last executing test programs: 20m56.322422545s ago: executing program 1 (id=1848): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x84bfe102d829a5b3, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x1}}}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20m56.097887292s ago: executing program 1 (id=1849): r0 = socket(0x15, 0x5, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x404, 0x6, 0xff00, 0x0, 'syz0\x00', 0xfffffffd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) connect$l2tp6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x10000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000380)={{0x0, 0x6, 0x4b, 0x9}, 'syz1\x00', 0x11}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r5, r4, 0x80000) signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x3924, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x0, 0x1}, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = dup2(r2, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$FUSE(r9, &(0x7f0000000640)={0x2020}, 0x2020) read$nci(r9, &(0x7f0000000140)=""/126, 0x7e) 20m55.401951039s ago: executing program 1 (id=1851): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x3, 0x8, 0x9, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x1, 0xff, 0x40000000}, {0xc, 0x0, 0xfc, 0x3, 0x41, 0x4, 0xfc, 0x2, 0x5, 0xff, 0x0, 0x2, 0x6}, {0x3ff, 0x2, 0x0, 0xfd, 0x4, 0x5, 0xb3, 0x7f, 0xfe, 0x8, 0x80, 0xf6, 0xb82e}], 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0xfffe, 0x0, 'dh\x00', 0x10, 0x9f0, 0x2d}, 0x2c) 20m55.123721414s ago: executing program 1 (id=1852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000674744e0df8323431512dcf9cc10862c5300000000000000b9960b000048b800100000000000000f23c00f21f835010000000f23f8f3"], 0x67}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22880, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 20m54.855356475s ago: executing program 1 (id=1854): r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0xe) fallocate(r0, 0x26, 0x100000004, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffeff, 0x9, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0xfffff000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='{{&\x00', &(0x7f0000000040)='\x00', 0x0) 20m52.250557088s ago: executing program 1 (id=1862): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000140)={0xa, {0xffffffff, 0x5be, 0x1, 0x8}, {0x4, 0xb, 0xe6, 0x6}, {0x8, 0xffffffff}}) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20m36.820452328s ago: executing program 32 (id=1862): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000140)={0xa, {0xffffffff, 0x5be, 0x1, 0x8}, {0x4, 0xb, 0xe6, 0x6}, {0x8, 0xffffffff}}) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 17m20.312023527s ago: executing program 5 (id=2476): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@generic={0x34, "9ded224323d03218b7236bedbfaa342d92884332aea6db1886cf2ffa1fada40480e0ad7344c0238cf63ceabe42ab10675f56dcefe4c09a19322f9490b923e629a33816507bca30d7b292523a24f625ad39eb77d2f626e506a7c0aa2a391de7b5968ce16ee7a8baf932a0f947b51a9e325ca5dd2797209692ec17eb0ec2fe"}, {&(0x7f0000000040)=""/158, 0x9e}, &(0x7f0000000100), 0x14}, 0xa0) syz_emit_ethernet(0x30, &(0x7f0000000200)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4e, 0x8e, 'h\r', "a0f46f2493b1db2ad329448a847cc8896596f65359be"}}}}}, &(0x7f0000000240)={0x0, 0x1, [0xf69, 0x4d5, 0x873, 0x180]}) futex(&(0x7f0000000280)=0x1, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300), 0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0xf, @local, 0x3}, 0x1c) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000400)={0x2, r1}) syz_io_uring_setup(0x20ad, &(0x7f0000000440)={0x0, 0xc069, 0x4000, 0x0, 0x219}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000580)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x30, 0x0, 0x7, 0x2, &(0x7f0000000540), 0x89, 0x0, 0x1, {0x0, r4}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x7, @sliced={0x9, [0x9, 0xf000, 0x3, 0x3, 0x49, 0x2, 0x24, 0xc8, 0x7, 0xfff9, 0xf6a5, 0x8, 0xff, 0x7, 0xf626, 0x3, 0x7fff, 0x9, 0x6, 0x8, 0x2, 0x5a1, 0x9, 0x200, 0x3, 0xfff7, 0x2, 0x7, 0xd, 0x40, 0x8, 0x8000, 0x5, 0x1ff, 0x0, 0x3e05, 0xa97e, 0x4, 0x3, 0xffff, 0xfffc, 0x2, 0x6, 0x8, 0x3, 0x0, 0x6, 0x7fe], 0x55dcfcef}}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000006c0)=""/157) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000780)=0x9, 0x4) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0xb, 0x8010, r1, 0x83000000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x259}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000900)={0xfffffff8, 0x3, 0x8}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r1, 0x3b88, &(0x7f0000000940)={0xc}) socket$inet6(0xa, 0x5, 0xa) statfs(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=""/149) syz_open_dev$vbi(&(0x7f0000000a80), 0x1, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x11, r2, 0x10a09000) r5 = syz_open_dev$sndpcmp(&(0x7f0000000ac0), 0xa20, 0x408001) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000b00)={0x4, "281099275dcaa418f171132fbfc554c45eb00e37a596560aec00d25d8c8daa67cdafdffe559a4957a05ba7ebf6fbc9b94f25ccb4319b01f84774be5b6f9d2226", {0x7fff, 0x4}}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r7 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000c00)={0x0, "c46d2db448390958fa3343049064d34623abbf1bc0373b009e1c4ddd5e39a2260cec66c95db3f3239515ef2ef4a78b43e6bf2446d42808a50dc0efe11d4702df", {0x7, 0x8}}) 17m20.016757605s ago: executing program 5 (id=2478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x0, 0xb}) (async) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0xa6, 0xf18c767}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000004880)) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) socket(0x10, 0x803, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x541b, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) writev(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$poke(0x1, r5, &(0x7f0000000000), 0x80000006) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) (async) r6 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x3, 0x5, 0x5, 0x80}) 17m18.534460422s ago: executing program 5 (id=2486): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpgrp(0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', 0x0]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x8000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x2f, 0x21, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x0, [0x2, 0x2, 0x3, 0x80, 0xd, 0x81, 0x401, 0x4, 0x2]}}, @ra={0x5, 0x2, 0x7400}, @pad1, @generic={0x9, 0xb3, "02ca31e9cd6ccc565023cb5b81e94bf20aed9d41b384f577dcc72b48fbc843b5433d917a526f00997e15b3a4ee9de6321a6ff05b591595de524425086586aedd763218d16a236adaae86308d14ddb05ad4cbc8c573075b3df5f4a72f9f3a76c6c33be99bc316d0da880ac936e79a7cb16faf7d5055193fe8bd96b991272ca9af4bdb8ad4f2464263ef517fb9b317e7e57a0096db0315c68848bd6b51a1cec19d8badf8ff19a7848f75b3684a992ddf3f3aa8fb"}]}, 0x118) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x37, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 17m15.408266866s ago: executing program 5 (id=2498): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x20000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a0725ce9403b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 17m15.062300682s ago: executing program 5 (id=2499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9d00a000600010001020200051f"], 0xf) r2 = syz_io_uring_setup(0x1650, &(0x7f0000000000)={0x0, 0x7b55, 0x4000, 0x1, 0x3cb}, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_setup(0x4090, &(0x7f0000000280)={0x0, 0xcf08, 0x1, 0x3, 0x117, 0x0, r2}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 17m14.767502041s ago: executing program 5 (id=2501): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x1}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17m13.959838618s ago: executing program 33 (id=2501): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x1}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 25.718517193s ago: executing program 6 (id=5387): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="0200ffa40000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/616], 0x310) 25.462490833s ago: executing program 6 (id=5388): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x3a, 0x0, 0x6}, 0x28) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900010076657468000000006e7ef76b0800200001"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x15}, {r5, 0x2200}, {r3, 0x9330}], 0x3, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r6, 0xa0a, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x810) 24.297488418s ago: executing program 6 (id=5393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(0x0, 0x8, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000080)=0x1) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 21.509789776s ago: executing program 6 (id=5394): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@sndrcv={0x30, 0x84, 0x1, {0xa, 0x4, 0x4, 0x6, 0x101, 0xd5c7, 0x72b, 0x3, r3}}], 0x30, 0x4}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68120000", @ANYRES16=r4, @ANYBLOB="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"], 0x1268}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private0, @in6=@private0}}, {{@in=@dev}}}, &(0x7f0000001600)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$unix(r6, &(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 18.350406201s ago: executing program 6 (id=5403): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x3a, 0x0, 0x6}, 0x28) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$link(0x8, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000104000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900010076657468000000006e7ef76b0800200001"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x15}, {r5, 0x2200}, {r3, 0x9330}], 0x3, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r6, 0xa0a, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x810) 17.266760697s ago: executing program 6 (id=5406): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 15.999686414s ago: executing program 34 (id=5406): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 14.605364768s ago: executing program 0 (id=5412): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpgrp(0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', 0x0]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x8000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x2f, 0x21, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x0, [0x2, 0x2, 0x3, 0x80, 0xd, 0x81, 0x401, 0x4, 0x2]}}, @ra={0x5, 0x2, 0x7400}, @pad1, @generic={0x9, 0xb3, "02ca31e9cd6ccc565023cb5b81e94bf20aed9d41b384f577dcc72b48fbc843b5433d917a526f00997e15b3a4ee9de6321a6ff05b591595de524425086586aedd763218d16a236adaae86308d14ddb05ad4cbc8c573075b3df5f4a72f9f3a76c6c33be99bc316d0da880ac936e79a7cb16faf7d5055193fe8bd96b991272ca9af4bdb8ad4f2464263ef517fb9b317e7e57a0096db0315c68848bd6b51a1cec19d8badf8ff19a7848f75b3684a992ddf3f3aa8fb"}]}, 0x118) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00), 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x37, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.493396958s ago: executing program 0 (id=5420): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x16d983, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dvmrp0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x5c, &(0x7f0000000240)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x19, 0x300, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x0, 0x81, 0xfd, 0x1, 0x0, 0x6, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x4, 0xe, r3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d2}, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x13, r1, 0x6cd11000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000060000000a00000006"], 0x50) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0xc0045401, &(0x7f0000001280)) 11.380457315s ago: executing program 0 (id=5421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000700)=@nbd={'/dev/nbd', 0x0}, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, 0x0, 0xc1000004, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xa, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000b"], 0x48) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000010"], 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7.250269851s ago: executing program 4 (id=5425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'macvtap0\x00', @random="8dffff0600"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000017c0)={"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"}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x6000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0xd, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xdddcd000, 0x5}, {0x4000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff4a, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x800b, 0xe, 0x7, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0xa, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0x4, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0xa, 0x4, 0x80, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfc, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001780)="12dfbd", 0x3}], 0x2, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 7.146404189s ago: executing program 0 (id=5426): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r7}, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.835222037s ago: executing program 4 (id=5427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000007e0d000000000000950000000001000002a905d36edcbe9655fa4a777718f34098af599865b7d5f944319eb5c11912ce913d54b1a21b641ab7ba59a852f2c9a06d0b0a3e9b1e80a1d3564e4149e515999be77cb4e321d38a284da9b443a0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYRES8=r7], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="4012d56fb55eed010000706986610b80ab62f5a33038854c00bbabceb2dd51f03b38bcd973cab940e8a4535f6c0b013c2d01583758856ae59d8233afed34177dc6781425bc4c0c527eeb7bdabef792df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.626437414s ago: executing program 2 (id=5428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) listen(r0, 0x3) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="20050100000020dfe3bd5da3deca6b194e33f65b34f088f90a68017ef47019c6ca7b05f2eb420a786f1b54f77110dc9118da5f0de62e3f27b3346994c25376a9a9cc27f9ffb634943aea1f45f3aaa4e4326b9c70ba4bfd062093f1c9cbdd115fa491dcd7b0c14e5fe7ac3d2c9bb9d99330220039249a1914f70469e0082e3d9b4f6035962fa483978f2429abaee4ef04b7b4"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170900100000000000000100e100050007000000000006001b004e21000008000a0000000000060002000000000014001f00feff00000000000000000000000000001400200000000000ffff00000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000300)="80e90e51358ba9645d5b44b2dcaef4d41ab1cb11d15091f68dc91dbb06baa749c768ebf82b2038111109f7d1f2c3ee780e0dd317d588b9cf47fb3ff51c50f9496e44bd84cb1e792f38f274a2a7be50188abf32cb3d89ce6538eda6eb643c11daa68569aec914c5f852d352bcdb0c86a2880ed6e0ac", 0x75}, {&(0x7f0000000380)="22a65e1c3ad0ba19e70fe39af72c3d25055e9912dfe62a434c0c2fd0644d3ea7df9f1a4961c51aa69ad57e153f876038ebff026e6f608cc3f9fd1acb8311ba20daf81894dc90ef76553ee85a8825a2b53eda29e2011a3d", 0x57}, {&(0x7f0000000400)="2a722102fc8273afb1a0e489a038a4a2ea8c263b893b8d8a96586754b2a3f558091bca71f5d455ad964885ed81918b53e2383cb1280cb98a4740d1e6e7c9806bdb133c19e09005f508c5d66f47dbc7b8d54a1a070041208397ace21cadd739aa5ba1f2bab74c64e6298444e46d34fd0706ab666795d563960d26ed4916d34a256461bf3fe58c0cc438489f47c0e9243d6e6f793842c9e6cfb34410abfd2fccce9b427f56c1eb5840b44ca87c955bfec3449b", 0xb2}, {&(0x7f0000000680)="cb38a57c6d2952610c32401806f166d3f2bf6f20516778e5b04178e8d7467f63776237e621f34913d85f3ae2a84320853e2b15ad500aa1bd26fdd089e84680146e4b95d3db1fe116ffc8a80b95926e002abe52cf2d2330709f33d33c943da08d5ef62ef196c645284ef93a92bc2c7910b15119ccb8fd0085d9e49a3806714d69c83c6f4293355b1cca781672b93bbbacf0f85a020a527162a9d074661a546a4d636f4ca2289f9ab4ee", 0xa9}, {&(0x7f0000000040)="a0713e9a750b4e77eae9720d883371634df5a38487300bdeae78af546f8d7d68f5d77bd5cb0cf9811bb51ebf96bc59779aed69a343", 0x35}, {&(0x7f0000000500)="14f7941bda9bf04f40bf0b2fcf93038bbaffb7f5c497b8c7c662b768d3f55012a71097f4a468d1db192423eef1c7779a98be229bd051f0c5e3256a950be43311c70fb79070707343256114e49c6509224a5e0523b95ec8e8abbc0818d8127ed2895d90434634d3b1354da5d83614aab10dabd9fbfe0f", 0x76}, {&(0x7f0000000140)="c1d094", 0x3}], 0x7) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 5.987676352s ago: executing program 3 (id=5429): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0x4, 0x3a, 0x1e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20}}]}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x85) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x49, 0x10, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x5}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x4], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x6, "dd5e8362118719"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x9, "7205f1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xc, 0xfc, 0x1, {0x7, 0x25, 0x1, 0x83, 0xa5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x3, 0x9, 0xff, "17"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9f, 0x8, 0x4, {0x7, 0x25, 0x1, 0x82, 0xcd, 0x3ff}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) unshare(0x6020400) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='+$}\x00', &(0x7f0000000140)='system.posix_acl_access\x00']}, &(0x7f00000002c0)={[&(0x7f0000000240)='.#\x00']}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0x4, 0x3a, 0x1e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20}}]}}]}}]}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x85) (async) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x49, 0x10, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x5}, [@feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x4], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0x6, "dd5e8362118719"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x9, "7205f1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xc, 0xfc, 0x1, {0x7, 0x25, 0x1, 0x83, 0xa5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x10, 0x3, 0x9, 0xff, "17"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9f, 0x8, 0x4, {0x7, 0x25, 0x1, 0x82, 0xcd, 0x3ff}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) (async) unshare(0x6020400) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) readv(r1, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='+$}\x00', &(0x7f0000000140)='system.posix_acl_access\x00']}, &(0x7f00000002c0)={[&(0x7f0000000240)='.#\x00']}) (async) 4.575009181s ago: executing program 3 (id=5430): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100eeff00"/100}}}}}}, 0x0) 4.379382385s ago: executing program 3 (id=5431): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYBLOB="ddfffffdff000000140012000c0001006272696467"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x5, 0x10001, 0x5, 0x0, 0x0, 0xfffffffe, 0x8, 0xe24}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 4) 4.166542599s ago: executing program 0 (id=5432): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) close(0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009058001c0e0300050200000000000000000002d58838068b91000000e559a1433314844f13ed0f8894b37d579e188d680cddf39c2b1b795c5c76e6d3ab253f930fa55f581abd9cec1042e30383a0315bac05a47bd42577c8e4ccf9c5718c833dc241de024a2c2cc3bdaa29e80e40d7dface35015c3851c71475b4af667757d09d1fc0d9287a2766e9c36df8959491cc9525467d4f084bc83c04ef7494561674bb7e3490729ebf50dbd513f07bdb8f173f64437f85b9649b44b9f9bba9429fc0962f290ba6c46b83280221dbfbbb6c9c1f2e5708b893052239ba662e1eb651186"], 0x4e) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r6, 0x89e1, &(0x7f0000001080)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e000000000000000000240003801c0003800c00018008000100000000000c04018008000100000000000400"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.579114305s ago: executing program 3 (id=5433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7c, 0xfffffffffffffffd, 0x1, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000048000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) unshare(0x6020400) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) fadvise64(r3, 0x18, 0x1800, 0x4) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800}) socket$nl_route(0x10, 0x3, 0x0) 3.578562675s ago: executing program 3 (id=5434): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1001}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$unix(r3, &(0x7f0000005a80)=[{{&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000014c0)="ee77ef76a5a8bfcf5bd069e5c45db50bdfe187e0ff4b78fb323f77c7e5b4ebd953fe2540b03d5e5a967e754a1a6f1ca9b8542d9d1ed2ebf330a1b22335d9d3ea6876b30fc659a55d315b0ab6e3d4efbd8162c0675bb6fc638f2f93ba75cdc6e0eb04a9b449be74367e1e3f647dd458e00b568cc8aef87451cf0161445f5da714ea676134c2ba026dd67b5f34bda67958af92876f407e5f867a939e1fde66fe074fd990151ac76404097894a5981bb7ea54f9c6a403cc4fb6957537001237be1156d3842da08e78c7c294d3a508694c14ee4f7179b462b44b09535204e22230b81fe65af698fddd0f76db6b186771d6a4cb34c6fea04f", 0xf6}, {&(0x7f0000001700)="ecc4245178fba089abcebbdf7ee10b78b09d1554a2b043a9312b805391fb820f689ec0e56e9f1938c04caf58cc6fae2f13b07e2562deeb3eb9cb842ec5dbd3033542e155a3483e0a2a42d070dd3cec64df55b6900f78", 0x56}], 0x2, &(0x7f0000001780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="424000001c00060000000000010000000100001a27be1b9a0bd45564", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x84000}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000003ec0)="b55e238027ec4d0ef89eff5f042664403813fe357842cb6355c85b5acc8f8f63f2f20c9e15124634b9eb49388d9a7b2ee13a4a508d7da93798abf4f13b88641f1d6b99f7a18d1f5a4282c612415defd5050a15069130702c5bc71672c11949cab1080f01856134f457081830474e14225627eed4adbe28917149e2facb28896dd9915bdea1f92443c11ba90aaafc0f08be084c1933acb3e6059ecd1a94ed9ab4de9b2078fc651699b83527d7151a73836355fb1982f2354b09c51aa592c699db4b", 0xc1}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="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", 0xff}, {&(0x7f0000006080)="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", 0x1000}, {&(0x7f0000001900)="1fde7fa2ec8b03f39b21a5e2ad44de5f88e473e4f079a3c9a58fc0fd47d8b8021d3a03502174b0b0c12264c95d021425ea307f37d03a466d3dca81e4422dd1", 0x3f}, {&(0x7f00000050c0)="986cc9c2654e1079eebd742df52ebdd1f9707b45dc235e6c0561c5849a505ad7d94d2c2d96200fde04accf6d9dd5d2d0b07dc7b3bcf9a83bbac172746c807cf9d74150d00d69543e84085b1d9283e137ea8b2704f03a79b2bd3a7e99effb2b77af3425401cd324baa2900078fa82d05dae0a3310f23a62bb8c23a2c753d13f48462bc0fc58fb7a53854bfc4785848395f2646d79c77362aa83afbdfefd000cf5c14229f47c98e63469eba2425e797912b4ed9e6127436829ddad", 0xba}, {&(0x7f0000001c00)="206e288ac7c5f199b945b72f9ee4bdd0957356e503dbb54783650f62d1da3e64c8dd9f87a757594b4ce8b4168d92af80b40326bf26498091", 0x38}, {&(0x7f0000005180)="1891b816d8bf70fabf33248ed3eb0f277a986b4620bffd33fd90c0f580017b2920d32233b2334dc9263f5d68364a15944d718916fbbbed308307125e296a041a9810ed510a969c6ef6f44b6e51f0a0698d196f68", 0x54}, {&(0x7f0000005200)="67e033d8593aaa78f4fc0b49ecfcf6e484ce2e1936153ce7be812d9d2a8bf53be711dd88c4dbdde736cbdb237b2bcb4190f5cf67d2866bd5af3db549e5f1faf4555ac6312bc419cec5ea7646024c0bb4a3793abb50798e707728fb3617a0524cf83b906d0ad4a6aca9f8af0a2aa0697147dad803ae871e76bd98e725fcccbbda0a24eb984a7c2d4bc70ca7c70735b393ce0a0f69353c15aa6ade96328ba04ef82c80de545e055f7f08095c3448b3fc91df023f8245ccb5e5261453f4467406", 0xbf}], 0x9, &(0x7f0000005580)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0]}}], 0xa8, 0x20000000}}, {{&(0x7f0000005640)=@file={0x58e666a3ff904b05, './file0\x00'}, 0x6e, &(0x7f00000057c0)=[{&(0x7f00000056c0)="c246ebf9fdb9b0c393f0e5d87e79e220594591dd3dad0bf5c02db5fc58d9913f28764a8666fed84b3c90669d56d0f6f88eb192f80cf65da885f9f6ac94f6c18e2e079b43820da192bcd7b067e4a30fc0296a86ae2df4214514acca21cc18b17d92fc0d1b0576f289a07e554271c02af45f56ec0a9a8c36e7c88b2ca9156388d6220a3b37ae701eb1ab3fd0144dbedfa75f8228c74bafb1f09496934f70782dd690d5ceb64378fff55cc0780ee5f560941f", 0xb1}, {&(0x7f0000005780)="b50dcddd59e6ff13ab22", 0xa}], 0x2, &(0x7f0000005a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r0, r1, 0xffffffffffffffff]}}], 0x78, 0x40000}}], 0x3, 0x801) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={r3, 0x26, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001600)={0x0, @loopback, @multicast2}, &(0x7f0000001640)=0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x294, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x264, 0x2, [@TCA_GRED_LIMIT={0x4, 0x5, 0xb96}, @TCA_GRED_PARMS={0x0, 0x1, {0x1, 0x0, 0xfffffff9, 0x5, 0x3ff, 0x8, 0x148, 0x8, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x3, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x40, 0x5, 0x8, 0x5, 0x1005, 0x7, 0x9, 0x3d, 0xc88a, 0x20, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0xfffffffffffffe93, 0x2, "00559446a386a6437f9b8e0b240a39da782ff0f4d94bc93cf96924149ce0daab8c929f675a06bb6f8c3b5d7c255f2aea9eb0bb26b7813e99f62f1c3a448051f2795358ca7deea38bc54f318137f4e0dcb8638368f710005fefbce63cc4558556cbe799ba955e7350cc37aa572ce87310b2612eeffe4cd38bf8b4318bb73db294a108330d0534ef7679b8365253821be0d2f419761499165762da9eb2b8f7db0cad2b6ae42d340bd631fca1a59b71fdc4ab63aaba4787601311c280d25ba58d6de1257ed22599757a49fd3be6371d096fe15115d8d68f1132dd29eb8a5afb8a709fb88f161127e9806600d3fdce7324c2a0d6c02a1a289afb3ac7ebfeac2f3dd4"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x294}}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0x7}]}}]}}]}, 0x54}}, 0x24040084) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001680)={@multicast2, @multicast2, 0x0}, &(0x7f00000016c0)=0xc) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001e80)=@newqdisc={0xfc, 0x24, 0x100, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xa4, 0x4a, 0x7ff, 0x2, 0x67, 0x7, 0xa}}, {0x18, 0x2, [0x1, 0x4, 0x1, 0xde4, 0x6, 0x8ac, 0x1, 0x2, 0x1, 0x7c]}}, {{0x1c, 0x1, {0x0, 0x7, 0x6, 0x7, 0x2, 0x3, 0xe, 0x2}}, {0x8, 0x2, [0x7, 0xfff8]}}, {{0x1c, 0x1, {0xf7, 0x4, 0x1, 0x7, 0x1, 0x8, 0xa, 0x8}}, {0x14, 0x2, [0x6, 0x9, 0x4, 0x9283, 0x0, 0x2, 0x4, 0x4]}}, {{0x1c, 0x1, {0xa, 0x8, 0x5, 0x9, 0x2, 0x100, 0x20d0000, 0x1}}, {0x6, 0x2, [0x1000]}}, {{0x1c, 0x1, {0x9, 0x7, 0x4, 0x4, 0x0, 0x6, 0x4, 0x3}}, {0xa, 0x2, [0xffff, 0x4, 0x7]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f00000019c0)=ANY=[@ANYBLOB="14020000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf2511000000580001801400020070696d72656700000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000014000200626174616476300000000000000000006800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567300000000000000000000800030001000000140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e3100000000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020064766d727030000000000000000000001400020073797a6b616c6c65723000000000000014000200766c616e31000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="400001801400020076657468315f6d6163767461700000001400020073797a6b616c6c657231000000000000140002006d6163767461703000000000000000004c00018008000300020000000800030002000000140002007866726d300000000000000000000000140002006272696467655f736c6176655f30000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="04000180040001802400018008000100", @ANYRES32=r10, @ANYBLOB="db386050a7082000", @ANYRES32=r11, @ANYBLOB="080003000100000008000100", @ANYRES32=r14, @ANYBLOB="30000180080003000700000008000300020000001400020067656e657665300000000000000000000800030002000000"], 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "4c5293d719408a98"}, 0x28) 3.578206749s ago: executing program 2 (id=5435): r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x88, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r10, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) 3.519177829s ago: executing program 4 (id=5436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'macvtap0\x00', @random="8dffff0600"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000017c0)={"0f907f946fe65036070c6da61d8c0ce3474d7e7d69d3f7e2639d94279e164f397d95725dd59d0a3edcb5a2480973142d6f48d861123f6e794c8b7d50f2ec6ed0c3ba240738d344dc4b399ea2b77c7036ce723b767a6e711c88ee0904f85647d8af7486563176cbb916bf14b9464096e5ce3ea74c207baa26e1374751e18083d956a35372b0b0346a925656ff7d63b91f5f56297b1daf187763684d7fe6e7057897e745b273f59e5e331ff5befeef8c65a8c9327162a2daa114c399948f1759cb7e5bb9307e9f86133a2275403ae2ad45d63ddb449eac86068306ff07faacb2acea9362f5d229d229153901455b2831e52b794661ce223da9870c5851439bc09ef95a8e2b824b1de123715d34647c23fe7b996f8617fa5c988c184287ba5e8f60ccdfe9d6522c091ab13d65bcc8cd04b3f551162c9cf186802cd41b589a5096bc5665e89d1331f6ac58da529239c10f3b1bfba197bc0de3953c86b5368d645543755bf979ef0c52baf3a2e0b4306f58bd9eaf1fac06d4632cc37745a1ddaebde8fbd79359d08abf6f3eafa9a81c1450853e56eb9ca9f1d75b0b39418f8cab72795c6ba4c5cc988ec012717823161d15019e2f9b61cc466b069b7de0211bde4c94279092d24d28c32f6eb69e5435111387a479a16f3cdc3fcc81ba31b375c6ce869191259a41e80aa9d54db64a3508106a4210115d97f9d8501a163ffa6d32c413c9db1c8022e59a28b15e0b50b7566295c20a486c6de09a36cd5c46f714455cc488bc059bbd1a3aaef5dc39d82276472461271b9a63b23fb71fb616feda2437deb311dfefc74276abf5534c538438309d51c0940d519eace54f508fe0cb4e031fcb9b8f117e0c44eba2aa2dd2c299479d91f4d8634de7eeb65788c97ecb7fa9d653100df54a10133fe166c04e14f2dc2d30d339a6983e040bfabbff9b958ae51340635e236fedcd2395a9dbf80cfce240ec97e21e343db416af1b7570795ef6c4762486ccd8980081c6af372762b1c41bd2cedcb34ef84fa467b60780d5b9ea6a2af7eb521f7047d122d8baaf172fe62edcbb0d424a5a5f6d1222cc9c323a81a75188c3855236580b6f10d53ee9fa976cdcfb4d7e22fd86afec4bf39b671121e1f17b3ac60bf4f4d558439c80dac18b32026401a4474320bdb4f4e43385d42331b7c31deec335dc55f120fb72260b096357f973ad1105ebfeb84da48fef44d62af8dfec16596e80d056ac85f45dee4d7eb83a21a70bdba5d003e431e73051fa137c7aca2a8f5601a0f3bc45914bd0339e276a3daae6d0903f13fcbf5b9faaae329218714cd88feb5de54d4e395ca4c5000fe1fb1a3153820aaa4adf685d6140589be611d12b87f7a8b98fd0a5e0d21c947495d08ca13bc4c4f90b5115d51f9abff26627ad3e0d688e54115e2494253e29c116949443f7cc520b6368465b89a842"}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0x6000, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x6000, 0xf, 0x9d, 0xd, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xdddcd000, 0x5}, {0x4000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0xffffffffffffff4a, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x800b, 0xe, 0x7, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0xa, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0x4, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0xa, 0x4, 0x80, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfc, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @private=0xa010101}], 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020073797a5f74756e0000000000000000000500050001000000050003"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) 3.166053164s ago: executing program 4 (id=5437): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) socket$inet6(0x10, 0x5, 0x3) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x5, 0xffff, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xa000, 0x0, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000003480)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file0\x00'}) r9 = getegid() syz_fuse_handle_req(r5, &(0x7f0000000600)="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", 0x2000, &(0x7f0000003600)={&(0x7f0000000200)={0x50, 0x0, 0xc4, {0x7, 0x2b, 0x6, 0x2000, 0x8b, 0x0, 0x8, 0x8, 0x0, 0x0, 0x1, 0x6}}, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0xb38, {0x35e8}}, &(0x7f00000002c0)={0x18, 0x2f, 0x8, {0x9}}, &(0x7f0000000300)={0x18, 0x0, 0xe, {0x4}}, &(0x7f0000000340)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000000380)={0x28, 0xfffffffffffffff5, 0x9, {{0x0, 0x3ff}}}, &(0x7f0000000540)={0x60, 0x0, 0x14, {{0xc20, 0x72f, 0x7, 0x5, 0x10000, 0x6, 0x3ff, 0xffff}}}, &(0x7f0000002600)={0x18, 0xffffffffffffffda, 0x2, {0x5}}, &(0x7f0000002640)={0x1b, 0x0, 0x3, {'syzkaller0\x00'}}, &(0x7f0000002680)={0x20, 0x0, 0xffff, {0x0, 0x1}}, &(0x7f0000002780)={0x78, 0x0, 0x5, {0x9, 0x9, 0x0, {0x6, 0xc, 0x4, 0x1, 0x7fffffffffffffff, 0x9c9, 0x9, 0xd, 0x8000, 0x6000, 0xff, 0x0, 0x0, 0x3, 0x6}}}, &(0x7f0000002940)={0x90, 0xffffffffffffffda, 0x7, {0x5, 0x2, 0x4, 0x0, 0xdd6d, 0xa7, {0x6, 0x4, 0x4, 0x3, 0x8000, 0x1, 0x6, 0x81, 0x1, 0x3000, 0x3, 0x0, 0x0, 0x5452, 0xff}}}, &(0x7f0000002a00)={0x68, 0x0, 0x0, [{0x6, 0x3c, 0x6, 0x8, 'port1\x00'}, {0x1, 0xfffffffffffffffc, 0x6, 0x7, 'port1\x00'}, {0x5, 0x87, 0x0, 0xfffff9ad}]}, &(0x7f0000002f80)={0x330, 0x0, 0x1, [{{0x1, 0x0, 0x2, 0x9, 0x298, 0x3e44, {0x6, 0x4, 0x400, 0x6, 0x7, 0x0, 0xdca, 0x9, 0x8, 0x4000, 0x3, 0x0, 0x0, 0x9, 0x7}}, {0x3, 0x7, 0x6, 0x6, 'port1\x00'}}, {{0x5, 0x2, 0x8, 0x6, 0xb, 0xa793, {0x0, 0xfffffffffffffffd, 0x81, 0xb, 0x8a, 0x200, 0x9, 0x6, 0xdfd5, 0xc000, 0x2, 0x0, 0x0, 0x3ff, 0x401}}, {0x1, 0x8, 0xb, 0x0, 'syzkaller0\x00'}}, {{0x3, 0x3, 0xa, 0x2, 0x9, 0x9c, {0x1, 0x7d6, 0xfffffffffffffff8, 0x7, 0xcb76, 0x9, 0x4, 0x35, 0xffffffc0, 0x4000, 0xffff, 0x0, 0x0, 0x2, 0x8}}, {0x0, 0xfffffffffffffff8, 0x0, 0x200}}, {{0x2, 0x2, 0x8, 0x0, 0x0, 0x3ff, {0x6, 0x7, 0x0, 0x6, 0xa2b, 0x2, 0x10001, 0x1, 0x3, 0x8000, 0x3, 0x0, 0x0, 0x9, 0x27}}, {0x5, 0x8, 0x1, 0x7, '@'}}, {{0x2, 0x0, 0x3c10bbd5, 0x3ff, 0x81, 0x8000, {0x3, 0x8, 0x6, 0x5, 0x1000, 0x5, 0x0, 0x9, 0x9, 0x1000, 0x7, 0x0, 0x0, 0x7ff, 0x8}}, {0x6, 0xffff, 0x1, 0x1, '\x00'}}]}, &(0x7f0000003380)={0xa0, 0x0, 0x2, {{0x0, 0x0, 0x9, 0x644, 0x200, 0x8, {0x3, 0x5, 0x2, 0x7, 0x5, 0x7, 0x8, 0x6, 0x9, 0x8000, 0x80000001, 0x0, r7, 0x8, 0x88bb}}, {0x0, 0x19}}}, &(0x7f0000003440)={0x20, 0xfffffffffffffffe, 0x4, {0x7, 0x4, 0x8, 0xe}}, &(0x7f00000034c0)={0x130, 0x0, 0x6, {0x8000000000000001, 0x7fffffff, 0x0, '\x00', {0x200, 0x4, 0x6, 0x101, r8, r9, 0x61c36fbf40fbf2df, '\x00', 0x2, 0x6, 0x4, 0x3, {0x6, 0x7}, {0xb9b, 0x2}, {0x4, 0x8}, {0x1c0, 0x5}, 0x1, 0x3ff, 0x3, 0x3}}}}) 2.390563495s ago: executing program 0 (id=5438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a100f7f9cbe68e9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004fe075a59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a203006c", 0x57, 0x8890, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c14"], 0x30}}, 0x0) mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000026000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x24}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.151817339s ago: executing program 2 (id=5439): r0 = socket$inet6(0xa, 0x4, 0x3) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0x7, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x8003}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800c080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000180)={0x8, 0x4}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000100)=0x2, 0x4) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'vxcan1\x00', 0x600}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000280)=0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e23, @empty}}) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400000, @loopback}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000040)="13", 0x1}], 0x1}}], 0x1, 0x40000) 1.405922832s ago: executing program 2 (id=5440): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00"/100}}}}}}, 0x0) 1.375388329s ago: executing program 3 (id=5441): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) fsetxattr(r0, &(0x7f0000000400)=@random={'security.', ']\x00'}, &(0x7f0000000440)='syz', 0x3, 0x1) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000000020304050607fd6ea6f40c0d0e0f1011121314ba0b4d149905df9c202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40e2953090b015ee17b76f98f6ef69df92adead314629b16c6e4470843151e6496553712292fc360cca00f99ccb8d4a6ac7ccd4affee544400000000000000"], 0x48, 0xfffffffffffffffa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000001c0)={0x0, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000500)={0x0, 0x1}) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000025e40)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001007f00090008000200ac1414000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000000004000e800800084000000d"], 0x70}}, 0x0) 1.322408416s ago: executing program 4 (id=5442): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 989.361974ms ago: executing program 2 (id=5443): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYBLOB="ddfffffdff000000140012000c0001006272696467"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x5, 0x10001, 0x5, 0x0, 0x0, 0xfffffffe, 0x8, 0xe24}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 5) 597.52918ms ago: executing program 4 (id=5444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x7c, 0xfffffffffffffffd, 0x1, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000060000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) unshare(0x6020400) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) fadvise64(r3, 0x18, 0x1800, 0x4) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800}) socket$nl_route(0x10, 0x3, 0x0) 10.545702ms ago: executing program 2 (id=5445): r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x67, 0x100300) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r4, 0x8000000200000001, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000180)='syzkaller\x00', 0x6f, 0x0, 0x0, 0xf01baddb4dbb721d, 0x0, '\x00', r5, @tracing=0x1a, r3, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x1, 0x32ab1062}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000300)=[r3, r3, r3], 0x0, 0x10, 0x7fff}, 0x94) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r8, 0x540a, 0x1) userfaultfd(0x801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0) 0s ago: executing program 7 (id=5407): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r1, &(0x7f0000000040), 0x0, 0x7, 0x1) kernel console output (not intermixed with test programs): de [ 1859.464901][T27036] bridge7: left promiscuous mode [ 1859.476118][T27036] bridge7: entered allmulticast mode [ 1859.500067][T27036] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 1859.545369][T27036] veth4: entered allmulticast mode [ 1859.570410][T20254] usb 5-1: Using ep0 maxpacket: 8 [ 1859.579086][T20254] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1859.592274][T20254] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1859.615368][T27036] veth5: entered allmulticast mode [ 1859.628410][T20254] usb 5-1: config 0 has no interface number 0 [ 1859.638208][T20254] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1859.657544][T27036] veth6: entered allmulticast mode [ 1859.681485][T27036] veth7: entered allmulticast mode [ 1859.690150][T20254] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1859.706518][T27036] bond2: entered allmulticast mode [ 1859.736069][T20254] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1859.737293][T27036] veth8: entered allmulticast mode [ 1859.758431][T20254] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1859.768841][T20254] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1859.790525][T27036] veth9: entered allmulticast mode [ 1859.795897][T27036] macvlan2: entered allmulticast mode [ 1859.807283][T20254] usb 5-1: Product: syz [ 1859.821754][T20254] usb 5-1: config 0 descriptor?? [ 1859.829380][T27034] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1859.847356][T27036] mac80211_hwsim hwsim50 wlan4: entered allmulticast mode [ 1859.988292][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.024323][T27051] netlink: 'syz.2.5050': attribute type 1 has an invalid length. [ 1860.056430][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.089307][T27051] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1860.120528][T27049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1860.172387][T27047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.182593][T27047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.208148][T27047] syz.0.5051: attempt to access beyond end of device [ 1860.208148][T27047] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1860.326951][T27054] bridge6: entered promiscuous mode [ 1861.088559][T20257] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1861.300499][ T30] audit: type=1326 audit(1754762185.255:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27068 comm="syz.3.5053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd3158ebe9 code=0x0 [ 1861.398687][T20257] usb 3-1: Using ep0 maxpacket: 32 [ 1861.424451][T20257] usb 3-1: too many configurations: 29, using maximum allowed: 8 [ 1861.532371][T27072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1861.542045][T27072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1861.672204][T20257] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1861.683785][T20257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.694992][T20257] usb 3-1: Product: syz [ 1861.701113][T20257] usb 3-1: Manufacturer: syz [ 1861.706429][T20257] usb 3-1: SerialNumber: syz [ 1861.716875][T20257] usb 3-1: config 0 descriptor?? [ 1861.729311][T27076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.740887][T27076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.773120][T20257] hub 3-1:0.0: Invalid hub with more than one config or interface [ 1861.781551][T20257] hub 3-1:0.0: probe with driver hub failed with error -22 [ 1861.794823][T20257] gspca_main: 0ac8:c301 too many config [ 1861.834631][T20254] usb 5-1: USB disconnect, device number 7 [ 1862.826041][T27093] netlink: 'syz.0.5056': attribute type 12 has an invalid length. [ 1862.844050][T27093] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1862.900791][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5059'. [ 1863.018238][T27094] openvswitch: netlink: Unknown nsh attribute 0 [ 1863.035811][T27094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1863.155594][T27092] netlink: 'syz.4.5057': attribute type 12 has an invalid length. [ 1863.188714][T27092] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1864.223683][T20250] usb 3-1: USB disconnect, device number 106 [ 1864.306011][T27100] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 1864.312654][T27100] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1864.409012][T27100] vhci_hcd vhci_hcd.0: Device attached [ 1864.445397][T27103] vhci_hcd: connection closed [ 1864.446883][ T3529] vhci_hcd: stop threads [ 1864.456998][ T3529] vhci_hcd: release socket [ 1864.475062][ T3529] vhci_hcd: disconnect device [ 1865.130343][T27111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'. [ 1865.224721][T27111] netlink: 'syz.0.5062': attribute type 1 has an invalid length. [ 1865.438482][T20257] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1865.584735][T27122] batadv0: entered promiscuous mode [ 1865.593596][T27122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1865.603931][T27122] batadv0: left promiscuous mode [ 1865.632616][T27123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.648592][T20257] usb 7-1: Using ep0 maxpacket: 32 [ 1865.691913][T20257] usb 7-1: config 0 has no interfaces? [ 1865.707532][T27123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1865.724365][T20257] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1865.736964][T20257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.869901][T20257] usb 7-1: Product: syz [ 1865.874148][T20257] usb 7-1: Manufacturer: syz [ 1865.930477][T20257] usb 7-1: SerialNumber: syz [ 1865.938877][T20257] usb 7-1: config 0 descriptor?? [ 1866.139770][T27130] bridge1: entered promiscuous mode [ 1866.338613][T20250] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1866.366538][T20254] usb 7-1: USB disconnect, device number 99 [ 1866.574219][T20250] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.591340][T20250] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1866.616238][T20250] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1866.632784][T27134] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:17955 [ 1866.766836][T20250] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1866.779147][T20250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.841505][T20250] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1866.851021][T20250] usb 5-1: invalid MIDI out EP 0 [ 1867.022961][T20250] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1868.688540][T11415] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1868.889244][T11415] usb 7-1: Using ep0 maxpacket: 32 [ 1868.939851][T11415] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1869.028762][T11415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.068399][T11415] usb 7-1: Product: syz [ 1869.078790][T11415] usb 7-1: Manufacturer: syz [ 1869.104139][T11415] usb 7-1: SerialNumber: syz [ 1869.142390][T11415] usb 7-1: config 0 descriptor?? [ 1869.275075][T20250] usb 5-1: USB disconnect, device number 8 [ 1869.586174][T11415] airspy 7-1:0.0: Board ID: 00 [ 1869.609265][T11415] airspy 7-1:0.0: Firmware version: [ 1869.738542][T20250] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1869.922549][T20250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.953255][T20250] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1869.973701][T20250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.009333][T20250] usb 5-1: config 0 descriptor?? [ 1870.033604][T20250] pwc: Askey VC010 type 2 USB webcam detected. [ 1870.172022][T27159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.209373][T27159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.272760][T27159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.326882][T27159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.433461][T20250] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1870.450637][T20250] pwc: recv_control_msg error -32 req 02 val 2700 [ 1870.471734][T20250] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1870.527655][T20250] pwc: recv_control_msg error -32 req 04 val 1000 [ 1870.536828][T20250] pwc: recv_control_msg error -32 req 04 val 1300 [ 1870.554241][T20250] pwc: recv_control_msg error -32 req 04 val 1400 [ 1870.568636][T20250] pwc: recv_control_msg error -32 req 02 val 2000 [ 1870.582469][T20250] pwc: recv_control_msg error -32 req 02 val 2100 [ 1870.594682][T20250] pwc: recv_control_msg error -32 req 04 val 1500 [ 1870.609419][T20250] pwc: recv_control_msg error -32 req 02 val 2500 [ 1870.616871][T20250] pwc: recv_control_msg error -32 req 02 val 2400 [ 1870.632670][T27149] cgroup: fork rejected by pids controller in /syz6 [ 1870.734745][T11415] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 1870.757323][T11415] airspy 7-1:0.0: Registered as swradio24 [ 1870.772726][T11415] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1870.806740][T11415] usb 7-1: USB disconnect, device number 100 [ 1870.830763][T20250] pwc: recv_control_msg error -71 req 02 val 2900 [ 1870.844924][T20250] pwc: recv_control_msg error -71 req 02 val 2800 [ 1870.882843][T20250] pwc: recv_control_msg error -71 req 04 val 1100 [ 1870.920805][T20250] pwc: recv_control_msg error -71 req 04 val 1200 [ 1870.944305][T20250] pwc: Registered as video103. [ 1870.963518][T20250] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input122 [ 1871.001362][T20250] usb 5-1: USB disconnect, device number 9 [ 1871.116550][T27172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.194174][T27172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.224085][T27172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.419228][T27172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.532615][T27184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1872.575665][T27184] bridge_slave_1: left promiscuous mode [ 1872.582049][T27184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.753022][T27184] : left promiscuous mode [ 1872.774017][T27184] bridge0: port 1() entered disabled state [ 1873.448581][T11415] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1873.873189][T27184] bond0: (slave bridge0): Releasing backup interface [ 1873.969834][T27184] vlan2 (unregistering): left promiscuous mode [ 1873.976048][T27184] bridge0 (unregistering): left promiscuous mode [ 1873.994155][T27184] bridge1: port 1(vlan2) entered disabled state [ 1874.005123][T11415] usb 3-1: Using ep0 maxpacket: 32 [ 1874.056439][T11415] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1874.093655][T11415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.120016][T11415] usb 3-1: Product: syz [ 1874.137561][T11415] usb 3-1: Manufacturer: syz [ 1874.154826][T11415] usb 3-1: SerialNumber: syz [ 1874.203570][T11415] usb 3-1: config 0 descriptor?? [ 1875.367510][T11415] airspy 3-1:0.0: Board ID: 00 [ 1875.374712][T11415] airspy 3-1:0.0: Firmware version: [ 1875.442013][ T1094] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1875.502684][T27192] bridge8: entered promiscuous mode [ 1875.589301][T27206] input: syz0 as /devices/virtual/input/input123 [ 1876.408490][T11415] airspy 3-1:0.0: Registered as swradio24 [ 1876.414286][T11415] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1876.582753][T20257] usb 3-1: USB disconnect, device number 107 [ 1876.610160][T19394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1876.632253][T19394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1876.641086][T19394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1876.653862][T19394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1876.662017][T19394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1876.710367][T16221] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1876.728939][T16221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1876.756829][T16221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1876.793895][T16221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1876.817905][T16221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1876.917824][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1876.932976][ T1094] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1876.954126][T27212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1877.043505][T27219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.088737][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.122453][ T1094] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1877.268462][T20257] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1877.303615][ T1094] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1877.448782][T20257] usb 5-1: Using ep0 maxpacket: 32 [ 1877.458909][T20257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1877.472885][T20257] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1877.482641][T20257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.491108][T20257] usb 5-1: Product: syz [ 1877.499168][T20257] usb 5-1: Manufacturer: syz [ 1877.506161][T20257] usb 5-1: SerialNumber: syz [ 1877.524565][T20257] usb 5-1: config 0 descriptor?? [ 1877.551406][T20257] usb 5-1: no audio or video endpoints found [ 1877.740772][T11415] usb 5-1: USB disconnect, device number 10 [ 1878.106890][T27213] chnl_net:caif_netlink_parms(): no params data found [ 1878.164817][ T1094] bridge_slave_1: left promiscuous mode [ 1878.173403][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.195021][ T1094] bridge_slave_0: left promiscuous mode [ 1878.223899][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.872464][ T30] audit: type=1326 audit(1754762202.815:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27243 comm="syz.4.5099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f444c98ebe9 code=0x0 [ 1878.911020][T16221] Bluetooth: hci4: command tx timeout [ 1879.040382][T27249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.050037][T27249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.113084][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5099'. [ 1880.083042][ T1094] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1880.708733][T27283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.742564][T27283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.849702][T27287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 1880.988868][T16221] Bluetooth: hci4: command tx timeout [ 1881.749032][T27289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5104'. [ 1881.961501][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.983618][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.993782][ T1094] bond0 (unregistering): Released all slaves [ 1882.012036][ T1094] bond1 (unregistering): Released all slaves [ 1882.084786][T27250] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1882.123007][T27272] bridge2: entered promiscuous mode [ 1882.356985][ T1094] : left promiscuous mode [ 1882.511129][ T1094] tipc: Left network mode [ 1882.528662][T20254] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1882.599100][T27299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1882.680059][T20254] usb 5-1: Using ep0 maxpacket: 16 [ 1882.726883][T20254] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1882.803070][T20254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1882.854200][T20254] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1882.875396][T20254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.885014][T20254] usb 5-1: Product: syz [ 1882.900481][T20254] usb 5-1: Manufacturer: syz [ 1882.905334][T20254] usb 5-1: SerialNumber: syz [ 1882.991281][T20254] usb 5-1: config 0 descriptor?? [ 1883.028223][T20254] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1883.045679][T27213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.081032][T16221] Bluetooth: hci4: command tx timeout [ 1883.108514][T20254] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1883.121106][T27213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.129265][T27213] bridge_slave_0: entered allmulticast mode [ 1883.140264][T27213] bridge_slave_0: entered promiscuous mode [ 1883.153808][T27213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.161732][T27213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.169454][T27213] bridge_slave_1: entered allmulticast mode [ 1883.177793][T27213] bridge_slave_1: entered promiscuous mode [ 1883.603541][T20254] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1883.613613][T27213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1883.629294][T20254] em28xx 5-1:0.0: Config register raw data: 0x41 [ 1883.696199][T27213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1883.820383][T11415] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1883.918944][T27213] team0: Port device team_slave_0 added [ 1883.968636][T11415] usb 4-1: device descriptor read/64, error -71 [ 1883.968765][T27213] team0: Port device team_slave_1 added [ 1884.104785][T27213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.116188][T27213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.145878][T27213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1884.208027][T27213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1884.212114][T11415] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1884.217425][T27213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.254716][T27213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1884.351921][ T1094] hsr_slave_0: left promiscuous mode [ 1884.359017][T11415] usb 4-1: device descriptor read/64, error -71 [ 1884.367396][ T1094] hsr_slave_1: left promiscuous mode [ 1884.374103][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1884.383164][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1884.480140][T11415] usb usb4-port1: attempt power cycle [ 1884.832303][T11415] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1884.885539][T11415] usb 4-1: device descriptor read/8, error -71 [ 1884.906306][T27338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.920452][T27338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.961271][T27338] netlink: 'syz.0.5113': attribute type 4 has an invalid length. [ 1885.035927][T27338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1885.142000][T16221] Bluetooth: hci4: command tx timeout [ 1885.209941][T11415] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1885.249625][T11415] usb 4-1: device descriptor read/8, error -71 [ 1885.360620][T11415] usb usb4-port1: unable to enumerate USB device [ 1885.622152][T20256] usb 5-1: USB disconnect, device number 11 [ 1885.635904][T20256] em28xx 5-1:0.0: Disconnecting em28xx [ 1885.669557][T20256] em28xx 5-1:0.0: Freeing device [ 1885.829079][T20257] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1886.016717][T20257] usb 3-1: Using ep0 maxpacket: 16 [ 1886.028655][T20257] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1886.039507][T20257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.128819][T20257] usb 3-1: Product: syz [ 1886.133406][T20257] usb 3-1: Manufacturer: syz [ 1886.146411][T20257] usb 3-1: SerialNumber: syz [ 1886.158017][T20257] usb 3-1: config 0 descriptor?? [ 1886.168778][T20257] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1887.429715][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 1887.506594][T20257] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1887.706956][T27346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.722594][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 1887.751525][T27346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.792481][T11415] usb 3-1: USB disconnect, device number 108 [ 1887.802257][T11415] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1887.816116][T11415] ssu100 3-1:0.0: device disconnected [ 1890.683447][T27364] bridge6: entered promiscuous mode [ 1890.909615][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5122'. [ 1890.938038][T27213] hsr_slave_0: entered promiscuous mode [ 1890.967608][T27213] hsr_slave_1: entered promiscuous mode [ 1891.789986][ T1094] IPVS: stop unused estimator thread 0... [ 1892.216602][T27401] FAULT_INJECTION: forcing a failure. [ 1892.216602][T27401] name failslab, interval 1, probability 0, space 0, times 0 [ 1892.268501][T27401] CPU: 0 UID: 0 PID: 27401 Comm: syz.3.5127 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1892.268532][T27401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1892.268545][T27401] Call Trace: [ 1892.268554][T27401] [ 1892.268565][T27401] dump_stack_lvl+0x189/0x250 [ 1892.268593][T27401] ? __pfx____ratelimit+0x10/0x10 [ 1892.268620][T27401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1892.268645][T27401] ? __pfx__printk+0x10/0x10 [ 1892.268679][T27401] ? __pfx___might_resched+0x10/0x10 [ 1892.268705][T27401] should_fail_ex+0x414/0x560 [ 1892.268738][T27401] should_failslab+0xa8/0x100 [ 1892.268769][T27401] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1892.268798][T27401] ? __alloc_skb+0x112/0x2d0 [ 1892.268834][T27401] __alloc_skb+0x112/0x2d0 [ 1892.268866][T27401] netlink_sendmsg+0x5c6/0xb30 [ 1892.268906][T27401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1892.268939][T27401] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1892.268973][T27401] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1892.268995][T27401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1892.269026][T27401] __sock_sendmsg+0x219/0x270 [ 1892.269055][T27401] ____sys_sendmsg+0x505/0x830 [ 1892.269082][T27401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1892.269114][T27401] ? import_iovec+0x74/0xa0 [ 1892.269143][T27401] ___sys_sendmsg+0x21f/0x2a0 [ 1892.269167][T27401] ? __pfx____sys_sendmsg+0x10/0x10 [ 1892.269246][T27401] ? __fget_files+0x2a/0x420 [ 1892.269274][T27401] ? __fget_files+0x3a0/0x420 [ 1892.269315][T27401] __x64_sys_sendmsg+0x19b/0x260 [ 1892.269340][T27401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1892.269382][T27401] ? __pfx_ksys_write+0x10/0x10 [ 1892.269406][T27401] ? rcu_is_watching+0x15/0xb0 [ 1892.269440][T27401] ? do_syscall_64+0xbe/0x3b0 [ 1892.269473][T27401] do_syscall_64+0xfa/0x3b0 [ 1892.269498][T27401] ? lockdep_hardirqs_on+0x9c/0x150 [ 1892.269524][T27401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.269544][T27401] ? clear_bhb_loop+0x60/0xb0 [ 1892.269570][T27401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1892.269589][T27401] RIP: 0033:0x7fdd3158ebe9 [ 1892.269609][T27401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1892.269627][T27401] RSP: 002b:00007fdd32456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1892.269651][T27401] RAX: ffffffffffffffda RBX: 00007fdd317b5fa0 RCX: 00007fdd3158ebe9 [ 1892.269666][T27401] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1892.269679][T27401] RBP: 00007fdd32456090 R08: 0000000000000000 R09: 0000000000000000 [ 1892.269693][T27401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1892.269705][T27401] R13: 00007fdd317b6038 R14: 00007fdd317b5fa0 R15: 00007fdd318dfa28 [ 1892.269739][T27401] [ 1892.675598][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5129'. [ 1892.793604][T27414] netlink: 'syz.0.5129': attribute type 1 has an invalid length. [ 1893.588912][T27425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.597974][T27425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.932207][T27213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1893.974046][T27213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1894.019542][T27213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1894.087700][T27213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1894.350601][T27440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1894.466626][T27444] tipc: New replicast peer: 255.255.255.255 [ 1894.477567][T27444] tipc: Enabled bearer , priority 10 [ 1894.603129][T27213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.727692][T27213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1894.773906][T14058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.781283][T14058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1894.841979][T16897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.849437][T16897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.867941][T27461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.895068][T27461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.115239][T27464] bridge9: entered promiscuous mode [ 1895.190780][T27213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.598512][T20262] tipc: Node number set to 118840895 [ 1895.847344][T27213] veth0_vlan: entered promiscuous mode [ 1897.014905][T27479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5142'. [ 1897.039329][T27213] veth1_vlan: entered promiscuous mode [ 1897.477052][T27213] veth0_macvtap: entered promiscuous mode [ 1897.565186][T27213] veth1_macvtap: entered promiscuous mode [ 1897.766448][T27213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1897.868096][T27213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1898.088185][T14058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.116856][T14058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.146708][T14058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.226398][T14058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1898.812010][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.858385][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1898.901522][T27507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.931092][T27507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.299693][T14058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.348361][T14058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.535327][T27516] tipc: Enabled bearer , priority 0 [ 1899.589605][T27516] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 1899.720119][T27516] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 1899.740960][T27516] tipc: Resetting bearer [ 1899.829028][ T1094] tipc: Resetting bearer [ 1899.928662][T11415] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1899.981534][T20253] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1900.081107][T11415] usb 4-1: Using ep0 maxpacket: 32 [ 1900.089878][T11415] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1900.101669][T11415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.116693][T11415] usb 4-1: config 0 descriptor?? [ 1900.138747][T20253] usb 3-1: Using ep0 maxpacket: 8 [ 1900.144678][T11415] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1900.153125][T20253] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1900.162850][T20253] usb 3-1: config 0 has no interface number 0 [ 1900.170378][T20253] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1900.183921][T20253] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1900.216521][T20253] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1900.244975][T20253] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1900.277324][T20253] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1900.298431][T20253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.320175][T20253] usb 3-1: config 0 descriptor?? [ 1900.348820][T20253] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1900.535005][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1900.571449][T27516] tipc: Resetting bearer [ 1900.601301][T11415] gspca_nw80x: reg_r err -71 [ 1900.616343][T11415] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1900.622184][T20257] usb 3-1: USB disconnect, device number 109 [ 1900.652515][T20257] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1900.663267][T11415] usb 4-1: USB disconnect, device number 122 [ 1900.997702][T27559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5155'. [ 1901.090979][T27562] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1901.110796][T27562] netlink: 4100 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1902.218957][T27590] netlink: 'syz.3.5160': attribute type 13 has an invalid length. [ 1902.903846][T27590] tipc: Resetting bearer [ 1902.943507][T27598] FAULT_INJECTION: forcing a failure. [ 1902.943507][T27598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1903.031739][T27598] CPU: 1 UID: 0 PID: 27598 Comm: syz.4.5163 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1903.031774][T27598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1903.031787][T27598] Call Trace: [ 1903.031797][T27598] [ 1903.031807][T27598] dump_stack_lvl+0x189/0x250 [ 1903.031839][T27598] ? __pfx____ratelimit+0x10/0x10 [ 1903.031868][T27598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1903.031893][T27598] ? __pfx__printk+0x10/0x10 [ 1903.031921][T27598] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 1903.031955][T27598] ? filemap_get_entry+0xad/0x2f0 [ 1903.031974][T27598] ? filemap_get_entry+0xad/0x2f0 [ 1903.031997][T27598] should_fail_ex+0x414/0x560 [ 1903.032030][T27598] copy_folio_from_iter_atomic+0x311/0x18f0 [ 1903.032054][T27598] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 1903.032100][T27598] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1903.032121][T27598] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1903.032154][T27598] ? shmem_write_begin+0x15f/0x2b0 [ 1903.032188][T27598] generic_perform_write+0x5df/0x900 [ 1903.032229][T27598] ? __pfx_generic_perform_write+0x10/0x10 [ 1903.032250][T27598] ? down_write+0x162/0x1f0 [ 1903.032288][T27598] ? file_update_time+0x2da/0x490 [ 1903.032317][T27598] shmem_file_write_iter+0xf8/0x120 [ 1903.032360][T27598] vfs_write+0x548/0xa90 [ 1903.032393][T27598] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1903.032423][T27598] ? __pfx_vfs_write+0x10/0x10 [ 1903.032464][T27598] ? __fget_files+0x2a/0x420 [ 1903.032505][T27598] ksys_write+0x145/0x250 [ 1903.032534][T27598] ? __pfx_ksys_write+0x10/0x10 [ 1903.032557][T27598] ? rcu_is_watching+0x15/0xb0 [ 1903.032585][T27598] ? do_syscall_64+0xbe/0x3b0 [ 1903.032618][T27598] do_syscall_64+0xfa/0x3b0 [ 1903.032643][T27598] ? lockdep_hardirqs_on+0x9c/0x150 [ 1903.032667][T27598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.032685][T27598] ? clear_bhb_loop+0x60/0xb0 [ 1903.032710][T27598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.032729][T27598] RIP: 0033:0x7f444c98ebe9 [ 1903.032749][T27598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.032773][T27598] RSP: 002b:00007f444d769038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1903.032796][T27598] RAX: ffffffffffffffda RBX: 00007f444cbb5fa0 RCX: 00007f444c98ebe9 [ 1903.032811][T27598] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1903.032824][T27598] RBP: 00007f444d769090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.032836][T27598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.032848][T27598] R13: 00007f444cbb6038 R14: 00007f444cbb5fa0 R15: 00007f444ccdfa28 [ 1903.032882][T27598] [ 1903.688756][T20253] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1903.776601][T27609] usb usb8: usbfs: process 27609 (syz.2.5165) did not claim interface 0 before use [ 1903.848465][T20253] usb 7-1: Using ep0 maxpacket: 16 [ 1903.852978][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1903.877316][T20253] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1903.926865][T20253] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1903.946643][T20253] usb 7-1: can't read configurations, error -71 [ 1904.109285][T11415] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1904.403050][T11415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.447889][T11415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.497948][T11415] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1904.529850][T11415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.587072][T11415] usb 3-1: config 0 descriptor?? [ 1904.906362][T27640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.939134][T27640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1905.032996][T11415] hid-led 0003:04D8:F372.0047: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 1905.182497][T27632] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1905.253575][T11415] hid-led 0003:04D8:F372.0047: Greynut Luxafor initialized [ 1905.268517][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1905.487202][T27650] netlink: 'syz.3.5173': attribute type 1 has an invalid length. [ 1905.497295][T27650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1905.956639][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5175'. [ 1906.446156][T27663] FAULT_INJECTION: forcing a failure. [ 1906.446156][T27663] name failslab, interval 1, probability 0, space 0, times 0 [ 1906.465142][T27663] CPU: 1 UID: 0 PID: 27663 Comm: syz.3.5177 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1906.465175][T27663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1906.465184][T27663] Call Trace: [ 1906.465190][T27663] [ 1906.465197][T27663] dump_stack_lvl+0x189/0x250 [ 1906.465218][T27663] ? __pfx____ratelimit+0x10/0x10 [ 1906.465235][T27663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.465250][T27663] ? __pfx__printk+0x10/0x10 [ 1906.465271][T27663] ? __pfx___might_resched+0x10/0x10 [ 1906.465286][T27663] should_fail_ex+0x414/0x560 [ 1906.465306][T27663] should_failslab+0xa8/0x100 [ 1906.465328][T27663] __kmalloc_noprof+0xcb/0x4f0 [ 1906.465344][T27663] ? inotify_handle_inode_event+0x19b/0x5f0 [ 1906.465361][T27663] inotify_handle_inode_event+0x19b/0x5f0 [ 1906.465380][T27663] fsnotify+0x1814/0x1a80 [ 1906.465409][T27663] ? fsnotify+0x735/0x1a80 [ 1906.465426][T27663] ? __pfx_fsnotify+0x10/0x10 [ 1906.465447][T27663] ? generic_perform_write+0x809/0x900 [ 1906.465467][T27663] __fsnotify_parent+0x470/0x540 [ 1906.465489][T27663] ? __pfx___fsnotify_parent+0x10/0x10 [ 1906.465514][T27663] ? shmem_file_write_iter+0x103/0x120 [ 1906.465532][T27663] vfs_write+0x7d6/0xa90 [ 1906.465552][T27663] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1906.465569][T27663] ? __pfx_vfs_write+0x10/0x10 [ 1906.465592][T27663] ? __fget_files+0x2a/0x420 [ 1906.465615][T27663] ksys_write+0x145/0x250 [ 1906.465633][T27663] ? __pfx_ksys_write+0x10/0x10 [ 1906.465646][T27663] ? rcu_is_watching+0x15/0xb0 [ 1906.465663][T27663] ? do_syscall_64+0xbe/0x3b0 [ 1906.465695][T27663] do_syscall_64+0xfa/0x3b0 [ 1906.465720][T27663] ? lockdep_hardirqs_on+0x9c/0x150 [ 1906.465740][T27663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.465752][T27663] ? clear_bhb_loop+0x60/0xb0 [ 1906.465767][T27663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.465779][T27663] RIP: 0033:0x7fdd3158ebe9 [ 1906.465792][T27663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1906.465802][T27663] RSP: 002b:00007fdd32456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1906.465817][T27663] RAX: ffffffffffffffda RBX: 00007fdd317b5fa0 RCX: 00007fdd3158ebe9 [ 1906.465827][T27663] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1906.465835][T27663] RBP: 00007fdd32456090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.465842][T27663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.465849][T27663] R13: 00007fdd317b6038 R14: 00007fdd317b5fa0 R15: 00007fdd318dfa28 [ 1906.465869][T27663] [ 1906.932612][T11415] usb 3-1: USB disconnect, device number 110 [ 1906.956772][T16893] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1907.066484][ T3529] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1907.097462][ T3529] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1907.177893][T16893] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1907.183518][ T3529] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1907.197831][ T3529] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1907.208753][T16893] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1907.210004][T16893] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1907.211343][ T36] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1907.225339][T27680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1907.232327][ T3529] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1907.235439][ T36] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1907.246348][T27683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1907.276777][ T3529] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1907.282578][T16893] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1907.283626][T16893] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1907.284563][T16893] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1907.287540][T16893] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1907.288424][T16893] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1907.312441][ T36] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1907.570202][T27689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5179'. [ 1907.736478][ T30] audit: type=1326 audit(1754762231.525:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27666 comm="syz.6.5179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x0 [ 1908.008645][T11415] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1908.185642][T11415] usb 7-1: config 1 interface 0 altsetting 141 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.197433][T11415] usb 7-1: config 1 interface 0 altsetting 141 endpoint 0x82 has invalid maxpacket 1576, setting to 1024 [ 1908.212583][T11415] usb 7-1: config 1 interface 0 altsetting 141 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1908.248116][T11415] usb 7-1: config 1 interface 0 altsetting 141 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1908.273250][T11415] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1908.322762][T27701] bridge3: entered promiscuous mode [ 1908.431857][T11415] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1908.445991][T27696] netlink: 'syz.0.5185': attribute type 23 has an invalid length. [ 1909.096288][T27708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.119232][T11415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.127443][T11415] usb 7-1: Product: syz [ 1909.132753][T11415] usb 7-1: Manufacturer: syz [ 1909.137391][T11415] usb 7-1: SerialNumber: syz [ 1909.150912][T27708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.194851][T27690] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1909.211012][T27690] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1909.413617][T27713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1909.569984][T27504] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1910.206738][T27722] nftables ruleset with unbound set [ 1910.225088][T27722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.245332][T27722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.264714][T27722] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1910.774091][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5193'. [ 1911.048630][T27735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.079097][T27735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.478454][T20253] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1911.642166][T20253] usb 5-1: Using ep0 maxpacket: 8 [ 1911.649345][T20253] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1911.659056][T20253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.680753][T20253] usb 5-1: config 0 descriptor?? [ 1911.713152][T11415] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1911.770924][T11415] usb 7-1: USB disconnect, device number 103 [ 1911.889004][T20253] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1913.339464][T20257] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1913.536190][T20257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.547680][T20257] usb 3-1: config 0 has no interfaces? [ 1913.557811][T20257] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1913.567685][T20257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.678132][T20257] usb 3-1: Product: syz [ 1913.685722][T20257] usb 3-1: Manufacturer: syz [ 1913.693580][T20257] usb 3-1: SerialNumber: syz [ 1913.726050][T20257] usb 3-1: config 0 descriptor?? [ 1914.024084][T20257] usb 3-1: USB disconnect, device number 111 [ 1914.203363][T27770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.213030][T27770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.436557][T20253] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1914.457347][T20253] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1914.472261][T20253] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1914.485634][T20253] usb 5-1: USB disconnect, device number 12 [ 1917.931944][T20257] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1918.134047][T20257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.145881][T27820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1918.158926][T20257] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1918.172897][T27820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1918.188475][T20257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.215715][T20257] usb 3-1: config 0 descriptor?? [ 1918.448478][T20256] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1918.507897][T20257] logitech-djreceiver 0003:046D:C71F.0048: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 1918.637578][T20256] usb 4-1: Using ep0 maxpacket: 16 [ 1918.644992][T20257] usb 3-1: USB disconnect, device number 112 [ 1918.681529][T20256] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1918.702840][T20256] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.718177][T27834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5215'. [ 1918.741610][T20256] usb 4-1: config 0 has no interface number 0 [ 1918.775902][T20256] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1918.794760][T20256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.807541][T27831] fido_id[27831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1918.840578][T20256] usb 4-1: Product: syz [ 1918.860915][T20256] usb 4-1: Manufacturer: syz [ 1918.880253][T20256] usb 4-1: SerialNumber: syz [ 1918.920182][T20256] usb 4-1: config 0 descriptor?? [ 1918.932354][T20256] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1918.970527][T20256] usb 4-1: No valid video chain found. [ 1919.253026][T20257] usb 4-1: USB disconnect, device number 124 [ 1919.539357][T27854] bridge4: entered promiscuous mode [ 1920.687142][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.693614][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.742994][T27870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1920.755099][T27870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1920.906491][ T30] audit: type=1326 audit(1754762244.845:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1920.940466][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5222'. [ 1921.093571][ T30] audit: type=1326 audit(1754762244.895:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1921.473919][ T30] audit: type=1326 audit(1754762244.895:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1921.480091][T27875] FAULT_INJECTION: forcing a failure. [ 1921.480091][T27875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1921.519041][ T30] audit: type=1326 audit(1754762244.905:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1921.543491][ T30] audit: type=1326 audit(1754762244.965:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1921.574817][ T30] audit: type=1326 audit(1754762244.965:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1921.609509][T27875] CPU: 1 UID: 0 PID: 27875 Comm: syz.3.5223 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1921.609529][T27875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1921.609537][T27875] Call Trace: [ 1921.609543][T27875] [ 1921.609548][T27875] dump_stack_lvl+0x189/0x250 [ 1921.609568][T27875] ? __pfx____ratelimit+0x10/0x10 [ 1921.609586][T27875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1921.609600][T27875] ? __pfx__printk+0x10/0x10 [ 1921.609617][T27875] ? __might_fault+0xb0/0x130 [ 1921.609641][T27875] should_fail_ex+0x414/0x560 [ 1921.609660][T27875] _copy_from_user+0x2d/0xb0 [ 1921.609682][T27875] ___sys_sendmsg+0x158/0x2a0 [ 1921.609706][T27875] ? __pfx____sys_sendmsg+0x10/0x10 [ 1921.609762][T27875] ? __fget_files+0x2a/0x420 [ 1921.609780][T27875] ? __fget_files+0x3a0/0x420 [ 1921.609804][T27875] __x64_sys_sendmsg+0x19b/0x260 [ 1921.609819][T27875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1921.609837][T27875] ? __pfx_ksys_write+0x10/0x10 [ 1921.609851][T27875] ? rcu_is_watching+0x15/0xb0 [ 1921.609867][T27875] ? do_syscall_64+0xbe/0x3b0 [ 1921.609886][T27875] do_syscall_64+0xfa/0x3b0 [ 1921.609901][T27875] ? lockdep_hardirqs_on+0x9c/0x150 [ 1921.609924][T27875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.609937][T27875] ? clear_bhb_loop+0x60/0xb0 [ 1921.609951][T27875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1921.609963][T27875] RIP: 0033:0x7fdd3158ebe9 [ 1921.609975][T27875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1921.609986][T27875] RSP: 002b:00007fdd32456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1921.610001][T27875] RAX: ffffffffffffffda RBX: 00007fdd317b5fa0 RCX: 00007fdd3158ebe9 [ 1921.610010][T27875] RDX: 0000000000004000 RSI: 0000200000001080 RDI: 0000000000000003 [ 1921.610018][T27875] RBP: 00007fdd32456090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.610026][T27875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.610033][T27875] R13: 00007fdd317b6038 R14: 00007fdd317b5fa0 R15: 00007fdd318dfa28 [ 1921.610052][T27875] [ 1921.827331][ T30] audit: type=1326 audit(1754762244.965:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27869 comm="syz.0.5222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d958ebe9 code=0x7ffc0000 [ 1922.158469][T20256] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1922.445556][T20256] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1922.486209][T20256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.618448][T20256] usb 4-1: Product: syz [ 1922.651983][T20256] usb 4-1: Manufacturer: syz [ 1922.693507][T20256] usb 4-1: SerialNumber: syz [ 1922.749351][T27504] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1922.767984][T20256] usb 4-1: config 0 descriptor?? [ 1922.783190][T20256] ch341 4-1:0.0: ch341-uart converter detected [ 1923.125241][T27504] usb 5-1: Using ep0 maxpacket: 32 [ 1923.170155][T27504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1923.191879][T27504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1923.228652][T27504] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1923.249151][T20254] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1923.267142][T27504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.319273][T27504] usb 5-1: config 0 descriptor?? [ 1923.361225][T27504] hub 5-1:0.0: USB hub found [ 1923.417446][T20254] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1923.433434][T20254] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1923.484848][T20254] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1923.522239][T20254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.567005][T27896] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1923.595624][T20254] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1923.743372][T20256] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1923.816485][T20256] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 1923.817591][T27896] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1923.831055][T27896] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1923.870511][T27896] binder: 27895:27896 unknown command 0 [ 1923.876362][T27896] binder: 27895:27896 ioctl c0306201 200000000780 returned -22 [ 1923.923612][T27504] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1924.187402][T27504] usbhid 5-1:0.0: can't add hid device: -71 [ 1924.207180][T27504] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1924.290680][T27504] usb 5-1: USB disconnect, device number 13 [ 1924.738511][T20256] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1924.928697][T20256] usb 7-1: Using ep0 maxpacket: 32 [ 1924.961251][T20256] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1925.073223][T20256] usb 7-1: config 0 has no interface number 0 [ 1925.150490][T20256] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1925.175437][T20254] usb 4-1: USB disconnect, device number 125 [ 1925.195214][T20254] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1925.306947][T20254] ch341 4-1:0.0: device disconnected [ 1925.477133][T27907] syz.4.5232 (27907): drop_caches: 2 [ 1925.497492][T27907] syz.4.5232 (27907): drop_caches: 2 [ 1925.574269][T20256] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1925.651484][T20256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.698572][T20256] usb 7-1: Product: syz [ 1925.793556][T20256] usb 7-1: Manufacturer: syz [ 1925.808627][T20256] usb 7-1: SerialNumber: syz [ 1925.826486][T20256] usb 7-1: config 0 descriptor?? [ 1926.166629][T20256] smsc75xx v1.0.0 [ 1926.188505][T20256] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1926.232573][ T5955] usb 3-1: USB disconnect, device number 113 [ 1926.242410][T20256] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1926.319044][T20254] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1926.558560][T20254] usb 4-1: device descriptor read/64, error -71 [ 1926.718414][ T5955] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1926.729755][T27915] netlink: 'syz.0.5235': attribute type 1 has an invalid length. [ 1926.993066][T20254] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1927.078674][T27918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.087886][T27918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.400597][T27917] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1927.630218][T27913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.657623][T27913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.786957][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1927.798750][ T5955] usb 3-1: no configurations [ 1927.803464][ T5955] usb 3-1: can't read configurations, error -22 [ 1927.808417][T20254] usb 4-1: device descriptor read/64, error -71 [ 1927.949281][T20254] usb usb4-port1: attempt power cycle [ 1928.280108][T20256] usb 7-1: USB disconnect, device number 104 [ 1928.356184][T20254] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1928.389428][T27923] FAULT_INJECTION: forcing a failure. [ 1928.389428][T27923] name failslab, interval 1, probability 0, space 0, times 0 [ 1928.402808][T27923] CPU: 0 UID: 0 PID: 27923 Comm: syz.6.5237 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1928.402830][T27923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1928.402837][T27923] Call Trace: [ 1928.402843][T27923] [ 1928.402849][T27923] dump_stack_lvl+0x189/0x250 [ 1928.402876][T27923] ? __pfx____ratelimit+0x10/0x10 [ 1928.402894][T27923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1928.402908][T27923] ? __pfx__printk+0x10/0x10 [ 1928.402929][T27923] ? __pfx___might_resched+0x10/0x10 [ 1928.402944][T27923] should_fail_ex+0x414/0x560 [ 1928.402963][T27923] should_failslab+0xa8/0x100 [ 1928.402981][T27923] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1928.402999][T27923] ? __alloc_skb+0x112/0x2d0 [ 1928.403019][T27923] __alloc_skb+0x112/0x2d0 [ 1928.403039][T27923] netlink_sendmsg+0x5c6/0xb30 [ 1928.403063][T27923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1928.403082][T27923] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1928.403102][T27923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1928.403116][T27923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1928.403138][T27923] __sock_sendmsg+0x219/0x270 [ 1928.403155][T27923] ____sys_sendmsg+0x505/0x830 [ 1928.403172][T27923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1928.403190][T27923] ? import_iovec+0x74/0xa0 [ 1928.403214][T27923] ___sys_sendmsg+0x21f/0x2a0 [ 1928.403233][T27923] ? __pfx____sys_sendmsg+0x10/0x10 [ 1928.403266][T27923] ? __fget_files+0x2a/0x420 [ 1928.403283][T27923] ? __fget_files+0x3a0/0x420 [ 1928.403307][T27923] __x64_sys_sendmsg+0x19b/0x260 [ 1928.403322][T27923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1928.403340][T27923] ? __pfx_ksys_write+0x10/0x10 [ 1928.403355][T27923] ? rcu_is_watching+0x15/0xb0 [ 1928.403371][T27923] ? do_syscall_64+0xbe/0x3b0 [ 1928.403390][T27923] do_syscall_64+0xfa/0x3b0 [ 1928.403406][T27923] ? lockdep_hardirqs_on+0x9c/0x150 [ 1928.403421][T27923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.403433][T27923] ? clear_bhb_loop+0x60/0xb0 [ 1928.403448][T27923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.403460][T27923] RIP: 0033:0x7fcb3c38ebe9 [ 1928.403480][T27923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1928.403491][T27923] RSP: 002b:00007fcb3a5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1928.403507][T27923] RAX: ffffffffffffffda RBX: 00007fcb3c5b5fa0 RCX: 00007fcb3c38ebe9 [ 1928.403516][T27923] RDX: 0000000000004000 RSI: 0000200000001080 RDI: 0000000000000003 [ 1928.403524][T27923] RBP: 00007fcb3a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1928.403532][T27923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1928.403540][T27923] R13: 00007fcb3c5b6038 R14: 00007fcb3c5b5fa0 R15: 00007fcb3c6dfa28 [ 1928.403558][T27923] [ 1928.744456][T20254] usb 4-1: device descriptor read/8, error -71 [ 1928.809103][T27926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1929.106910][T27941] netlink: 'syz.4.5236': attribute type 4 has an invalid length. [ 1929.157499][T27941] netlink: 'syz.4.5236': attribute type 4 has an invalid length. [ 1929.222160][T27939] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1929.474289][T27944] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1929.490730][T27944] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 1929.611458][T27943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5239'. [ 1930.117324][T27947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.198938][T27947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.325700][T27943] overlayfs: missing 'lowerdir' [ 1930.846096][T27937] fuse: Invalid uid '00000000000000000004' [ 1931.818493][ T5955] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1931.999215][ T5955] usb 7-1: Using ep0 maxpacket: 8 [ 1932.007919][ T5955] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1932.048523][ T5955] usb 7-1: config 0 has no interface number 0 [ 1932.095529][ T5955] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1932.123966][ T5955] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1932.136720][ T5955] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1932.156592][ T5955] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1932.187667][ T5955] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1932.223074][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.283958][ T5955] usb 7-1: config 0 descriptor?? [ 1932.351537][ T5955] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1932.654742][T20254] usb 7-1: USB disconnect, device number 105 [ 1932.685088][T20254] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1932.728615][ T5955] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1932.941336][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 1933.000914][ T5955] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1933.014245][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.033046][ T5955] usb 4-1: Product: syz [ 1933.039089][ T5955] usb 4-1: Manufacturer: syz [ 1933.043921][ T5955] usb 4-1: SerialNumber: syz [ 1933.078220][ T5955] usb 4-1: config 0 descriptor?? [ 1933.088707][T20256] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1933.322763][T20256] usb 3-1: Using ep0 maxpacket: 8 [ 1933.333631][ T5955] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1933.364719][T20256] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1933.378659][T20256] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1933.404201][T20256] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1933.471167][T20256] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1933.480722][T20256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.495429][T27984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5254'. [ 1933.583721][T20256] usb 3-1: Product: syz [ 1933.588071][T20256] usb 3-1: Manufacturer: syz [ 1933.746691][T27966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.765374][T27966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.884791][T20256] usb 3-1: SerialNumber: syz [ 1933.912497][T27966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.942914][T27966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.129293][T27972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1934.151241][T20256] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1934.187520][T20256] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1934.218184][T20256] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1934.327346][ T5955] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1934.419294][T27968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1934.435303][ T5955] usb 4-1: USB disconnect, device number 4 [ 1934.539810][T27968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1934.939402][T27990] trusted_key: encrypted_key: key user:syz not found [ 1935.351452][ T5955] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1935.698504][ T5955] usb 4-1: device descriptor read/64, error -71 [ 1935.938471][ T5955] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1936.047600][T27999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.078559][ T5955] usb 4-1: device descriptor read/64, error -71 [ 1936.079899][T27999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.199186][ T5955] usb usb4-port1: attempt power cycle [ 1936.327199][T27504] usb 3-1: USB disconnect, device number 116 [ 1936.561821][ T5955] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1936.599461][ T5955] usb 4-1: device descriptor read/8, error -71 [ 1936.624235][T28004] binder: 28003:28004 ioctl c0306201 2000000001c0 returned -22 [ 1936.851385][ T5955] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1936.889628][ T5955] usb 4-1: device descriptor read/8, error -71 [ 1936.968563][T27504] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 1937.008905][ T5955] usb usb4-port1: unable to enumerate USB device [ 1937.149009][T28022] bridge0: entered promiscuous mode [ 1937.577713][T28025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.587272][T28025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.095230][T27504] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1938.106457][T27504] usb 7-1: no configurations [ 1938.112061][T27504] usb 7-1: can't read configurations, error -22 [ 1938.533848][T28031] netlink: 'syz.3.5264': attribute type 1 has an invalid length. [ 1938.782741][T28031] bond2: entered promiscuous mode [ 1938.837244][T28031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1938.981089][T28033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1938.991218][T28033] bond2: (slave bond3): making interface the new active one [ 1938.999917][T28033] bond3: entered promiscuous mode [ 1939.005917][T28033] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1939.470075][T28046] FAULT_INJECTION: forcing a failure. [ 1939.470075][T28046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1939.508660][T27504] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1939.528773][T28046] CPU: 1 UID: 0 PID: 28046 Comm: syz.6.5269 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1939.528795][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1939.528803][T28046] Call Trace: [ 1939.528808][T28046] [ 1939.528814][T28046] dump_stack_lvl+0x189/0x250 [ 1939.528834][T28046] ? __pfx____ratelimit+0x10/0x10 [ 1939.528852][T28046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1939.528867][T28046] ? __pfx__printk+0x10/0x10 [ 1939.528884][T28046] ? __might_fault+0xb0/0x130 [ 1939.528908][T28046] should_fail_ex+0x414/0x560 [ 1939.528927][T28046] _copy_from_user+0x2d/0xb0 [ 1939.528942][T28046] io_submit_one+0xc2/0x1310 [ 1939.528965][T28046] ? __pfx_io_submit_one+0x10/0x10 [ 1939.528977][T28046] ? __might_fault+0xb0/0x130 [ 1939.529010][T28046] ? __might_fault+0xb0/0x130 [ 1939.529028][T28046] __se_sys_io_submit+0x185/0x2f0 [ 1939.529048][T28046] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1939.529065][T28046] ? ksys_write+0x22a/0x250 [ 1939.529088][T28046] ? do_syscall_64+0xbe/0x3b0 [ 1939.529107][T28046] do_syscall_64+0xfa/0x3b0 [ 1939.529123][T28046] ? lockdep_hardirqs_on+0x9c/0x150 [ 1939.529138][T28046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.529150][T28046] ? clear_bhb_loop+0x60/0xb0 [ 1939.529165][T28046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.529177][T28046] RIP: 0033:0x7fcb3c38ebe9 [ 1939.529190][T28046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1939.529202][T28046] RSP: 002b:00007fcb3a5f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1939.529216][T28046] RAX: ffffffffffffffda RBX: 00007fcb3c5b5fa0 RCX: 00007fcb3c38ebe9 [ 1939.529226][T28046] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007fcb3d102000 [ 1939.529234][T28046] RBP: 00007fcb3a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1939.529242][T28046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.529251][T28046] R13: 00007fcb3c5b6038 R14: 00007fcb3c5b5fa0 R15: 00007fcb3c6dfa28 [ 1939.529280][T28046] [ 1939.880165][T20257] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1939.929815][T27504] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 1939.957662][T27504] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1939.969150][T27504] usb 4-1: can't read configurations, error -61 [ 1940.009865][ T30] audit: type=1326 audit(1754762263.965:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.034149][T28054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.048643][T20257] usb 3-1: Using ep0 maxpacket: 16 [ 1940.056549][T20257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.070836][T28053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.077729][T20257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1940.081319][ T30] audit: type=1326 audit(1754762263.995:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.111486][T20257] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1940.118588][T28053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.128742][T27504] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1940.138864][T28054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.140178][T28054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.160107][T28055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.171934][T28054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.174780][T20257] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1940.182449][ T30] audit: type=1326 audit(1754762263.995:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.219086][T20257] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1940.224689][T28055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.278460][ T30] audit: type=1326 audit(1754762263.995:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.309483][T20257] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1940.325742][ T30] audit: type=1326 audit(1754762263.995:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb3c38d69f code=0x7ffc0000 [ 1940.330870][T20257] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1940.368860][T27504] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 1940.388943][ T30] audit: type=1326 audit(1754762263.995:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.398471][T27504] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1940.428789][T20257] usb 3-1: Manufacturer: syz [ 1940.452527][T27955] syz.4.5245 (27955): drop_caches: 1 [ 1940.459646][T20257] usb 3-1: config 0 descriptor?? [ 1940.473659][T27504] usb 4-1: can't read configurations, error -61 [ 1940.489311][T27504] usb usb4-port1: attempt power cycle [ 1940.507494][ T30] audit: type=1326 audit(1754762263.995:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.581871][ T30] audit: type=1326 audit(1754762263.995:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.666420][ T30] audit: type=1326 audit(1754762263.995:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.707971][ T30] audit: type=1326 audit(1754762263.995:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28050 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3c38ebe9 code=0x7ffc0000 [ 1940.832145][T28069] netlink: 'syz.0.5277': attribute type 13 has an invalid length. [ 1940.849065][T27504] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1940.880450][T27504] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 1940.891303][T27504] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1940.979518][T27504] usb 4-1: can't read configurations, error -61 [ 1941.109488][T27504] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1941.130426][T27504] usb 4-1: too many configurations: 153, using maximum allowed: 8 [ 1941.152901][T27504] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1941.165609][T27504] usb 4-1: can't read configurations, error -61 [ 1941.180323][T27504] usb usb4-port1: unable to enumerate USB device [ 1941.259798][T20257] rc_core: IR keymap rc-hauppauge not found [ 1941.267461][T20257] Registered IR keymap rc-empty [ 1941.273857][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.299503][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.320315][T20257] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1941.393109][T20257] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input125 [ 1941.512021][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.584905][T28081] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1941.597510][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.598686][T20250] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 1941.640464][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.640807][T28081] kvm: pic: non byte read [ 1941.654101][T28081] kvm: pic: level sensitive irq not supported [ 1941.654318][T28081] kvm: pic: non byte read [ 1941.718620][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.739309][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.765425][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.784903][T20250] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1941.797749][T20250] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.807721][T20250] usb 7-1: Product: syz [ 1941.826083][T20250] usb 7-1: Manufacturer: syz [ 1941.834441][T20250] usb 7-1: SerialNumber: syz [ 1941.857023][T20250] usb 7-1: config 0 descriptor?? [ 1941.858476][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.938953][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1941.968462][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1942.005417][T20257] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1942.079925][T20257] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1942.123305][T20257] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1942.180982][T20250] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 1942.215736][T20250] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1942.256263][T20250] usb 7-1: USB disconnect, device number 108 [ 1942.836874][T20250] usb 3-1: USB disconnect, device number 117 [ 1943.371005][T28110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5288'. [ 1943.619875][T28119] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1943.706636][T28124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 1943.725866][T28125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.816673][T28125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1944.464467][T20257] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1944.614038][T28143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1944.672069][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1944.681633][T28142] netlink: 'syz.0.5297': attribute type 5 has an invalid length. [ 1944.690758][T28142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5297'. [ 1944.728542][T20257] usb 5-1: Using ep0 maxpacket: 16 [ 1944.881690][T20257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1944.911529][T20257] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1944.957720][T20257] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1945.136581][T20257] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1945.158172][T20257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.181902][T20257] usb 5-1: Product: syz [ 1945.192050][T20257] usb 5-1: Manufacturer: syz [ 1945.205715][T20257] usb 5-1: SerialNumber: syz [ 1945.310061][T20257] usb 5-1: config 0 descriptor?? [ 1945.333628][T28132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1945.657190][T20257] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1945.838826][T20257] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1945.891798][T20257] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1945.911977][T20257] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1945.930705][T20257] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1945.953199][T28150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5298'. [ 1946.341792][T28154] FAULT_INJECTION: forcing a failure. [ 1946.341792][T28154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1946.448994][T28154] CPU: 1 UID: 0 PID: 28154 Comm: syz.3.5299 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1946.449028][T28154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1946.449042][T28154] Call Trace: [ 1946.449050][T28154] [ 1946.449066][T28154] dump_stack_lvl+0x189/0x250 [ 1946.449098][T28154] ? __pfx____ratelimit+0x10/0x10 [ 1946.449127][T28154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1946.449152][T28154] ? __pfx__printk+0x10/0x10 [ 1946.449196][T28154] should_fail_ex+0x414/0x560 [ 1946.449228][T28154] _copy_to_user+0x31/0xb0 [ 1946.449254][T28154] simple_read_from_buffer+0xe1/0x170 [ 1946.449289][T28154] proc_fail_nth_read+0x1b3/0x220 [ 1946.449317][T28154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1946.449345][T28154] ? rw_verify_area+0x2a6/0x4d0 [ 1946.449367][T28154] ? __lock_acquire+0xab9/0xd20 [ 1946.449391][T28154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1946.449415][T28154] vfs_read+0x200/0x980 [ 1946.449438][T28154] ? fdget_pos+0x247/0x320 [ 1946.449461][T28154] ? __pfx___mutex_lock+0x10/0x10 [ 1946.449489][T28154] ? __pfx_vfs_read+0x10/0x10 [ 1946.449515][T28154] ? __fget_files+0x2a/0x420 [ 1946.449548][T28154] ? __fget_files+0x3a0/0x420 [ 1946.449576][T28154] ? __fget_files+0x2a/0x420 [ 1946.449616][T28154] ksys_read+0x145/0x250 [ 1946.449644][T28154] ? __pfx_ksys_read+0x10/0x10 [ 1946.449665][T28154] ? rcu_is_watching+0x15/0xb0 [ 1946.449691][T28154] ? do_syscall_64+0xbe/0x3b0 [ 1946.449721][T28154] do_syscall_64+0xfa/0x3b0 [ 1946.449745][T28154] ? lockdep_hardirqs_on+0x9c/0x150 [ 1946.449771][T28154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.449791][T28154] ? clear_bhb_loop+0x60/0xb0 [ 1946.449815][T28154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.449835][T28154] RIP: 0033:0x7fdd3158d5fc [ 1946.449856][T28154] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1946.449875][T28154] RSP: 002b:00007fdd32456030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1946.449897][T28154] RAX: ffffffffffffffda RBX: 00007fdd317b5fa0 RCX: 00007fdd3158d5fc [ 1946.449920][T28154] RDX: 000000000000000f RSI: 00007fdd324560a0 RDI: 0000000000000004 [ 1946.449934][T28154] RBP: 00007fdd32456090 R08: 0000000000000000 R09: 0000000000000000 [ 1946.449947][T28154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1946.449960][T28154] R13: 00007fdd317b6038 R14: 00007fdd317b5fa0 R15: 00007fdd318dfa28 [ 1946.449994][T28154] [ 1947.050535][T28166] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5304'. [ 1947.678922][T20250] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1947.909653][T20250] usb 4-1: Using ep0 maxpacket: 8 [ 1947.917247][T20250] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1947.926799][T20250] usb 4-1: config 0 has no interface number 0 [ 1947.946273][T20250] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1948.318477][T20250] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1948.400085][T20250] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1948.453032][T20250] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1948.486072][T20250] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1948.496360][T20250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.514852][T20250] usb 4-1: config 0 descriptor?? [ 1948.548581][T20250] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1948.727053][ T5955] usb 5-1: USB disconnect, device number 14 [ 1948.735107][ T5955] mcba_usb 5-1:0.0 can0: device disconnected [ 1948.879021][T20250] usb 4-1: USB disconnect, device number 13 [ 1948.879098][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 1948.940473][T20250] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1948.940505][T28178] ldusb: No device or device unplugged -19 [ 1949.085229][T28202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1949.136633][T28202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.191840][T28218] sctp: [Deprecated]: syz.2.5313 (pid 28218) Use of int in maxseg socket option. [ 1950.191840][T28218] Use struct sctp_assoc_value instead [ 1950.412783][T28220] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5316'. [ 1951.539249][T28248] sit1: entered promiscuous mode [ 1951.553511][T28248] sit1: entered allmulticast mode [ 1952.103153][T28256] binder: 28255:28256 ioctl c0306201 200000000080 returned -14 [ 1952.112895][T28256] netlink: 'syz.2.5326': attribute type 1 has an invalid length. [ 1952.159124][T20254] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1952.503102][T20254] usb 5-1: Using ep0 maxpacket: 8 [ 1952.543494][T20254] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1952.609158][T20254] usb 5-1: config 0 has no interface number 0 [ 1952.626199][T20254] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1952.658331][T20254] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1952.750218][T20254] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1952.778213][T20254] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1952.792230][T20250] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1952.858652][T20254] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1952.930174][T20254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.950771][T20250] usb 3-1: Using ep0 maxpacket: 32 [ 1952.973255][T20250] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1952.988876][T20250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.997784][T20254] usb 5-1: config 0 descriptor?? [ 1953.042817][T20250] usb 3-1: config 0 descriptor?? [ 1953.052628][T20254] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1953.082109][T28267] netlink: 'syz.6.5330': attribute type 10 has an invalid length. [ 1953.096342][T20250] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1953.114069][T20250] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1953.148557][T20250] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 1953.236513][T20250] usb 5-1: USB disconnect, device number 15 [ 1953.262638][T20250] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1953.305599][T28272] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1953.322531][T28270] netlink: 'syz.6.5332': attribute type 13 has an invalid length. [ 1953.331566][T20254] usb 3-1: USB disconnect, device number 118 [ 1954.032027][T28287] binder: 28286:28287 ioctl c400941b 200000000640 returned -22 [ 1954.059104][T28287] binder: 28286:28287 ioctl c4089434 200000000a40 returned -22 [ 1955.030967][T28310] netlink: 'syz.4.5341': attribute type 13 has an invalid length. [ 1955.248974][T20250] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 1955.446609][T20250] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1955.480552][T20250] usb 7-1: config 0 has no interface number 0 [ 1955.565641][T20250] usb 7-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1955.588448][T20250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1955.663543][T20250] usb 7-1: config 0 descriptor?? [ 1955.797228][T20250] usb 7-1: selecting invalid altsetting 1 [ 1955.826135][T20250] dvb_ttusb_budget: ttusb_init_controller: error [ 1955.882657][T20250] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1956.042783][T20250] DVB: Unable to find symbol ves1820_attach() [ 1956.186785][T20250] DVB: Unable to find symbol stv0297_attach() [ 1956.193394][T11415] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1956.209027][T20250] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1956.232632][T20250] usb 7-1: USB disconnect, device number 109 [ 1956.443193][T28335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.466423][T28335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.744043][T11415] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1956.758607][T28340] netlink: 'syz.6.5347': attribute type 13 has an invalid length. [ 1956.762720][T11415] usb 5-1: no configurations [ 1956.796180][T11415] usb 5-1: can't read configurations, error -22 [ 1957.204326][T28355] binder: 28350:28355 ioctl c0306201 200000000640 returned -22 [ 1957.227326][T28355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1957.249531][T28355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.290006][T27504] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1957.453456][T27504] usb 3-1: Using ep0 maxpacket: 8 [ 1957.466676][T27504] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1957.479605][T27504] usb 3-1: config 0 has no interface number 0 [ 1957.485939][T27504] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1957.498729][T27504] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1957.512525][T27504] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1957.524078][T27504] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1957.539139][T27504] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1957.550640][T27504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.565092][T27504] usb 3-1: config 0 descriptor?? [ 1957.599140][T27504] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1957.669346][T11415] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1957.696033][T28368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5358'. [ 1957.841228][T11415] usb 5-1: Using ep0 maxpacket: 16 [ 1957.864321][T11415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.879315][T11415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.890621][T11415] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1957.908006][T28376] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1957.920272][T11415] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1957.932949][T11415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.965406][T11415] usb 5-1: config 0 descriptor?? [ 1958.339933][T28383] bridge1: entered promiscuous mode [ 1958.398559][T11415] usbhid 5-1:0.0: can't add hid device: -71 [ 1958.406706][T11415] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1958.426772][T11415] usb 5-1: USB disconnect, device number 17 [ 1960.419658][T27504] usb 3-1: USB disconnect, device number 119 [ 1960.445037][T27504] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1960.948004][T28425] bridge5: entered promiscuous mode [ 1962.387964][T28439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1962.398647][T28439] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1962.839017][T11415] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1963.289985][T11415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.385565][T11415] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1963.431408][T11415] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1963.461608][T11415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1963.481932][T11415] usb 5-1: SerialNumber: syz [ 1963.722170][T28444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1963.760413][T11415] usb 5-1: 0:2 : does not exist [ 1963.767867][T28444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5378'. [ 1963.844805][T11415] usb 5-1: USB disconnect, device number 18 [ 1963.962029][T24354] udevd[24354]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.190809][T28451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5379'. [ 1964.900454][T28459] netlink: 'syz.4.5382': attribute type 13 has an invalid length. [ 1965.351530][T28466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.402895][T28466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.622563][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5388'. [ 1965.938230][T28475] bridge7: entered promiscuous mode [ 1966.642967][T20257] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1966.788398][T27504] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1966.818816][T20257] usb 3-1: Using ep0 maxpacket: 32 [ 1966.832471][T20257] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1966.843487][T20257] usb 3-1: config 0 has no interface number 0 [ 1966.864397][T20257] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1966.886906][T20257] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1966.896509][T20257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.917212][T20257] usb 3-1: Product: syz [ 1966.922380][T20257] usb 3-1: Manufacturer: syz [ 1966.927027][T20257] usb 3-1: SerialNumber: syz [ 1967.009577][T27504] usb 4-1: Using ep0 maxpacket: 32 [ 1967.154268][T20257] usb 3-1: config 0 descriptor?? [ 1967.163921][T27504] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1967.214299][T27504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.226345][T20257] smsc75xx v1.0.0 [ 1967.227290][T28488] vivid-000: ================= START STATUS ================= [ 1967.239875][T28488] vivid-000: Test Pattern: 75% Colorbar [ 1967.245656][T28488] vivid-000: Fill Percentage of Frame: 100 [ 1967.252119][T28488] vivid-000: Horizontal Movement: No Movement [ 1967.258230][T28488] vivid-000: Vertical Movement: No Movement [ 1967.264537][T28488] vivid-000: OSD Text Mode: All [ 1967.269667][T28488] vivid-000: Show Border: false [ 1967.275098][T28488] vivid-000: Show Square: false [ 1968.278770][T28488] vivid-000: Sensor Flipped Horizontally: false [ 1968.296861][T28488] vivid-000: Sensor Flipped Vertically: false [ 1968.372640][T28488] vivid-000: Insert SAV Code in Image: false [ 1968.375753][T27504] usb 4-1: config 0 descriptor?? [ 1968.391803][T27504] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1968.415379][T28488] vivid-000: Insert EAV Code in Image: false [ 1968.509751][T28488] vivid-000: Insert Video Guard Band: false [ 1968.558526][T28488] vivid-000: Reduced Framerate: false [ 1968.567922][T28488] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1968.586244][T28488] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1968.594632][T28488] vivid-000: Enable Capture Cropping: true [ 1968.607530][T28488] vivid-000: Enable Capture Composing: true [ 1968.614260][T28488] vivid-000: Enable Capture Scaler: true [ 1968.622960][T28488] vivid-000: Timestamp Source: End of Frame [ 1968.641045][T28488] vivid-000: Colorspace: SMPTE 170M [ 1968.954097][T28488] vivid-000: Transfer Function: Default [ 1968.960062][T20257] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1968.992389][T28488] vivid-000: Y'CbCr Encoding: Default [ 1969.000134][T28488] vivid-000: HSV Encoding: Hue 0-179 [ 1969.008460][T20257] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1969.017937][T28488] vivid-000: Quantization: Default [ 1969.038764][T28488] vivid-000: Apply Alpha To Red Only: false [ 1969.045162][T28488] vivid-000: Standard Aspect Ratio: 4x3 [ 1969.051450][T28488] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1969.059994][T28488] vivid-000: DV Timings: 640x480p59 inactive [ 1969.066418][T28488] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1969.074167][T28488] vivid-000: Maximum EDID Blocks: 1 [ 1969.083087][T28488] vivid-000: Limited RGB Range (16-235): false [ 1969.089512][T28488] vivid-000: Rx RGB Quantization Range: Automatic [ 1969.096335][T28488] vivid-000: Power Present: 0x00000001 [ 1969.132571][T28488] tpg source WxH: 720x576 (R'G'B) [ 1969.160913][T28488] tpg field: 4 [ 1969.172432][T28488] tpg crop: (0,8)/64x16 [ 1969.196425][T28488] tpg compose: (0,0)/16x16 [ 1969.222637][T28488] tpg colorspace: 9 [ 1969.243660][T28488] tpg transfer function: 7/7 [ 1969.272655][T28488] tpg quantization: 0/1 [ 1969.292423][T28488] tpg RGB range: 0/2 [ 1969.315645][T28488] vivid-000: ================== END STATUS ================== [ 1969.654195][T20257] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1969.673830][T20257] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1969.688573][T20257] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1969.706059][T20257] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1969.878510][ T5955] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1970.038561][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1970.328527][ T5955] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1970.458486][ T5955] usb 7-1: device descriptor read/64, error -71 [ 1970.518646][T11415] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1970.568607][ T5955] usb usb7-port1: attempt power cycle [ 1970.680980][T11415] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1970.692542][T11415] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1970.708042][T11415] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1970.713408][T20257] usb 3-1: USB disconnect, device number 120 [ 1970.720765][T11415] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1970.734016][T11415] usb 5-1: Product: syz [ 1970.738758][T11415] usb 5-1: Manufacturer: syz [ 1970.743756][T11415] usb 5-1: SerialNumber: syz [ 1970.783597][T11415] usb 5-1: config 0 descriptor?? [ 1970.806434][T11415] usb 5-1: selecting invalid altsetting 0 [ 1970.908514][ T5955] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1970.979849][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1971.003722][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.018169][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.040928][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.095380][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.121460][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.139597][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.156052][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.204485][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.223650][ T5955] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1971.242809][T28512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.258121][T27504] gspca_vc032x: reg_r err -71 [ 1971.264681][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.270667][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.276999][T28512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.299391][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.304985][ T5955] usb 7-1: device descriptor read/8, error -71 [ 1971.314890][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.325686][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.340141][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.351135][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.364443][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.377755][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.413419][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.420515][ T5955] usb usb7-port1: unable to enumerate USB device [ 1971.441798][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.456373][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.482158][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.602440][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.607833][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.641057][T28527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1971.770218][T28529] FAULT_INJECTION: forcing a failure. [ 1971.770218][T28529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.798491][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1971.798673][T28529] CPU: 1 UID: 0 PID: 28529 Comm: syz.3.5399 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1971.798699][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1971.798712][T28529] Call Trace: [ 1971.798720][T28529] [ 1971.798729][T28529] dump_stack_lvl+0x189/0x250 [ 1971.798757][T28529] ? __pfx____ratelimit+0x10/0x10 [ 1971.798783][T28529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1971.798805][T28529] ? __pfx__printk+0x10/0x10 [ 1971.798831][T28529] ? __might_fault+0xb0/0x130 [ 1971.798867][T28529] should_fail_ex+0x414/0x560 [ 1971.798896][T28529] _copy_from_user+0x2d/0xb0 [ 1971.798918][T28529] ___sys_sendmsg+0x158/0x2a0 [ 1971.798941][T28529] ? __pfx____sys_sendmsg+0x10/0x10 [ 1971.798996][T28529] ? __fget_files+0x2a/0x420 [ 1971.799022][T28529] ? __fget_files+0x3a0/0x420 [ 1971.799059][T28529] __x64_sys_sendmsg+0x19b/0x260 [ 1971.799081][T28529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1971.799109][T28529] ? __pfx_ksys_write+0x10/0x10 [ 1971.799139][T28529] ? do_syscall_64+0xbe/0x3b0 [ 1971.799168][T28529] do_syscall_64+0xfa/0x3b0 [ 1971.799191][T28529] ? lockdep_hardirqs_on+0x9c/0x150 [ 1971.799215][T28529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.799233][T28529] ? clear_bhb_loop+0x60/0xb0 [ 1971.799256][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.799273][T28529] RIP: 0033:0x7fdd3158ebe9 [ 1971.799291][T28529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1971.799307][T28529] RSP: 002b:00007fdd32414038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.799327][T28529] RAX: ffffffffffffffda RBX: 00007fdd317b6180 RCX: 00007fdd3158ebe9 [ 1971.799341][T28529] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1971.799353][T28529] RBP: 00007fdd32414090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.799364][T28529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.799375][T28529] R13: 00007fdd317b6218 R14: 00007fdd317b6180 R15: 00007fdd318dfa28 [ 1971.799404][T28529] [ 1972.052860][T27504] gspca_vc032x: I2c Bus Busy Wait 00 [ 1972.062010][T27504] gspca_vc032x: Unknown sensor... [ 1972.070636][T27504] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1972.152969][T27504] usb 4-1: USB disconnect, device number 14 [ 1972.625332][T28538] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1972.718422][T27504] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1972.901729][T27504] usb 4-1: Using ep0 maxpacket: 32 [ 1972.941208][T27504] usb 4-1: config 0 has no interfaces? [ 1973.613151][T20254] usb 5-1: USB disconnect, device number 19 [ 1973.820925][T27504] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1973.830781][T27504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.840305][T27504] usb 4-1: Product: syz [ 1973.844528][T27504] usb 4-1: Manufacturer: syz [ 1973.849379][T27504] usb 4-1: SerialNumber: syz [ 1973.870690][T27504] usb 4-1: config 0 descriptor?? [ 1974.657114][T20254] usb 4-1: USB disconnect, device number 15 [ 1974.958027][T24739] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.238450][T28557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5409'. [ 1975.300831][T28559] batadv0: entered promiscuous mode [ 1975.315530][T28559] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1975.372735][T28559] batadv0: left promiscuous mode [ 1975.458692][T20254] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1975.609003][T20254] usb 5-1: device descriptor read/64, error -71 [ 1975.849001][T20254] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 1975.877695][T24739] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.979342][T20254] usb 5-1: device descriptor read/64, error -71 [ 1976.034708][T28558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5409'. [ 1976.140472][T20254] usb usb5-port1: attempt power cycle [ 1976.252047][T19394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1976.323410][T19394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1976.334870][T19394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1976.344902][T19394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1976.357565][T19394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1976.520415][T24739] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.640483][T20254] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1976.661276][T28576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1976.673269][T20254] usb 5-1: device descriptor read/8, error -71 [ 1976.682635][T28576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1976.754736][T24739] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.768806][T28580] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1976.828734][T27504] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1976.918408][T20254] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 1976.939725][T20254] usb 5-1: device descriptor read/8, error -71 [ 1976.990548][T27504] usb 4-1: Using ep0 maxpacket: 8 [ 1977.026818][T27504] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1977.039112][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1977.064972][T27504] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1977.069050][T20254] usb usb5-port1: unable to enumerate USB device [ 1977.123860][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1977.155441][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1977.195201][T27504] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1977.203522][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1977.225302][T27504] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1977.260757][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1977.290376][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1977.314992][T27504] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1977.323685][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1977.347622][T27504] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1977.374295][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1977.400598][T27504] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1977.433191][T27504] usb 4-1: string descriptor 0 read error: -22 [ 1977.444721][T27504] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1977.510835][T27504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.605546][T27504] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1977.790910][T24739] bridge_slave_1: left allmulticast mode [ 1977.797842][T24739] bridge_slave_1: left promiscuous mode [ 1977.849429][T20254] usb 4-1: USB disconnect, device number 16 [ 1977.851551][T24739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.910462][T24739] bridge_slave_0: left allmulticast mode [ 1977.936406][T24739] bridge_slave_0: left promiscuous mode [ 1977.973409][T24739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.420495][T19394] Bluetooth: hci4: command tx timeout [ 1978.728669][ T5955] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1978.928539][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 1978.935599][ T5955] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 1978.944297][ T5955] usb 4-1: config 0 has no interface number 0 [ 1978.973543][ T5955] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1978.983244][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.021975][ T5955] usb 4-1: Product: syz [ 1979.030399][ T5955] usb 4-1: Manufacturer: syz [ 1979.038978][ T5955] usb 4-1: SerialNumber: syz [ 1979.071746][ T5955] usb 4-1: config 0 descriptor?? [ 1979.089860][ T5955] radioshark2 4-1:0.206: Invalid radioSHARK2 device [ 1979.096542][ T5955] radioshark2 4-1:0.206: probe with driver radioshark2 failed with error -22 [ 1979.123079][ T5955] usbhid 4-1:0.206: couldn't find an input interrupt endpoint [ 1979.551893][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1979.602566][T24739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1979.655934][T24739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1979.668849][T24739] bond0 (unregistering): Released all slaves [ 1979.680233][T28607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1979.729388][T28570] chnl_net:caif_netlink_parms(): no params data found [ 1979.963191][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1980.021098][T20253] usb 4-1: USB disconnect, device number 17 [ 1980.538650][T19394] Bluetooth: hci4: command tx timeout [ 1981.303483][T24739] hsr_slave_0: left promiscuous mode [ 1981.315744][T24739] hsr_slave_1: left promiscuous mode [ 1981.335694][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.358722][T24739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.369623][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1981.377092][T24739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.442981][T24739] veth1_macvtap: left promiscuous mode [ 1981.465026][T24739] veth0_macvtap: left promiscuous mode [ 1981.478144][T24739] veth1_vlan: left promiscuous mode [ 1981.484526][T24739] veth0_vlan: left promiscuous mode [ 1982.112772][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1982.119700][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.578892][T19394] Bluetooth: hci4: command tx timeout [ 1982.762378][T24739] team0 (unregistering): Port device team_slave_1 removed [ 1982.835124][T24739] team0 (unregistering): Port device team_slave_0 removed [ 1983.621708][T28631] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5424'. [ 1983.631818][T28631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1983.683471][T28570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.708940][T28570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.716265][T28570] bridge_slave_0: entered allmulticast mode [ 1983.732926][T28570] bridge_slave_0: entered promiscuous mode [ 1983.825626][T28570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.835110][T28570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.844480][T28570] bridge_slave_1: entered allmulticast mode [ 1983.877950][T28570] bridge_slave_1: entered promiscuous mode [ 1984.151226][T28570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1984.221904][T28570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1984.414740][T28570] team0: Port device team_slave_0 added [ 1984.442760][T28570] team0: Port device team_slave_1 added [ 1984.609279][T28570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1984.628902][T20257] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1984.650234][T28570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.679706][T19394] Bluetooth: hci4: command tx timeout [ 1984.698981][T20250] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1984.708007][T28570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1984.744125][T28570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1984.771875][T28570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.819722][T20257] usb 5-1: device descriptor read/64, error -71 [ 1984.854815][T28570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1984.868657][T20250] usb 3-1: Using ep0 maxpacket: 8 [ 1984.880902][T20250] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1984.917110][T20250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.953287][T20250] usb 3-1: config 0 descriptor?? [ 1985.059441][T20257] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1985.071504][T28570] hsr_slave_0: entered promiscuous mode [ 1985.090089][T28570] hsr_slave_1: entered promiscuous mode [ 1985.183652][T28664] sctp: [Deprecated]: syz.0.5426 (pid 28664) Use of int in maxseg socket option. [ 1985.183652][T28664] Use struct sctp_assoc_value instead [ 1985.198644][T20257] usb 5-1: device descriptor read/64, error -71 [ 1985.200582][T20250] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1985.334200][T20257] usb usb5-port1: attempt power cycle [ 1985.434427][T27504] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1985.630515][T27504] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1985.639815][T27504] usb 4-1: config 0 has no interface number 0 [ 1985.657005][T27504] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1985.698457][T20257] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1985.717229][T27504] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1985.729675][T20257] usb 5-1: device descriptor read/8, error -71 [ 1985.780630][T27504] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1985.840775][T27504] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1985.854479][T27504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.863939][T27504] usb 4-1: Product: syz [ 1985.883262][T27504] usb 4-1: Manufacturer: syz [ 1985.887967][T27504] usb 4-1: SerialNumber: syz [ 1985.926486][T27504] usb 4-1: config 0 descriptor?? [ 1985.943301][T28663] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1985.990533][T20257] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1986.019303][T20257] usb 5-1: device descriptor read/8, error -71 [ 1986.129010][T20257] usb usb5-port1: unable to enumerate USB device [ 1986.154397][T28663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.176587][T28663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.240340][T28663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.284998][T28663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.417290][T27504] usb 4-1: probing VID:PID(2201:012C) [ 1986.474057][T20250] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1986.474425][T27504] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1986.495030][T20250] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1986.509464][T28570] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1986.550814][T28570] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1986.566369][T20250] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1986.573198][T27504] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 1986.603520][T27504] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1986.614801][T20250] usb 3-1: USB disconnect, device number 121 [ 1986.641992][T27504] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 1986.644360][T28570] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1986.722515][T27504] usb 4-1: USB disconnect, device number 18 [ 1986.723073][T28570] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1986.795308][T28676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1986.821616][T28676] FAULT_INJECTION: forcing a failure. [ 1986.821616][T28676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.855006][T28676] CPU: 0 UID: 0 PID: 28676 Comm: syz.3.5431 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1986.855038][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1986.855050][T28676] Call Trace: [ 1986.855059][T28676] [ 1986.855069][T28676] dump_stack_lvl+0x189/0x250 [ 1986.855099][T28676] ? __pfx____ratelimit+0x10/0x10 [ 1986.855128][T28676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1986.855152][T28676] ? __pfx__printk+0x10/0x10 [ 1986.855180][T28676] ? __might_fault+0xb0/0x130 [ 1986.855221][T28676] should_fail_ex+0x414/0x560 [ 1986.855262][T28676] _copy_from_iter+0x1db/0x16f0 [ 1986.855299][T28676] ? rcu_is_watching+0x15/0xb0 [ 1986.855321][T28676] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1986.855351][T28676] ? __pfx__copy_from_iter+0x10/0x10 [ 1986.855383][T28676] ? __build_skb_around+0x257/0x3e0 [ 1986.855417][T28676] ? netlink_sendmsg+0x642/0xb30 [ 1986.855449][T28676] ? skb_put+0x11b/0x210 [ 1986.855480][T28676] netlink_sendmsg+0x6b2/0xb30 [ 1986.855518][T28676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1986.855547][T28676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1986.855578][T28676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1986.855600][T28676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1986.855627][T28676] __sock_sendmsg+0x219/0x270 [ 1986.855657][T28676] ____sys_sendmsg+0x505/0x830 [ 1986.855684][T28676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1986.855715][T28676] ? import_iovec+0x74/0xa0 [ 1986.855741][T28676] ___sys_sendmsg+0x21f/0x2a0 [ 1986.855764][T28676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1986.855824][T28676] ? __fget_files+0x2a/0x420 [ 1986.855851][T28676] ? __fget_files+0x3a0/0x420 [ 1986.855889][T28676] __x64_sys_sendmsg+0x19b/0x260 [ 1986.855909][T28676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1986.855938][T28676] ? __pfx_ksys_write+0x10/0x10 [ 1986.855957][T28676] ? rcu_is_watching+0x15/0xb0 [ 1986.855981][T28676] ? do_syscall_64+0xbe/0x3b0 [ 1986.856009][T28676] do_syscall_64+0xfa/0x3b0 [ 1986.856031][T28676] ? lockdep_hardirqs_on+0x9c/0x150 [ 1986.856053][T28676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.856071][T28676] ? clear_bhb_loop+0x60/0xb0 [ 1986.856093][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.856109][T28676] RIP: 0033:0x7fdd3158ebe9 [ 1986.856125][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.856142][T28676] RSP: 002b:00007fdd32456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1986.856162][T28676] RAX: ffffffffffffffda RBX: 00007fdd317b5fa0 RCX: 00007fdd3158ebe9 [ 1986.856175][T28676] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1986.856187][T28676] RBP: 00007fdd32456090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.856197][T28676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.856208][T28676] R13: 00007fdd317b6038 R14: 00007fdd317b5fa0 R15: 00007fdd318dfa28 [ 1986.856239][T28676] [ 1987.274968][T28689] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1987.337944][T28570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.473751][T28570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.504297][T16893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.511565][T16893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.525534][T28696] binder: 28693:28696 unknown command 0 [ 1987.544992][T28696] binder: 28693:28696 ioctl c0306201 200000000080 returned -22 [ 1987.605866][T24739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.613196][T24739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1987.676617][T28700] netlink: 'syz.3.5434': attribute type 5 has an invalid length. [ 1987.976071][T28703] cgroup: fork rejected by pids controller in /syz2 [ 1988.495063][T28570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1988.882970][T28570] veth0_vlan: entered promiscuous mode [ 1988.962457][T28570] veth1_vlan: entered promiscuous mode [ 1989.041558][T28859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1989.137039][T28570] veth0_macvtap: entered promiscuous mode [ 1989.227820][T28570] veth1_macvtap: entered promiscuous mode [ 1989.291703][T28570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.312267][T28570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1989.492388][ T1156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.527567][T16893] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.614225][T16893] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1989.753765][T16893] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.136912][T26445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.151915][T26445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.236124][T16893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.265048][T16893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.303569][T28880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1990.403404][T28880] FAULT_INJECTION: forcing a failure. [ 1990.403404][T28880] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.448798][T28880] CPU: 1 UID: 0 PID: 28880 Comm: syz.2.5443 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1990.448831][T28880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1990.448843][T28880] Call Trace: [ 1990.448852][T28880] [ 1990.448862][T28880] dump_stack_lvl+0x189/0x250 [ 1990.448893][T28880] ? __pfx____ratelimit+0x10/0x10 [ 1990.448920][T28880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1990.448945][T28880] ? __pfx__printk+0x10/0x10 [ 1990.448975][T28880] ? __lock_acquire+0xab9/0xd20 [ 1990.449016][T28880] should_fail_ex+0x414/0x560 [ 1990.449047][T28880] should_failslab+0xa8/0x100 [ 1990.449079][T28880] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1990.449106][T28880] ? skb_clone+0x212/0x3a0 [ 1990.449133][T28880] skb_clone+0x212/0x3a0 [ 1990.449159][T28880] __netlink_deliver_tap+0x404/0x850 [ 1990.449202][T28880] ? netlink_deliver_tap+0x2e/0x1b0 [ 1990.449232][T28880] netlink_deliver_tap+0x19c/0x1b0 [ 1990.449263][T28880] netlink_unicast+0x7fa/0x9e0 [ 1990.449298][T28880] ? __pfx_netlink_unicast+0x10/0x10 [ 1990.449327][T28880] ? netlink_sendmsg+0x642/0xb30 [ 1990.449353][T28880] ? skb_put+0x11b/0x210 [ 1990.449388][T28880] netlink_sendmsg+0x805/0xb30 [ 1990.449428][T28880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1990.449460][T28880] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1990.449493][T28880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1990.449516][T28880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1990.449555][T28880] __sock_sendmsg+0x219/0x270 [ 1990.449585][T28880] ____sys_sendmsg+0x505/0x830 [ 1990.449613][T28880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1990.449645][T28880] ? import_iovec+0x74/0xa0 [ 1990.449673][T28880] ___sys_sendmsg+0x21f/0x2a0 [ 1990.449713][T28880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1990.449777][T28880] ? __fget_files+0x2a/0x420 [ 1990.449805][T28880] ? __fget_files+0x3a0/0x420 [ 1990.449847][T28880] __x64_sys_sendmsg+0x19b/0x260 [ 1990.449872][T28880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1990.449905][T28880] ? __pfx_ksys_write+0x10/0x10 [ 1990.449929][T28880] ? rcu_is_watching+0x15/0xb0 [ 1990.449956][T28880] ? do_syscall_64+0xbe/0x3b0 [ 1990.449988][T28880] do_syscall_64+0xfa/0x3b0 [ 1990.450014][T28880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.450040][T28880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.450060][T28880] ? clear_bhb_loop+0x60/0xb0 [ 1990.450086][T28880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1990.450106][T28880] RIP: 0033:0x7f224af8ebe9 [ 1990.450126][T28880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1990.450144][T28880] RSP: 002b:00007f224beab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1990.450168][T28880] RAX: ffffffffffffffda RBX: 00007f224b1b5fa0 RCX: 00007f224af8ebe9 [ 1990.450184][T28880] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1990.450197][T28880] RBP: 00007f224beab090 R08: 0000000000000000 R09: 0000000000000000 [ 1990.450210][T28880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1990.450223][T28880] R13: 00007f224b1b6038 R14: 00007f224b1b5fa0 R15: 00007f224b2dfa28 [ 1990.450258][T28880] [ 1991.048591][T11415] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1991.196089][T28895] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1991.278529][ C1] [ 1991.280924][ C1] ======================================================== [ 1991.288108][ C1] WARNING: possible irq lock inversion dependency detected [ 1991.295293][ C1] 6.16.0-syzkaller-12187-g0227b49b5027 #0 Not tainted [ 1991.302045][ C1] -------------------------------------------------------- [ 1991.309253][ C1] syz.2.5445/28896 just changed the state of lock: [ 1991.315759][ C1] ffff888146b1c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1991.325420][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 1991.333411][ C1] (tasklist_lock){.+.+}-{3:3} [ 1991.333438][ C1] [ 1991.333438][ C1] [ 1991.333438][ C1] and interrupts could create inverse lock ordering between them. [ 1991.333438][ C1] [ 1991.352505][ C1] [ 1991.352505][ C1] other info that might help us debug this: [ 1991.360649][ C1] Chain exists of: [ 1991.360649][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1991.360649][ C1] [ 1991.374385][ C1] Possible interrupt unsafe locking scenario: [ 1991.374385][ C1] [ 1991.382807][ C1] CPU0 CPU1 [ 1991.388290][ C1] ---- ---- [ 1991.393676][ C1] lock(tasklist_lock); [ 1991.397927][ C1] local_irq_disable(); [ 1991.404680][ C1] lock(&dev->event_lock#2); [ 1991.412028][ C1] lock(&client->buffer_lock); [ 1991.419596][ C1] [ 1991.423055][ C1] lock(&dev->event_lock#2); [ 1991.428007][ C1] [ 1991.428007][ C1] *** DEADLOCK *** [ 1991.428007][ C1] [ 1991.436172][ C1] 2 locks held by syz.2.5445/28896: [ 1991.441474][ C1] #0: ffff88807d2610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1991.451225][ C1] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 1991.460799][ C1] [ 1991.460799][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 1991.470163][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 1991.475638][ C1] HARDIRQ-ON-R at: [ 1991.479959][ C1] lock_acquire+0x120/0x360 [ 1991.486804][ C1] _raw_read_lock+0x36/0x50 [ 1991.493642][ C1] __do_wait+0xde/0x740 [ 1991.500237][ C1] do_wait+0x1f8/0x520 [ 1991.506656][ C1] kernel_wait+0xab/0x170 [ 1991.513326][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1991.521575][ C1] process_scheduled_works+0xade/0x17b0 [ 1991.529454][ C1] worker_thread+0x8a0/0xda0 [ 1991.536816][ C1] kthread+0x70e/0x8a0 [ 1991.543245][ C1] ret_from_fork+0x3fc/0x770 [ 1991.550184][ C1] ret_from_fork_asm+0x1a/0x30 [ 1991.557416][ C1] SOFTIRQ-ON-R at: [ 1991.561739][ C1] lock_acquire+0x120/0x360 [ 1991.568589][ C1] _raw_read_lock+0x36/0x50 [ 1991.575459][ C1] __do_wait+0xde/0x740 [ 1991.581982][ C1] do_wait+0x1f8/0x520 [ 1991.588485][ C1] kernel_wait+0xab/0x170 [ 1991.595359][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1991.603719][ C1] process_scheduled_works+0xade/0x17b0 [ 1991.611892][ C1] worker_thread+0x8a0/0xda0 [ 1991.618890][ C1] kthread+0x70e/0x8a0 [ 1991.625523][ C1] ret_from_fork+0x3fc/0x770 [ 1991.632512][ C1] ret_from_fork_asm+0x1a/0x30 [ 1991.639640][ C1] INITIAL USE at: [ 1991.643880][ C1] lock_acquire+0x120/0x360 [ 1991.650641][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1991.657920][ C1] copy_process+0x224f/0x3c00 [ 1991.664956][ C1] kernel_clone+0x21e/0x840 [ 1991.671832][ C1] user_mode_thread+0xdd/0x140 [ 1991.678862][ C1] rest_init+0x23/0x300 [ 1991.685294][ C1] start_kernel+0x3a9/0x410 [ 1991.692057][ C1] x86_64_start_reservations+0x24/0x30 [ 1991.699788][ C1] x86_64_start_kernel+0x143/0x1c0 [ 1991.707187][ C1] common_startup_64+0x13e/0x147 [ 1991.714493][ C1] INITIAL READ USE at: [ 1991.719175][ C1] lock_acquire+0x120/0x360 [ 1991.726461][ C1] _raw_read_lock+0x36/0x50 [ 1991.733655][ C1] __do_wait+0xde/0x740 [ 1991.740764][ C1] do_wait+0x1f8/0x520 [ 1991.747719][ C1] kernel_wait+0xab/0x170 [ 1991.754778][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 1991.763468][ C1] process_scheduled_works+0xade/0x17b0 [ 1991.771821][ C1] worker_thread+0x8a0/0xda0 [ 1991.779112][ C1] kthread+0x70e/0x8a0 [ 1991.785932][ C1] ret_from_fork+0x3fc/0x770 [ 1991.793402][ C1] ret_from_fork_asm+0x1a/0x30 [ 1991.800904][ C1] } [ 1991.803827][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 1991.812016][ C1] ... acquired at: [ 1991.816394][ C1] lock_acquire+0x120/0x360 [ 1991.821072][ C1] _raw_read_lock+0x36/0x50 [ 1991.825745][ C1] send_sigio+0x101/0x370 [ 1991.830347][ C1] kill_fasync+0x24d/0x4d0 [ 1991.835054][ C1] lease_break_callback+0x26/0x30 [ 1991.840436][ C1] __break_lease+0x6a2/0x1620 [ 1991.845419][ C1] vfs_truncate+0x428/0x520 [ 1991.850277][ C1] do_sys_truncate+0xdb/0x190 [ 1991.855132][ C1] __x64_sys_truncate+0x5b/0x70 [ 1991.860237][ C1] do_syscall_64+0xfa/0x3b0 [ 1991.864927][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.871025][ C1] [ 1991.873354][ C1] -> (&f_owner->lock){....}-{3:3} { [ 1991.878828][ C1] INITIAL USE at: [ 1991.882976][ C1] lock_acquire+0x120/0x360 [ 1991.889658][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1991.896692][ C1] __f_setown+0x67/0x370 [ 1991.903283][ C1] fcntl_dirnotify+0x3fa/0x6a0 [ 1991.910172][ C1] do_fcntl+0x6d0/0x1910 [ 1991.916522][ C1] __se_sys_fcntl+0xc8/0x150 [ 1991.923316][ C1] do_syscall_64+0xfa/0x3b0 [ 1991.930101][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.938353][ C1] INITIAL READ USE at: [ 1991.943178][ C1] lock_acquire+0x120/0x360 [ 1991.950499][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1991.958390][ C1] send_sigio+0x38/0x370 [ 1991.965142][ C1] dnotify_handle_event+0x169/0x440 [ 1991.972851][ C1] fsnotify+0x1814/0x1a80 [ 1991.979868][ C1] fsnotify_move+0x1d7/0x5b0 [ 1991.987059][ C1] vfs_rename+0x93f/0xf00 [ 1991.994071][ C1] do_renameat2+0x6ce/0xa80 [ 1992.001323][ C1] __x64_sys_renameat2+0xce/0xe0 [ 1992.008889][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.016023][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.024445][ C1] } [ 1992.027233][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1992.036426][ C1] ... acquired at: [ 1992.040481][ C1] lock_acquire+0x120/0x360 [ 1992.045332][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1992.050784][ C1] send_sigio+0x38/0x370 [ 1992.055196][ C1] kill_fasync+0x24d/0x4d0 [ 1992.059784][ C1] lease_break_callback+0x26/0x30 [ 1992.064987][ C1] __break_lease+0x6a2/0x1620 [ 1992.069841][ C1] vfs_truncate+0x428/0x520 [ 1992.074511][ C1] do_sys_truncate+0xdb/0x190 [ 1992.079350][ C1] __x64_sys_truncate+0x5b/0x70 [ 1992.084378][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.089078][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.095254][ C1] [ 1992.097599][ C1] -> (&new->fa_lock){....}-{3:3} { [ 1992.102984][ C1] INITIAL USE at: [ 1992.107053][ C1] lock_acquire+0x120/0x360 [ 1992.113467][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 1992.120318][ C1] fasync_remove_entry+0xf1/0x1c0 [ 1992.127367][ C1] sock_fasync+0x85/0xf0 [ 1992.133794][ C1] __fput+0x8a2/0xa70 [ 1992.139791][ C1] task_work_run+0x1d4/0x260 [ 1992.146578][ C1] get_signal+0x11ed/0x1340 [ 1992.153169][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1992.160720][ C1] exit_to_user_mode_loop+0x75/0x110 [ 1992.167937][ C1] do_syscall_64+0x2bd/0x3b0 [ 1992.174755][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.182700][ C1] INITIAL READ USE at: [ 1992.187667][ C1] lock_acquire+0x120/0x360 [ 1992.194516][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1992.202327][ C1] kill_fasync+0x199/0x4d0 [ 1992.209126][ C1] sock_wake_async+0x137/0x160 [ 1992.216340][ C1] af_alg_wmem_wakeup+0x3c0/0x440 [ 1992.223933][ C1] aead_recvmsg+0x1377/0x13f0 [ 1992.230974][ C1] sock_recvmsg+0x229/0x270 [ 1992.237852][ C1] ____sys_recvmsg+0x1c9/0x460 [ 1992.245307][ C1] ___sys_recvmsg+0x1b5/0x510 [ 1992.252612][ C1] __x64_sys_recvmsg+0x198/0x260 [ 1992.260390][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.267249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.275672][ C1] } [ 1992.278358][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1992.287234][ C1] ... acquired at: [ 1992.291233][ C1] lock_acquire+0x120/0x360 [ 1992.295984][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1992.301505][ C1] kill_fasync+0x199/0x4d0 [ 1992.306377][ C1] evdev_pass_values+0x627/0xbd0 [ 1992.311515][ C1] evdev_events+0x1e6/0x340 [ 1992.316219][ C1] input_pass_values+0x288/0x890 [ 1992.321349][ C1] input_event_dispose+0x330/0x6b0 [ 1992.326653][ C1] input_inject_event+0x1dd/0x340 [ 1992.331890][ C1] evdev_write+0x2fc/0x480 [ 1992.336581][ C1] vfs_write+0x27e/0xa90 [ 1992.341017][ C1] ksys_write+0x145/0x250 [ 1992.345611][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.350313][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.356391][ C1] [ 1992.358728][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 1992.365004][ C1] INITIAL USE at: [ 1992.368998][ C1] lock_acquire+0x120/0x360 [ 1992.375432][ C1] _raw_spin_lock+0x2e/0x40 [ 1992.382204][ C1] evdev_handle_get_val+0x70/0x9f0 [ 1992.389366][ C1] evdev_ioctl_handler+0x1202/0x1f10 [ 1992.396440][ C1] __se_sys_ioctl+0xfc/0x170 [ 1992.402985][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.409345][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.417161][ C1] } [ 1992.419753][ C1] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1992.428272][ C1] ... acquired at: [ 1992.432186][ C1] lock_acquire+0x120/0x360 [ 1992.436878][ C1] _raw_spin_lock+0x2e/0x40 [ 1992.441557][ C1] evdev_handle_get_val+0x70/0x9f0 [ 1992.446850][ C1] evdev_ioctl_handler+0x1202/0x1f10 [ 1992.452428][ C1] __se_sys_ioctl+0xfc/0x170 [ 1992.457292][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.462125][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.468300][ C1] [ 1992.470821][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1992.476405][ C1] IN-SOFTIRQ-W at: [ 1992.480401][ C1] lock_acquire+0x120/0x360 [ 1992.486562][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1992.493400][ C1] input_inject_event+0xa5/0x340 [ 1992.500078][ C1] led_trigger_event+0x138/0x210 [ 1992.506675][ C1] kbd_bh+0x1c6/0x2e0 [ 1992.512647][ C1] tasklet_action_common+0x369/0x580 [ 1992.519677][ C1] handle_softirqs+0x283/0x870 [ 1992.526215][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1992.532550][ C1] irq_exit_rcu+0x9/0x30 [ 1992.538461][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1992.545783][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1992.553587][ C1] _raw_spin_unlock_irq+0x29/0x50 [ 1992.560358][ C1] n_tty_ioctl_helper+0x27e/0x340 [ 1992.567048][ C1] tty_ioctl+0x9c3/0xde0 [ 1992.572980][ C1] __se_sys_ioctl+0xfc/0x170 [ 1992.579289][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.585551][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.593362][ C1] INITIAL USE at: [ 1992.597249][ C1] lock_acquire+0x120/0x360 [ 1992.603439][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1992.610541][ C1] input_inject_event+0xa5/0x340 [ 1992.617238][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 1992.624322][ C1] led_trigger_set+0x52d/0x950 [ 1992.630659][ C1] led_trigger_set_default+0x260/0x2a0 [ 1992.637777][ C1] led_classdev_register_ext+0x73d/0x930 [ 1992.645003][ C1] input_leds_connect+0x517/0x790 [ 1992.651606][ C1] input_register_device+0xcfd/0x1140 [ 1992.658567][ C1] atkbd_connect+0x72e/0xa00 [ 1992.664760][ C1] serio_driver_probe+0x82/0xd0 [ 1992.671192][ C1] really_probe+0x26d/0x9e0 [ 1992.677263][ C1] __driver_probe_device+0x18c/0x2f0 [ 1992.684101][ C1] driver_probe_device+0x4f/0x430 [ 1992.690680][ C1] __driver_attach+0x452/0x700 [ 1992.697159][ C1] bus_for_each_dev+0x233/0x2b0 [ 1992.703681][ C1] serio_handle_event+0x1f9/0x8d0 [ 1992.710456][ C1] process_scheduled_works+0xade/0x17b0 [ 1992.717580][ C1] worker_thread+0x8a0/0xda0 [ 1992.723821][ C1] kthread+0x70e/0x8a0 [ 1992.729464][ C1] ret_from_fork+0x3fc/0x770 [ 1992.735632][ C1] ret_from_fork_asm+0x1a/0x30 [ 1992.742062][ C1] } [ 1992.744579][ C1] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1992.753609][ C1] ... acquired at: [ 1992.757430][ C1] mark_lock+0x11b/0x190 [ 1992.761938][ C1] __lock_acquire+0x680/0xd20 [ 1992.766816][ C1] lock_acquire+0x120/0x360 [ 1992.771506][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1992.777063][ C1] input_inject_event+0xa5/0x340 [ 1992.782163][ C1] led_trigger_event+0x138/0x210 [ 1992.787306][ C1] kbd_bh+0x1c6/0x2e0 [ 1992.791490][ C1] tasklet_action_common+0x369/0x580 [ 1992.796960][ C1] handle_softirqs+0x283/0x870 [ 1992.801893][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1992.806645][ C1] irq_exit_rcu+0x9/0x30 [ 1992.811050][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1992.817302][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1992.823459][ C1] _raw_spin_unlock_irq+0x29/0x50 [ 1992.828772][ C1] n_tty_ioctl_helper+0x27e/0x340 [ 1992.833970][ C1] tty_ioctl+0x9c3/0xde0 [ 1992.838644][ C1] __se_sys_ioctl+0xfc/0x170 [ 1992.843415][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.848125][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.854297][ C1] [ 1992.856624][ C1] [ 1992.856624][ C1] stack backtrace: [ 1992.862508][ C1] CPU: 1 UID: 0 PID: 28896 Comm: syz.2.5445 Not tainted 6.16.0-syzkaller-12187-g0227b49b5027 #0 PREEMPT(full) [ 1992.862526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1992.862533][ C1] Call Trace: [ 1992.862541][ C1] [ 1992.862546][ C1] dump_stack_lvl+0x189/0x250 [ 1992.862565][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1992.862579][ C1] ? __pfx__printk+0x10/0x10 [ 1992.862596][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 1992.862609][ C1] mark_lock_irq+0x35f/0x390 [ 1992.862622][ C1] mark_lock+0x11b/0x190 [ 1992.862632][ C1] __lock_acquire+0x680/0xd20 [ 1992.862649][ C1] ? input_inject_event+0xa5/0x340 [ 1992.862662][ C1] lock_acquire+0x120/0x360 [ 1992.862676][ C1] ? input_inject_event+0xa5/0x340 [ 1992.862690][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1992.862705][ C1] ? input_inject_event+0xa5/0x340 [ 1992.862716][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1992.862729][ C1] ? led_trigger_event+0x4b/0x210 [ 1992.862739][ C1] ? led_trigger_event+0x4b/0x210 [ 1992.862750][ C1] input_inject_event+0xa5/0x340 [ 1992.862762][ C1] ? led_trigger_event+0x4b/0x210 [ 1992.862772][ C1] led_trigger_event+0x138/0x210 [ 1992.862782][ C1] kbd_bh+0x1c6/0x2e0 [ 1992.862795][ C1] tasklet_action_common+0x369/0x580 [ 1992.862809][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1992.862823][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1992.862837][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 1992.862850][ C1] handle_softirqs+0x283/0x870 [ 1992.862862][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1992.862874][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1992.862885][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1992.862900][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1992.862910][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1992.862922][ C1] irq_exit_rcu+0x9/0x30 [ 1992.862932][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1992.862947][ C1] [ 1992.862951][ C1] [ 1992.862956][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1992.862968][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1992.862983][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa bc 21 f6 48 89 df e8 02 54 22 f6 e8 ed a5 4b f6 fb bf 01 00 00 00 52 4d 14 f6 65 8b 05 cb 90 24 07 85 c0 74 07 5b c3 cc cc cc cc [ 1992.862993][ C1] RSP: 0018:ffffc9000afc7e30 EFLAGS: 00000286 [ 1992.863006][ C1] RAX: 16aa5c46a25eae00 RBX: ffff88807d261450 RCX: 16aa5c46a25eae00 [ 1992.863014][ C1] RDX: 0000000000000007 RSI: ffffffff8d9b6bc1 RDI: 0000000000000001 [ 1992.863022][ C1] RBP: 0000000000000000 R08: ffffffff8fa37937 R09: 1ffffffff1f46f26 [ 1992.863030][ C1] R10: dffffc0000000000 R11: fffffbfff1f46f27 R12: dffffc0000000000 [ 1992.863038][ C1] R13: 1ffff1100fa4c292 R14: ffff88807d261450 R15: ffff88807d261491 [ 1992.863050][ C1] n_tty_ioctl_helper+0x27e/0x340 [ 1992.863066][ C1] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1992.863077][ C1] tty_ioctl+0x9c3/0xde0 [ 1992.863093][ C1] ? __pfx_tty_ioctl+0x10/0x10 [ 1992.863107][ C1] __se_sys_ioctl+0xfc/0x170 [ 1992.863121][ C1] do_syscall_64+0xfa/0x3b0 [ 1992.863136][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1992.863150][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.863160][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1992.863172][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.863183][ C1] RIP: 0033:0x7f224af8ebe9 [ 1992.863194][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1992.863203][ C1] RSP: 002b:00007f224be8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1992.863215][ C1] RAX: ffffffffffffffda RBX: 00007f224b1b6090 RCX: 00007f224af8ebe9 [ 1992.863223][ C1] RDX: 0000000000000000 RSI: 000000000000540a RDI: 000000000000000b [ 1992.863230][ C1] RBP: 00007f224b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1992.863238][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1992.863245][ C1] R13: 00007f224b1b6128 R14: 00007f224b1b6090 R15: 00007f224b2dfa28 [ 1992.863268][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1993.328564][T11415] usb 4-1: Using ep0 maxpacket: 32 [ 1993.351796][T11415] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 1993.360091][T11415] usb 4-1: config 0 has no interface number 0 [ 1993.724666][T11415] usb 4-1: string descriptor 0 read error: -71 [ 1993.731131][T11415] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1993.741559][T11415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.758999][T11415] usb 4-1: config 0 descriptor?? [ 1993.764377][T11415] usb 4-1: can't set config #0, error -71 [ 1993.771208][T11415] usb 4-1: USB disconnect, device number 19 [ 1994.569327][ T5955] usb 1-1: USB disconnect, device number 64 [ 1995.103462][ T1156] macsec0: left promiscuous mode [ 1995.109147][ T1156] bridge0: port 3(macsec0) entered disabled state [ 1995.117165][ T1156] bridge_slave_1: left allmulticast mode [ 1995.126056][ T1156] bridge_slave_1: left promiscuous mode [ 1995.132693][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.142339][ T1156] bridge_slave_0: left promiscuous mode [ 1995.148786][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.199076][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1996.208940][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1996.219773][ T1156] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1996.228213][ T1156] bond0 (unregistering): Released all slaves [ 1996.438052][ T1156] bond1 (unregistering): Released all slaves [ 1996.450134][ T1156] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1996.458162][ T1156] bond3 (unregistering): left promiscuous mode [ 1996.465091][ T1156] bond2 (unregistering): Released all slaves [ 1996.677816][ T1156] bond3 (unregistering): Released all slaves [ 1996.763762][ T1156] tipc: Disabling bearer [ 1996.770770][ T1156] tipc: Left network mode [ 1997.072285][ T1156] hsr_slave_0: left promiscuous mode [ 1997.083237][ T1156] hsr_slave_1: left promiscuous mode [ 1997.090798][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1997.101724][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1997.633415][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1997.693476][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1998.594446][ T1156] IPVS: stop unused estimator thread 0... [ 1998.657496][ T1156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1998.736767][ T1156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1998.783910][ T1156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1998.825383][ T1156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.246871][ T1156] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.297439][ T1156] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.356461][ T1156] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.403453][ T1156] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.486555][ T1156] bridge_slave_1: left allmulticast mode [ 1999.495011][ T1156] bridge_slave_1: left promiscuous mode [ 1999.502207][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.511463][ T1156] bridge_slave_0: left allmulticast mode [ 1999.517288][ T1156] bridge_slave_0: left promiscuous mode [ 1999.523437][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.534855][ T1156] bridge_slave_1: left promiscuous mode [ 1999.541784][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.550723][ T1156] bridge_slave_0: left promiscuous mode [ 1999.556487][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.576812][ T1156] bridge_slave_1: left allmulticast mode [ 1999.582729][ T1156] bridge_slave_1: left promiscuous mode [ 1999.588691][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.597614][ T1156] bridge_slave_0: left allmulticast mode [ 1999.603687][ T1156] bridge_slave_0: left promiscuous mode [ 1999.609496][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.963267][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1999.974051][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1999.984189][ T1156] bond0 (unregistering): Released all slaves [ 2000.786746][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2000.796377][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2000.806143][ T1156] bond0 (unregistering): Released all slaves [ 2000.866387][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2000.876649][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2000.887572][ T1156] bond0 (unregistering): Released all slaves [ 2000.988551][ T1156] tipc: Disabling bearer [ 2000.994048][ T1156] tipc: Left network mode