last executing test programs: 40m58.056286346s ago: executing program 2 (id=1901): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000007c0)=0x19) close_range(r1, 0xffffffffffffffff, 0x0) rt_sigaction(0x11, &(0x7f0000000040)={0x0, 0x10000002, 0x0, {[0x8000000000000001]}}, 0x0, 0x8, &(0x7f0000000000)) 40m57.950888851s ago: executing program 2 (id=1903): fchdir(0xffffffffffffffff) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200)=0x9, 0x4) (async) listen(r0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x6, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r1 = socket$inet6(0xa, 0x80000, 0x8000000003c) connect$inet6(r1, &(0x7f0000000a40)={0xa, 0x4e24, 0x7ffd, @empty, 0x3}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000016c0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001100)=""/153, 0x99}, {&(0x7f00000011c0)=""/184, 0xb8}, {&(0x7f0000001280)=""/171, 0xab}], 0x3, &(0x7f0000001380)=""/128, 0x80}, 0xfffffff8}, {{&(0x7f0000001400)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001480)=""/44, 0x2c}, {&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000001580)=""/52, 0x34}, {&(0x7f00000015c0)=""/163, 0xa3}], 0x4}, 0x9}], 0x2, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) connect$unix(r3, 0x0, 0x0) (async, rerun: 64) unshare(0x20000400) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x301100, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) preadv2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_emit_ethernet(0x26, 0x0, 0x0) 40m56.90938599s ago: executing program 2 (id=1908): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x10000, 0x0, 0x6, 0x0, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00"], 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000f00001800d0001007564703a73797a300000000044000400200001000a004e2400000044fe80000000000000000000000000002a37200000200002000a000000fffffffcff6a5b"], 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = gettid() wait4(r6, 0x0, 0x40000000, 0x0) openat$cgroup_int(r4, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x3, 0x2}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000100), 0x8c, 0x1, 0x0, &(0x7f00000001c0), 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYBLOB="cc294c08e5c3fce6d8c6ba1d8c831c8d642b1474448d50658fdb3886b1f037b708811f7ad55fe7dd36fae75dfbd44402919276bd7fe17eccbef3dbd75720a4fee247a949030b51b8d4965d3233cf43512877", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRESHEX=r1], 0x0) 40m53.65275858s ago: executing program 2 (id=1919): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012) dup2(r4, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4190e491, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0) 40m51.938300453s ago: executing program 2 (id=1925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x4, 0x0, 0xffffff70, 0x10000, 0x4}, 0x20) (fail_nth: 1) 40m50.004917293s ago: executing program 2 (id=1930): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) syz_io_uring_setup(0x4dd6, &(0x7f00000002c0)={0x0, 0x355d, 0x40, 0x3, 0x361, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x44) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000"], 0x60}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fchown(r8, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x15, 0x0, @fd_index=0xa, 0x7, 0x0, 0x1, 0x0, 0x0, {0x0, r13}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 40m47.812308544s ago: executing program 32 (id=1930): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) syz_io_uring_setup(0x4dd6, &(0x7f00000002c0)={0x0, 0x355d, 0x40, 0x3, 0x361, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfc, {{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x44) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000000000380050800800030005ac0f0011000100cabee339084eeef109002471f40000000800070000"], 0x60}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fchown(r8, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x2}}}]}]}]}}]}, 0x64}}, 0x20040054) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x15, 0x0, @fd_index=0xa, 0x7, 0x0, 0x1, 0x0, 0x0, {0x0, r13}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 12.429601476s ago: executing program 4 (id=10786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfb, {0x2, 0x14, 0x10, 0xd7, 0x8, 0x0, 0x0, 0x6, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50010}, 0x4000004) sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="9039c2ebe6dff6574152e8c7ad6d54f551445b62d2eb4003d1af2a3863d1d2fc317ca08a8bdf456e228387ad8a28ea0725ca818bef10248b6ea40af99ccb90f53d7ff5f79702df0edcb9c9b4c531c351114d1a7f42d8a65feee9c3e041e3c2dd4f45513744821f78066c391b783efa5c2be2161c4ae9738cffca6791a79008d44699c149ece568ffd0504f4dc33dd7ff39", 0x91}, {&(0x7f0000000240)="3e33a49e2fb336ebb95a132db2edf2fd", 0x10}], 0x2, &(0x7f00000002c0)=[{0x80, 0x102, 0x7, "745eb54a2893a627bbcf59b19c099f0b788f5e25d58d31b2abfd98d8e7d11a4e57405f9c6bd4ef82b2a93cf6a200996c7a630adbccd6cf2f1a4edd23204ecc93f1b83b4f4d468d384a93b9f59c8c628ad0a7481f4a8b3b5260cb2090f4013b148caabd14579501f4c7462d7fa7"}, {0x30, 0x93, 0x3, "cd2101c75eff7780c4c837cd29265d66301e0af5846b636f1b2e"}, {0x98, 0x29, 0xd9, "5749ab701c6b2625f8390bd68e24a9d29025efeede9eb28d2ad2f4b6e089af787434bc89ce70c9df5859fcc08711e2dc41681c054c7087a8f895070a49b7a771aba9504152a1e53a72493b2e66332c3661164de4e82dbd1285c19394acd58eb3dbf4a04c727c1a8fc6e7ac74bff773b226ecec789bca66fb0f08fbeccb127dd149158d6d35ba"}, {0x1010, 0x108, 0x8, "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"}, {0xe0, 0x112, 0x9, "bd7ee1f0a2b8cb003a8c360de36879cc6991669ad944c3dd8ad166f2a28e5c776c49f627a8e5427b4516fd807404ea38e85f95614292014bdcf3cf3e32091f6fd49623ce85bb9c031697f36d50b3a4a57e69b675760aee9bcb65ed3fdbe935da20303a06f20fd477b51d9f35d1b79a778147d172395f22213c9a8596fcde70168372a72c39598f153bf1fc359e662e3a6027842d982cf841b3be509e3aad478173956fd5550bc3614730d5eb6811841062e1f21d0430caf3d7472cf89f715c9c9987d33d4a41cf1a2c"}, {0xf8, 0x110, 0x1, "b151e1d94bcde6d66777a2d53581c7565fcb9e666273702c55b46ebef4ac6fcdac064c296ae6ae5eb0cf2f94e12d51d4777ae03891935f80bd7393d963ed7fabe671b61970af047e32a39df71a7a5a147043fba2458a2ff0e643ce79f98e3bafdc8cf451e15ef78dbcbd226cc9e0247bb728363a0af23cc01f6158c264d3ff6b28629727b1da1be80addcc73042ede3dd2bf61163a47e5b8f974f28d4c56d96b8b6a1a4dd7f7537dbb405f907f50ecbd0982d503e7b50e8a90d40c0fe2e634582fb8e14908dbbe1418a41e04129b077cebf894506bc89944c04422ab1b50e53ab3b23be9837f9c"}, {0x28, 0x10f, 0x2, "4dd75f46ce941533a09f194118dd8fe1ead8a1faf14b"}], 0x1358}, 0x4000005) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001680)={0x18, 0x0, {0x1, @broadcast, 'ip6gretap0\x00'}}, 0x1e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000016c0)='netpci0\x00', 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000001700)='./file0\x00', 0x80000, 0x108) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000018c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)='%+9llu \x00'}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe73, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x18, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000001840)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x61, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x3, 0xd, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[r5, 0x1, r6], &(0x7f0000001b00)=[{0x3, 0x5, 0x4}, {0x1, 0x3, 0x10, 0x5}, {0x0, 0x5, 0x1}, {0x1, 0x4, 0x4, 0x7}], 0x10, 0x8}, 0x94) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c40), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x20005) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xa, 0x9, 0x4b, 0x3c81, 0x20, r6, 0x9f1, '\x00', r4, r2, 0x0, 0x1, 0x3}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x56, 0x2}, @enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1, 0x4}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4b, 0x0, 0x5}, @var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x30, 0x5f, 0x0]}}, &(0x7f0000002000)=""/87, 0x65, 0x57, 0x0, 0x4, 0x10000, @value=r3}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)=@o_path={&(0x7f0000002100)='./file0\x00', 0x0, 0x8, r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0xec07ed9d02b65661, 0x11, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='GPL\x00', 0x9, 0xad, &(0x7f0000001ec0)=""/173, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x2a, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000020c0)={0x4, 0x3, 0x7, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000002180)=[r5, r5, r6, r10, r6], &(0x7f00000021c0)=[{0x4, 0x5, 0x0, 0x1}, {0x2, 0x4, 0xd, 0x5}, {0x1, 0x4, 0x4, 0x5}, {0x5, 0x1, 0x1, 0x4}, {0x5, 0x5, 0x6, 0x7}, {0x3, 0x4, 0x4, 0xb}], 0x10, 0x8000}, 0x94) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000002300), &(0x7f0000002340)=0x4) mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002380), 0x500, 0x0) connect$netlink(r3, &(0x7f00000023c0)=@unspec, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000024c0)={0x14, &(0x7f0000002400)={0x40, 0xe, 0x6b, {0x6b, 0x6, "632e9c39e475156fe82d7efdd7866d043c34bbcef2c880d171a8b4d3406b84bc2714ed71119507f4199266b7dcd04783d4b583e7a00a5c1fda740a193f16462736c8e62e6be7afb5e9601c87786f146f32fdec7cfa623eeeab3316da199f2b79ec2730b59dd3b4e15f"}}, &(0x7f0000002480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000002800)={0x34, &(0x7f0000002500)={0x20, 0x0, 0xed, "9535d613e6312fe2de4658e5e8c68d80d7a719d2e79eee74097667d051d7abd06ebcc0156690c697794e8fd6f444f590748cff55da1fe0856cb4fa2a8f918456e4262fd1e278ea93e979a8319394d316c0e88f2d56533f9ecc28a85eb20c8890e8ce3a16c8686c80f80efbca6649ca1be9070ec67430b3e68f5c05de27b9e29891dc085ef7b9924e8ff1fffcfebf3c623473bc7705418229c57a5809f645aba7b6cc93a6edb19d5c96259dca6543d77c2499924aed9d3670a567ac9652820733907f0d21cebe9ed6c0d969493b2ad1b38c11ae58e2e9d48a091b3c3007c35ebebc5f3016ce6249e975c8f74356"}, &(0x7f0000002600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002680)={0x20, 0x0, 0xfa, {0xf8, "ef15e1a894ee6da121f344fb5382ea8c6fc3fb9b3a684fabf30e5d29171e64ccbde7eca54ecaaffc6f79822103beee9816ac1b8386746f814873e8550b8a7ed91286339243702dec31744abb8055e0794207139140396bfc5f25071ade66142c518debb405b5e58c3627affb693d5aa170efee2448c350d215c5b9490a2f785655789415e5478041cfdffe176b979feaab44694578aa5bc5c807b05486454cf85454c02cc19b750efa3dd0aa9718213729f30aa1f8062a1492225c6b4c1909754f9ce1338cca518b6052107178f2de4f30be736ad76cda0181d854ad5a1cada5d4ab9c49d3b14b4312867e23b9001e8a245e86c135442963"}}, &(0x7f0000002780)={0x20, 0x1, 0x1, 0x50}, &(0x7f00000027c0)={0x20, 0x0, 0x1, 0x7}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FITHAW(r1, 0xc0045878) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000002900)={'sit0\x00', &(0x7f0000002840)={@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x0, 0x90, 0x0, [{@remote}, {@remote}, {@local}, {}, {@loopback}, {@initdev}, {}, {@dev}, {@multicast1}]}}) syz_open_dev$video(&(0x7f0000002940), 0x1, 0xc8040) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003d00)=@IORING_OP_RECVMSG={0xa, 0x3, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000003cc0)={&(0x7f0000002980)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002a00)=""/232, 0xe8}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/73, 0x49}, {&(0x7f0000003b80)=""/168, 0xa8}], 0x4, &(0x7f0000003c80)=""/40, 0x28}, 0x0, 0x10000, 0x0, {0x3}}) 11.689709773s ago: executing program 0 (id=10787): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0x4}) 11.619729753s ago: executing program 4 (id=10788): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000004c0)={0x0, 0x15a7, 0x3, 0x1}) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r0, &(0x7f0000001540)=""/94, 0x60) getdents64(r0, 0x0, 0xffffffff00000018) 11.38383622s ago: executing program 0 (id=10789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x0, 0xffff8001}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 10.929859017s ago: executing program 1 (id=10791): r0 = socket(0x2b, 0x4, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x2) pwrite64(r2, &(0x7f0000000100)="02", 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed1, &(0x7f0000004200)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x2, 0x1, 0x0, &(0x7f0000000300)=""/121, 0x0, 0x8080000}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) read$FUSE(r8, &(0x7f0000004d80)={0x2020}, 0xfffffffffffffd2d) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) read$FUSE(r4, &(0x7f0000001780)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/121, 0x79, 0x0, 0x0, 0x2}}, 0x48) 10.293222693s ago: executing program 3 (id=10792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073118600000000008510000002000000850000007600000095000810000000009500a50500000000e2044545cfbd17576630"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x5, 0x80000000, 0x8], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 10.063845087s ago: executing program 0 (id=10793): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0x2269}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r5, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000001d80)={0x2, 0x6}, 0x2) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x40081) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0d2176399e936a366fee98ac668a2"}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) 10.06001565s ago: executing program 3 (id=10794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(0x0, 0x26) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 9.644880953s ago: executing program 1 (id=10795): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000f000029000000390000000402020900000000ff027b16bf3064f7ee44"], 0x28}}], 0x1, 0x44010) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x27, 0x4, 0x6a0dd525, 0xfffe, 0x2, 0x20004, 0x9, 0x0, 0x0, 0xc00, 0xf}}, 0x50) io_uring_setup(0x2c49, &(0x7f0000003c40)={0x0, 0xaaf5, 0x100, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@gettaction={0xf8, 0x32, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40091}, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x41, 0xffffffffffffff51, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2}, 0x50) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0xc811}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.203306105s ago: executing program 1 (id=10796): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x16}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=@delqdisc={0x228, 0x25, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x9}, {0x6, 0xffe0}, {0xfff2, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x5, 0x31, 0x8, 0x2, 0x5, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0xd8c, 0x9ef, 0x4000]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x1, 0x2, 0x8, 0xfffff678}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x5, 0x8, 0x80000000, 0x2}, 0x1, 0x0, 0xbe, 0x9, 0x1, 0x10, 0x8, 0xa, 0x4, 0x9, {0x0, 0x7, 0x2, 0x8001, 0x4, 0x100}}}}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2a, 0x7, 0xffff, 0x7fffffff, 0x1, 0x2, 0xe4, 0x2}}, {0x8, 0x2, [0x3ff, 0xc2da]}}, {{0x1c, 0x1, {0x8d, 0x4, 0x7, 0x5, 0x1, 0xfffffffd, 0x7, 0x4}}, {0xc, 0x2, [0x8001, 0x9, 0x2, 0x1]}}, {{0x1c, 0x1, {0x7f, 0x6, 0x5, 0x1, 0x2, 0x7fffffff, 0x6e25, 0x4}}, {0xc, 0x2, [0x6, 0x9, 0x4, 0x287]}}, {{0x1c, 0x1, {0x8, 0x8, 0x8, 0x6, 0x2, 0x7, 0x36dc, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x3ff, 0x80, 0x5, 0x6, 0x4, 0x0, 0x9]}}, {{0x1c, 0x1, {0x4, 0x40, 0x8, 0x2, 0x2, 0x7, 0x5, 0x6}}, {0x10, 0x2, [0x2, 0x1, 0x9, 0x6, 0x9, 0x3ff]}}, {{0x1c, 0x1, {0xff, 0x81, 0x4000, 0x8000, 0x0, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x6, 0x8, 0x5]}}, {{0x1c, 0x1, {0x9, 0x7c, 0x4, 0x6, 0x0, 0xffff, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x80, 0x8, 0x6, 0x1, 0x7, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0xfff]}}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x20002000}, 0x40) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000380)) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000440)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000480)) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x6, @sliced={0xd, [0x9, 0x4, 0x7, 0x6, 0x7ff, 0x9, 0x72, 0x8, 0x2, 0xea4, 0x9, 0x4, 0x40, 0x4, 0xe, 0x6, 0x4, 0x4, 0xe07, 0xfff, 0x7, 0x5, 0x101, 0x8001, 0xd22e, 0x8000, 0x7ff, 0x8001, 0x5, 0x3, 0x7f, 0x8, 0x1, 0x100, 0x8, 0x5, 0xeea9, 0x9, 0x8, 0x0, 0xe1b, 0x40, 0x6, 0xaf, 0x89, 0x9db7, 0x0, 0x9994]}}) 8.69850355s ago: executing program 5 (id=10798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008081) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) socket$nl_generic(0x10, 0x3, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) r5 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe6, 0x3, 0x2, 0xfffff07c, 0x8001], [0x7, 0x18, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x1, 0x800, 0x5]], '\x00', [{0x8000, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1}, {0xf, 0x8, 0x1, 0x1, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x1, 0x0, 0x1}], '\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) 8.471947534s ago: executing program 4 (id=10799): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c"], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000080)={0x1, 0x87e, 0x0, 0x0, 0x7}) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300030a00000000070000000000000000000000000000000002000100000000000000020d00000000030005000000000002004e23ac1414000000000000000000e982cadbd4c464d76d05aadf018521afbd8812b4d6d05003f1076ebbf4fad9d0afdc7cf1a0e635d5b6df7b602aafbbabc3b7185be3ec4618c29ae05dd15681c69fb840fe530e45e19eb08b879f00"/153], 0x50}, 0x1, 0x7}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) socket(0x10, 0x803, 0x0) 7.329929428s ago: executing program 4 (id=10800): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) syz_usb_disconnect(r1) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r8 = fsopen(&(0x7f00000003c0)='minix\x00', 0x1) syz_usb_disconnect(r1) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x20, 0x0, 0x10, {0x10, 0x1, "2c583580479f2e0b45b14f0c9377"}}, &(0x7f00000001c0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "b82a61205c3b12131ca4da625e89198112d1ff06ea4698c8ad65be7cb8566df307c41b8dd65ab10aac3b8b14af6535a9948d3bc1f0639fc76677c6594aa52dfd0b26279c783797f393e861cb75f13f513166963ea875aa346c37334529cf6d5224c4444716c2c9544d90745b7ca639ac2e4d5fd4e2a068e87117455afb3188"}}, &(0x7f0000000140)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "30b2dffec88f1b1e46272f41bd9dc9e7"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x9, 0xb}, @ptm_cap={0x3}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x1, 0x4, "4a00ab12", "d2026422"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x5, 0x9, 0xf8, 0x6, 0x9}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x20, 0x8}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x200, 0x40}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "9b4d"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x0, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xa}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x6c}}) unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 6.683049355s ago: executing program 5 (id=10801): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket(0x1a, 0x6, 0x3) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a000000000000000007"], 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@mcast2, 0x4e21, 0x3, 0x4e22, 0x800, 0x2, 0x0, 0x0, 0xff, 0x0, r6}, {0x2, 0x1000, 0x1, 0x335, 0x4, 0x5, 0x80000001, 0x1}, {0x4, 0x6, 0x9, 0x8}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3501, 0x4, 0x2, 0x16, 0x9, 0x5, 0x2}}, 0xe8) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) 6.491626594s ago: executing program 1 (id=10802): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) r5 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x7) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) mkdir(&(0x7f0000000000)='./file2\x00', 0x26) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) getdents64(r6, 0x0, 0x0) 5.162936089s ago: executing program 5 (id=10803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x2, 0x5b7d, 0x80080, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) syz_pidfd_open(0x0, 0x0) r4 = getpid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x4, 0x1, 0x5, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x6, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x3, 0x8, 0x0, '\x00', 0x4}, {0xa, 0x6, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x9}, {0xfd, 0x5, 0xd, '\x00', 0xa}, {0x2, 0xb, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0xfd}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x7, 0x8, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x1}, {0x8a, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x1, 0x4, '\x00', 0x7f}]}}) syz_pidfd_open(r4, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000140), 0x2, 0x40080) recvfrom$inet(r7, &(0x7f0000000500)=""/4096, 0x1000, 0x2020, &(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x8c, 0x77, 0x0, 0x4, @tick=0x4, {0x0, 0x2}, {}, @raw32={[0x2, 0x0, 0x4]}}], 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffffffffd14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 5.033835304s ago: executing program 3 (id=10804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 4.712026996s ago: executing program 3 (id=10805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="430000004ec6"}) 4.305497205s ago: executing program 0 (id=10806): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/166, 0xa6, 0x81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) 4.09802467s ago: executing program 3 (id=10807): syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4010744d, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r9 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x3}, {{@in=@private, 0x2, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) 3.181252902s ago: executing program 1 (id=10808): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x1ff, {0x2000000000000000, 0xfffffffc, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xffffffff, 0x0, 0x200000, 0x6000, 0x0, r2, 0x0, 0x0, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 2.986364524s ago: executing program 1 (id=10809): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000004c0)={0x0, 0x15a7, 0x3, 0x1}) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r0, &(0x7f0000001540)=""/94, 0x60) getdents64(r0, 0x0, 0xffffffff00000018) 2.456180033s ago: executing program 5 (id=10810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="430000004ec6"}) 1.474339695s ago: executing program 0 (id=10811): pipe2(&(0x7f0000000000), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000096000040"]) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000100e00000020000000e000000000000000000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff070000000000000000000000000000000000000000000000000a0002002000000000000000480001"], 0x138}, 0x1, 0xe}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x7}}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x2c, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xb, 0xe}, {}, {0xa, 0x8}}, [{0x8, 0xb, 0xfffff800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xffff7cd6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) syz_open_pts(0xffffffffffffffff, 0x141601) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 1.058999761s ago: executing program 5 (id=10812): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008001140000000000500150010000000050001000600"], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 985.453849ms ago: executing program 4 (id=10813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x21, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) 860.184951ms ago: executing program 5 (id=10814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(0x0, 0x26) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 835.153543ms ago: executing program 0 (id=10815): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x292e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x4, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e59", @ANYBLOB], 0x40}}, 0x0) 640.48275ms ago: executing program 4 (id=10816): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0x2269}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r5, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000001d80)={0x2, 0x6}, 0x2) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x400c5}, 0x40081) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0d2176399e936a366fee98ac668a2"}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=10817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x600, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) rt_sigaction(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r11, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ][ T48] usb 5-1: SerialNumber: syz [ 3494.058545][ T48] usb 5-1: config 0 descriptor?? [ 3494.561568][ T48] ums_eneub6250 5-1:0.54: USB Mass Storage device detected [ 3494.799582][ T48] usb 5-1: USB disconnect, device number 116 [ 3495.050945][ T4542] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 3495.239775][ T4542] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3495.258514][ T4542] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 3495.292897][ T4542] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3495.302422][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3495.311122][ T4542] usb 1-1: SerialNumber: syz [ 3495.327512][ T4542] usb 1-1: bad CDC descriptors [ 3495.499721][ T48] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3495.738894][ T5287] usb 1-1: USB disconnect, device number 119 [ 3495.864419][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3495.913763][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3495.963934][ T48] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3496.003166][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3496.033202][ T48] usb 4-1: config 0 descriptor?? [ 3497.292501][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3497.351322][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3497.589414][ T48] uclogic 0003:256C:006D.0082: failed retrieving Huion firmware version: -71 [ 3497.635110][ T48] uclogic 0003:256C:006D.0082: failed probing parameters: -71 [ 3497.840352][ T48] uclogic 0003:256C:006D.0082: probe with driver uclogic failed with error -71 [ 3497.901366][ T48] usb 4-1: USB disconnect, device number 32 [ 3498.381030][T32589] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 3498.540982][T32589] usb 5-1: Using ep0 maxpacket: 16 [ 3498.578384][T32589] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 3498.613267][T32589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3498.665244][T32589] usb 5-1: Product: syz [ 3498.669483][T32589] usb 5-1: Manufacturer: syz [ 3498.740385][T32589] usb 5-1: SerialNumber: syz [ 3498.813691][T32589] usb 5-1: config 0 descriptor?? [ 3498.882642][T32589] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 3499.066377][T32589] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 3499.094525][T32589] visor 5-1:0.0: probe with driver visor failed with error -71 [ 3499.161587][T32589] usb 5-1: USB disconnect, device number 117 [ 3499.287344][T14460] bridge2: entered promiscuous mode [ 3499.506032][T14464] syzkaller0: entered promiscuous mode [ 3499.560891][ T5287] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 3499.627506][T14464] syzkaller0: entered allmulticast mode [ 3500.216880][T14477] FAULT_INJECTION: forcing a failure. [ 3500.216880][T14477] name failslab, interval 1, probability 0, space 0, times 0 [ 3500.310883][T14477] CPU: 1 UID: 0 PID: 14477 Comm: syz.4.10336 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3500.310917][T14477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3500.310932][T14477] Call Trace: [ 3500.310942][T14477] [ 3500.310953][T14477] dump_stack_lvl+0x189/0x250 [ 3500.310984][T14477] ? __pfx____ratelimit+0x10/0x10 [ 3500.311015][T14477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3500.311040][T14477] ? __pfx__printk+0x10/0x10 [ 3500.311069][T14477] ? trace_fib_table_lookup+0x85/0x200 [ 3500.311106][T14477] should_fail_ex+0x414/0x560 [ 3500.311151][T14477] should_failslab+0xa8/0x100 [ 3500.311182][T14477] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3500.311207][T14477] ? dst_alloc+0x105/0x170 [ 3500.311234][T14477] ? fib_lookup+0x76/0x440 [ 3500.311276][T14477] dst_alloc+0x105/0x170 [ 3500.311309][T14477] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 3500.311352][T14477] ? ip_route_output_key_hash+0xde/0x2e0 [ 3500.311384][T14477] ip_route_output_key_hash+0x1b9/0x2e0 [ 3500.311419][T14477] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 3500.311451][T14477] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 3500.311491][T14477] ? crng_make_state+0x34c/0x700 [ 3500.311525][T14477] ? lockdep_hardirqs_on+0x9c/0x150 [ 3500.311561][T14477] ip_route_output_flow+0x2a/0x150 [ 3500.311595][T14477] sctp_v4_get_dst+0x3c7/0x1200 [ 3500.311630][T14477] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 3500.311652][T14477] ? _get_random_bytes+0x1bd/0x210 [ 3500.311692][T14477] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3500.311733][T14477] ? dst_release+0x72/0x1b0 [ 3500.311765][T14477] sctp_transport_route+0x115/0x2f0 [ 3500.311804][T14477] sctp_assoc_add_peer+0x657/0x13b0 [ 3500.311846][T14477] sctp_connect_new_asoc+0x30a/0x690 [ 3500.311877][T14477] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 3500.311908][T14477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3500.311937][T14477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3500.311963][T14477] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 3500.311991][T14477] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 3500.312011][T14477] ? security_sctp_bind_connect+0x7e/0x2e0 [ 3500.312041][T14477] sctp_sendmsg+0x155c/0x2810 [ 3500.312081][T14477] ? __pfx_sctp_sendmsg+0x10/0x10 [ 3500.312109][T14477] ? aa_sk_perm+0x81e/0x950 [ 3500.312145][T14477] ? __pfx_aa_sk_perm+0x10/0x10 [ 3500.312178][T14477] ? sock_rps_record_flow+0x19/0x410 [ 3500.312203][T14477] ? inet_sendmsg+0x2f4/0x370 [ 3500.312221][T14477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3500.312264][T14477] __sock_sendmsg+0x19c/0x270 [ 3500.312299][T14477] ____sys_sendmsg+0x52d/0x830 [ 3500.312333][T14477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3500.312370][T14477] ? import_iovec+0x74/0xa0 [ 3500.312418][T14477] ___sys_sendmsg+0x21f/0x2a0 [ 3500.312447][T14477] ? __pfx____sys_sendmsg+0x10/0x10 [ 3500.312511][T14477] ? __fget_files+0x2a/0x420 [ 3500.312536][T14477] ? __fget_files+0x3a0/0x420 [ 3500.312572][T14477] __sys_sendmmsg+0x227/0x430 [ 3500.312604][T14477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3500.312627][T14477] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 3500.312678][T14477] ? ksys_write+0x22a/0x250 [ 3500.312705][T14477] ? __pfx_ksys_write+0x10/0x10 [ 3500.312727][T14477] ? rcu_is_watching+0x15/0xb0 [ 3500.312758][T14477] __x64_sys_sendmmsg+0xa0/0xc0 [ 3500.312787][T14477] do_syscall_64+0xfa/0x3b0 [ 3500.312806][T14477] ? lockdep_hardirqs_on+0x9c/0x150 [ 3500.312836][T14477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3500.312856][T14477] ? clear_bhb_loop+0x60/0xb0 [ 3500.312883][T14477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3500.312904][T14477] RIP: 0033:0x7fdb5e38e929 [ 3500.312924][T14477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3500.312943][T14477] RSP: 002b:00007fdb5f260038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3500.312967][T14477] RAX: ffffffffffffffda RBX: 00007fdb5e5b5fa0 RCX: 00007fdb5e38e929 [ 3500.312983][T14477] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 3500.312996][T14477] RBP: 00007fdb5f260090 R08: 0000000000000000 R09: 0000000000000000 [ 3500.313009][T14477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3500.313022][T14477] R13: 0000000000000000 R14: 00007fdb5e5b5fa0 R15: 00007fdb5e6dfa28 [ 3500.313054][T14477] [ 3502.170533][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10341'. [ 3507.014386][T14493] macvtap8: entered promiscuous mode [ 3507.019889][T14493] macvtap8: entered allmulticast mode [ 3507.189271][T14522] FAULT_INJECTION: forcing a failure. [ 3507.189271][T14522] name failslab, interval 1, probability 0, space 0, times 0 [ 3507.267631][T14522] CPU: 1 UID: 0 PID: 14522 Comm: syz.3.10348 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3507.267661][T14522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3507.267673][T14522] Call Trace: [ 3507.267680][T14522] [ 3507.267689][T14522] dump_stack_lvl+0x189/0x250 [ 3507.267729][T14522] ? __pfx____ratelimit+0x10/0x10 [ 3507.267759][T14522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3507.267781][T14522] ? __pfx__printk+0x10/0x10 [ 3507.267812][T14522] ? __pfx___might_resched+0x10/0x10 [ 3507.267838][T14522] should_fail_ex+0x414/0x560 [ 3507.267870][T14522] should_failslab+0xa8/0x100 [ 3507.267896][T14522] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3507.267919][T14522] ? __alloc_skb+0x112/0x2d0 [ 3507.267939][T14522] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3507.267967][T14522] __alloc_skb+0x112/0x2d0 [ 3507.267993][T14522] netlink_dump+0x22b/0xe20 [ 3507.268017][T14522] ? __netlink_lookup+0xbd/0x810 [ 3507.268047][T14522] ? __pfx_netlink_dump+0x10/0x10 [ 3507.268080][T14522] ? netlink_lookup+0x30/0x200 [ 3507.268099][T14522] ? netlink_lookup+0x30/0x200 [ 3507.268118][T14522] ? netlink_lookup+0x30/0x200 [ 3507.268143][T14522] __netlink_dump_start+0x5cb/0x7e0 [ 3507.268172][T14522] rtnetlink_rcv_msg+0x9eb/0xb70 [ 3507.268194][T14522] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 3507.268217][T14522] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3507.268235][T14522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3507.268253][T14522] ? ref_tracker_free+0x63a/0x7d0 [ 3507.268280][T14522] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 3507.268317][T14522] netlink_rcv_skb+0x205/0x470 [ 3507.268340][T14522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3507.268362][T14522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3507.268396][T14522] ? netlink_deliver_tap+0x2e/0x1b0 [ 3507.268417][T14522] ? netlink_deliver_tap+0x2e/0x1b0 [ 3507.268444][T14522] netlink_unicast+0x758/0x8d0 [ 3507.268474][T14522] netlink_sendmsg+0x805/0xb30 [ 3507.268506][T14522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3507.268532][T14522] ? aa_sock_msg_perm+0x94/0x160 [ 3507.268561][T14522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3507.268590][T14522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3507.268613][T14522] __sock_sendmsg+0x219/0x270 [ 3507.268646][T14522] ____sys_sendmsg+0x505/0x830 [ 3507.268676][T14522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3507.268717][T14522] ? import_iovec+0x74/0xa0 [ 3507.268761][T14522] ___sys_sendmsg+0x21f/0x2a0 [ 3507.268789][T14522] ? __pfx____sys_sendmsg+0x10/0x10 [ 3507.268852][T14522] ? __fget_files+0x2a/0x420 [ 3507.268878][T14522] ? __fget_files+0x3a0/0x420 [ 3507.268915][T14522] __x64_sys_sendmsg+0x19b/0x260 [ 3507.268944][T14522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3507.268981][T14522] ? __pfx_ksys_write+0x10/0x10 [ 3507.269002][T14522] ? rcu_is_watching+0x15/0xb0 [ 3507.269031][T14522] ? do_syscall_64+0xbe/0x3b0 [ 3507.269055][T14522] do_syscall_64+0xfa/0x3b0 [ 3507.269073][T14522] ? lockdep_hardirqs_on+0x9c/0x150 [ 3507.269102][T14522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3507.269121][T14522] ? clear_bhb_loop+0x60/0xb0 [ 3507.269145][T14522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3507.269164][T14522] RIP: 0033:0x7f535e58e929 [ 3507.269183][T14522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3507.269201][T14522] RSP: 002b:00007f535f4c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3507.269224][T14522] RAX: ffffffffffffffda RBX: 00007f535e7b5fa0 RCX: 00007f535e58e929 [ 3507.269238][T14522] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 3507.269251][T14522] RBP: 00007f535f4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 3507.269263][T14522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3507.269275][T14522] R13: 0000000000000000 R14: 00007f535e7b5fa0 R15: 00007f535e8dfa28 [ 3507.269305][T14522] [ 3508.364198][ T5288] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3508.623867][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 3508.665690][T14539] program syz.5.10352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3508.676762][ T5288] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3508.694458][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3508.709864][ T5288] usb 4-1: config 0 descriptor?? [ 3508.959843][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3509.487363][ T5288] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3509.507905][ T5288] asix 4-1:0.0: probe with driver asix failed with error -61 [ 3510.565592][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10357'. [ 3510.583781][T14563] macvtap9: entered promiscuous mode [ 3510.995754][ T5287] usb 4-1: USB disconnect, device number 34 [ 3511.131404][T14563] macvtap9: entered allmulticast mode [ 3511.248552][T14568] FAULT_INJECTION: forcing a failure. [ 3511.248552][T14568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3511.289550][T14568] CPU: 0 UID: 0 PID: 14568 Comm: syz.3.10358 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3511.289584][T14568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3511.289597][T14568] Call Trace: [ 3511.289606][T14568] [ 3511.289615][T14568] dump_stack_lvl+0x189/0x250 [ 3511.289644][T14568] ? __pfx____ratelimit+0x10/0x10 [ 3511.289675][T14568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3511.289700][T14568] ? __pfx__printk+0x10/0x10 [ 3511.289738][T14568] should_fail_ex+0x414/0x560 [ 3511.289773][T14568] _copy_to_user+0x31/0xb0 [ 3511.289799][T14568] simple_read_from_buffer+0xe1/0x170 [ 3511.289830][T14568] proc_fail_nth_read+0x1df/0x250 [ 3511.289862][T14568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3511.289893][T14568] ? rw_verify_area+0x258/0x650 [ 3511.289915][T14568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3511.289945][T14568] vfs_read+0x200/0x980 [ 3511.289973][T14568] ? __pfx___mutex_lock+0x10/0x10 [ 3511.289993][T14568] ? __pfx_vfs_read+0x10/0x10 [ 3511.290017][T14568] ? __fget_files+0x2a/0x420 [ 3511.290048][T14568] ? __fget_files+0x3a0/0x420 [ 3511.290072][T14568] ? __fget_files+0x2a/0x420 [ 3511.290107][T14568] ksys_read+0x145/0x250 [ 3511.290132][T14568] ? __pfx_ksys_read+0x10/0x10 [ 3511.290152][T14568] ? rcu_is_watching+0x15/0xb0 [ 3511.290197][T14568] ? do_syscall_64+0xbe/0x3b0 [ 3511.290222][T14568] do_syscall_64+0xfa/0x3b0 [ 3511.290241][T14568] ? lockdep_hardirqs_on+0x9c/0x150 [ 3511.290273][T14568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3511.290294][T14568] ? clear_bhb_loop+0x60/0xb0 [ 3511.290320][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3511.290350][T14568] RIP: 0033:0x7f535e58d33c [ 3511.290370][T14568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3511.290388][T14568] RSP: 002b:00007f535f4c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3511.290413][T14568] RAX: ffffffffffffffda RBX: 00007f535e7b5fa0 RCX: 00007f535e58d33c [ 3511.290428][T14568] RDX: 000000000000000f RSI: 00007f535f4c50a0 RDI: 0000000000000004 [ 3511.290442][T14568] RBP: 00007f535f4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 3511.290456][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3511.290469][T14568] R13: 0000000000000000 R14: 00007f535e7b5fa0 R15: 00007f535e8dfa28 [ 3511.290502][T14568] [ 3512.005456][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.016073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3513.189475][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10365'. [ 3513.420938][ T5287] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 3513.421052][ T5937] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3513.580162][ T5287] usb 1-1: config 0 has no interfaces? [ 3513.602229][T14591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3513.650859][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 3513.661718][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3513.674197][ T5937] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 3513.690752][ T5287] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3513.710960][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3513.742707][ T5937] usb 6-1: config 0 descriptor?? [ 3513.770882][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.777341][ T5937] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3513.789188][ T5287] usb 1-1: Product: syz [ 3513.800968][ T5287] usb 1-1: Manufacturer: syz [ 3513.815217][ T5287] usb 1-1: SerialNumber: syz [ 3513.839894][T14596] sctp: [Deprecated]: syz.1.10367 (pid 14596) Use of int in maxseg socket option. [ 3513.839894][T14596] Use struct sctp_assoc_value instead [ 3513.902966][ T5287] usb 1-1: config 0 descriptor?? [ 3514.173989][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10363'. [ 3514.204409][T14581] fuse: blksize only supported for fuseblk [ 3515.773309][T14608] loop7: detected capacity change from 0 to 16384 [ 3515.827940][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10370'. [ 3515.915690][T14606] macvtap2: entered promiscuous mode [ 3515.949421][T14606] macvtap2: entered allmulticast mode [ 3516.009969][T32589] usb 1-1: USB disconnect, device number 120 [ 3516.268024][ T5287] usb 6-1: USB disconnect, device number 40 [ 3517.757367][T14635] FAULT_INJECTION: forcing a failure. [ 3517.757367][T14635] name failslab, interval 1, probability 0, space 0, times 0 [ 3517.851533][T14635] CPU: 1 UID: 0 PID: 14635 Comm: syz.1.10376 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3517.851567][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3517.851582][T14635] Call Trace: [ 3517.851591][T14635] [ 3517.851601][T14635] dump_stack_lvl+0x189/0x250 [ 3517.851633][T14635] ? __pfx____ratelimit+0x10/0x10 [ 3517.851666][T14635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3517.851688][T14635] ? __pfx__printk+0x10/0x10 [ 3517.851720][T14635] ? __pfx___might_resched+0x10/0x10 [ 3517.851746][T14635] should_fail_ex+0x414/0x560 [ 3517.851775][T14635] ? io_rsrc_data_alloc+0x36/0xb0 [ 3517.851798][T14635] should_failslab+0xa8/0x100 [ 3517.851837][T14635] __kvmalloc_node_noprof+0x161/0x5f0 [ 3517.851859][T14635] ? io_rsrc_data_alloc+0x36/0xb0 [ 3517.851882][T14635] ? trace_contention_end+0x39/0x120 [ 3517.851908][T14635] io_rsrc_data_alloc+0x36/0xb0 [ 3517.851934][T14635] io_alloc_file_tables+0x23/0xa0 [ 3517.851959][T14635] io_sqe_files_register+0x1ee/0x7c0 [ 3517.851988][T14635] ? __pfx_io_sqe_files_register+0x10/0x10 [ 3517.852008][T14635] ? __fget_files+0x2a/0x420 [ 3517.852030][T14635] ? __fget_files+0x3a0/0x420 [ 3517.852052][T14635] ? __fget_files+0x2a/0x420 [ 3517.852079][T14635] ? io_is_uring_fops+0xd/0x50 [ 3517.852104][T14635] __se_sys_io_uring_register+0xbef/0x11b0 [ 3517.852129][T14635] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 3517.852145][T14635] ? ksys_write+0x22a/0x250 [ 3517.852167][T14635] ? __pfx_ksys_write+0x10/0x10 [ 3517.852185][T14635] ? rcu_is_watching+0x15/0xb0 [ 3517.852211][T14635] ? do_syscall_64+0xbe/0x3b0 [ 3517.852231][T14635] do_syscall_64+0xfa/0x3b0 [ 3517.852248][T14635] ? lockdep_hardirqs_on+0x9c/0x150 [ 3517.852276][T14635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3517.852294][T14635] ? clear_bhb_loop+0x60/0xb0 [ 3517.852317][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3517.852334][T14635] RIP: 0033:0x7fbfa518e929 [ 3517.852351][T14635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3517.852379][T14635] RSP: 002b:00007fbfa6093038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 3517.852399][T14635] RAX: ffffffffffffffda RBX: 00007fbfa53b5fa0 RCX: 00007fbfa518e929 [ 3517.852422][T14635] RDX: 0000200000000300 RSI: 0000000000000002 RDI: 0000000000000004 [ 3517.852432][T14635] RBP: 00007fbfa6093090 R08: 0000000000000000 R09: 0000000000000000 [ 3517.852442][T14635] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 3517.852451][T14635] R13: 0000000000000000 R14: 00007fbfa53b5fa0 R15: 00007fbfa54dfa28 [ 3517.852474][T14635] [ 3518.710516][T14639] netlink: 'syz.5.10377': attribute type 15 has an invalid length. [ 3518.762119][T14640] fuse: Unknown parameter 'fd0x0000000000000006' [ 3519.905781][T14658] wireguard0: entered promiscuous mode [ 3519.912824][T14658] wireguard0: entered allmulticast mode [ 3520.054889][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10383'. [ 3520.111543][T14661] macvtap2: entered promiscuous mode [ 3520.146278][T14661] macvtap2: entered allmulticast mode [ 3521.119948][T14668] tipc: Started in network mode [ 3521.130289][T14668] tipc: Node identity 4, cluster identity 4711 [ 3521.140424][T14668] tipc: Node number set to 4 [ 3522.105608][T14684] geneve3: entered promiscuous mode [ 3522.121076][T14684] geneve3: entered allmulticast mode [ 3524.058624][T14690] Timeout policy `syz1' can only be used by L3 protocol number 34978 [ 3524.790880][ T5287] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 3524.956912][ T5287] usb 1-1: config 0 has no interfaces? [ 3524.984442][ T5287] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3525.049027][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3525.060878][ T48] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 3525.090208][ T5287] usb 1-1: Product: syz [ 3525.168061][ T5287] usb 1-1: Manufacturer: syz [ 3525.212709][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 3525.223378][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3525.258694][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3525.298540][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3525.326396][ T48] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3525.340357][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3525.386169][ T48] usb 5-1: config 0 descriptor?? [ 3525.414230][ T5287] usb 1-1: SerialNumber: syz [ 3525.514795][ T5287] usb 1-1: config 0 descriptor?? [ 3525.633626][ T48] microsoft 0003:045E:07DA.0083: unknown main item tag 0x0 [ 3525.650887][ T48] microsoft 0003:045E:07DA.0083: unknown main item tag 0x0 [ 3525.658365][ T48] microsoft 0003:045E:07DA.0083: unknown main item tag 0x0 [ 3525.681399][ T48] microsoft 0003:045E:07DA.0083: unbalanced collection at end of report description [ 3525.926027][ T48] microsoft 0003:045E:07DA.0083: parse failed [ 3525.944712][ T48] microsoft 0003:045E:07DA.0083: probe with driver microsoft failed with error -22 [ 3527.465042][T14720] FAULT_INJECTION: forcing a failure. [ 3527.465042][T14720] name failslab, interval 1, probability 0, space 0, times 0 [ 3527.483653][T14720] CPU: 0 UID: 0 PID: 14720 Comm: syz.1.10399 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3527.483688][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3527.483701][T14720] Call Trace: [ 3527.483711][T14720] [ 3527.483721][T14720] dump_stack_lvl+0x189/0x250 [ 3527.483752][T14720] ? __pfx____ratelimit+0x10/0x10 [ 3527.483785][T14720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3527.483811][T14720] ? __pfx__printk+0x10/0x10 [ 3527.483846][T14720] ? __pfx___might_resched+0x10/0x10 [ 3527.483876][T14720] should_fail_ex+0x414/0x560 [ 3527.483913][T14720] should_failslab+0xa8/0x100 [ 3527.483942][T14720] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3527.483969][T14720] ? __alloc_skb+0x112/0x2d0 [ 3527.483998][T14720] __alloc_skb+0x112/0x2d0 [ 3527.484027][T14720] netlink_sendmsg+0x5c6/0xb30 [ 3527.484063][T14720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3527.484094][T14720] ? aa_sock_msg_perm+0x94/0x160 [ 3527.484128][T14720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3527.484160][T14720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3527.484187][T14720] __sock_sendmsg+0x219/0x270 [ 3527.484224][T14720] ____sys_sendmsg+0x505/0x830 [ 3527.484258][T14720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3527.484295][T14720] ? import_iovec+0x74/0xa0 [ 3527.484324][T14720] ___sys_sendmsg+0x21f/0x2a0 [ 3527.484360][T14720] ? __pfx____sys_sendmsg+0x10/0x10 [ 3527.484425][T14720] ? __fget_files+0x2a/0x420 [ 3527.484453][T14720] ? __fget_files+0x3a0/0x420 [ 3527.484492][T14720] __x64_sys_sendmsg+0x19b/0x260 [ 3527.484523][T14720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3527.484561][T14720] ? __pfx_ksys_write+0x10/0x10 [ 3527.484602][T14720] ? rcu_is_watching+0x15/0xb0 [ 3527.484634][T14720] ? do_syscall_64+0xbe/0x3b0 [ 3527.484660][T14720] do_syscall_64+0xfa/0x3b0 [ 3527.484680][T14720] ? lockdep_hardirqs_on+0x9c/0x150 [ 3527.484714][T14720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3527.484735][T14720] ? clear_bhb_loop+0x60/0xb0 [ 3527.484762][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3527.484784][T14720] RIP: 0033:0x7fbfa518e929 [ 3527.484819][T14720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3527.484846][T14720] RSP: 002b:00007fbfa6093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3527.484871][T14720] RAX: ffffffffffffffda RBX: 00007fbfa53b5fa0 RCX: 00007fbfa518e929 [ 3527.484888][T14720] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3527.484902][T14720] RBP: 00007fbfa6093090 R08: 0000000000000000 R09: 0000000000000000 [ 3527.484916][T14720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3527.484930][T14720] R13: 0000000000000000 R14: 00007fbfa53b5fa0 R15: 00007fbfa54dfa28 [ 3527.484963][T14720] [ 3528.056799][T28594] usb 1-1: USB disconnect, device number 121 [ 3528.182451][T14728] fuse: Unknown parameter 'fd0x0000000000000006' [ 3528.382901][T28594] usb 5-1: USB disconnect, device number 118 [ 3529.114734][ T48] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 3529.137699][T14745] wireguard0: entered promiscuous mode [ 3529.143502][T14745] wireguard0: entered allmulticast mode [ 3529.304610][ T48] usb 1-1: device descriptor read/64, error -71 [ 3529.571020][ T48] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 3529.880940][ T48] usb 1-1: device descriptor read/64, error -71 [ 3530.001288][ T48] usb usb1-port1: attempt power cycle [ 3530.363274][ T48] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 3530.411690][ T48] usb 1-1: device descriptor read/8, error -71 [ 3530.670939][ T48] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 3530.761733][ T48] usb 1-1: device descriptor read/8, error -71 [ 3530.891831][ T48] usb usb1-port1: unable to enumerate USB device [ 3531.976975][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3531.977001][ T30] audit: type=1326 audit(1752053071.345:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.10412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535e58e929 code=0x0 [ 3532.232740][T14777] sctp: [Deprecated]: syz.4.10416 (pid 14777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3532.232740][T14777] Use struct sctp_sack_info instead [ 3533.307281][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10418'. [ 3533.316579][T14794] bridge_slave_1: left allmulticast mode [ 3533.322398][T14794] bridge_slave_1: left promiscuous mode [ 3533.328309][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 3533.419189][T14794] bridge_slave_0: left allmulticast mode [ 3533.434406][T14794] bridge_slave_0: left promiscuous mode [ 3533.452054][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 3534.611285][T28594] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 3534.970842][T29072] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 3535.163709][T29072] usb 1-1: config 4 has an invalid interface number: 156 but max is 0 [ 3535.173453][T29072] usb 1-1: config 4 has no interface number 0 [ 3535.808379][T28594] usb 4-1: config 0 has no interfaces? [ 3535.842841][T29072] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 3535.852589][T29072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3535.861280][T29072] usb 1-1: Product: syz [ 3535.865987][T29072] usb 1-1: Manufacturer: syz [ 3535.871117][T29072] usb 1-1: SerialNumber: syz [ 3535.901313][T29072] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 3535.984066][T28594] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3536.003565][T29072] usb 1-1: setting power ON [ 3536.011697][T28594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3536.019819][T29072] dvb-usb: bulk message failed: -22 (2/0) [ 3536.174351][T29072] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 3536.218287][T29072] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 3536.248878][T29072] dvb_usb_cxusb 1-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 3536.250758][T28594] usb 4-1: Product: syz [ 3536.283752][T29072] usb 1-1: USB disconnect, device number 126 [ 3536.318829][T28594] usb 4-1: Manufacturer: syz [ 3536.360790][T28594] usb 4-1: SerialNumber: syz [ 3536.452083][T28594] usb 4-1: config 0 descriptor?? [ 3538.245291][T29072] usb 4-1: USB disconnect, device number 35 [ 3538.604689][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10434'. [ 3540.710641][T14864] FAULT_INJECTION: forcing a failure. [ 3540.710641][T14864] name failslab, interval 1, probability 0, space 0, times 0 [ 3540.740118][T14864] CPU: 0 UID: 0 PID: 14864 Comm: syz.0.10438 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3540.740154][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3540.740169][T14864] Call Trace: [ 3540.740179][T14864] [ 3540.740190][T14864] dump_stack_lvl+0x189/0x250 [ 3540.740225][T14864] ? __pfx____ratelimit+0x10/0x10 [ 3540.740269][T14864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3540.740298][T14864] ? __pfx__printk+0x10/0x10 [ 3540.740336][T14864] ? __pfx___might_resched+0x10/0x10 [ 3540.740362][T14864] ? fs_reclaim_acquire+0x7d/0x100 [ 3540.740400][T14864] should_fail_ex+0x414/0x560 [ 3540.740438][T14864] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 3540.740461][T14864] should_failslab+0xa8/0x100 [ 3540.740493][T14864] __kvmalloc_node_noprof+0x161/0x5f0 [ 3540.740524][T14864] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 3540.740554][T14864] rhashtable_init_noprof+0x4ee/0xbb0 [ 3540.740586][T14864] rhltable_init_noprof+0x1e/0x60 [ 3540.740624][T14864] nf_tables_newtable+0x68f/0x1890 [ 3540.740677][T14864] nfnetlink_rcv+0x112f/0x2520 [ 3540.740745][T14864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3540.740796][T14864] ? ref_tracker_free+0x63a/0x7d0 [ 3540.740862][T14864] ? __netlink_deliver_tap+0x807/0x850 [ 3540.740900][T14864] ? netlink_deliver_tap+0x2e/0x1b0 [ 3540.740927][T14864] ? netlink_deliver_tap+0x2e/0x1b0 [ 3540.740959][T14864] netlink_unicast+0x758/0x8d0 [ 3540.740996][T14864] netlink_sendmsg+0x805/0xb30 [ 3540.741034][T14864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3540.741066][T14864] ? aa_sock_msg_perm+0x94/0x160 [ 3540.741101][T14864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3540.741153][T14864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3540.741183][T14864] __sock_sendmsg+0x219/0x270 [ 3540.741224][T14864] ____sys_sendmsg+0x505/0x830 [ 3540.741268][T14864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3540.741308][T14864] ? import_iovec+0x74/0xa0 [ 3540.741341][T14864] ___sys_sendmsg+0x21f/0x2a0 [ 3540.741374][T14864] ? __pfx____sys_sendmsg+0x10/0x10 [ 3540.741444][T14864] ? __fget_files+0x2a/0x420 [ 3540.741474][T14864] ? __fget_files+0x3a0/0x420 [ 3540.741517][T14864] __x64_sys_sendmsg+0x19b/0x260 [ 3540.741551][T14864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3540.741593][T14864] ? __pfx_ksys_write+0x10/0x10 [ 3540.741617][T14864] ? rcu_is_watching+0x15/0xb0 [ 3540.741650][T14864] ? do_syscall_64+0xbe/0x3b0 [ 3540.741678][T14864] do_syscall_64+0xfa/0x3b0 [ 3540.741698][T14864] ? lockdep_hardirqs_on+0x9c/0x150 [ 3540.741733][T14864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3540.741755][T14864] ? clear_bhb_loop+0x60/0xb0 [ 3540.741783][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3540.741807][T14864] RIP: 0033:0x7fcab598e929 [ 3540.741828][T14864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3540.741849][T14864] RSP: 002b:00007fcab687c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3540.741874][T14864] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598e929 [ 3540.741892][T14864] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3540.741907][T14864] RBP: 00007fcab687c090 R08: 0000000000000000 R09: 0000000000000000 [ 3540.741921][T14864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3540.741935][T14864] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007fcab5cdfa28 [ 3540.741971][T14864] [ 3541.067562][ C0] vkms_vblank_simulate: vblank timer overrun [ 3543.127982][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10443'. [ 3543.789822][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10446'. [ 3544.580121][T14912] input: syz1 as /devices/virtual/input/input176 [ 3546.774252][T14916] fuse: Unknown parameter '0x0000000000000004' [ 3546.947294][T14918] sctp: [Deprecated]: syz.3.10451 (pid 14918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3546.947294][T14918] Use struct sctp_sack_info instead [ 3547.299354][T14926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10452'. [ 3547.941673][ T5287] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 3548.024805][T14944] netlink: 'syz.0.10460': attribute type 1 has an invalid length. [ 3548.131031][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 3548.147360][ T5287] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3548.160305][T14944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3548.180775][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3548.260245][ T5287] usb 5-1: config 0 descriptor?? [ 3548.312932][T14947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3548.320420][T14947] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3548.334048][T14947] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 3548.392575][T14949] veth3: entered promiscuous mode [ 3548.446202][T14949] bond1: (slave veth3): Enslaving as an active interface with a down link [ 3548.509765][ T5287] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3548.590335][T14944] ip6gretap1: entered allmulticast mode [ 3548.750855][T28594] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3548.900890][T28594] usb 4-1: device descriptor read/64, error -71 [ 3548.989729][ T5287] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3549.043833][ T5287] asix 5-1:0.0: probe with driver asix failed with error -61 [ 3549.140855][T28594] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3549.291275][T28594] usb 4-1: device descriptor read/64, error -71 [ 3549.327313][T14962] fuse: Unknown parameter '0x0000000000000004' [ 3549.360931][T14940] Bluetooth: hci0: command 0x0419 tx timeout [ 3549.411037][T28594] usb usb4-port1: attempt power cycle [ 3549.610352][T14960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3549.617053][T14960] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 3549.626641][T14960] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3549.632928][T14960] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 3549.719251][T14965] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 3549.726303][T20119] tipc: Subscription rejected, illegal request [ 3549.764568][T14960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3549.782479][T28594] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3549.815198][T14960] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 3549.888457][T28594] usb 4-1: device descriptor read/8, error -71 [ 3549.924606][ T6333] Bluetooth: hci1: command 0x0406 tx timeout [ 3550.044620][T14960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3550.059401][T14960] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3550.086788][T14960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3550.094795][T14960] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 3550.110102][T14967] nvme_fabrics: missing parameter 'transport=%s' [ 3550.117953][T14967] nvme_fabrics: missing parameter 'nqn=%s' [ 3550.160883][T28594] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3550.208760][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10466'. [ 3550.231715][T28594] usb 4-1: device descriptor read/8, error -71 [ 3550.366003][T28594] usb usb4-port1: unable to enumerate USB device [ 3550.624229][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10467'. [ 3550.787366][ T5287] usb 5-1: USB disconnect, device number 119 [ 3551.367190][T14990] FAULT_INJECTION: forcing a failure. [ 3551.367190][T14990] name failslab, interval 1, probability 0, space 0, times 0 [ 3551.416776][T14990] CPU: 0 UID: 0 PID: 14990 Comm: syz.5.10470 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3551.416809][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3551.416822][T14990] Call Trace: [ 3551.416831][T14990] [ 3551.416841][T14990] dump_stack_lvl+0x189/0x250 [ 3551.416872][T14990] ? __pfx____ratelimit+0x10/0x10 [ 3551.416905][T14990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3551.416931][T14990] ? __pfx__printk+0x10/0x10 [ 3551.416967][T14990] ? __pfx___might_resched+0x10/0x10 [ 3551.416992][T14990] ? fs_reclaim_acquire+0x7d/0x100 [ 3551.417026][T14990] should_fail_ex+0x414/0x560 [ 3551.417062][T14990] should_failslab+0xa8/0x100 [ 3551.417093][T14990] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3551.417130][T14990] ? __alloc_skb+0x112/0x2d0 [ 3551.417159][T14990] __alloc_skb+0x112/0x2d0 [ 3551.417189][T14990] netlink_ack+0x146/0xa50 [ 3551.417212][T14990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3551.417241][T14990] ? ref_tracker_free+0x63a/0x7d0 [ 3551.417271][T14990] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3551.417300][T14990] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3551.417331][T14990] ? __pfx_ref_tracker_free+0x10/0x10 [ 3551.417375][T14990] netlink_rcv_skb+0x28c/0x470 [ 3551.417402][T14990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3551.417436][T14990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3551.417480][T14990] ? down_read+0x1ad/0x2e0 [ 3551.417505][T14990] genl_rcv+0x28/0x40 [ 3551.417534][T14990] netlink_unicast+0x758/0x8d0 [ 3551.417569][T14990] netlink_sendmsg+0x805/0xb30 [ 3551.417606][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3551.417636][T14990] ? aa_sock_msg_perm+0x94/0x160 [ 3551.417670][T14990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3551.417702][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3551.417749][T14990] __sock_sendmsg+0x219/0x270 [ 3551.417789][T14990] ____sys_sendmsg+0x505/0x830 [ 3551.417830][T14990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3551.417869][T14990] ? import_iovec+0x74/0xa0 [ 3551.417893][T14990] ___sys_sendmsg+0x21f/0x2a0 [ 3551.417915][T14990] ? __pfx____sys_sendmsg+0x10/0x10 [ 3551.417973][T14990] ? __fget_files+0x2a/0x420 [ 3551.417991][T14990] ? __fget_files+0x3a0/0x420 [ 3551.418019][T14990] __x64_sys_sendmsg+0x19b/0x260 [ 3551.418040][T14990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3551.418066][T14990] ? __pfx_ksys_write+0x10/0x10 [ 3551.418081][T14990] ? rcu_is_watching+0x15/0xb0 [ 3551.418110][T14990] ? do_syscall_64+0xbe/0x3b0 [ 3551.418127][T14990] do_syscall_64+0xfa/0x3b0 [ 3551.418140][T14990] ? lockdep_hardirqs_on+0x9c/0x150 [ 3551.418162][T14990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3551.418177][T14990] ? clear_bhb_loop+0x60/0xb0 [ 3551.418194][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3551.418209][T14990] RIP: 0033:0x7f4a3c38e929 [ 3551.418222][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3551.418235][T14990] RSP: 002b:00007f4a3d203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3551.418252][T14990] RAX: ffffffffffffffda RBX: 00007f4a3c5b5fa0 RCX: 00007f4a3c38e929 [ 3551.418263][T14990] RDX: 0000000020000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 3551.418273][T14990] RBP: 00007f4a3d203090 R08: 0000000000000000 R09: 0000000000000000 [ 3551.418282][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3551.418291][T14990] R13: 0000000000000000 R14: 00007f4a3c5b5fa0 R15: 00007f4a3c6dfa28 [ 3551.418313][T14990] [ 3552.022284][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10472'. [ 3552.067326][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10472'. [ 3552.425287][T14996] netlink: 'syz.5.10473': attribute type 29 has an invalid length. [ 3552.498144][T14996] x_tables: duplicate underflow at hook 1 [ 3552.772498][ T4542] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3552.892718][T28594] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 3552.997704][ T4542] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3553.062775][ T4542] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3553.144982][ T4542] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3553.161266][ T4542] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3553.190147][ T4542] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 3553.220835][ T4542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3553.240854][ T48] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 3553.257017][ T4542] usb 6-1: config 0 descriptor?? [ 3553.323660][T28594] usb 4-1: config 0 has no interfaces? [ 3553.338220][T28594] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3553.349400][T28594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3553.364574][T28594] usb 4-1: Product: syz [ 3553.425330][T28594] usb 4-1: Manufacturer: syz [ 3553.430037][T28594] usb 4-1: SerialNumber: syz [ 3553.438119][T28594] usb 4-1: config 0 descriptor?? [ 3553.439508][ T48] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3553.474536][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3553.526984][ T48] usb 5-1: config 0 descriptor?? [ 3553.850120][ T4542] logitech-hidpp-device 0003:046D:C090.0084: unknown main item tag 0x0 [ 3553.876999][ T4542] logitech-hidpp-device 0003:046D:C090.0084: unknown main item tag 0x0 [ 3553.899339][ T4542] logitech-hidpp-device 0003:046D:C090.0084: unknown main item tag 0x0 [ 3553.923775][ T4542] logitech-hidpp-device 0003:046D:C090.0084: unknown main item tag 0x0 [ 3553.950173][ T4542] logitech-hidpp-device 0003:046D:C090.0084: unknown main item tag 0x0 [ 3553.951077][T28594] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3553.990391][ T4542] logitech-hidpp-device 0003:046D:C090.0084: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.5-1/input0 [ 3554.064304][ T4542] usb 6-1: USB disconnect, device number 41 [ 3554.114814][T28594] usb 1-1: Using ep0 maxpacket: 8 [ 3554.133591][T28594] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3554.159229][T28594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3554.222845][T15016] fido_id[15016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 3554.256041][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10479'. [ 3554.269959][T28594] usb 1-1: config 0 descriptor?? [ 3554.310088][T15018] macvtap3: entered promiscuous mode [ 3554.327315][T15018] macvtap3: entered allmulticast mode [ 3554.487692][T28594] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3555.604461][T28594] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3555.615463][ T48] pegasus 5-1:0.0: probe with driver pegasus failed with error -110 [ 3555.688466][T28594] asix 1-1:0.0: probe with driver asix failed with error -61 [ 3556.077378][T28594] usb 5-1: USB disconnect, device number 120 [ 3556.314317][ T48] usb 4-1: USB disconnect, device number 40 [ 3556.990379][T32589] usb 1-1: USB disconnect, device number 127 [ 3558.190853][T32589] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 3558.350815][ T5287] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 3558.390934][T32589] usb 2-1: device descriptor read/64, error -71 [ 3558.500817][ T5287] usb 6-1: Using ep0 maxpacket: 32 [ 3558.622161][ T5287] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 3558.710922][T32589] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 3558.750914][ T5287] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3558.840505][ T5287] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3558.855635][ T5287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3558.914537][ T5287] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3558.924473][T32589] usb 2-1: device descriptor read/64, error -71 [ 3558.945679][ T5287] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3559.007519][T15061] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10488'. [ 3559.017073][ T5287] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3559.048080][T32589] usb usb2-port1: attempt power cycle [ 3559.116051][ T5287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3559.149065][ T5287] usb 6-1: config 0 descriptor?? [ 3559.221460][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10491'. [ 3559.322218][T15069] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.10489' sets config #0 [ 3559.333088][T15069] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.10489' sets config #1 [ 3559.354539][T15065] macvtap10: entered promiscuous mode [ 3559.360133][T15065] macvtap10: entered allmulticast mode [ 3559.374921][T15070] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10490'. [ 3559.602001][T32589] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 3559.643078][ T5287] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3559.746451][T32589] usb 2-1: device descriptor read/8, error -71 [ 3559.755527][ T5287] usb 6-1: USB disconnect, device number 42 [ 3559.828796][ T5287] usblp0: removed [ 3560.614816][T15098] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10501'. [ 3561.073377][T15105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10502'. [ 3561.106628][T15105] macvtap4: entered promiscuous mode [ 3561.130293][T15105] macvtap4: entered allmulticast mode [ 3561.608244][ T30] audit: type=1326 audit(1752053100.985:9995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3561.730880][ T30] audit: type=1326 audit(1752053100.985:9996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3561.890042][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10506'. [ 3561.973979][T15123] FAULT_INJECTION: forcing a failure. [ 3561.973979][T15123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3561.988717][T15120] hsr_slave_0: left promiscuous mode [ 3562.020350][T15120] hsr_slave_1: left promiscuous mode [ 3562.060749][ T30] audit: type=1326 audit(1752053100.985:9997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3562.125158][T15123] CPU: 0 UID: 0 PID: 15123 Comm: syz.5.10507 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3562.125190][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3562.125204][T15123] Call Trace: [ 3562.125213][T15123] [ 3562.125222][T15123] dump_stack_lvl+0x189/0x250 [ 3562.125255][T15123] ? __pfx____ratelimit+0x10/0x10 [ 3562.125289][T15123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3562.125315][T15123] ? __pfx__printk+0x10/0x10 [ 3562.125345][T15123] ? __might_fault+0xb0/0x130 [ 3562.125393][T15123] should_fail_ex+0x414/0x560 [ 3562.125429][T15123] _copy_from_user+0x2d/0xb0 [ 3562.125454][T15123] video_usercopy+0x354/0x14f0 [ 3562.125495][T15123] ? __pfx___video_do_ioctl+0x10/0x10 [ 3562.125521][T15123] ? __pfx_video_usercopy+0x10/0x10 [ 3562.125558][T15123] ? __fget_files+0x2a/0x420 [ 3562.125587][T15123] ? __fget_files+0x2a/0x420 [ 3562.125613][T15123] ? __fget_files+0x3a0/0x420 [ 3562.125643][T15123] v4l2_ioctl+0x18a/0x1e0 [ 3562.125668][T15123] ? __pfx_v4l2_ioctl+0x10/0x10 [ 3562.125692][T15123] __se_sys_ioctl+0xfc/0x170 [ 3562.125715][T15123] do_syscall_64+0xfa/0x3b0 [ 3562.125752][T15123] ? lockdep_hardirqs_on+0x9c/0x150 [ 3562.125785][T15123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3562.125805][T15123] ? clear_bhb_loop+0x60/0xb0 [ 3562.125832][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3562.125863][T15123] RIP: 0033:0x7f4a3c38e929 [ 3562.125880][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3562.125898][T15123] RSP: 002b:00007f4a3d203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3562.125920][T15123] RAX: ffffffffffffffda RBX: 00007f4a3c5b5fa0 RCX: 00007f4a3c38e929 [ 3562.125935][T15123] RDX: 0000200000000000 RSI: 00000000c008561c RDI: 0000000000000003 [ 3562.125949][T15123] RBP: 00007f4a3d203090 R08: 0000000000000000 R09: 0000000000000000 [ 3562.125962][T15123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3562.125974][T15123] R13: 0000000000000000 R14: 00007f4a3c5b5fa0 R15: 00007f4a3c6dfa28 [ 3562.126004][T15123] [ 3562.353096][ T30] audit: type=1326 audit(1752053100.985:9998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3562.667190][ T30] audit: type=1326 audit(1752053100.985:9999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3562.691675][T15131] FAULT_INJECTION: forcing a failure. [ 3562.691675][T15131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3562.735180][ T30] audit: type=1326 audit(1752053101.015:10000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3562.758574][T15131] CPU: 1 UID: 0 PID: 15131 Comm: syz.0.10510 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3562.758604][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3562.758617][T15131] Call Trace: [ 3562.758627][T15131] [ 3562.758635][T15131] dump_stack_lvl+0x189/0x250 [ 3562.758677][T15131] ? __pfx____ratelimit+0x10/0x10 [ 3562.758709][T15131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3562.758752][T15131] ? __pfx__printk+0x10/0x10 [ 3562.758781][T15131] ? __might_fault+0xb0/0x130 [ 3562.758818][T15131] should_fail_ex+0x414/0x560 [ 3562.758855][T15131] _copy_from_user+0x2d/0xb0 [ 3562.758882][T15131] addrconf_set_dstaddr+0xad/0x2d0 [ 3562.758906][T15131] ? do_vfs_ioctl+0xf37/0x1990 [ 3562.758928][T15131] ? __pfx_addrconf_set_dstaddr+0x10/0x10 [ 3562.758950][T15131] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 3562.758993][T15131] inet6_ioctl+0x152/0x280 [ 3562.759015][T15131] ? __pfx_inet6_ioctl+0x10/0x10 [ 3562.759034][T15131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3562.759069][T15131] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 3562.759096][T15131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3562.759126][T15131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3562.759166][T15131] sock_do_ioctl+0xd9/0x300 [ 3562.759202][T15131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3562.759232][T15131] ? __lock_acquire+0xab9/0xd20 [ 3562.759269][T15131] sock_ioctl+0x576/0x790 [ 3562.759312][T15131] ? __pfx_sock_ioctl+0x10/0x10 [ 3562.759342][T15131] ? __fget_files+0x2a/0x420 [ 3562.759367][T15131] ? __fget_files+0x3a0/0x420 [ 3562.759392][T15131] ? __fget_files+0x2a/0x420 [ 3562.759421][T15131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3562.759447][T15131] ? __pfx_sock_ioctl+0x10/0x10 [ 3562.759475][T15131] __se_sys_ioctl+0xfc/0x170 [ 3562.759499][T15131] do_syscall_64+0xfa/0x3b0 [ 3562.759517][T15131] ? lockdep_hardirqs_on+0x9c/0x150 [ 3562.759546][T15131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3562.759565][T15131] ? clear_bhb_loop+0x60/0xb0 [ 3562.759589][T15131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3562.759608][T15131] RIP: 0033:0x7fcab598e929 [ 3562.759626][T15131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3562.759644][T15131] RSP: 002b:00007fcab687c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3562.759665][T15131] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598e929 [ 3562.759680][T15131] RDX: 0000200000000080 RSI: 0000000000008918 RDI: 0000000000000003 [ 3562.759694][T15131] RBP: 00007fcab687c090 R08: 0000000000000000 R09: 0000000000000000 [ 3562.759707][T15131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3562.759719][T15131] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007fcab5cdfa28 [ 3562.759748][T15131] [ 3562.760000][ T30] audit: type=1326 audit(1752053101.015:10001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3563.146094][ T30] audit: type=1326 audit(1752053101.015:10002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3563.169343][ T30] audit: type=1326 audit(1752053101.015:10003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15112 comm="syz.5.10505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3564.242000][T15141] FAULT_INJECTION: forcing a failure. [ 3564.242000][T15141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3564.255661][T15141] CPU: 1 UID: 0 PID: 15141 Comm: syz.0.10514 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3564.255684][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3564.255694][T15141] Call Trace: [ 3564.255700][T15141] [ 3564.255707][T15141] dump_stack_lvl+0x189/0x250 [ 3564.255730][T15141] ? __pfx____ratelimit+0x10/0x10 [ 3564.255754][T15141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3564.255772][T15141] ? __pfx__printk+0x10/0x10 [ 3564.255792][T15141] ? __might_fault+0xb0/0x130 [ 3564.255818][T15141] should_fail_ex+0x414/0x560 [ 3564.255844][T15141] core_sys_select+0x724/0xa20 [ 3564.255871][T15141] ? __pfx_core_sys_select+0x10/0x10 [ 3564.255906][T15141] ? __pfx_set_user_sigmask+0x10/0x10 [ 3564.255924][T15141] ? do_sys_openat2+0x154/0x1c0 [ 3564.255946][T15141] ? kmem_cache_free+0x18f/0x400 [ 3564.255970][T15141] __se_sys_pselect6+0x27a/0x300 [ 3564.255993][T15141] ? __pfx___se_sys_pselect6+0x10/0x10 [ 3564.256012][T15141] ? __pfx_ksys_write+0x10/0x10 [ 3564.256027][T15141] ? rcu_is_watching+0x15/0xb0 [ 3564.256049][T15141] ? __x64_sys_pselect6+0x21/0xf0 [ 3564.256078][T15141] do_syscall_64+0xfa/0x3b0 [ 3564.256111][T15141] ? lockdep_hardirqs_on+0x9c/0x150 [ 3564.256134][T15141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3564.256150][T15141] ? clear_bhb_loop+0x60/0xb0 [ 3564.256168][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3564.256184][T15141] RIP: 0033:0x7fcab598e929 [ 3564.256198][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3564.256212][T15141] RSP: 002b:00007fcab687c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3564.256230][T15141] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598e929 [ 3564.256242][T15141] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000040 [ 3564.256252][T15141] RBP: 00007fcab687c090 R08: 0000000000000000 R09: 0000000000000000 [ 3564.256262][T15141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3564.256271][T15141] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007fcab5cdfa28 [ 3564.256294][T15141] [ 3564.881031][ T5937] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 3564.932876][T15153] sctp: [Deprecated]: syz.0.10518 (pid 15153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3564.932876][T15153] Use struct sctp_sack_info instead [ 3565.191058][ T5937] usb 6-1: config 0 has no interfaces? [ 3565.204699][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10519'. [ 3565.238422][ T5937] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3565.400988][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3565.424783][ T5937] usb 6-1: Product: syz [ 3565.429004][ T5937] usb 6-1: Manufacturer: syz [ 3565.445403][T15155] netlink: 200 bytes leftover after parsing attributes in process `syz.0.10519'. [ 3565.460254][ T5937] usb 6-1: SerialNumber: syz [ 3565.491450][ T5937] usb 6-1: config 0 descriptor?? [ 3565.506396][T15160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10520'. [ 3565.526383][T15159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10520'. [ 3565.842586][ T30] audit: type=1326 audit(1752053105.205:10004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.5.10516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x0 [ 3566.021194][ T5288] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 3566.182154][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 3567.178744][ T5288] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3567.195480][ T5288] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 3567.203685][ T5288] usb 2-1: can't read configurations, error -71 [ 3568.011311][ T5937] usb 6-1: USB disconnect, device number 43 [ 3568.399762][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10529'. [ 3568.406352][T15197] sctp: [Deprecated]: syz.3.10530 (pid 15197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3568.406352][T15197] Use struct sctp_sack_info instead [ 3569.189622][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10531'. [ 3571.373689][T15219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10534'. [ 3573.002256][T15210] hsr_slave_0: left promiscuous mode [ 3573.070865][T15210] hsr_slave_1: left promiscuous mode [ 3573.454398][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.460927][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.478953][T15237] netlink: 'syz.0.10539': attribute type 1 has an invalid length. [ 3573.639150][T15230] syzkaller0: entered promiscuous mode [ 3573.700821][T15230] syzkaller0: entered allmulticast mode [ 3573.917960][T15237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3574.042019][T15240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3574.049206][T15240] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3574.112323][T15240] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 3575.207331][T15243] veth5: entered promiscuous mode [ 3575.272746][T15243] bond2: (slave veth5): Enslaving as an active interface with a down link [ 3575.991641][T15273] netlink: 'syz.0.10545': attribute type 4 has an invalid length. [ 3578.814566][T15274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10546'. [ 3578.839194][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10547'. [ 3579.010940][T15285] netlink: 252 bytes leftover after parsing attributes in process `syz.0.10549'. [ 3579.176835][T15288] fuse: Unknown parameter '0x0000000000000004' [ 3579.204924][T15294] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10553'. [ 3579.797207][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10556'. [ 3579.831695][T29072] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3580.003123][T29072] usb 2-1: Using ep0 maxpacket: 16 [ 3580.012205][T29072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3580.051809][T29072] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 3580.273705][T29072] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3580.291443][T29072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3580.413745][T29072] usb 2-1: Product: syz [ 3580.420827][T29072] usb 2-1: Manufacturer: syz [ 3580.425916][T29072] usb 2-1: SerialNumber: syz [ 3580.446468][T29072] usb 2-1: config 0 descriptor?? [ 3580.549254][T29072] hub 2-1:0.0: bad descriptor, ignoring hub [ 3580.567575][T29072] hub 2-1:0.0: probe with driver hub failed with error -5 [ 3580.605731][T29072] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input178 [ 3581.060276][T29072] usb 2-1: USB disconnect, device number 30 [ 3581.676325][T15323] fuse: Bad value for 'fd' [ 3582.195729][T15336] netlink: 252 bytes leftover after parsing attributes in process `syz.3.10564'. [ 3582.283857][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10566'. [ 3582.699586][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10567'. [ 3583.031524][T28594] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 3583.155521][T15358] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10573'. [ 3583.190803][T28594] usb 1-1: device descriptor read/64, error -71 [ 3583.451015][T28594] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 3583.590852][T28594] usb 1-1: device descriptor read/64, error -71 [ 3583.770480][T28594] usb usb1-port1: attempt power cycle [ 3584.030943][T29072] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3584.116391][T15372] netlink: 252 bytes leftover after parsing attributes in process `syz.5.10578'. [ 3584.150998][T28594] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 3584.190986][T29072] usb 4-1: Using ep0 maxpacket: 8 [ 3584.200465][T29072] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3584.211196][T29072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3584.224954][T29072] usb 4-1: Product: syz [ 3584.233643][T28594] usb 1-1: device descriptor read/8, error -71 [ 3584.233978][T29072] usb 4-1: Manufacturer: syz [ 3584.255395][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10579'. [ 3584.265149][T29072] usb 4-1: SerialNumber: syz [ 3584.302653][T29072] usb 4-1: config 0 descriptor?? [ 3584.365455][T15376] IPv6: addrconf: prefix option has invalid lifetime [ 3584.372282][T15376] IPv6: addrconf: prefix option has invalid lifetime [ 3584.491051][T28594] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 3584.519501][T29072] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3584.576244][T28594] usb 1-1: device descriptor read/8, error -71 [ 3584.607291][T29072] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3584.629991][T29072] usb 4-1: USB disconnect, device number 41 [ 3584.751664][T28594] usb usb1-port1: unable to enumerate USB device [ 3585.100866][T28594] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3585.274030][T28594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3585.287632][T28594] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3585.297099][T28594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3585.307956][T28594] usb 4-1: config 0 descriptor?? [ 3585.316960][T28594] pwc: Askey VC010 type 2 USB webcam detected. [ 3585.719607][T28594] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3585.732897][T28594] pwc: recv_control_msg error -32 req 02 val 2700 [ 3585.750055][T28594] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3585.776139][T28594] pwc: recv_control_msg error -32 req 04 val 1000 [ 3585.796371][T28594] pwc: recv_control_msg error -32 req 04 val 1300 [ 3585.845863][T28594] pwc: recv_control_msg error -32 req 04 val 1400 [ 3585.860582][T28594] pwc: recv_control_msg error -32 req 02 val 2000 [ 3585.904153][T28594] pwc: recv_control_msg error -32 req 02 val 2100 [ 3586.522691][ T3041] tipc: Subscription rejected, illegal request [ 3586.530812][T15407] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 3587.192532][T15419] syzkaller0: entered promiscuous mode [ 3587.207080][T15419] syzkaller0: entered allmulticast mode [ 3587.461302][ T48] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3587.701765][T15432] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10598'. [ 3587.758489][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 3587.767771][ T48] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 3587.808517][ T48] usb 2-1: config 179 has no interface number 0 [ 3587.827202][ T48] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3587.851985][T28594] pwc: recv_control_msg error -71 req 02 val 2500 [ 3587.868496][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10602'. [ 3587.884188][ T48] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3587.886634][T28594] pwc: recv_control_msg error -71 req 02 val 2400 [ 3587.917134][ T48] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3587.936513][T28594] pwc: recv_control_msg error -71 req 02 val 2600 [ 3587.946718][T28594] pwc: recv_control_msg error -71 req 02 val 2900 [ 3587.955392][T28594] pwc: recv_control_msg error -71 req 02 val 2800 [ 3587.965168][T28594] pwc: recv_control_msg error -71 req 04 val 1100 [ 3587.975843][ T48] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3587.988679][T28594] pwc: recv_control_msg error -71 req 04 val 1200 [ 3588.028818][ T48] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3588.032476][T28594] pwc: Registered as video103. [ 3588.126890][ T48] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3588.146445][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3588.177249][T28594] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input179 [ 3588.178842][T15421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3588.285752][T28594] usb 4-1: USB disconnect, device number 42 [ 3588.439177][T15286] udevd[15286]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 3588.464238][ T48] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input180 [ 3588.489338][T15286] udevd[15286]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 3588.706339][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3588.706343][ T5288] usb 2-1: USB disconnect, device number 31 [ 3588.714683][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3589.470072][T15448] syzkaller0: entered promiscuous mode [ 3589.475848][T15448] syzkaller0: entered allmulticast mode [ 3591.605084][T15470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10606'. [ 3592.336940][T15478] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 3592.347949][T12272] tipc: Subscription rejected, illegal request [ 3592.551039][ T5287] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 3592.732669][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3592.772294][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3592.784351][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3592.855409][ T5287] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3592.880101][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3592.905258][ T5287] usb 5-1: config 0 descriptor?? [ 3593.419321][ T5287] plantronics 0003:047F:FFFF.0085: reserved main item tag 0xd [ 3593.457125][ T5287] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3593.689174][ T5287] usb 5-1: USB disconnect, device number 121 [ 3595.836662][T15483] macsec0: entered promiscuous mode [ 3595.842830][T15483] macsec0: entered allmulticast mode [ 3595.879230][T15483] veth1_macvtap: entered allmulticast mode [ 3596.037450][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10615'. [ 3596.487122][T15505] netlink: 'syz.5.10617': attribute type 1 has an invalid length. [ 3596.893929][T15505] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3597.012131][T15508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3597.019219][T15508] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 3597.044624][T15508] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 3597.168849][T15509] veth9: entered promiscuous mode [ 3597.189269][T15509] bond8: (slave veth9): Enslaving as an active interface with a down link [ 3597.790849][ T48] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 3598.520793][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3598.630890][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3598.666602][ T48] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3598.706714][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3598.772162][ T48] usb 6-1: config 0 descriptor?? [ 3599.586186][ T48] hid-led 0003:27B8:01ED.0086: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 3599.708498][ T48] hid-led 0003:27B8:01ED.0086: ThingM blink(1) initialized [ 3599.831056][ T5288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 3600.040966][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 3600.070636][ T5288] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 3600.121372][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3600.129452][ T5288] usb 1-1: Product: syz [ 3600.170823][ T5288] usb 1-1: Manufacturer: syz [ 3600.177212][ T5288] usb 1-1: SerialNumber: syz [ 3600.244126][ T5288] usb 1-1: config 0 descriptor?? [ 3600.298645][ T5288] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 3600.474524][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10631'. [ 3600.519141][T28594] usb 1-1: USB disconnect, device number 6 [ 3600.541456][ T30] audit: type=1326 audit(1752053139.905:10005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3600.634930][ T30] audit: type=1326 audit(1752053139.905:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3600.712288][ T30] audit: type=1326 audit(1752053140.045:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3600.790306][ T30] audit: type=1326 audit(1752053140.045:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3601.039628][ T30] audit: type=1326 audit(1752053140.415:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4a3c38e929 code=0x7ffc0000 [ 3601.216038][ T30] audit: type=1326 audit(1752053140.415:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a3c38e929 code=0x0 [ 3601.281566][ T30] audit: type=1326 audit(1752053140.565:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.5.10624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f4a3c38e929 code=0x0 [ 3601.500852][ T48] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 3601.635889][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10636'. [ 3601.645924][ T48] usb 1-1: device descriptor read/64, error -71 [ 3601.900833][ T48] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 3602.050989][ T48] usb 1-1: device descriptor read/64, error -71 [ 3602.186606][ T48] usb usb1-port1: attempt power cycle [ 3602.192474][T15587] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 3602.430812][ T4542] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3602.486046][ T5287] usb 6-1: USB disconnect, device number 44 [ 3602.561037][ T48] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 3602.621819][ T48] usb 1-1: device descriptor read/8, error -71 [ 3602.637217][ T4542] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3602.648253][ T4542] usb 4-1: can't read configurations, error -61 [ 3602.840776][ T4542] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3602.925511][ T48] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 3603.054070][ T48] usb 1-1: device descriptor read/8, error -71 [ 3603.191847][ T48] usb usb1-port1: unable to enumerate USB device [ 3603.211859][ T4542] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3603.219513][ T4542] usb 4-1: can't read configurations, error -61 [ 3603.264585][ T4542] usb usb4-port1: attempt power cycle [ 3603.530981][T28594] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 3603.590457][ T48] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 3603.659110][ T4542] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3603.710845][T28594] usb 5-1: device descriptor read/64, error -71 [ 3604.024763][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3604.046264][ T48] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 3604.058261][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 3604.081736][ T4542] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3604.089697][ T4542] usb 4-1: can't read configurations, error -61 [ 3604.097306][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3604.140945][T28594] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3604.191043][ T48] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3604.314556][ T4542] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3604.369956][T28594] usb 5-1: device descriptor read/64, error -71 [ 3604.404687][ T4542] usb 4-1: device descriptor read/8, error -71 [ 3604.430077][ T48] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 3604.470574][T15610] fuse: Bad value for 'fd' [ 3604.480812][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3604.500805][ T48] usb 6-1: Product: syz [ 3604.512057][ T48] usb 6-1: Manufacturer: syz [ 3604.524328][ T4542] usb usb4-port1: unable to enumerate USB device [ 3604.524921][T28594] usb usb5-port1: attempt power cycle [ 3604.547712][ T48] usb 6-1: SerialNumber: syz [ 3604.568081][ T48] usb 6-1: config 0 descriptor?? [ 3604.601654][ T48] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 3604.670831][ T48] imon 6-1:0.0: unable to initialize intf0, err -90 [ 3604.677485][ T48] imon:imon_probe: failed to initialize context! [ 3604.721979][ T48] imon 6-1:0.0: unable to register, err -19 [ 3604.821508][ T5288] usb 6-1: USB disconnect, device number 45 [ 3604.920786][T28594] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3604.964170][T28594] usb 5-1: device descriptor read/8, error -71 [ 3605.003753][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10649'. [ 3605.220828][T28594] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3605.263917][T28594] usb 5-1: device descriptor read/8, error -71 [ 3605.371141][ T5288] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3605.381144][T28594] usb usb5-port1: unable to enumerate USB device [ 3605.521737][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10654'. [ 3605.550824][ T5288] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3605.596045][ T5288] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3605.608868][T15641] netlink: 'syz.1.10655': attribute type 1 has an invalid length. [ 3605.616878][T15641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10655'. [ 3605.678775][ T5288] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3605.695094][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3605.734524][T15623] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3605.748334][ T5288] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3605.800817][T15642] netlink: zone id is out of range [ 3605.806702][T15642] netlink: zone id is out of range [ 3605.812937][T15642] netlink: zone id is out of range [ 3605.818202][T15642] netlink: zone id is out of range [ 3605.824404][T15642] netlink: zone id is out of range [ 3605.829809][T15642] netlink: zone id is out of range [ 3605.835744][T15642] netlink: zone id is out of range [ 3605.841199][T28594] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3605.849431][T15642] netlink: zone id is out of range [ 3605.867662][T15642] netlink: zone id is out of range [ 3605.877626][T15642] netlink: zone id is out of range [ 3606.076607][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3606.092695][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3606.130771][T28594] usb 4-1: Using ep0 maxpacket: 32 [ 3606.136829][T28594] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 3606.161486][T28594] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3606.185963][T28594] usb 4-1: can't read configurations, error -61 [ 3606.217447][ T5288] usb 1-1: USB disconnect, device number 11 [ 3606.384316][T28594] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3606.464971][T15652] IPVS: set_ctl: invalid protocol: 137 172.30.0.6:20003 [ 3606.614414][T28594] usb 4-1: Using ep0 maxpacket: 32 [ 3606.667333][T28594] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 3606.699480][T28594] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3606.707862][T28594] usb 4-1: can't read configurations, error -61 [ 3606.724681][T28594] usb usb4-port1: attempt power cycle [ 3606.791140][ T5937] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 3607.017020][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 3607.045458][ T5937] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 3607.056572][ T5937] usb 6-1: config 0 has no interface number 0 [ 3607.074628][ T5937] usb 6-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 3607.094377][ T5937] usb 6-1: config 0 interface 12 has no altsetting 0 [ 3607.113847][ T5937] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 3607.121300][T28594] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3607.135691][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=235 [ 3607.146448][ T5937] usb 6-1: Product: syz [ 3607.153389][ T5937] usb 6-1: Manufacturer: syz [ 3607.158158][ T5937] usb 6-1: SerialNumber: syz [ 3607.174280][ T5937] usb 6-1: config 0 descriptor?? [ 3607.211977][T28594] usb 4-1: Using ep0 maxpacket: 32 [ 3607.219518][T28594] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 3607.231688][T28594] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3607.243172][ T5937] f81534 6-1:0.12: required endpoints missing [ 3607.254985][T28594] usb 4-1: can't read configurations, error -61 [ 3607.750890][T28594] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3607.811736][T28594] usb 4-1: Using ep0 maxpacket: 32 [ 3607.852568][T28594] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 3607.887645][T28594] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3607.895519][T28594] usb 4-1: can't read configurations, error -61 [ 3607.905802][T28594] usb usb4-port1: unable to enumerate USB device [ 3608.797008][T15682] FAULT_INJECTION: forcing a failure. [ 3608.797008][T15682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3608.819100][T15682] CPU: 0 UID: 0 PID: 15682 Comm: syz.0.10666 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3608.819131][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3608.819146][T15682] Call Trace: [ 3608.819155][T15682] [ 3608.819165][T15682] dump_stack_lvl+0x189/0x250 [ 3608.819197][T15682] ? __pfx____ratelimit+0x10/0x10 [ 3608.819231][T15682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3608.819256][T15682] ? __pfx__printk+0x10/0x10 [ 3608.819286][T15682] ? __might_fault+0xb0/0x130 [ 3608.819323][T15682] should_fail_ex+0x414/0x560 [ 3608.819359][T15682] _copy_from_user+0x2d/0xb0 [ 3608.819386][T15682] kvm_dev_ioctl_get_cpuid+0x161/0x7c0 [ 3608.819424][T15682] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 3608.819465][T15682] kvm_arch_dev_ioctl+0x37f/0x8f0 [ 3608.819496][T15682] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 3608.819546][T15682] ? __lock_acquire+0xab9/0xd20 [ 3608.819585][T15682] kvm_dev_ioctl+0x595/0x18e0 [ 3608.819613][T15682] ? __fget_files+0x2a/0x420 [ 3608.819645][T15682] ? __fget_files+0x2a/0x420 [ 3608.819672][T15682] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 3608.819696][T15682] ? __fget_files+0x2a/0x420 [ 3608.819727][T15682] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3608.819755][T15682] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 3608.819781][T15682] __se_sys_ioctl+0xfc/0x170 [ 3608.819806][T15682] do_syscall_64+0xfa/0x3b0 [ 3608.819826][T15682] ? lockdep_hardirqs_on+0x9c/0x150 [ 3608.819858][T15682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3608.819879][T15682] ? clear_bhb_loop+0x60/0xb0 [ 3608.819904][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3608.819924][T15682] RIP: 0033:0x7fcab598e929 [ 3608.819943][T15682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3608.819962][T15682] RSP: 002b:00007fcab687c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3608.819987][T15682] RAX: ffffffffffffffda RBX: 00007fcab5bb5fa0 RCX: 00007fcab598e929 [ 3608.820003][T15682] RDX: 0000200000000000 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 3608.820017][T15682] RBP: 00007fcab687c090 R08: 0000000000000000 R09: 0000000000000000 [ 3608.820030][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3608.820042][T15682] R13: 0000000000000000 R14: 00007fcab5bb5fa0 R15: 00007fcab5cdfa28 [ 3608.820074][T15682] [ 3609.577514][ T30] audit: type=1804 audit(1752053148.895:10012): pid=15701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10672" name="/newroot/106/file1" dev="fuse" ino=1 res=1 errno=0 [ 3609.719769][ T5288] usb 6-1: USB disconnect, device number 46 [ 3609.889673][T15708] FAULT_INJECTION: forcing a failure. [ 3609.889673][T15708] name failslab, interval 1, probability 0, space 0, times 0 [ 3609.915056][T15708] CPU: 0 UID: 0 PID: 15708 Comm: syz.5.10676 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3609.915090][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3609.915104][T15708] Call Trace: [ 3609.915114][T15708] [ 3609.915124][T15708] dump_stack_lvl+0x189/0x250 [ 3609.915156][T15708] ? __pfx____ratelimit+0x10/0x10 [ 3609.915190][T15708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3609.915217][T15708] ? __pfx__printk+0x10/0x10 [ 3609.915261][T15708] should_fail_ex+0x414/0x560 [ 3609.915299][T15708] should_failslab+0xa8/0x100 [ 3609.915329][T15708] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3609.915365][T15708] ? skb_clone+0x212/0x3a0 [ 3609.915416][T15708] skb_clone+0x212/0x3a0 [ 3609.915450][T15708] __netlink_deliver_tap+0x404/0x850 [ 3609.915490][T15708] ? netlink_deliver_tap+0x2e/0x1b0 [ 3609.915518][T15708] netlink_deliver_tap+0x19c/0x1b0 [ 3609.915547][T15708] netlink_sendskb+0x68/0x140 [ 3609.915572][T15708] netlink_rcv_skb+0x28c/0x470 [ 3609.915599][T15708] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 3609.915629][T15708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3609.915680][T15708] ? netlink_deliver_tap+0x2e/0x1b0 [ 3609.915706][T15708] ? netlink_deliver_tap+0x2e/0x1b0 [ 3609.915736][T15708] xfrm_netlink_rcv+0x79/0x90 [ 3609.915770][T15708] netlink_unicast+0x758/0x8d0 [ 3609.915806][T15708] netlink_sendmsg+0x805/0xb30 [ 3609.915844][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3609.915875][T15708] ? aa_sock_msg_perm+0x94/0x160 [ 3609.915910][T15708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3609.915942][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3609.915970][T15708] __sock_sendmsg+0x219/0x270 [ 3609.916026][T15708] ____sys_sendmsg+0x505/0x830 [ 3609.916063][T15708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3609.916115][T15708] ? import_iovec+0x74/0xa0 [ 3609.916145][T15708] ___sys_sendmsg+0x21f/0x2a0 [ 3609.916176][T15708] ? __pfx____sys_sendmsg+0x10/0x10 [ 3609.916245][T15708] ? __fget_files+0x2a/0x420 [ 3609.916273][T15708] ? __fget_files+0x3a0/0x420 [ 3609.916314][T15708] __x64_sys_sendmsg+0x19b/0x260 [ 3609.916346][T15708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3609.916386][T15708] ? __pfx_ksys_write+0x10/0x10 [ 3609.916409][T15708] ? rcu_is_watching+0x15/0xb0 [ 3609.916441][T15708] ? do_syscall_64+0xbe/0x3b0 [ 3609.916483][T15708] do_syscall_64+0xfa/0x3b0 [ 3609.916504][T15708] ? lockdep_hardirqs_on+0x9c/0x150 [ 3609.916538][T15708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3609.916560][T15708] ? clear_bhb_loop+0x60/0xb0 [ 3609.916588][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3609.916610][T15708] RIP: 0033:0x7f4a3c38e929 [ 3609.916631][T15708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3609.916659][T15708] RSP: 002b:00007f4a3d203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3609.916684][T15708] RAX: ffffffffffffffda RBX: 00007f4a3c5b5fa0 RCX: 00007f4a3c38e929 [ 3609.916701][T15708] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 3609.916715][T15708] RBP: 00007f4a3d203090 R08: 0000000000000000 R09: 0000000000000000 [ 3609.916729][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3609.916743][T15708] R13: 0000000000000000 R14: 00007f4a3c5b5fa0 R15: 00007f4a3c6dfa28 [ 3609.916777][T15708] [ 3610.238390][ C0] vkms_vblank_simulate: vblank timer overrun [ 3610.267454][T15706] syzkaller1: entered promiscuous mode [ 3610.288960][T15706] syzkaller1: entered allmulticast mode [ 3611.631490][ T5288] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3611.763600][T15734] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10679'. [ 3612.223094][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3612.306194][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3612.330128][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3612.382150][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3612.467044][ T5288] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3612.499589][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3612.563173][ T5288] usb 1-1: config 0 descriptor?? [ 3612.999302][ T5288] plantronics 0003:047F:FFFF.0087: ignoring exceeding usage max [ 3613.019182][ T5288] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3613.151027][ T5287] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 3613.320847][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 3613.449781][ T5287] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 3613.459429][ T5287] usb 5-1: config 0 has no interface number 0 [ 3613.483239][ T5287] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 3613.506185][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3613.529364][ T5287] usb 5-1: config 0 descriptor?? [ 3613.569264][ T5287] ftdi_sio 5-1:0.130: FTDI USB Serial Device converter detected [ 3613.626469][ T5287] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 3613.764894][ T48] usb 5-1: USB disconnect, device number 126 [ 3613.779528][ T48] ftdi_sio 5-1:0.130: device disconnected [ 3614.519926][T15767] FAULT_INJECTION: forcing a failure. [ 3614.519926][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 3614.565267][T15767] CPU: 0 UID: 0 PID: 15767 Comm: syz.5.10693 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3614.565298][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3614.565311][T15767] Call Trace: [ 3614.565320][T15767] [ 3614.565329][T15767] dump_stack_lvl+0x189/0x250 [ 3614.565368][T15767] ? __pfx____ratelimit+0x10/0x10 [ 3614.565401][T15767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3614.565426][T15767] ? __pfx__printk+0x10/0x10 [ 3614.565460][T15767] ? ref_tracker_alloc+0x318/0x460 [ 3614.565495][T15767] should_fail_ex+0x414/0x560 [ 3614.565529][T15767] should_failslab+0xa8/0x100 [ 3614.565556][T15767] kmem_cache_alloc_noprof+0x73/0x3c0 [ 3614.565577][T15767] ? skb_clone+0x212/0x3a0 [ 3614.565608][T15767] skb_clone+0x212/0x3a0 [ 3614.565639][T15767] __netlink_deliver_tap+0x404/0x850 [ 3614.565675][T15767] ? netlink_deliver_tap+0x2e/0x1b0 [ 3614.565701][T15767] netlink_deliver_tap+0x19c/0x1b0 [ 3614.565728][T15767] netlink_unicast+0x72f/0x8d0 [ 3614.565761][T15767] netlink_sendmsg+0x805/0xb30 [ 3614.565796][T15767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3614.565824][T15767] ? aa_sock_msg_perm+0x94/0x160 [ 3614.565857][T15767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3614.565887][T15767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3614.565913][T15767] __sock_sendmsg+0x219/0x270 [ 3614.565968][T15767] ____sys_sendmsg+0x505/0x830 [ 3614.566003][T15767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3614.566053][T15767] ? import_iovec+0x74/0xa0 [ 3614.566080][T15767] ___sys_sendmsg+0x21f/0x2a0 [ 3614.566110][T15767] ? __pfx____sys_sendmsg+0x10/0x10 [ 3614.566172][T15767] ? __fget_files+0x2a/0x420 [ 3614.566199][T15767] ? __fget_files+0x3a0/0x420 [ 3614.566253][T15767] __x64_sys_sendmsg+0x19b/0x260 [ 3614.566285][T15767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3614.566325][T15767] ? __pfx_ksys_write+0x10/0x10 [ 3614.566352][T15767] ? rcu_is_watching+0x15/0xb0 [ 3614.566381][T15767] ? do_syscall_64+0xbe/0x3b0 [ 3614.566405][T15767] do_syscall_64+0xfa/0x3b0 [ 3614.566424][T15767] ? lockdep_hardirqs_on+0x9c/0x150 [ 3614.566456][T15767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3614.566476][T15767] ? clear_bhb_loop+0x60/0xb0 [ 3614.566501][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3614.566521][T15767] RIP: 0033:0x7f4a3c38e929 [ 3614.566539][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3614.566557][T15767] RSP: 002b:00007f4a3d203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3614.566582][T15767] RAX: ffffffffffffffda RBX: 00007f4a3c5b5fa0 RCX: 00007f4a3c38e929 [ 3614.566597][T15767] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 3614.566611][T15767] RBP: 00007f4a3d203090 R08: 0000000000000000 R09: 0000000000000000 [ 3614.566622][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3614.566634][T15767] R13: 0000000000000000 R14: 00007f4a3c5b5fa0 R15: 00007f4a3c6dfa28 [ 3614.566677][T15767] [ 3614.566790][T15767] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10693'. [ 3614.870903][T15767] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10693'. [ 3614.921566][T15767] netlink: 216 bytes leftover after parsing attributes in process `syz.5.10693'. [ 3614.981776][T15767] net_ratelimit: 25 callbacks suppressed [ 3614.981796][T15767] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 3615.402230][ T5288] usb 1-1: USB disconnect, device number 12 [ 3615.831745][ T5288] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3616.026428][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 3616.096890][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 3616.129918][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 3616.153062][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 3616.172882][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3616.193528][ T5288] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 3616.206140][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3616.262809][ T5288] usb 1-1: Product: syz [ 3616.277255][ T5288] usb 1-1: Manufacturer: syz [ 3616.296467][ T5288] usb 1-1: SerialNumber: syz [ 3616.344225][ T5288] usb 1-1: config 0 descriptor?? [ 3617.221203][T15801] fuse: Bad value for 'fd' [ 3617.745292][T15809] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10701'. [ 3618.465164][T15815] Timeout policy `syz1' can only be used by L3 protocol number 34978 [ 3618.764435][T28594] usb 1-1: USB disconnect, device number 13 [ 3618.876069][T15819] netlink: 'syz.3.10708': attribute type 1 has an invalid length. [ 3618.933326][T15819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3618.997907][T15823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3619.006419][T15823] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 3619.024357][T15823] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 3619.234167][T15819] veth3: entered promiscuous mode [ 3619.253122][T15819] bond1: (slave veth3): Enslaving as an active interface with a down link [ 3619.440919][T28594] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 3619.618315][T28594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3619.638104][T28594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3619.677654][T28594] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3619.722350][T28594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3619.765692][T28594] usb 2-1: config 0 descriptor?? [ 3620.213998][ T30] audit: type=1326 audit(1752053159.585:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.283010][T28594] savu 0003:1E7D:2D5A.0088: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 3620.341170][ T30] audit: type=1326 audit(1752053159.585:10014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.481090][T15855] random: crng reseeded on system resumption [ 3620.497037][ T5287] usb 2-1: USB disconnect, device number 32 [ 3620.568132][ T30] audit: type=1326 audit(1752053159.585:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.685710][T15858] sctp: [Deprecated]: syz.3.10718 (pid 15858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3620.685710][T15858] Use struct sctp_sack_info instead [ 3620.705207][T15850] fido_id[15850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3620.746363][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10716'. [ 3620.914964][ T30] audit: type=1326 audit(1752053159.585:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.939704][ T30] audit: type=1326 audit(1752053159.585:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.962658][ T30] audit: type=1326 audit(1752053159.585:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3620.985845][ T30] audit: type=1326 audit(1752053159.585:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3621.009388][ T30] audit: type=1326 audit(1752053159.585:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3621.067473][ T30] audit: type=1326 audit(1752053159.585:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcab598d290 code=0x7ffc0000 [ 3621.103197][ T30] audit: type=1326 audit(1752053159.585:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.0.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab598e929 code=0x7ffc0000 [ 3621.313977][T15863] QAT: failed to copy from user cfg_data. [ 3621.492580][ T48] IPVS: starting estimator thread 0... [ 3621.500579][T15861] netlink: 'syz.1.10721': attribute type 6 has an invalid length. [ 3621.531826][T15866] FAULT_INJECTION: forcing a failure. [ 3621.531826][T15866] name failslab, interval 1, probability 0, space 0, times 0 [ 3621.560120][T15866] CPU: 1 UID: 0 PID: 15866 Comm: syz.3.10719 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3621.560152][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3621.560165][T15866] Call Trace: [ 3621.560174][T15866] [ 3621.560184][T15866] dump_stack_lvl+0x189/0x250 [ 3621.560217][T15866] ? __pfx____ratelimit+0x10/0x10 [ 3621.560251][T15866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3621.560278][T15866] ? __pfx__printk+0x10/0x10 [ 3621.560314][T15866] ? __pfx___might_resched+0x10/0x10 [ 3621.560340][T15866] ? fs_reclaim_acquire+0x7d/0x100 [ 3621.560387][T15866] should_fail_ex+0x414/0x560 [ 3621.560422][T15866] should_failslab+0xa8/0x100 [ 3621.560460][T15866] __kmalloc_noprof+0xcb/0x4f0 [ 3621.560482][T15866] ? kfree+0x4d/0x440 [ 3621.560502][T15866] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3621.560528][T15866] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3621.560551][T15866] ? tomoyo_domain+0xd9/0x130 [ 3621.560577][T15866] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3621.560606][T15866] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3621.560641][T15866] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3621.560686][T15866] ? __lock_acquire+0xab9/0xd20 [ 3621.560726][T15866] ? __fget_files+0x2a/0x420 [ 3621.560755][T15866] ? __fget_files+0x2a/0x420 [ 3621.560798][T15866] ? __fget_files+0x3a0/0x420 [ 3621.560827][T15866] ? __fget_files+0x2a/0x420 [ 3621.560860][T15866] security_file_ioctl+0xcb/0x2d0 [ 3621.560892][T15866] __se_sys_ioctl+0x47/0x170 [ 3621.560920][T15866] do_syscall_64+0xfa/0x3b0 [ 3621.560941][T15866] ? lockdep_hardirqs_on+0x9c/0x150 [ 3621.560974][T15866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3621.560997][T15866] ? clear_bhb_loop+0x60/0xb0 [ 3621.561023][T15866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3621.561045][T15866] RIP: 0033:0x7f535e58e929 [ 3621.561064][T15866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3621.561082][T15866] RSP: 002b:00007f535f4a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3621.561105][T15866] RAX: ffffffffffffffda RBX: 00007f535e7b6080 RCX: 00007f535e58e929 [ 3621.561120][T15866] RDX: 0000200000000000 RSI: 000000008010743f RDI: 0000000000000003 [ 3621.561135][T15866] RBP: 00007f535f4a4090 R08: 0000000000000000 R09: 0000000000000000 [ 3621.561148][T15866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3621.561160][T15866] R13: 0000000000000001 R14: 00007f535e7b6080 R15: 00007f535e8dfa28 [ 3621.561193][T15866] [ 3621.892434][T15866] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3622.090520][T15874] netlink: 'syz.1.10722': attribute type 1 has an invalid length. [ 3622.182101][T15869] IPVS: using max 37 ests per chain, 88800 per kthread [ 3622.350776][ T4542] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3622.360114][T15874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3622.541177][T15878] veth3: entered promiscuous mode [ 3622.553334][T15878] bond4: (slave veth3): Enslaving as an active interface with a down link [ 3622.602245][ T4542] usb 1-1: Using ep0 maxpacket: 32 [ 3622.747880][ T4542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3622.771424][ T4542] usb 1-1: config 0 has no interfaces? [ 3622.778703][ T4542] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3622.808954][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3622.822623][ T4542] usb 1-1: config 0 descriptor?? [ 3622.995370][T15890] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 3624.528293][T15902] sctp: [Deprecated]: syz.4.10730 (pid 15902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3624.528293][T15902] Use struct sctp_sack_info instead [ 3624.992054][T15907] netlink: 'syz.4.10731': attribute type 1 has an invalid length. [ 3625.605169][T15871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3625.616994][ T48] usb 1-1: USB disconnect, device number 14 [ 3625.947565][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10735'. [ 3626.132430][ T48] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 3626.293031][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3626.314536][ T48] usb 1-1: not running at top speed; connect to a high speed hub [ 3626.346786][ T48] usb 1-1: config 3 has an invalid descriptor of length 51, skipping remainder of the config [ 3626.377240][ T48] usb 1-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 3626.433874][ T48] usb 1-1: New USB device found, idVendor=0e46, idProduct=2000, bcdDevice=e8.8a [ 3626.460903][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3626.492998][ T48] usb 1-1: Product: syz [ 3626.529514][ T48] usb 1-1: Manufacturer: syz [ 3626.549857][ T48] usb 1-1: SerialNumber: syz [ 3626.836121][T15927] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3626.859113][T15928] netlink: 'syz.5.10739': attribute type 1 has an invalid length. [ 3626.889679][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3626.897823][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3626.911084][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3626.918820][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3626.953300][T15928] bond9: entered promiscuous mode [ 3626.958837][T15928] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3626.961824][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3627.033270][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3627.041829][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3627.049516][T15914] binder: 15913:15914 ioctl 4020ae46 7fcab687bf90 returned -22 [ 3627.167147][T15914] binder: 15913:15914 ioctl 4020aed2 200000000000 returned -22 [ 3627.221129][ T4542] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3627.261281][T15935] sctp: [Deprecated]: syz.5.10741 (pid 15935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3627.261281][T15935] Use struct sctp_sack_info instead [ 3627.393002][ T4542] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 3627.401750][ T4542] usb 2-1: config 0 has no interface number 0 [ 3627.409111][ T4542] usb 2-1: config 0 interface 150 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 3627.505536][ T4542] usb 2-1: New USB device found, idVendor=10c4, idProduct=81e7, bcdDevice=8e.4e [ 3627.516578][ T4542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3627.525134][ T4542] usb 2-1: Product: syz [ 3627.529467][ T4542] usb 2-1: Manufacturer: syz [ 3627.538696][ T4542] usb 2-1: SerialNumber: syz [ 3627.680228][ T4542] usb 2-1: config 0 descriptor?? [ 3627.735267][ T48] usb 1-1: USB disconnect, device number 15 [ 3627.763604][ T4542] cp210x 2-1:0.150: cp210x converter detected [ 3629.464957][ T4542] cp210x 2-1:0.150: failed to get vendor val 0x370b size 1: -71 [ 3629.506455][ T4542] cp210x 2-1:0.150: querying part number failed [ 3629.533450][T15953] wireguard0: entered promiscuous mode [ 3629.558182][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10746'. [ 3629.582919][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10746'. [ 3629.598908][ T4542] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3629.647361][T15953] wireguard0: entered allmulticast mode [ 3629.663878][ T4542] usb 2-1: USB disconnect, device number 33 [ 3629.728067][ T4542] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3629.765750][ T4542] cp210x 2-1:0.150: device disconnected [ 3630.330810][ T5937] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3630.359173][ T3041] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 3630.530750][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 3630.552904][ T5937] usb 4-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 3630.572039][ T5937] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3630.606206][ T5937] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3630.629021][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3630.646330][ T5937] usb 4-1: Product: syz [ 3630.652212][ T5937] usb 4-1: Manufacturer: syz [ 3630.671681][ T5937] usb 4-1: SerialNumber: syz [ 3630.696936][ T5937] usb 4-1: config 0 descriptor?? [ 3630.848862][T15973] netlink: 'syz.5.10751': attribute type 6 has an invalid length. [ 3630.886270][T15974] ptrace attach of "./syz-executor exec"[11885] was attempted by "./syz-executor exec"[15974] [ 3631.117355][ T3041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3631.129458][ T3041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3631.140250][ T3041] bond0 (unregistering): Released all slaves [ 3631.318050][ T3041] bond1 (unregistering): Released all slaves [ 3631.334940][ T3041] bond2 (unregistering): Released all slaves [ 3631.596381][ T3041] bond3 (unregistering): Released all slaves [ 3631.625483][ T3041] bond4 (unregistering): Released all slaves [ 3631.648044][ T3041] bond5 (unregistering): Released all slaves [ 3631.721748][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10753'. [ 3631.839315][ T3041] bond6 (unregistering): Released all slaves [ 3631.862860][T15961] bridge_slave_0: left allmulticast mode [ 3631.879554][T15961] bridge_slave_0: left promiscuous mode [ 3631.905506][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 3631.937092][T15961] bridge_slave_1: left allmulticast mode [ 3631.991779][T15961] bridge_slave_1: left promiscuous mode [ 3631.997898][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 3632.038672][T15961] bond0: (slave bond_slave_0): Releasing backup interface [ 3632.072559][T15961] bond0: (slave bond_slave_1): Releasing backup interface [ 3632.153529][T15961] team0: Port device team_slave_0 removed [ 3632.175391][T15961] team0: Port device team_slave_1 removed [ 3632.193315][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3632.200986][T15961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3632.211717][T15961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3632.219506][T15961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3632.260550][T15961] bond1: (slave veth3): Releasing active interface [ 3632.350812][ T3041] tipc: Disabling bearer [ 3632.356506][ T3041] tipc: Left network mode [ 3632.417588][T28594] usb 4-1: USB disconnect, device number 51 [ 3632.489964][ T3041] IPVS: stopping backup sync thread 12062 ... [ 3632.701751][T12272] tipc: Subscription rejected, illegal request [ 3633.354430][T16003] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10758'. [ 3633.382368][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3633.394391][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3633.433404][ T3041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3633.450893][ T3041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3633.761840][ T3041] team0: left allmulticast mode [ 3633.788800][ T3041] team_slave_0: left allmulticast mode [ 3633.803555][ T3041] team_slave_1: left allmulticast mode [ 3633.823504][ T3041] team0: left promiscuous mode [ 3633.844509][ T3041] team_slave_0: left promiscuous mode [ 3633.850349][ T3041] team_slave_1: left promiscuous mode [ 3633.880938][ T3041] veth1_macvtap: left promiscuous mode [ 3633.889752][ T3041] veth0_macvtap: left promiscuous mode [ 3633.910231][ T3041] veth1_vlan: left promiscuous mode [ 3633.930386][ T3041] veth0_vlan: left promiscuous mode [ 3634.020906][ T5287] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3634.185178][ T5287] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3634.213252][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3634.260730][ T5287] usb 2-1: Product: syz [ 3634.278670][ T5287] usb 2-1: Manufacturer: syz [ 3634.300833][ T4542] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3634.304047][ T5287] usb 2-1: SerialNumber: syz [ 3634.362753][ T5287] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3634.430371][T28594] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3634.431126][ T4542] usb 4-1: device descriptor read/64, error -71 [ 3634.742464][ T4542] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3634.892384][ T4542] usb 4-1: device descriptor read/64, error -71 [ 3634.911495][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3634.917883][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3635.002092][ T4542] usb usb4-port1: attempt power cycle [ 3635.025037][T16010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3635.041206][T16010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3635.342033][ T4542] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3635.383732][ T4542] usb 4-1: device descriptor read/8, error -71 [ 3635.530904][T28594] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3635.581885][T28594] ath9k_htc: Failed to initialize the device [ 3635.620918][ T4542] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3635.643634][ T4542] usb 4-1: device descriptor read/8, error -71 [ 3635.696021][T28594] usb 2-1: ath9k_htc: USB layer deinitialized [ 3635.755148][ T4542] usb usb4-port1: unable to enumerate USB device [ 3635.913887][ T5288] usb 2-1: USB disconnect, device number 34 [ 3635.993238][ T3041] team0 (unregistering): Port device team_slave_1 removed [ 3636.105066][ T3041] team0 (unregistering): Port device team_slave_0 removed [ 3636.697122][T16021] fuse: Bad value for 'fd' [ 3636.720295][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 3636.720314][ T30] audit: type=1800 audit(1752053176.085:10047): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10763" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 3636.962575][ T4542] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 3637.151098][ T4542] usb 4-1: device descriptor read/64, error -71 [ 3637.289074][ T30] audit: type=1326 audit(1752053176.665:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.390253][ T30] audit: type=1326 audit(1752053176.695:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.420833][ T4542] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 3637.430187][ T30] audit: type=1326 audit(1752053176.695:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.453794][ T30] audit: type=1326 audit(1752053176.695:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.477078][ T30] audit: type=1326 audit(1752053176.695:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.503095][ T30] audit: type=1326 audit(1752053176.695:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.526208][ T30] audit: type=1326 audit(1752053176.695:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.560847][ T4542] usb 4-1: device descriptor read/64, error -71 [ 3637.601472][ T30] audit: type=1326 audit(1752053176.695:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfa518d290 code=0x7ffc0000 [ 3637.624995][ T30] audit: type=1326 audit(1752053176.695:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.1.10766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa518e929 code=0x7ffc0000 [ 3637.681441][ T4542] usb usb4-port1: attempt power cycle [ 3637.848420][ T3041] IPVS: stop unused estimator thread 0... [ 3638.030499][T16039] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10770'. [ 3638.040793][ T4542] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 3638.105990][ T4542] usb 4-1: device descriptor read/8, error -71 [ 3638.361575][ T4542] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 3638.396238][ T4542] usb 4-1: device descriptor read/8, error -71 [ 3638.422639][T16050] FAULT_INJECTION: forcing a failure. [ 3638.422639][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 3638.469569][T16050] CPU: 0 UID: 0 PID: 16050 Comm: syz.1.10773 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3638.469597][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3638.469609][T16050] Call Trace: [ 3638.469616][T16050] [ 3638.469624][T16050] dump_stack_lvl+0x189/0x250 [ 3638.469650][T16050] ? __pfx____ratelimit+0x10/0x10 [ 3638.469678][T16050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3638.469699][T16050] ? __pfx__printk+0x10/0x10 [ 3638.469728][T16050] ? __pfx___might_resched+0x10/0x10 [ 3638.469749][T16050] ? fs_reclaim_acquire+0x7d/0x100 [ 3638.469778][T16050] should_fail_ex+0x414/0x560 [ 3638.469807][T16050] should_failslab+0xa8/0x100 [ 3638.469832][T16050] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 3638.469854][T16050] ? __alloc_skb+0x112/0x2d0 [ 3638.469881][T16050] __alloc_skb+0x112/0x2d0 [ 3638.469904][T16050] netlink_ack+0x146/0xa50 [ 3638.469923][T16050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3638.469948][T16050] ? ref_tracker_free+0x63a/0x7d0 [ 3638.469973][T16050] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3638.469998][T16050] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3638.470024][T16050] ? __pfx_ref_tracker_free+0x10/0x10 [ 3638.470059][T16050] netlink_rcv_skb+0x28c/0x470 [ 3638.470081][T16050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3638.470109][T16050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3638.470145][T16050] ? down_read+0x1ad/0x2e0 [ 3638.470166][T16050] genl_rcv+0x28/0x40 [ 3638.470190][T16050] netlink_unicast+0x758/0x8d0 [ 3638.470218][T16050] netlink_sendmsg+0x805/0xb30 [ 3638.470247][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3638.470272][T16050] ? aa_sock_msg_perm+0x94/0x160 [ 3638.470299][T16050] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3638.470326][T16050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3638.470348][T16050] __sock_sendmsg+0x219/0x270 [ 3638.470386][T16050] ____sys_sendmsg+0x505/0x830 [ 3638.470414][T16050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3638.470444][T16050] ? import_iovec+0x74/0xa0 [ 3638.470468][T16050] ___sys_sendmsg+0x21f/0x2a0 [ 3638.470493][T16050] ? __pfx____sys_sendmsg+0x10/0x10 [ 3638.470544][T16050] ? __fget_files+0x2a/0x420 [ 3638.470567][T16050] ? __fget_files+0x3a0/0x420 [ 3638.470598][T16050] __x64_sys_sendmsg+0x19b/0x260 [ 3638.470623][T16050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3638.470660][T16050] ? __pfx_ksys_write+0x10/0x10 [ 3638.470680][T16050] ? rcu_is_watching+0x15/0xb0 [ 3638.470705][T16050] ? do_syscall_64+0xbe/0x3b0 [ 3638.470725][T16050] do_syscall_64+0xfa/0x3b0 [ 3638.470741][T16050] ? lockdep_hardirqs_on+0x9c/0x150 [ 3638.470767][T16050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3638.470784][T16050] ? clear_bhb_loop+0x60/0xb0 [ 3638.470805][T16050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3638.470821][T16050] RIP: 0033:0x7fbfa518e929 [ 3638.470838][T16050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3638.470853][T16050] RSP: 002b:00007fbfa6093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3638.470874][T16050] RAX: ffffffffffffffda RBX: 00007fbfa53b5fa0 RCX: 00007fbfa518e929 [ 3638.470886][T16050] RDX: 0000000004000804 RSI: 0000200000000400 RDI: 0000000000000003 [ 3638.470898][T16050] RBP: 00007fbfa6093090 R08: 0000000000000000 R09: 0000000000000000 [ 3638.470909][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3638.470919][T16050] R13: 0000000000000000 R14: 00007fbfa53b5fa0 R15: 00007fbfa54dfa28 [ 3638.470945][T16050] [ 3638.858905][ T4542] usb usb4-port1: unable to enumerate USB device [ 3639.324080][T16053] usb usb8: check_ctrlrecip: process 16053 (syz.1.10775) requesting ep 01 but needs 81 [ 3639.371127][T16053] usb usb8: usbfs: process 16053 (syz.1.10775) did not claim interface 0 before use [ 3639.412112][T16054] fuse: Bad value for 'user_id' [ 3639.417006][T16054] fuse: Bad value for 'user_id' [ 3639.422315][T16053] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3639.663901][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10778'. [ 3640.136663][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10781'. [ 3640.204394][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10781'. [ 3640.253555][T16076] fuse: Unknown parameter '0x0000000000000004' [ 3640.465876][T16080] wireguard0: entered promiscuous mode [ 3640.471565][T16080] wireguard0: entered allmulticast mode [ 3641.062872][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10784'. [ 3641.170949][ T5287] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3641.361141][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 3641.369298][ T5287] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 3641.379137][ T5287] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3641.389542][ T5287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3641.408733][ T5287] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3641.435904][ T5287] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3641.488367][ T5287] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3641.529134][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3641.893335][ T5287] usb 4-1: GET_CAPABILITIES returned 0 [ 3641.899583][ T5287] usbtmc 4-1:16.0: can't read capabilities [ 3641.995907][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10789'. [ 3642.273750][ T4542] usb 4-1: USB disconnect, device number 60 [ 3642.302451][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10790'. [ 3643.850567][T16117] fuse: Unknown parameter '0x0000000000000004' [ 3645.550937][ T5288] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 3645.854245][ T5288] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3645.895390][ T5288] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3645.988424][ T5288] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3646.018836][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3646.561782][ T4542] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 3646.763771][ T4542] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3646.776716][ T4542] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3646.787727][ T4542] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3646.841906][ T4542] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3646.992495][ T4542] usb 5-1: Product: syz [ 3647.020241][ T4542] usb 5-1: Manufacturer: syz [ 3647.042070][ T4542] usb 5-1: SerialNumber: syz [ 3647.088800][ T4542] usb 5-1: config 0 descriptor?? [ 3647.275257][ T4542] usb 5-1: selecting invalid altsetting 0 [ 3648.131121][ T4542] usb 5-1: USB disconnect, device number 127 [ 3648.611923][T16167] tipc: Started in network mode [ 3648.640180][T16167] tipc: Node identity 080211000001, cluster identity 4711 [ 3648.754195][T16167] tipc: Enabled bearer , priority 0 [ 3648.767993][T28594] usb 1-1: USB disconnect, device number 16 [ 3648.860117][T16168] mac80211_hwsim hwsim77 syzkaller0: entered promiscuous mode [ 3648.951248][T16168] mac80211_hwsim hwsim77 syzkaller0: entered allmulticast mode [ 3649.090386][T16168] syzkaller0: mtu less than device minimum [ 3649.725982][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10807'. [ 3649.819103][ T4542] tipc: Node number set to 134418688 [ 3650.909835][T16183] tipc: Enabled bearer , priority 0 [ 3650.957040][T16183] syzkaller0: entered promiscuous mode [ 3650.991537][T16183] syzkaller0: entered allmulticast mode [ 3651.104742][T16184] syzkaller0: mtu less than device minimum [ 3651.683904][T16182] tipc: Resetting bearer [ 3651.942138][T16182] tipc: Disabling bearer [ 3651.961601][ T4542] tipc: Node number set to 2480202440 [ 3652.281860][T16191] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10812'. [ 3652.396210][T16193] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 3653.478117][T16202] netem: incorrect gi model size [ 3653.499889][T16202] netem: change failed [ 3653.514153][T16202] tipc: Enabling of bearer rejected, already enabled [ 3653.563565][T16202] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 3653.575529][T16202] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 3653.584005][T16202] CPU: 1 UID: 0 PID: 16202 Comm: syz.3.10817 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 3653.596213][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3653.606308][T16202] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 3653.612772][T16202] Code: 89 ef e8 50 04 ab f8 4d 89 ef 85 db 74 0d e8 94 81 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 19 04 ab f8 48 8b [ 3653.632441][T16202] RSP: 0018:ffffc9000b8ff0a8 EFLAGS: 00010202 [ 3653.638551][T16202] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 3653.646551][T16202] RDX: ffff88805b2b3c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 3653.654565][T16202] RBP: 0000000000000000 R08: ffff88805b2b3c00 R09: 0000000000000002 [ 3653.662564][T16202] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 3653.670556][T16202] R13: ffff88805b1ee000 R14: dffffc0000000000 R15: ffff88805b1ee000 [ 3653.678573][T16202] FS: 00007f535f4c56c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 3653.687546][T16202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3653.694152][T16202] CR2: 00007fbfa5ee56c0 CR3: 000000004a07a000 CR4: 00000000003526f0 [ 3653.702150][T16202] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 3653.710143][T16202] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3653.718138][T16202] Call Trace: [ 3653.721443][T16202] [ 3653.724393][T16202] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 3653.730142][T16202] fq_codel_change+0xa96/0xef0 [ 3653.734916][T16202] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 3653.740482][T16202] ? __pfx_fq_codel_change+0x10/0x10 [ 3653.745782][T16202] ? __sock_sendmsg+0x219/0x270 [ 3653.750660][T16202] fq_codel_init+0x355/0x960 [ 3653.755288][T16202] ? lockdep_rtnl_is_held+0x26/0x40 [ 3653.760501][T16202] ? __pfx_fq_codel_init+0x10/0x10 [ 3653.765623][T16202] qdisc_create+0x7a9/0xea0 [ 3653.770154][T16202] tc_modify_qdisc+0x1426/0x2010 [ 3653.775099][T16202] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3653.780402][T16202] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 3653.785699][T16202] rtnetlink_rcv_msg+0x77c/0xb70 [ 3653.790657][T16202] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3653.795782][T16202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3653.801272][T16202] ? ref_tracker_free+0x63a/0x7d0 [ 3653.806316][T16202] ? __copy_skb_header+0xa7/0x550 [ 3653.811360][T16202] ? __pfx_ref_tracker_free+0x10/0x10 [ 3653.816750][T16202] ? __skb_clone+0x63/0x7a0 [ 3653.821295][T16202] netlink_rcv_skb+0x205/0x470 [ 3653.826076][T16202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3653.831560][T16202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3653.836864][T16202] ? netlink_deliver_tap+0x2e/0x1b0 [ 3653.842087][T16202] ? netlink_deliver_tap+0x2e/0x1b0 [ 3653.847301][T16202] netlink_unicast+0x758/0x8d0 [ 3653.852080][T16202] netlink_sendmsg+0x805/0xb30 [ 3653.856865][T16202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3653.862167][T16202] ? aa_sock_msg_perm+0x94/0x160 [ 3653.867134][T16202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3653.872464][T16202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3653.877788][T16202] __sock_sendmsg+0x219/0x270 [ 3653.882535][T16202] ____sys_sendmsg+0x505/0x830 [ 3653.887323][T16202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3653.892628][T16202] ? import_iovec+0x74/0xa0 [ 3653.897142][T16202] ___sys_sendmsg+0x21f/0x2a0 [ 3653.901839][T16202] ? __pfx____sys_sendmsg+0x10/0x10 [ 3653.907072][T16202] ? __fget_files+0x2a/0x420 [ 3653.911684][T16202] ? __fget_files+0x3a0/0x420 [ 3653.916385][T16202] __x64_sys_sendmsg+0x19b/0x260 [ 3653.921345][T16202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3653.926830][T16202] ? rcu_is_watching+0x15/0xb0 [ 3653.931611][T16202] ? do_syscall_64+0xbe/0x3b0 [ 3653.936321][T16202] do_syscall_64+0xfa/0x3b0 [ 3653.940854][T16202] ? lockdep_hardirqs_on+0x9c/0x150 [ 3653.946087][T16202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.952182][T16202] ? clear_bhb_loop+0x60/0xb0 [ 3653.956900][T16202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3653.962811][T16202] RIP: 0033:0x7f535e58e929 [ 3653.967265][T16202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3653.986894][T16202] RSP: 002b:00007f535f4c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3653.995332][T16202] RAX: ffffffffffffffda RBX: 00007f535e7b5fa0 RCX: 00007f535e58e929 [ 3654.003329][T16202] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 3654.011322][T16202] RBP: 00007f535e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 3654.019313][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3654.027303][T16202] R13: 0000000000000000 R14: 00007f535e7b5fa0 R15: 00007f535e8dfa28 [ 3654.035309][T16202] [ 3654.038351][T16202] Modules linked in: [ 3654.042448][T16202] ---[ end trace 0000000000000000 ]--- [ 3654.047949][T16202] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480 [ 3654.054459][T16202] Code: 89 ef e8 50 04 ab f8 4d 89 ef 85 db 74 0d e8 94 81 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 19 04 ab f8 48 8b [ 3654.074174][T16202] RSP: 0018:ffffc9000b8ff0a8 EFLAGS: 00010202 [ 3654.080297][T16202] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002 [ 3654.088343][T16202] RDX: ffff88805b2b3c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 3654.096393][T16202] RBP: 0000000000000000 R08: ffff88805b2b3c00 R09: 0000000000000002 [ 3654.104417][T16202] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 3654.112462][T16202] R13: ffff88805b1ee000 R14: dffffc0000000000 R15: ffff88805b1ee000 [ 3654.120466][T16202] FS: 00007f535f4c56c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 3654.129455][T16202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3654.136096][T16202] CR2: 00007fbfa5ee56c0 CR3: 000000004a07a000 CR4: 00000000003526f0 [ 3654.144145][T16202] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 3654.152164][T16202] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3654.160158][T16202] Kernel panic - not syncing: Fatal exception in interrupt [ 3654.167819][T16202] Kernel Offset: disabled [ 3654.172152][T16202] Rebooting in 86400 seconds..