last executing test programs: 6m29.915338704s ago: executing program 3 (id=446): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="c3f4f97ba82ac88a57151b496323166e1cadee452efc0e296f0550fb7ccb2b26eba77e2f39474fb4e5297d5477ee4b2d50935132573d17e62ba714cc570e9c647f1a24251315019d4066d7a3e91823fde1658b24e3c00f4a4c2b5455f332b25bb27a10665370f192ddc9f240dbbb5cf3507ad454ab3edbceba6e5e745ad30bf2a6008339c0e5056e00177b79aa90c32923288b844e820fdd4786a28a21519b68976d3a3e28670099879c03caf8b6a101f241ab0c2bb9bedc48b25ba138", 0xbd}, {&(0x7f0000000400)="af5cc1b60f79409009f32caeee8a36b0b6ed38648305545e2768cfe653cafa33eeb1cce9a131a6051d157886d881083372861c1f7b145d7d3505052730cc377e18f45111774c2927e32dd9c3ade1a780cac89260773b3f1b0427ca16149a9faae9df4511c63fb614a8f3a466efc19a0fa0ccee93ae53acc633f7884dee69384361394322666255d2efe8efb8cf22dd9266bfec2f9ed567f2722a8b9f7c9df8bfe8621da777eb7abbb67e44435ec5cfe31874fe4909546b", 0xb7}, {&(0x7f0000000640)="2d86cb24f27fbe0734c46169c562ac8e8a3243915a8838fd7c3598a6bc8626a41bc2564a04720cab0c255f87c58650d595659873d823b4a8ed77374142309c3a29dc8779bfbdcdc11afac2409b08875502693ed8807bd36a775143d5d38320f91a4ae65af13e79658eb75f67217f", 0x6e}], 0x3, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r2, r0]}}], 0x28, 0x8000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="0100feffffff000000003900000008000300", @ANYRES32=r5, @ANYBLOB="04005a80ec005a80500002b4"], 0x2e0}}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0xc, 0x6, 0x0, 0xb4c, 0x9, 0x400005, 0x0, 0x9}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) getsockname(r6, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m27.514931394s ago: executing program 3 (id=449): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x40d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = signalfd4(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000a40)=""/87) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) syz_emit_ethernet(0xab, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004261009d006400000d02907864010100e0000002441c1561ac1414bb00000003ac1414bb0000040000000000800000000144149e400000000002000000000007ff00000f8600000014ff9078ac141424e5fd4799760a633b00c8120fb51d2cb8915239fef2320571fd97cc021a07888212fbfcba1d0c433ebb96c383e2bb8b76247d0a6e9d4f14871fe9ac5f8760fe825c"], 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) keyctl$session_to_parent(0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) close_range(r7, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_subtree(r9, 0x0, 0x32600) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) unshare(0x2c020400) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) 6m24.866157979s ago: executing program 3 (id=457): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r0, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x12, r5, 0x0) r6 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x5, 0xfffff034}, {0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6m23.80384687s ago: executing program 3 (id=463): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CLR_FD(r2, 0x4c01) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m22.773331505s ago: executing program 3 (id=469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)="c3f4f97ba82ac88a57151b496323166e1cadee452efc0e296f0550fb7ccb2b26eba77e2f39474fb4e5297d5477ee4b2d50935132573d17e62ba714cc570e9c647f1a24251315019d4066d7a3e91823fde1658b24e3c00f4a4c2b5455f332b25bb27a10665370f192ddc9f240dbbb5cf3507ad454ab3edbceba6e5e745ad30bf2a6008339c0e5056e00177b79aa90c32923288b844e820fdd4786a28a21519b68976d3a3e28670099879c03caf8b6a101f241ab0c2bb9bedc48b25ba138", 0xbd}, {&(0x7f0000000400)="af5cc1b60f79409009f32caeee8a36b0b6ed38648305545e2768cfe653cafa33eeb1cce9a131a6051d157886d881083372861c1f7b145d7d3505052730cc377e18f45111774c2927e32dd9c3ade1a780cac89260773b3f1b0427ca16149a9faae9df4511c63fb614a8f3a466efc19a0fa0ccee93ae53acc633f7884dee69384361394322666255d2efe8efb8cf22dd9266bfec2f9ed567f2722a8b9f7c9df8bfe8621da777eb7abbb67e44435ec5cfe31874fe4909546b", 0xb7}, {&(0x7f0000000640)="2d86cb24f27fbe0734c46169c562ac8e8a3243915a8838fd7c3598a6bc8626a41bc2564a04720cab0c255f87c58650d595659873d823b4a8ed77374142309c3a29dc8779bfbdcdc11afac2409b08875502693ed8807bd36a775143d5d38320f91a4ae65af13e79658eb75f67217f", 0x6e}], 0x3, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r2, r0]}}], 0x28, 0x8000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="0100feffffff000000003900000008000300", @ANYRES32=r5, @ANYBLOB="04005a80ec005a80500002b4"], 0x2e0}}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0xc, 0x6, 0x0, 0xb4c, 0x9, 0x400005, 0x0, 0x9}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) getsockname(r6, 0x0, &(0x7f0000000000)) close_range(r11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000200)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 6m22.347937292s ago: executing program 3 (id=470): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x10000000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@init={0x18, 0x84, 0x0, {0x52ab, 0x0, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1fd0}}], 0x30, 0x20048000}], 0x1, 0x20044844) vmsplice(r2, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xa) 6m21.778113775s ago: executing program 32 (id=470): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x10000000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@init={0x18, 0x84, 0x0, {0x52ab, 0x0, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1fd0}}], 0x30, 0x20048000}], 0x1, 0x20044844) vmsplice(r2, &(0x7f0000001780)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0xa) 11.496843471s ago: executing program 1 (id=2152): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, 0x0, 0x0) 11.363456255s ago: executing program 1 (id=2154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1ffffffffffffffc) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x2, 0x10, 0x40, 0x1}, 0x83, &(0x7f0000000100)={0x5, 0xf, 0x83, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x6, 0x11b8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "dd40be02c3e1b2f5e3897abd0c1616db"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x39, 0x5, 0x6, 0x6, 0x4}, @generic={0x55, 0x10, 0x3, "811a5ddaea3afb520a7eb7808926e1dd7035fc38174287fc7d79f3db61e2846c31e61cb6a276584c6ad52c6837d2809024d929a31309921fdfd703b6282b88da62241486835fdc5183a229e93739bb312918"}]}, 0x3, [{0x6d, &(0x7f0000000300)=@string={0x6d, 0x3, "d7b106a879d2634eb1866fbdcee90a42155fb62b08ba900fc1f12f807b53e06cdb74d0d254c1489278964460f6f6f1df48da6f6d33cf0c0a39f952c1ec91414439bddb3403b44fed62a36198070fd1344ece0ed8a61bf39d50cd3ec1d7859c83929537f167c80b30edf543"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2453, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x100, 0x5, 0x1, {0x22, 0x743}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x75, 0x3, 0x4, 0x8, 0xc6}, 0xeb, &(0x7f00000004c0)={0x5, 0xf, 0xeb, 0x3, [@generic={0xb8, 0x10, 0x0, "3457698d0e0439f2f8fe8d73ef2efca58d6e57e4bd9bf6512b5ee03e0449846d8401c419f75a3152ba153ce6133b102c393ad4775fce46b252712d371ce9b32dfdab13925a76d36e6cb5d2d6cf6b0d8de6bbcc49c5e47e3d838aa8fc36c84e5c4d2de90b981bf8519db2643d9123ede48856c5a5abec4278d1582bd35cac5328efd9d713847471f177f33f346fdcba0bba3708d3a0d5a971faf5034597bdf2e30f39e53210d6ac4b2e5e6950b8aa7e3c9a78af1dc5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5d, 0xfb, 0xf1d}, @ssp_cap={0x24, 0x10, 0xa, 0xf9, 0x6, 0x80, 0xf00, 0x1e, [0x7, 0x7e30, 0x3f00, 0x3fff, 0xcf, 0xcf]}]}, 0x8, [{0x54, &(0x7f0000000600)=ANY=[@ANYBLOB="5403112697558cb7fa436bdf079930b1581bc2e7f001e5321c1ba276d69c14a4e3de4b4968e8a73f2b2583714150f69be059d429c200b255ee5334085ceb68dc1da2e6b6529955150876b1574c2624c74bb93a9c"]}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "5090f5586e903247cbc3e6a8c73098843d82632963c7c03139d3a9db5b1d8884bb4c1b2be5c26bd508f09e6c3cc449cf1b670049e3fe2a48eabeedd3d4b49bce3eb93c327fc6dbcfefb669abec0176a8aa837c0a3a2f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x100a}}, {0xca, &(0x7f0000000740)=@string={0xca, 0x3, "b0175aafb92d0506748f3843552efebe2bd21306363b30eeb36cf518159f42d20500e103d9c68e6a77219b388569b3e5b7fbc06b3092c9e9009b3de0d586c0f470c5c6bba5a2fd04c3a9a6130f2956feb2914293c4603eae2e64c0ac9472ca35539819426da8102761743a622e1c4e05ced07382b0a7fe5ab2bab61dbb7d0e97331058fd1c3f60c5d812ad4ca9af8cb6a1905589d47475389a375305fd92a62c6396dfa3ecc97337fcb26df721de6e6ea3b9e53145a4b6bb3cb55d9b07640860f78e1d606c9a6006"}}, {0x10, &(0x7f0000000900)=@string={0x10, 0x3, "88aa41cd92e396783d956ea69f95"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x9e, &(0x7f0000000980)=@string={0x9e, 0x3, "0db83f8e40979e5dddb07434909dd12970863f328fdfbcf8d6120c6b2f105445e5351fecb352293df910e47955f9d529830205a49e05db338a8cd239de13fc4cf43530a54657264db5544b091a9242e797626107d522dfaf8bb3d0e6cabf89ded52a99ad18a968ad86ad52f9fabb0ee240ea809394454b7d9453fc622337881ab85c60f6e0962667b3facbc5ede31411e961c619d801d2b9291d40c3"}}, {0xe6, &(0x7f0000000a40)=@string={0xe6, 0x3, "0bd99c6b368997653b05a529674a533510921c25549bc9314e6edff366e3f301f68834f0844d3be3ba896f4ca3fd81e467264ccd235531f625a6f18195f9bb6a0dead7e8394dd3b068184bb95f059beddccb4fbce0f93c90f8c9524ec60a077f6e42dc75d751ae7661f3973b05b73b88d061e5a250c0f55b8f42b7c755fe0fd79febffdf2451872e2aaa25ad9cb8646c46a9594ee26e7842c8e058fc06a1d48335bcbcc25983eacabd9c2a36fa535c11cd47ddf2ef07b20457e5a193ef06b720329ab50dd3b586dcee49b089b688fc16d1dc06a43a87d61c2a67372a405fc59e7c9fde2f"}}]}) syz_usb_control_io(r6, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r7, r7, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r5, 0x1, &(0x7f0000000c40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x32, r8, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x2}]) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) unshare(0x2c020400) cachestat(r3, &(0x7f00000005c0), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x100, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b68, 0x6, 0x0, 0xfffffffffffffffa], 0x0, 0x108000}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x40002, 0x0) 9.939857474s ago: executing program 0 (id=2162): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b703000000000800850000008300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110000"], 0x0) 9.742255821s ago: executing program 0 (id=2163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f0000000080)={{0x1, @rand_addr, 0xfffd, 0x2, 'wlc\x00', 0x8, 0x2, 0x3}, {@private=0xa010100, 0xfffd, 0x3, 0x8, 0x0, 0x40}}, 0x44) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000500)={0x400, 0x0, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x1}, {0x0, 0x80000000}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x5}) recvfrom$inet(r7, 0x0, 0x0, 0x40000182, 0x0, 0x0) 8.31548366s ago: executing program 0 (id=2168): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x24, &(0x7f0000000040)={0x0, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$inet6(0xa, 0x3, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @in=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, r8}, {0x0, 0x0, 0x800, 0x2, 0x1}, {0x0, 0x0, 0x2000}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffffffc}}, 0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresgid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x1, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000000240)={0x400, 0x0, &(0x7f00000001c0)=[r10, r6]}, 0x2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.705736803s ago: executing program 1 (id=2169): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000000", @ANYBLOB="000000002f47c439a7000000003436b702000014000000b70300000000000085000000bf090000630000006206000000230000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5b, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r1, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x8010aebc, &(0x7f00000006c0)={0x1, 0x0, 0x5, 0x3, 0x2}) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="85df4a5709e9743742d04b0e11b4f00468704cd6cd2fc1a98ffe935bc1ea67487c04f21027b52a08e037a259c52bfabc488e9b6540145c2507fc96ccd84058abb68e10b51a84d16cb07b306267e3a4c3077a3ca2efc05230b8a5d4495ab91eddff12b8299fed4f0570421f7eb156281969bb1b72115b18ad292c531d8fcbb3858c672e66c81e4165945a90e647c3be61f079af9413309ed62d683fb512a8d6b820a8f7a3d732a11ca47b6e62511857ca491cb182343cf2b21c36ff4faf9e6ee97c566b85a6c04149da6f2b25e1eca496f78ae9126cf9", 0xd6, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000280), 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x358, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33a00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x186}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x733}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x71b3}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff1f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x776e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x358}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) mkdir(&(0x7f00000004c0)='./file0\x00', 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) 6.172628595s ago: executing program 5 (id=2178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="a85500001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) 5.86381649s ago: executing program 5 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xcc, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e20, 0xf02, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, @in6={0xa, 0x4e22, 0x1, @empty, 0x6bed}, @in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x25}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xf1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000380)={r2, 0x5d}, &(0x7f00000003c0)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x23, 0xa}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.570576637s ago: executing program 1 (id=2182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x400}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0xe16c, 0x2, 0x1}, 0x18, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001d040000000000001c000000000000007504000001ed0a0064000000170000000c040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29fa9ec35866a96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r5 = syz_open_procfs(r4, &(0x7f0000000dc0)='gid_map\x00') preadv(r5, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001880)=@delchain={0x13d0, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0xb}, {0x1ffcd, 0xfff0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1378, 0x2, [@TCA_CGROUP_EMATCHES={0x1374, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xde32, 0x3, 0x8}, {0x80, 0x7, 0x5, 0x5}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7fff, 0x3, 0x7}, {0x7fffffff, 0x2, 0x3ff, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10e8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x401, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x8000}, {0xe3a, 0x2, 0xffff8001, 0xc3c3}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8000, 0x3, 0x3b52}, {0x6, 0xb5, 0xffffffdb, 0xb}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x35f}, {0x98, 0x3, 0x424e0a871a5cbc99, "020482"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x8, 0x7, 0x8, 0x5df0a798}}}, @TCF_EM_CONTAINER={0x100c, 0xf43, 0x0, 0x0, {{0xcd60, 0x0, 0x600}, "894bbe77958ffa969c44d5f197bb626fce60cd6b2058d6e78e93d67e76622d887b20ed6fbf497efd0037c80485efccac36e12891e0c315fb2a44a1f18f848b69f663e31d0a68876213b46d5d5e421e4e78c06e25d27d42ba45808b451b56435d34841c11dc278a6a5fd772ac80d1eaa25aaebaa7ebed08910a6ade21d78de9292f5cf6ad8609fe4f7126dcf4583436ea2f1cca00cca784dadc3bd53f9b5ee218d1a8df2200527ac4dcdda68bcd837376d58a755d83aada42236946b6d94a45baf48d3e80a2006af09f9542e5cc7397421afb508cfa76e9b568dec14d43327c190ddea19cc9ff0d4b8dc24a2020f5478c87a036fdef4354e63744b24398be2c42111c24f0b789936ec95dd947648fd8b7540d1076cb306ab90a5396efb73d3364fb8f83bddc5169195d524ac4deaf0422547de0b4bae1ee516498b8ec7f4c0906f08440b8ba3baed15ab184160af8bd1dab014a13e79a22992f9b992239dc5e899059711a7be40d5e5d8f24e53a9ba997f076ff7238b849b38516de593885cff76a4fd6f5ba5865837b284908bb17b49ee84f0d810051f93c6e924d39fd3c7abe477d83f4cd9a1524458f8bcebc38b4f0da5c5e4d27c54e39fb019f4d25f202b3bbb3b47f6f265272c481505dd4173d8d7acb33b80eb4d7803ea8696f00b14c351fd220474a1a6c8e37d61945b568d2952db0f985ae5e31e50fc448d16286aa23e84b70334dee3cdf82a642b44de13bb3ab8b150df3bc0b521f0581d6c4300542e297d92fb69aba71f386d009d6f3f04bc5e62667bc93334c67b8b4235555b2f954a9aed09e67d4b771ec4430072a81a634fcfab734a5982fb609e5a59f16ec47686979e0a3e230bfdd048c31de9b4c2de95ec5917351cb9cf2340d9b48682325b7dee5bfbbb7b549ea4d1a6349053206d892e0b7b9d05390c81c1ad98c4781ab02cb6d18e988b30cf1dbefac7c1c8af27fb5a256720f545ba5d1d4a725ff96e874f66d3a75b12fad106dae1f1f10945c61765aa06d77b85ddca3a227ebbd416de97178bac10c0348a71b9dc2a4369b7c51e9d2ecefcef448ca0c15b5a49881a33e0cd3f9d828230dc2b64f1555d5fc80ad5da8f3de28316048c85d1bfe929b2f41e90cb80e5dacaae861ea4d4a5b721f3d3224d3a59f50224fb5d3143c520dfe2a6783f066c9dfc00eb1d8d5189de13a998aa69d14f34e0cfb242fdcef346d92c259ecb240c714628d90514a3477cd405579e045100d9c3b1374f4446e110048bd6d1ba1e3dc6b29ef3df9ec4a4d8a78a29893a0a0a90919e1a33a9ab0520c238b194b9bf368a2ae414d3324d14a642cac4dde54b20c21e2a78bfe2989daa51a4cf0cf1e3b806eb2ebc9b70f42ce96875f7468a6f2be64b5c3efc6e7a5ee07ffab386b15f8d2fb338526ab5e3f9f5c29bdf7f2790cba4872dbf4549afe1ef4e2f9d5dda08705f33ad855dbd2ed59885cff9c5afabf26621e0f620374085788b83362dc1819319af6e1982631333c2015fb75a21a6ce5deeb5352d1eafe969191f15e796eee112e87f968fa897d0ee83aaf24ed314f97afee8456833b5bc3c1c98509bef48c51d2d0b23ed87dbe2ae8181ed766df6e4b1a33670f67157a39bab0d82fa896e0ca7e8fc2e37eca385f5dc52fe3d4d7351629d3e1a4604f41fd46de215068320875607a0625d342c531f9401f85d07f418b9859b726f2d23bbe92cd96252d8237e3ccffe734bcdcc4d5088f781181426f071c61e6f964ff7766f34e654533245da8074f02dd5310ecd8f4e0918cf025e64c62c44fa00037a5c14a5ff42a10dc01bfc73a4ecaa0d0b6881173989b2b4fb0db60980bacfc00d18341fd536dd7cfacefd3728cbe8123849cb4ea2e8e024990d28e779a84c011ee74a90987742f6427702d8507f01475219a12e27ac34b693de25af8930f1d9f21feb22647831ec55a72a571a5d36cd91058446f262efd9c1cbeb11b990f5ad60f595a29022b90743d1bf60295525cb171ec58f8e2fc034d3630edce4595f8ba1d455e882db2d33aa114d63785ba7979ed2237e069c8ee7d2556815c9f3602c27632c4bb990b38104755ed25e90871274909ffe747766a3e8fd31fdf73db792aeec41dc6fc94b3651fdb300c9edfe5af4c02de96e6f9e5d4ce66c1e9f23d780363f9fb7ff9dc27e38d88faa31283c5d28209edf6acd37fc3e822a26fc54df329ab5ca35d6467b967cf1f8e4b62c2bb3fce680aa171bc13c98e11a4976253a526118c9c60239aa4fb1c8c06149d45e2ffb04b9e670079ed3b1f6fe2097a5c8b1294167d0cb75864d26e311d324e6fe10bf8aa5ab1c3a17eddecbc91b4d4a9487431991077d1034617ceb6b493b3bf418e132f6f559ea445fc5a1b074a54663d5b48027d4a565c6bf15f64b7e737401f75c906800dac1be422d250035b8e09f5d43daeecbde927bd7bcef827349a77b3c0ed5f4be29300eba65c61895534511eeb6004b9d717ef0d4b090e63e1c3f1a6b18a4b8a4da9d06ce87b48ae12b0fe2f26ac93e100e64f2bed492ee1c80fc67f3d355c391a05c95c686f25e2b2ca0455009014d7841cda55b6a6b5218aa38129b8ffb4eb1c6fe6aa296eec807544c7c233a5c2b670e6a5e071719660a774b56392fe066d2eec14c08a477e5056b59d7d87c0faaa93911155eefbe6aa31d41b2d429ba58a15a8e3a814aecfc929de4b6fb38f3aa8ae1f9b712accbf2f1d7255cccd11e5843f06d34dd7e95c2e4f1774d13003bc39f6c9ce086c6c88a10e3b68dc5ef65be4f80ea2c6a9d3b95d4bf755df41737b2dc891cae13f9577c2a82efae2062c811d13ebe6c4da398013c043f54ec31947884d0d237529c252631ea791028fd7b9fc9cd41a3d437bf7dca877bbacc4f7e8d3b8ff7d0b0dfd528033cd2a781c49e3734ac9d5cc5144cb8b80fe1189f66ff917d3263ddaa3be5d4bcbbb3b2c9f0a8ffb1efb8718e58ac69495661dac177c1d7ae7b0224bca049ff81e5429760f3584589d6acc79aed7337f53e4edb9c68bfa85670b14f74d13422262d97a6fff91aef1566610d43e119d556f7ec845d89e3e03ee7d614a77333c1a2cec9a8a3e1c99dc1a6a3364003b70579270177cdd5aad45a8d9aace6963ef71cb95f973817ba1243a6fb70928dc4f911b6ac67b707474679b50727434daf1ecacbad860d8ebce2df16a10a7cdfc262c9651776f13a03df9ee1732fe9291ee13c780858361f3889d27f2531fcf44c99db884e4ed4b91550353f83f0b9ca832de14e8963075cb77f680d3e4a0dd5e00ad0f3cc3feb5ca35a15c7286509b496cff26f8b1d27655badcaad411e4360447b2801dd9268da3c367120d08d222f4eea758860cce3663076a24b81c0bc713b3b2a91d835022a216843fec95bac3ddb9fc8e1a642aee23c5148b31677c6773f5f5ec672e7b001368330d31bcc77bf33328f9f0a880448d895a72d4288bb964b3b15ff3aecd3000d20ac3bf4ba4d6969c17cc48d4aa7be3c7db32bc993516e8b34626691281347c2534b54bc4a5040e8680653697081616fe8a0f7ff8862303a31acbf72a8cef12937d4d8cdb3a748d2c449eec1d4481f9247cffc26409e7efbf3d2a3b51b5861e2c7f67f5fbc08c57e6d7d8216142e4a6754d11f5bee8df56067ed569c8d7a4f0f840874ab423355520a9dc091fc92b37e8498c4336618a1b5c2c431b4775ebbede08eacd493aa689686559121f68fe469f603b2d4a4c4d19d0961f1332d1c51f36bf6aa1c32a081993e67fd396a0990615614e14b9e7ff8e6939faa0a35b9ae83b983ac80b0b3ac4bfc1b02893cd858f0f862e944aa2524188c88e169cbffd6108710b9520f290585cd2068969bd02b5596f748f38f97c0a16f0fcb9019b3575692fe646b3e748590a161fa1d91212e36e7c9bc61f03b7a264f5ff2d7b70a65519ec0771c970ba601ed007658268a889eeade780f1dc76e5e4beb4b668fb9e2e3fcc55aa91ce6cd7618bd224afd330274267ee1efe239cdce901429e9cd1b6580d119e846af3c2d042b238aec9a0c3731ee9aa97f2811f5c82b6fa5379326a6930d760be42c9f2782e23adc89ea968745c05fa3ded197f6f2621ea3eff6afa544af3587a38e7f580f7e57fb644a89c3d15b6934e41a18808c7a22342d24c6acfa772d3d56554306b8d8f32ac721ab155c4e56c4cad411082763fde8a4f207149f7229437676c9640e9e04e9be4d32304cc2c2927a0e705430a05f08ad98c60193a985c0a4afcd73507a50a61e4f0befa8af4604ec31a5b3e4ff77e4e1cd9267b167bad578e9af7eaca5de6a7aec0fe30b08bc12ffc82d46e127dc3b533b3687b94b16d3225c87213fdb0068860e4df660a7188efdfa8b7201e87f4e5a6e350565cf8b2b3c40331235d4e38d9a7b3e8b5e21c90970a8ef666eb0da9623ab9b257f06b7586d2670f4ba020a21897fa2c8ee53099c5c829b9b1b6595ffe7d24c894f3c3faf6fe7a716647fe424b80e41070a25ce81763173dfcfecd4e478ee998957d9d01477177f7a8b1a3ac420cfe83521834b60936ef6f8d98d0aa79215ed98f5daeb3b68753ca78e8d051fef34e6711a9324fdf84b48567d708f4816caaf259c436ceed51a80199298ad9862a7293757a88ac15f1498a406f0146aebc7ed8f993c4bd6b59fedf1b000020121ca26936024510f8f9e0dc7fb358738367ab2106a1bb20e1228cdb314019072d733668c1eb0941a52ca1d38903f969082396594895f1b83cd72802c1363d29cef8b9c7bed3f7bed2b67ba696195c7cb44a4d0901a2ea8d5a07c4ee1536f2732ccbe343a104d8eb6662494cf30a54d70b1436296b5b3bda2b9435011a3c897e0ed1ae4c0afbe2e1f9199a575a67899ddf1d373d1e8240e0530a26e780ae377b18e7515db77e2835f4c991d3795facf626757667b42979f3f8d328689eb1459949228ad3359458eca1d007c3f19ad20e5169eda2b10402ad88c77a347d4c56be392909e808105784108ed9b0c83c4dccabd395413be74e5d126a22b518d0a1aeb8c96dd49ddf00116aad6980555ade8a6f338dec6159967d77649020c56002f358578ab0ee32cbe3c1c928d0e63731a4e0bad34fa25a47138ba204d7da2f0e5a4ef9e291e33cf6407b57326751b9b48c45a81f34dd3a804f4c6dae6670f3ff042a74487eb98d63198adddc320092faa8a6df345ed753710b112ed55c49a311dd38eff39c34dde42ab9d44b551fa2316e25f22204a803ae95a6fc4bbeb4a9a063449306ec1f3a12d8ebe1018dd38e589ab6d19aa84d22f4ae085cd8dd739a02c58e20a1054ce4c33fbb228cda1ff81043166eea1ec7f98f4eea1c416d0aefdc1e8f36795e440eed1a119f0476334a9a9e4d22c29e66a6129ef6878582626ce98fd9a956e85a709d579301d9b04de97a1bd017a2fc324c93b799be78e26825acdd7ebe9a9e9594a976022ceaf7f8ce5583600349e4742401b83469cac2fa7010b8cf534d48ca2a075c05d52c4546db75bc16ccd2dc24a8fa629a79364d6751d9c7a8e7125536234a78492d492d19c967836bd6964e2075ae453c17b80e731999271bdd47f549e0951737b3025e60430d1a01ce493b3225952001e2d60d8c5dcb0067deb9e0d7a0c1814c21a3e1d7112654ae929c078f0ac86de0afd016c3c501846599143cad260e5b1051a8cbe7c8710ed9c44a0d6087beefd3f023a617a8771f15c5baf51aa9db886785739cd5948cbc3cc67398e085ee4025378684246ac6b2859e7f791d8edb0768885bffe10f620f0450100a12d3"}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x5}, "3b34fe466b604ca29842313d7c6168434e8d8ead69ec52f5cba911470e1a93fe473dbc8b64958930188719c6288a4515e88a2d8584a16fbb25ba640f03fa"}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1000, 0x8, 0x5}, {0x0, 0x4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x8}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x8001}, {0x0, 0x3, 0x2, "701b1b"}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0xfc, 0x9, 0xffff}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2e4}}, @TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x9a}, "383c3828a1dd3c5a81275f4530cb4438606a03ca55ea43e58885ab8f42cc253769d38c440e357d13a778470993a38065b45b992cd2a114497e7acb18a103ba4a8ca329941b396bcaa563ec4a429d9b603e89f23d881f14026916995cf5f4ab6c4d350c0c4d970af2afb67ab3b6e5aec5e610dc5dad32e892ec5eec1e945cada941a9c465e321e515968aa858a92b49d1d78a57c617fe7990727830e925e1d40fd228f4cb728c61f8db6676ed5fc35c649bd785193b6ab25341b53001135ef48363f3a5f1639ee65469c568e17702498881"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8e1}, {0x80, 0x5, 0x7}}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x81, 0x2, 0x2b81}, {0xa, 0x5, 0x1, "32faf3c939"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb1d7, 0x1, 0x4}, {0x9, 0x4, 0x200, 0x4, 0x6, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf8cd, 0x8, 0xf3b8}, {0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0xfef8}, {0x1, 0x5, 0x0, "79ca3e53b2"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfe01, 0x3, 0x1}, {0x7ff, 0x9, 0x6, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffa, 0x1, 0x8f}, {0x2, 0x400, 0x4, 0x5, 0x0, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x9, 0xff}}, @TCA_RATE={0x6, 0x5, {0xeb, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x13d0}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0xf, 0xa}, {0xffe0, 0x1}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c"], 0x3c}}, 0x0) 5.342092458s ago: executing program 5 (id=2183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000240)=0x101, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) landlock_restrict_self(0xffffffffffffffff, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) (async, rerun: 64) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x883ba7da288b867a, 0x21, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async, rerun: 64) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (rerun: 64) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x84, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x56, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0xe8, 0x84}}, @preq={0x82, 0x30, {{}, 0x3, 0x8, 0x7, @device_b, 0x1, @void, 0x1, 0x7, 0x2, [{{0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x78, 0x74, 0x6}}, @mesh_chsw={0x76, 0x6, {0xfa, 0x5, 0x38}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x98, 0x1, 0x6}}, @challenge={0x10, 0x1, 0xfd}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c432328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46ee60f25b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79", 0x92}], 0x2}}], 0x1, 0xc0) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 5.233463976s ago: executing program 4 (id=2184): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df590", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc92c8123010cfdbdb58334fab843d30b6f1e0f4805c9a152b188a9f605b298e6f1", 0x66}, {&(0x7f00000000c0)="f2c0293a7f3c", 0x6}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b834", 0x6b}, {&(0x7f00000007c0)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf1373d55b65db231bdf20f8738ac39578900a2609508508529dc99cc2e0c7693ea42658dbbcd73a170fd94f4bb03c1de81e670864d13d54a2c849d4f16e19b50dee3f8a13b62dce9e5c32c212d938c5d3", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="300c9fd7cbdc2b2f231d94cd6d13c6ea067c8650bb37ea7854a57cf0f7a972cb67dcc77042c0374d9deb15f82653bcca9269068593831548e731cd83a8b279070f5eebd2be96a9e254368dd95429e8f3d996374df3efe2392466f7", 0x5b}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83f039ffe6e1f06f7b3e966de5ebb9c5f7619c3550cb59fb7880b62ef411bdf76f9fe495b036d68a34f5962b6540b7e38cd9d93e52a809c1aae88fe7214723ea2631f776ea5d951164aaf876436f8cbbae020dfbd3271a36146580128f83e60aa0442348c9d50601a6755eefc23d6b50967e2cba097651718e61e5943fffb8f020735c59dad677af425df8ea066e7b029e65d7b7701d7a1808826f3edfdaac51f2aa735330ae4c9c0089b88a5f99a52772882419d8779cf222", 0xd2}, {&(0x7f0000000c00)="816bc87eac38491e86bdab5e121df6e8717fa17084c08e31af61c8d06574fb76b9d3be15b309853de22860e8d0adee0e3a379864db571e13475fd5a4efa1bdc85d0dd055e7c339989e3736c9497f31becba6db536fe5ac3cd18810cb134ca4e257a82a6388c45f9aa9b5dd71eb3664a800302244633df83b23af8b88106fe90ac7fda71296f8571e", 0x88}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)="b5b2163cfebaf7726e094b03ef2f4c8813ec4070259e4028eac323ba0c40915835c3a0e994929dbf021f6440c4cb65fdf62ffb934838d46c45d264b3cc8bbdebb5989753df9b95de69fedbd0dc6c56fe2ff51c586788834b70fb4b0d5f5021a3fdbced86ba40badd1b4c883f12906de561f3277a939c715831a958c8bda5c0757f993259a9b26eb4c36c6eae170032953f642324ac1567d1c3d233f4b893e70e468fd391c1", 0xa5}, {&(0x7f00000003c0)="b17a67d254b335f61c937270f0ed32071e80baae0ddfffe7f2493fda7588f4e671b741060c948969ea05f0d7de29a9eb11f34fa7b2e4455c018a92a32d6b91c09d96e6d289c2b9633a29b89c998fcc11ce8c7595651455cac3e0d325a1b1f1f4e2ffd1c444f4ca2bba3ceae28bb0ae40bb2cbbd2717e431b617d56d5d56f2b9acd67a762c304be60aac4ce5d2bcbd3e490a2", 0x92}, {&(0x7f00000008c0)="17c52a9e199cb2cf36f7154b0cf857519b48bcb68b6ab0f609b5dece634e889abc069fee6320ebbfe5c6225269814ff492004c91769a4acb123cc56adefb372e0cc0e9c31c7f6fbaf0ec8d4fc93aea172fbaa3d74fd7113bd0045f61a60042ce4832657dc78e4188e8496ce00697551b59338c957059133306c1be29462b0d84b3c2f07081eafc5abff38fab", 0x8c}, {&(0x7f0000000640)="d4c66a8b4abbeb131b502c426580b4598c8c84a3a8c0c4671a767dad864969a3a9f15112185d2c4fd8332aa40de1f7a58d2b19bf750e3e51e16471e3c08ca50de2e01e", 0x43}, {&(0x7f0000000980)="816c072fd3227c3872728f9522900ac25f2b50a49b0e6cd80c0204957cc5c5879e118f6ace2f6e2f24268b411d96434ce4a5813715aa3bd8daf4c30b706d08195b4241efebb51ea5abfd064d5ef8b5456223641300e2be939a11aea9460f13016014a9a8e9dd5eaa13a82956a1362609370ace32a0062fa96134243cbc7c0c5453dbffc351401c55f7d6ccc852f7b7ea6cef", 0x92}, {&(0x7f0000000cc0)="2f3e135640fd3e4fbde550128df8e4957a4056b8f8191521124fb014f14f534afe3bd698f2e6a6e96a031e5b548b694b57687282b953609de4f46d59c8dfbd9af17c80e7eeccf0a8c854d52c38de49b0a13fdd51b1ef8025a4daf518e48aae917761942d9ba9bf8b2f65fc7159ffe42c91ce6ca5f4d52a5dee59c48767debe70d92e10c1dc5d9485f96e336c4a3d44f343c0501e69048e281ff231195eaf2651a0b830e88761b5f9ba2fd219f5740dadab0f4f2ea4b7a3df960eb90a4f2441c0b0fa1370d7b74338418465f3a2df90ced2543dd6b6732bff1ce4832cfae111", 0xdf}, {&(0x7f0000000740)='isS', 0x3}], 0x7, &(0x7f0000001000)=[@ip_retopts={{0x68, 0x0, 0x7, {[@end, @generic={0x94, 0xf, "4f2f21316e7057965e14824a2a"}, @noop, @noop, @generic={0x89, 0x5, "86c51e"}, @ssrr={0x89, 0xf, 0x32, [@broadcast, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x1f, 0x95, [@broadcast, @multicast1, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @rr={0x7, 0xf, 0xa0, [@multicast2, @rand_addr=0x64010102, @private=0xa010102]}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x94, 0x12, "0a4d89543332985ebd14a0202a08f881"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0x4, [{@rand_addr=0x64010100, 0x800}, {@broadcast, 0x6}, {@private=0xa010102, 0x5}]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xdd, [@local]}, @end, @ssrr={0x89, 0x3, 0xda}, @rr={0x7, 0x7, 0x9e, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0xee, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0x16, 0x3, 0x3, [{@local, 0xe42}, {@local, 0x7}, {@empty, 0x8001}, {@remote}, {@broadcast, 0x1ff}, {@local, 0x5}, {@loopback, 0x4}, {@local, 0xfffffff9}, {@multicast1, 0x5}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x2000000}, {@private=0xa010100, 0xfffffff6}, {@empty, 0x7}, {@remote, 0x7}, {@remote, 0xf05}, {@local, 0x5}]}, @noop, @timestamp_addr={0x44, 0xc, 0x55, 0x1, 0x5, [{@multicast1, 0x22ca}]}, @timestamp={0x44, 0x1c, 0xdf, 0x0, 0xe, [0x1, 0x9, 0x40, 0x8, 0x49, 0xffffdc1c]}]}}}], 0x1d0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)="584f9c6301cb9bfac425a73a6e", 0xd}, {&(0x7f0000000e80)="bb28f01ac0069a17676ad65878b999adcf4b87bcaa90c3e038c6cbf08a99f713828b62c799febf7dff3fbbf0d4f49007d4a278bb4566357fc621ee1eef9248101c49dffaa45156b89d9acf96f0ec23035a47e99a22cc24d06178722e17c1fb583d8678679e3bffc2380e8d2f184187b4e014cf", 0x73}, {&(0x7f0000001200)="a603c1f7fb52ad794cf58a408c03e9ff6f2e5d02fdb470035fc0a4979aad7921287aff90775730c59d14a8fb65a574b871a482cbddd4f36d04e0a75700043969f15b9a2643f38c3eaee6627168ae38944dbe898c25f5df5f19e9f8aae4d1389217c453f6b953786bc386da835a11fa5b23010a6b9815e8e958ad78ed0bd4b72335eee2a362393aac48551c1a1b237e2a5bc10c421e0b775633c7732801c45dc4ea2b5caee576942419d9881b3b78824f13589c9d760daf055e810838fce62fe54456dc53efd7c3b2a82900590d349d34db36e63fdfb94cf277b9bdfdc8612ec815e1fe274034f3c704fc5f17d5", 0xed}, {&(0x7f0000001300)="0a098902b76bc3c1d033ccdf2114343f1fa30d91dca81ce99d2eddc1841c68a82af4dcd18955271703764b05077bf2c127657b56af6b11c54b5f0d12088901398a4cd1f7a93cc23db62a266801f40abbca511df4bb24e8a3a965e02e9f043763dea73e34be2aecf8157b7b2e6eac17bec7827d1ebb379551d5905337b3ae63557c25f1806f455c9369d9706a63149376c04995068664abb0af52144d1a5b64bc8d10a245374cd5e0a25a5d553ad5045dda53c5de32ef9dc4007daa081ad507d43518fae4e9a3d621eee31df2904b5a79", 0xd0}, {&(0x7f0000001400)="ab6cb2e7279a6a497f6147534b01e6c000789dbd0fff392f9f5c8d7a4e7f8d6632e1ae178868c8df7d4cd580b9ed8d75d447e6d37f259fb742d055f34104bbd553bf2ea7ba12f3bd1fe2c982b09dadf171d0567cc9829e27f016caef78e7702820c02affaccc497ac400", 0x6a}, {&(0x7f0000001480)="5835c8a6a7f6ad2a562509ecc54326c0febd95f4b19ed0a02f097e035faa24d3666f57897aaf1fecf2dd67a09e39876ca338ed9fbc073258ab86ec25847ad32b3bf5117928eee52ccf8bcf7bb668d89f0afaa711d4d610d8cd041a421472da7ad2af9156aa145153c555182736e538c48a84c605ccc6047269511c63dfebd3124fb7aef9278fda52671e99890eb338610e9aa8c96777038ba77e7a175f36", 0x9e}, {&(0x7f0000001540)="4be39978869f4acf582c23c3818ef74a3cdd1a94c13b395bfb3ce27a99f1a5b355d95be373754d52f43c2c314c15dd0766feef835f56cf38f854df4662a247633ddd8bbc15d69f564a9972d2a0456345d6f2cbde8a1afe", 0x57}, {&(0x7f00000015c0)="1d888c2d74e22b78ec417fe0675d3127bd7c8b8801602f93ee7caee982cef162d3d2b305df4ead8b953b5341bd039e354afecb88941cd24371278fae83a7af38a5c382241ad2ec687c33e6e5f186551e8c3078e66559d8a0735fa49adcc125ce7ad6cb1a9397553737cf97c31d7b157184491988b7a4fc565bf51025bca0ff41333a721b3031d399829a22696324470130db3d3da7e4448a0a7df894f577741933ca8c960167c7101ee69a3fec60b25f30b3d4eb5bd7dffb725a10566e9aa49a33546ac59914aec11a146a36b5", 0xcd}], 0x8}}], 0x5, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.978104993s ago: executing program 0 (id=2185): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_expedited', 0x0, 0xa0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syslog(0x3, &(0x7f0000000180)=""/60, 0x3c) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) 4.784694917s ago: executing program 4 (id=2186): munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r0) 4.665401136s ago: executing program 4 (id=2187): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140), 0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xffff, 0x34524742, 0x2, 0xb, [{0x68da, 0x3ff}, {0x10000200, 0x6}, {0x1, 0x80000001}, {0x3, 0x2}, {0x7f, 0x4}, {0x2b9e, 0xfffffffc}, {0x5, 0x6}, {0x4, 0x6567}], 0x7, 0x7a, 0x4, 0x0, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x4000000}]}}}]}, 0x3c}}, 0x8000) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x382) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xb4}}, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xf9e9, 0x0, 0xd, 0x9, "4b8b3ea4eb8d0f9500b423d00e01000000a0b108025d017a3f0000000000000000000000000000000000000000002000", "1e63f1899acc6c25ad21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0xee2, 0x1]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r9, 0x5, 0x100000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="ce60"}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 4.159046979s ago: executing program 2 (id=2188): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006261746164763000000000000000000008008000d4000000140016801000"], 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x10]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) openat$audio(0xffffffffffffff9c, 0x0, 0x151002, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}, {&(0x7f0000000000)="ea02a3627f34a3d68a2ae0fccf9983ff859a72218b158873bd16e01393f5c00f02474b4c", 0x24}], 0x2) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) r11 = socket(0x2, 0x80805, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) r13 = dup(r12) write$UHID_INPUT(r13, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 4.103862746s ago: executing program 4 (id=2189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000980)="e7", 0x1, 0x10008095, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10021, &(0x7f00000016c0)={0x0, 0x3938700}) 3.769382209s ago: executing program 4 (id=2190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x141842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) write(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r4, 0x10d, 0x5, &(0x7f0000000000), 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x8, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000640)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6043009300183a00fe880000000000000000000000000001ff0200000000000000d10000000000018300907800030300fe880000000000000000000000000101"], 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", 'r\f5w', "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", '\x00', "000b000000000000001000"]}) shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) 3.47899679s ago: executing program 5 (id=2191): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf2fe, 0x0, 0x1, 0x250}, &(0x7f0000000000), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000100), 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x9) r4 = dup(r2) unshare(0x2010000) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, 0x0) listen(r5, 0x8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 1.812333447s ago: executing program 2 (id=2192): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xa]}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x32314147}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pipe2(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{0x0}], 0x1}}], 0x1, 0x68000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="9c", 0x1}], 0x1, &(0x7f0000000600)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x1000) shutdown(r2, 0x1) 1.605607636s ago: executing program 1 (id=2193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x1, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e21, 0x3db, @mcast1}}, 0xe00000, 0x9, 0x4, 0xa61, 0xa9bc}, &(0x7f0000000100)=0x98) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x0) lstat(&(0x7f0000000280)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x1) 1.364355169s ago: executing program 0 (id=2194): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r2]}}], 0x20, 0x8000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20200) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0xffffffff, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) getsockname(r3, 0x0, &(0x7f0000000000)) close_range(r8, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000200)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) 1.212412031s ago: executing program 2 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r2 = syz_io_uring_setup(0x37, &(0x7f0000000080)={0x0, 0x36c4, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x33, 0x0, r4, 0x0, &(0x7f0000000380)=@ethernet={0x6, @local}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='z', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x51d66e4887ecd44f, 0x8000c, 0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x18, 0x15, 0x0, 0xfff, 0x1000, 0x80000001, 0xd971, 0x1}, 0x0) r6 = syz_io_uring_setup(0x4d59, &(0x7f0000000140)={0x0, 0x4, 0x20000, 0x0, 0xfffffff9}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'wlan1\x00', @random="290101004ec6"}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x308) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'ip6gretap0\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) 947.684553ms ago: executing program 2 (id=2196): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df590", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc92c8123010cfdbdb58334fab843d30b6f1e0f4805c9a152b188a9f605b298e6f1", 0x66}, {&(0x7f00000000c0)="f2c0293a7f3c", 0x6}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b834", 0x6b}, {&(0x7f00000007c0)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf1373d55b65db231bdf20f8738ac39578900a2609508508529dc99cc2e0c7693ea42658dbbcd73a170fd94f4bb03c1de81e670864d13d54a2c849d4f16e19b50dee3f8a13b62dce9e5c32c212d938c5d3", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)="300c9fd7cbdc2b2f231d94cd6d13c6ea067c8650bb37ea7854a57cf0f7a972cb67dcc77042c0374d9deb15f82653bcca9269068593831548e731cd83a8b279070f5eebd2be96a9e254368dd95429e8f3d996374df3efe2392466f7", 0x5b}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83f039ffe6e1f06f7b3e966de5ebb9c5f7619c3550cb59fb7880b62ef411bdf76f9fe495b036d68a34f5962b6540b7e38cd9d93e52a809c1aae88fe7214723ea2631f776ea5d951164aaf876436f8cbbae020dfbd3271a36146580128f83e60aa0442348c9d50601a6755eefc23d6b50967e2cba097651718e61e5943fffb8f020735c59dad677af425df8ea066e7b029e65d7b7701d7a1808826f3edfdaac51f2aa735330ae4c9c0089b88a5f99a52772882419d8779cf222", 0xd2}, {&(0x7f0000000c00)="816bc87eac38491e86bdab5e121df6e8717fa17084c08e31af61c8d06574fb76b9d3be15b309853de22860e8d0adee0e3a379864db571e13475fd5a4efa1bdc85d0dd055e7c339989e3736c9497f31becba6db536fe5ac3cd18810cb134ca4e257a82a6388c45f9aa9b5dd71eb3664a800302244633df83b23af8b88106fe90ac7fda71296f8571e", 0x88}], 0x3}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000180)="b5b2163cfebaf7726e094b03ef2f4c8813ec4070259e4028eac323ba0c40915835c3a0e994929dbf021f6440c4cb65fdf62ffb934838d46c45d264b3cc8bbdebb5989753df9b95de69fedbd0dc6c56fe2ff51c586788834b70fb4b0d5f5021a3fdbced86ba40badd1b4c883f12906de561f3277a939c715831a958c8bda5c0757f993259a9b26eb4c36c6eae170032953f642324ac1567d1c3d233f4b893e70e468fd391c1", 0xa5}, {&(0x7f00000003c0)="b17a67d254b335f61c937270f0ed32071e80baae0ddfffe7f2493fda7588f4e671b741060c948969ea05f0d7de29a9eb11f34fa7b2e4455c018a92a32d6b91c09d96e6d289c2b9633a29b89c998fcc11ce8c7595651455cac3e0d325a1b1f1f4e2ffd1c444f4ca2bba3ceae28bb0ae40bb2cbbd2717e431b617d56d5d56f2b9acd67a762c304be60aac4ce5d2bcbd3e490a265", 0x93}, {&(0x7f00000008c0)="17c52a9e199cb2cf36f7154b0cf857519b48bcb68b6ab0f609b5dece634e889abc069fee6320ebbfe5c6225269814ff492004c91769a4acb123cc56adefb372e0cc0e9c31c7f6fbaf0ec8d4fc93aea172fbaa3d74fd7113bd0045f61a60042ce4832657dc78e4188e8496ce00697551b59338c957059133306c1be29462b0d84b3c2f07081eafc5abff38fab", 0x8c}, {&(0x7f0000000640)="d4c66a8b4abbeb131b502c426580b4598c8c84a3a8c0c4671a767dad864969a3a9f15112185d2c4fd8332aa40de1f7a58d2b19bf750e3e51e16471e3c08ca50de2e01e", 0x43}, {&(0x7f0000000980)="816c072fd3227c3872728f9522900ac25f2b50a49b0e6cd80c0204957cc5c5879e118f6ace2f6e2f24268b411d96434ce4a5813715aa3bd8daf4c30b706d08195b4241efebb51ea5abfd064d5ef8b5456223641300e2be939a11aea9460f13016014a9a8e9dd5eaa13a82956a1362609370ace32a0062fa96134243cbc7c0c5453dbffc351401c55f7d6ccc852f7b7ea6cef", 0x92}, {&(0x7f0000000cc0)="2f3e135640fd3e4fbde550128df8e4957a4056b8f8191521124fb014f14f534afe3bd698f2e6a6e96a031e5b548b694b57687282b953609de4f46d59c8dfbd9af17c80e7eeccf0a8c854d52c38de49b0a13fdd51b1ef8025a4daf518e48aae917761942d9ba9bf8b2f65fc7159ffe42c91ce6ca5f4d52a5dee59c48767debe70d92e10c1dc5d9485f96e336c4a3d44f343c0501e69048e281ff231195eaf2651a0b830e88761b5f9ba2fd219f5740dadab0f4f2ea4b7a3df960eb90a4f2441c0b0fa1370d7b74338418465f3a2df90ced2543dd6b6732bff1ce4832cfae111", 0xdf}, {&(0x7f0000000740)='isS', 0x3}], 0x7, &(0x7f0000001000)=[@ip_retopts={{0x68, 0x0, 0x7, {[@end, @generic={0x94, 0xf, "4f2f21316e7057965e14824a2a"}, @noop, @noop, @generic={0x89, 0x5, "86c51e"}, @ssrr={0x89, 0xf, 0x32, [@broadcast, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x1f, 0x95, [@broadcast, @multicast1, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @rr={0x7, 0xf, 0xa0, [@multicast2, @rand_addr=0x64010102, @private=0xa010102]}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x94, 0x12, "0a4d89543332985ebd14a0202a08f881"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0x4, [{@rand_addr=0x64010100, 0x800}, {@broadcast, 0x6}, {@private=0xa010102, 0x5}]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xdd, [@local]}, @end, @ssrr={0x89, 0x3, 0xda}, @rr={0x7, 0x7, 0x9e, [@broadcast]}, @timestamp_addr={0x44, 0xc, 0xee, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x2}]}, @timestamp_prespec={0x44, 0x54, 0x16, 0x3, 0x3, [{@local, 0xe42}, {@local, 0x7}, {@empty, 0x8001}, {@remote}, {@broadcast, 0x1ff}, {@local, 0x5}, {@loopback, 0x4}, {@local, 0xfffffff9}, {@multicast1, 0x5}, {@rand_addr=0x64010101}]}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x2000000}, {@private=0xa010100, 0xfffffff6}, {@empty, 0x7}, {@remote, 0x7}, {@remote, 0xf05}, {@local, 0x5}]}, @noop, @timestamp_addr={0x44, 0xc, 0x55, 0x1, 0x5, [{@multicast1, 0x22ca}]}, @timestamp={0x44, 0x1c, 0xdf, 0x0, 0xe, [0x1, 0x9, 0x40, 0x8, 0x49, 0xffffdc1c]}]}}}], 0x1d0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)="584f9c6301cb9bfac425a73a6e", 0xd}, {&(0x7f0000000e80)="bb28f01ac0069a17676ad65878b999adcf4b87bcaa90c3e038c6cbf08a99f713828b62c799febf7dff3fbbf0d4f49007d4a278bb4566357fc621ee1eef9248101c49dffaa45156b89d9acf96f0ec23035a47e99a22cc24d06178722e17c1fb583d8678679e3bffc2380e8d2f184187b4e014cf", 0x73}, {&(0x7f0000001200)="a603c1f7fb52ad794cf58a408c03e9ff6f2e5d02fdb470035fc0a4979aad7921287aff90775730c59d14a8fb65a574b871a482cbddd4f36d04e0a75700043969f15b9a2643f38c3eaee6627168ae38944dbe898c25f5df5f19e9f8aae4d1389217c453f6b953786bc386da835a11fa5b23010a6b9815e8e958ad78ed0bd4b72335eee2a362393aac48551c1a1b237e2a5bc10c421e0b775633c7732801c45dc4ea2b5caee576942419d9881b3b78824f13589c9d760daf055e810838fce62fe54456dc53efd7c3b2a82900590d349d34db36e63fdfb94cf277b9bdfdc8612ec815e1fe274034f3c704fc5f17d5", 0xed}, {&(0x7f0000001300)="0a098902b76bc3c1d033ccdf2114343f1fa30d91dca81ce99d2eddc1841c68a82af4dcd18955271703764b05077bf2c127657b56af6b11c54b5f0d12088901398a4cd1f7a93cc23db62a266801f40abbca511df4bb24e8a3a965e02e9f043763dea73e34be2aecf8157b7b2e6eac17bec7827d1ebb379551d5905337b3ae63557c25f1806f455c9369d9706a63149376c04995068664abb0af52144d1a5b64bc8d10a245374cd5e0a25a5d553ad5045dda53c5de32ef9dc4007daa081ad507d43518fae4e9a3d621eee31df2904b5a79", 0xd0}, {&(0x7f0000001400)="ab6cb2e7279a6a497f6147534b01e6c000789dbd0fff392f9f5c8d7a4e7f8d6632e1ae178868c8df7d4cd580b9ed8d75d447e6d37f259fb742d055f34104bbd553bf2ea7ba12f3bd1fe2c982b09dadf171d0567cc9829e27f016caef78e7702820c02affaccc497ac400", 0x6a}, {&(0x7f0000001480)="5835c8a6a7f6ad2a562509ecc54326c0febd95f4b19ed0a02f097e035faa24d3666f57897aaf1fecf2dd67a09e39876ca338ed9fbc073258ab86ec25847ad32b3bf5117928eee52ccf8bcf7bb668d89f0afaa711d4d610d8cd041a421472da7ad2af9156aa145153c555182736e538c48a84c605ccc6047269511c63dfebd3124fb7aef9278fda52671e99890eb338610e9aa8c96777038ba77e7a175f36", 0x9e}, {&(0x7f0000001540)="4be39978869f4acf582c23c3818ef74a3cdd1a94c13b395bfb3ce27a99f1a5b355d95be373754d52f43c2c314c15dd0766feef835f56cf38f854df4662a247633ddd8bbc15d69f564a9972d2a0456345d6f2cbde8a1afe", 0x57}, {&(0x7f00000015c0)="1d888c2d74e22b78ec417fe0675d3127bd7c8b8801602f93ee7caee982cef162d3d2b305df4ead8b953b5341bd039e354afecb88941cd24371278fae83a7af38a5c382241ad2ec687c33e6e5f186551e8c3078e66559d8a0735fa49adcc125ce7ad6cb1a9397553737cf97c31d7b157184491988b7a4fc565bf51025bca0ff41333a721b3031d399829a22696324470130db3d3da7e4448a0a7df894f577741933ca8c960167c7101ee69a3fec60b25f30b3d4eb5bd7dffb725a10566e9aa49a33546ac59914aec11a146a36b5", 0xcd}], 0x8}}], 0x5, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 831.958483ms ago: executing program 0 (id=2197): r0 = syz_open_dev$usbfs(&(0x7f0000001c00), 0xda, 0x1e1041) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x0, 0x8, 0x42}, 0x8, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a0000000109021200"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setrlimit(0x2, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x43, {0x43, 0x23, "aeb32cb0bf3456ad53b80e898a671018610df995c05c02542375b8d6974deba9cbd4511a33532330d087b535341081e6766ed1122dfe7c8f56ea12c6a4c6b344d9"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0xfd79c4cd819f04d6, "59a99222"}, @global=@item_012={0x1, 0x1, 0x1, "9e"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x5e, 0x1, {0x22, 0xfd6}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x20, 0xa, 0x70, "c0f9466f061aeaa51317d64b8befa85ff26f5150aa5cf21bbcd1afb471db9e4fba67d48a512bfd5c3d5dec2027ce1ced685fbd23d06b1c65b7b592277e6b16c3fbd6c4149573332a25a6d5c56fa05a0870847cb7c6b2e6fd42f620557dfd068cf54963ff43bccaa7acfa0913fb2c7cc7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0xe8, "235d7aa4144b51e117bb2944cb5be6d60181c33ba2e59812aedc584f4ad1e66756acd80c31c198c905f750081c6b9a9f4496067e3144d6a009bc6ea43f59b723c2de6536c563ae1451a44d81957e3de91fee9e6ea58b5e156e087f0975aebc553c0219483eea6c652f59e1eaad8a21d105053620e72c25235adfdbc59b3119941e9a1e395f4cc2c7b4b9683e09f65aba315cae104eb43e0bfbba4532037224e4d1f412a330b19cb3327835ffae61c540935eb9568be25a0b4176afca972f43ce877afd0c11249a3b9caa37b042b9addb00ca1ac7ee71582c5d1765448a026c5eccca5890f8349454"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x6}}) 745.733429ms ago: executing program 2 (id=2198): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 426.832952ms ago: executing program 1 (id=2199): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050006"], 0x48}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 186.683824ms ago: executing program 4 (id=2200): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7f", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x25, 0x800, 0xb341) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x210, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff000000, 0xff000000, 'ip6_vti0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x32, 0x3, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random='CBEESp', 0x8, 0x9, [0x7, 0x3f, 0xb, 0x16, 0x13, 0x21, 0x2d, 0x16, 0x2d, 0x37, 0x23, 0x3a, 0x3e, 0x31, 0x14, 0x1e], 0x0, 0x2, 0x100000000}}}, {{@ip={@multicast2, @multicast1, 0x0, 0xff000000, 'wg0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x8, 0x3, 0x40}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x1452, 0x380, 0x0, 0x1}}, @common=@set={{0x40}, {{0x3, [0x5, 0x2, 0x0, 0x2, 0x0, 0x1], 0x1, 0x5}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="dbdc62811ac1", 0x100, 0x0, [0x2f, 0x21, 0x11, 0x25, 0x2a, 0x13, 0x40, 0x37, 0x32, 0x24, 0x2c, 0x21, 0x2b, 0x24, 0x5, 0xe], 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x6, 0x3}, {0x1, 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23, 0x0, 0xffffffff}, 0x18}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000400)={0x0, {{0xa, 0x4e24, 0x2, @mcast2}}, {{0xa, 0x4e22, 0xffffffff, @loopback, 0x4}}}, 0x108) 147.25947ms ago: executing program 5 (id=2201): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81900) move_mount(r0, 0x0, r0, &(0x7f0000000180)='./file0\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000001580)) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f00000014c0)={0x0, &(0x7f0000001480)}, 0x10) recvmmsg(r2, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)={0x9c, r6, 0x1, 0x70b92d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x19b7, 0x0, 0x7, 0xdd, 0x1, 0xe, 0x0, 0xd1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6}, {}, {0x2, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x4, 0x9}, {0x6, 0x3}, {0x1}, {0x4, 0x3}, {0x5}, {0x0, 0x9}, {0x2, 0x4}, {0x3, 0xa}, {0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x5}, {}, {0x1, 0xa}, {0x0, 0x5}, {0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x9}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0x2}, {0x7, 0x3}, {0x5, 0x6}, {0x3, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {}, {0x3, 0x9}, {0x5, 0x4}, {0x1, 0x1}, {0x7}, {0x5, 0xa}, {0x1}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x9}, {0x5, 0xa}]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x240408d7}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000001480)=@assoc_value={0x0, 0x4}, &(0x7f0000000200)=0x8) vmsplice(r3, &(0x7f0000001780)=[{&(0x7f00000013c0)="82640d9ee03cdc8401f53970138c40bdca98114d9961d6e2c11873bf7c78a6d05828c048badc78424ae0d2e42a1eacbd09897a98e0458a6de4477cbc6fac059714cd47d88a72f7cb22d2c96e", 0x4c}, {&(0x7f0000000040)="eff8956ad7b419e29046542ef38f70643d7064cebe6403761b9283cdbcf101896ef7c5e4f0ff9971b3057bbf77ebc9156e0568d0942993af5d448aa0e3b63d3c5f8c77bacfafd53f80686dcb228bf2f92512f719b40ff7f42dd3f3c257262a60cde27d9677b5502d5dcfc6b7576de557589bdf961b32aba724a3d810fa7c3d1a2d85636aa1403e681a3fb0814d343611af0d3bc13684502d5286fe0f5bb16a4d0c460cdcff1e21805215e6910d89b37106cd4ecd422a8287628311331a2791ac4bd9ea45c030a34e33c4356435c2c34db7bfdc86f4dcea0cbe5d12311c0f0beeb04b1073c2c1bf6e60cc289f1435bbfd888533a675f8f35c058c1a7babd571c33eb2c2030c0666671a55fc6653af8585d742ba0947fc0200d29cb5867e5b1a301c1c3b340297c078a527e7492209d2d94df5ad9293672b41165c4be20c336c7b95c24bb8834bffcda7ea26f8ec46ee67fb249b89bd62a49392fbb1e8eca9df22d7d87486a76a3d081df27d7f0ffe2790fca0e3ea6d2b5ce10f22ac4fa47134b979e472019ebd2fe8294aa1c2ec368bb35bd98ec02fe2b837a2025939a4ec8fd692472e7914fa98b156ec501b9991aacea31c7f0b6caa1430319031e7e3bc98d030624ba7a190d805e181e3e8f43e559882f495b8a4ef3735bb451234083ee0e7b0194fb0d0d5271f26d9ae6fed9957e83ec5f39a6ce81f200e953d6b1a131d42a9d96a139dd4cf29ae98d687592eecdda5a293ab525bd863447dfd15cdb1b094427a2cb3d956d7c6e0f41233b7c6541886fa720849580906566fbdd220af63334d890bb5f3e17c84dc6443470c53fe15515edea3f69e5203cf94963674497add5f918f733ed74435dae62aa5785d0d1c923ca633ebabe1599aa0c03a7110879588c284d3ea079d10e68ae2243a6d86a3bee2b5072b316c8d2cb3ea85792972ea40d2935e6f0422399f0fce7bc597e6b5e98a60e2880cefc5854aafa842c4f277b120b2f7c0bdd87200f7478954c914f06c0ff867d94c38fda9ba91de643158831ee65f37f8e35852756cc760683e4f90f5ecdb853421037aa624e80a2157e6642e4aa1f3b88e687136f5264af4cd84240ff8a7ac3e205c32adc0cbf1afeadb38b790e853dbf6a90c287ae233d890fe68531e002190c3639524f2252f42c3b40563976d35c908c66ad27f0fd207dcadecb8813080ade63e8210f7e0ef1d7e163dc81462ebaa5d056d58ccfbe9e6f9cf5220199bd77040d717d18f6da900938e2a38ce71a9caab24868081eae34443e9d58a3554183a1648b36d326cee57a7e91c660a9a39532bff147752abd7cb67906d0fdc5c51c01498b53451f8bb25a4b9be8e5d11084dc6140db802c9bea66954ef18940b20221d9ee794ac46ebfb89828ed5df119624093561474a7d7d14f0e4b45caca68e1ab01afa54cea56b4cf815e2d72465f080cdd35a66f640819bcb258980ad560e9ecdbe9a0268dc0a078d9eb4865a9f483c16253eb391a9bf3005835e2d4d488c43132c65513baeea71b878ae82a2ced1f6b7e3896fd26212c89aabf2ca5731da1de829d5ff0fea29e5251e56c52395cd557d0fec1ae77f391e0a5cbcdf5cc0b54682c14aeb56e1c89a978d11cc4dcd742d4707b80be3c3256f55ab1425abd6bb02d4b17af63e540b92a776375f96ea47fab79a2518b07a794156bd3a7b45ad90d7a62ecfa90d891f214645f0fe9f4f9b280549739b5ff7711833c14cfa3491fcb32e1fafad793d3acf2efedcb19c68f627c02e857276d08159812d41708be73dc89097611531cff6a686db2587f00b16933ceaba0a224a6b0232aefe6c3807edfd709359a4169e82468e43d7aa33a416cb763fbe924af131d31b7e0bc47fc279957513cef9446f0ef18988a1448c85406f9b65a1d1199b1729c0486d9b5e2803f3fa3289ad57dd836aafffda3d6c4bea69865a60ca2659dff76a4a2d4f6dcfd3eeb1b0bcade5d92e24f943144dc7b09cabf08fe9c5cd8aba5998ffe12fcd6e5d3890dd2bab311306e8245a0fab93e0a0c3c83e84f905105be73f932fb88f16982d3839ab1df8a098f85893854fde3058eddd14879ba4f76f19f098660a9977bfdcff1c1b020908f704a65df91a6cde5ca7d7b59f31985c817eb904891205b5a30c70739bb8df652828429e934b0bc53a68c7a40eb4c1089b5e37f3eb01e341cc2a2cf21e0b03dd6f0fbcf03c5c7d4154b4127d4b5b6dd545eb9a7d5b6bb653c7346a5ed46bd935ecbb56aa53ead615e682cad65a1976c283ffd63de54eea1b9ff08996b96f7784e70f3fa32091004ea9d0c654987feed9794e90398088937ae9b727205dc8a631616c951fd188eeb60cea13f0634d57a40933a75770619553f3afd755e12474b8fb72d1478283fe9e65151b194cfd0d43dca194172467dc6efe88ed9e3d93e42ef681069659524d5d6b153d2553939c32bea2541573e10f9376daae28ffde7d6d9106a70164b3d70ea407e3b727ffc62e774cafbb83a5f127e0305952abde85a3ee28f5f0631ffc4daf5aa6958c4c3259a77ee57d1ad8f99b9de197974d1c3de129e1a428f28a507e6ad1749f8e7e0274f6a2d008eb71ee79f483d3c22bc599a8a474ea772ff8d4ac7b8862efd04b3b5a8f6ee8971adfd213de77192cec8ce96d6909dafbc4d65901aedcda43a0dcb9e2861abe3e0f5999ee4c19631ff8af1e701f079267e4b32daa4660f6e6b3a7bad8057deba0e4504a674c81fde2e9a8bd659692bb489cfde7d5c28f147827fabf8be2bcbb3fe2e0ac01925f47a4c7a4da91ae8ba06e5491b2c6d784e34d6864edc42660cb33e5c722214b1dc5fad2386cca57b7e668623a91ac3e676a97edcd6837c62a0688313221354635e50e625912cc169ba7bf66168591eba96edd4bb0eee18a2ebc24a9f236957be79352b385ecca5100126bccf80851897af51f33f213adfa1a790a338c01105b69ed8fa29786fa789d00ca23584f4a21cc3973f3c3211a275d78748935ad77b9ebfcfea8b0b06483d20d7be225a40d7ca61c28e0ad9484cca1fdc5fca818252cdacef94fa3ba29f2420bfa9b8d9aeda25e97af7b6685645bba85edd29b07f5deb0becb518cdda6935b273e8bba6631ea165858fc5f6a40646cd0a196871886c64c25cee89e7ea69b215fdcd1e32e55d158b4e024b57e53e03ec420f7e80c9c7effa540160f954e31bb7f9cbcd47d2e0b5f0d294829dd76fdfe0f56c9f78e855b16bc4bbb618664aa9772880c30d1874b614f310c709dee6eabb2cc264385841ad847ac7130dfe56290c51577f64fa1aab90ce6e54fb7ab6da515854cdc8b7f2c38a2f5feb15fa5b3a21cdebe0a9aa6183e21158e68c5fe4728588470147f307b7b1ee451796710421c4edc9486825cd25f81884ada0a58e3684f2753dbc141ee143d69451e8ebe6571c9f0504d2782f6a0795c775217b0ccc24bf76c89078f717520c374140f29d84632b4e5a747837d41a08f168de76c157bf2421e5ece44a8044344e4e5cdd34a3e679477f088c662a190c6aba28105c159606f356ad17b6f3578ac9042269d5b72a5a9d4249352fd75e558e7d0e79bcc1c5c63ec073cc9b00842f6d1058f7308b947ab53b1cd5114708fe4467bed682066d65468b83163e6920617d6e7014b790e1a075dd90a5c08fd26b0105ef406452dc4abdc99179bbe70b3df1f51190e63530d78c0de89cae696d090c266e926d0ba2a4d10e040e1dbfd4c846ea135dc99efe7bf9af6a66adae9586a95405af23efe41f7cfca1bfe4465b2340d37a55b58f5d31c1f5c2c4bbce433715c59cb88d9df7bfc7c515e82ebe4301cf3fe4d904ecc8d6e4fbcd4285baae91487952f368751babce9931e016e793f4840c7f16a3e22f6d568c26b4beac42d23f1796999744704643c8f16b4a1319be06965cb7347cd54fbfdcf5773d907e4f41315a78257e05f7844dc197203bb4037e5c4777af6f35be81e523826e008613e563c46f3e0d85ade326b37949e3a3f7783c422898a8042a737970e03bb9b732acd543ae1893e2f11f06a75885bae3d3cbfa6ad26c1c4c9817f5ac822facc9afb08fcc7170d72aad76f4f63e5e1a3e18cf248cb93be4242367ee2678b432a2f59f40b8fa3884cbb0d021f7ac0432196ca9b7525bc830414b8ee1f6cc6b7504c9783c4e213016d7b20f9abdb58835ed93122bbfe7e2af5be3a0717f876c00df9bf84b9fc95b8a651fe83cfec4fa47a8e3b8deea57152d52d4f426bf0f061ef0189234a1fd4d38e494ab02904595f282e72417f38cf0a3e3755b263110d551b8e13328116973692c4c084045ec9e9faca5908223e7fc88994451f8c5f96b3a34b57c5cc318cf6e9367946ec97e12b234d4623230f9032486dd1cebb329a352e00ea1904c9e3e3eaf0771109127e383447036df3f296532ee8033584bc72fd4106250da7417a421e28b688bb23782b3cc26c019870d0d0541efe883da0785570872707dfb0ecfa9597abefaf454e1e49410540f55609b2a25419e60c7c82be6ad2a729907b6aea48aff05205ba2b376a306be99dd345670fe53bfe8275c2ee53ef9b980be2cf385543cf1a48f8d3730d916860ba9696849f66ebf42a39c639fce5247be8e0e47094cdfc195e69345613240ec1c8a577caa6ab69a7dd75c03d92998acb0d0811af863ab4a710e6fdf18537811180126464c301147c582dba73d30f52ee3758c6d183457ed83e8dce0ff2eb8b1eb63670afedbe9e3cb13781a659473fbf8dbc84d837acaa61e570d3ccd00e6a4fe57711b038e5ed46697dec851d285b1814754976b3a62ce04ff6bf2e3e78ece98422386e9e074609c1e204818d7b18a8478b51a92b33516ac0d13eb295e80bec29693a6c3c3dcf42feb301e991740e5a7bd7df48e1b445835c95d731fba7914dd6b63d2fb4c92e4a1a28b5f7d2663968b0b4e0b811e6558b62685665d0e0e1e4639fa0117b8cc1b182d33bfea2668674f05e1ee33fad680b6eea7de8cfc78099a0a564e8844dbb1b86242085a2aaa7d3a3dba6e545c7a4148336f81f16c4bb46ca8b33066dc042cb9f86a60aeb45bc3b0e15ca0bb5c185e369a8d134020e9c4094a9ab9cffd288e9c82feebd117c0ed53d8b09fef9386fc8400b97aad5cb89bff85dc6c2108c5e0e73f2c5ee5ae341eb657dada475f86af1a53266e75076317d57943dd30bf8c6b840e5a96379953db81b111821a4184e33a0a30e28ced39f3bb8d7be9916fd020c9c5a066db37f010fb60d4c255cb34fd8557cec353194e2024c112a0e30e5eac93fcf93193721b4398f51f95b586a52ea6e9254f1b93e67d1d9818535d60f6f932bdabdc7edf8e7c1944f9935a9267b71f6d0f18540a8a77ccaf910c03758937588f1a9e8ba76f011140b8fac97759fc1d6b15c8bb50e9345a7e942b5cb81c5278a45254c0eb25cc72999c4884a3cdb8ac373f9b49c53a577d1a4996a71a1b6af1d30e1ce1a26898521781a4069fcece653fd8501e1203dd77bb555b0a962df4d3d004929435f9796c7090d4dfdc4336ff470e34b26dbf5c1fdcae171a68975c31e5fa639f6a26569d61d66c11989d104460ef59b4f05b3f4ef8bc006e04254ff6b224967700e932df83daff546c15ee77d7026d77c1dcfe786c8be840a49fab85541020a5e8cadf6779688deb55dc639bffffdd191240a385bc8bf97639e7314cc7314e16dd2e7af5c2a2ab069277a2f646a8d53aff8e5112acfbcd57278687a24f8ba82f94f022253aa42f2747ddbf00b6022a58f4cc3c7c7513b4376c6c0ba", 0x1000}, {&(0x7f0000001040)="2ef1ee7644fa88a1549c210c288fe1abf52cef96bf66c9ab40150bee5d5dff719c1b22c795d5ef87d817daad249a9a19b0959ac02a2b85609f8d2418720b748228ac89f4e1b2229b9b774e776283352060edffa66122fb107b0d3f8fd2f59b7bcf90e21703d6c8d597332b6cde6bf093a84793e3f91382b96593a2739a3334cb07185edaf17ff88ab93e500a950b02cc1e33f9cd8b8abfffbf81a5cfd1d9425e80bbbe093564346c", 0xa8}, {&(0x7f0000001100)="3b9febbc285280900a048bb56993d67b16061f68637766cfdc264a74ea63afb1d213b7db9be3b50c0ea0871ac441ad6b34168a6bd840d3b1089c1e77f41889c151bef6102deb17db514e337eb972d85f461bbf9e795ac643855318c1ad93aec8b02f4d3e7d626d59bf50c67fbe77640cb438034d", 0x74}, {&(0x7f0000001180)="14b12b0fffff5466917ce42d4f84b244c29e928fe6b0bf31ab5035164382d42685abd436ba32f8152de5ee246800373640ce9bcaf5d8661c3d7602a8a8822e124ac6d0fbe7845ab7e8ca5345ef4f17233659e8a86f324639e9db890f4cbeadcfd11804712dc223628089c798b936ad27553555a7d5a9331b1d9e4796552b0f7eca909595980cfc84b414c442bd8e855cb18007ff46a512bdf2375aff91f61ef5e6f9e022f176831da8805c141404b27c1ac3cbb10a7acba504b13d3500420bf1483906dd360f0a030c53b186b143545ea2988e64ddfcff62847aa7fff81a8c78c4d2c8e4bc5c6ecf9e98061bbd70", 0xee}, {&(0x7f0000001280)="7ce11bd758113221dc7da26120ea3454091b7bf030279fde3c19a390a05891d425dcfbcbd472cdcf0ba0dce8d27d0146e4f13dd1d8253c0c9b5b9538e91120ea4c732672fea8bed5e7d07acc97f225ad84c9246b497487296605e3539eaf1ea90a2c99a6279965a6462852b78b6b39eacb2fd82f484a20e60e762428fd53488ffc438ad2cc50477af2953b1ae1e2371b36e878427121829380217db6b5190f252cb390a5131a3c1487095fbd8c1e6774b456cfd4ddd93e29d1a24a923a3eb2d8df0d62dc570a269043b491e01c1c10570c", 0xd1}, {&(0x7f0000001380)="c3b81bb099bd3f011f7505bed4c4c5dcf691afd2de2cf4e532ff1367d8fdc3d01079739e246663284b9b1c82c85d7e4e4f33eae6a4b76e7e34d6da", 0x3b}, {&(0x7f0000001600)="55053a08c2043594583e44d6f742f490363f32de93d4f4c6857bd1740a99704453f0e45e331f8d01b10ad4e9595294186ff643b08483285bfa0e93af55a63e6434d406ad716e05350ef72f044be5fd4b48e2e3ad813c6169538cec8dc4cfd4192c99fb8d2ae28b7477d769cf2dd77d5b1588ef79f6711c24b9a7fc24d9f46432febdcae27d2d6916fd3c52182306b701dd50a98e5ff89528ca00e4c864d6f5279a15ffcb030667ccf8afd4af55c15c5dc6021b16c21ab3e1ef09400a0fcadd513a24ffb98aaf", 0xc6}, {&(0x7f0000001440)="a311985db604262a10bfabc0ebd064b9b7b1df183621cca573b9d201ddb0a5c83e1056", 0x23}, {&(0x7f0000001700)="cd0b4938164555d2b92ec5b5e0f25e86e761322ec6f7bb775391625cd6c159a99a7ced52f6e8c3a5dc44d240e77b252f7d2946b1d4c5e613de5fde96c2cc71164cd0448a1c1e259b", 0x48}], 0xa, 0xa) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000015c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000180)={@local, 0x1}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) r9 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000100)={@local}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r9, 0x9d6e6000) 15.417616ms ago: executing program 5 (id=2202): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r8 = getpgrp(0x0) rt_tgsigqueueinfo(r8, r8, 0x1a, &(0x7f0000000600)={0x2f, 0x1, 0x2}) read$FUSE(r0, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r12 = getpid() syz_open_procfs(r12, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r13 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="2ea8d2811b2a246ba8a8a78787aee7bb20c96807b6d8761f859ec6fa331e777591ed11248a94c0cfc19c61fe7c081ddaf685d4d5b414a01ac8d511cfb5d75e8878514da879142e585b1f9213b0f04d67baae20dd2e742f1286afc7a9bb0ad44aa05e2e3db382651792f2945409e7c6dda83d14fef1fb50a3cb8d0a189d28277f501a04c5d4414479db27bd23c1fbdf28124c317129fe42eb", @ANYRES32=r11, @ANYRES8, @ANYRES64, @ANYRESOCT=r10, @ANYRES32, @ANYRES16=r11], 0x30}, 0x1, 0x0, 0x0, 0xc885}, 0x4000880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$netlink(r2, &(0x7f00000003c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2008480}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000b00)={0x1038, 0x2d, 0x4, 0x70bd27, 0x25dfdbfd, "", [@nested={0x1028, 0xd0, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @uid=r5}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="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", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1038}, {&(0x7f0000000880)=ANY=[@ANYBLOB="8c0000001a00040027bd7000fcdbdf253d441e8d2623fd38b2e180a62850bbe3299497ec0d856b0a85800fd6ef90ea99a33ee2884bb12b148c49635ef4254ddaf350c964e41973f3c38b8a91a04b8caef7ac97a7724fa4c5ae1a308fa1b31dfc360db52a0608004200", @ANYRES32=r0, @ANYBLOB="0c001b003e0300000000000010007c8004001d0008008300", @ANYRES32=r6, @ANYBLOB="6994b3c0f2fd0000003cebfec9c5605deff7bf2e1780b215a6b4df272935438105110687e690566a1da31f34883f17055083a80ed5cec06b78b0660467a420b2ba7378beaf689957e495900a43ca962308b986147577c8bc5258cfe54913c35c42a67397ff6ccbf45c4f5a6b6d3e2ed39d8e9ce1f92830afc0213e4e799f41709e1819c28ceda7aae8d3cff17a71dea05351471dbac0e2852ac0f8203cc9a42edee00a1278a74e03759a1a0f402459b91a85ce7e7378f9dd05d085a0cb2c12c7"], 0x8c}], 0x2, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r4, r2, r1, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, 0xffffffffffffffff}}}], 0x80, 0xc0}, 0x81) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r15, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 0s ago: executing program 2 (id=2203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="a3", 0x19fff}], 0x1) kernel console output (not intermixed with test programs): .643799][ T24] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 476.726972][ T24] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 476.740927][ T24] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 476.757331][ T24] usb 2-1: config 5 interface 168 has no altsetting 0 [ 476.767929][ T24] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 476.781078][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.801100][ T5907] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 476.809109][ T24] usb 2-1: Product: syz [ 476.818884][ T24] usb 2-1: Manufacturer: syz [ 476.824007][ T24] usb 2-1: SerialNumber: syz [ 476.835100][T11850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 476.842867][T11850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 476.942820][ T5907] usb 1-1: device descriptor read/64, error -71 [ 477.030344][T11856] fuse: Bad value for 'fd' [ 477.053863][ T5907] usb usb1-port1: attempt power cycle [ 477.070444][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.082277][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.137075][ C1] usb 2-1: NFC: Urb failure (status -71) [ 477.156218][ C1] usb 2-1: NFC: Urb failure (status -71) [ 477.178549][ T24] usb 2-1: NFC: Unable to get FW version [ 477.201785][ T24] pn533_usb 2-1:5.168: probe with driver pn533_usb failed with error -71 [ 477.281519][ T24] usb 2-1: USB disconnect, device number 80 [ 477.402800][ T5907] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 477.473504][ T5907] usb 1-1: device descriptor read/8, error -71 [ 477.712754][ T5907] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 477.734892][ T5907] usb 1-1: device descriptor read/8, error -71 [ 477.856997][ T5907] usb usb1-port1: unable to enumerate USB device [ 477.863834][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 478.022881][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 478.032081][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 478.041473][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.057943][ T24] usb 5-1: config 0 descriptor?? [ 478.152753][ T5896] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 478.322748][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 478.330306][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.342485][ T5896] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 478.357206][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.368043][ T5896] usb 6-1: config 0 descriptor?? [ 478.383450][T11879] usb usb8: usbfs: process 11879 (syz.4.1730) did not claim interface 0 before use [ 478.412353][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.425282][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.785339][T11885] fuse: Bad value for 'fd' [ 478.795851][ T30] audit: type=1326 audit(1749113376.088:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.818177][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.832352][ T5896] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 478.842825][ T30] audit: type=1326 audit(1749113376.088:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.842883][ T30] audit: type=1326 audit(1749113376.088:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.842928][ T30] audit: type=1326 audit(1749113376.088:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.842996][ T30] audit: type=1326 audit(1749113376.088:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.843039][ T30] audit: type=1326 audit(1749113376.088:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.843084][ T30] audit: type=1326 audit(1749113376.088:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.843152][ T30] audit: type=1326 audit(1749113376.088:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.843196][ T30] audit: type=1326 audit(1749113376.088:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 478.865484][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.056671][ T30] audit: type=1326 audit(1749113376.118:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.5.1733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f267998e52b code=0x7ffc0000 [ 479.231926][ T5896] usb 6-1: USB disconnect, device number 39 [ 479.355495][ T5891] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 479.512920][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 479.527393][ T5891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 479.542509][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.561434][ T5891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.572028][ T5891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.594056][ T5891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.605791][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.830033][ T5891] usb 1-1: GET_CAPABILITIES returned 0 [ 479.945912][ T5891] usbtmc 1-1:16.0: can't read capabilities [ 480.017031][T11899] openvswitch: netlink: Message has -1 unknown bytes. [ 480.110556][T11899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1742'. [ 480.241603][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.553247][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.654329][T11904] x_tables: duplicate underflow at hook 2 [ 480.835551][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 481.009525][T11915] netlink: 212176 bytes leftover after parsing attributes in process `syz.1.1749'. [ 481.343056][T10101] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 481.579831][T10101] usb 2-1: not running at top speed; connect to a high speed hub [ 481.607940][T10101] usb 2-1: config 13 has an invalid interface number: 202 but max is 3 [ 481.611575][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1754'. [ 481.632838][T10101] usb 2-1: config 13 has an invalid interface descriptor of length 5, skipping [ 481.653811][T10101] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 481.672705][T10101] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 481.692886][T10101] usb 2-1: config 13 has no interface number 0 [ 481.699588][T10101] usb 2-1: config 13 interface 202 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 481.732618][T10101] usb 2-1: config 13 interface 202 has no altsetting 0 [ 481.754948][T10101] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=6d.8f [ 481.793755][T10101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.802381][T10101] usb 2-1: Product: Ё [ 481.821333][T10101] usb 2-1: Manufacturer: 掬ぺ┙䦀慿꩷泥剻嶆䛤⎒넡☋杆‹射궨夳ボ뛐᭾틪沓芟㖯ꐂ䧣ᦴ῕㜁橉ꃈᙠퟤW鵫夘戞臡貙삙䉀啇蘼᠜쿃凎浅倾♨熽᥹㣏摯좋깰븏뺘Ђ䍕횥𢡊א﹵넿ପ⡛涺浣爅ᬗ쵐䴔쿒恜Ḅ䪿蛆낆渶闟쬬滒珉༪曁⎉攄懯ퟘ䏌赑㡦蔷땾偩ᖥඟ姰䳽㘉 [ 481.855124][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.931352][T10101] usb 2-1: SerialNumber: 㻚오漘ț킕沜㭐珋渥킮悥繪猒ၦ垢䒍军⵨鵣ꅰ쵁ꦰẪ葓ꡢ鿔䝹᪳졉籭⻥㞶Ⰻ麢㷽㱧ᱠ묿扔㿊땘봜涯鲘恱胹쑦廽ꛙ㫚㌐ㅎ㽴곤꩞垤筝㹱妈뀇䯭⋚ⲻ㐁櫰寥ﮀ眫䩷惓ﬞꡄ⛊驧ꩰ薣綨햩Ķ밂톮膠鶃ᅧ鸞禌‰踒髎錵㱕⅁羂ꍚﰦ뺟豒 [ 481.963061][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.064703][T11935] FAULT_INJECTION: forcing a failure. [ 482.064703][T11935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.109017][T11935] CPU: 0 UID: 0 PID: 11935 Comm: syz.5.1756 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 482.109051][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.109065][T11935] Call Trace: [ 482.109074][T11935] [ 482.109083][T11935] dump_stack_lvl+0x189/0x250 [ 482.109122][T11935] ? __pfx____ratelimit+0x10/0x10 [ 482.109150][T11935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.109183][T11935] ? __pfx__printk+0x10/0x10 [ 482.109206][T11935] ? __might_fault+0xb0/0x130 [ 482.109250][T11935] should_fail_ex+0x414/0x560 [ 482.109285][T11935] _copy_from_user+0x2d/0xb0 [ 482.109308][T11935] sk_setsockopt+0x276/0x2d30 [ 482.109329][T11935] ? __pfx___might_resched+0x10/0x10 [ 482.109354][T11935] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 482.109378][T11935] ? __pfx_sk_setsockopt+0x10/0x10 [ 482.109398][T11935] ? vfs_write+0x8d8/0xa90 [ 482.109423][T11935] ? aa_sk_perm+0x81e/0x950 [ 482.109455][T11935] ? __pfx_aa_sk_perm+0x10/0x10 [ 482.109478][T11935] ? __lock_acquire+0xab9/0xd20 [ 482.109512][T11935] ? aa_sock_opt_perm+0x74/0x110 [ 482.109543][T11935] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 482.109575][T11935] do_sock_setsockopt+0x201/0x3e0 [ 482.109600][T11935] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 482.109628][T11935] ? __fget_files+0x2a/0x420 [ 482.109661][T11935] __x64_sys_setsockopt+0x18b/0x220 [ 482.109691][T11935] do_syscall_64+0xfa/0x3b0 [ 482.109718][T11935] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.109746][T11935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.109767][T11935] ? clear_bhb_loop+0x60/0xb0 [ 482.109792][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.109813][T11935] RIP: 0033:0x7f267998e929 [ 482.109832][T11935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.109849][T11935] RSP: 002b:00007f267a75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 482.109872][T11935] RAX: ffffffffffffffda RBX: 00007f2679bb5fa0 RCX: 00007f267998e929 [ 482.109888][T11935] RDX: 0000000000000052 RSI: 0000000000000001 RDI: 0000000000000003 [ 482.109901][T11935] RBP: 00007f267a75e090 R08: 0000000000000008 R09: 0000000000000000 [ 482.109915][T11935] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 482.109929][T11935] R13: 0000000000000000 R14: 00007f2679bb5fa0 R15: 00007f2679cdfa28 [ 482.109960][T11935] [ 482.346638][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.613389][ T5896] usb 1-1: USB disconnect, device number 64 [ 482.642803][T10101] snd_usb_podhd 2-1:13.202: Line 6 POD HD300 found [ 482.649809][T10101] snd_usb_podhd 2-1:13.202: set_interface failed [ 482.656926][T10101] snd_usb_podhd 2-1:13.202: Line 6 POD HD300 now disconnected [ 482.665790][T10101] snd_usb_podhd 2-1:13.202: probe with driver snd_usb_podhd failed with error -71 [ 482.709802][T10101] usb 2-1: USB disconnect, device number 81 [ 482.726879][T11943] netlink: 212176 bytes leftover after parsing attributes in process `syz.1.1760'. [ 482.808164][T11948] netlink: 'syz.0.1761': attribute type 3 has an invalid length. [ 482.852911][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.118494][T11952] x_tables: duplicate underflow at hook 2 [ 483.532796][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.610030][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 483.962801][T10101] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 484.126090][T10101] usb 6-1: unable to get BOS descriptor or descriptor too short [ 484.137389][T10101] usb 6-1: not running at top speed; connect to a high speed hub [ 484.150344][T10101] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.163214][T10101] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 484.187216][T10101] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 484.231281][T10101] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.240982][T10101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.295279][T10101] usb 6-1: Product: syz [ 484.353700][T10101] usb 6-1: Manufacturer: syz [ 484.372296][T10101] usb 6-1: SerialNumber: syz [ 484.446046][T11984] team0: Port device dummy0 removed [ 485.176335][T12003] syz.1.1781 (12003): drop_caches: 1 [ 485.183783][T12005] openvswitch: netlink: nsh attribute has 60236 unknown bytes. [ 485.192007][T12005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.253525][T12003] syz.1.1781 (12003): drop_caches: 1 [ 486.082661][ T5891] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 486.218713][T12021] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 486.237504][ T5891] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 486.257446][ T5891] usb 2-1: config 0 has no interface number 0 [ 486.278638][ T5891] usb 2-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 486.298882][ T5891] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 486.394985][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.426442][ T5891] usb 2-1: Product: syz [ 486.443010][ T5891] usb 2-1: Manufacturer: syz [ 486.452333][ T5891] usb 2-1: SerialNumber: syz [ 486.491428][ T5891] usb 2-1: config 0 descriptor?? [ 486.530247][ T5891] spcp8x5 2-1:0.201: required endpoints missing [ 486.543473][T12023] netlink: 212176 bytes leftover after parsing attributes in process `syz.4.1790'. [ 486.585298][T10101] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 486.603006][T10101] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 486.642718][T10101] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 486.730446][T10101] usb 6-1: USB disconnect, device number 40 [ 486.761361][ T5897] usb 2-1: USB disconnect, device number 82 [ 486.802497][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.564070][T12029] syz.5.1791 (12029): drop_caches: 1 [ 488.166800][T12029] syz.5.1791 (12029): drop_caches: 1 [ 488.672791][ T5891] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 488.706263][T12050] input: syz1 as /devices/virtual/input/input34 [ 488.853085][ T5891] usb 1-1: config 0 has no interfaces? [ 488.864744][ T5891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.874204][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.882274][ T5891] usb 1-1: Product: syz [ 488.904542][ T5891] usb 1-1: Manufacturer: syz [ 488.911627][ T5891] usb 1-1: SerialNumber: syz [ 488.927662][ T5891] usb 1-1: config 0 descriptor?? [ 489.030861][T12061] batadv0: entered promiscuous mode [ 489.128546][T12060] syzkaller0: entered promiscuous mode [ 489.143984][T12060] syzkaller0: entered allmulticast mode [ 489.312734][ T5897] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 489.498598][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 489.508767][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 489.525027][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.538123][ T5897] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 489.586816][ T5897] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 489.640442][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.652627][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.664916][ T5897] usb 6-1: Product: syz [ 489.677864][ T5897] usb 6-1: Manufacturer: syz [ 489.688400][ T5897] usb 6-1: SerialNumber: syz [ 490.877709][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 490.902819][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 491.278934][ T5896] usb 1-1: USB disconnect, device number 65 [ 491.936517][ T5897] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.969517][ T5897] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 492.229326][ T5897] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 492.319886][ T5897] usb 6-1: USB disconnect, device number 41 [ 492.833096][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 493.392003][ T5897] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 493.878635][T12108] delete_channel: no stack [ 494.067769][ T5897] usb 6-1: config 0 has no interfaces? [ 494.078211][ T5897] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 494.088075][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.096347][ T5897] usb 6-1: Product: syz [ 494.105584][ T5897] usb 6-1: Manufacturer: syz [ 494.169639][ T5897] usb 6-1: SerialNumber: syz [ 494.180385][ T5897] usb 6-1: config 0 descriptor?? [ 494.680475][T12124] netlink: 'syz.5.1812': attribute type 21 has an invalid length. [ 495.045146][ T5907] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 495.250316][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 495.276908][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.293215][ T5907] usb 2-1: config 8 has an invalid interface number: 24 but max is 1 [ 495.301534][ T5907] usb 2-1: config 8 has an invalid interface number: 242 but max is 1 [ 495.343991][ T5907] usb 2-1: config 8 has no interface number 0 [ 495.356120][ T5907] usb 2-1: config 8 has no interface number 1 [ 495.376405][ T5907] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 495.403186][ T5907] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 495.414728][ T5907] usb 2-1: config 8 interface 24 has no altsetting 0 [ 495.432858][ T5907] usb 2-1: config 8 interface 242 has no altsetting 0 [ 495.514054][ T5907] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 495.544996][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.583358][ T5907] usb 2-1: Product: syz [ 495.594800][ T5907] usb 2-1: Manufacturer: syz [ 495.605984][ T5907] usb 2-1: SerialNumber: syz [ 495.630169][T12125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 496.381616][ T5891] usb 6-1: USB disconnect, device number 42 [ 496.895859][ T5891] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 497.091203][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 497.103464][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.124451][ T5891] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 497.143164][ T5891] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x83 has an invalid bInterval 105, changing to 10 [ 497.159950][ T5891] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x83 has invalid maxpacket 58681, setting to 1024 [ 497.176473][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.191418][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.207470][ T5891] usb 6-1: Product: syz [ 497.211971][ T5891] usb 6-1: Manufacturer: syz [ 497.218587][ T5891] usb 6-1: SerialNumber: syz [ 497.241913][ T5891] cdc_ncm 6-1:1.0: skipping garbage [ 497.247871][ T5914] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 497.420808][ T5914] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 497.430897][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.445005][T12132] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 497.463480][ T5914] usb 1-1: config 0 descriptor?? [ 497.556198][ T5907] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 497.591584][ T5907] vmk80xx 2-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 497.623704][ T5907] usb 2-1: USB disconnect, device number 83 [ 498.033098][ T5907] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 498.202824][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 498.215737][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.224146][ T5891] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 498.230533][ T5891] cdc_ncm 6-1:1.0: bind() failure [ 498.237018][ T5907] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 498.249646][ T5891] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 498.256863][ T5907] usb 2-1: config 7 has no interface number 0 [ 498.263431][ T5907] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 498.273694][ T5891] cdc_ncm 6-1:1.1: bind() failure [ 498.282955][ T5907] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 498.299903][ T5907] usb 2-1: config 7 interface 187 has no altsetting 0 [ 498.309912][ T5907] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 498.319614][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.329565][ T5907] usb 2-1: Product: syz [ 498.336132][ T5907] usb 2-1: Manufacturer: syz [ 498.340794][ T5907] usb 2-1: SerialNumber: syz [ 498.349961][T12153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 498.358876][T12153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 498.457149][T12156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 498.496297][ T5914] usb 1-1: Cannot set autoneg [ 498.501286][ T5914] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 498.573226][ T5907] usb 2-1: Unused bulk OUT endpoint found: 0x03 [ 498.579679][ T5907] usb 2-1: Not enough endpoints found in device, aborting! [ 498.875821][T12153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.885425][T12153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.893389][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 498.903661][T10101] usb 2-1: USB disconnect, device number 84 [ 499.561249][ T5914] usb 6-1: USB disconnect, device number 43 [ 499.790539][T12173] netlink: 'syz.5.1834': attribute type 1 has an invalid length. [ 499.910203][T12173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.038450][T10101] usb 1-1: USB disconnect, device number 66 [ 500.066772][T12177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.083826][T12177] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 500.109749][T12177] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 500.167901][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 500.167924][ T30] audit: type=1326 audit(1749113397.428:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.196473][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.254519][ T30] audit: type=1326 audit(1749113397.428:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.282771][ T30] audit: type=1326 audit(1749113397.448:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.393140][ T30] audit: type=1326 audit(1749113397.448:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.452400][ T30] audit: type=1326 audit(1749113397.448:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.504047][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1836'. [ 500.513455][ T30] audit: type=1326 audit(1749113397.448:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.542841][ T30] audit: type=1326 audit(1749113397.448:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.572724][ T30] audit: type=1326 audit(1749113397.448:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.595531][ T30] audit: type=1326 audit(1749113397.448:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f267998d3df code=0x7ffc0000 [ 500.618450][ T30] audit: type=1326 audit(1749113397.448:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12171 comm="syz.5.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 500.693763][T12185] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1837'. [ 500.708478][T12185] netlink: 'syz.1.1837': attribute type 4 has an invalid length. [ 500.717045][T12185] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1837'. [ 501.024821][T12190] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1839'. [ 501.235943][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1841'. [ 501.458469][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.464937][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.504940][T12202] netlink: 'syz.4.1842': attribute type 8 has an invalid length. [ 502.051315][T12194] delete_channel: no stack [ 502.417018][T10101] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 502.589705][T10101] usb 6-1: unable to get BOS descriptor or descriptor too short [ 502.616284][T10101] usb 6-1: not running at top speed; connect to a high speed hub [ 502.626850][T10101] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.648617][T10101] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 502.659792][T10101] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 502.676769][T10101] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.692655][T10101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.700696][T10101] usb 6-1: Product: syz [ 502.705803][T10101] usb 6-1: Manufacturer: syz [ 502.710755][T10101] usb 6-1: SerialNumber: syz [ 502.711075][T12221] tipc: Started in network mode [ 502.725796][T12221] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 502.733575][T12221] tipc: Enabled bearer , priority 0 [ 504.109721][ T5897] tipc: Node number set to 11578026 [ 504.163858][T12234] syz.1.1853 (12234): drop_caches: 1 [ 504.260505][T12234] syz.1.1853 (12234): drop_caches: 1 [ 505.108073][T10101] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 505.171157][T10101] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 505.210981][T10101] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 505.324981][T10101] usb 6-1: USB disconnect, device number 44 [ 505.405051][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.350041][T12243] delete_channel: no stack [ 506.574178][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.126335][T12256] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 507.695663][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 511.061681][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1873'. [ 511.650047][T12321] x_tables: duplicate underflow at hook 2 [ 511.808918][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 511.808934][ T30] audit: type=1326 audit(1749113409.088:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12320 comm="syz.4.1876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78278e929 code=0x0 [ 511.836851][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.222636][ T5907] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 512.411728][T12314] delete_channel: no stack [ 512.460657][ T5907] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 512.469322][ T5907] usb 1-1: config 0 has no interface number 0 [ 512.484466][ T5907] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 512.525234][ T5907] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 512.536656][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.545247][ T5907] usb 1-1: Product: syz [ 512.552308][ T5907] usb 1-1: Manufacturer: syz [ 512.584177][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1884'. [ 512.586832][ T5907] usb 1-1: SerialNumber: syz [ 512.630040][ T5907] usb 1-1: config 0 descriptor?? [ 512.640800][T12327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 512.724513][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 512.807303][T12346] netlink: 'syz.1.1887': attribute type 6 has an invalid length. [ 512.858638][T12347] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 67108897, id = 0 [ 513.534061][ T5907] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.543352][T12356] xt_CT: No such helper "snmp_trap" [ 513.548687][ T5907] usb 1-1: MIDIStreaming interface descriptor not found [ 513.637877][ T5914] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 513.737329][ T5907] usb 1-1: USB disconnect, device number 67 [ 513.900949][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 513.909566][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 513.936058][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.949093][ T5914] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 514.008040][ T5914] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 514.024324][ T5914] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.033618][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.041638][ T5914] usb 6-1: Product: syz [ 514.054202][ T5914] usb 6-1: Manufacturer: syz [ 514.062753][ T5914] usb 6-1: SerialNumber: syz [ 514.380331][T12368] x_tables: duplicate underflow at hook 2 [ 514.388392][ T30] audit: type=1326 audit(1749113411.678:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.1.1892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x0 [ 516.468045][ T5914] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 516.489618][ T5914] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 516.512330][ T5914] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 516.586823][ T5914] usb 6-1: USB disconnect, device number 45 [ 516.722443][ T5932] udevd[5932]: setting mode of /dev/bus/usb/006/045 to 020664 failed: No such file or directory [ 516.789899][ T5932] udevd[5932]: setting owner of /dev/bus/usb/006/045 to uid=0, gid=0 failed: No such file or directory [ 516.834703][ T1213] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 516.841694][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 516.932187][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.003583][ T24] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 517.056232][ T1213] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 517.111280][ T24] usb 5-1: USB disconnect, device number 71 [ 517.234783][ T1213] usb 3-1: USB disconnect, device number 54 [ 518.142700][ T1213] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 518.668329][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 518.728776][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 518.748908][ T1213] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 518.809514][ T1213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.837711][ T1213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 518.885643][ T1213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.247751][T12419] x_tables: duplicate underflow at hook 2 [ 519.257436][ T1213] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 519.292334][ T30] audit: type=1326 audit(1749113416.558:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12417 comm="syz.1.1904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x0 [ 519.326009][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.357209][ T1213] usb 1-1: Product: syz [ 519.361453][ T1213] usb 1-1: Manufacturer: syz [ 519.567855][ T1213] cdc_wdm 1-1:1.0: skipping garbage [ 519.688031][ T1213] cdc_wdm 1-1:1.0: skipping garbage [ 519.859488][ T1213] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 519.866049][ T1213] cdc_wdm 1-1:1.0: Unknown control protocol [ 519.892637][ T1213] usb 1-1: USB disconnect, device number 68 [ 519.942080][T12435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1906'. [ 520.516230][T12422] delete_channel: no stack [ 521.192035][T12449] fuse: Bad value for 'fd' [ 521.197439][T12449] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1913'. [ 521.313116][ T5896] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 521.569910][ T5896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.744197][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.779372][ T5896] usb 5-1: config 0 descriptor?? [ 522.848008][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.861505][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.893326][ T5896] ath6kl: Failed to submit usb control message: -110 [ 523.052434][ T5896] ath6kl: unable to send the bmi data to the device: -110 [ 523.170454][T12471] syz.5.1918 (12471): drop_caches: 1 [ 523.176227][ T24] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 523.298064][ T5896] ath6kl: Unable to send get target info: -110 [ 523.332735][ T24] usb 1-1: device descriptor read/64, error -71 [ 523.359992][ T5896] ath6kl: Failed to init ath6kl core: -110 [ 523.367605][ T5896] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 523.595314][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 523.618392][ T5914] usb 5-1: USB disconnect, device number 72 [ 523.732729][ T24] usb 1-1: device descriptor read/64, error -71 [ 523.851425][ T24] usb usb1-port1: attempt power cycle [ 523.966209][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 524.153935][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 524.225270][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 524.254703][ T24] usb 1-1: device descriptor read/8, error -71 [ 524.414040][T12490] fuse: Bad value for 'group_id' [ 524.419053][T12490] fuse: Bad value for 'group_id' [ 524.502734][ T24] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 524.564359][ T24] usb 1-1: device descriptor read/8, error -71 [ 524.670764][T12491] misc userio: No port type given on /dev/userio [ 524.673439][ T24] usb usb1-port1: unable to enumerate USB device [ 525.583926][T12505] loop6: detected capacity change from 0 to 63 [ 525.609757][T12505] buffer_io_error: 1077 callbacks suppressed [ 525.609778][T12505] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.713000][T12505] Buffer I/O error on dev loop6, logical block 1, async page read [ 525.721158][T12505] Buffer I/O error on dev loop6, logical block 2, async page read [ 525.768539][T12505] Buffer I/O error on dev loop6, logical block 3, async page read [ 525.910168][T12507] Buffer I/O error on dev loop6, logical block 0, async page read [ 525.939385][T12499] xt_CT: No such helper "snmp_trap" [ 525.957587][T12507] Buffer I/O error on dev loop6, logical block 1, async page read [ 526.011883][T12507] Buffer I/O error on dev loop6, logical block 2, async page read [ 526.064708][T12507] Buffer I/O error on dev loop6, logical block 3, async page read [ 526.220152][T12516] usb usb8: usbfs: process 12516 (syz.0.1931) did not claim interface 0 before use [ 526.262748][T12510] Buffer I/O error on dev loop6, logical block 0, async page read [ 526.422010][T12510] Buffer I/O error on dev loop6, logical block 1, async page read [ 526.493103][ T5891] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 526.672857][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 526.691777][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.943948][ T5891] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 527.041240][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.049644][ T5891] usb 1-1: Product: syz [ 527.055410][ T5891] usb 1-1: Manufacturer: syz [ 527.063196][ T5891] usb 1-1: SerialNumber: syz [ 527.071324][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1936'. [ 527.131505][ T5891] usb 1-1: config 0 descriptor?? [ 527.138483][T12525] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1936'. [ 527.236239][T12527] vlan2: entered allmulticast mode [ 527.275916][T12527] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 527.397233][T12531] netem: change failed [ 527.434792][T12532] netem: change failed [ 527.574129][ T1213] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 527.581315][T12534] FAULT_INJECTION: forcing a failure. [ 527.581315][T12534] name failslab, interval 1, probability 0, space 0, times 0 [ 527.627470][T12534] CPU: 1 UID: 0 PID: 12534 Comm: syz.2.1939 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 527.627501][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.627515][T12534] Call Trace: [ 527.627523][T12534] [ 527.627534][T12534] dump_stack_lvl+0x189/0x250 [ 527.627571][T12534] ? __pfx____ratelimit+0x10/0x10 [ 527.627600][T12534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.627631][T12534] ? __pfx__printk+0x10/0x10 [ 527.627659][T12534] ? __pfx___might_resched+0x10/0x10 [ 527.627678][T12534] ? fs_reclaim_acquire+0x7d/0x100 [ 527.627708][T12534] should_fail_ex+0x414/0x560 [ 527.627741][T12534] should_failslab+0xa8/0x100 [ 527.627767][T12534] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 527.627790][T12534] ? __alloc_skb+0x112/0x2d0 [ 527.627816][T12534] __alloc_skb+0x112/0x2d0 [ 527.627840][T12534] netlink_ack+0x146/0xa50 [ 527.627857][T12534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.627882][T12534] ? ref_tracker_free+0x63a/0x7d0 [ 527.627909][T12534] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 527.627933][T12534] ? __pfx_nl80211_post_doit+0x10/0x10 [ 527.627958][T12534] ? __pfx_ref_tracker_free+0x10/0x10 [ 527.627999][T12534] netlink_rcv_skb+0x28c/0x470 [ 527.628029][T12534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 527.628056][T12534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.628096][T12534] ? down_read+0x1ad/0x2e0 [ 527.628129][T12534] genl_rcv+0x28/0x40 [ 527.628152][T12534] netlink_unicast+0x75b/0x8d0 [ 527.628194][T12534] netlink_sendmsg+0x805/0xb30 [ 527.628225][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.628250][T12534] ? aa_sock_msg_perm+0x94/0x160 [ 527.628280][T12534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.628306][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.628329][T12534] __sock_sendmsg+0x21c/0x270 [ 527.628361][T12534] ____sys_sendmsg+0x505/0x830 [ 527.628389][T12534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.628422][T12534] ? import_iovec+0x74/0xa0 [ 527.628448][T12534] ___sys_sendmsg+0x21f/0x2a0 [ 527.628472][T12534] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.628532][T12534] ? __fget_files+0x2a/0x420 [ 527.628555][T12534] ? __fget_files+0x3a0/0x420 [ 527.628589][T12534] __x64_sys_sendmsg+0x19b/0x260 [ 527.628615][T12534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 527.628648][T12534] ? __pfx_ksys_write+0x10/0x10 [ 527.628665][T12534] ? rcu_is_watching+0x15/0xb0 [ 527.628689][T12534] ? do_syscall_64+0xbe/0x3b0 [ 527.628721][T12534] do_syscall_64+0xfa/0x3b0 [ 527.628747][T12534] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.628773][T12534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.628793][T12534] ? clear_bhb_loop+0x60/0xb0 [ 527.628817][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.628838][T12534] RIP: 0033:0x7fc20df8e929 [ 527.628856][T12534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.628873][T12534] RSP: 002b:00007fc20eeb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.628896][T12534] RAX: ffffffffffffffda RBX: 00007fc20e1b5fa0 RCX: 00007fc20df8e929 [ 527.628911][T12534] RDX: 00000000000408c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 527.628925][T12534] RBP: 00007fc20eeb0090 R08: 0000000000000000 R09: 0000000000000000 [ 527.628937][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.628950][T12534] R13: 0000000000000000 R14: 00007fc20e1b5fa0 R15: 00007fc20e2dfa28 [ 527.628986][T12534] [ 527.963546][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.052754][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 528.063204][ T1213] usb 2-1: config 4 has an invalid descriptor of length 225, skipping remainder of the config [ 528.085118][ T1213] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 528.115454][ T1213] usb 2-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 528.128561][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.162130][ T1213] usb 2-1: Product: syz [ 528.216085][ T1213] usb 2-1: Manufacturer: syz [ 528.220773][ T1213] usb 2-1: SerialNumber: syz [ 528.627781][ T1213] usb 2-1: USB disconnect, device number 85 [ 529.112749][T12544] delete_channel: no stack [ 529.518298][ T5891] usb 1-1: USB disconnect, device number 73 [ 529.758299][T12549] syz.4.1944 (12549): drop_caches: 1 [ 529.952686][ T5914] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 530.116538][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 530.130360][ T5914] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 530.155070][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1948'. [ 530.156212][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 530.172154][T12564] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1948'. [ 530.184253][ T5914] usb 6-1: can't read configurations, error -61 [ 530.323049][ T5914] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 530.485414][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 530.499552][ T5914] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 530.513153][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 530.522121][ T5914] usb 6-1: can't read configurations, error -61 [ 530.542420][ T5914] usb usb6-port1: attempt power cycle [ 530.551946][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 530.590929][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1950'. [ 530.892790][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.912660][ T5891] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 530.927946][ T5914] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 530.966714][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 530.978558][ T5914] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 530.992116][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 531.003242][ T5914] usb 6-1: can't read configurations, error -61 [ 531.105660][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.175384][ T5914] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 531.297896][ T5891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 531.310651][ T5891] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 531.320649][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 531.328851][ T5914] usb 6-1: too many configurations: 231, using maximum allowed: 8 [ 531.351517][ T5914] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 531.368600][ T5914] usb 6-1: can't read configurations, error -61 [ 531.383078][ T5914] usb usb6-port1: unable to enumerate USB device [ 531.391134][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.425381][ T5891] usb 3-1: config 0 descriptor?? [ 531.468276][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 531.497874][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 531.528471][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 531.601759][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 531.609364][ T5891] usb 3-1: media controller created [ 531.617890][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.660776][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 531.700321][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 531.758395][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 531.853643][ T5896] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 531.873634][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 531.892034][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 531.992801][ T5896] usb 1-1: device descriptor read/64, error -71 [ 532.049187][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 532.079592][ T5891] dvb-usb: error while querying for an remote control event. [ 532.252834][ T5896] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 532.261196][ T5891] dvb-usb: bulk message failed: -22 (1/0) [ 532.267465][ T5891] dvb-usb: error while querying for an remote control event. [ 532.432815][ T5896] usb 1-1: device descriptor read/64, error -71 [ 532.444314][ T5891] usb 3-1: USB disconnect, device number 55 [ 532.482393][ T5891] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 532.580103][ T5896] usb usb1-port1: attempt power cycle [ 532.651621][ T30] audit: type=1800 audit(1749113429.888:89): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1957" name="file0" dev="tmpfs" ino=2109 res=0 errno=0 [ 533.318178][ T5896] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 533.343408][ T5896] usb 1-1: device descriptor read/8, error -71 [ 533.899914][T12590] syz.1.1957 (12590): drop_caches: 2 [ 533.922707][ T5896] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 533.995671][ T5896] usb 1-1: device descriptor read/8, error -71 [ 534.110471][T12604] batman_adv: batadv0: Adding interface: ip6gretap2 [ 534.117681][T12604] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.143856][ T5896] usb usb1-port1: unable to enumerate USB device [ 534.155430][T12604] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 534.186549][T12607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.205069][T12607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.214548][T12607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.227795][T12607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.240090][T12607] batman_adv: batadv0: Removing interface: ip6gretap2 [ 534.586959][T12615] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 534.918132][T12610] syz.5.1964 (12610): drop_caches: 2 [ 534.960816][T12615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.119594][T12618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.129286][T12618] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 535.145703][T12618] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 535.250219][T12628] batadv0: entered promiscuous mode [ 536.024057][T12632] xt_CT: No such helper "snmp_trap" [ 537.735790][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 537.792692][T10101] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 537.942635][T10101] usb 2-1: Using ep0 maxpacket: 8 [ 537.960009][T10101] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.978129][T12638] delete_channel: no stack [ 537.995988][T10101] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 538.032019][T10101] usb 2-1: config 7 has no interface number 0 [ 538.065338][T10101] usb 2-1: string descriptor 0 read error: -22 [ 538.072642][ T5891] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 538.090591][T10101] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 538.140136][T10101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.164261][T12662] FAULT_INJECTION: forcing a failure. [ 538.164261][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 538.261060][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.4.1979 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 538.261089][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.261102][T12662] Call Trace: [ 538.261120][T12662] [ 538.261130][T12662] dump_stack_lvl+0x189/0x250 [ 538.261167][T12662] ? __pfx____ratelimit+0x10/0x10 [ 538.261195][T12662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.261228][T12662] ? __pfx__printk+0x10/0x10 [ 538.261258][T12662] ? __pfx___might_resched+0x10/0x10 [ 538.261283][T12662] should_fail_ex+0x414/0x560 [ 538.261317][T12662] should_failslab+0xa8/0x100 [ 538.261343][T12662] __kmalloc_cache_noprof+0x70/0x3d0 [ 538.261366][T12662] ? snd_seq_port_connect+0x6b/0x430 [ 538.261396][T12662] snd_seq_port_connect+0x6b/0x430 [ 538.261422][T12662] ? do_raw_read_unlock+0x3d/0x80 [ 538.261446][T12662] ? _raw_read_unlock+0x28/0x50 [ 538.261476][T12662] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 538.261523][T12662] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 538.261550][T12662] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 538.261604][T12662] snd_seq_oss_midi_open+0x39d/0x7b0 [ 538.261635][T12662] ? is_bpf_text_address+0x26/0x2b0 [ 538.261669][T12662] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 538.261723][T12662] snd_seq_oss_process_event+0xd26/0x2a80 [ 538.261761][T12662] ? __pfx_snd_seq_oss_process_event+0x10/0x10 [ 538.261802][T12662] snd_seq_oss_write+0x4b7/0x930 [ 538.261850][T12662] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 538.261881][T12662] ? common_file_perm+0x199/0x200 [ 538.261914][T12662] ? security_file_permission+0x75/0x290 [ 538.261944][T12662] odev_write+0x5a/0x80 [ 538.261967][T12662] ? __pfx_odev_write+0x10/0x10 [ 538.261992][T12662] vfs_write+0x27e/0xa90 [ 538.262023][T12662] ? __pfx_vfs_write+0x10/0x10 [ 538.262046][T12662] ? __fget_files+0x2a/0x420 [ 538.262074][T12662] ? __fget_files+0x2a/0x420 [ 538.262096][T12662] ? __fget_files+0x3a0/0x420 [ 538.262119][T12662] ? __fget_files+0x2a/0x420 [ 538.262153][T12662] ksys_write+0x145/0x250 [ 538.262175][T12662] ? __pfx_ksys_write+0x10/0x10 [ 538.262201][T12662] ? do_syscall_64+0xbe/0x3b0 [ 538.262234][T12662] do_syscall_64+0xfa/0x3b0 [ 538.262261][T12662] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.262288][T12662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.262309][T12662] ? clear_bhb_loop+0x60/0xb0 [ 538.262335][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.262355][T12662] RIP: 0033:0x7fd78278e929 [ 538.262373][T12662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.262392][T12662] RSP: 002b:00007fd78360f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.262414][T12662] RAX: ffffffffffffffda RBX: 00007fd7829b6080 RCX: 00007fd78278e929 [ 538.262429][T12662] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000004 [ 538.262441][T12662] RBP: 00007fd78360f090 R08: 0000000000000000 R09: 0000000000000000 [ 538.262455][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.262466][T12662] R13: 0000000000000001 R14: 00007fd7829b6080 R15: 00007fd782adfa28 [ 538.262498][T12662] [ 538.570243][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.738863][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.749748][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.764687][T12664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.794261][T12664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.849866][ T5891] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.882901][ T5891] usb 6-1: config 0 has no interface number 0 [ 538.941746][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 538.953434][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 538.964605][ T5891] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 538.976356][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.987704][ T5891] usb 6-1: config 0 descriptor?? [ 538.993703][T12656] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 539.007097][ T5891] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 539.213924][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.223338][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.234558][ T24] usb 6-1: USB disconnect, device number 50 [ 539.240519][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 539.791471][T12681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1986'. [ 539.805379][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 539.822747][T12681] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1986'. [ 539.982923][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 539.997763][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.006108][ T24] usb 6-1: config 0 has no interface number 0 [ 540.013413][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.026290][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 540.035841][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.060608][ T24] usb 6-1: config 0 descriptor?? [ 540.087435][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 540.252692][T10101] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 540.262649][ T5896] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 540.402652][T10101] usb 3-1: Using ep0 maxpacket: 16 [ 540.410707][T10101] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 540.426142][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 540.436113][T10101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.453338][ T5896] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 540.462426][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.473071][T10101] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.482280][T10101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.498860][ T5896] usb 1-1: config 0 descriptor?? [ 540.511676][T10101] usb 3-1: Product: syz [ 540.519847][ T1213] usb 2-1: USB disconnect, device number 86 [ 540.542171][T10101] usb 3-1: Manufacturer: syz [ 540.556475][T10101] usb 3-1: SerialNumber: syz [ 540.568696][T10101] usb 3-1: config 0 descriptor?? [ 540.585120][T10101] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.598257][T10101] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 540.749647][ T5896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 540.762026][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.783858][ T5896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 540.791322][ T5896] usb 1-1: media controller created [ 540.830864][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.958327][ T5896] az6027: usb out operation failed. (-71) [ 540.967086][ T5896] az6027: usb out operation failed. (-71) [ 540.973060][ T5896] stb0899_attach: Driver disabled by Kconfig [ 540.979240][ T5896] az6027: no front-end attached [ 540.979240][ T5896] [ 541.008116][ T5896] az6027: usb out operation failed. (-71) [ 541.015435][ T5896] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 541.037659][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 541.056425][ T5896] dvb-usb: schedule remote query interval to 400 msecs. [ 541.064890][T10101] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 541.077139][T10101] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 541.086866][ T5896] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 541.097606][T10101] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 541.107055][T10101] em28xx 3-1:0.0: No AC97 audio processor [ 541.117125][ T5896] usb 1-1: USB disconnect, device number 78 [ 541.159073][T10101] usb 3-1: USB disconnect, device number 56 [ 541.189179][T10101] em28xx 3-1:0.0: Disconnecting em28xx [ 541.219035][T10101] em28xx 3-1:0.0: Freeing device [ 541.230567][ T5896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 541.274673][T12688] delete_channel: no stack [ 541.378568][ T24] usb 6-1: USB disconnect, device number 51 [ 541.433346][T12710] FAULT_INJECTION: forcing a failure. [ 541.433346][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 541.484229][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.1.1996 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 541.484260][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 541.484273][T12710] Call Trace: [ 541.484282][T12710] [ 541.484292][T12710] dump_stack_lvl+0x189/0x250 [ 541.484340][T12710] ? __pfx____ratelimit+0x10/0x10 [ 541.484368][T12710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.484401][T12710] ? __pfx__printk+0x10/0x10 [ 541.484429][T12710] ? __pfx___might_resched+0x10/0x10 [ 541.484448][T12710] ? fs_reclaim_acquire+0x7d/0x100 [ 541.484479][T12710] should_fail_ex+0x414/0x560 [ 541.484512][T12710] ? xt_alloc_table_info+0x3b/0xa0 [ 541.484536][T12710] should_failslab+0xa8/0x100 [ 541.484561][T12710] __kvmalloc_node_noprof+0x161/0x5f0 [ 541.484585][T12710] ? xt_alloc_table_info+0x3b/0xa0 [ 541.484617][T12710] xt_alloc_table_info+0x3b/0xa0 [ 541.484643][T12710] do_ip6t_set_ctl+0x88a/0xce0 [ 541.484675][T12710] ? rcu_is_watching+0x15/0xb0 [ 541.484694][T12710] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 541.484739][T12710] ? __pfx___mutex_lock+0x10/0x10 [ 541.484769][T12710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.484797][T12710] ? aa_sk_perm+0x81e/0x950 [ 541.484827][T12710] ? __pfx_aa_sk_perm+0x10/0x10 [ 541.484860][T12710] nf_setsockopt+0x26f/0x290 [ 541.484886][T12710] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 541.484919][T12710] do_sock_setsockopt+0x257/0x3e0 [ 541.484945][T12710] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 541.484971][T12710] ? __fget_files+0x2a/0x420 [ 541.485005][T12710] __x64_sys_setsockopt+0x18b/0x220 [ 541.485034][T12710] do_syscall_64+0xfa/0x3b0 [ 541.485061][T12710] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.485087][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.485108][T12710] ? clear_bhb_loop+0x60/0xb0 [ 541.485134][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.485154][T12710] RIP: 0033:0x7f0963d8e929 [ 541.485173][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.485203][T12710] RSP: 002b:00007f0964ba2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 541.485224][T12710] RAX: ffffffffffffffda RBX: 00007f0963fb5fa0 RCX: 00007f0963d8e929 [ 541.485238][T12710] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 541.485250][T12710] RBP: 00007f0964ba2090 R08: 00000000000005b8 R09: 0000000000000000 [ 541.485263][T12710] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.485276][T12710] R13: 0000000000000000 R14: 00007f0963fb5fa0 R15: 00007f09640dfa28 [ 541.485307][T12710] [ 541.750468][ C0] vkms_vblank_simulate: vblank timer overrun [ 541.785340][T12714] x_tables: duplicate underflow at hook 2 [ 541.848804][ T30] audit: type=1326 audit(1749113439.088:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.5.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x0 [ 541.957621][T12721] netlink: 'syz.1.2001': attribute type 9 has an invalid length. [ 541.972153][T12721] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2001'. [ 542.187740][T12719] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 542.457217][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 542.647378][T12733] vivid-007: ================= START STATUS ================= [ 542.655656][T12733] vivid-007: Enable Output Cropping: true [ 542.661745][T12733] vivid-007: Enable Output Composing: true [ 542.667894][T12733] vivid-007: Enable Output Scaler: true [ 542.673765][T12733] vivid-007: Tx RGB Quantization Range: Automatic [ 542.680368][T12733] vivid-007: Transmit Mode: HDMI [ 542.685518][T12733] vivid-007: Hotplug Present: 0x00000000 [ 542.691275][T12733] vivid-007: RxSense Present: 0x00000000 [ 542.698155][T12733] vivid-007: EDID Present: 0x00000000 [ 542.703871][T12733] vivid-007: ================== END STATUS ================== [ 542.948721][T12728] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 542.982973][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 543.032176][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.044251][ T24] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 543.058404][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.097467][ T24] usb 3-1: config 0 descriptor?? [ 543.314026][T12745] batadv0: entered promiscuous mode [ 543.322729][T10101] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 543.483261][T10101] usb 2-1: Using ep0 maxpacket: 8 [ 543.485699][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 543.501694][T10101] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 543.614469][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 543.653192][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 543.683854][T10101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 543.743209][T10101] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 543.752896][T12745] xt_CT: No such helper "snmp_trap" [ 543.791916][T10101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.828167][T10101] usb 2-1: Product: syz [ 543.845181][T10101] usb 2-1: Manufacturer: syz [ 543.858684][T10101] usb 2-1: SerialNumber: syz [ 543.883421][T10101] usb 2-1: config 0 descriptor?? [ 543.908421][T10101] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 544.147317][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 544.228111][T12755] IPv6: NLM_F_REPLACE set, but no existing node found! [ 544.623619][T12762] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 544.849023][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 544.893690][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 544.929197][T12762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.957505][ T24] usb 3-1: USB disconnect, device number 57 [ 545.013666][T12764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.050376][T12764] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 545.077856][T12766] FAULT_INJECTION: forcing a failure. [ 545.077856][T12766] name failslab, interval 1, probability 0, space 0, times 0 [ 545.098370][T12764] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 545.130048][T12766] CPU: 1 UID: 0 PID: 12766 Comm: syz.4.2014 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 545.130080][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.130093][T12766] Call Trace: [ 545.130103][T12766] [ 545.130113][T12766] dump_stack_lvl+0x189/0x250 [ 545.130159][T12766] ? __pfx____ratelimit+0x10/0x10 [ 545.130188][T12766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.130221][T12766] ? __pfx__printk+0x10/0x10 [ 545.130250][T12766] ? __pfx___might_resched+0x10/0x10 [ 545.130279][T12766] should_fail_ex+0x414/0x560 [ 545.130311][T12766] should_failslab+0xa8/0x100 [ 545.130338][T12766] __kmalloc_cache_noprof+0x70/0x3d0 [ 545.130360][T12766] ? nft_netdev_hook_alloc+0x57/0x530 [ 545.130395][T12766] nft_netdev_hook_alloc+0x57/0x530 [ 545.130424][T12766] ? rcu_is_watching+0x15/0xb0 [ 545.130453][T12766] nf_tables_parse_netdev_hooks+0x10b/0x8e0 [ 545.130482][T12766] ? nf_flow_table_init+0x280/0x2a0 [ 545.130524][T12766] nft_flowtable_parse_hook+0x465/0x8d0 [ 545.130557][T12766] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 545.130589][T12766] ? nf_flow_table_init+0x280/0x2a0 [ 545.130622][T12766] nf_tables_newflowtable+0x1220/0x20d0 [ 545.130667][T12766] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 545.130713][T12766] ? __nla_parse+0x40/0x60 [ 545.130749][T12766] nfnetlink_rcv+0x1132/0x2520 [ 545.130812][T12766] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 545.130857][T12766] ? ref_tracker_free+0x63a/0x7d0 [ 545.130920][T12766] ? __netlink_deliver_tap+0x807/0x850 [ 545.130952][T12766] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.130972][T12766] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.130999][T12766] netlink_unicast+0x75b/0x8d0 [ 545.131042][T12766] netlink_sendmsg+0x805/0xb30 [ 545.131073][T12766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.131100][T12766] ? aa_sock_msg_perm+0x94/0x160 [ 545.131130][T12766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.131164][T12766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.131187][T12766] __sock_sendmsg+0x21c/0x270 [ 545.131218][T12766] ____sys_sendmsg+0x505/0x830 [ 545.131247][T12766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.131281][T12766] ? import_iovec+0x74/0xa0 [ 545.131307][T12766] ___sys_sendmsg+0x21f/0x2a0 [ 545.131332][T12766] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.131396][T12766] ? __fget_files+0x2a/0x420 [ 545.131419][T12766] ? __fget_files+0x3a0/0x420 [ 545.131455][T12766] __x64_sys_sendmsg+0x19b/0x260 [ 545.131482][T12766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.131516][T12766] ? __pfx_ksys_write+0x10/0x10 [ 545.131534][T12766] ? rcu_is_watching+0x15/0xb0 [ 545.131559][T12766] ? do_syscall_64+0xbe/0x3b0 [ 545.131592][T12766] do_syscall_64+0xfa/0x3b0 [ 545.131619][T12766] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.131645][T12766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.131666][T12766] ? clear_bhb_loop+0x60/0xb0 [ 545.131692][T12766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.131711][T12766] RIP: 0033:0x7fd78278e929 [ 545.131731][T12766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.131749][T12766] RSP: 002b:00007fd783630038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.131772][T12766] RAX: ffffffffffffffda RBX: 00007fd7829b5fa0 RCX: 00007fd78278e929 [ 545.131788][T12766] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 545.131801][T12766] RBP: 00007fd783630090 R08: 0000000000000000 R09: 0000000000000000 [ 545.131814][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.131827][T12766] R13: 0000000000000000 R14: 00007fd7829b5fa0 R15: 00007fd782adfa28 [ 545.131859][T12766] [ 545.682655][ T30] audit: type=1326 audit(1749113442.968:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.731214][ T30] audit: type=1326 audit(1749113442.968:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.753989][ T30] audit: type=1326 audit(1749113442.968:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.776826][ T30] audit: type=1326 audit(1749113442.968:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.799368][ T30] audit: type=1326 audit(1749113442.968:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.821835][ T30] audit: type=1326 audit(1749113443.008:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.844687][ T30] audit: type=1326 audit(1749113443.018:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.867241][ T30] audit: type=1326 audit(1749113443.018:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 545.961127][ T30] audit: type=1326 audit(1749113443.018:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12769 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 546.285900][T10101] usb 2-1: USB disconnect, device number 87 [ 546.601506][T12795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.708723][T12798] FAULT_INJECTION: forcing a failure. [ 546.708723][T12798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.728547][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.0.2026 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 546.728576][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.728589][T12798] Call Trace: [ 546.728598][T12798] [ 546.728608][T12798] dump_stack_lvl+0x189/0x250 [ 546.728644][T12798] ? __pfx____ratelimit+0x10/0x10 [ 546.728673][T12798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.728705][T12798] ? __pfx__printk+0x10/0x10 [ 546.728743][T12798] should_fail_ex+0x414/0x560 [ 546.728777][T12798] _copy_to_user+0x31/0xb0 [ 546.728803][T12798] simple_read_from_buffer+0xe1/0x170 [ 546.728832][T12798] proc_fail_nth_read+0x1df/0x250 [ 546.728863][T12798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.728893][T12798] ? rw_verify_area+0x258/0x650 [ 546.728931][T12798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.728959][T12798] vfs_read+0x200/0x980 [ 546.728985][T12798] ? __pfx___mutex_lock+0x10/0x10 [ 546.729016][T12798] ? __pfx_vfs_read+0x10/0x10 [ 546.729037][T12798] ? __fget_files+0x2a/0x420 [ 546.729068][T12798] ? __fget_files+0x3a0/0x420 [ 546.729091][T12798] ? __fget_files+0x2a/0x420 [ 546.729124][T12798] ksys_read+0x145/0x250 [ 546.729143][T12798] ? __fget_files+0x3a0/0x420 [ 546.729168][T12798] ? __pfx_ksys_read+0x10/0x10 [ 546.729195][T12798] ? do_syscall_64+0xbe/0x3b0 [ 546.729228][T12798] do_syscall_64+0xfa/0x3b0 [ 546.729255][T12798] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.729282][T12798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.729303][T12798] ? clear_bhb_loop+0x60/0xb0 [ 546.729329][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.729349][T12798] RIP: 0033:0x7fe9e9d8d33c [ 546.729369][T12798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.729393][T12798] RSP: 002b:00007fe9eacc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.729416][T12798] RAX: ffffffffffffffda RBX: 00007fe9e9fb5fa0 RCX: 00007fe9e9d8d33c [ 546.729432][T12798] RDX: 000000000000000f RSI: 00007fe9eacc70a0 RDI: 0000000000000006 [ 546.729445][T12798] RBP: 00007fe9eacc7090 R08: 0000000000000000 R09: 0000000000000000 [ 546.729458][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.729471][T12798] R13: 0000000000000000 R14: 00007fe9e9fb5fa0 R15: 00007fe9ea0dfa28 [ 546.729505][T12798] [ 547.009522][T12801] netlink: 'syz.2.2027': attribute type 1 has an invalid length. [ 547.095655][T12801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.123317][T12801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.130324][T12801] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.141774][T12801] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 547.282729][T10101] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 547.686319][T12808] xt_CT: No such helper "snmp_trap" [ 548.041709][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 548.206730][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.216055][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.256652][ T24] usb 3-1: Product: syz [ 548.268947][T12832] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.2036'. [ 548.278887][ T24] usb 3-1: Manufacturer: syz [ 548.345274][ T24] usb 3-1: SerialNumber: syz [ 548.450168][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 548.492804][ T5896] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 548.553966][ T5891] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 548.672829][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 548.705045][ T5896] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 548.731181][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.771784][ T5896] usb 1-1: Product: syz [ 548.792062][ T5896] usb 1-1: Manufacturer: syz [ 548.819366][ T5896] usb 1-1: SerialNumber: syz [ 548.855588][ T5896] usb 1-1: config 0 descriptor?? [ 548.923172][ T5896] gspca_main: sq930x-2.14.0 probing 2770:930c [ 549.003719][ T5907] usb 3-1: USB disconnect, device number 58 [ 549.484625][ T24] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 549.542876][ T5896] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 549.645359][ T5891] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 549.652400][ T5891] ath9k_htc: Failed to initialize the device [ 549.685625][ T24] usb 2-1: Invalid ep0 maxpacket: 16 [ 549.701865][ T5907] usb 3-1: ath9k_htc: USB layer deinitialized [ 549.822157][T12851] netlink: 'syz.5.2041': attribute type 1 has an invalid length. [ 549.830318][ T24] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 549.960034][T12851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.993194][ T24] usb 2-1: Invalid ep0 maxpacket: 16 [ 550.006095][ T24] usb usb2-port1: attempt power cycle [ 550.062398][T12854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.070859][T12854] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.088811][T12854] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 550.152657][T10101] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 550.381894][T10101] usb 3-1: unable to get BOS descriptor or descriptor too short [ 550.390352][T10101] usb 3-1: not running at top speed; connect to a high speed hub [ 550.395512][ T24] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 550.414223][T10101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.426341][T10101] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 550.472725][ T5896] gspca_sq930x: Unknown sensor [ 550.484807][ T5896] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 550.495441][T10101] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 550.517056][ T5896] usb 1-1: USB disconnect, device number 79 [ 550.530235][T10101] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.546685][T10101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.551091][ T24] usb 2-1: Invalid ep0 maxpacket: 16 [ 550.592440][T10101] usb 3-1: Product: syz [ 550.605245][T10101] usb 3-1: Manufacturer: syz [ 550.615833][T10101] usb 3-1: SerialNumber: syz [ 550.732800][ T24] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 550.862332][ T24] usb 2-1: Invalid ep0 maxpacket: 16 [ 550.869213][ T24] usb usb2-port1: unable to enumerate USB device [ 551.343584][T12864] delete_channel: no stack [ 551.808631][T12879] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2052'. [ 552.654415][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 553.007690][T12914] netlink: 'syz.5.2064': attribute type 8 has an invalid length. [ 553.035155][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.047146][T10101] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 553.066366][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 553.079475][T10101] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 553.092673][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.106402][T10101] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 553.119113][ T24] usb 1-1: config 0 descriptor?? [ 553.333062][T10101] usb 3-1: USB disconnect, device number 59 [ 553.431260][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.774019][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 553.780156][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 553.822638][ T5890] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 553.857852][ T24] usb 1-1: USB disconnect, device number 80 [ 554.905534][ T5896] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 555.032197][ T5890] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 555.122757][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 555.132001][ T5896] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 555.175000][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.256249][ T5896] usb 6-1: config 0 descriptor?? [ 555.256919][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.272493][T10101] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 555.348786][T12959] netlink: 'syz.1.2083': attribute type 3 has an invalid length. [ 555.389529][ T5890] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 555.449235][T10101] usb 1-1: config 0 has no interfaces? [ 555.465814][T10101] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 555.477651][T10101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.487863][T10101] usb 1-1: Product: syz [ 555.492170][T10101] usb 1-1: Manufacturer: syz [ 555.503541][T10101] usb 1-1: SerialNumber: syz [ 555.508472][ T5890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.509663][ T5896] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 555.527768][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.533773][T10101] usb 1-1: config 0 descriptor?? [ 555.559181][T12961] IPVS: stopping backup sync thread 12347 ... [ 555.560994][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 555.596111][ T5896] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 555.606589][T12950] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 555.622240][ T5896] usb 6-1: media controller created [ 555.649404][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.666977][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.085714][T12974] loop4: detected capacity change from 0 to 524255232 [ 556.140940][ T5890] usb 5-1: USB disconnect, device number 75 [ 556.792959][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 556.952948][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 556.973056][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 556.982003][ T24] usb 2-1: config 0 has no interface number 0 [ 557.003953][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 557.086265][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 557.137755][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.170284][ T24] usb 2-1: Product: syz [ 557.187010][ T24] usb 2-1: Manufacturer: syz [ 557.196794][ T24] usb 2-1: SerialNumber: syz [ 557.459692][ T24] usb 2-1: config 0 descriptor?? [ 557.582744][ T1213] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 557.698756][T12979] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 557.708578][ T5896] az6027: usb out operation failed. (-71) [ 557.770402][ T5896] az6027: usb out operation failed. (-71) [ 557.793922][ T1213] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 557.819541][ T5896] stb0899_attach: Driver disabled by Kconfig [ 557.848706][ T1213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.866937][ T5896] az6027: no front-end attached [ 557.866937][ T5896] [ 557.876761][ T1213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 557.890997][ T5896] az6027: usb out operation failed. (-71) [ 557.901421][ T5896] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 557.995747][ T1213] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.052854][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 558.130406][ T1213] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 558.164232][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.175815][ T5896] dvb-usb: schedule remote query interval to 400 msecs. [ 558.250575][ T5896] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 558.281012][ T1213] usb 5-1: Product: syz [ 558.300332][ T1213] usb 5-1: Manufacturer: syz [ 558.309499][ T5896] usb 6-1: USB disconnect, device number 52 [ 558.401464][ T1213] cdc_wdm 5-1:1.0: skipping garbage [ 558.442628][ T1213] cdc_wdm 5-1:1.0: skipping garbage [ 558.468839][ T1213] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 558.487142][ T5897] usb 1-1: USB disconnect, device number 81 [ 558.488132][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 558.522626][ T1213] cdc_wdm 5-1:1.0: Unknown control protocol [ 558.689308][ T1213] usb 5-1: USB disconnect, device number 76 [ 558.742712][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 558.892840][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 558.900643][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 558.961779][ T5896] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 558.992007][ T24] usb 2-1: USB disconnect, device number 92 [ 559.175913][ T5897] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 559.269876][T13004] xt_CT: No such helper "snmp_trap" [ 559.407669][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.431459][ T5897] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 559.552014][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.563730][ T5897] usb 1-1: config 0 descriptor?? [ 559.809486][ T5897] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 559.825972][T13011] FAULT_INJECTION: forcing a failure. [ 559.825972][T13011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.848554][ T5897] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input39 [ 559.862442][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.2.2097 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 559.862470][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.862484][T13011] Call Trace: [ 559.862492][T13011] [ 559.862502][T13011] dump_stack_lvl+0x189/0x250 [ 559.862544][T13011] ? __pfx____ratelimit+0x10/0x10 [ 559.862578][T13011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.862609][T13011] ? __pfx__printk+0x10/0x10 [ 559.862639][T13011] ? __might_fault+0xb0/0x130 [ 559.862673][T13011] should_fail_ex+0x414/0x560 [ 559.862706][T13011] _copy_from_iter+0x1db/0x16f0 [ 559.862743][T13011] ? rcu_is_watching+0x15/0xb0 [ 559.862764][T13011] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 559.862790][T13011] ? __pfx__copy_from_iter+0x10/0x10 [ 559.862824][T13011] ? __build_skb_around+0x257/0x3e0 [ 559.862847][T13011] ? netlink_sendmsg+0x642/0xb30 [ 559.862866][T13011] ? skb_put+0x11b/0x210 [ 559.862890][T13011] netlink_sendmsg+0x6b2/0xb30 [ 559.862921][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.862946][T13011] ? aa_sock_msg_perm+0x94/0x160 [ 559.862974][T13011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.862999][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.863021][T13011] __sock_sendmsg+0x21c/0x270 [ 559.863050][T13011] ____sys_sendmsg+0x505/0x830 [ 559.863080][T13011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.863113][T13011] ? import_iovec+0x74/0xa0 [ 559.863139][T13011] ___sys_sendmsg+0x21f/0x2a0 [ 559.863165][T13011] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.863226][T13011] ? __fget_files+0x2a/0x420 [ 559.863250][T13011] ? __fget_files+0x3a0/0x420 [ 559.863284][T13011] __x64_sys_sendmsg+0x19b/0x260 [ 559.863310][T13011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.863342][T13011] ? __pfx_ksys_write+0x10/0x10 [ 559.863361][T13011] ? rcu_is_watching+0x15/0xb0 [ 559.863386][T13011] ? do_syscall_64+0xbe/0x3b0 [ 559.863419][T13011] do_syscall_64+0xfa/0x3b0 [ 559.863446][T13011] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.863472][T13011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.863493][T13011] ? clear_bhb_loop+0x60/0xb0 [ 559.863519][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.863540][T13011] RIP: 0033:0x7fc20df8e929 [ 559.863558][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.863577][T13011] RSP: 002b:00007fc20eeb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.863600][T13011] RAX: ffffffffffffffda RBX: 00007fc20e1b5fa0 RCX: 00007fc20df8e929 [ 559.863625][T13011] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 559.863650][T13011] RBP: 00007fc20eeb0090 R08: 0000000000000000 R09: 0000000000000000 [ 559.863663][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.863693][T13011] R13: 0000000000000000 R14: 00007fc20e1b5fa0 R15: 00007fc20e2dfa28 [ 559.863725][T13011] [ 560.225488][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 560.357180][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 560.452711][ T5897] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 561.111405][ T5897] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 561.244658][T13035] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 561.349279][T13035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.391175][ T5897] usb 5-1: config 0 has no interfaces? [ 561.422983][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 561.435116][ T5897] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 561.449846][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.466299][ T5897] usb 5-1: Product: syz [ 561.470663][ T5897] usb 5-1: Manufacturer: syz [ 561.476841][ T5897] usb 5-1: SerialNumber: syz [ 561.494950][ T5897] usb 5-1: config 0 descriptor?? [ 561.531436][T13037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.546722][T13037] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 561.561531][T13037] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 561.613241][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 561.624821][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.635362][ T24] usb 3-1: config 11 has an invalid interface number: 244 but max is 0 [ 561.646548][ T24] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 561.722869][ T24] usb 3-1: config 11 has no interface number 0 [ 561.730716][T13027] IPVS: stopping backup sync thread 8749 ... [ 561.743291][ T24] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 561.766391][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 561.766412][ T30] audit: type=1326 audit(1749113459.038:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 561.796464][ T24] usb 3-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.810599][ T24] usb 3-1: config 11 interface 244 has no altsetting 0 [ 561.824662][ T30] audit: type=1326 audit(1749113459.038:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 561.847059][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.871781][ T30] audit: type=1326 audit(1749113459.038:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 561.908519][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 561.959723][ T5890] usb 1-1: USB disconnect, device number 82 [ 561.992115][ T30] audit: type=1326 audit(1749113459.048:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 562.019032][ T30] audit: type=1326 audit(1749113459.048:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 562.042096][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.044726][ T30] audit: type=1326 audit(1749113459.048:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0963d8d3df code=0x7ffc0000 [ 562.050806][ T24] usb 3-1: Product: syz [ 562.078697][ T30] audit: type=1326 audit(1749113459.048:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 562.193083][ T30] audit: type=1326 audit(1749113459.048:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 562.221826][ T30] audit: type=1326 audit(1749113459.048:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0963d8e929 code=0x7ffc0000 [ 562.247690][ T30] audit: type=1326 audit(1749113459.048:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0963d8e963 code=0x7ffc0000 [ 562.256333][ T24] usb 3-1: Manufacturer: syz [ 562.369635][ T24] usb 3-1: SerialNumber: syz [ 562.796657][ T24] peak_usb 3-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 562.878700][ T24] peak_usb 3-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 562.897655][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.904213][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.993396][ T24] peak_usb 3-1:11.244: probe with driver peak_usb failed with error -71 [ 563.061756][T13049] FAULT_INJECTION: forcing a failure. [ 563.061756][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 563.082028][ T24] usb 3-1: USB disconnect, device number 60 [ 563.103375][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.0.2108 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 563.103403][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.103415][T13049] Call Trace: [ 563.103424][T13049] [ 563.103433][T13049] dump_stack_lvl+0x189/0x250 [ 563.103470][T13049] ? __pfx____ratelimit+0x10/0x10 [ 563.103499][T13049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.103541][T13049] ? __pfx__printk+0x10/0x10 [ 563.103566][T13049] ? __pfx___might_resched+0x10/0x10 [ 563.103586][T13049] ? fs_reclaim_acquire+0x7d/0x100 [ 563.103617][T13049] should_fail_ex+0x414/0x560 [ 563.103650][T13049] should_failslab+0xa8/0x100 [ 563.103676][T13049] __kmalloc_noprof+0xcb/0x4f0 [ 563.103697][T13049] ? tomoyo_encode+0x28b/0x550 [ 563.103733][T13049] tomoyo_encode+0x28b/0x550 [ 563.103769][T13049] tomoyo_realpath_from_path+0x58d/0x5d0 [ 563.103803][T13049] ? tomoyo_domain+0xd9/0x130 [ 563.103840][T13049] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 563.103866][T13049] tomoyo_path_number_perm+0x1e8/0x5a0 [ 563.103895][T13049] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.103939][T13049] ? __lock_acquire+0xab9/0xd20 [ 563.103989][T13049] ? __fget_files+0x2a/0x420 [ 563.104017][T13049] ? __fget_files+0x2a/0x420 [ 563.104039][T13049] ? __fget_files+0x3a0/0x420 [ 563.104062][T13049] ? __fget_files+0x2a/0x420 [ 563.104094][T13049] security_file_ioctl+0xcb/0x2d0 [ 563.104121][T13049] __se_sys_ioctl+0x47/0x170 [ 563.104155][T13049] do_syscall_64+0xfa/0x3b0 [ 563.104183][T13049] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.104209][T13049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.104230][T13049] ? clear_bhb_loop+0x60/0xb0 [ 563.104256][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.104276][T13049] RIP: 0033:0x7fe9e9d8e929 [ 563.104295][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.104313][T13049] RSP: 002b:00007fe9eacc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.104334][T13049] RAX: ffffffffffffffda RBX: 00007fe9e9fb5fa0 RCX: 00007fe9e9d8e929 [ 563.104349][T13049] RDX: 0000200000000000 RSI: 00000000000089e0 RDI: 0000000000000003 [ 563.104363][T13049] RBP: 00007fe9eacc7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.104375][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.104388][T13049] R13: 0000000000000000 R14: 00007fe9e9fb5fa0 R15: 00007fe9ea0dfa28 [ 563.104420][T13049] [ 563.104721][T13049] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.298601][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.135641][ T1213] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 564.431546][ T5897] usb 5-1: USB disconnect, device number 77 [ 564.500997][T13069] FAULT_INJECTION: forcing a failure. [ 564.500997][T13069] name failslab, interval 1, probability 0, space 0, times 0 [ 564.523289][ T1213] usb 3-1: device descriptor read/64, error -71 [ 564.548687][T13069] CPU: 1 UID: 0 PID: 13069 Comm: syz.1.2115 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 564.548720][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.548732][T13069] Call Trace: [ 564.548741][T13069] [ 564.548751][T13069] dump_stack_lvl+0x189/0x250 [ 564.548789][T13069] ? __pfx____ratelimit+0x10/0x10 [ 564.548818][T13069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.548850][T13069] ? __pfx__printk+0x10/0x10 [ 564.548880][T13069] ? __pfx___might_resched+0x10/0x10 [ 564.548899][T13069] ? fs_reclaim_acquire+0x7d/0x100 [ 564.548929][T13069] should_fail_ex+0x414/0x560 [ 564.548962][T13069] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 564.548987][T13069] should_failslab+0xa8/0x100 [ 564.549019][T13069] __kvmalloc_node_noprof+0x161/0x5f0 [ 564.549042][T13069] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 564.549073][T13069] alloc_netdev_mqs+0xa8b/0x11e0 [ 564.549102][T13069] rtnl_create_link+0x31f/0xd10 [ 564.549126][T13069] rtnl_newlink_create+0x25c/0xb00 [ 564.549147][T13069] ? __pfx_aa_get_newest_label+0x10/0x10 [ 564.549171][T13069] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 564.549184][T13069] ? rtnl_newlink+0x8db/0x1c70 [ 564.549208][T13069] ? __pfx___mutex_lock+0x10/0x10 [ 564.549235][T13069] ? full_name_hash+0x92/0xe0 [ 564.549260][T13069] rtnl_newlink+0x16d6/0x1c70 [ 564.549295][T13069] ? __pfx_rtnl_newlink+0x10/0x10 [ 564.549335][T13069] ? __lock_acquire+0xab9/0xd20 [ 564.549372][T13069] ? is_bpf_text_address+0x26/0x2b0 [ 564.549389][T13069] ? is_bpf_text_address+0x292/0x2b0 [ 564.549407][T13069] ? is_bpf_text_address+0x26/0x2b0 [ 564.549429][T13069] ? kernel_text_address+0xa5/0xe0 [ 564.549470][T13069] ? __lock_acquire+0xab9/0xd20 [ 564.549526][T13069] ? __pfx_rtnl_newlink+0x10/0x10 [ 564.549566][T13069] rtnetlink_rcv_msg+0x7cc/0xb70 [ 564.549603][T13069] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 564.549635][T13069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 564.549670][T13069] netlink_rcv_skb+0x208/0x470 [ 564.549687][T13069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 564.549711][T13069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.549736][T13069] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.549751][T13069] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.549770][T13069] netlink_unicast+0x75b/0x8d0 [ 564.549803][T13069] netlink_sendmsg+0x805/0xb30 [ 564.549825][T13069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.549843][T13069] ? aa_sock_msg_perm+0x94/0x160 [ 564.549867][T13069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.549893][T13069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.549916][T13069] __sock_sendmsg+0x21c/0x270 [ 564.549948][T13069] ____sys_sendmsg+0x505/0x830 [ 564.549977][T13069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.550011][T13069] ? import_iovec+0x74/0xa0 [ 564.550037][T13069] ___sys_sendmsg+0x21f/0x2a0 [ 564.550055][T13069] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.550099][T13069] ? __fget_files+0x2a/0x420 [ 564.550117][T13069] ? __fget_files+0x3a0/0x420 [ 564.550141][T13069] __x64_sys_sendmsg+0x19b/0x260 [ 564.550160][T13069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.550184][T13069] ? __pfx_ksys_write+0x10/0x10 [ 564.550197][T13069] ? rcu_is_watching+0x15/0xb0 [ 564.550215][T13069] ? do_syscall_64+0xbe/0x3b0 [ 564.550239][T13069] do_syscall_64+0xfa/0x3b0 [ 564.550258][T13069] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.550277][T13069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.550292][T13069] ? clear_bhb_loop+0x60/0xb0 [ 564.550311][T13069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.550325][T13069] RIP: 0033:0x7f0963d8e929 [ 564.550338][T13069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.550351][T13069] RSP: 002b:00007f0964ba2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.550367][T13069] RAX: ffffffffffffffda RBX: 00007f0963fb5fa0 RCX: 00007f0963d8e929 [ 564.550378][T13069] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 564.550387][T13069] RBP: 00007f0964ba2090 R08: 0000000000000000 R09: 0000000000000000 [ 564.550396][T13069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.550405][T13069] R13: 0000000000000000 R14: 00007f0963fb5fa0 R15: 00007f09640dfa28 [ 564.550427][T13069] [ 564.957866][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.237423][ T1213] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 565.403393][ T1213] usb 3-1: device descriptor read/64, error -71 [ 565.430635][T13079] xt_CT: No such helper "snmp_trap" [ 565.540079][ T1213] usb usb3-port1: attempt power cycle [ 565.922655][ T1213] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 565.943369][ T1213] usb 3-1: device descriptor read/8, error -71 [ 566.342625][ T1213] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 566.363536][ T1213] usb 3-1: device descriptor read/8, error -71 [ 566.484075][ T1213] usb usb3-port1: unable to enumerate USB device [ 566.548539][T13090] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 566.565796][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2121'. [ 566.587262][T13090] team0: entered promiscuous mode [ 566.639301][T13090] team_slave_0: entered promiscuous mode [ 566.652047][T13090] team_slave_1: entered promiscuous mode [ 566.667760][T13090] team0: entered allmulticast mode [ 566.677764][T13090] team_slave_0: entered allmulticast mode [ 566.690704][T13090] team_slave_1: entered allmulticast mode [ 566.704402][T13090] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.712453][T13090] bridge0: port 3(team0) entered blocking state [ 566.766960][T13090] bridge0: port 3(team0) entered disabled state [ 567.413566][ T5897] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 567.591855][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 567.604575][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.616909][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 567.632881][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.654542][ T5897] usb 1-1: config 0 descriptor?? [ 567.664312][ T5897] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 567.672827][ T1213] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 567.796984][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 567.815375][ T1213] usb 6-1: device descriptor read/64, error -71 [ 567.919957][T13123] syz.2.2132 (13123): drop_caches: 1 [ 567.962884][T13119] syz.2.2132 (13119): drop_caches: 1 [ 568.012719][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.106760][T13119] syz.2.2132 (13119): drop_caches: 1 [ 568.202710][ T1213] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 568.352726][ T1213] usb 6-1: device descriptor read/64, error -71 [ 568.473182][ T1213] usb usb6-port1: attempt power cycle [ 568.791826][ T5896] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 568.852917][ T1213] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 568.875774][ T1213] usb 6-1: device descriptor read/8, error -71 [ 568.893006][ T5897] gspca_vc032x: reg_w err -110 [ 568.905706][ T5897] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 569.172942][ T1213] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 569.185333][ T5896] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 569.194210][ T5896] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.228380][ T1213] usb 6-1: device descriptor read/8, error -71 [ 569.270614][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 569.279767][ T5896] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.316326][ T5896] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 569.327329][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 569.337828][ T5896] usb 5-1: Product: syz [ 569.342390][ T5896] usb 5-1: Manufacturer: syz [ 569.385518][ T1213] usb usb6-port1: unable to enumerate USB device [ 569.460684][ T5896] cdc_wdm 5-1:1.0: skipping garbage [ 569.633723][ T5896] cdc_wdm 5-1:1.0: skipping garbage [ 569.671262][ T5896] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 569.700836][ T5896] cdc_wdm 5-1:1.0: Unknown control protocol [ 569.742117][ T5896] usb 5-1: USB disconnect, device number 78 [ 570.070406][ T5897] usb 1-1: USB disconnect, device number 83 [ 570.753073][T13155] netlink: 'syz.5.2145': attribute type 1 has an invalid length. [ 570.880480][T13155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.063404][T13161] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 571.102736][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 571.102757][ T30] audit: type=1326 audit(1749113468.378:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.131169][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.197893][T13157] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.205293][T13157] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 571.234763][T13157] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 571.316882][ T30] audit: type=1326 audit(1749113468.378:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.342505][ T30] audit: type=1326 audit(1749113468.378:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.364915][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.371205][ T30] audit: type=1326 audit(1749113468.378:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.536847][ T30] audit: type=1326 audit(1749113468.378:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.713195][ T30] audit: type=1326 audit(1749113468.378:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.749832][ T30] audit: type=1326 audit(1749113468.388:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.793220][T13161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.800007][ T30] audit: type=1326 audit(1749113468.388:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 571.914491][ T30] audit: type=1326 audit(1749113468.388:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f267998d3df code=0x7ffc0000 [ 571.958683][ T30] audit: type=1326 audit(1749113468.388:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz.5.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267998e929 code=0x7ffc0000 [ 572.036662][T13163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 572.096594][T13163] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 572.134171][T13163] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 572.651212][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 572.922693][ T5890] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 572.979369][T13195] FAULT_INJECTION: forcing a failure. [ 572.979369][T13195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.002195][T13195] CPU: 1 UID: 0 PID: 13195 Comm: syz.4.2158 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 573.002225][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.002238][T13195] Call Trace: [ 573.002247][T13195] [ 573.002257][T13195] dump_stack_lvl+0x189/0x250 [ 573.002294][T13195] ? __pfx____ratelimit+0x10/0x10 [ 573.002323][T13195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.002353][T13195] ? __pfx__printk+0x10/0x10 [ 573.002375][T13195] ? __might_fault+0xb0/0x130 [ 573.002408][T13195] should_fail_ex+0x414/0x560 [ 573.002443][T13195] _copy_from_user+0x2d/0xb0 [ 573.002477][T13195] ___sys_sendmsg+0x158/0x2a0 [ 573.002504][T13195] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.002566][T13195] ? __fget_files+0x2a/0x420 [ 573.002589][T13195] ? __fget_files+0x3a0/0x420 [ 573.002623][T13195] __x64_sys_sendmsg+0x19b/0x260 [ 573.002649][T13195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.002682][T13195] ? __pfx_ksys_write+0x10/0x10 [ 573.002701][T13195] ? rcu_is_watching+0x15/0xb0 [ 573.002726][T13195] ? do_syscall_64+0xbe/0x3b0 [ 573.002758][T13195] do_syscall_64+0xfa/0x3b0 [ 573.002785][T13195] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.002810][T13195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.002831][T13195] ? clear_bhb_loop+0x60/0xb0 [ 573.002857][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.002878][T13195] RIP: 0033:0x7fd78278e929 [ 573.002898][T13195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.002916][T13195] RSP: 002b:00007fd783630038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.002939][T13195] RAX: ffffffffffffffda RBX: 00007fd7829b5fa0 RCX: 00007fd78278e929 [ 573.002955][T13195] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 573.002969][T13195] RBP: 00007fd783630090 R08: 0000000000000000 R09: 0000000000000000 [ 573.002983][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.002995][T13195] R13: 0000000000000000 R14: 00007fd7829b5fa0 R15: 00007fd782adfa28 [ 573.003027][T13195] [ 573.209834][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.239816][T13196] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 573.317383][T13196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.462795][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 573.470706][ T5890] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 573.481068][ T5890] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 573.492652][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 573.518644][T13200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.523045][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 573.541379][T13200] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 573.582764][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 573.592653][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.608064][T13200] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 573.645910][ T5890] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 573.683220][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.800005][ T5890] usb 2-1: config 0 descriptor?? [ 574.122387][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 574.139489][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.149338][ T5907] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 574.153272][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.186907][ T5890] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 574.478512][ T5907] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.487336][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.497938][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.508924][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.795011][ T5907] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.804912][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.815846][ T5907] usb 6-1: Product: syz [ 574.820720][ T5907] usb 6-1: Manufacturer: syz [ 575.017235][ T5907] cdc_wdm 6-1:1.0: skipping garbage [ 575.022487][ T5907] cdc_wdm 6-1:1.0: skipping garbage [ 575.033316][ T5907] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 575.039416][ T5907] cdc_wdm 6-1:1.0: Unknown control protocol [ 575.281590][ T5907] usb 6-1: USB disconnect, device number 57 [ 575.578796][T13228] overlayfs: missing 'lowerdir' [ 576.170391][ T5896] usb 2-1: USB disconnect, device number 93 [ 576.198411][ T5896] usblp0: removed [ 576.323224][T13236] netlink: 'syz.0.2168': attribute type 1 has an invalid length. [ 576.629817][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 576.668148][T13236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.844038][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 576.844057][ T30] audit: type=1326 audit(1749113474.138:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 576.934286][ T30] audit: type=1326 audit(1749113474.138:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.002182][ T30] audit: type=1326 audit(1749113474.138:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.059709][T13259] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 577.061853][ T30] audit: type=1326 audit(1749113474.138:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.096770][T13237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.119356][ T30] audit: type=1326 audit(1749113474.138:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.152782][ T30] audit: type=1326 audit(1749113474.138:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.155586][T13237] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 577.175215][ T30] audit: type=1326 audit(1749113474.138:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.175272][ T30] audit: type=1326 audit(1749113474.138:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe9e9d8d3df code=0x7ffc0000 [ 577.175319][ T30] audit: type=1326 audit(1749113474.138:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.175365][ T30] audit: type=1326 audit(1749113474.138:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.0.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe9e9d8e929 code=0x7ffc0000 [ 577.293978][T13237] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 577.376944][T13249] 8021q: VLANs not supported on ip_vti0 [ 577.470168][T13259] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.691235][T13261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.701634][T13261] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 577.735907][T13261] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 577.923293][T13275] netlink: 21816 bytes leftover after parsing attributes in process `syz.5.2178'. [ 578.902621][ T1213] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 579.068033][ T1213] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 579.097190][ T1213] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.128394][ T1213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 579.159614][ T1213] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.218246][ T1213] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 579.231115][T13296] fuse: Unknown parameter 'grou00000000000000000000' [ 579.250861][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 579.291686][ T1213] usb 2-1: Product: syz [ 579.302617][ T1213] usb 2-1: Manufacturer: syz [ 579.365260][ T1213] cdc_wdm 2-1:1.0: skipping garbage [ 579.370499][ T1213] cdc_wdm 2-1:1.0: skipping garbage [ 579.417131][ T1213] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 579.430631][ T1213] cdc_wdm 2-1:1.0: Unknown control protocol [ 579.604853][ T1213] usb 2-1: USB disconnect, device number 94 [ 580.012981][ T5907] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 580.185098][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 580.193785][ T5907] usb 1-1: not running at top speed; connect to a high speed hub [ 580.218154][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.266937][ T5907] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 580.308577][ T5907] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 580.425024][ T5907] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.436055][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.456208][ T5907] usb 1-1: Product: syz [ 580.472631][ T5907] usb 1-1: Manufacturer: syz [ 580.478504][ T5907] usb 1-1: SerialNumber: syz [ 580.598468][T13307] xt_CT: No such helper "snmp_trap" [ 580.699625][T13311] syz.4.2190 (13311): drop_caches: 1 [ 580.716064][T13314] syz.4.2190 (13314): drop_caches: 1 [ 580.894841][ T5897] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 580.912686][T13311] syz.4.2190 (13311): drop_caches: 1 [ 581.092703][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 581.109876][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.151712][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 581.178509][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.245444][ T5897] usb 6-1: config 0 descriptor?? [ 581.286038][ T5897] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 582.392434][ T5907] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 582.400510][ T5907] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 582.408646][ T5907] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 582.449466][ T5907] usb 1-1: USB disconnect, device number 84 [ 582.462477][ T5897] gspca_vc032x: reg_w err -110 [ 582.482230][ T5897] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 582.534549][ T5908] udevd[5908]: setting mode of /dev/bus/usb/001/084 to 020664 failed: No such file or directory [ 582.600018][ T5908] udevd[5908]: setting owner of /dev/bus/usb/001/084 to uid=0, gid=0 failed: No such file or directory [ 582.642717][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.462697][ T24] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 583.659535][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.682828][ T24] usb 1-1: config 0 has no interfaces? [ 583.688503][ T24] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 583.706186][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.737125][ T24] usb 1-1: config 0 descriptor?? [ 583.788958][ T5897] usb 6-1: USB disconnect, device number 58 [ 583.986337][T13343] [ 583.988742][T13343] ============================================ [ 583.994917][T13343] WARNING: possible recursive locking detected [ 584.001083][T13343] 6.15.0-syzkaller-12058-g64980441d269 #0 Not tainted [ 584.007852][T13343] -------------------------------------------- [ 584.014010][T13343] syz.5.2202/13343 is trying to acquire lock: [ 584.020082][T13343] ffff888055474d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 584.031073][T13343] [ 584.031073][T13343] but task is already holding lock: [ 584.038441][T13343] ffff888055474d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 584.048316][T13343] and the lock comparison function returns 0: [ 584.054383][T13343] [ 584.054383][T13343] other info that might help us debug this: [ 584.062445][T13343] Possible unsafe locking scenario: [ 584.062445][T13343] [ 584.069984][T13343] CPU0 [ 584.073265][T13343] ---- [ 584.076550][T13343] lock(&dev_instance_lock_key#20); [ 584.081854][T13343] lock(&dev_instance_lock_key#20); [ 584.087160][T13343] [ 584.087160][T13343] *** DEADLOCK *** [ 584.087160][T13343] [ 584.095310][T13343] May be due to missing lock nesting notation [ 584.095310][T13343] [ 584.103635][T13343] 2 locks held by syz.5.2202/13343: [ 584.108839][T13343] #0: ffffffff8f50f5c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 584.117837][T13343] #1: ffff888055474d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 584.128142][T13343] [ 584.128142][T13343] stack backtrace: [ 584.134037][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.5.2202 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 584.134064][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 584.134080][T13343] Call Trace: [ 584.134088][T13343] [ 584.134097][T13343] dump_stack_lvl+0x189/0x250 [ 584.134127][T13343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.134154][T13343] ? __pfx__printk+0x10/0x10 [ 584.134172][T13343] ? print_lock_name+0xde/0x100 [ 584.134189][T13343] print_deadlock_bug+0x28b/0x2a0 [ 584.134207][T13343] validate_chain+0x1a3f/0x2140 [ 584.134225][T13343] ? is_bpf_text_address+0x292/0x2b0 [ 584.134241][T13343] ? is_bpf_text_address+0x26/0x2b0 [ 584.134259][T13343] __lock_acquire+0xab9/0xd20 [ 584.134284][T13343] ? __netdev_update_features+0xcb1/0x1a20 [ 584.134303][T13343] lock_acquire+0x120/0x360 [ 584.134324][T13343] ? __netdev_update_features+0xcb1/0x1a20 [ 584.134348][T13343] __mutex_lock+0x182/0xe80 [ 584.134371][T13343] ? __netdev_update_features+0xcb1/0x1a20 [ 584.134389][T13343] ? kasan_save_track+0x4f/0x80 [ 584.134404][T13343] ? kasan_save_free_info+0x46/0x50 [ 584.134425][T13343] ? __kasan_slab_free+0x62/0x70 [ 584.134440][T13343] ? kmem_cache_free+0x18f/0x400 [ 584.134455][T13343] ? netlink_broadcast_filtered+0x103c/0x1140 [ 584.134479][T13343] ? ethnl_multicast+0xb6/0x100 [ 584.134495][T13343] ? ethnl_default_notify+0x7c0/0x990 [ 584.134511][T13343] ? ethnl_netdev_event+0xe2/0x160 [ 584.134528][T13343] ? __netdev_update_features+0xcb1/0x1a20 [ 584.134546][T13343] ? __lock_acquire+0xab9/0xd20 [ 584.134568][T13343] ? __pfx___mutex_lock+0x10/0x10 [ 584.134597][T13343] __netdev_update_features+0xcb1/0x1a20 [ 584.134621][T13343] ? __pfx___netdev_update_features+0x10/0x10 [ 584.134640][T13343] ? __wake_up_common_lock+0x190/0x1f0 [ 584.134661][T13343] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 584.134680][T13343] ? netlink_broadcast_filtered+0x10c6/0x1140 [ 584.134705][T13343] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 584.134723][T13343] ? __lock_acquire+0xab9/0xd20 [ 584.134748][T13343] ? do_raw_spin_lock+0x121/0x290 [ 584.134768][T13343] netdev_update_features+0x6d/0xe0 [ 584.134792][T13343] ? __pfx_netdev_update_features+0x10/0x10 [ 584.134820][T13343] macsec_notify+0x2f5/0x660 [ 584.134839][T13343] ? __pfx_macsec_notify+0x10/0x10 [ 584.134860][T13343] notifier_call_chain+0x1b3/0x3e0 [ 584.134878][T13343] netdev_features_change+0x85/0xc0 [ 584.134907][T13343] ? __pfx_netdev_features_change+0x10/0x10 [ 584.134931][T13343] ? security_capable+0x7e/0x2e0 [ 584.134955][T13343] dev_ethtool+0x1520/0x1990 [ 584.134978][T13343] ? __pfx_dev_ethtool+0x10/0x10 [ 584.135002][T13343] ? dev_load+0x21/0x1f0 [ 584.135025][T13343] dev_ioctl+0x392/0x1150 [ 584.135049][T13343] sock_do_ioctl+0x22c/0x300 [ 584.135071][T13343] ? __pfx_sock_do_ioctl+0x10/0x10 [ 584.135090][T13343] ? __lock_acquire+0xab9/0xd20 [ 584.135118][T13343] sock_ioctl+0x576/0x790 [ 584.135138][T13343] ? __pfx_sock_ioctl+0x10/0x10 [ 584.135159][T13343] ? __fget_files+0x2a/0x420 [ 584.135177][T13343] ? __fget_files+0x3a0/0x420 [ 584.135194][T13343] ? __fget_files+0x2a/0x420 [ 584.135213][T13343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 584.135237][T13343] ? __pfx_sock_ioctl+0x10/0x10 [ 584.135256][T13343] __se_sys_ioctl+0xfc/0x170 [ 584.135280][T13343] do_syscall_64+0xfa/0x3b0 [ 584.135302][T13343] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.135322][T13343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.135339][T13343] ? clear_bhb_loop+0x60/0xb0 [ 584.135356][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.135372][T13343] RIP: 0033:0x7f267998e929 [ 584.135387][T13343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.135402][T13343] RSP: 002b:00007f267a75e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.135420][T13343] RAX: ffffffffffffffda RBX: 00007f2679bb5fa0 RCX: 00007f267998e929 [ 584.135433][T13343] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 584.135444][T13343] RBP: 00007f2679a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 584.135455][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.135466][T13343] R13: 0000000000000000 R14: 00007f2679bb5fa0 R15: 00007f2679cdfa28 [ 584.135483][T13343] [ 584.549608][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.712684][ T24] usb 1-1: USB disconnect, device number 85 [ 593.612709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!