00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) poll(&(0x7f0000000000)=[{r0, 0x4005}], 0x1, 0x7fffffff) 742.396961ms ago: executing program 4 (id=4347): r0 = io_uring_setup(0x4066d, &(0x7f00000000c0)={0x0, 0xf10f, 0x100a, 0xffffffff, 0x15a}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 55.708996ms ago: executing program 3 (id=4348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xec, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xec}}, 0x0) 0s ago: executing program 3 (id=4349): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x3}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000000c0), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000140)="3cf5cbe709", 0x5}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000140)="3cf5cbe709", 0x5}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x6df9, &(0x7f0000000480)={0x0, 0x2007734, 0x80, 0x0, 0x34f}, &(0x7f0000000280), &(0x7f0000000080)) (async) syz_io_uring_setup(0x6df9, &(0x7f0000000480)={0x0, 0x2007734, 0x80, 0x0, 0x34f}, &(0x7f0000000280)=0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = timerfd_create(0x5, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r6, 0x3, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) (async) timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) (async) fcntl$setlease(r7, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9}) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x4040, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r7, 0x8, r11) truncate(&(0x7f0000000140)='./file0\x00', 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): 18151] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.100171][T18151] ? __fget_files+0x2a/0x420 [ 818.100184][T18151] ? __fget_files+0x3a0/0x420 [ 818.100202][T18151] __x64_sys_sendmsg+0x19b/0x260 [ 818.100217][T18151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 818.100235][T18151] ? __pfx_ksys_write+0x10/0x10 [ 818.100245][T18151] ? rcu_is_watching+0x15/0xb0 [ 818.100260][T18151] ? do_syscall_64+0xbe/0x3b0 [ 818.100273][T18151] do_syscall_64+0xfa/0x3b0 [ 818.100282][T18151] ? lockdep_hardirqs_on+0x9c/0x150 [ 818.100297][T18151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.100308][T18151] ? clear_bhb_loop+0x60/0xb0 [ 818.100322][T18151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.100333][T18151] RIP: 0033:0x7f304cd8e929 [ 818.100343][T18151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.100353][T18151] RSP: 002b:00007f304dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.100365][T18151] RAX: ffffffffffffffda RBX: 00007f304cfb5fa0 RCX: 00007f304cd8e929 [ 818.100373][T18151] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 818.100379][T18151] RBP: 00007f304dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 818.100386][T18151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.100392][T18151] R13: 0000000000000000 R14: 00007f304cfb5fa0 R15: 00007f304d0dfa28 [ 818.100407][T18151] [ 818.784064][ T5847] usb 5-1: USB disconnect, device number 80 [ 819.275147][T18164] FAULT_INJECTION: forcing a failure. [ 819.275147][T18164] name failslab, interval 1, probability 0, space 0, times 0 [ 819.288368][T18164] CPU: 1 UID: 0 PID: 18164 Comm: syz.6.3859 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 819.288391][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.288403][T18164] Call Trace: [ 819.288411][T18164] [ 819.288419][T18164] dump_stack_lvl+0x189/0x250 [ 819.288445][T18164] ? __pfx____ratelimit+0x10/0x10 [ 819.288472][T18164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.288493][T18164] ? __pfx__printk+0x10/0x10 [ 819.288523][T18164] ? ref_tracker_alloc+0x318/0x460 [ 819.288556][T18164] should_fail_ex+0x414/0x560 [ 819.288586][T18164] should_failslab+0xa8/0x100 [ 819.288610][T18164] kmem_cache_alloc_noprof+0x73/0x3c0 [ 819.288630][T18164] ? skb_clone+0x212/0x3a0 [ 819.288658][T18164] skb_clone+0x212/0x3a0 [ 819.288684][T18164] __netlink_deliver_tap+0x404/0x850 [ 819.288718][T18164] ? netlink_deliver_tap+0x2e/0x1b0 [ 819.288741][T18164] netlink_deliver_tap+0x19c/0x1b0 [ 819.288764][T18164] netlink_unicast+0x730/0x8e0 [ 819.288795][T18164] netlink_sendmsg+0x805/0xb30 [ 819.288826][T18164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.288850][T18164] ? aa_sock_msg_perm+0x94/0x160 [ 819.288878][T18164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 819.288902][T18164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.288924][T18164] __sock_sendmsg+0x219/0x270 [ 819.288950][T18164] ____sys_sendmsg+0x52d/0x830 [ 819.288978][T18164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.289010][T18164] ? import_iovec+0x74/0xa0 [ 819.289034][T18164] ___sys_sendmsg+0x21f/0x2a0 [ 819.289059][T18164] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.289119][T18164] ? __fget_files+0x2a/0x420 [ 819.289141][T18164] ? __fget_files+0x3a0/0x420 [ 819.289174][T18164] __sys_sendmmsg+0x227/0x430 [ 819.289202][T18164] ? __pfx___sys_sendmmsg+0x10/0x10 [ 819.289222][T18164] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 819.289268][T18164] ? ksys_write+0x22a/0x250 [ 819.289294][T18164] ? __pfx_ksys_write+0x10/0x10 [ 819.289311][T18164] ? rcu_is_watching+0x15/0xb0 [ 819.289339][T18164] __x64_sys_sendmmsg+0xa0/0xc0 [ 819.289363][T18164] do_syscall_64+0xfa/0x3b0 [ 819.289380][T18164] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.289405][T18164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.289422][T18164] ? clear_bhb_loop+0x60/0xb0 [ 819.289444][T18164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.289461][T18164] RIP: 0033:0x7f7b5978e929 [ 819.289478][T18164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.289493][T18164] RSP: 002b:00007f7b5a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.289513][T18164] RAX: ffffffffffffffda RBX: 00007f7b599b5fa0 RCX: 00007f7b5978e929 [ 819.289526][T18164] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 819.289539][T18164] RBP: 00007f7b5a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 819.289551][T18164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.289562][T18164] R13: 0000000000000000 R14: 00007f7b599b5fa0 R15: 00007f7b59adfa28 [ 819.289591][T18164] [ 819.289947][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 819.616215][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3859'. [ 819.626056][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 819.635059][T18164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3859'. [ 819.723437][T17263] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 819.882036][T17263] usb 6-1: Using ep0 maxpacket: 32 [ 819.904645][T17263] usb 6-1: config 0 has an invalid interface number: 201 but max is 0 [ 819.942525][T17263] usb 6-1: config 0 has no interface number 0 [ 819.959750][T17263] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=e9.0e [ 820.128717][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.214622][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 820.239128][T17263] usb 6-1: Product: syz [ 820.243828][T17263] usb 6-1: Manufacturer: syz [ 820.248740][T17263] usb 6-1: SerialNumber: syz [ 820.257015][T17263] usb 6-1: config 0 descriptor?? [ 820.322152][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 820.368974][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3863'. [ 820.381352][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 820.479518][T17263] pcwd_usb: The device isn't a Human Interface Device [ 820.509187][T17263] usb 6-1: USB disconnect, device number 27 [ 820.699868][T18187] tipc: Enabled bearer , priority 0 [ 820.863576][T18187] syzkaller0: entered promiscuous mode [ 820.870945][T18187] syzkaller0: entered allmulticast mode [ 820.991921][ T3093] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 821.248791][ T3093] usb 3-1: config 0 has no interfaces? [ 821.263245][ T3093] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 821.272582][ T3093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.288683][ T3093] usb 3-1: Product: syz [ 821.309835][T18186] tipc: Resetting bearer [ 821.317064][ T3093] usb 3-1: Manufacturer: syz [ 821.323061][ T3093] usb 3-1: SerialNumber: syz [ 821.330706][ T3093] usb 3-1: config 0 descriptor?? [ 821.560473][T18186] tipc: Disabling bearer [ 821.892128][ T3093] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 822.055869][ T3093] usb 6-1: Using ep0 maxpacket: 32 [ 822.083360][ T3093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.121182][ T3093] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.179063][ T3093] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 822.200164][ T3093] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.221802][ T3093] usb 6-1: config 0 descriptor?? [ 822.703835][ T3093] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 822.925202][ T5986] usb 6-1: USB disconnect, device number 28 [ 823.743898][ T3093] usb 3-1: USB disconnect, device number 74 [ 823.854911][T18222] binder: 18221:18222 ioctl c0306201 0 returned -14 [ 824.382273][ T5986] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 824.559457][ T5986] usb 3-1: config 0 has no interfaces? [ 824.570769][ T5986] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 824.580193][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.593168][ T5986] usb 3-1: Product: syz [ 824.597332][ T5986] usb 3-1: Manufacturer: syz [ 824.625554][ T5986] usb 3-1: SerialNumber: syz [ 824.633483][T18238] Cannot find del_set index 4 as target [ 824.653491][ T5986] usb 3-1: config 0 descriptor?? [ 824.818449][T18239] bridge0: port 3(dummy0) entered disabled state [ 824.824947][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.832383][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.905538][T18247] netlink: 'syz.4.3884': attribute type 10 has an invalid length. [ 824.913924][T18247] __nla_validate_parse: 1 callbacks suppressed [ 824.913938][T18247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3884'. [ 825.006536][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 825.082737][T18250] fuse: Unknown parameter 'À' [ 825.096033][T18239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.113386][T18239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.236120][T18239] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.245545][T18239] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.255201][T18239] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.264512][T18239] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.277959][T18239] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 825.294746][T18239] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.304039][T18239] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.313009][T18239] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.321891][T18239] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 825.337282][T18247] bridge0: port 3(dummy0) entered blocking state [ 825.344173][T18247] bridge0: port 3(dummy0) entered disabled state [ 825.350869][T18247] dummy0: entered allmulticast mode [ 825.360049][T18247] bridge0: port 3(dummy0) entered blocking state [ 825.366619][T18247] bridge0: port 3(dummy0) entered forwarding state [ 825.680171][T18260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.726591][T18261] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 825.966693][T18265] binder: BINDER_SET_CONTEXT_MGR already set [ 825.972882][T18265] binder: 18262:18265 ioctl 4018620d 200000000040 returned -16 [ 826.012467][ T5847] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 826.024948][ T5951] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 826.172234][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 826.182559][ T5847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.189764][ T5847] usb 7-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 826.189809][ T5847] usb 7-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 826.189835][ T5847] usb 7-1: config 4 interface 0 has no altsetting 0 [ 826.207174][ T5847] usb 7-1: string descriptor 0 read error: -22 [ 826.207295][ T5847] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 826.207309][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.274663][ T5847] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 826.277447][ T5847] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 826.277728][ T5847] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 826.277763][ T5847] usb 7-1: media controller created [ 826.306130][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.365583][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 826.423486][ T5951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 826.553006][ T5951] usb 6-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 826.553049][ T5951] usb 6-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 826.553073][ T5951] usb 6-1: config 4 interface 0 has no altsetting 0 [ 826.566128][ T5951] usb 6-1: string descriptor 0 read error: -22 [ 826.566268][ T5951] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 826.566292][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.572972][ T5951] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 826.585431][ T5951] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 826.585718][ T5951] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 826.585745][ T5951] usb 6-1: media controller created [ 826.617649][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.879692][ T3093] usb 3-1: USB disconnect, device number 75 [ 827.058174][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3891'. [ 827.058196][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3891'. [ 827.058233][T18272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3891'. [ 827.445810][T18276] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3893'. [ 827.445834][T18276] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 827.471044][ T5847] zl10353_read_register: readreg error (reg=127, ret==0) [ 827.581971][T18278] warning: `syz.2.3894' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 827.842346][ T5951] zl10353_read_register: readreg error (reg=127, ret==0) [ 828.129642][T18286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3895'. [ 828.256957][T18287] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 828.480786][T18295] binder: BINDER_SET_CONTEXT_MGR already set [ 828.494680][T18295] binder: 18294:18295 ioctl 4018620d 200000000040 returned -16 [ 828.700618][ T5951] usb 6-1: USB disconnect, device number 29 [ 828.860000][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3902'. [ 829.363624][T18308] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 829.815357][ T5847] usb 7-1: USB disconnect, device number 22 [ 829.954796][ T30] audit: type=1326 audit(1752496294.099:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.063026][ T30] audit: type=1326 audit(1752496294.099:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.085359][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.202118][ T3093] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 830.260449][ T30] audit: type=1326 audit(1752496294.099:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.282799][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.405612][ T30] audit: type=1326 audit(1752496294.099:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405643][ T30] audit: type=1326 audit(1752496294.099:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405667][ T30] audit: type=1326 audit(1752496294.099:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405692][ T30] audit: type=1326 audit(1752496294.099:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405715][ T30] audit: type=1326 audit(1752496294.099:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405738][ T30] audit: type=1326 audit(1752496294.099:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.405763][ T30] audit: type=1326 audit(1752496294.099:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.4.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b31b8e929 code=0x7ffc0000 [ 830.452639][ T3093] usb 5-1: Using ep0 maxpacket: 16 [ 831.633232][ T5847] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 831.720693][T18342] FAULT_INJECTION: forcing a failure. [ 831.720693][T18342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.725025][T18343] FAULT_INJECTION: forcing a failure. [ 831.725025][T18343] name failslab, interval 1, probability 0, space 0, times 0 [ 831.746964][T18343] CPU: 0 UID: 0 PID: 18343 Comm: syz.5.3913 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 831.746987][T18343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.746999][T18343] Call Trace: [ 831.747007][T18343] [ 831.747016][T18343] dump_stack_lvl+0x189/0x250 [ 831.747041][T18343] ? __pfx____ratelimit+0x10/0x10 [ 831.747067][T18343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.747087][T18343] ? __pfx__printk+0x10/0x10 [ 831.747115][T18343] ? __pfx___might_resched+0x10/0x10 [ 831.747140][T18343] should_fail_ex+0x414/0x560 [ 831.747169][T18343] should_failslab+0xa8/0x100 [ 831.747193][T18343] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 831.747216][T18343] ? __alloc_skb+0x112/0x2d0 [ 831.747241][T18343] __alloc_skb+0x112/0x2d0 [ 831.747265][T18343] netlink_sendmsg+0x5c6/0xb30 [ 831.747285][T18343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.747299][T18343] ? aa_sock_msg_perm+0x94/0x160 [ 831.747315][T18343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.747335][T18343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.747358][T18343] __sock_sendmsg+0x219/0x270 [ 831.747380][T18343] ____sys_sendmsg+0x505/0x830 [ 831.747408][T18343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.747430][T18343] ? import_iovec+0x74/0xa0 [ 831.747444][T18343] ___sys_sendmsg+0x21f/0x2a0 [ 831.747458][T18343] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.747502][T18343] ? __fget_files+0x2a/0x420 [ 831.747524][T18343] ? __fget_files+0x3a0/0x420 [ 831.747557][T18343] __x64_sys_sendmsg+0x19b/0x260 [ 831.747575][T18343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.747593][T18343] ? __pfx_ksys_write+0x10/0x10 [ 831.747603][T18343] ? rcu_is_watching+0x15/0xb0 [ 831.747618][T18343] ? do_syscall_64+0xbe/0x3b0 [ 831.747636][T18343] do_syscall_64+0xfa/0x3b0 [ 831.747652][T18343] ? lockdep_hardirqs_on+0x9c/0x150 [ 831.747678][T18343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.747694][T18343] ? clear_bhb_loop+0x60/0xb0 [ 831.747719][T18343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.747729][T18343] RIP: 0033:0x7f304cd8e929 [ 831.747740][T18343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.747749][T18343] RSP: 002b:00007f304dbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.747760][T18343] RAX: ffffffffffffffda RBX: 00007f304cfb5fa0 RCX: 00007f304cd8e929 [ 831.747768][T18343] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 831.747777][T18343] RBP: 00007f304dbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 831.747788][T18343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.747799][T18343] R13: 0000000000000000 R14: 00007f304cfb5fa0 R15: 00007f304d0dfa28 [ 831.747827][T18343] [ 832.016568][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.178683][T18342] CPU: 1 UID: 0 PID: 18342 Comm: syz.3.3914 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 832.178711][T18342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.178722][T18342] Call Trace: [ 832.178729][T18342] [ 832.178736][T18342] dump_stack_lvl+0x189/0x250 [ 832.178766][T18342] ? __pfx____ratelimit+0x10/0x10 [ 832.178797][T18342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.178817][T18342] ? __pfx__printk+0x10/0x10 [ 832.178840][T18342] ? __might_fault+0xb0/0x130 [ 832.178870][T18342] should_fail_ex+0x414/0x560 [ 832.178898][T18342] _copy_from_iter+0x1db/0x16f0 [ 832.178930][T18342] ? rcu_is_watching+0x15/0xb0 [ 832.178952][T18342] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 832.178975][T18342] ? __pfx__copy_from_iter+0x10/0x10 [ 832.178995][T18342] ? __build_skb_around+0x257/0x3e0 [ 832.179020][T18342] ? netlink_sendmsg+0x642/0xb30 [ 832.179039][T18342] ? skb_put+0x11b/0x210 [ 832.179063][T18342] netlink_sendmsg+0x6b2/0xb30 [ 832.179092][T18342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.179116][T18342] ? aa_sock_msg_perm+0x94/0x160 [ 832.179142][T18342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 832.179167][T18342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.179189][T18342] __sock_sendmsg+0x219/0x270 [ 832.179210][T18342] ____sys_sendmsg+0x52d/0x830 [ 832.179238][T18342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.179269][T18342] ? import_iovec+0x74/0xa0 [ 832.179297][T18342] ___sys_sendmsg+0x21f/0x2a0 [ 832.179321][T18342] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.179341][T18342] ? do_raw_spin_lock+0x121/0x290 [ 832.179407][T18342] ? __might_fault+0xb0/0x130 [ 832.179431][T18342] __sys_sendmmsg+0x227/0x430 [ 832.179459][T18342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 832.179478][T18342] ? clockevents_program_event+0x24d/0x360 [ 832.179513][T18342] ? handle_softirqs+0x717/0x870 [ 832.179562][T18342] __x64_sys_sendmmsg+0xa0/0xc0 [ 832.179586][T18342] do_syscall_64+0xfa/0x3b0 [ 832.179606][T18342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.179622][T18342] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.179640][T18342] ? clear_bhb_loop+0x60/0xb0 [ 832.179661][T18342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.179677][T18342] RIP: 0033:0x7f7c7918e929 [ 832.179694][T18342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.179710][T18342] RSP: 002b:00007f7c79fe1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 832.179730][T18342] RAX: ffffffffffffffda RBX: 00007f7c793b5fa0 RCX: 00007f7c7918e929 [ 832.179744][T18342] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 832.179757][T18342] RBP: 00007f7c79fe1090 R08: 0000000000000000 R09: 0000000000000000 [ 832.179769][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.179781][T18342] R13: 0000000000000000 R14: 00007f7c793b5fa0 R15: 00007f7c794dfa28 [ 832.179810][T18342] [ 832.197363][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 832.631302][ T5847] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 832.674399][ T5847] usb 7-1: config 0 has no interface number 0 [ 832.704536][ T5847] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 832.722350][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 832.736694][ T5847] usb 7-1: Product: syz [ 832.746642][ T5847] usb 7-1: Manufacturer: syz [ 832.762203][ T5847] usb 7-1: config 0 descriptor?? [ 832.824498][T18352] FAULT_INJECTION: forcing a failure. [ 832.824498][T18352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.845342][T18352] CPU: 1 UID: 0 PID: 18352 Comm: syz.3.3918 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 832.845367][T18352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 832.845379][T18352] Call Trace: [ 832.845388][T18352] [ 832.845396][T18352] dump_stack_lvl+0x189/0x250 [ 832.845423][T18352] ? __pfx____ratelimit+0x10/0x10 [ 832.845450][T18352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.845474][T18352] ? __pfx__printk+0x10/0x10 [ 832.845510][T18352] should_fail_ex+0x414/0x560 [ 832.845541][T18352] _copy_to_user+0x31/0xb0 [ 832.845565][T18352] simple_read_from_buffer+0xe1/0x170 [ 832.845592][T18352] proc_fail_nth_read+0x1df/0x250 [ 832.845620][T18352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.845647][T18352] ? rw_verify_area+0x258/0x650 [ 832.845666][T18352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.845692][T18352] vfs_read+0x1fd/0x980 [ 832.845718][T18352] ? __pfx___mutex_lock+0x10/0x10 [ 832.845736][T18352] ? __pfx_vfs_read+0x10/0x10 [ 832.845758][T18352] ? __fget_files+0x2a/0x420 [ 832.845786][T18352] ? __fget_files+0x3a0/0x420 [ 832.845807][T18352] ? __fget_files+0x2a/0x420 [ 832.845839][T18352] ksys_read+0x145/0x250 [ 832.845862][T18352] ? __pfx_ksys_read+0x10/0x10 [ 832.845879][T18352] ? rcu_is_watching+0x15/0xb0 [ 832.845905][T18352] ? do_syscall_64+0xbe/0x3b0 [ 832.845932][T18352] do_syscall_64+0xfa/0x3b0 [ 832.845949][T18352] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.845974][T18352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.845992][T18352] ? clear_bhb_loop+0x60/0xb0 [ 832.846014][T18352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.846032][T18352] RIP: 0033:0x7f7c7918d33c [ 832.846049][T18352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 832.846066][T18352] RSP: 002b:00007f7c79fe1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.846086][T18352] RAX: ffffffffffffffda RBX: 00007f7c793b5fa0 RCX: 00007f7c7918d33c [ 832.846100][T18352] RDX: 000000000000000f RSI: 00007f7c79fe10a0 RDI: 0000000000000005 [ 832.846112][T18352] RBP: 00007f7c79fe1090 R08: 0000000000000000 R09: 0000000000000000 [ 832.846125][T18352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.846136][T18352] R13: 0000000000000000 R14: 00007f7c793b5fa0 R15: 00007f7c794dfa28 [ 832.846167][T18352] [ 833.092537][T18338] netlink: 'syz.6.3912': attribute type 1 has an invalid length. [ 833.179296][T18358] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 833.229531][ T1152] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 833.243478][T18338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.462491][T17181] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 833.780622][ T3093] usb 5-1: unable to get BOS descriptor or descriptor too short [ 833.810650][ T3093] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 833.824580][ T3093] usb 5-1: can't read configurations, error -71 [ 834.658808][T16600] usb 7-1: USB disconnect, device number 23 [ 835.678161][T18404] netlink: zone id is out of range [ 836.482042][T15125] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 836.516638][T18414] tc_dump_action: action bad kind [ 836.697287][T15125] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 836.707388][T15125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.717066][T15125] usb 3-1: config 0 descriptor?? [ 836.728868][T15125] cp210x 3-1:0.0: cp210x converter detected [ 837.342342][T18428] Cannot find add_set index 1 as target [ 837.518209][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3934'. [ 837.574749][T18432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 837.607952][T18434] loop2: detected capacity change from 0 to 7 [ 837.697406][T18434] loop2: [ 837.710605][T18434] loop2: partition table partially beyond EOD, truncated [ 837.732663][T18432] dummy0: left allmulticast mode [ 837.759397][T18432] bridge0: port 3(dummy0) entered disabled state [ 837.836641][T18432] bridge_slave_1: left allmulticast mode [ 837.855038][T18432] bridge_slave_1: left promiscuous mode [ 837.882598][T18432] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.956317][T18432] bridge_slave_0: left allmulticast mode [ 837.962119][T18432] bridge_slave_0: left promiscuous mode [ 838.018931][T18432] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.323695][T15125] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 838.343498][T15125] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 838.364106][T15125] usb 3-1: cp210x converter now attached to ttyUSB0 [ 838.393492][T15125] usb 3-1: USB disconnect, device number 76 [ 838.426124][T15125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 838.454871][T15125] cp210x 3-1:0.0: device disconnected [ 838.532140][ T5986] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 838.694974][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.712050][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.777229][ T3093] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 838.791922][ T5986] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 838.813163][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.826182][ T5986] usb 6-1: config 0 descriptor?? [ 838.941933][ T3093] usb 5-1: Using ep0 maxpacket: 8 [ 839.008357][ T3093] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 839.025757][ T3093] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 839.053821][T18448] openvswitch: netlink: Flow key attr not present in new flow. [ 839.106218][ T3093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.166861][ T3093] usb 5-1: Product: syz [ 839.171056][ T3093] usb 5-1: Manufacturer: syz [ 839.232627][ T3093] usb 5-1: SerialNumber: syz [ 839.265059][ T3093] usb 5-1: config 0 descriptor?? [ 839.308910][ T3093] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 839.369707][ T3093] usb 5-1: setting power ON [ 839.380861][ T3093] dvb-usb: bulk message failed: -22 (2/0) [ 839.402920][ T3093] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 839.423337][ T3093] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 839.450782][ T3093] usb 5-1: media controller created [ 839.572984][ T3093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.669718][ T3093] usb 5-1: selecting invalid altsetting 6 [ 839.694550][ T3093] usb 5-1: digital interface selection failed (-22) [ 839.733922][ T3093] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 839.782032][ T3093] usb 5-1: setting power OFF [ 839.807506][ T3093] dvb-usb: bulk message failed: -22 (2/0) [ 839.840080][ T3093] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 839.904230][ T3093] (NULL device *): no alternate interface [ 840.158198][ T3093] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 840.195979][T18466] fuse: Unknown parameter 'no' [ 840.222316][ T3093] usb 5-1: USB disconnect, device number 83 [ 840.500269][T18474] delete_channel: no stack [ 840.529514][ T5986] usbhid 6-1:0.0: can't add hid device: -71 [ 840.555740][ T5986] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 840.597614][ T5986] usb 6-1: USB disconnect, device number 30 [ 841.425207][T18500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 841.582004][ T5951] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 841.597078][T15125] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 841.731982][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 841.748057][ T5951] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 841.759699][ T5951] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 841.772416][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.780972][ T5951] usb 5-1: Product: syz [ 841.782311][T15125] usb 7-1: Using ep0 maxpacket: 8 [ 841.791733][ T5951] usb 5-1: Manufacturer: syz [ 841.794138][T15125] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 841.797355][ T5951] usb 5-1: SerialNumber: syz [ 841.830884][ T5951] usb 5-1: config 0 descriptor?? [ 841.848311][ T5951] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 841.871055][ T5951] usb 5-1: setting power ON [ 841.880964][T15125] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.890927][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 841.898378][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.949210][T15125] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.966264][ T5951] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 841.989478][T15125] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.993867][ T5951] usb 5-1: media controller created [ 842.068872][T15125] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.281068][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.289591][T15125] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.317888][T18503] syz.3.3964: attempt to access beyond end of device [ 842.317888][T18503] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 842.339702][T15125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.363511][T18503] IPVS: length: 1986356271 != 201483275040 [ 842.394023][ T5951] usb 5-1: selecting invalid altsetting 6 [ 842.417753][ T5951] usb 5-1: digital interface selection failed (-22) [ 842.439178][ T5951] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 842.458627][ T5951] usb 5-1: setting power OFF [ 842.481925][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 842.524552][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 842.534305][ T5951] (NULL device *): no alternate interface [ 842.676853][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 842.690378][T15125] usb 7-1: usb_control_msg returned -32 [ 842.699322][T15125] usbtmc 7-1:16.0: can't read capabilities [ 842.803004][ T5951] usb 5-1: USB disconnect, device number 84 [ 843.059406][T18515] ucma_write: process 468 (syz.2.3966) changed security contexts after opening file descriptor, this is not allowed. [ 843.074927][T18515] FAULT_INJECTION: forcing a failure. [ 843.074927][T18515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.090898][T18515] CPU: 0 UID: 0 PID: 18515 Comm: syz.2.3966 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 843.090921][T18515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 843.090933][T18515] Call Trace: [ 843.090941][T18515] [ 843.090950][T18515] dump_stack_lvl+0x189/0x250 [ 843.090976][T18515] ? __pfx____ratelimit+0x10/0x10 [ 843.091003][T18515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 843.091024][T18515] ? __pfx__printk+0x10/0x10 [ 843.091060][T18515] should_fail_ex+0x414/0x560 [ 843.091091][T18515] _copy_to_user+0x31/0xb0 [ 843.091115][T18515] simple_read_from_buffer+0xe1/0x170 [ 843.091142][T18515] proc_fail_nth_read+0x1df/0x250 [ 843.091170][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.091197][T18515] ? rw_verify_area+0x258/0x650 [ 843.091217][T18515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.091242][T18515] vfs_read+0x1fd/0x980 [ 843.091268][T18515] ? __pfx___mutex_lock+0x10/0x10 [ 843.091287][T18515] ? __pfx_vfs_read+0x10/0x10 [ 843.091308][T18515] ? __fget_files+0x2a/0x420 [ 843.091335][T18515] ? __fget_files+0x3a0/0x420 [ 843.091356][T18515] ? __fget_files+0x2a/0x420 [ 843.091387][T18515] ksys_read+0x145/0x250 [ 843.091409][T18515] ? __pfx_ksys_read+0x10/0x10 [ 843.091426][T18515] ? rcu_is_watching+0x15/0xb0 [ 843.091452][T18515] ? do_syscall_64+0xbe/0x3b0 [ 843.091474][T18515] do_syscall_64+0xfa/0x3b0 [ 843.091490][T18515] ? lockdep_hardirqs_on+0x9c/0x150 [ 843.091515][T18515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.091533][T18515] ? clear_bhb_loop+0x60/0xb0 [ 843.091555][T18515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.091572][T18515] RIP: 0033:0x7fe0fa58d33c [ 843.091589][T18515] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 843.091604][T18515] RSP: 002b:00007fe0fb4db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.091623][T18515] RAX: ffffffffffffffda RBX: 00007fe0fa7b5fa0 RCX: 00007fe0fa58d33c [ 843.091637][T18515] RDX: 000000000000000f RSI: 00007fe0fb4db0a0 RDI: 0000000000000004 [ 843.091649][T18515] RBP: 00007fe0fb4db090 R08: 0000000000000000 R09: 0000000000000000 [ 843.091661][T18515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.091673][T18515] R13: 0000000000000000 R14: 00007fe0fa7b5fa0 R15: 00007fe0fa8dfa28 [ 843.091703][T18515] [ 843.598366][ T3093] usb 7-1: USB disconnect, device number 24 [ 843.629610][T18524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.639305][T18516] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 843.699133][T18528] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3968'. [ 843.710648][T18528] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 844.191966][ T5986] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 844.345731][ T5986] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 844.362465][ T5986] usb 3-1: can't read configurations, error -61 [ 844.502922][ T5986] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 844.673924][ T5986] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 844.681672][ T5986] usb 3-1: can't read configurations, error -61 [ 844.688661][ T5986] usb usb3-port1: attempt power cycle [ 845.092182][ T5986] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 845.136317][ T5986] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 845.144636][ T5986] usb 3-1: can't read configurations, error -61 [ 845.302017][ T5986] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 845.393324][ T5986] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 845.401093][ T5986] usb 3-1: can't read configurations, error -61 [ 845.408268][ T5986] usb usb3-port1: unable to enumerate USB device [ 846.825257][T18561] FAULT_INJECTION: forcing a failure. [ 846.825257][T18561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.842087][T18561] CPU: 1 UID: 0 PID: 18561 Comm: syz.4.3979 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 846.842112][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 846.842123][T18561] Call Trace: [ 846.842132][T18561] [ 846.842151][T18561] dump_stack_lvl+0x189/0x250 [ 846.842178][T18561] ? __pfx____ratelimit+0x10/0x10 [ 846.842204][T18561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.842225][T18561] ? __pfx__printk+0x10/0x10 [ 846.842248][T18561] ? __might_fault+0xb0/0x130 [ 846.842281][T18561] should_fail_ex+0x414/0x560 [ 846.842310][T18561] _copy_from_user+0x2d/0xb0 [ 846.842332][T18561] video_usercopy+0x354/0x14f0 [ 846.842366][T18561] ? __pfx___video_do_ioctl+0x10/0x10 [ 846.842388][T18561] ? __pfx_video_usercopy+0x10/0x10 [ 846.842420][T18561] ? __fget_files+0x2a/0x420 [ 846.842446][T18561] ? __fget_files+0x2a/0x420 [ 846.842466][T18561] ? __fget_files+0x3a0/0x420 [ 846.842491][T18561] v4l2_ioctl+0x18a/0x1e0 [ 846.842513][T18561] ? __pfx_v4l2_ioctl+0x10/0x10 [ 846.842537][T18561] __se_sys_ioctl+0xfc/0x170 [ 846.842559][T18561] do_syscall_64+0xfa/0x3b0 [ 846.842576][T18561] ? lockdep_hardirqs_on+0x9c/0x150 [ 846.842601][T18561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.842619][T18561] ? clear_bhb_loop+0x60/0xb0 [ 846.842641][T18561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.842658][T18561] RIP: 0033:0x7f5b31b8e929 [ 846.842675][T18561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.842692][T18561] RSP: 002b:00007f5b3294a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.842712][T18561] RAX: ffffffffffffffda RBX: 00007f5b31db6080 RCX: 00007f5b31b8e929 [ 846.842726][T18561] RDX: 0000200000000100 RSI: 00000000c0d05605 RDI: 0000000000000008 [ 846.842738][T18561] RBP: 00007f5b3294a090 R08: 0000000000000000 R09: 0000000000000000 [ 846.842750][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.842761][T18561] R13: 0000000000000000 R14: 00007f5b31db6080 R15: 00007f5b31edfa28 [ 846.842790][T18561] [ 847.055771][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.937679][T18572] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3983'. [ 847.981340][T18572] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 849.802264][T18599] tipc: Failed to remove unknown binding: 66,1,1/0:1529082179/1529082181 [ 849.802344][T18599] tipc: Failed to remove unknown binding: 66,1,1/0:1529082179/1529082181 [ 850.749225][T18608] binder: 18607:18608 ioctl c0306201 0 returned -14 [ 851.012217][T17263] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 851.162759][T17263] usb 6-1: Using ep0 maxpacket: 8 [ 851.189008][T17263] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 851.231081][T17263] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 851.266210][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.291661][T17263] usb 6-1: Product: syz [ 851.297018][T17263] usb 6-1: Manufacturer: syz [ 851.307867][T17263] usb 6-1: SerialNumber: syz [ 851.325428][T17263] usb 6-1: config 0 descriptor?? [ 851.348489][T17263] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 851.359266][T17263] usb 6-1: setting power ON [ 851.376444][T17263] dvb-usb: bulk message failed: -22 (2/0) [ 851.395146][T17263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 851.435978][T17263] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 851.472035][T17263] usb 6-1: media controller created [ 851.514261][T17263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.558006][T17263] usb 6-1: selecting invalid altsetting 6 [ 851.572922][T17263] usb 6-1: digital interface selection failed (-22) [ 851.579797][T17263] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 851.591474][T17263] usb 6-1: setting power OFF [ 851.603700][T17263] dvb-usb: bulk message failed: -22 (2/0) [ 851.624179][T17263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 851.651910][T17263] (NULL device *): no alternate interface [ 851.725113][T17263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 851.838032][T17263] usb 6-1: USB disconnect, device number 31 [ 852.121737][T18630] binder: 18627:18630 ioctl c0306201 0 returned -14 [ 852.742021][ T5986] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 852.893544][ T5986] usb 4-1: config 0 has no interfaces? [ 852.901262][ T5986] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 852.919226][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.958716][ T5986] usb 4-1: Product: syz [ 852.987837][ T5986] usb 4-1: Manufacturer: syz [ 853.048405][ T5986] usb 4-1: SerialNumber: syz [ 853.090656][ T5986] usb 4-1: config 0 descriptor?? [ 853.568862][T18639] veth0_vlan: left promiscuous mode [ 853.583977][T18639] veth0_vlan: entered promiscuous mode [ 853.842077][ T5847] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 854.104471][T18664] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 854.113023][ T5847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.151436][ T5847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.184920][ T5847] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 854.224669][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.239160][ T5847] usb 6-1: SerialNumber: syz [ 854.249735][T17263] usb 4-1: USB disconnect, device number 83 [ 854.513624][ T5847] usb 6-1: 0:2 : does not exist [ 854.570265][ T5847] usb 6-1: USB disconnect, device number 32 [ 854.683410][T15346] udevd[15346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.882085][T17263] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 855.063381][T17263] usb 4-1: Using ep0 maxpacket: 8 [ 855.115309][T17263] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 855.144611][T17263] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 855.184466][T17263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.202341][T17263] usb 4-1: Product: syz [ 855.247265][T17263] usb 4-1: Manufacturer: syz [ 855.261889][T17263] usb 4-1: SerialNumber: syz [ 855.288467][T17263] usb 4-1: config 0 descriptor?? [ 855.321528][T17263] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 855.370960][T17263] usb 4-1: setting power ON [ 855.378782][T17263] dvb-usb: bulk message failed: -22 (2/0) [ 855.389202][T17263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 855.399822][T17263] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 855.415945][T17263] usb 4-1: media controller created [ 855.478151][T17263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 855.538199][T17263] usb 4-1: selecting invalid altsetting 6 [ 855.554830][T17263] usb 4-1: digital interface selection failed (-22) [ 855.567562][T17263] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 855.583602][T17263] usb 4-1: setting power OFF [ 855.595279][T17263] dvb-usb: bulk message failed: -22 (2/0) [ 855.637096][T17263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 855.687371][T17263] (NULL device *): no alternate interface [ 855.769593][T17263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 855.786086][T18684] FAULT_INJECTION: forcing a failure. [ 855.786086][T18684] name failslab, interval 1, probability 0, space 0, times 0 [ 855.792160][T17263] usb 4-1: USB disconnect, device number 84 [ 855.809651][T18684] CPU: 0 UID: 0 PID: 18684 Comm: syz.2.4021 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 855.809675][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.809686][T18684] Call Trace: [ 855.809694][T18684] [ 855.809702][T18684] dump_stack_lvl+0x189/0x250 [ 855.809729][T18684] ? __pfx____ratelimit+0x10/0x10 [ 855.809755][T18684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.809775][T18684] ? __pfx__printk+0x10/0x10 [ 855.809803][T18684] ? __pfx___might_resched+0x10/0x10 [ 855.809824][T18684] ? fs_reclaim_acquire+0x7d/0x100 [ 855.809852][T18684] should_fail_ex+0x414/0x560 [ 855.809880][T18684] should_failslab+0xa8/0x100 [ 855.809904][T18684] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 855.809925][T18684] ? __alloc_skb+0x112/0x2d0 [ 855.809949][T18684] __alloc_skb+0x112/0x2d0 [ 855.809973][T18684] netlink_ack+0x146/0xa50 [ 855.809992][T18684] ? kasan_quarantine_put+0xdd/0x220 [ 855.810019][T18684] ? kfree+0x18e/0x440 [ 855.810040][T18684] nfnetlink_rcv+0x2290/0x2520 [ 855.810093][T18684] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 855.810130][T18684] ? ref_tracker_free+0x63a/0x7d0 [ 855.810184][T18684] ? __netlink_deliver_tap+0x807/0x850 [ 855.810214][T18684] ? netlink_deliver_tap+0x2e/0x1b0 [ 855.810235][T18684] ? netlink_deliver_tap+0x2e/0x1b0 [ 855.810269][T18684] netlink_unicast+0x759/0x8e0 [ 855.810298][T18684] netlink_sendmsg+0x805/0xb30 [ 855.810328][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.810353][T18684] ? aa_sock_msg_perm+0x94/0x160 [ 855.810381][T18684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 855.810406][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.810428][T18684] __sock_sendmsg+0x219/0x270 [ 855.810449][T18684] ____sys_sendmsg+0x505/0x830 [ 855.810477][T18684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 855.810512][T18684] ? import_iovec+0x74/0xa0 [ 855.810537][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 855.810563][T18684] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.810619][T18684] ? __fget_files+0x2a/0x420 [ 855.810641][T18684] ? __fget_files+0x3a0/0x420 [ 855.810673][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 855.810699][T18684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.810730][T18684] ? __pfx_ksys_write+0x10/0x10 [ 855.810748][T18684] ? rcu_is_watching+0x15/0xb0 [ 855.810774][T18684] ? do_syscall_64+0xbe/0x3b0 [ 855.810796][T18684] do_syscall_64+0xfa/0x3b0 [ 855.810811][T18684] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.810836][T18684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.810854][T18684] ? clear_bhb_loop+0x60/0xb0 [ 855.810875][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.810892][T18684] RIP: 0033:0x7fe0fa58e929 [ 855.810910][T18684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.810926][T18684] RSP: 002b:00007fe0fb4db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.810945][T18684] RAX: ffffffffffffffda RBX: 00007fe0fa7b5fa0 RCX: 00007fe0fa58e929 [ 855.810959][T18684] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 855.810971][T18684] RBP: 00007fe0fb4db090 R08: 0000000000000000 R09: 0000000000000000 [ 855.810983][T18684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 855.810995][T18684] R13: 0000000000000000 R14: 00007fe0fa7b5fa0 R15: 00007fe0fa8dfa28 [ 855.811023][T18684] [ 855.887323][ T3093] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 855.887911][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.144682][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.150659][ C0] hrtimer: interrupt took 338821511 ns [ 856.250728][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.277079][ T3093] usb 7-1: Using ep0 maxpacket: 8 [ 856.334334][ T3093] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 856.372345][ T3093] usb 7-1: config 0 has no interface number 0 [ 856.378489][ T3093] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.510637][T18696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4024'. [ 856.523525][T18691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.573084][ T3093] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 856.576585][T18693] bridge0: entered promiscuous mode [ 856.620012][ T3093] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 856.640146][ T3093] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.645811][T18693] bridge0: entered allmulticast mode [ 856.677308][ T3093] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 856.686981][ T3093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.731149][ T3093] usb 7-1: Product: syz [ 856.747845][ T3093] usb 7-1: Manufacturer: syz [ 856.754046][ T3093] usb 7-1: SerialNumber: syz [ 856.769269][ T3093] usb 7-1: config 0 descriptor?? [ 856.842184][T17263] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 856.888699][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 857.012283][T17263] usb 6-1: Using ep0 maxpacket: 32 [ 857.030496][T17263] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 857.050154][T17263] usb 6-1: config 0 has no interface number 0 [ 857.058262][T17263] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.194978][T17263] usb 6-1: config 0 interface 85 has no altsetting 0 [ 857.206960][ T3093] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 857.312809][T17263] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 857.326400][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.336773][T17263] usb 6-1: Product: syz [ 857.341193][T17263] usb 6-1: Manufacturer: syz [ 857.346276][T17263] usb 6-1: SerialNumber: syz [ 857.377465][T17263] usb 6-1: config 0 descriptor?? [ 857.439902][T18679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.457563][T18679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.472883][T18679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.482809][T18679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.508616][ T3093] usb 7-1: USB disconnect, device number 25 [ 857.604802][T17263] appletouch 6-1:0.85: Failed to read mode from device. [ 857.619934][T17263] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 857.651967][ T5847] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 857.803398][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.820836][ T5847] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 857.831085][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.856196][ T5847] usb 3-1: config 0 descriptor?? [ 857.872930][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 857.881305][ T5847] pwc: Askey VC010 type 2 USB webcam detected. [ 858.041979][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 858.061224][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 858.104839][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.148767][ T9] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.197899][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 858.205122][ T9] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 858.215459][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.232438][ T9] usb 5-1: config 0 descriptor?? [ 858.276794][ T5847] pwc: recv_control_msg error -32 req 02 val 2b00 [ 858.305046][ T5847] pwc: recv_control_msg error -32 req 02 val 2700 [ 858.313136][ T5847] pwc: recv_control_msg error -32 req 02 val 2c00 [ 858.320467][ T5847] pwc: recv_control_msg error -32 req 04 val 1000 [ 858.328217][ T5847] pwc: recv_control_msg error -32 req 04 val 1300 [ 858.335703][ T5847] pwc: recv_control_msg error -32 req 04 val 1400 [ 858.485287][T17263] usb 6-1: USB disconnect, device number 33 [ 858.544492][ T5847] pwc: recv_control_msg error -71 req 02 val 2100 [ 858.551381][ T5847] pwc: recv_control_msg error -71 req 04 val 1500 [ 858.593708][ T5986] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 858.603454][ T5847] pwc: recv_control_msg error -71 req 02 val 2500 [ 858.611163][ T5847] pwc: recv_control_msg error -71 req 02 val 2400 [ 858.618559][ T5847] pwc: recv_control_msg error -71 req 02 val 2600 [ 858.625999][ T5847] pwc: recv_control_msg error -71 req 02 val 2900 [ 858.633420][ T5847] pwc: recv_control_msg error -71 req 02 val 2800 [ 858.644938][ T5847] pwc: recv_control_msg error -71 req 04 val 1100 [ 858.665931][ T9] pantherlord 0003:0810:0001.0014: item fetching failed at offset 0/2 [ 858.693589][ T5847] pwc: recv_control_msg error -71 req 04 val 1200 [ 858.702474][ T9] pantherlord 0003:0810:0001.0014: parse failed [ 858.715361][ T9] pantherlord 0003:0810:0001.0014: probe with driver pantherlord failed with error -22 [ 858.727617][ T5847] pwc: Registered as video103. [ 858.736752][ T5847] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 858.778569][ T5847] usb 3-1: USB disconnect, device number 81 [ 858.827274][ T5986] usb 7-1: config 0 has no interfaces? [ 858.839964][ T5986] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 858.931151][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.939562][ T5986] usb 7-1: Product: syz [ 858.947477][ T9] usb 5-1: USB disconnect, device number 85 [ 858.953566][ T5986] usb 7-1: Manufacturer: syz [ 858.965058][ T5986] usb 7-1: SerialNumber: syz [ 858.985190][ T5986] usb 7-1: config 0 descriptor?? [ 859.866356][T18731] No such timeout policy "syz1" [ 859.889180][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4035'. [ 859.924099][ T5951] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 860.092053][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 860.099229][ T5951] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 860.114475][ T5951] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 860.128616][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.137013][ T5951] usb 6-1: Product: syz [ 860.141488][ T5951] usb 6-1: Manufacturer: syz [ 860.150907][ T5951] usb 6-1: SerialNumber: syz [ 860.171155][ T5951] usb 6-1: config 0 descriptor?? [ 860.189375][ T5951] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 860.197799][ T5951] usb 6-1: setting power ON [ 860.845170][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 860.977974][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.993265][ T5951] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 861.002357][ T5951] usb 6-1: media controller created [ 861.049933][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.105011][ T5951] usb 6-1: selecting invalid altsetting 6 [ 861.110783][ T5951] usb 6-1: digital interface selection failed (-22) [ 861.172489][ T5951] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 861.210458][ T5951] usb 6-1: setting power OFF [ 861.226459][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 861.238451][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4037'. [ 861.249943][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 861.365177][ T5951] (NULL device *): no alternate interface [ 861.627238][ T5951] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 861.815220][ T5951] usb 6-1: USB disconnect, device number 34 [ 862.407288][ T5951] usb 7-1: USB disconnect, device number 26 [ 863.801924][ T5951] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 863.990129][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 864.012965][ T5951] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 864.022269][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.032614][ T5951] usb 6-1: config 0 descriptor?? [ 864.053485][ T5951] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 864.179996][T18792] loop2: detected capacity change from 0 to 7 [ 864.199341][T15346] Dev loop2: unable to read RDB block 7 [ 864.205816][T15346] loop2: unable to read partition table [ 864.253931][T15346] loop2: partition table beyond EOD, truncated [ 864.263347][T18792] Dev loop2: unable to read RDB block 7 [ 864.269035][T18792] loop2: unable to read partition table [ 864.328046][T18792] loop2: partition table beyond EOD, truncated [ 864.382014][ T3093] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 864.399077][T18792] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 864.555537][ T3093] usb 5-1: config 0 has no interfaces? [ 864.564228][ T3093] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 864.573451][ T3093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.581430][ T3093] usb 5-1: Product: syz [ 864.590125][ T3093] usb 5-1: Manufacturer: syz [ 864.605402][ T3093] usb 5-1: SerialNumber: syz [ 864.647213][ T3093] usb 5-1: config 0 descriptor?? [ 864.742140][ T5847] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 865.141471][ T5847] usb 3-1: config 0 has no interfaces? [ 865.164407][ T5847] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 865.191090][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.220945][ T5847] usb 3-1: Product: syz [ 865.230925][ T5847] usb 3-1: Manufacturer: syz [ 865.242975][ T5847] usb 3-1: SerialNumber: syz [ 865.263437][ T5847] usb 3-1: config 0 descriptor?? [ 865.372157][ T5951] gspca_nw80x: reg_w err -110 [ 865.377262][ T5951] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 866.429447][ T5847] usb 6-1: USB disconnect, device number 35 [ 867.227190][ T3093] usb 5-1: USB disconnect, device number 86 [ 867.581967][ T5951] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 867.677468][ T5847] usb 3-1: USB disconnect, device number 82 [ 867.756531][ T5951] usb 7-1: config 0 has no interfaces? [ 867.768162][ T5951] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 867.778060][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.831071][ T5951] usb 7-1: Product: syz [ 867.893078][ T5951] usb 7-1: Manufacturer: syz [ 867.956018][ T5951] usb 7-1: SerialNumber: syz [ 868.031117][ T5951] usb 7-1: config 0 descriptor?? [ 868.160969][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 868.160986][ T30] audit: type=1326 audit(1752496332.349:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304cd8e929 code=0x7ffc0000 [ 868.390332][ T30] audit: type=1326 audit(1752496332.389:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304cd8e929 code=0x7ffc0000 [ 868.518418][ T30] audit: type=1326 audit(1752496332.389:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f304cd2ab19 code=0x7ffc0000 [ 868.542027][ T30] audit: type=1326 audit(1752496332.399:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f304cd2ab19 code=0x7ffc0000 [ 868.574661][ T30] audit: type=1326 audit(1752496332.399:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f304cd2ab19 code=0x7ffc0000 [ 868.812529][T18850] x_tables: duplicate underflow at hook 1 [ 868.822423][ T30] audit: type=1326 audit(1752496332.399:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304cd8e929 code=0x7ffc0000 [ 868.911936][ T30] audit: type=1326 audit(1752496332.529:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304cd8e929 code=0x7ffc0000 [ 869.068214][ T30] audit: type=1326 audit(1752496332.529:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f304cd2ab19 code=0x7ffc0000 [ 869.139772][ T30] audit: type=1326 audit(1752496332.529:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f304cd2ab19 code=0x7ffc0000 [ 869.247383][ T5951] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 869.268392][ T30] audit: type=1326 audit(1752496332.529:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.5.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304cd8e929 code=0x7ffc0000 [ 869.349881][T18862] FAULT_INJECTION: forcing a failure. [ 869.349881][T18862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.370551][T18861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 52071 - 0 [ 869.385705][T18862] CPU: 1 UID: 0 PID: 18862 Comm: syz.4.4073 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 869.385730][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 869.385743][T18862] Call Trace: [ 869.385751][T18862] [ 869.385760][T18862] dump_stack_lvl+0x189/0x250 [ 869.385786][T18862] ? __pfx____ratelimit+0x10/0x10 [ 869.385813][T18862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.385832][T18862] ? __pfx__printk+0x10/0x10 [ 869.385855][T18862] ? __might_fault+0xb0/0x130 [ 869.385891][T18862] should_fail_ex+0x414/0x560 [ 869.385922][T18862] _copy_from_iter+0x1db/0x16f0 [ 869.385952][T18862] ? policy_nodemask+0x27c/0x720 [ 869.385974][T18862] ? __pfx__copy_from_iter+0x10/0x10 [ 869.386000][T18862] ? set_page_refcounted+0xa0/0x1e0 [ 869.386022][T18862] ? page_copy_sane+0x4e/0x280 [ 869.386043][T18862] copy_page_from_iter+0xdd/0x170 [ 869.386067][T18862] tun_get_user+0x1c4d/0x3ce0 [ 869.386090][T18862] ? tun_get_user+0x693/0x3ce0 [ 869.386123][T18862] ? aa_file_perm+0x11f/0xed0 [ 869.386139][T18862] ? __pfx_tun_get_user+0x10/0x10 [ 869.386157][T18862] ? aa_file_perm+0x11f/0xed0 [ 869.386174][T18862] ? aa_file_perm+0x3e7/0xed0 [ 869.386203][T18862] ? ref_tracker_alloc+0x318/0x460 [ 869.386227][T18862] ? __lock_acquire+0xab9/0xd20 [ 869.386247][T18862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 869.386278][T18862] ? tun_get+0x1c/0x2f0 [ 869.386303][T18862] ? tun_get+0x1c/0x2f0 [ 869.386321][T18862] ? tun_get+0x1c/0x2f0 [ 869.386345][T18862] tun_chr_write_iter+0x113/0x200 [ 869.386368][T18862] vfs_write+0x54b/0xa90 [ 869.386393][T18862] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 869.386414][T18862] ? __pfx_vfs_write+0x10/0x10 [ 869.386445][T18862] ? __fget_files+0x2a/0x420 [ 869.386477][T18862] ksys_write+0x145/0x250 [ 869.386503][T18862] ? __pfx_ksys_write+0x10/0x10 [ 869.386528][T18862] ? do_syscall_64+0xbe/0x3b0 [ 869.386550][T18862] do_syscall_64+0xfa/0x3b0 [ 869.386569][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.386586][T18862] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 869.386604][T18862] ? clear_bhb_loop+0x60/0xb0 [ 869.386626][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.386644][T18862] RIP: 0033:0x7f5b31b8d3df [ 869.386661][T18862] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 869.386677][T18862] RSP: 002b:00007f5b3294a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 869.386697][T18862] RAX: ffffffffffffffda RBX: 00007f5b31db6080 RCX: 00007f5b31b8d3df [ 869.386711][T18862] RDX: 000000000000004e RSI: 0000200000000240 RDI: 00000000000000c8 [ 869.386723][T18862] RBP: 00007f5b3294a090 R08: 0000000000000000 R09: 0000000000000000 [ 869.386736][T18862] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 869.386748][T18862] R13: 0000000000000000 R14: 00007f5b31db6080 R15: 00007f5b31edfa28 [ 869.386777][T18862] [ 869.386965][T18861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 52071 - 0 [ 869.680378][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 869.722026][T18861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 52071 - 0 [ 869.733437][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.762196][ T5951] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 869.789320][T18861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 52071 - 0 [ 869.798510][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.820365][ T5951] usb 3-1: config 0 descriptor?? [ 869.853737][T18861] geneve2: entered promiscuous mode [ 870.008608][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.015345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.085214][ T5951] usb 3-1: USB disconnect, device number 83 [ 870.217847][T18874] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.4074'. [ 870.411948][T16600] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 870.617457][T16600] usb 4-1: config 0 has no interfaces? [ 870.636412][T16600] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 870.645924][T16600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.682218][T16600] usb 4-1: Product: syz [ 870.715224][T16600] usb 4-1: Manufacturer: syz [ 870.739843][T16600] usb 4-1: SerialNumber: syz [ 870.794055][T16600] usb 4-1: config 0 descriptor?? [ 871.012332][T16600] usb 7-1: USB disconnect, device number 27 [ 872.301788][T18898] ptrace attach of "./syz-executor exec"[16491] was attempted by "./syz-executor exec"[18898] [ 872.684248][T18902] ptrace attach of "./syz-executor exec"[14132] was attempted by "./syz-executor exec"[18902] [ 873.071141][T18908] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 873.103984][T18908] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 873.162025][T18908] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 873.217823][ T9] usb 4-1: USB disconnect, device number 85 [ 873.516155][T18911] syz.3.4089: attempt to access beyond end of device [ 873.516155][T18911] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 873.575870][T18911] IPVS: length: 110 != 201483275040 [ 873.689146][T18916] fuse: Unknown parameter '›‚Òµ$w">¬oý~m‘ʧ®’ærÏ~Àö Në#M¶ÜÀ´na­òæAGÆF§>uXûxð%1¹ʉç|µÆŽ;+«…Ò]ŽYÒŒ w' [ 873.804781][ T5951] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 873.981949][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 873.990138][ T5951] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.998077][ T9] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 874.001915][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 874.019979][ T5951] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 874.056553][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.065465][ T5951] usb 6-1: Product: syz [ 874.084681][ T5951] usb 6-1: Manufacturer: syz [ 874.089583][ T5951] usb 6-1: SerialNumber: syz [ 874.174471][ T9] usb 5-1: config 0 has an invalid interface number: 42 but max is 0 [ 874.190895][ T9] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 874.206556][ T9] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 874.219019][ T9] usb 5-1: config 0 has no interface number 0 [ 874.229866][ T9] usb 5-1: config 0 interface 42 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 874.256434][ T9] usb 5-1: config 0 interface 42 has no altsetting 0 [ 874.506008][ T5951] usb 6-1: cannot find UAC_HEADER [ 874.609524][ T5951] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 874.717808][ T5951] usb 6-1: USB disconnect, device number 36 [ 874.785483][T15346] udevd[15346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.141935][ T5986] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 875.282186][ T5986] usb 3-1: device descriptor read/64, error -71 [ 875.480876][T18948] FAULT_INJECTION: forcing a failure. [ 875.480876][T18948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.497230][T18948] CPU: 1 UID: 0 PID: 18948 Comm: +}[@ Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 875.497253][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 875.497264][T18948] Call Trace: [ 875.497272][T18948] [ 875.497281][T18948] dump_stack_lvl+0x189/0x250 [ 875.497305][T18948] ? __pfx____ratelimit+0x10/0x10 [ 875.497331][T18948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.497352][T18948] ? __pfx__printk+0x10/0x10 [ 875.497374][T18948] ? __might_fault+0xb0/0x130 [ 875.497405][T18948] should_fail_ex+0x414/0x560 [ 875.497434][T18948] _copy_from_iter+0x1db/0x16f0 [ 875.497457][T18948] ? rcu_is_watching+0x15/0xb0 [ 875.497479][T18948] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 875.497509][T18948] ? __pfx__copy_from_iter+0x10/0x10 [ 875.497531][T18948] ? __build_skb_around+0x257/0x3e0 [ 875.497555][T18948] ? netlink_sendmsg+0x642/0xb30 [ 875.497576][T18948] ? skb_put+0x11b/0x210 [ 875.497601][T18948] netlink_sendmsg+0x6b2/0xb30 [ 875.497632][T18948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.497657][T18948] ? aa_sock_msg_perm+0x94/0x160 [ 875.497684][T18948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.497709][T18948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.497732][T18948] __sock_sendmsg+0x219/0x270 [ 875.497753][T18948] ____sys_sendmsg+0x505/0x830 [ 875.497782][T18948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.497814][T18948] ? import_iovec+0x74/0xa0 [ 875.497839][T18948] ___sys_sendmsg+0x21f/0x2a0 [ 875.497865][T18948] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.497894][T18948] ? rcu_read_lock_any_held+0xb3/0x120 [ 875.497929][T18948] ? sb_end_write+0xe9/0x1c0 [ 875.497965][T18948] ? __pfx_vfs_write+0x10/0x10 [ 875.497995][T18948] __x64_sys_sendmsg+0x19b/0x260 [ 875.498021][T18948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.498053][T18948] ? __pfx_ksys_write+0x10/0x10 [ 875.498071][T18948] ? rcu_is_watching+0x15/0xb0 [ 875.498095][T18948] ? do_syscall_64+0xbe/0x3b0 [ 875.498117][T18948] do_syscall_64+0xfa/0x3b0 [ 875.498133][T18948] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.498158][T18948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.498176][T18948] ? clear_bhb_loop+0x60/0xb0 [ 875.498198][T18948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.498216][T18948] RIP: 0033:0x7f304cd8e929 [ 875.498234][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.498250][T18948] RSP: 002b:00007f304db96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.498270][T18948] RAX: ffffffffffffffda RBX: 00007f304cfb6080 RCX: 00007f304cd8e929 [ 875.498284][T18948] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000007 [ 875.498297][T18948] RBP: 00007f304db96090 R08: 0000000000000000 R09: 0000000000000000 [ 875.498308][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.498319][T18948] R13: 0000000000000000 R14: 00007f304cfb6080 R15: 00007f304d0dfa28 [ 875.498348][T18948] [ 875.541991][ T5986] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 875.991980][ T5986] usb 3-1: device descriptor read/64, error -71 [ 876.102810][ T5986] usb usb3-port1: attempt power cycle [ 876.131931][ T5847] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 876.297412][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 876.303950][T15125] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 876.317560][ T5847] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 876.326507][ T5847] usb 4-1: config 0 has no interface number 0 [ 876.369270][ T5847] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 876.379227][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 876.391925][ T5847] usb 4-1: Product: syz [ 876.396109][ T5847] usb 4-1: Manufacturer: syz [ 876.449300][ T5847] usb 4-1: config 0 descriptor?? [ 876.461986][ T5986] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 876.471980][T15125] usb 7-1: Using ep0 maxpacket: 8 [ 876.574484][T15125] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 876.583768][T15125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.594793][T15125] usb 7-1: Product: syz [ 876.599113][ T5986] usb 3-1: device descriptor read/8, error -71 [ 876.610462][T15125] usb 7-1: Manufacturer: syz [ 876.625703][T15125] usb 7-1: SerialNumber: syz [ 876.642590][T15125] usb 7-1: config 0 descriptor?? [ 876.667171][T15125] gspca_main: se401-2.14.0 probing 047d:5003 [ 876.691603][T18951] netlink: 'syz.3.4102': attribute type 1 has an invalid length. [ 876.792331][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=ffcf, bcdDevice=4b.59 [ 876.801686][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.834897][ T9] usb 5-1: config 0 descriptor?? [ 876.844005][ T5986] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 876.883781][ T9] usb 5-1: can't set config #0, error -71 [ 876.912273][ T9] usb 5-1: USB disconnect, device number 87 [ 876.931953][ T5986] usb 3-1: device descriptor read/8, error -71 [ 877.063069][ T5986] usb usb3-port1: unable to enumerate USB device [ 877.092582][T15125] gspca_se401: Bayer format not supported! [ 877.319584][ T9] usb 7-1: USB disconnect, device number 28 [ 877.404281][T15125] usb 4-1: USB disconnect, device number 86 [ 877.629131][T18977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4110'. [ 877.672171][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4110'. [ 878.880752][T18996] ptrace attach of "./syz-executor exec"[15829] was attempted by "./syz-executor exec"[18996] [ 879.626156][T18999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.719875][T18999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.272075][ T3093] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 880.292114][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 880.603810][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 880.611907][ T3093] usb 6-1: config 0 has no interfaces? [ 880.631522][ T9] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 880.657200][ T9] usb 7-1: config 0 has no interface number 0 [ 880.673484][ T3093] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 880.691450][ T3093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.794005][ T9] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 880.795862][ T3093] usb 6-1: Product: syz [ 880.813898][ T3093] usb 6-1: Manufacturer: syz [ 880.818579][ T3093] usb 6-1: SerialNumber: syz [ 880.827711][ T3093] usb 6-1: config 0 descriptor?? [ 880.841760][ T9] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 880.958587][ T9] usb 7-1: Product: syz [ 880.967427][ T9] usb 7-1: Manufacturer: syz [ 881.023540][ T9] usb 7-1: config 0 descriptor?? [ 881.255077][T19011] netlink: 'syz.6.4121': attribute type 1 has an invalid length. [ 881.822228][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 881.915199][ T3093] usb 7-1: USB disconnect, device number 29 [ 882.097357][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.119709][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 882.179921][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 882.208694][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.236655][ T9] usb 3-1: config 0 descriptor?? [ 882.469240][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 882.476692][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 882.647540][ T9] usb 3-1: USB disconnect, device number 88 [ 883.314586][T19040] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.4130'. [ 883.922523][T16600] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 884.072037][T16600] usb 4-1: Using ep0 maxpacket: 16 [ 884.170935][T19046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.262781][T19046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.524946][ T9] usb 6-1: USB disconnect, device number 37 [ 884.777219][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4135'. [ 884.990114][T19063] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4134'. [ 885.035719][T19063] binder: 19057:19063 ioctl c0306201 200000000480 returned -14 [ 885.540488][T19063] cgroup: fork rejected by pids controller in /syz6 [ 886.428935][T19102] ptrace attach of "./syz-executor exec"[16049] was attempted by "./syz-executor exec"[19102] [ 886.977506][T16600] usb 4-1: unable to get BOS descriptor or descriptor too short [ 887.020806][T16600] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 887.041879][T16600] usb 4-1: can't read configurations, error -71 [ 887.521577][T19116] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4142'. [ 889.220144][T19140] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 889.238090][T19140] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 889.329812][T19142] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 889.982049][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 890.240866][ T9] usb 3-1: config 0 has no interfaces? [ 890.271530][T19151] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.4153'. [ 890.350511][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 890.459069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.503153][T19155] netlink: 'syz.6.4154': attribute type 12 has an invalid length. [ 890.511058][T19155] netlink: 'syz.6.4154': attribute type 29 has an invalid length. [ 890.519038][T19155] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4154'. [ 890.531695][ T9] usb 3-1: Product: syz [ 890.538071][T19155] netlink: 'syz.6.4154': attribute type 2 has an invalid length. [ 890.548912][ T9] usb 3-1: Manufacturer: syz [ 890.556800][ T9] usb 3-1: SerialNumber: syz [ 890.562990][T17263] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 890.576892][ T9] usb 3-1: config 0 descriptor?? [ 890.632320][T19155] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4154'. [ 890.778970][T17263] usb 6-1: config 222 has 1 interface, different from the descriptor's value: 20 [ 890.792049][T17263] usb 6-1: config 222 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.854651][T17263] usb 6-1: config 222 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.882684][T17263] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 890.919275][T17263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.276127][T17263] usb 6-1: string descriptor 0 read error: -71 [ 891.307402][T17263] usbhid 6-1:222.0: can't add hid device: -22 [ 891.331635][T17263] usbhid 6-1:222.0: probe with driver usbhid failed with error -22 [ 891.396078][T17263] usb 6-1: USB disconnect, device number 38 [ 891.917784][T19175] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 891.956126][T19175] netlink: 'syz.5.4160': attribute type 2 has an invalid length. [ 893.005236][ T3093] usb 3-1: USB disconnect, device number 89 [ 893.248754][T19192] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4164'. [ 893.861393][T19202] batadv_slave_0: entered promiscuous mode [ 893.884033][T19202] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4167'. [ 894.008718][T19208] fuse: Unknown parameter 'À' [ 894.081977][ T3093] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 894.172523][T17263] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 894.202516][T19214] netlink: 'syz.3.4173': attribute type 6 has an invalid length. [ 894.283430][T19214] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 894.349994][ T3093] usb 5-1: Using ep0 maxpacket: 16 [ 894.368967][ T3093] usb 5-1: unable to get BOS descriptor or descriptor too short [ 894.376697][T17263] usb 6-1: Using ep0 maxpacket: 16 [ 894.389281][T19219] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4175'. [ 894.406917][ T3093] usb 5-1: config 1 has an invalid interface number: 160 but max is 0 [ 894.431080][T17263] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 894.457525][ T3093] usb 5-1: config 1 has no interface number 0 [ 894.487044][ T3093] usb 5-1: config 1 interface 160 has no altsetting 0 [ 894.496734][T17263] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.518820][ T3093] usb 5-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 894.534303][T17263] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 894.554363][ T3093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.563358][T17263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.571387][ T3093] usb 5-1: Product: syz [ 894.591688][T17263] usb 6-1: Product: syz [ 894.598829][ T3093] usb 5-1: Manufacturer: syz [ 894.598877][ T5928] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 894.615769][T17263] usb 6-1: Manufacturer: syz [ 894.620502][ T3093] usb 5-1: SerialNumber: syz [ 894.636873][T17263] usb 6-1: SerialNumber: syz [ 894.642016][T19222] syz.2.4176: attempt to access beyond end of device [ 894.642016][T19222] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 894.658846][T19222] IPVS: length: 1986356271 != 201483275040 [ 894.807974][ T5928] usb 7-1: config 0 has no interfaces? [ 894.978338][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4167'. [ 895.014433][ T3093] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 895.023853][ T3093] visor 5-1:1.160: Handspring Visor / Palm OS converter detected [ 895.042603][ T3093] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 895.077505][ T3093] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 895.105101][ T3093] usb 5-1: USB disconnect, device number 88 [ 895.140640][ T3093] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 895.168951][ T3093] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 895.203434][ T5928] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 895.209627][ T3093] visor 5-1:1.160: device disconnected [ 895.231973][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.324714][ T5928] usb 7-1: Product: syz [ 895.427878][ T5928] usb 7-1: Manufacturer: syz [ 895.457136][ T5928] usb 7-1: SerialNumber: syz [ 895.506578][ T5928] usb 7-1: config 0 descriptor?? [ 895.572550][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.604613][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.623869][T17263] usb 6-1: 0:2 : does not exist [ 895.664746][T15346] udevd[15346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.682090][T17263] usb 6-1: USB disconnect, device number 39 [ 895.803436][T19201] batadv_slave_0: left promiscuous mode [ 896.123729][T19236] loop2: detected capacity change from 0 to 7 [ 896.348557][T19236] Dev loop2: unable to read RDB block 7 [ 896.407660][T19236] loop2: unable to read partition table [ 896.442657][T19236] loop2: partition table beyond EOD, truncated [ 896.454457][T19236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 897.226482][ T5928] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 897.439573][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 897.530040][ T5928] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 897.631793][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.736643][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 897.920013][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 897.937664][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.953752][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 897.963162][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.043544][T17263] usb 7-1: USB disconnect, device number 30 [ 898.222199][ T5928] usb 6-1: usb_control_msg returned -32 [ 898.263661][ T5928] usbtmc 6-1:16.0: can't read capabilities [ 898.282152][T19261] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4186'. [ 898.347208][T19261] team0: left promiscuous mode [ 898.384692][T19261] team_slave_0: left promiscuous mode [ 898.390310][T19261] team_slave_1: left promiscuous mode [ 898.789225][ T3093] usb 6-1: USB disconnect, device number 40 [ 898.950148][T19273] syz.4.4190: attempt to access beyond end of device [ 898.950148][T19273] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 898.974951][T19273] IPVS: length: 1986356271 != 201483275040 [ 899.409220][ T5928] IPVS: starting estimator thread 0... [ 899.522249][T19280] IPVS: using max 28 ests per chain, 67200 per kthread [ 899.792161][T19286] loop2: detected capacity change from 0 to 7 [ 899.845530][T15346] Dev loop2: unable to read RDB block 7 [ 899.874466][T15346] loop2: unable to read partition table [ 899.905508][T15346] loop2: partition table beyond EOD, truncated [ 899.945060][T19286] Dev loop2: unable to read RDB block 7 [ 899.962739][T19286] loop2: unable to read partition table [ 899.983128][T19286] loop2: partition table beyond EOD, truncated [ 900.002490][T19286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 900.985003][ T5217] Dev loop2: unable to read RDB block 7 [ 900.990624][ T5217] loop2: unable to read partition table [ 901.022102][ T5217] loop2: partition table beyond EOD, truncated [ 901.431939][T17263] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 901.694499][T17263] usb 3-1: config 0 has no interfaces? [ 901.783963][T17263] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 901.857708][T17263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.867734][T17263] usb 3-1: Product: syz [ 902.092046][T17263] usb 3-1: Manufacturer: syz [ 902.147850][T17263] usb 3-1: SerialNumber: syz [ 902.175623][T19313] FAULT_INJECTION: forcing a failure. [ 902.175623][T19313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.240596][T17263] usb 3-1: config 0 descriptor?? [ 902.248758][T19313] CPU: 1 UID: 0 PID: 19313 Comm: syz.4.4200 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 902.248784][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 902.248794][T19313] Call Trace: [ 902.248800][T19313] [ 902.248805][T19313] dump_stack_lvl+0x189/0x250 [ 902.248823][T19313] ? __pfx____ratelimit+0x10/0x10 [ 902.248839][T19313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 902.248851][T19313] ? __pfx__printk+0x10/0x10 [ 902.248866][T19313] ? __might_fault+0xb0/0x130 [ 902.248884][T19313] should_fail_ex+0x414/0x560 [ 902.248902][T19313] _copy_from_user+0x2d/0xb0 [ 902.248915][T19313] ___sys_recvmsg+0x12e/0x510 [ 902.248932][T19313] ? __pfx____sys_recvmsg+0x10/0x10 [ 902.248959][T19313] ? __fget_files+0x3a0/0x420 [ 902.248978][T19313] do_recvmmsg+0x307/0x770 [ 902.248996][T19313] ? __pfx_do_recvmmsg+0x10/0x10 [ 902.249016][T19313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 902.249036][T19313] __x64_sys_recvmmsg+0x190/0x240 [ 902.249051][T19313] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 902.249064][T19313] ? rcu_is_watching+0x15/0xb0 [ 902.249080][T19313] ? do_syscall_64+0xbe/0x3b0 [ 902.249092][T19313] do_syscall_64+0xfa/0x3b0 [ 902.249101][T19313] ? lockdep_hardirqs_on+0x9c/0x150 [ 902.249116][T19313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.249126][T19313] ? clear_bhb_loop+0x60/0xb0 [ 902.249139][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.249149][T19313] RIP: 0033:0x7f5b31b8e929 [ 902.249159][T19313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.249168][T19313] RSP: 002b:00007f5b32929038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 902.249180][T19313] RAX: ffffffffffffffda RBX: 00007f5b31db6160 RCX: 00007f5b31b8e929 [ 902.249188][T19313] RDX: 0000000000000220 RSI: 00002000000002c0 RDI: 0000000000000007 [ 902.249195][T19313] RBP: 00007f5b32929090 R08: 0000000000000000 R09: 0000000000000000 [ 902.249201][T19313] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 902.249207][T19313] R13: 0000000000000000 R14: 00007f5b31db6160 R15: 00007f5b31edfa28 [ 902.249223][T19313] [ 902.462719][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.219503][T19326] ptrace attach of "./syz-executor exec"[16491] was attempted by "./syz-executor exec"[19326] [ 904.932132][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 904.980794][T16600] usb 3-1: USB disconnect, device number 90 [ 905.179953][ T9] usb 4-1: config 0 has no interfaces? [ 905.206781][T19340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.215537][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 905.243018][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.271403][ T9] usb 4-1: Product: syz [ 905.301821][ T9] usb 4-1: Manufacturer: syz [ 905.346086][ T9] usb 4-1: SerialNumber: syz [ 905.384710][T19346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.433724][ T9] usb 4-1: config 0 descriptor?? [ 906.002043][T17263] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 906.336507][T17263] usb 7-1: Using ep0 maxpacket: 8 [ 906.356620][T17263] usb 7-1: unable to get BOS descriptor or descriptor too short [ 906.376901][T17263] usb 7-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 906.407121][T17263] usb 7-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 906.473956][T17263] usb 7-1: config 4 interface 0 has no altsetting 0 [ 906.578815][T17263] usb 7-1: string descriptor 0 read error: -22 [ 906.585422][T17263] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 906.611520][T17263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.838208][T17263] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 906.954126][T17263] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 907.025549][ T9] usb 4-1: USB disconnect, device number 89 [ 907.168245][T17263] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 907.175993][T17263] usb 7-1: media controller created [ 907.268795][T17263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 907.405624][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 907.457733][T19367] openvswitch: netlink: Duplicate or invalid key (type 0). [ 907.516677][T19367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.732383][T19373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4217'. [ 907.892516][T19376] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 908.202287][T16600] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 908.382106][T16600] usb 3-1: Using ep0 maxpacket: 8 [ 908.504807][T16600] usb 3-1: unable to get BOS descriptor or descriptor too short [ 908.515500][T16600] usb 3-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 908.565942][T17263] zl10353_read_register: readreg error (reg=127, ret==0) [ 908.615078][T16600] usb 3-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 908.679248][T16600] usb 3-1: config 4 interface 0 has no altsetting 0 [ 908.728075][T16600] usb 3-1: string descriptor 0 read error: -22 [ 908.734478][T16600] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 908.743661][T16600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.760785][T16600] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 908.770234][T17263] usb 7-1: USB disconnect, device number 31 [ 908.848986][T16600] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 908.888913][T16600] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 908.920435][T16600] usb 3-1: media controller created [ 909.081997][ T5951] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 909.350522][T16600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.651166][ T5951] usb 6-1: config 0 has no interfaces? [ 909.706121][ T5951] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 909.745690][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.798374][ T5951] usb 6-1: Product: syz [ 909.816766][ T5951] usb 6-1: Manufacturer: syz [ 909.842683][ T5951] usb 6-1: SerialNumber: syz [ 909.918004][ T5951] usb 6-1: config 0 descriptor?? [ 909.981933][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 910.175815][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 910.194003][ T9] usb 7-1: no configurations [ 910.198709][ T9] usb 7-1: can't read configurations, error -22 [ 910.360659][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 910.504026][T16600] zl10353_read_register: readreg error (reg=127, ret==0) [ 910.521966][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 910.529060][ T9] usb 7-1: no configurations [ 910.534181][ T9] usb 7-1: can't read configurations, error -22 [ 910.541502][ T9] usb usb7-port1: attempt power cycle [ 910.943550][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 910.964282][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 910.969964][ T9] usb 7-1: no configurations [ 910.975102][ T9] usb 7-1: can't read configurations, error -22 [ 911.111960][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 911.152571][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 911.159101][ T9] usb 7-1: no configurations [ 911.170750][ T9] usb 7-1: can't read configurations, error -22 [ 911.194938][ T9] usb usb7-port1: unable to enumerate USB device [ 911.542060][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 911.658101][T16600] usb 3-1: USB disconnect, device number 91 [ 911.734811][ T9] usb 4-1: config 0 has no interfaces? [ 911.767733][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 911.788023][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.799956][ T9] usb 4-1: Product: syz [ 911.807951][ T9] usb 4-1: Manufacturer: syz [ 911.813003][ T9] usb 4-1: SerialNumber: syz [ 911.827257][ T9] usb 4-1: config 0 descriptor?? [ 911.852154][ T5986] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 912.014152][ T5986] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 912.036185][ T5986] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 912.072520][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 912.101634][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 912.102130][T16600] usb 6-1: USB disconnect, device number 41 [ 912.141963][ T5986] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 912.164006][ T5986] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 912.176093][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 912.221725][ T5986] usb 5-1: Product: syz [ 912.242298][ T5986] usb 5-1: Manufacturer: syz [ 912.285688][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 912.307574][ T5986] cdc_wdm 5-1:1.0: skipping garbage [ 912.325291][ T5986] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 912.339413][ T5986] cdc_wdm 5-1:1.0: Unknown control protocol [ 912.782001][T16600] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 912.798900][ C1] wdm_int_callback: 156 callbacks suppressed [ 912.798922][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.811511][ C1] wdm_int_callback: 156 callbacks suppressed [ 912.811523][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.826459][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.833077][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.841227][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.847849][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.855019][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.861636][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.868095][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.874694][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.880934][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.887548][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.894864][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.901442][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.907670][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.914247][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.920463][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.927036][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.933266][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 912.939842][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 912.950557][ T5951] usb 5-1: USB disconnect, device number 89 [ 912.956530][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 913.102415][T16600] usb 7-1: Using ep0 maxpacket: 32 [ 913.123781][T16600] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 913.154708][T16600] usb 7-1: config 0 has no interface number 0 [ 913.193943][T16600] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 913.256725][T16600] usb 7-1: config 0 interface 85 has no altsetting 0 [ 913.286696][T16600] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 913.299354][T16600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.319845][T16600] usb 7-1: Product: syz [ 913.329772][T16600] usb 7-1: Manufacturer: syz [ 913.342233][T16600] usb 7-1: SerialNumber: syz [ 913.365808][T16600] usb 7-1: config 0 descriptor?? [ 913.738837][T16600] appletouch 7-1:0.85: Failed to read mode from device. [ 913.756759][T16600] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 913.962578][T19438] ptrace attach of "./syz-executor exec"[15829] was attempted by "./syz-executor exec"[19438] [ 914.092563][ T5986] usb 4-1: USB disconnect, device number 90 [ 915.200667][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4232'. [ 915.312150][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4232'. [ 915.400733][T16600] usb 7-1: USB disconnect, device number 36 [ 915.548589][T19451] syz.5.4235: attempt to access beyond end of device [ 915.548589][T19451] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 915.588300][T19451] IPVS: length: 1986356271 != 201483275040 [ 916.412933][T19460] input: syz1 as /devices/virtual/input/input58 [ 917.006360][T19469] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4240'. [ 918.446085][T19474] IPVS: set_ctl: invalid protocol: 170 0.0.0.0:65359 [ 918.573250][ T5986] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 918.815091][ T5986] usb 7-1: config 0 has no interfaces? [ 918.824066][ T5986] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 918.937030][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.002585][ T5986] usb 7-1: Product: syz [ 919.021673][ T5986] usb 7-1: Manufacturer: syz [ 919.030930][ T5986] usb 7-1: SerialNumber: syz [ 919.042926][ T5986] usb 7-1: config 0 descriptor?? [ 919.536493][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4246'. [ 919.545593][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4246'. [ 919.571219][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4245'. [ 919.829693][T19505] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4247'. [ 921.701456][T19531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.159777][T17263] usb 7-1: USB disconnect, device number 37 [ 923.252894][T19543] loop2: detected capacity change from 0 to 7 [ 923.300626][T19543] Dev loop2: unable to read RDB block 7 [ 923.373770][T19543] loop2: unable to read partition table [ 923.400784][T19543] loop2: partition table beyond EOD, truncated [ 923.443457][T19543] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 924.132500][ T5951] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 924.409598][ T5951] usb 5-1: device descriptor read/64, error -71 [ 924.662340][ T5951] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 924.837255][T19569] syz.3.4266: attempt to access beyond end of device [ 924.837255][T19569] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 924.878100][T16600] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 924.892034][ T5951] usb 5-1: device descriptor read/64, error -71 [ 924.926332][T19569] IPVS: length: 1986356271 != 201483275040 [ 925.012547][ T5951] usb usb5-port1: attempt power cycle [ 925.069595][T16600] usb 3-1: config 0 has no interfaces? [ 925.081798][T16600] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 925.092925][T16600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.118166][T16600] usb 3-1: Product: syz [ 925.218649][T16600] usb 3-1: Manufacturer: syz [ 925.300654][T16600] usb 3-1: SerialNumber: syz [ 925.341987][T16600] usb 3-1: config 0 descriptor?? [ 925.378208][ T5951] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 925.489779][ T5951] usb 5-1: device descriptor read/8, error -71 [ 925.772782][ T5951] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 925.792564][ T5951] usb 5-1: device descriptor read/8, error -71 [ 925.902585][ T5951] usb usb5-port1: unable to enumerate USB device [ 926.857544][T19579] fuse: Bad value for 'user_id' [ 926.871122][T19579] fuse: Bad value for 'user_id' [ 927.142757][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 927.313523][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 927.321949][ T9] usb 5-1: config 0 has no interface number 0 [ 927.337530][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 927.374993][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 927.375022][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.399663][ T9] usb 5-1: Product: syz [ 927.404537][ T9] usb 5-1: Manufacturer: syz [ 927.409411][ T9] usb 5-1: SerialNumber: syz [ 927.436002][ T9] usb 5-1: config 0 descriptor?? [ 927.445631][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 927.723768][ T9] usb 5-1: USB disconnect, device number 94 [ 927.731402][ T9] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 928.110197][ T5986] usb 3-1: USB disconnect, device number 92 [ 928.253806][T19591] KVM: debugfs: duplicate directory 19591-5 [ 929.696773][T19606] loop2: detected capacity change from 0 to 7 [ 929.737765][T19606] Dev loop2: unable to read RDB block 7 [ 929.792248][T19606] loop2: unable to read partition table [ 929.829823][T19606] loop2: partition table beyond EOD, truncated [ 929.881947][T19606] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 929.906946][T19609] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 929.921372][T19609] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 929.973048][T19610] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 930.751428][T19623] FAULT_INJECTION: forcing a failure. [ 930.751428][T19623] name failslab, interval 1, probability 0, space 0, times 0 [ 930.776561][T19623] CPU: 1 UID: 0 PID: 19623 Comm: syz.2.4282 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 930.776587][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.776600][T19623] Call Trace: [ 930.776608][T19623] [ 930.776617][T19623] dump_stack_lvl+0x189/0x250 [ 930.776643][T19623] ? __pfx____ratelimit+0x10/0x10 [ 930.776670][T19623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.776691][T19623] ? __pfx__printk+0x10/0x10 [ 930.776722][T19623] ? __pfx___might_resched+0x10/0x10 [ 930.776741][T19623] ? fs_reclaim_acquire+0x7d/0x100 [ 930.776769][T19623] should_fail_ex+0x414/0x560 [ 930.776799][T19623] should_failslab+0xa8/0x100 [ 930.776823][T19623] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 930.776845][T19623] ? dh_data_from_key+0x15e/0x280 [ 930.776870][T19623] kmemdup_noprof+0x2b/0x70 [ 930.776902][T19623] dh_data_from_key+0x15e/0x280 [ 930.776922][T19623] __keyctl_dh_compute+0x2c3/0xca0 [ 930.776945][T19623] ? __might_fault+0xb0/0x130 [ 930.776968][T19623] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 930.776996][T19623] ? __lock_acquire+0xab9/0xd20 [ 930.777045][T19623] keyctl_dh_compute+0x109/0x160 [ 930.777064][T19623] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 930.777087][T19623] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 930.777106][T19623] ? vfs_write+0x8d8/0xa90 [ 930.777141][T19623] __se_sys_keyctl+0x423/0x910 [ 930.777167][T19623] ? __pfx___se_sys_keyctl+0x10/0x10 [ 930.777193][T19623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 930.777217][T19623] ? __fget_files+0x3a0/0x420 [ 930.777246][T19623] ? fput+0xa0/0xd0 [ 930.777271][T19623] ? ksys_write+0x22a/0x250 [ 930.777293][T19623] ? __pfx_ksys_write+0x10/0x10 [ 930.777310][T19623] ? rcu_is_watching+0x15/0xb0 [ 930.777336][T19623] ? do_syscall_64+0xbe/0x3b0 [ 930.777352][T19623] ? __x64_sys_keyctl+0x20/0xc0 [ 930.777381][T19623] do_syscall_64+0xfa/0x3b0 [ 930.777397][T19623] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.777422][T19623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.777439][T19623] ? clear_bhb_loop+0x60/0xb0 [ 930.777461][T19623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.777479][T19623] RIP: 0033:0x7fe0fa58e929 [ 930.777495][T19623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.777511][T19623] RSP: 002b:00007fe0fb4db038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 930.777531][T19623] RAX: ffffffffffffffda RBX: 00007fe0fa7b5fa0 RCX: 00007fe0fa58e929 [ 930.777545][T19623] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000017 [ 930.777558][T19623] RBP: 00007fe0fb4db090 R08: 0000000000000000 R09: 0000000000000000 [ 930.777569][T19623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.777580][T19623] R13: 0000000000000000 R14: 00007fe0fa7b5fa0 R15: 00007fe0fa8dfa28 [ 930.777608][T19623] [ 931.057899][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.106973][T19625] fuse: Bad value for 'group_id' [ 931.153435][T19625] fuse: Bad value for 'group_id' [ 931.352736][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4283'. [ 931.438484][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4283'. [ 931.463116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.469552][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.510449][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4283'. [ 931.533156][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4283'. [ 931.728714][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4284'. [ 931.897708][T19642] binder: BINDER_SET_CONTEXT_MGR already set [ 931.904187][T19642] binder: 19641:19642 ioctl 4018620d 200000000040 returned -16 [ 932.329883][T19646] netlink: 'syz.6.4288': attribute type 9 has an invalid length. [ 932.403337][T19646] netlink: 'syz.6.4288': attribute type 6 has an invalid length. [ 933.011959][T15125] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 933.175635][T15125] usb 3-1: Using ep0 maxpacket: 32 [ 933.196390][T15125] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 933.237493][T15125] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 933.270485][T15125] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 933.308103][T15125] usb 3-1: Product: syz [ 933.321595][T15125] usb 3-1: Manufacturer: syz [ 933.340819][T15125] usb 3-1: SerialNumber: syz [ 933.406245][T15125] usb 3-1: config 0 descriptor?? [ 933.439221][T19651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 934.907117][T15125] hub 3-1:0.0: bad descriptor, ignoring hub [ 934.965809][T15125] hub 3-1:0.0: probe with driver hub failed with error -5 [ 935.543987][T19651] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 935.770569][T19651] usb 3-1: device firmware changed [ 935.858484][T15125] usb 3-1: USB disconnect, device number 93 [ 936.282631][T15125] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 936.472533][T15125] usb 3-1: Using ep0 maxpacket: 32 [ 936.524122][T15125] usb 3-1: device descriptor read/all, error -71 [ 937.141998][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 937.303031][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 937.363666][ T9] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 937.414183][ T9] usb 5-1: config 0 has no interface number 0 [ 937.439882][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 937.450604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 937.459011][ T9] usb 5-1: Product: syz [ 937.467002][ T9] usb 5-1: Manufacturer: syz [ 937.493331][ T9] usb 5-1: config 0 descriptor?? [ 938.465730][T19714] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4307'. [ 938.483371][T19714] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 938.961107][ T9] usb 5-1: USB disconnect, device number 95 [ 939.298690][T19720] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 57059 - 0 [ 939.341891][T19720] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 57059 - 0 [ 939.534921][T19720] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 57059 - 0 [ 939.586892][T19720] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 57059 - 0 [ 939.601433][T19720] geneve2: entered promiscuous mode [ 939.612410][ T5941] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 939.772173][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 939.795892][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short [ 939.806258][ T5941] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 939.819827][ T5941] usb 5-1: config 7 has no interface number 0 [ 939.851775][ T5941] usb 5-1: string descriptor 0 read error: -22 [ 939.862093][ T5941] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 939.901984][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.165214][ T9] usb 5-1: USB disconnect, device number 96 [ 940.930021][T19747] team_slave_0: entered promiscuous mode [ 940.937576][T19747] team_slave_1: entered promiscuous mode [ 940.954321][T19747] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 940.988465][T19747] team0: Device macvtap1 is already an upper device of the team interface [ 941.030294][T19747] team_slave_0: left promiscuous mode [ 941.035842][T19747] team_slave_1: left promiscuous mode [ 941.251248][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4321'. [ 941.552019][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 941.762031][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 941.801197][ T9] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 941.821935][ T9] usb 6-1: config 0 has no interface number 0 [ 941.841074][ T9] usb 6-1: config 0 interface 161 has no altsetting 0 [ 941.893219][ T9] usb 6-1: New USB device found, idVendor=05dc, idProduct=0018, bcdDevice= 0.01 [ 941.980146][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.302358][ T9] usb 6-1: Product: syz [ 942.323723][ T5986] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 942.331322][ T9] usb 6-1: Manufacturer: syz [ 942.342820][ T9] usb 6-1: SerialNumber: syz [ 942.398140][ T9] usb 6-1: config 0 descriptor?? [ 942.502384][ T5986] usb 7-1: Using ep0 maxpacket: 8 [ 942.529179][ T5986] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 942.545402][ T5986] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 942.600803][ T5986] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 942.652595][ T5986] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 942.720412][ T5986] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.770875][ T5986] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.812861][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.058030][ T5986] usb 7-1: usb_control_msg returned -32 [ 943.071794][ T5986] usbtmc 7-1:16.0: can't read capabilities [ 943.132260][T15125] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 943.235039][ T5941] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 943.291999][T15125] usb 3-1: Using ep0 maxpacket: 32 [ 943.300510][T15125] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 943.309631][T15125] usb 3-1: config 0 has no interface number 0 [ 943.316235][T15125] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.334359][T15125] usb 3-1: config 0 interface 85 has no altsetting 0 [ 943.346037][T15125] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 943.368402][T15125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.381311][T15125] usb 3-1: Product: syz [ 943.387422][T15125] usb 3-1: Manufacturer: syz [ 943.392009][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 943.402338][T15125] usb 3-1: SerialNumber: syz [ 943.407599][ T5941] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 943.410131][T15125] usb 3-1: config 0 descriptor?? [ 943.429004][ T5941] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 943.449782][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.463877][ T5941] usb 4-1: Product: syz [ 943.468149][ T5941] usb 4-1: Manufacturer: syz [ 943.473795][ T5941] usb 4-1: SerialNumber: syz [ 943.481715][ T5941] usb 4-1: config 0 descriptor?? [ 943.494784][ T5941] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 943.504729][ T5941] usb 4-1: setting power ON [ 943.509387][ T5941] dvb-usb: bulk message failed: -22 (2/0) [ 943.520918][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.531331][ T5941] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 943.540151][ T5941] usb 4-1: media controller created [ 943.564705][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.585776][ T5941] usb 4-1: selecting invalid altsetting 6 [ 943.591600][ T5941] usb 4-1: digital interface selection failed (-22) [ 943.598434][ T5941] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 943.607900][ T5941] usb 4-1: setting power OFF [ 943.618538][ T5941] dvb-usb: bulk message failed: -22 (2/0) [ 943.627441][ T5941] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 943.627534][T15125] appletouch 3-1:0.85: Failed to read mode from device. [ 943.637215][ T5941] (NULL device *): no alternate interface [ 943.652901][T15125] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 943.743829][ T5941] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 943.758618][ T5941] usb 4-1: USB disconnect, device number 91 [ 944.102445][ T5986] usb 6-1: USB disconnect, device number 42 [ 944.148668][T15125] usb 3-1: USB disconnect, device number 96 [ 944.498704][T19795] Cannot find del_set index 286 as target [ 945.048268][T19803] tipc: Started in network mode [ 945.094002][T19803] tipc: Node identity 6a170e96a3c8, cluster identity 4711 [ 945.172154][T19803] tipc: Enabled bearer , priority 0 [ 945.179772][T19804] syzkaller0: entered promiscuous mode [ 945.186080][T19804] syzkaller0: entered allmulticast mode [ 945.277384][T19802] tipc: Resetting bearer [ 945.309443][T19802] tipc: Disabling bearer [ 946.242250][T19817] loop2: detected capacity change from 0 to 7 [ 946.452941][T19817] Dev loop2: unable to read RDB block 7 [ 946.468423][T19817] loop2: unable to read partition table [ 946.483840][T19817] loop2: partition table beyond EOD, truncated [ 946.534261][T19817] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 947.117911][T19823] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4337'. [ 947.151999][T19823] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 947.561968][ T5941] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 947.813104][ T5941] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 947.920662][ T5941] usb 4-1: config 0 has no interface number 0 [ 947.973431][ T5941] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 948.009549][ T5941] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 948.044311][ T5941] usb 4-1: config 0 interface 255 has no altsetting 0 [ 948.060096][ T5941] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 948.169592][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.349413][ T5941] usb 4-1: config 0 descriptor?? [ 948.796570][ T5941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 948.815743][ T5941] usb 4-1: USB disconnect, device number 92 [ 948.999620][T19833] tipc: Started in network mode [ 949.025075][T19833] tipc: Node identity a288a524d4a9, cluster identity 4711 [ 949.049316][T19833] tipc: Enabled bearer , priority 0 [ 949.085708][T19836] syzkaller0: entered promiscuous mode [ 949.111609][T19836] syzkaller0: entered allmulticast mode [ 949.211966][ T5951] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 949.227137][T19833] tipc: Resetting bearer [ 949.240688][T19832] tipc: Resetting bearer [ 949.258597][T19832] tipc: Disabling bearer [ 949.298971][T19838] syzkaller1: tun_chr_ioctl cmd 1082156677 [ 949.401930][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 949.419265][ T5951] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 949.427921][ T5951] usb 6-1: config 0 has no interface number 0 [ 949.434682][ T5951] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.446313][ T5951] usb 6-1: config 0 interface 85 has no altsetting 0 [ 949.495857][ T5951] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 949.525627][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.548066][ T5951] usb 6-1: Product: syz [ 949.561427][ T5951] usb 6-1: Manufacturer: syz [ 949.568631][ T5951] usb 6-1: SerialNumber: syz [ 949.578189][ T5951] usb 6-1: config 0 descriptor?? [ 949.786402][ T5951] appletouch 6-1:0.85: Failed to read mode from device. [ 949.809524][ T5951] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 950.246380][ T5951] usb 6-1: USB disconnect, device number 43 [ 950.476726][T19860] tipc: Can't bind to reserved service type 0 [ 950.575022][T19861] [ 950.577384][T19861] ===================================================== [ 950.584316][T19861] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 950.591780][T19861] 6.16.0-rc6-syzkaller #0 Not tainted [ 950.597152][T19861] ----------------------------------------------------- [ 950.604086][T19861] syz.3.4349/19861 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 950.611814][T19861] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 950.620452][T19861] [ 950.620452][T19861] and this task is already holding: [ 950.627820][T19861] ffff88806efab4a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 950.636458][T19861] which would create a new lock dependency: [ 950.642332][T19861] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 950.649909][T19861] [ 950.649909][T19861] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 950.659343][T19861] (&client->buffer_lock){..-.}-{3:3} [ 950.659366][T19861] [ 950.659366][T19861] ... which became SOFTIRQ-irq-safe at: [ 950.672407][T19861] lock_acquire+0x120/0x360 [ 950.676989][T19861] _raw_spin_lock+0x2e/0x40 [ 950.681571][T19861] evdev_pass_values+0xb9/0xbd0 [ 950.686504][T19861] evdev_events+0x1e6/0x340 [ 950.691085][T19861] input_pass_values+0x285/0x890 [ 950.696101][T19861] input_event_dispose+0x3e5/0x6b0 [ 950.701288][T19861] input_inject_event+0x1fe/0x320 [ 950.706389][T19861] kd_sound_helper+0x19f/0x210 [ 950.711228][T19861] input_handler_for_each_handle+0xfe/0x1c0 [ 950.717195][T19861] call_timer_fn+0x17e/0x5f0 [ 950.721979][T19861] __run_timer_base+0x61a/0x860 [ 950.726929][T19861] run_timer_softirq+0xb7/0x180 [ 950.731879][T19861] handle_softirqs+0x286/0x870 [ 950.736765][T19861] __irq_exit_rcu+0xca/0x1f0 [ 950.741440][T19861] irq_exit_rcu+0x9/0x30 [ 950.745767][T19861] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 950.751492][T19861] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 950.757566][T19861] put_pid+0x0/0x160 [ 950.761554][T19861] __scm_recv_common+0x3a0/0x610 [ 950.766578][T19861] scm_recv_unix+0xab/0x360 [ 950.771160][T19861] __unix_dgram_recvmsg+0xa18/0xde0 [ 950.776438][T19861] sock_recvmsg_nosec+0x186/0x1c0 [ 950.781558][T19861] ____sys_recvmsg+0x3aa/0x460 [ 950.786429][T19861] ___sys_recvmsg+0x1b5/0x510 [ 950.791211][T19861] do_recvmmsg+0x307/0x770 [ 950.795728][T19861] __x64_sys_recvmmsg+0x190/0x240 [ 950.800853][T19861] do_syscall_64+0xfa/0x3b0 [ 950.805454][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.811442][T19861] [ 950.811442][T19861] to a SOFTIRQ-irq-unsafe lock: [ 950.818453][T19861] (tasklist_lock){.+.+}-{3:3} [ 950.818480][T19861] [ 950.818480][T19861] ... which became SOFTIRQ-irq-unsafe at: [ 950.831117][T19861] ... [ 950.831128][T19861] lock_acquire+0x120/0x360 [ 950.838298][T19861] _raw_read_lock+0x36/0x50 [ 950.842892][T19861] __do_wait+0xde/0x740 [ 950.847130][T19861] do_wait+0x1f8/0x520 [ 950.851287][T19861] kernel_wait+0xab/0x170 [ 950.855692][T19861] call_usermodehelper_exec_work+0xbe/0x230 [ 950.861662][T19861] process_scheduled_works+0xae1/0x17b0 [ 950.867281][T19861] worker_thread+0x8a0/0xda0 [ 950.871945][T19861] kthread+0x70e/0x8a0 [ 950.876091][T19861] ret_from_fork+0x3fc/0x770 [ 950.880763][T19861] ret_from_fork_asm+0x1a/0x30 [ 950.885606][T19861] [ 950.885606][T19861] other info that might help us debug this: [ 950.885606][T19861] [ 950.895820][T19861] Chain exists of: [ 950.895820][T19861] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 950.895820][T19861] [ 950.909029][T19861] Possible interrupt unsafe locking scenario: [ 950.909029][T19861] [ 950.917330][T19861] CPU0 CPU1 [ 950.922678][T19861] ---- ---- [ 950.928027][T19861] lock(tasklist_lock); [ 950.932260][T19861] local_irq_disable(); [ 950.938999][T19861] lock(&client->buffer_lock); [ 950.946357][T19861] lock(&f_owner->lock); [ 950.953193][T19861] [ 950.956632][T19861] lock(&client->buffer_lock); [ 950.961643][T19861] [ 950.961643][T19861] *** DEADLOCK *** [ 950.961643][T19861] [ 950.969769][T19861] 6 locks held by syz.3.4349/19861: [ 950.974948][T19861] #0: ffff88805a040428 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 950.984084][T19861] #1: ffffffff8e2b2230 (file_rwsem){++++}-{0:0}, at: __break_lease+0x37f/0x1620 [ 950.993218][T19861] #2: ffff888032a7dc78 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 951.002696][T19861] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 951.011734][T19861] #4: ffff888032d6d168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 951.020864][T19861] #5: ffff88806efab4a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 951.029911][T19861] [ 951.029911][T19861] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 951.040322][T19861] -> (&client->buffer_lock){..-.}-{3:3} { [ 951.046231][T19861] IN-SOFTIRQ-W at: [ 951.050388][T19861] lock_acquire+0x120/0x360 [ 951.056885][T19861] _raw_spin_lock+0x2e/0x40 [ 951.063378][T19861] evdev_pass_values+0xb9/0xbd0 [ 951.070221][T19861] evdev_events+0x1e6/0x340 [ 951.076709][T19861] input_pass_values+0x285/0x890 [ 951.083637][T19861] input_event_dispose+0x3e5/0x6b0 [ 951.090737][T19861] input_inject_event+0x1fe/0x320 [ 951.097749][T19861] kd_sound_helper+0x19f/0x210 [ 951.104496][T19861] input_handler_for_each_handle+0xfe/0x1c0 [ 951.112373][T19861] call_timer_fn+0x17e/0x5f0 [ 951.118945][T19861] __run_timer_base+0x61a/0x860 [ 951.125784][T19861] run_timer_softirq+0xb7/0x180 [ 951.132623][T19861] handle_softirqs+0x286/0x870 [ 951.139371][T19861] __irq_exit_rcu+0xca/0x1f0 [ 951.145947][T19861] irq_exit_rcu+0x9/0x30 [ 951.152174][T19861] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 951.159796][T19861] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.167758][T19861] put_pid+0x0/0x160 [ 951.173640][T19861] __scm_recv_common+0x3a0/0x610 [ 951.180560][T19861] scm_recv_unix+0xab/0x360 [ 951.187045][T19861] __unix_dgram_recvmsg+0xa18/0xde0 [ 951.194228][T19861] sock_recvmsg_nosec+0x186/0x1c0 [ 951.201234][T19861] ____sys_recvmsg+0x3aa/0x460 [ 951.208099][T19861] ___sys_recvmsg+0x1b5/0x510 [ 951.214781][T19861] do_recvmmsg+0x307/0x770 [ 951.221198][T19861] __x64_sys_recvmmsg+0x190/0x240 [ 951.228219][T19861] do_syscall_64+0xfa/0x3b0 [ 951.234728][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.242611][T19861] INITIAL USE at: [ 951.246669][T19861] lock_acquire+0x120/0x360 [ 951.253068][T19861] _raw_spin_lock+0x2e/0x40 [ 951.259472][T19861] evdev_pass_values+0xb9/0xbd0 [ 951.266224][T19861] evdev_events+0x1aa/0x340 [ 951.272626][T19861] input_pass_values+0x1bf/0x890 [ 951.279463][T19861] input_event_dispose+0x330/0x6b0 [ 951.286475][T19861] input_inject_event+0x1fe/0x320 [ 951.293400][T19861] evdev_write+0x2fc/0x480 [ 951.299724][T19861] vfs_write+0x27b/0xa90 [ 951.305866][T19861] ksys_write+0x145/0x250 [ 951.312094][T19861] do_syscall_64+0xfa/0x3b0 [ 951.318493][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.326296][T19861] } [ 951.328960][T19861] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 951.337285][T19861] -> (&new->fa_lock){....}-{3:3} { [ 951.342499][T19861] INITIAL USE at: [ 951.346475][T19861] lock_acquire+0x120/0x360 [ 951.352719][T19861] _raw_write_lock_irq+0xa2/0xf0 [ 951.359412][T19861] fasync_remove_entry+0xf1/0x1c0 [ 951.366179][T19861] pipe_fasync+0xa9/0x1e0 [ 951.372241][T19861] __fput+0x89f/0xa70 [ 951.377958][T19861] task_work_run+0x1d1/0x260 [ 951.384280][T19861] get_signal+0x11ed/0x1340 [ 951.390508][T19861] arch_do_signal_or_restart+0x9a/0x750 [ 951.397788][T19861] exit_to_user_mode_loop+0x75/0x110 [ 951.404799][T19861] do_syscall_64+0x2bd/0x3b0 [ 951.411114][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.418734][T19861] INITIAL READ USE at: [ 951.423138][T19861] lock_acquire+0x120/0x360 [ 951.429798][T19861] _raw_read_lock_irqsave+0xaf/0x100 [ 951.437248][T19861] kill_fasync+0x199/0x4d0 [ 951.443819][T19861] evdev_pass_values+0x627/0xbd0 [ 951.450919][T19861] evdev_events+0x1e6/0x340 [ 951.457584][T19861] input_pass_values+0x285/0x890 [ 951.464680][T19861] input_event_dispose+0x330/0x6b0 [ 951.471949][T19861] input_inject_event+0x1fe/0x320 [ 951.479129][T19861] evdev_write+0x2fc/0x480 [ 951.485707][T19861] vfs_write+0x27b/0xa90 [ 951.492107][T19861] ksys_write+0x145/0x250 [ 951.498593][T19861] do_syscall_64+0xfa/0x3b0 [ 951.505253][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.513305][T19861] } [ 951.515878][T19861] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 951.524631][T19861] ... acquired at: [ 951.528504][T19861] lock_acquire+0x120/0x360 [ 951.533170][T19861] _raw_read_lock_irqsave+0xaf/0x100 [ 951.538622][T19861] kill_fasync+0x199/0x4d0 [ 951.543196][T19861] evdev_pass_values+0x627/0xbd0 [ 951.548303][T19861] evdev_events+0x1e6/0x340 [ 951.552970][T19861] input_pass_values+0x285/0x890 [ 951.558070][T19861] input_event_dispose+0x330/0x6b0 [ 951.563340][T19861] input_inject_event+0x1fe/0x320 [ 951.568526][T19861] evdev_write+0x2fc/0x480 [ 951.573107][T19861] vfs_write+0x27b/0xa90 [ 951.577513][T19861] ksys_write+0x145/0x250 [ 951.582001][T19861] do_syscall_64+0xfa/0x3b0 [ 951.586668][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.592722][T19861] [ 951.595032][T19861] -> (&f_owner->lock){....}-{3:3} { [ 951.600238][T19861] INITIAL USE at: [ 951.604117][T19861] lock_acquire+0x120/0x360 [ 951.610177][T19861] _raw_write_lock_irq+0xa2/0xf0 [ 951.616669][T19861] __f_setown+0x67/0x370 [ 951.622465][T19861] fcntl_dirnotify+0x3d6/0x690 [ 951.628782][T19861] do_fcntl+0x6d0/0x1910 [ 951.634581][T19861] __se_sys_fcntl+0xc8/0x150 [ 951.640726][T19861] do_syscall_64+0xfa/0x3b0 [ 951.646780][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.654222][T19861] INITIAL READ USE at: [ 951.658534][T19861] lock_acquire+0x120/0x360 [ 951.665027][T19861] _raw_read_lock_irq+0xaa/0xf0 [ 951.671867][T19861] f_getown+0x54/0x2a0 [ 951.677926][T19861] sock_ioctl+0x536/0x790 [ 951.684244][T19861] __se_sys_ioctl+0xfc/0x170 [ 951.690819][T19861] do_syscall_64+0xfa/0x3b0 [ 951.697303][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.705180][T19861] } [ 951.707662][T19861] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 951.716496][T19861] ... acquired at: [ 951.720282][T19861] lock_acquire+0x120/0x360 [ 951.724942][T19861] _raw_read_lock_irqsave+0xaf/0x100 [ 951.730395][T19861] send_sigio+0x38/0x370 [ 951.734797][T19861] kill_fasync+0x24d/0x4d0 [ 951.739371][T19861] lease_break_callback+0x26/0x30 [ 951.744557][T19861] __break_lease+0x6a5/0x1620 [ 951.749397][T19861] vfs_truncate+0x428/0x520 [ 951.754060][T19861] do_sys_truncate+0xdb/0x190 [ 951.758898][T19861] __x64_sys_truncate+0x5b/0x70 [ 951.763909][T19861] do_syscall_64+0xfa/0x3b0 [ 951.768573][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.774624][T19861] [ 951.776932][T19861] [ 951.776932][T19861] the dependencies between the lock to be acquired [ 951.776941][T19861] and SOFTIRQ-irq-unsafe lock: [ 951.790422][T19861] -> (tasklist_lock){.+.+}-{3:3} { [ 951.795541][T19861] HARDIRQ-ON-R at: [ 951.799522][T19861] lock_acquire+0x120/0x360 [ 951.805668][T19861] _raw_read_lock+0x36/0x50 [ 951.811812][T19861] __do_wait+0xde/0x740 [ 951.817612][T19861] do_wait+0x1f8/0x520 [ 951.823319][T19861] kernel_wait+0xab/0x170 [ 951.829282][T19861] call_usermodehelper_exec_work+0xbe/0x230 [ 951.836810][T19861] process_scheduled_works+0xae1/0x17b0 [ 951.843992][T19861] worker_thread+0x8a0/0xda0 [ 951.850232][T19861] kthread+0x70e/0x8a0 [ 951.855951][T19861] ret_from_fork+0x3fc/0x770 [ 951.862185][T19861] ret_from_fork_asm+0x1a/0x30 [ 951.868600][T19861] SOFTIRQ-ON-R at: [ 951.872570][T19861] lock_acquire+0x120/0x360 [ 951.878715][T19861] _raw_read_lock+0x36/0x50 [ 951.884865][T19861] __do_wait+0xde/0x740 [ 951.890661][T19861] do_wait+0x1f8/0x520 [ 951.896374][T19861] kernel_wait+0xab/0x170 [ 951.902336][T19861] call_usermodehelper_exec_work+0xbe/0x230 [ 951.909867][T19861] process_scheduled_works+0xae1/0x17b0 [ 951.917051][T19861] worker_thread+0x8a0/0xda0 [ 951.923280][T19861] kthread+0x70e/0x8a0 [ 951.928987][T19861] ret_from_fork+0x3fc/0x770 [ 951.935217][T19861] ret_from_fork_asm+0x1a/0x30 [ 951.941624][T19861] INITIAL USE at: [ 951.945508][T19861] lock_acquire+0x120/0x360 [ 951.951561][T19861] _raw_write_lock_irq+0xa2/0xf0 [ 951.958059][T19861] copy_process+0x21d5/0x3b80 [ 951.964286][T19861] kernel_clone+0x21e/0x870 [ 951.970339][T19861] user_mode_thread+0xdd/0x140 [ 951.976670][T19861] rest_init+0x23/0x300 [ 951.982395][T19861] start_kernel+0x47d/0x500 [ 951.988474][T19861] x86_64_start_reservations+0x24/0x30 [ 951.995498][T19861] x86_64_start_kernel+0x143/0x1c0 [ 952.002178][T19861] common_startup_64+0x13e/0x147 [ 952.008690][T19861] INITIAL READ USE at: [ 952.013009][T19861] lock_acquire+0x120/0x360 [ 952.019503][T19861] _raw_read_lock+0x36/0x50 [ 952.025996][T19861] __do_wait+0xde/0x740 [ 952.032144][T19861] do_wait+0x1f8/0x520 [ 952.038199][T19861] kernel_wait+0xab/0x170 [ 952.044511][T19861] call_usermodehelper_exec_work+0xbe/0x230 [ 952.052389][T19861] process_scheduled_works+0xae1/0x17b0 [ 952.059919][T19861] worker_thread+0x8a0/0xda0 [ 952.066495][T19861] kthread+0x70e/0x8a0 [ 952.072901][T19861] ret_from_fork+0x3fc/0x770 [ 952.079492][T19861] ret_from_fork_asm+0x1a/0x30 [ 952.086248][T19861] } [ 952.088733][T19861] ... key at: [] tasklist_lock+0x18/0x40 [ 952.096441][T19861] ... acquired at: [ 952.100227][T19861] lock_acquire+0x120/0x360 [ 952.104892][T19861] _raw_read_lock+0x36/0x50 [ 952.109560][T19861] send_sigio+0x101/0x370 [ 952.114055][T19861] kill_fasync+0x24d/0x4d0 [ 952.118627][T19861] lease_break_callback+0x26/0x30 [ 952.123814][T19861] __break_lease+0x6a5/0x1620 [ 952.128674][T19861] vfs_truncate+0x428/0x520 [ 952.133352][T19861] do_sys_truncate+0xdb/0x190 [ 952.138200][T19861] __x64_sys_truncate+0x5b/0x70 [ 952.143217][T19861] do_syscall_64+0xfa/0x3b0 [ 952.147881][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.153938][T19861] [ 952.156248][T19861] [ 952.156248][T19861] stack backtrace: [ 952.162135][T19861] CPU: 0 UID: 0 PID: 19861 Comm: syz.3.4349 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 952.162152][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.162162][T19861] Call Trace: [ 952.162170][T19861] [ 952.162178][T19861] dump_stack_lvl+0x189/0x250 [ 952.162197][T19861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.162212][T19861] ? __pfx__printk+0x10/0x10 [ 952.162233][T19861] validate_chain+0x1f05/0x2140 [ 952.162258][T19861] __lock_acquire+0xab9/0xd20 [ 952.162274][T19861] ? send_sigio+0x101/0x370 [ 952.162285][T19861] lock_acquire+0x120/0x360 [ 952.162297][T19861] ? send_sigio+0x101/0x370 [ 952.162310][T19861] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 952.162334][T19861] ? _raw_read_lock_irqsave+0xbb/0x100 [ 952.162354][T19861] _raw_read_lock+0x36/0x50 [ 952.162372][T19861] ? send_sigio+0x101/0x370 [ 952.162383][T19861] send_sigio+0x101/0x370 [ 952.162396][T19861] kill_fasync+0x24d/0x4d0 [ 952.162408][T19861] ? kill_fasync+0x53/0x4d0 [ 952.162420][T19861] lease_break_callback+0x26/0x30 [ 952.162436][T19861] __break_lease+0x6a5/0x1620 [ 952.162459][T19861] ? __pfx___break_lease+0x10/0x10 [ 952.162479][T19861] ? mnt_get_write_access+0x68/0x2a0 [ 952.162492][T19861] ? mnt_get_write_access+0x223/0x2a0 [ 952.162512][T19861] vfs_truncate+0x428/0x520 [ 952.162527][T19861] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.162547][T19861] ? __pfx_vfs_truncate+0x10/0x10 [ 952.162562][T19861] ? user_path_at+0x44/0x60 [ 952.162576][T19861] do_sys_truncate+0xdb/0x190 [ 952.162591][T19861] ? __pfx_do_sys_truncate+0x10/0x10 [ 952.162610][T19861] __x64_sys_truncate+0x5b/0x70 [ 952.162625][T19861] do_syscall_64+0xfa/0x3b0 [ 952.162642][T19861] ? lockdep_hardirqs_on+0x9c/0x150 [ 952.162661][T19861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.162674][T19861] ? clear_bhb_loop+0x60/0xb0 [ 952.162689][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.162703][T19861] RIP: 0033:0x7f7c7918e929 [ 952.162716][T19861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.162730][T19861] RSP: 002b:00007f7c79fc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 952.162749][T19861] RAX: ffffffffffffffda RBX: 00007f7c793b6080 RCX: 00007f7c7918e929 [ 952.162760][T19861] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000140 [ 952.162769][T19861] RBP: 00007f7c79210b39 R08: 0000000000000000 R09: 0000000000000000 [ 952.162778][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.162787][T19861] R13: 0000000000000000 R14: 00007f7c793b6080 R15: 00007f7c794dfa28 [ 952.162801][T19861] [ 952.651182][T19788] Set syz1 is full, maxelem 65536 reached [ 952.669804][T15125] usb 7-1: USB disconnect, device number 38