last executing test programs: 24m15.848966576s ago: executing program 4 (id=189): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4000001, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xf001, 0x8, 0x2, 0xb676, 0xc}}, {0x4}}]}]}, 0x48}, 0x1, 0xf0ffffff, 0x0, 0x8000}, 0x0) 24m15.728969228s ago: executing program 4 (id=190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 24m15.241881353s ago: executing program 4 (id=192): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x6}}, './file0\x00'}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x35, 0x1}) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x7, 0x0, 0x36, 0x100, 0x2, 0x8, 0x4, 0x1}) 24m14.904505073s ago: executing program 4 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="66643db239d65f2387aed27a237afd2280338fad4bc76fd27df775e1056886d1b9beb084b2afba5920", @ANYRESHEX=r3, @ANYBLOB=',rootmode=01405703344017133526033,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',allow_other,blksize=0x0000000000000200,fowner<', @ANYRESDEC=r5, @ANYBLOB=',fowner=', @ANYRESDEC=r5, @ANYBLOB=',subj_role=fuse\x00,\x00']) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) dup2(r7, r3) socket$inet6_udplite(0xa, 0x2, 0x88) 24m11.59572263s ago: executing program 4 (id=207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xa826, 0x100, 0x4000000, 0x1a}, &(0x7f0000000000), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000140)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x4001}, 0x1) userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) write(r6, &(0x7f0000000240)='\\m', 0x2) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x11, 0x0}, 0x4}, {@dev}]}]}}}}}}}, 0x0) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) 24m11.176722232s ago: executing program 4 (id=209): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) preadv2(r0, &(0x7f00000004c0), 0x0, 0x80, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000007f00), 0x1, 0x48903) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000007f40)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c01000000010104ffffffffffffff880a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) fsetxattr(r0, &(0x7f00000010c0)=@known='trusted.overlay.upper\x00', &(0x7f0000001100)='/dev/net/tun\x00', 0xd, 0x3) readv(r8, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3e0300000000000079101100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 24m10.423963193s ago: executing program 32 (id=209): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) preadv2(r0, &(0x7f00000004c0), 0x0, 0x80, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000007f00), 0x1, 0x48903) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000007f40)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c01000000010104ffffffffffffff880a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x18, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) fsetxattr(r0, &(0x7f00000010c0)=@known='trusted.overlay.upper\x00', &(0x7f0000001100)='/dev/net/tun\x00', 0xd, 0x3) readv(r8, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0xc, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3e0300000000000079101100000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 19m29.809313312s ago: executing program 2 (id=1206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xda, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180b3400"/15], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19m26.340355738s ago: executing program 2 (id=1218): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r5, &(0x7f0000001b80)=[{&(0x7f0000000700)=""/12, 0xc}], 0x1, 0x7ff, 0x4f) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206050000000000183fd75c000000000000000105000400010000000500010007000000140007801e00060000000007080013400000000505000500020000000900dc6440d4c37c74fd020073797a300000000016000300686173683a6e6574"], 0x64}}, 0x0) 19m22.225050146s ago: executing program 2 (id=1234): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) sendmsg(r3, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) bind$tipc(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_dev$media(0x0, 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000001e80)={0x0, 0x3, 0x0, &(0x7f0000001b80)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xfffffdfb) unshare(0x4a010500) socket$inet6(0xa, 0x80001, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x44}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) preadv(r9, &(0x7f0000001ac0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/214, 0xd6}, {&(0x7f0000001680)=""/133, 0x85}, {&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000001740)=""/233, 0xe9}, {&(0x7f0000001940)=""/45, 0x2d}, {0x0}, {&(0x7f0000001a80)=""/13, 0xd}], 0x8, 0x5f, 0xfffffffc) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 19m20.60689901s ago: executing program 2 (id=1238): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x10c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x85}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}]}}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000040}, 0x1081) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="810028bd7000010000000f000000080034000400004008000300", @ANYRES32=r8, @ANYBLOB="0500330003"], 0x2c}}, 0x80) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x4c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r0}, 0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r9, 0x91}, &(0x7f0000000080)=0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x4) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 19m20.54833726s ago: executing program 2 (id=1240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, 0x0, 0x0) close(r2) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) 19m20.152780296s ago: executing program 2 (id=1242): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) (fail_nth: 6) 19m19.189453395s ago: executing program 33 (id=1242): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) (fail_nth: 6) 3m28.39295358s ago: executing program 3 (id=5252): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x2, {0x0, 0xff}, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}, 0x1}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) 3m28.256790534s ago: executing program 3 (id=5255): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) 3m27.300572452s ago: executing program 3 (id=5261): syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0x14, 0x9, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0xfc, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="2f653db1cf70", 0x0, 0x4, 0x0, 0x1, 0x0}) 3m26.314514813s ago: executing program 3 (id=5266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x40085507, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001380)={{'\x00', 0x1}, {0x3}, 0x32, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)="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", 0x182, 0x0, &(0x7f0000000280)={0x2, 0x1040, {0x0, 0xc, 0x1000, "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", 0x33, "249a773cb4fbcf79ded8a56b3ef2cabfbeaae409842c612cbbeb00f70c353e6d5227e53fe7836f85c288371aa8471954fa88cb"}, 0xb0, "0bc28e23e12f44f764acad2bef0123adbecf6468a8fc38718203fdd1a12f869b3216398c1b692f260110122dd6c40021b5f279246e88e22f8fd2a6c3f653f1f487a61ff6eb2f6b620e94d08045b9fed442b869cd8a01225fa297df1363074b73c515d830db048e490d59967b2e8728875c93a942ffd53c7e2e1ed6ee2d10815e2cdf212eab27bb31a265ee2e4f7bfba44046ea40c0d3e4b94e6a158b9bdf97c327d0c26546cd1b04bb53c689718ce434"}, 0x10fc}) 3m24.173245429s ago: executing program 3 (id=5273): setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="ca02141a2ba53c86d9648b2dd6fda18fa8663d"], 0x7, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0x270b, 0x186a, 0x0, 0x8000003, 0x0, r0}, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xfc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x5, 0x2, 0x3, 0x4, 0x3, 0x1, 0xc, 0x1, 0x7, 0x9, 0xf, 0x10, 0x2, 0x3, 0x6], 0x1, [0x1, 0x3, 0x5, 0xe0ce, 0x1, 0x3, 0x0, 0x0, 0x1ab3, 0xc7, 0x6, 0x41, 0x9, 0xfffd, 0x8, 0x1], [0x8, 0x40, 0x101, 0x3, 0x9, 0x3, 0x8, 0x7, 0x1e6, 0x4, 0x9, 0x1, 0x7, 0x0, 0x6, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x3, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xfc}}, 0x48004) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000300000000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3m20.428706706s ago: executing program 3 (id=5289): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x3, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000080)={0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1e4}}, 0x0) write$binfmt_misc(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xd3b0, 0x0, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x9001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m5.380311544s ago: executing program 34 (id=5289): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r3 = socket(0x18, 0x3, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000080)={0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1e4}}, 0x0) write$binfmt_misc(r7, 0x0, 0x0) r8 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xd3b0, 0x0, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x9001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m23.245474381s ago: executing program 6 (id=5713): syz_io_uring_setup(0x282b, &(0x7f00000000c0)={0x0, 0x231b, 0x2000, 0x0, 0x8c}, &(0x7f0000000040), &(0x7f0000000140)) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040), &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYBLOB="030328bd7000000000000a000000080003", @ANYRES32=r2, @ANYBLOB="7e818a0facf50949bb8a803760649f92a371ac25ceaa7e8904373424ea0a39b651cdd3703afafeb0bad586d11d4932d8512cc838edb509a8e1ff214fd5b4254cd8fb71bcbc9f1fd300d76dac3623ab04acedc808bc530779cbf6b52cfced8540e3eedf1d9868a8ad7aa47f1b7f5983435c67a8031f4b43cffcaadf08bab765bd32fc01cbf9536439fa910c089aac79afb1734756fc7c6114a6cccf5c3d66da13317a9a30167229d76871e2e5aaec19af446ca94a4af673a0511f58ba44649b6499bf4297c1", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x100, 0x4e, &(0x7f0000000100)=""/78, 0x41100, 0x42, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[{0x3, 0x5, 0x10, 0x3}, {0x1, 0x4, 0x3, 0xa}, {0x3, 0x3, 0x7, 0x1}, {0x2, 0x1, 0x4, 0x5}, {0x2, 0x1, 0x400000e, 0x8}, {0xfffffffd, 0x2, 0xd, 0x2}, {0x1001, 0x4, 0xc, 0xb}, {0x4, 0x2, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x2, 0x0, 0x2}}) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x18, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x18004}, 0x60880) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xfffffffffffffffe, 0x0}) io_uring_enter(r4, 0x3512, 0x95ff, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000002000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r8], 0x38}}, 0x10) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xbdc, 0x0, &(0x7f0000000180), &(0x7f0000000000)) 1m22.99484344s ago: executing program 6 (id=5714): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xa9, "028957ea93b9c7956a7b346983aabccd65cc80fd2399e49497d2cea4e03aacdf4b1c176ec0363ea09ada7be80c7495149105d097890462f89d1dc7448fb5490f341b3b11fd23739f25ff63e47f8e7815baf79e07d8816c50af5f39c3aa4b8c2d3a7acaef2fa71eb0b74a8482d39ed52260e7aae888cfd6349f3eed71b1a2afb45e1efe2cf6429d8b55056d28182d613d73d657f832734eec9073205fe5ceb93667ca562282702ade3b"}, &(0x7f0000000140)=0xb1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r2, 0x4}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x0) syz_io_uring_setup(0x11f0, &(0x7f0000000400)={0x0, 0xee62, 0x400, 0x1000}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 1m22.76178309s ago: executing program 6 (id=5716): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x201f00) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9efa}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x700000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r6 = socket(0x10, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) read(r7, 0x0, 0x1b00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write(r6, &(0x7f0000000180)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000440)='-', 0x1}], 0x1}}], 0x1, 0x10) 1m21.319682226s ago: executing program 6 (id=5723): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/ip_mr_cache\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r0, 0x0, 0x0) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000, &(0x7f0000000200)={0x87, 0x77, 0x80000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xcca22000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$incfs_metadata(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 1m19.83335854s ago: executing program 6 (id=5727): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) 1m18.808294646s ago: executing program 6 (id=5732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000780)={{r1}, "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"}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000da9000/0x4000)=nil, 0x4000, 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kyber_latency\x00', r3, 0x0, 0x8000000000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 1m17.597248154s ago: executing program 35 (id=5732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000780)={{r1}, "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"}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000da9000/0x4000)=nil, 0x4000, 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kyber_latency\x00', r3, 0x0, 0x8000000000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x4, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 16.624415101s ago: executing program 0 (id=5939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x7, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfffffffb, 0x100039, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffa, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf256, 0x80, 0xb, 0x300000, 0x7, 0x11, 0x4623f, 0x6, 0x8, 0x7, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x7, 0xd4b8, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x20de, 0x8, 0x9, 0x1, 0x199f, 0xa, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x2, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x5, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0xfffff001, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x81, 0xfffffffe, 0x1, 0xffffff, 0x10, 0xfffffff9, 0xfffffffa, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x9, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0x2, 0xdfff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x4, 0x6, 0x5, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x3, 0x9, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x100, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0xffff, 0x0, 0x3ff, 0x3, 0x3, 0x6, 0x2005, 0x6, 0x4, 0x5575, 0x9, 0x20000005, 0x6, 0xd9, 0x5, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x0, 0x763, 0xb, 0x402, 0x800, 0x4005, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f493f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x7, 0x4, 0xc, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x401, 0x1, 0xe7a, 0x5, 0x4edf, 0xfffffffd, 0xa, 0x8, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r10, r4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010a02087420000000000010902240001000070010900090581030004030000"], 0x0) 13.494254732s ago: executing program 0 (id=5943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000008d40)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f00)="ecb833340a2d7ec19933c3cfcaa784e0fbef2e4c4b31a9209abd91f5113182e45a1cb0e408c0d594c0bffa272e0cbb88f39e822a11d32c80e96b31faf776aebf32918e13338e46a1b64d7f18d1bc0a1d401845f80ba2b2439d70ce446000a6cf12b6a6950d4a377f9e15", 0x6a}], 0x1, 0x0, 0xf0ff}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)="73220bcdc9693c686cc0e02c", 0xc}], 0x1}}], 0x2, 0x10) 13.343238568s ago: executing program 0 (id=5946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0xf5ff}, 0x0) 13.232671135s ago: executing program 0 (id=5947): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100f3c2aa3740d61000220001010203011e02120001000000000904ab0400ac041400358a08fd"], 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80015b11, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0xc8) close(0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000180)=0x2, 0x34) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x403f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}], 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r10 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r10, 0x5420, &(0x7f0000000100)) pwritev(r9, &(0x7f00000003c0)=[{&(0x7f0000000440)="d7adf2dd9a44f87e65180d2800841a1a4a15510d98b51962f1aa58837d4df8e0df210dfae21bec2cbd4630f748199c52a6906f0e29e5aa3dc00843f7ebd22b6c2e05", 0x42}, {0x0}], 0x2, 0x5, 0xb2) syz_open_dev$sg(&(0x7f0000000000), 0x1d8, 0x4400) 8.30280851s ago: executing program 0 (id=5965): gettid() (async) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x1, @thr={&(0x7f00000001c0), &(0x7f0000000400)="b27ff7f6678875d220b73f8b124045db95bc9b6994e42467c80a55aab5131569a346fa1a27a65ea0182ccdb0b23abbfd1fd25f7f0d9d04cb2cb0e9b55844e581fc1a70884739e82635f2536c09a7322161d06da5bde8ab7c4b850e9897eb4d909ed4127201602ad70f8c8bdfca181e0eaa8ec9ec905ea3280318ac9a531365f8f7653eb77bd8b183685a57a99f31e2a5358bcfac95fe587ca696a4903e622d43703df8718b48e44167e9e9f34feb001f1ae82558bdf3ada5f48138fe324c4299c719ae58d2b0b9018eeafe557da8a66a68"}}, &(0x7f0000000040)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @loopback}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @loopback}}}}}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000400)="2e7e908847c88103d2e001426d315f38f713ad2aefbb5a6126c19e25598b76334e0ca2b4337cd2fc296a4897d8162e4d66b6afae215026dd969416c1aefb0a47f98c52cc23fab5039199208e4e6e8ef46c3a116b98abc777bad24bf3512f3c179bb77f4264b8c6cda568ca1b4795fb6fa926985b8f5f1fc6c2aca40677d0c87de9b86ffa3c79ca7030da860c2e714c4058a6992a0e35d052942819dbba2757024a8e829498cfd11c2e5590a9128f676ef826d7d8fe9f31cb54bff76bc4e4cb8900f0917eb1bc0769581bc800017b63239cb52f7f5684d84892d27e48dbddc05c8a111766ca6a334ab82f79bc59902fce", 0xf0}, {&(0x7f0000000500)="13db6aec1265b9e7972ccd1cc6fd8a0dcc5e1b7d9031b604cee52b1d2eba3857d895f9ad472f3b5eba5fd3b1b8ba9dafe2aea4987a23f86b4e9876865ad1b15927bc7673812c7535c194bead806f426d34273b7b7d09848090bcd55da005cd070c2ad6b7999b918993ad767413cf9889d75886e415f3f87595afb5978679c9128ccddfc6e892dacc76c85ef235808711bf963a7c3fb60b1e2d953a66f21c78ed09a2", 0xa2}, {&(0x7f00000005c0)="324a2af93b4b47e86c5f8be490e6ec33e30e3354f06c10a92b89b5381da2554fa28dc6a41415bd43ec2c40ed3787a5d91bea0f2a6e4f6ce8212056713f7d0a597c99c008776ff7b7466a5759c5c03b83eff512db145318c05ff72fd9368df0a134b3712f10323d87b5942adfbda50ad7", 0x70}], 0x3) (async) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000400)="2e7e908847c88103d2e001426d315f38f713ad2aefbb5a6126c19e25598b76334e0ca2b4337cd2fc296a4897d8162e4d66b6afae215026dd969416c1aefb0a47f98c52cc23fab5039199208e4e6e8ef46c3a116b98abc777bad24bf3512f3c179bb77f4264b8c6cda568ca1b4795fb6fa926985b8f5f1fc6c2aca40677d0c87de9b86ffa3c79ca7030da860c2e714c4058a6992a0e35d052942819dbba2757024a8e829498cfd11c2e5590a9128f676ef826d7d8fe9f31cb54bff76bc4e4cb8900f0917eb1bc0769581bc800017b63239cb52f7f5684d84892d27e48dbddc05c8a111766ca6a334ab82f79bc59902fce", 0xf0}, {&(0x7f0000000500)="13db6aec1265b9e7972ccd1cc6fd8a0dcc5e1b7d9031b604cee52b1d2eba3857d895f9ad472f3b5eba5fd3b1b8ba9dafe2aea4987a23f86b4e9876865ad1b15927bc7673812c7535c194bead806f426d34273b7b7d09848090bcd55da005cd070c2ad6b7999b918993ad767413cf9889d75886e415f3f87595afb5978679c9128ccddfc6e892dacc76c85ef235808711bf963a7c3fb60b1e2d953a66f21c78ed09a2", 0xa2}, {&(0x7f00000005c0)="324a2af93b4b47e86c5f8be490e6ec33e30e3354f06c10a92b89b5381da2554fa28dc6a41415bd43ec2c40ed3787a5d91bea0f2a6e4f6ce8212056713f7d0a597c99c008776ff7b7466a5759c5c03b83eff512db145318c05ff72fd9368df0a134b3712f10323d87b5942adfbda50ad7", 0x70}], 0x3) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.896714372s ago: executing program 0 (id=5967): landlock_create_ruleset(&(0x7f0000000000)={0x20, 0x0, 0x5}, 0x18, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000240)=0xfffffffffffffcd9) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in6=@private2, 0x4e20, 0xfff9, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x3a, 0x0, r1}, {0x8, 0xffffffffaeda1a70, 0x9, 0x4, 0x2, 0x3, 0x8000, 0x4}, {0x7c94bb5c, 0x4, 0x4, 0x1ff}, 0x1, 0x6e6bbf, 0x0, 0x0, 0x3, 0xee2707df14c393b6}, {{@in6=@loopback, 0x4d2, 0x51}, 0xa, @in=@local, 0x0, 0x1, 0x2, 0x3, 0x0, 0x5, 0xff80}}, 0xe8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket(0x2, 0xa, 0x300) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffe, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="008f7e6f70a5da0955a015806a8e0e28268462986b4b11244b3dfccd54e398a300631e3a8b153fff9d0000000000000000005a9be33d36d52e41f6e48058a14a24b311256bff47e36691e9090853e9602a1485e9eb4620df8c6ee27e004566a4625ebed87ff80ea21ecae9a18a96b8dc6fb4b48322", 0x75}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_set$pid(0x2, 0x0, 0x0) 7.379852821s ago: executing program 7 (id=5972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_io_uring_setup(0x988, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c"], 0x26c0}}, 0x4010) 6.548897553s ago: executing program 5 (id=5974): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x8000, 0x4, 0x2cf}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f06a, 0x17}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 6.349437083s ago: executing program 8 (id=5975): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000005740)={0x0, 0xea60}, 0x10) recvmsg(r0, &(0x7f0000006100)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x5}}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, 0x2, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0xc4}}, 0x0) 6.181261367s ago: executing program 8 (id=5976): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socket(0x5, 0x800, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000400)="9aecb6c9820f690bf40572f043f9feaf77da6f204fdf4ade9e6e5ddebcf49b53ab442d39058d5ee15ab5fc8c599933eff9e1859d98947145c9107f13c70fa6c15af8393f7e846370928842695a02a5f5673851e0a09bbfcfaf991f1be5cf842a8fcc30823292a47e997ba8cad993d0054969ff41437579fa939a47f787bd2185854b2fb450b2002846da922dcc654a67ee4c31a184a289da699d34cec4138be29c7a5ccbe2a2d29e8288eb45213a23984f2855595968c3df6454e94407eb9415c7dea04dffe35aa19608684bedd8bddfcc65abd22e220873b56c6927bc"}, {&(0x7f0000000500)="2f3d84eca15645ea40d469c7bdbbf156e026baa009c4273ca9c08462ca8ed0b6ca441c6e722989027e726c7a13a471577e27e1ddbb003d27ee1f88ff46de3742aa7eb6b6d2bb7c93334b0a87512075988c44570096a3d9e00ccf44615b5ee01d58738cdacb8637011705dd5f8ff2fe3883c27ec664e17a2ca97af2d615e7dc90f5011ebc2f8798bae8b100f99b18de7d02075fa4e237e0409923768d56eb1e30b0b9e567184e9026378b5b87e961bde169"}, {&(0x7f0000000040)="a298ccedb870d386b1a31769910f0286"}, {&(0x7f0000000700)="c92effa49dcfac6e9b2c7ac3d80778c92afd55db78218eb224fabf5adaf07bae58bb0775edd7cd1fa539c545e0e212c762c8875469042e0da3e40ad8fef2c830c90029358dc30cb6df711e4a6c2f8158a3db5e1bbaa1dbb3a5f1d6281eaabfa973ff88e28912e3e78a66501d7118a4add00388fefa87332602fa4e435a457f5ed2c161a83f799bf7ce9bd232b425a9d74cde77643ee2b63e360a2cbbc20ca610373415f521e5907a7c314341ffd4c76acf03dc422fb3c6d09824398b01d5ceed6f321c6b35d01496536b64226d9c7a653729468fbcee366b89c12f40653240183bf595b0"}, {&(0x7f0000000800)="db181235577dfb89935936b79e23968f2217daa2de929405085f75fbd92d8856987fa1e3efa221a19194634e1a8a6c53d7fe685cfdf56aacf762a6a51fb40cf294fb8efa009d4f697641f202fefcabf853a5f1697a9693e33a0e3d5ab420ce4e95fcef16ac5ca07ca39a6734f7f9a14fef525aceea2c0e011fda2bc7a43cf4c57403ce472f82876d9e"}, {&(0x7f0000000940)="cce974a7f9ae68079e1d54724544d86cd3ebd34413f268a521717c4df3143e2a89651f764c260b20bed30b6b941821483f21f9d40d1f5cc5cdc48734e2baf8b978bfafb64745c14db1b3295ecae941705756d3241d4ec00617460113f5db8eba1bb113075641d1221bf529190d998234cee1dd63cff8ce192fd6080b21250a3af70c2f06a7338c9f102203328aaa5f13172d1594c7a5da586843730e32b1d968d1ee1565e78e81c0a01e2aba5c7a456347b6a24bd0d905c701e02d4bec90861d3376a02a2344b4736119ebdf8faecc4e89e85e68dabc4406791c2e5fd0f37e10e065c4e6b8270bf1"}, {&(0x7f00000005c0)="8446d1990cd2c6a60fea1ccd1da6f1a5d72b1d300640c6cba6ea6ec228221f"}, {&(0x7f0000000a40)="5a143dd6a4b7944d3374aee8812f1cd50ecb2cd5d81ae1e8f8fd40a3143aac17f33e74b84c72d556be45568ced54630e6f773c02e1fdac7afef585e3788330a7e242da428ba29740ae95debeca58d72ecd713f6bde89f926179d04605cc660e5b63d37fa944c0bd6f21304d6419f0165ec10e772b1971c99d92589db3c7d1943553a005bdc9ca983d876ce9fe5ea6e018e87a242caf4e52debdf665a3e11607e65cd459da102acb852f3a42e3c9890f286c1d52036ec0ed59109462c34204687e12537ed5aff"}, {&(0x7f0000000b40)="7a0bf15da27e39c5666b7120778080b45e22980e2237be46ee583e69bc5d655a0afa93be31b018a91fb4963f197e0d5279ca13119e9c"}], 0x0, 0x0, 0x39}, 0x40) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x0, 0xfffffd52, 0x1, 0x0, 0x3e}) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r9, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) 6.068423391s ago: executing program 7 (id=5977): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@migrate={0x6c, 0x21, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e23, 0x8, 0x4e21, 0x5, 0x2, 0x20, 0x1a0, 0x6, r1, r2}, 0x6e6bbd, 0x1}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e21, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0xc080) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x54, 0x2e, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {0xffe0, 0xffff}, {0x10, 0x5}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x20000004) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x7, &(0x7f0000000440)='\\,.\'--\x00'}, 0x30) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x317e}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000700)={{0x89, @broadcast, 0x4e21, 0x2, 'lblcr\x00', 0x4, 0x7, 0x72}, {@loopback, 0x4e24, 0x10000, 0x9, 0xe, 0x400}}, 0x44) r4 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x40, 0x8, 0x2, 0x5}, {0x9, 0x5, 0xf, 0x2, 0x400, 0x18, 0xff, 0x4}, {0x9, 0x5, 0xa, 0x3, 0x200, 0xf8, 0x6, 0xae}}}}}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f00000007c0)={0x0, 0x10, 0xe1, {0xe1, 0xe, "1208f0ce70b197518fdd1737a2b34fa063fcd776f85fa13829c6022a2702c0e334d7e4f986080dd6787ba0d3821ab06f5c84ddc7d902883adb178f7e43eacc53c67a7e72dfc6c6f10b74dd8827dae83ce1a5ebc5d16fb244235023c3ae85cd075471145d2c15e27554ab1c0fa6f3ce872dcdec5f88e9d1c749ce938200eacc2d658b0bc010237cbd9737490812e2eac05e40ec829252b3b68a9c8b7669c7ac593f7eaecb747f16b9bb54d7fe3e29d1e565610ccd4ee9dd2e1c5ae8f09de49fd7da635a060c0a675e6db9dfe40514bc7cce5efa7d8cd197419a16cf6ad8f996"}}, &(0x7f00000008c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "114b7ca567b71bb7c2986fc1e5a96709109864fa8464ff269f66b0a51f8a2f6335dbf52f0cd60b297d358b3ed49805cba7f17bf9e70e1fd66580a9999bb5ebd93af1a829bbd22e406323500fab8e127ad4edff4ce8bc6374fbb2b842a6e6d0517548345d00bcbb2b3b61744b5f549e39af79f6f80f7b4da4caec3b5153689b624c255c130eb1700cf4da67804103682b309fd2d549d17d837a1e14"}}, &(0x7f0000000980)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x7c, 0x10, 0x7, 0x3d}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x7, 0xf00, 0xfffa, [0x3fcf, 0x1fe0000, 0x0, 0xc0, 0xf, 0xffdf80]}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x80, 0x6, 0xae, "562e5f1b", "0fad3494"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0xc0, 0x1, 0x9, 0x4, 0x10}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x0, 0x11, 0xbf, "425ac1b22dd2f5eb87534f220eeb46ca86d526b3ef58198c9f4e2ade93c2ed5d85d911db970eb5be9b5726fdef333e764b50e9a5ff9d2b8d7063d29c559b95bb2a20dbce1f2d125cab807622177dff65441c119264991bd7561c17deb3c306da10ee8dbb3485ad1f773fe3c5408f5de975046e62c6104391f686bdf63c61dc445c4f81e40c6023505a17a5955454e1f81aee6ab0eea4dd90b07db0e4d0a1cf1968f3c63cacd4b3289cc9e0fa388a470da1d3b00eb4b894a2faec86b1bc6ce0"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x200, 0x8, [0x0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0xef}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "93df"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x61d1}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, ']3'}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x72}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x3a}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x2}}) socket$alg(0x26, 0x5, 0x0) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000001000)=0x9) (async) sendmsg$nl_route(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@ipv4_newrule={0x28, 0x20, 0x20, 0x70bd2c, 0x25dfdbff, {0x2, 0x80, 0x30, 0x1, 0x4, 0x0, 0x0, 0x8, 0x10004}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xbd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async) r5 = accept4$tipc(r0, 0x0, &(0x7f0000001140), 0x80800) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000001180)=0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000011c0)) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r6, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x840) (async) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, &(0x7f0000001380)={0x9, &(0x7f0000001340)="729687596757f298"}) (async) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000013c0), &(0x7f0000001400)=0x8) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x60, 0x140a, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x6040080) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001580)=0x81) (async) r8 = syz_io_uring_setup(0x79c3, &(0x7f00000015c0)={0x0, 0x9f9f, 0x200, 0x3, 0x23c, 0x0, r0}, &(0x7f0000001640), &(0x7f0000001680)) io_uring_enter(r8, 0x6290, 0xabfa, 0x4a, &(0x7f00000016c0)={[0x2]}, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) getpeername$netlink(r7, &(0x7f0000001700), &(0x7f0000001740)=0xc) 5.519965454s ago: executing program 7 (id=5978): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x6}) r1 = socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1414}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/161, 0xa1}, {&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000001c80)=""/258, 0xf9}, {&(0x7f0000000400)=""/88, 0x58}], 0x8, &(0x7f0000000480)=""/55, 0x37}, 0x9}, {{&(0x7f00000006c0)=@in6, 0x80, &(0x7f0000000940)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/255, 0xff}], 0xfffffffffffffc9, &(0x7f0000000980)=""/4096, 0x1000}, 0xfff}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001980)=""/136, 0x88}, {&(0x7f0000001a40)=""/31, 0x1f}], 0x2, &(0x7f0000001ac0)=""/136, 0x88}, 0x5}], 0x3, 0x100, &(0x7f0000001c40)={0x0, 0x3938700}) 5.346580001s ago: executing program 7 (id=5979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x119, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 5.160863922s ago: executing program 1 (id=5980): syz_emit_ethernet(0x86, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x80, 0x20000000000000bd, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x4, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.962788661s ago: executing program 1 (id=5981): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a3000000000340003"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x3000000000000000}, 0x800) 4.927423542s ago: executing program 7 (id=5982): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "1b4d85c20010cbbc2b441bbaf3f98d1e9c5689b46876813ca06d413b40b487df932703f5df4c310700000000007ebb563b08a797f097ba17262b2a2cf86e7e2309c366cc67e82d95470fc9cbfa1617b5af0e3b7ec904000000"}}}, 0x0) unshare(0x2040400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000002080)={0x1, 0x1, 0x9}) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 4.714602977s ago: executing program 1 (id=5984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000004c0)=0x8000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.323810947s ago: executing program 1 (id=5985): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "4d4377fae5399668c6ebcf0709436ce320a91504b58a19a7f651d20145eeac0a4ba5fd425cf85d31fe"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.945233844s ago: executing program 5 (id=5986): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x9f, "028957ea93b9c7956a7b346983aabccd65cc80fd2399e49497d2cea4e03aacdf4b1c176ec0363ea09ada7be80c7495149105d097890462f89d1dc7448fb5490f341b3b11fd23739f25ff63e47f8e7815baf79e07d8816c50af5f39c3aa4b8c2d3a7acaef2fa71eb0b74a8482d39ed52260e7aae888cfd6349f3eed71b1a2afb45e1efe2cf6429d8b55056d28182d613d73d657f832734eec9073205fe5ceb9"}, &(0x7f0000000140)=0xa7) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r2, 0x4}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\a\x00\x00\x00\x00\x00\x00\x00\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\xf3\x00\xfc\xd1\xb5\xfd\xec@\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xbd\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfKn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92$\x14a\xf4\x15_\x19Kt\r\xe3\xd9\xb4\x15mWl\xeb', 0x0) syz_io_uring_setup(0x11f0, &(0x7f0000000400)={0x0, 0xee62, 0x400, 0x1000}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 2.993432882s ago: executing program 5 (id=5987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000400000000000000f5000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) 2.698936039s ago: executing program 8 (id=5988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000640)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xb, 0xffff}, {0xe, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000540)=""/234, 0xea}], 0x1, 0x0, 0x0, 0x2000000}, 0x7}], 0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x94, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x4000090) 2.553027328s ago: executing program 5 (id=5989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0x119, 0x70bd27, 0x25dfdbfe, {0x7, r1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2.462787125s ago: executing program 8 (id=5990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x1000000000000000}, 0x10) 2.218572394s ago: executing program 5 (id=5991): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x22, 0x0) close(r1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x21400}}}}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x54}}, 0x0) 2.168954309s ago: executing program 8 (id=5992): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x90}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1000000}) 1.669271139s ago: executing program 1 (id=5993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c20000002059249b379086dd60105f14000811ffffffffffffd22f000000000000000000ff02000000000000000000000000000100000e22000890"], 0x0) 1.619326722s ago: executing program 8 (id=5994): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) syz_usb_connect(0x3, 0x5bd, &(0x7f0000000780)={{0x12, 0x1, 0x111, 0x33, 0xfb, 0x2c, 0x8, 0x2dee, 0x4d22, 0x8fe1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ab, 0x4, 0x2, 0x6, 0xb0, 0xa2, [{{0x9, 0x4, 0x63, 0x3, 0x0, 0xff, 0x0, 0x0, 0x99, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1e6c"}, {0x5, 0x24, 0x0, 0x28}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xf001, 0x400, 0x80}, {0x6, 0x24, 0x1a, 0x1, 0x12}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0xfa, 0x7, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}]}}, {{0x9, 0x4, 0x34, 0x7f, 0x1, 0xff, 0xba, 0x67, 0x3, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xb, 0xfffc}]}}]}}, {{0x9, 0x4, 0x1, 0x2, 0xd, 0x89, 0x73, 0x26, 0x8, [], [{{0x9, 0x5, 0xa, 0x10, 0x10, 0x1, 0x9, 0x5, [@generic={0x77, 0x11, "ce7a98804f5e790a38456a2faa8a70da4999f361291ff6615db34470b1ea778d72385d38012e18a2eb633759b362faed26c02dad3352a36a66a48e0c1a3ef45c203da456a22bc94b9abe216cc38283fbd6d923982440f29a5d3b9b10742e6fad1b8057396fb23c96cfbbe5fd9f1b7aedc4b06c2f0e"}, @generic={0x62, 0x7, "9e9aca0d541615481b1a9223f4976e79ac35d4f7d2911ed833ee7bb37cfe3732025732361129694afe34ada95f2ac093326686fbc4bca6b353005f2b72f81aa5eea5ba6ceb72788af9c000f29cf3fd46a1ab0c64b3f8b66f01948015bfb305b0"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0x7, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x80, 0x7, 0x9, [@generic={0x98, 0x9, "7c94426c8e06d320cab7b4c9b6a49685f898d143b307b8d3eafe834134819d0ff6a50c27579819b3cd2a68fa35ec4967f03a8bb2ea0510ce14356c161bc52993b01e0936023eb4f20a26d1ec99c7b913bcb8f4d1c93eda1320f21630fc712bc8c068c37bf0dd5e4e37ac9d1016b8d32072d70b98d1c9ca9dc2310d551914e490cbac1bcc32d93f5394e18b46a796c30c5916f07acceb"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x2}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0xb, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1, 0x4, 0x6}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x3, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x80, 0x41, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xc9, 0x9d, 0x9, [@generic={0xc2, 0x4, "67d9a42075082c79178bbeecb5ff32f59c123346093ebbe84aa74ed4eed643cad421fdd4d35a769f1848923a2bd7dc5f643fc64e599d32f9fb962238cc0e0a1fbb90cde0d7017715717f8df7e5545a13de21bcfbe897efc0102abc1285196099ff4735a6d266e733c5dc97f58365f53e9c21c04e43be5a0b30726b471851de5437ec0987f5994acc1f300abe0fcf057221e4fdcacffef022872b296ec6e4ccaca724d310c5e1dc19d152e7b6ba921dc7c7ade149feea421a268ff9d08695afce"}, @generic={0x7a, 0x4, "b25ead61c7d1066edc18a02c906612b87fafaa5d1a455f29bb064ec15f6654e6f77b4d8c3a1ecd1b8f76924ea3bae71974757e54a5d8930da93f82596b8449a6917f1a5de7d62060683bc3a3a4b73dad17268263f8dc57ca0e50df5dae0474a731b2978960a1c049dba2353341ea763bc9acf8b14361da1b"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x1, 0x4, 0xc}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x22, 0x6, 0x6, [@generic={0x56, 0x11, "a2da8a66f0ce3dcb8137921ec967aad899878011095a24796a1bdc0c7a23b7199c03210c865e85f18fc9af5a993d3382ff1d7288c40f30fcf1c95e03790a75d0a962cdac83cacc92c95c85d45023f940f372d512"}]}}, {{0x9, 0x5, 0x1c, 0x10, 0x200, 0x4, 0x9, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xc4}, @generic={0x27, 0xb, "0e6a860d3ecd8052ee926bb784c434135c7d2fea457e9b9df900d1362b71c731e623da86aa"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xeb, 0x8, 0x4, [@generic={0xee, 0x24, "7824e646854c3f239eef27c823811574ff26f5f6ee55e14aa57263a853e1f84fe3058b6a61e8bf4a6171ddc229c79844aa90d21bedaffb0e443d0f3f0c836187f175978f42b2da5a358baf9bfe958289e81c5ebf76f0eb9be0b20234f3e11cb01b9777a8294859e172d9556504a54ea0a6267f57be9c9f9acbc41468bcd8ddf53514ab1b3bd90b3d2c81358cbda2325b35368ef0d1264c575c6ddbbecbd07b0b3993fd3308662aa81e7741fc3db020ceaae9990296e88a5df4cd43d27fb007019dd78ff3cf107fbecd3d9481808432b19bf333888b33102bfda9bf5158361b4ca35eeb7c8a9b833734e53aec"}]}}]}}, {{0x9, 0x4, 0x32, 0x5, 0x4, 0x1e, 0xdc, 0x85, 0xff, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x89, 0x73, "", "d24e"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0x1, 'e', '['}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x9, "eb37cfee8d1a8e51"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x6}, @as_header={0x7, 0x24, 0x1, 0xf, 0x5, 0x1}]}], [{{0x9, 0x5, 0x4, 0xc23c36854ba2a844, 0x40, 0x4, 0xf0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x8125b8333a6a5aa3, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfff9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xa6, 0xb, 0xad, [@generic={0x43, 0x1, "5bd0f2794232a9d1871179a3ca990d2c8e909a7f9f880cb1add08b07812922aacb63f505695dee49559b377ea21a54a2111e6befdc795e5eb18094a721af95c112"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x3, 0x8, 0xe}}, {{0x9, 0x5, 0x1, 0x15, 0x20, 0x4, 0x1, 0x81}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x7f, 0x80, 0x7, 0x20}, 0x4c, &(0x7f0000000340)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "a7f23faeaaf667d5ee3a2c8bf439bc7a"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e496b6dbfd61d768188fd4745f919ea7"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "28bcf4af98e6a733d5a72aeaf36ae532"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x6, 0x0, 0x2}]}, 0x4, [{0x72, &(0x7f0000000440)=@string={0x72, 0x3, "3d8b67406af87ec6932da2200222d4b77c4b171b18a97c901efa4b2ba0a467f9b8c854bdf11725d525bbed0abb9b5343aa4acbd30836d0765a1054cae8559f2b69b5a848f6c1db9713094770c68a3568a14bedebad892614668a5976b148378d7a42e4e07faa0659d499cb9a0e005cda"}}, {0x96, &(0x7f00000004c0)=@string={0x96, 0x3, "0914aec36ed2d4a6cb388708350c85ec9210e4fb8491c682bb3b17f6eb2ea2b65bb5bcb5259bc6c5bd60a38f03a429a72660905a67f06c6df4abc4c6d2e89fa227ed2e6556a94d9a26bf42a7c841815ec9bcbba9432a3a86d6ed79b015295b10a7f68532aad0dd1668616f38983672be2b8cdd98636210c7d5c3ff0e5c9d3184ca5186c508c8b31120397da6e630675021c2b9c6"}}, {0x56, &(0x7f0000000580)=@string={0x56, 0x3, "338bf5862058ae62f127e0bf4a5af56f687264e1f28370e37d09899a48a0e5e5c234f654e58e1cea20042f9c08163d44723bbff2b0232a8dd84fef664775617581b0efe086939a2ec36eba93835d93d036f5783b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}]}) write$rfkill(r2, 0x0, 0x0) openat$iommufd(0xffffff9c, 0x0, 0x400000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x2009}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) 1.112540033s ago: executing program 5 (id=5995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0x100000000, 0x9, 0x4, 0xfffffffe, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r4, 0x0, 0x10000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01e"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000040)=0x9, 0x4) syz_usb_connect(0x0, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000000904880005ff"], 0x0) 1.089169172s ago: executing program 1 (id=5996): setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="ca02141a2ba53c86d9648b2dd6fda18fa8663d"], 0x7, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xffffffff}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0x270b, 0x186a, 0x0, 0x8000003, 0x0, r0}, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xfc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x5, 0x2, 0x3, 0x4, 0x3, 0x1, 0xc, 0x1, 0x7, 0x9, 0xf, 0x10, 0x2, 0x3, 0x6], 0x1, [0x1, 0x3, 0x5, 0xe0ce, 0x1, 0x3, 0x0, 0x0, 0x1ab3, 0xc7, 0x6, 0x41, 0x9, 0xfffd, 0x8, 0x1], [0x8, 0x40, 0x101, 0x3, 0x9, 0x3, 0x8, 0x7, 0x1e6, 0x4, 0x9, 0x1, 0x7, 0x0, 0x6, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x3, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xfc}}, 0x48004) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000006000000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 0s ago: executing program 7 (id=5997): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r3 = creat(0x0, 0x4b) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$usbfs(&(0x7f0000331000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r3, 0xb12) socket(0x2a, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000000)={0x4, 0xcf8, 0x1}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) lseek(0xffffffffffffffff, 0xfffff7fffffffffc, 0x2) munlockall() kernel console output (not intermixed with test programs): 53892][T24207] usb 2-1: USB disconnect, device number 120 [ 1416.466190][ T3525] bond0 (unregistering): Released all slaves [ 1416.822473][ T30] audit: type=1326 audit(1757804920.939:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25616 comm="syz.6.5382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b8eba9 code=0x0 [ 1416.956604][ T3525] bond1 (unregistering): Released all slaves [ 1417.031592][T24185] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1417.488547][T24185] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1417.497143][T24185] usb 2-1: config 0 has no interface number 0 [ 1417.511919][T24185] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1417.789137][ T3525] bond2 (unregistering): Released all slaves [ 1417.799790][T24185] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1417.809299][T24185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.882148][T24185] usb 2-1: Product: syz [ 1417.905776][T24185] usb 2-1: Manufacturer: syz [ 1417.916745][T24185] usb 2-1: SerialNumber: syz [ 1417.952274][T24185] usb 2-1: config 0 descriptor?? [ 1417.970698][T24185] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1418.207026][ T3525] bond3 (unregistering): Released all slaves [ 1418.408003][T24185] usb 2-1: USB disconnect, device number 121 [ 1418.416706][T24185] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1418.489612][ T3525] bond4 (unregistering): Released all slaves [ 1418.606341][ T3525] bond5 (unregistering): Released all slaves [ 1418.620053][T25480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1418.649816][T25619] bridge2: entered promiscuous mode [ 1418.658882][T25480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1418.711689][T25480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1418.765469][T25480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1418.797426][ T3525] tipc: Left network mode [ 1419.143692][T25640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5387'. [ 1419.155481][T25641] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1419.483348][T25480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.617607][T25653] netlink: 'syz.6.5388': attribute type 3 has an invalid length. [ 1419.627942][T25653] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5388'. [ 1419.673661][T24185] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1419.854900][T24185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.876174][T24185] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1419.907833][T24185] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1419.942325][T24185] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1419.977181][T24185] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1420.005063][T24185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1420.031511][T24185] usb 2-1: Product: syz [ 1420.042566][T24185] usb 2-1: Manufacturer: syz [ 1420.047753][T24185] usb 2-1: SerialNumber: syz [ 1420.097284][T24185] usb 2-1: config 0 descriptor?? [ 1420.135532][T24185] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1420.187118][T24185] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1420.204477][T24185] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1420.837172][T25676] netlink: 'syz.0.5391': attribute type 32 has an invalid length. [ 1420.845471][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5391'. [ 1421.948781][T25480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.967860][T25676] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1422.003905][T25676] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1422.015325][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.030666][T12451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.104559][T24185] usb 2-1: USB disconnect, device number 122 [ 1422.245530][ T6979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.252711][ T6979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.271125][T25641] delete_channel: no stack [ 1422.540035][T25480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.550987][T25692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1422.603413][T25695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1422.698447][T25480] veth0_vlan: entered promiscuous mode [ 1422.720799][ T3525] IPVS: stop unused estimator thread 0... [ 1422.766442][T25480] veth1_vlan: entered promiscuous mode [ 1422.955503][T25480] veth0_macvtap: entered promiscuous mode [ 1422.958237][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.968025][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.985783][T25480] veth1_macvtap: entered promiscuous mode [ 1423.102137][T24185] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1423.135077][T25480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.163718][T25480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.298566][ T6982] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.311569][T24185] usb 6-1: Using ep0 maxpacket: 16 [ 1423.327292][T24202] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1423.356899][T25717] program syz.0.5402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1423.361761][T24185] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 1423.390182][ T6982] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.414487][T24185] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1423.448660][ T6982] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.489488][ T6982] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.499546][T24185] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1423.522111][T24185] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1423.559239][T24185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.574096][T24202] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1423.607644][T24202] usb 2-1: config 0 has no interface number 0 [ 1423.631011][T24185] usb 6-1: config 0 descriptor?? [ 1423.667060][T24202] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1423.719922][T24202] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1423.732574][T25718] geneve2: entered promiscuous mode [ 1423.770351][T24202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.814762][T24202] usb 2-1: Product: syz [ 1423.831649][T24202] usb 2-1: Manufacturer: syz [ 1423.836290][T24202] usb 2-1: SerialNumber: syz [ 1423.893677][ T6982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.919034][T24202] usb 2-1: config 0 descriptor?? [ 1423.953801][ T6982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.963540][T25710] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1424.206356][ T6982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.211010][T24202] usb 2-1: USB disconnect, device number 123 [ 1424.376357][ T6982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.426790][T25749] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.5405'. [ 1426.210318][T24185] usbhid 6-1:0.0: can't add hid device: -71 [ 1426.250649][T24185] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1426.335769][T24185] usb 6-1: USB disconnect, device number 3 [ 1428.350877][T25775] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5409'. [ 1428.418343][T25785] tipc: Enabled bearer , priority 0 [ 1428.442095][T25785] syzkaller0: entered promiscuous mode [ 1428.455636][T25785] syzkaller0: entered allmulticast mode [ 1428.574530][T25785] tipc: Resetting bearer [ 1428.635738][T25796] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5415'. [ 1428.686441][T25784] tipc: Resetting bearer [ 1428.818259][T25784] tipc: Disabling bearer [ 1429.467343][T25810] netlink: 'syz.7.5416': attribute type 10 has an invalid length. [ 1429.476353][T25810] veth1_vlan: entered allmulticast mode [ 1429.488858][T25810] team0: Device veth1_vlan failed to register rx_handler [ 1429.983960][T25811] bond5: entered promiscuous mode [ 1429.990906][T25811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1430.782545][ T30] audit: type=1326 audit(1757804934.749:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25817 comm="syz.5.5420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x0 [ 1433.221576][T24206] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1433.401573][T24206] usb 6-1: Using ep0 maxpacket: 16 [ 1433.422980][T24206] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 1433.431213][T24206] usb 6-1: config 0 has no interface number 0 [ 1433.437615][T24206] usb 6-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1433.479477][T24206] usb 6-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1433.535976][T24206] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1433.545153][T24206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.553600][T24206] usb 6-1: Product: syz [ 1433.559276][T24206] usb 6-1: Manufacturer: syz [ 1433.572670][T24206] usb 6-1: SerialNumber: syz [ 1433.601053][T24206] usb 6-1: config 0 descriptor?? [ 1434.300780][T25877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1434.631553][T25867] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1434.641122][T24186] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1434.955091][T24186] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1434.964894][T24186] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1434.974866][T24186] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1435.054307][T24186] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1435.084521][T24186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.197274][T25880] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1435.205632][T24186] usb 7-1: Product: syz [ 1435.215799][T24186] usb 7-1: Manufacturer: syz [ 1435.220614][T24186] usb 7-1: SerialNumber: syz [ 1435.441138][T24186] hub 7-1:1.0: bad descriptor, ignoring hub [ 1435.452389][T24186] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1435.641865][T24186] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1436.710729][T25894] FAULT_INJECTION: forcing a failure. [ 1436.710729][T25894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.754892][T25894] CPU: 1 UID: 0 PID: 25894 Comm: syz.7.5434 Not tainted syzkaller #0 PREEMPT(full) [ 1436.754914][T25894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.754921][T25894] Call Trace: [ 1436.754926][T25894] [ 1436.754932][T25894] dump_stack_lvl+0x189/0x250 [ 1436.754950][T25894] ? __pfx____ratelimit+0x10/0x10 [ 1436.754961][T25894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1436.754973][T25894] ? __pfx__printk+0x10/0x10 [ 1436.754994][T25894] should_fail_ex+0x414/0x560 [ 1436.755013][T25894] _copy_to_user+0x31/0xb0 [ 1436.755029][T25894] simple_read_from_buffer+0xe1/0x170 [ 1436.755047][T25894] proc_fail_nth_read+0x1b3/0x220 [ 1436.755061][T25894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1436.755075][T25894] ? rw_verify_area+0x2a6/0x4d0 [ 1436.755087][T25894] ? __lock_acquire+0xab9/0xd20 [ 1436.755102][T25894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1436.755115][T25894] vfs_read+0x200/0xa30 [ 1436.755133][T25894] ? fdget_pos+0x247/0x320 [ 1436.755145][T25894] ? __pfx___mutex_lock+0x10/0x10 [ 1436.755156][T25894] ? __pfx_vfs_read+0x10/0x10 [ 1436.755170][T25894] ? __fget_files+0x2a/0x420 [ 1436.755182][T25894] ? __fget_files+0x3a0/0x420 [ 1436.755190][T25894] ? __fget_files+0x2a/0x420 [ 1436.755204][T25894] ksys_read+0x145/0x250 [ 1436.755218][T25894] ? __pfx_ksys_read+0x10/0x10 [ 1436.755230][T25894] ? rcu_is_watching+0x15/0xb0 [ 1436.755243][T25894] ? do_syscall_64+0xbe/0x3b0 [ 1436.755256][T25894] do_syscall_64+0xfa/0x3b0 [ 1436.755267][T25894] ? lockdep_hardirqs_on+0x9c/0x150 [ 1436.755277][T25894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.755287][T25894] ? clear_bhb_loop+0x60/0xb0 [ 1436.755299][T25894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.755309][T25894] RIP: 0033:0x7f1cc6d8d5bc [ 1436.755320][T25894] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1436.755329][T25894] RSP: 002b:00007f1cc7c03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1436.755341][T25894] RAX: ffffffffffffffda RBX: 00007f1cc6fd6090 RCX: 00007f1cc6d8d5bc [ 1436.755349][T25894] RDX: 000000000000000f RSI: 00007f1cc7c030a0 RDI: 0000000000000008 [ 1436.755355][T25894] RBP: 00007f1cc7c03090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.755362][T25894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.755368][T25894] R13: 00007f1cc6fd6128 R14: 00007f1cc6fd6090 R15: 00007f1cc70ffa28 [ 1436.755387][T25894] [ 1437.200704][T25902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1437.218310][T25892] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1437.450164][T24202] usb 6-1: USB disconnect, device number 4 [ 1437.513303][T24209] usb 7-1: USB disconnect, device number 92 [ 1437.519475][T24209] usblp0: removed [ 1437.764234][T25918] FAULT_INJECTION: forcing a failure. [ 1437.764234][T25918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.764269][T25918] CPU: 0 UID: 0 PID: 25918 Comm: syz.0.5439 Not tainted syzkaller #0 PREEMPT(full) [ 1437.764291][T25918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1437.764303][T25918] Call Trace: [ 1437.764311][T25918] [ 1437.764320][T25918] dump_stack_lvl+0x189/0x250 [ 1437.764348][T25918] ? __pfx____ratelimit+0x10/0x10 [ 1437.764368][T25918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.764391][T25918] ? __pfx__printk+0x10/0x10 [ 1437.764417][T25918] ? __might_fault+0xb0/0x130 [ 1437.764455][T25918] should_fail_ex+0x414/0x560 [ 1437.764488][T25918] _copy_from_user+0x2d/0xb0 [ 1437.764514][T25918] ___sys_sendmsg+0x158/0x2a0 [ 1437.764541][T25918] ? __pfx____sys_sendmsg+0x10/0x10 [ 1437.764600][T25918] ? __fget_files+0x2a/0x420 [ 1437.764617][T25918] ? __fget_files+0x3a0/0x420 [ 1437.764645][T25918] __x64_sys_sendmsg+0x19b/0x260 [ 1437.764672][T25918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1437.764705][T25918] ? __pfx_ksys_write+0x10/0x10 [ 1437.764728][T25918] ? rcu_is_watching+0x15/0xb0 [ 1437.764753][T25918] ? do_syscall_64+0xbe/0x3b0 [ 1437.764777][T25918] do_syscall_64+0xfa/0x3b0 [ 1437.764799][T25918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.764817][T25918] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1437.764836][T25918] ? clear_bhb_loop+0x60/0xb0 [ 1437.764860][T25918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.764879][T25918] RIP: 0033:0x7febf0d8eba9 [ 1437.764896][T25918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.764912][T25918] RSP: 002b:00007febf1c15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.764937][T25918] RAX: ffffffffffffffda RBX: 00007febf0fd6180 RCX: 00007febf0d8eba9 [ 1437.764952][T25918] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1437.764964][T25918] RBP: 00007febf1c15090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.764977][T25918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.764989][T25918] R13: 00007febf0fd6218 R14: 00007febf0fd6180 R15: 00007febf10ffa28 [ 1437.765020][T25918] [ 1438.248160][T25928] netlink: 'syz.1.5441': attribute type 15 has an invalid length. [ 1438.248202][T25928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5441'. [ 1438.637167][T25934] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5443'. [ 1438.640057][T25934] fuse: Unknown parameter 'rootmod' [ 1438.776178][T24202] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1438.852814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1439.326512][T24202] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 1439.336617][T24202] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1439.348672][T24202] usb 2-1: config 0 has no interface number 0 [ 1439.355947][T24202] usb 2-1: config 0 interface 5 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 1439.369584][T24202] usb 2-1: config 0 interface 5 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1439.397838][T24202] usb 2-1: config 0 interface 5 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1439.428495][T24202] usb 2-1: config 0 interface 5 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1439.471127][T24202] usb 2-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=fb.a5 [ 1439.484915][T24202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.501052][T24202] usb 2-1: Product: syz [ 1439.515728][T24202] usb 2-1: Manufacturer: syz [ 1439.529335][T24202] usb 2-1: SerialNumber: syz [ 1439.556691][T24202] usb 2-1: config 0 descriptor?? [ 1439.574313][T25931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1439.587922][T25931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1439.607301][T24202] gspca_main: finepix-2.14.0 probing 04cb:010b [ 1439.684543][T25940] fuse: Unknown parameter '`llow_oper+ñ' [ 1440.326074][T25949] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5446'. [ 1441.507923][T24202] usb 2-1: USB disconnect, device number 124 [ 1442.320185][T25987] fuse: Unknown parameter '`llow_oper+ñ' [ 1442.931566][T16780] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 1443.086142][T16780] usb 7-1: device descriptor read/64, error -71 [ 1443.351737][T16780] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1443.501579][T16780] usb 7-1: device descriptor read/64, error -71 [ 1443.612027][T16780] usb usb7-port1: attempt power cycle [ 1443.670631][T24180] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1443.846981][T24180] usb 6-1: Using ep0 maxpacket: 8 [ 1443.854636][T24180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.885877][T24180] usb 6-1: config 0 has no interfaces? [ 1443.891434][T24180] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1443.900836][T24180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.919879][T24180] usb 6-1: config 0 descriptor?? [ 1443.963253][T16780] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1443.996090][T16780] usb 7-1: device descriptor read/8, error -71 [ 1444.002477][T24209] IPVS: starting estimator thread 0... [ 1444.101654][T26029] IPVS: using max 50 ests per chain, 120000 per kthread [ 1444.360089][ T30] audit: type=1326 audit(1757804948.459:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1444.360144][ T30] audit: type=1326 audit(1757804948.459:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9773f8d510 code=0x7ffc0000 [ 1444.391677][T16780] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1444.513724][T16780] usb 7-1: device descriptor read/8, error -71 [ 1444.520980][ T30] audit: type=1326 audit(1757804948.469:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9773f8d510 code=0x7ffc0000 [ 1444.549337][ T30] audit: type=1326 audit(1757804948.469:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1444.595026][ T30] audit: type=1326 audit(1757804948.469:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1444.825185][T16780] usb usb7-port1: unable to enumerate USB device [ 1444.868147][ T30] audit: type=1326 audit(1757804948.469:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1444.896958][ T30] audit: type=1326 audit(1757804948.469:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1444.919193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.930373][ T30] audit: type=1400 audit(1757804948.579:2373): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26011 comm="syz.5.5465" [ 1445.047026][ T30] audit: type=1326 audit(1757804948.579:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1445.069458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.104772][ T30] audit: type=1326 audit(1757804948.579:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26011 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9773f8eba9 code=0x7ffc0000 [ 1445.431408][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'. [ 1445.912464][T26049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5470'. [ 1447.306332][T24202] usb 6-1: USB disconnect, device number 5 [ 1448.364710][T26097] netlink: 10 bytes leftover after parsing attributes in process `syz.7.5478'. [ 1448.403209][T26097] syzkaller1: entered promiscuous mode [ 1448.408913][T26097] syzkaller1: entered allmulticast mode [ 1448.532926][T24180] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1448.591585][T24186] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1448.691827][T26107] trusted_key: encrypted_key: insufficient parameters specified [ 1448.713611][T24180] usb 2-1: Using ep0 maxpacket: 16 [ 1448.739843][T24180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.773087][T24186] usb 7-1: config 2 has an invalid interface number: 174 but max is 0 [ 1448.801041][T24186] usb 7-1: config 2 has no interface number 0 [ 1448.811756][T24180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.831644][T24186] usb 7-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1448.844622][T24180] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1448.870249][T24186] usb 7-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1448.881707][T24180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.975990][T24180] usb 2-1: config 0 descriptor?? [ 1448.984631][T24186] usb 7-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1449.451143][T24186] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1449.460456][T24186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.481950][T24186] usb 7-1: Product: syz [ 1449.486130][T24186] usb 7-1: Manufacturer: syz [ 1449.490720][T24186] usb 7-1: SerialNumber: syz [ 1449.708235][T26095] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1449.931420][T26095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.001944][T26095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.012260][T24180] zeroplus 0003:0C12:0030.001B: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 1450.072210][T24186] usb 7-1: probing VID:PID(0424:012C) [ 1450.088141][T24180] zeroplus 0003:0C12:0030.001B: no inputs found [ 1450.103081][T24186] usb 7-1: vub300 testing BULK IN EndPoint(0) 8E [ 1450.118720][T24186] usb 7-1: vub300 testing BULK IN EndPoint(1) 82 [ 1450.141673][T24186] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 1450.161990][T24186] vub300 7-1:2.174: probe with driver vub300 failed with error -22 [ 1450.189298][T24180] usb 2-1: USB disconnect, device number 125 [ 1450.297901][T26125] fido_id[26125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1450.318837][T24186] usb 7-1: USB disconnect, device number 97 [ 1450.617050][T26137] netlink: 'syz.5.5485': attribute type 12 has an invalid length. [ 1450.631266][T26137] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5485'. [ 1450.904992][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1450.905010][ T30] audit: type=1326 audit(1757804954.989:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1450.943941][T26137] netlink: 'syz.5.5485': attribute type 12 has an invalid length. [ 1450.991772][T26137] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5485'. [ 1451.178457][ T30] audit: type=1326 audit(1757804954.989:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1451.515927][T26146] binfmt_misc: register: failed to install interpreter file ./file0 [ 1451.602656][ T30] audit: type=1326 audit(1757804954.989:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1451.714425][ T30] audit: type=1326 audit(1757804954.989:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1451.781644][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5490'. [ 1452.038871][ T30] audit: type=1326 audit(1757804954.989:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.169473][T26169] gretap1: entered promiscuous mode [ 1452.422442][ T30] audit: type=1326 audit(1757804954.989:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.449157][ T30] audit: type=1326 audit(1757804954.989:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.474503][ T30] audit: type=1326 audit(1757804954.989:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.498230][ T30] audit: type=1326 audit(1757804954.989:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.525232][ T30] audit: type=1326 audit(1757804954.989:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26134 comm="syz.7.5486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cc6d8eba9 code=0x7ffc0000 [ 1452.853664][T26172] netlink: 'syz.7.5492': attribute type 10 has an invalid length. [ 1453.014728][T26172] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1453.561750][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5494'. [ 1453.601362][T26179] sctp: [Deprecated]: syz.5.5495 (pid 26179) Use of int in max_burst socket option. [ 1453.601362][T26179] Use struct sctp_assoc_value instead [ 1453.681409][T26177] geneve2: entered promiscuous mode [ 1453.690670][T26177] geneve2: entered allmulticast mode [ 1454.209014][T26191] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2246848209 (4493696418 ns) > initial count (2646334230 ns). Using initial count to start timer. [ 1454.359287][T26210] gretap1: entered promiscuous mode [ 1454.364634][T24206] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1454.531877][T24206] usb 2-1: Using ep0 maxpacket: 16 [ 1454.544807][T24206] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1454.623781][T24206] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1454.654031][T24206] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1454.668916][T24206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.680282][T24206] usb 2-1: Product: syz [ 1454.690770][T24206] usb 2-1: Manufacturer: syz [ 1454.697075][T24206] usb 2-1: SerialNumber: syz [ 1454.937706][T24206] usb 2-1: 0:2 : does not exist [ 1454.967944][T23342] udevd[23342]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1455.103909][T24206] usb 2-1: USB disconnect, device number 126 [ 1455.105180][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.751716][T26183] Bluetooth: hci4: command 0x0405 tx timeout [ 1456.500910][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5507'. [ 1457.436709][T26237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1457.476531][T26242] FAULT_INJECTION: forcing a failure. [ 1457.476531][T26242] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.520446][T26242] CPU: 1 UID: 0 PID: 26242 Comm: syz.0.5514 Not tainted syzkaller #0 PREEMPT(full) [ 1457.520481][T26242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1457.520494][T26242] Call Trace: [ 1457.520502][T26242] [ 1457.520511][T26242] dump_stack_lvl+0x189/0x250 [ 1457.520540][T26242] ? __pfx____ratelimit+0x10/0x10 [ 1457.520561][T26242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1457.520584][T26242] ? __pfx__printk+0x10/0x10 [ 1457.520617][T26242] ? __pfx___might_resched+0x10/0x10 [ 1457.520642][T26242] should_fail_ex+0x414/0x560 [ 1457.520675][T26242] should_failslab+0xa8/0x100 [ 1457.520706][T26242] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1457.520734][T26242] ? __alloc_skb+0x112/0x2d0 [ 1457.520760][T26242] __alloc_skb+0x112/0x2d0 [ 1457.520785][T26242] netlink_sendmsg+0x5c6/0xb30 [ 1457.520817][T26242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.520842][T26242] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1457.520863][T26242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1457.520886][T26242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.520908][T26242] __sock_sendmsg+0x21c/0x270 [ 1457.520941][T26242] ____sys_sendmsg+0x505/0x830 [ 1457.520970][T26242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1457.521004][T26242] ? import_iovec+0x74/0xa0 [ 1457.521033][T26242] ___sys_sendmsg+0x21f/0x2a0 [ 1457.521060][T26242] ? __pfx____sys_sendmsg+0x10/0x10 [ 1457.521120][T26242] ? __fget_files+0x2a/0x420 [ 1457.521137][T26242] ? __fget_files+0x3a0/0x420 [ 1457.521165][T26242] __x64_sys_sendmsg+0x19b/0x260 [ 1457.521193][T26242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1457.521227][T26242] ? __pfx_ksys_write+0x10/0x10 [ 1457.521251][T26242] ? rcu_is_watching+0x15/0xb0 [ 1457.521277][T26242] ? do_syscall_64+0xbe/0x3b0 [ 1457.521302][T26242] do_syscall_64+0xfa/0x3b0 [ 1457.521322][T26242] ? lockdep_hardirqs_on+0x9c/0x150 [ 1457.521342][T26242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.521362][T26242] ? clear_bhb_loop+0x60/0xb0 [ 1457.521386][T26242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.521406][T26242] RIP: 0033:0x7febf0d8eba9 [ 1457.521424][T26242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1457.521446][T26242] RSP: 002b:00007febf1c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1457.521465][T26242] RAX: ffffffffffffffda RBX: 00007febf0fd5fa0 RCX: 00007febf0d8eba9 [ 1457.521485][T26242] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1457.521498][T26242] RBP: 00007febf1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.521509][T26242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.521521][T26242] R13: 00007febf0fd6038 R14: 00007febf0fd5fa0 R15: 00007febf10ffa28 [ 1457.521550][T26242] [ 1457.781999][T24186] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1458.064564][T26258] netlink: 'syz.5.5508': attribute type 10 has an invalid length. [ 1458.103155][T24186] usb 7-1: Using ep0 maxpacket: 8 [ 1458.274284][T24186] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1458.465685][T24186] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1458.474884][T24186] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1458.508740][T24186] usb 7-1: Product: syz [ 1458.527719][T24186] usb 7-1: Manufacturer: syz [ 1458.550428][T24186] usb 7-1: SerialNumber: syz [ 1458.885562][T26269] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.5520'. [ 1458.896551][T26269] netlink: zone id is out of range [ 1458.902014][T26269] netlink: zone id is out of range [ 1458.907178][T26269] netlink: zone id is out of range [ 1458.912386][T26269] netlink: zone id is out of range [ 1458.917524][T26269] netlink: zone id is out of range [ 1458.922741][T26269] netlink: zone id is out of range [ 1458.927871][T26269] netlink: zone id is out of range [ 1458.933086][T26269] netlink: zone id is out of range [ 1458.938209][T26269] netlink: zone id is out of range [ 1458.943371][T26269] netlink: zone id is out of range [ 1458.968121][T26241] lo: left allmulticast mode [ 1458.978386][T26241] tunl0: left allmulticast mode [ 1458.987269][T24186] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1459.038802][T26241] gre0: left allmulticast mode [ 1459.052815][T24186] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1459.335424][T26241] gretap0: left allmulticast mode [ 1459.380490][T26241] erspan0: left allmulticast mode [ 1459.409964][T26241] ip_vti0: left allmulticast mode [ 1459.428518][T26241] ip6_vti0: left allmulticast mode [ 1459.460336][T26241] sit0: left allmulticast mode [ 1459.550305][T26241] ip6tnl0: left allmulticast mode [ 1459.559219][T26241] ip6gre0: left allmulticast mode [ 1459.568186][T26241] syz_tun: left allmulticast mode [ 1459.579904][T26241] ip6gretap0: left allmulticast mode [ 1459.589393][T26241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.596787][T26241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.605541][T26241] bridge0: left allmulticast mode [ 1459.630481][T26241] vcan0: left allmulticast mode [ 1459.717335][T26241] bond0: left allmulticast mode [ 1459.731211][T26241] bond_slave_0: left allmulticast mode [ 1459.748018][T26241] bond_slave_1: left allmulticast mode [ 1459.811095][T26241] team0: left allmulticast mode [ 1459.832033][T26241] team_slave_0: left allmulticast mode [ 1459.837618][T26241] team_slave_1: left allmulticast mode [ 1459.847746][T26241] dummy0: left allmulticast mode [ 1459.859828][T26241] nlmon0: left allmulticast mode [ 1459.886642][T26241] caif0: left allmulticast mode [ 1459.944181][T26241] bridge_slave_0: left allmulticast mode [ 1459.949847][T26241] bridge_slave_0: left promiscuous mode [ 1459.955992][T26241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.000181][T26241] bridge_slave_1: left allmulticast mode [ 1460.008318][T26241] bridge_slave_1: left promiscuous mode [ 1460.015829][T26241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.227045][T26241] bond0: (slave bond_slave_0): Releasing backup interface [ 1460.245109][T26241] bond_slave_0: left promiscuous mode [ 1460.302290][T26241] bond0: (slave bond_slave_1): Releasing backup interface [ 1460.310482][T26241] bond_slave_1: left promiscuous mode [ 1460.333921][T26241] team0: Port device team_slave_0 removed [ 1460.358064][T26241] team0: Port device team_slave_1 removed [ 1460.370182][T26241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.380807][T26241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.654881][T26241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.667962][T26241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.910395][T26290] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5527'. [ 1460.939839][T26290] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5527'. [ 1460.979715][T26241] bond1: left promiscuous mode [ 1460.985833][T26241] bond2: left allmulticast mode [ 1461.001824][T26290] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5527'. [ 1461.014015][T26241] bridge2: left promiscuous mode [ 1461.041676][T26241] geneve2: left promiscuous mode [ 1461.065800][T12449] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.086933][T12449] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.236381][T12449] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.281675][T24180] usb 7-1: USB disconnect, device number 98 [ 1461.284683][T12449] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.373784][T26302] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1462.338023][T26319] tipc: Enabling of bearer rejected, failed to enable media [ 1462.854724][T26324] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.5534'. [ 1462.865966][T26324] netlink: 4804 bytes leftover after parsing attributes in process `syz.7.5534'. [ 1463.783607][T26329] FAULT_INJECTION: forcing a failure. [ 1463.783607][T26329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.818077][T26329] CPU: 1 UID: 0 PID: 26329 Comm: syz.7.5536 Not tainted syzkaller #0 PREEMPT(full) [ 1463.818099][T26329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1463.818106][T26329] Call Trace: [ 1463.818110][T26329] [ 1463.818115][T26329] dump_stack_lvl+0x189/0x250 [ 1463.818133][T26329] ? __pfx____ratelimit+0x10/0x10 [ 1463.818144][T26329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.818157][T26329] ? __pfx__printk+0x10/0x10 [ 1463.818178][T26329] should_fail_ex+0x414/0x560 [ 1463.818197][T26329] _copy_to_user+0x31/0xb0 [ 1463.818212][T26329] simple_read_from_buffer+0xe1/0x170 [ 1463.818233][T26329] proc_fail_nth_read+0x1b3/0x220 [ 1463.818248][T26329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1463.818261][T26329] ? rw_verify_area+0x2a6/0x4d0 [ 1463.818274][T26329] ? __lock_acquire+0xab9/0xd20 [ 1463.818289][T26329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1463.818301][T26329] vfs_read+0x200/0xa30 [ 1463.818314][T26329] ? fdget_pos+0x247/0x320 [ 1463.818325][T26329] ? __pfx___mutex_lock+0x10/0x10 [ 1463.818337][T26329] ? __pfx_vfs_read+0x10/0x10 [ 1463.818352][T26329] ? __fget_files+0x2a/0x420 [ 1463.818363][T26329] ? __fget_files+0x3a0/0x420 [ 1463.818371][T26329] ? __fget_files+0x2a/0x420 [ 1463.818385][T26329] ksys_read+0x145/0x250 [ 1463.818403][T26329] ? __pfx_ksys_read+0x10/0x10 [ 1463.818419][T26329] ? do_syscall_64+0xbe/0x3b0 [ 1463.818433][T26329] do_syscall_64+0xfa/0x3b0 [ 1463.818443][T26329] ? lockdep_hardirqs_on+0x9c/0x150 [ 1463.818454][T26329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.818464][T26329] ? clear_bhb_loop+0x60/0xb0 [ 1463.818476][T26329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.818487][T26329] RIP: 0033:0x7f1cc6d8d5bc [ 1463.818497][T26329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1463.818507][T26329] RSP: 002b:00007f1cc7c24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1463.818519][T26329] RAX: ffffffffffffffda RBX: 00007f1cc6fd5fa0 RCX: 00007f1cc6d8d5bc [ 1463.818527][T26329] RDX: 000000000000000f RSI: 00007f1cc7c240a0 RDI: 0000000000000004 [ 1463.818534][T26329] RBP: 00007f1cc7c24090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.818541][T26329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.818547][T26329] R13: 00007f1cc6fd6038 R14: 00007f1cc6fd5fa0 R15: 00007f1cc70ffa28 [ 1463.818564][T26329] [ 1464.053021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.470670][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5540'. [ 1464.509475][T26338] FAULT_INJECTION: forcing a failure. [ 1464.509475][T26338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.523557][T26338] CPU: 1 UID: 0 PID: 26338 Comm: syz.5.5540 Not tainted syzkaller #0 PREEMPT(full) [ 1464.523585][T26338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1464.523598][T26338] Call Trace: [ 1464.523607][T26338] [ 1464.523616][T26338] dump_stack_lvl+0x189/0x250 [ 1464.523644][T26338] ? __pfx____ratelimit+0x10/0x10 [ 1464.523665][T26338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.523689][T26338] ? __pfx__printk+0x10/0x10 [ 1464.523729][T26338] should_fail_ex+0x414/0x560 [ 1464.523763][T26338] _copy_to_user+0x31/0xb0 [ 1464.523791][T26338] simple_read_from_buffer+0xe1/0x170 [ 1464.523824][T26338] proc_fail_nth_read+0x1b3/0x220 [ 1464.523850][T26338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1464.523876][T26338] ? rw_verify_area+0x2a6/0x4d0 [ 1464.523901][T26338] ? __lock_acquire+0xab9/0xd20 [ 1464.523934][T26338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1464.523958][T26338] vfs_read+0x200/0xa30 [ 1464.523981][T26338] ? fdget_pos+0x247/0x320 [ 1464.524003][T26338] ? __pfx___mutex_lock+0x10/0x10 [ 1464.524025][T26338] ? __pfx_vfs_read+0x10/0x10 [ 1464.524051][T26338] ? __fget_files+0x2a/0x420 [ 1464.524072][T26338] ? __fget_files+0x3a0/0x420 [ 1464.524089][T26338] ? __fget_files+0x2a/0x420 [ 1464.524115][T26338] ksys_read+0x145/0x250 [ 1464.524143][T26338] ? __pfx_ksys_read+0x10/0x10 [ 1464.524166][T26338] ? rcu_is_watching+0x15/0xb0 [ 1464.524190][T26338] ? do_syscall_64+0xbe/0x3b0 [ 1464.524215][T26338] do_syscall_64+0xfa/0x3b0 [ 1464.524234][T26338] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.524254][T26338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.524274][T26338] ? clear_bhb_loop+0x60/0xb0 [ 1464.524298][T26338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.524318][T26338] RIP: 0033:0x7f9773f8d5bc [ 1464.524335][T26338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1464.524353][T26338] RSP: 002b:00007f9774e32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1464.524374][T26338] RAX: ffffffffffffffda RBX: 00007f97741d5fa0 RCX: 00007f9773f8d5bc [ 1464.524390][T26338] RDX: 000000000000000f RSI: 00007f9774e320a0 RDI: 0000000000000004 [ 1464.524403][T26338] RBP: 00007f9774e32090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.524416][T26338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.524429][T26338] R13: 00007f97741d6038 R14: 00007f97741d5fa0 R15: 00007f97742ffa28 [ 1464.524462][T26338] [ 1464.767823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.092988][T26351] gretap1: entered promiscuous mode [ 1465.214047][T26360] FAULT_INJECTION: forcing a failure. [ 1465.214047][T26360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1465.291406][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1465.291426][ T30] audit: type=1326 audit(1757804969.399:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26339 comm="syz.6.5541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7b8eba9 code=0x0 [ 1465.294448][T26360] CPU: 0 UID: 0 PID: 26360 Comm: syz.5.5544 Not tainted syzkaller #0 PREEMPT(full) [ 1465.294473][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1465.294484][T26360] Call Trace: [ 1465.294493][T26360] [ 1465.294501][T26360] dump_stack_lvl+0x189/0x250 [ 1465.294528][T26360] ? __pfx____ratelimit+0x10/0x10 [ 1465.294549][T26360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1465.294572][T26360] ? __pfx__printk+0x10/0x10 [ 1465.294610][T26360] should_fail_ex+0x414/0x560 [ 1465.294643][T26360] _copy_to_user+0x31/0xb0 [ 1465.294669][T26360] simple_read_from_buffer+0xe1/0x170 [ 1465.294702][T26360] proc_fail_nth_read+0x1b3/0x220 [ 1465.294728][T26360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1465.294753][T26360] ? rw_verify_area+0x2a6/0x4d0 [ 1465.294776][T26360] ? __lock_acquire+0xab9/0xd20 [ 1465.294803][T26360] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1465.294827][T26360] vfs_read+0x200/0xa30 [ 1465.294850][T26360] ? fdget_pos+0x247/0x320 [ 1465.294881][T26360] ? __pfx___mutex_lock+0x10/0x10 [ 1465.294903][T26360] ? __pfx_vfs_read+0x10/0x10 [ 1465.294928][T26360] ? __fget_files+0x2a/0x420 [ 1465.294949][T26360] ? __fget_files+0x3a0/0x420 [ 1465.294965][T26360] ? __fget_files+0x2a/0x420 [ 1465.294991][T26360] ksys_read+0x145/0x250 [ 1465.295017][T26360] ? __pfx_ksys_read+0x10/0x10 [ 1465.295040][T26360] ? rcu_is_watching+0x15/0xb0 [ 1465.295064][T26360] ? do_syscall_64+0xbe/0x3b0 [ 1465.295089][T26360] do_syscall_64+0xfa/0x3b0 [ 1465.295114][T26360] ? lockdep_hardirqs_on+0x9c/0x150 [ 1465.295133][T26360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.295152][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1465.295176][T26360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.295194][T26360] RIP: 0033:0x7f9773f8d5bc [ 1465.295211][T26360] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1465.295229][T26360] RSP: 002b:00007f9774e11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1465.295250][T26360] RAX: ffffffffffffffda RBX: 00007f97741d6090 RCX: 00007f9773f8d5bc [ 1465.295265][T26360] RDX: 000000000000000f RSI: 00007f9774e110a0 RDI: 0000000000000004 [ 1465.295278][T26360] RBP: 00007f9774e11090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.295290][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.295302][T26360] R13: 00007f97741d6128 R14: 00007f97741d6090 R15: 00007f97742ffa28 [ 1465.295333][T26360] [ 1465.555581][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.831586][T16780] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1465.991588][T16780] usb 2-1: Using ep0 maxpacket: 32 [ 1466.000335][T16780] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1466.011814][T16780] usb 2-1: config 0 has no interface number 0 [ 1466.022765][T16780] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1466.152188][T16780] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1466.166230][T16780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.174579][T16780] usb 2-1: Product: syz [ 1466.178769][T16780] usb 2-1: Manufacturer: syz [ 1466.188722][T16780] usb 2-1: SerialNumber: syz [ 1466.207011][T26376] netlink: 'syz.5.5550': attribute type 12 has an invalid length. [ 1466.251573][T26376] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5550'. [ 1466.263817][T16780] usb 2-1: config 0 descriptor?? [ 1466.275053][T26376] netlink: 'syz.5.5550': attribute type 12 has an invalid length. [ 1466.297780][T16780] smsc75xx v1.0.0 [ 1466.304253][T16780] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1466.318484][T16780] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1466.339769][T26376] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5550'. [ 1467.049791][T26387] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5552'. [ 1468.149892][T24180] usb 2-1: USB disconnect, device number 127 [ 1468.720784][T26426] macvlan0: entered promiscuous mode [ 1468.729555][T26426] vlan0: entered promiscuous mode [ 1469.025724][T26440] fuse: Bad value for 'fd' [ 1470.627563][T26455] netlink: 'syz.7.5568': attribute type 10 has an invalid length. [ 1470.638156][T26455] team0: Device veth1_vlan failed to register rx_handler [ 1471.602085][T26473] tipc: Enabling of bearer rejected, failed to enable media [ 1472.881634][T24209] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1472.961926][T26484] netlink: 'syz.7.5578': attribute type 11 has an invalid length. [ 1473.000360][T26484] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5578'. [ 1473.075794][T24209] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1473.090658][T24209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.175309][T24209] usb 6-1: Product: syz [ 1473.188779][T24209] usb 6-1: Manufacturer: syz [ 1473.201702][T24209] usb 6-1: SerialNumber: syz [ 1473.221921][T24209] usb 6-1: config 0 descriptor?? [ 1473.539796][T24209] usb 6-1: Firmware version (0.0) predates our first public release. [ 1473.557347][T24209] usb 6-1: Please update to version 0.2 or newer [ 1473.760997][T24209] usb 6-1: USB disconnect, device number 6 [ 1475.162622][T26511] vlan0: entered allmulticast mode [ 1475.211195][T26511] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1475.454821][T26519] FAULT_INJECTION: forcing a failure. [ 1475.454821][T26519] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.492555][T26519] CPU: 1 UID: 0 PID: 26519 Comm: syz.7.5589 Not tainted syzkaller #0 PREEMPT(full) [ 1475.492572][T26519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1475.492580][T26519] Call Trace: [ 1475.492585][T26519] [ 1475.492590][T26519] dump_stack_lvl+0x189/0x250 [ 1475.492608][T26519] ? __pfx____ratelimit+0x10/0x10 [ 1475.492619][T26519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.492631][T26519] ? __pfx__printk+0x10/0x10 [ 1475.492648][T26519] ? __pfx___might_resched+0x10/0x10 [ 1475.492658][T26519] ? fs_reclaim_acquire+0x7d/0x100 [ 1475.492671][T26519] should_fail_ex+0x414/0x560 [ 1475.492689][T26519] should_failslab+0xa8/0x100 [ 1475.492705][T26519] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1475.492720][T26519] ? __alloc_skb+0x112/0x2d0 [ 1475.492734][T26519] __alloc_skb+0x112/0x2d0 [ 1475.492747][T26519] netlink_ack+0x146/0xa50 [ 1475.492757][T26519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1475.492767][T26519] ? ref_tracker_free+0x63a/0x7d0 [ 1475.492778][T26519] ? __asan_memcpy+0x40/0x70 [ 1475.492789][T26519] ? __pfx_ref_tracker_free+0x10/0x10 [ 1475.492798][T26519] ? __skb_clone+0x63/0x7a0 [ 1475.492815][T26519] netlink_rcv_skb+0x28c/0x470 [ 1475.492827][T26519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1475.492839][T26519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1475.492854][T26519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.492869][T26519] netlink_unicast+0x82c/0x9e0 [ 1475.492889][T26519] ? __pfx_netlink_unicast+0x10/0x10 [ 1475.492905][T26519] ? netlink_sendmsg+0x642/0xb30 [ 1475.492915][T26519] ? skb_put+0x11b/0x210 [ 1475.492928][T26519] netlink_sendmsg+0x805/0xb30 [ 1475.492944][T26519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.492957][T26519] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1475.492968][T26519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1475.492979][T26519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.492991][T26519] __sock_sendmsg+0x21c/0x270 [ 1475.493008][T26519] ____sys_sendmsg+0x505/0x830 [ 1475.493024][T26519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.493046][T26519] ? import_iovec+0x74/0xa0 [ 1475.493061][T26519] ___sys_sendmsg+0x21f/0x2a0 [ 1475.493075][T26519] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.493105][T26519] ? __fget_files+0x2a/0x420 [ 1475.493114][T26519] ? __fget_files+0x3a0/0x420 [ 1475.493128][T26519] __x64_sys_sendmsg+0x19b/0x260 [ 1475.493143][T26519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1475.493160][T26519] ? __pfx_ksys_write+0x10/0x10 [ 1475.493173][T26519] ? rcu_is_watching+0x15/0xb0 [ 1475.493186][T26519] ? do_syscall_64+0xbe/0x3b0 [ 1475.493199][T26519] do_syscall_64+0xfa/0x3b0 [ 1475.493209][T26519] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.493220][T26519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.493230][T26519] ? clear_bhb_loop+0x60/0xb0 [ 1475.493242][T26519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.493253][T26519] RIP: 0033:0x7f1cc6d8eba9 [ 1475.493263][T26519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.493272][T26519] RSP: 002b:00007f1cc7c24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.493284][T26519] RAX: ffffffffffffffda RBX: 00007f1cc6fd5fa0 RCX: 00007f1cc6d8eba9 [ 1475.493293][T26519] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1475.493301][T26519] RBP: 00007f1cc7c24090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.493308][T26519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.493314][T26519] R13: 00007f1cc6fd6038 R14: 00007f1cc6fd5fa0 R15: 00007f1cc70ffa28 [ 1475.493330][T26519] [ 1475.838932][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.001524][T24206] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1476.191382][T24206] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1476.199748][T24206] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1476.208703][T24206] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.219439][T24206] usb 6-1: config 220 has no interface number 2 [ 1476.226268][T24206] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1476.239493][T24206] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1476.246329][T24206] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1476.253216][T24206] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1476.276374][T24206] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1476.299319][T24206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.313604][T24206] usb 6-1: Product: syz [ 1476.317786][T24206] usb 6-1: Manufacturer: syz [ 1476.334486][T24206] usb 6-1: SerialNumber: syz [ 1476.436764][T26537] netlink: 4796 bytes leftover after parsing attributes in process `syz.6.5594'. [ 1476.446212][T26537] netlink: 4796 bytes leftover after parsing attributes in process `syz.6.5594'. [ 1476.596989][T26517] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5585'. [ 1477.411136][T26539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1477.684834][T26545] binder: 26544:26545 ioctl 4008af7c 200000000480 returned -22 [ 1477.721978][T16780] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1477.899085][T16780] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1477.918980][T16780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.943601][T16780] usb 2-1: Product: syz [ 1477.947967][T16780] usb 2-1: Manufacturer: syz [ 1477.955423][T16780] usb 2-1: SerialNumber: syz [ 1477.965002][T16780] usb 2-1: config 0 descriptor?? [ 1478.102122][T24206] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1478.112070][T24206] usb 6-1: No valid video chain found. [ 1478.118159][T24206] usb 6-1: selecting invalid altsetting 0 [ 1478.226213][T26561] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1478.275636][T24206] usb 6-1: selecting invalid altsetting 0 [ 1478.283030][T24206] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1478.293516][T16780] usb 2-1: Firmware version (0.0) predates our first public release. [ 1478.327451][T16780] usb 2-1: Please update to version 0.2 or newer [ 1478.388504][T24206] usb 6-1: USB disconnect, device number 7 [ 1478.473460][T16780] usb 2-1: USB disconnect, device number 2 [ 1482.971528][T24206] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1483.057473][T26621] bond6: entered allmulticast mode [ 1483.071847][T26621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1483.103291][T26623] fuse: Bad value for 'fd' [ 1483.179265][T24206] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1483.189454][T24206] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.221535][T24206] usb 7-1: Product: syz [ 1483.225715][T24206] usb 7-1: Manufacturer: syz [ 1483.243171][T24206] usb 7-1: SerialNumber: syz [ 1483.262115][T24206] usb 7-1: config 0 descriptor?? [ 1483.710943][T24206] usb 7-1: Firmware version (0.0) predates our first public release. [ 1483.719588][T24206] usb 7-1: Please update to version 0.2 or newer [ 1483.764349][T24206] usb 7-1: USB disconnect, device number 99 [ 1484.395705][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.402224][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.673819][T26646] fuse: Bad value for 'fd' [ 1484.801837][T24185] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1485.083376][T24185] usb 2-1: Using ep0 maxpacket: 16 [ 1485.090055][T24185] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1485.099975][T24185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.114482][T24185] usb 2-1: config 0 has no interface number 0 [ 1485.150202][T24185] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1485.180578][T24185] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1485.229310][T24185] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1485.265579][T24185] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 1485.293147][T24185] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1485.329265][T24185] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1485.357110][T24185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.379130][T24185] usb 2-1: config 0 descriptor?? [ 1485.415904][T26643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1485.423679][T26643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1485.436170][T24185] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1485.942441][T16780] usb 2-1: USB disconnect, device number 3 [ 1486.206418][T26671] tipc: Enabling of bearer rejected, failed to enable media [ 1487.316889][T26695] fuse: Bad value for 'fd' [ 1487.942244][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5637'. [ 1489.812048][T24186] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1489.980098][T24186] usb 7-1: Using ep0 maxpacket: 8 [ 1490.010159][T24186] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1490.030290][T24186] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1490.047843][T24186] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1490.068570][T24186] usb 7-1: Product: syz [ 1490.085461][T24186] usb 7-1: Manufacturer: syz [ 1490.100346][T24186] usb 7-1: SerialNumber: syz [ 1490.419937][T26735] lo: entered allmulticast mode [ 1490.426557][T26735] tunl0: entered allmulticast mode [ 1490.442828][T26735] gre0: entered allmulticast mode [ 1490.462487][T24186] usb 7-1: palm_os_3_probe - error -110 getting connection information [ 1490.481655][T24186] visor 7-1:1.0: probe with driver visor failed with error -110 [ 1490.483394][T26735] gretap0: entered allmulticast mode [ 1490.504214][T26735] erspan0: entered allmulticast mode [ 1490.514435][T26735] ip_vti0: entered allmulticast mode [ 1490.520832][T26735] ip6_vti0: entered allmulticast mode [ 1490.530460][T26735] sit0: entered allmulticast mode [ 1490.543159][T26735] ip6tnl0: entered allmulticast mode [ 1490.549810][T26735] ip6gre0: entered allmulticast mode [ 1490.556325][T26735] syz_tun: entered allmulticast mode [ 1490.566191][T26735] ip6gretap0: entered allmulticast mode [ 1490.613977][T26735] bridge0: entered allmulticast mode [ 1490.647409][T26735] vcan0: entered allmulticast mode [ 1490.710057][T26741] netlink: 4804 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1490.729356][T26735] bond0: entered allmulticast mode [ 1490.731075][T26741] netlink: 4804 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1490.812259][T26735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.854746][T26735] team0: entered allmulticast mode [ 1490.938443][T26735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.948900][T26735] dummy0: entered allmulticast mode [ 1490.960115][T26735] nlmon0: entered allmulticast mode [ 1490.971964][T26735] caif0: entered allmulticast mode [ 1490.977279][T26735] net_ratelimit: 527 callbacks suppressed [ 1490.977410][T26735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1492.382216][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5663'. [ 1492.511589][T24180] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1492.685686][T24206] usb 7-1: USB disconnect, device number 100 [ 1492.727234][T24180] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.757589][T24180] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1492.862992][T24180] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1492.901765][T24180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1492.903941][T26779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1492.931537][T24180] usb 6-1: SerialNumber: syz [ 1493.299715][T24180] usb 6-1: 0:2 : does not exist [ 1493.369211][T24180] usb 6-1: USB disconnect, device number 8 [ 1493.613502][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1493.663579][T26786] gretap1: entered promiscuous mode [ 1493.754951][T26787] netlink: 'syz.6.5668': attribute type 12 has an invalid length. [ 1493.765560][T26787] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5668'. [ 1493.868372][T26788] netlink: 'syz.6.5668': attribute type 12 has an invalid length. [ 1493.876927][T26788] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5668'. [ 1495.185782][T26808] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.5672'. [ 1495.197280][T26808] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.5672'. [ 1495.321538][T24185] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1495.411537][T24206] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1495.543861][T24206] usb 7-1: device descriptor read/64, error -71 [ 1495.801762][T24206] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1495.932365][T24185] usb 6-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.945592][T24185] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1495.961584][T24206] usb 7-1: device descriptor read/64, error -71 [ 1496.072696][T24206] usb usb7-port1: attempt power cycle [ 1496.079894][T26813] program syz.7.5675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1496.441657][T24206] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1496.472291][T24206] usb 7-1: device descriptor read/8, error -71 [ 1496.711786][T24206] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1496.832405][T24206] usb 7-1: device descriptor read/8, error -71 [ 1496.953983][T24206] usb usb7-port1: unable to enumerate USB device [ 1497.053981][T26823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.242983][T24185] usb 6-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.40 [ 1497.252474][T24185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.291538][T24185] usb 6-1: Product: ⇋è¶î‡§ï•¿ã—¦åƒ”ê•­äšèš”﬌䠟崔⊞枢憓괢휊ᰊݦ≷ᷣ馴^Ს놫ì€ê¹ã¹µç¥–副ᬄ렳뼤㞳 [ 1497.387356][T24185] usb 6-1: can't set config #1, error -71 [ 1497.494193][T24185] usb 6-1: USB disconnect, device number 9 [ 1497.742318][T26834] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1500.094066][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1500.278107][T24206] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1500.607543][T24206] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1500.618274][T24206] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.695552][T24206] usb 6-1: config 0 has no interface number 0 [ 1500.743812][T24206] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1500.832059][T24206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.975133][T26874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5692'. [ 1501.050131][T24206] usb 6-1: Product: syz [ 1501.065789][T24206] usb 6-1: Manufacturer: syz [ 1501.103666][T24206] usb 6-1: SerialNumber: syz [ 1501.134136][T24206] usb 6-1: config 0 descriptor?? [ 1501.158417][T24206] ims_pcu 6-1:0.41: Missing CDC union descriptor [ 1501.174896][T24206] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1501.241575][T16780] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1501.367775][T26859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.377226][T26859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.461566][T16780] usb 2-1: Using ep0 maxpacket: 32 [ 1501.483358][T16780] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1501.494501][T16780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.535667][T26859] input: syz1 as /devices/virtual/input/input86 [ 1501.549108][T26859] dvmrp0: entered allmulticast mode [ 1501.666473][T16780] usb 2-1: config 0 has no interface number 0 [ 1501.680848][T24185] usb 6-1: USB disconnect, device number 10 [ 1501.691572][T16780] usb 2-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1501.840782][T16780] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1501.855546][T16780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.868757][T16780] usb 2-1: config 0 descriptor?? [ 1501.887640][T16780] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1502.252441][T24168] udevd[24168]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1502.346482][T16780] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 1502.612394][T26889] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5695'. [ 1503.737738][T24185] usb 2-1: USB disconnect, device number 4 [ 1504.069193][T26895] bond7: entered allmulticast mode [ 1504.076431][T26895] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1504.077489][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5699'. [ 1504.142241][T26897] syz_tun: entered promiscuous mode [ 1504.495350][T16780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1504.651531][T16780] usb 2-1: Using ep0 maxpacket: 16 [ 1504.658804][T16780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.699072][T16780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.716739][T16780] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1504.731272][T16780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.747204][T16780] usb 2-1: Product: syz [ 1504.757314][T16780] usb 2-1: Manufacturer: syz [ 1504.762412][T16780] usb 2-1: SerialNumber: syz [ 1505.696295][T26927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1505.728478][T26927] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1505.818551][T26929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5709'. [ 1506.162233][ T6979] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.211072][T26927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1506.226786][T26927] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1506.235178][ T6979] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.301296][ T6979] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.302993][T26927] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1506.320798][ T6979] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.353403][T16780] usb 2-1: 0:2 : does not exist [ 1507.400557][T16780] usb 2-1: USB disconnect, device number 5 [ 1507.658460][T26952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5715'. [ 1507.702023][T26952] netlink: 'syz.7.5715': attribute type 10 has an invalid length. [ 1507.865963][T26952] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5715'. [ 1507.879801][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.018963][T26962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5719'. [ 1508.231781][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 1508.303744][T26966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1508.551726][T24186] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1508.717986][T24186] usb 2-1: config 0 has an invalid interface number: 81 but max is 2 [ 1508.742909][T24186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.839398][T26974] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5722'. [ 1508.935441][T24186] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1508.959143][T24186] usb 2-1: config 0 has no interface number 0 [ 1509.022328][T26972] bond0: (slave 10û): Releasing backup interface [ 1509.082275][T24186] usb 2-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1509.097314][T26972] û: left allmulticast mode [ 1509.132744][T26972] bond0: (slave bond_slave_1): Releasing backup interface [ 1509.146412][T26972] bond_slave_1: left allmulticast mode [ 1509.165789][T26972] team_slave_0: left allmulticast mode [ 1509.172064][T24186] usb 2-1: config 0 interface 81 has no altsetting 0 [ 1509.172107][T24186] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 1509.172131][T24186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.175285][T24186] usb 2-1: config 0 descriptor?? [ 1509.212298][T26972] team0: Port device team_slave_0 removed [ 1509.222822][T26972] team_slave_1: left allmulticast mode [ 1509.259524][T26972] team0: Port device team_slave_1 removed [ 1509.397771][T26979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1509.549228][T24186] usb 2-1: string descriptor 0 read error: -71 [ 1509.557330][T24186] cdc_ether 2-1:0.81: skipping garbage [ 1509.569845][T24186] cdc_ether 2-1:0.81: skipping garbage [ 1509.586269][T24186] usb 2-1: bad CDC descriptors [ 1509.593073][T24186] usb 2-1: unsupported MDLM descriptors [ 1509.617005][T24186] usb 2-1: USB disconnect, device number 6 [ 1510.313869][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 1510.663520][T22629] syz_tun (unregistering): left promiscuous mode [ 1512.391773][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 1513.542770][T24209] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1513.862826][T24209] usb 6-1: Using ep0 maxpacket: 32 [ 1514.282037][T27030] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1514.320524][T24209] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 1514.349850][T24209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.569243][T24209] usb 6-1: config 0 has no interface number 0 [ 1514.596400][T27037] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5739'. [ 1514.605820][T24209] usb 6-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1514.662793][T24209] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1514.684459][T24209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.700108][T24209] usb 6-1: config 0 descriptor?? [ 1514.738799][T24209] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1515.027149][T24209] snd-usb-audio 6-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 1515.555281][ T6982] bond0 (unregistering): Released all slaves [ 1515.586526][T26183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1515.622426][T26183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1515.630593][T26183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1515.641609][T26183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1515.651527][T26183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1516.275607][ T6982] bond1 (unregistering): Released all slaves [ 1516.511608][T24209] usb 6-1: USB disconnect, device number 11 [ 1516.619607][ T6982] bond2 (unregistering): Released all slaves [ 1516.876553][ T6982] tipc: Left network mode [ 1517.092101][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5743'. [ 1517.166278][T27066] chnl_net:caif_netlink_parms(): no params data found [ 1517.503385][T24209] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1517.707727][T24209] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 1517.717557][T24209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.735721][T24209] usb 6-1: config 0 has no interfaces? [ 1517.751932][T26183] Bluetooth: hci3: command tx timeout [ 1517.776592][T24209] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1517.785973][T24209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.834181][T24209] usb 6-1: Product: syz [ 1517.864828][ T6982] hsr_slave_0: left promiscuous mode [ 1517.880786][T24209] usb 6-1: Manufacturer: syz [ 1517.888299][ T6982] vlan0: left promiscuous mode [ 1517.895505][ T6982] hsr_slave_1: left promiscuous mode [ 1517.910534][T24209] usb 6-1: SerialNumber: syz [ 1517.932528][T24209] usb 6-1: config 0 descriptor?? [ 1518.827776][T27102] netlink: 'syz.1.5750': attribute type 10 has an invalid length. [ 1519.835464][T26183] Bluetooth: hci3: command tx timeout [ 1521.502981][T24209] usb 6-1: USB disconnect, device number 12 [ 1521.751074][T27048] chnl_net:caif_netlink_parms(): no params data found [ 1521.930260][T26183] Bluetooth: hci3: command tx timeout [ 1522.064936][T27126] bond7: entered allmulticast mode [ 1522.070408][T27126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1522.669906][T27144] binder: 27143:27144 unknown command 0 [ 1522.708038][T27144] binder: 27143:27144 ioctl c0306201 200000000080 returned -22 [ 1523.585925][T27166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5761'. [ 1523.647197][T27164] lo: entered allmulticast mode [ 1523.653185][T27164] tunl0: entered allmulticast mode [ 1523.694458][T27164] gre0: entered allmulticast mode [ 1523.802449][T27164] gretap0: entered allmulticast mode [ 1523.817753][T27164] erspan0: entered allmulticast mode [ 1523.837495][T27164] ip_vti0: entered allmulticast mode [ 1523.855255][T27164] ip6_vti0: entered allmulticast mode [ 1523.871116][T27164] sit0: entered allmulticast mode [ 1523.897629][T27164] ip6tnl0: entered allmulticast mode [ 1523.904100][T27164] ip6gre0: entered allmulticast mode [ 1523.916251][T27164] syz_tun: entered allmulticast mode [ 1523.928135][T27164] ip6gretap0: entered allmulticast mode [ 1523.945048][T27164] bridge0: entered allmulticast mode [ 1523.957315][T27164] vcan0: entered allmulticast mode [ 1523.968771][T27164] bond0: entered allmulticast mode [ 1523.992165][T26183] Bluetooth: hci3: command tx timeout [ 1524.014544][T27164] bond_slave_0: entered allmulticast mode [ 1524.026721][T27164] bond_slave_1: entered allmulticast mode [ 1524.045516][T27164] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1524.082862][T27164] team0: entered allmulticast mode [ 1524.122931][T27164] team_slave_0: entered allmulticast mode [ 1524.161741][T27164] team_slave_1: entered allmulticast mode [ 1524.168197][T27164] dummy0: entered allmulticast mode [ 1524.174149][T27164] nlmon0: entered allmulticast mode [ 1524.180591][T27164] caif0: entered allmulticast mode [ 1524.190343][T27164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1524.207047][T27172] netlink: 'syz.1.5763': attribute type 10 has an invalid length. [ 1524.221971][T27048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.284865][T27048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.309068][T27048] bridge_slave_0: entered allmulticast mode [ 1524.423665][T27048] bridge_slave_0: entered promiscuous mode [ 1524.575075][T27048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.711212][T27048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.775710][T27048] bridge_slave_1: entered allmulticast mode [ 1524.805848][T27048] bridge_slave_1: entered promiscuous mode [ 1525.015449][T27048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.072418][T27048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1525.289838][T27048] team0: Port device team_slave_0 added [ 1525.314419][T27048] team0: Port device team_slave_1 added [ 1525.625728][T27048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.674252][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1525.714542][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.760609][T27048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.871794][T27048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.991001][T27048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.091751][T24185] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1526.167056][T24180] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1526.186679][T27048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.331809][T24180] usb 6-1: device descriptor read/64, error -71 [ 1526.338173][T24185] usb 2-1: Using ep0 maxpacket: 32 [ 1526.348863][T27048] hsr_slave_0: entered promiscuous mode [ 1526.358885][T24185] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1526.374802][T24185] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.400606][T24185] usb 2-1: config 0 has no interface number 0 [ 1526.435949][T27048] hsr_slave_1: entered promiscuous mode [ 1526.592798][T24185] usb 2-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1526.638946][T24180] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1526.673034][T27048] debugfs: 'hsr0' already exists in 'hsr' [ 1526.719694][T27048] Cannot create hsr debugfs directory [ 1526.734510][T24185] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1526.770826][T24185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.851520][T24180] usb 6-1: device descriptor read/64, error -71 [ 1526.866705][T24185] usb 2-1: config 0 descriptor?? [ 1526.936099][T24185] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1526.999582][T24180] usb usb6-port1: attempt power cycle [ 1527.200021][T24185] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 1527.371542][T24180] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1527.392510][T24180] usb 6-1: device descriptor read/8, error -71 [ 1527.646726][T24180] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1527.712845][T24180] usb 6-1: device descriptor read/8, error -71 [ 1527.862134][T24180] usb usb6-port1: unable to enumerate USB device [ 1527.872690][T27228] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1528.128747][T27048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1528.190007][T27048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1528.274884][T27048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1528.380323][T27048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1528.420744][T27240] netlink: 'syz.0.5775': attribute type 10 has an invalid length. [ 1528.751390][T24185] usb 2-1: USB disconnect, device number 7 [ 1528.828470][T27258] fuse: Unknown parameter 'Vä' [ 1529.186523][T27048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.245223][T27266] netlink: 'syz.1.5778': attribute type 12 has an invalid length. [ 1529.313555][T27266] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5778'. [ 1529.350518][T27270] netlink: 'syz.1.5778': attribute type 12 has an invalid length. [ 1529.540406][T27270] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5778'. [ 1529.645682][T27048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.686578][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.693779][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.778168][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.785365][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.068917][T27278] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1530.079199][T27278] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1530.121765][T24180] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1530.277805][T24180] usb 6-1: Using ep0 maxpacket: 8 [ 1530.371315][T24180] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 1530.420275][T27048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.435925][T24180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.588745][T24180] usb 6-1: Product: syz [ 1530.600181][T24180] usb 6-1: Manufacturer: syz [ 1530.636132][T27048] veth0_vlan: entered promiscuous mode [ 1530.636587][T24180] usb 6-1: SerialNumber: syz [ 1530.742432][T24180] usb 6-1: config 0 descriptor?? [ 1530.745411][T27048] veth1_vlan: entered promiscuous mode [ 1530.776765][T24180] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 1530.877187][T24180] dvb-usb: bulk message failed: -22 (2/0) [ 1530.910736][T24180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1530.987132][T24180] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 1530.988119][T27275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5780'. [ 1531.010507][T27048] veth0_macvtap: entered promiscuous mode [ 1531.061317][T24180] usb 6-1: media controller created [ 1531.099136][T27048] veth1_macvtap: entered promiscuous mode [ 1531.187302][T27048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.209992][T24180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1531.268908][T27048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1531.281059][T24180] dvb-usb: bulk message failed: -22 (1/0) [ 1531.290027][T24180] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 1531.304566][T24180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1531.332301][T24180] dvb-usb: schedule remote query interval to 50 msecs. [ 1531.341337][T24180] dvb-usb: bulk message failed: -22 (2/0) [ 1531.349398][T24180] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 1531.399026][T24180] usb 6-1: USB disconnect, device number 17 [ 1531.449687][T24180] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 1531.579173][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.590410][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.636066][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.660615][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.880552][T27300] netlink: 'syz.0.5783': attribute type 11 has an invalid length. [ 1531.927228][T27300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1531.936853][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.967215][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.213713][T27308] gretap2: entered promiscuous mode [ 1532.374600][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.386511][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.702337][T24186] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1532.830616][T27329] netlink: 'syz.0.5789': attribute type 12 has an invalid length. [ 1532.857287][T27329] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5789'. [ 1533.061522][T24186] usb 2-1: Using ep0 maxpacket: 32 [ 1533.316829][T24186] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1533.341484][T24186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.359204][T24186] usb 2-1: config 0 has no interface number 0 [ 1533.377146][T24186] usb 2-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1533.493750][T24186] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1533.969038][T27354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5794'. [ 1533.988801][T27355] ptrace attach of "./syz-executor exec"[27048] was attempted by "./syz-executor exec"[27355] [ 1534.052201][T27354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5794'. [ 1534.112812][T24186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.562291][T24186] usb 2-1: config 0 descriptor?? [ 1534.762194][T24186] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1536.019367][T24186] snd-usb-audio 2-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 1536.372417][T24186] usb 2-1: USB disconnect, device number 8 [ 1536.708547][T27385] lo: entered allmulticast mode [ 1536.715518][T27385] tunl0: entered allmulticast mode [ 1536.721129][T27385] gre0: entered allmulticast mode [ 1536.740356][T27385] gretap0: entered allmulticast mode [ 1536.750000][T27385] erspan0: entered allmulticast mode [ 1536.899867][T27380] kernel profiling enabled (shift: 17) [ 1536.909919][T27380] netlink: 'syz.5.5795': attribute type 10 has an invalid length. [ 1536.918996][T27380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5795'. [ 1536.932457][T27385] ip_vti0: entered allmulticast mode [ 1536.938394][T27385] ip6_vti0: entered allmulticast mode [ 1536.949051][T27385] sit0: entered allmulticast mode [ 1537.038766][T27385] ip6tnl0: entered allmulticast mode [ 1537.056582][T27385] ip6gre0: entered allmulticast mode [ 1537.097135][T27385] syz_tun: entered allmulticast mode [ 1537.158358][T27385] ip6gretap0: entered allmulticast mode [ 1537.198621][T27385] bridge0: entered allmulticast mode [ 1537.276731][T27385] vcan0: entered allmulticast mode [ 1537.302655][T27385] bond0: entered allmulticast mode [ 1537.308851][T27385] bond_slave_0: entered allmulticast mode [ 1537.317634][T27385] bond_slave_1: entered allmulticast mode [ 1537.389778][T27385] team0: entered allmulticast mode [ 1537.412095][T27385] team_slave_0: entered allmulticast mode [ 1537.425021][T27392] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.5803'. [ 1537.435376][T27392] netlink: del zone limit has 4 unknown bytes [ 1537.456668][T27385] team_slave_1: entered allmulticast mode [ 1537.492531][T27385] dummy0: entered allmulticast mode [ 1537.518789][T27385] nlmon0: entered allmulticast mode [ 1537.580558][T27385] caif0: entered allmulticast mode [ 1537.589013][T27385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1537.622097][T27380] dummy0: left allmulticast mode [ 1537.630667][T27380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1537.719118][T27399] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1537.771522][T27401] block nbd0: Attempted send on invalid socket [ 1537.777826][T27401] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1538.026129][T27405] ucma_write: process 26 (syz.8.5806) changed security contexts after opening file descriptor, this is not allowed. [ 1539.741616][T24204] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1539.881749][T24204] usb 2-1: device descriptor read/64, error -71 [ 1540.009985][T27437] binder: 27436:27437 ioctl c0306201 200000000c40 returned -22 [ 1540.058969][T27437] binder: 27436:27437 ioctl c0d05605 2000000000c0 returned -22 [ 1540.141886][T24204] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1540.301499][T24204] usb 2-1: device descriptor read/64, error -71 [ 1540.436682][T24204] usb usb2-port1: attempt power cycle [ 1540.791714][T24204] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1540.814614][T24204] usb 2-1: device descriptor read/8, error -71 [ 1541.026021][T27447] program syz.5.5820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1541.051655][T24204] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1541.086506][T24204] usb 2-1: device descriptor read/8, error -71 [ 1541.205953][T24204] usb usb2-port1: unable to enumerate USB device [ 1542.815532][T27480] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1542.824692][T24204] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1543.141660][T24204] usb 9-1: Using ep0 maxpacket: 16 [ 1543.149833][T24204] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1543.231053][T24204] usb 9-1: config 8 has an invalid interface number: 132 but max is 0 [ 1543.313527][T24204] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.361031][T24204] usb 9-1: config 8 has no interface number 0 [ 1543.409469][T24204] usb 9-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.537440][T24204] usb 9-1: config 8 interface 132 has no altsetting 0 [ 1543.579592][T24204] usb 9-1: string descriptor 0 read error: -22 [ 1543.586040][T24204] usb 9-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 1543.609840][T24204] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.631024][T24204] usb-storage 9-1:8.132: USB Mass Storage device detected [ 1543.675230][T24204] usb-storage 9-1:8.132: Quirks match for vid 07cf pid 1001: a [ 1544.443179][T27513] netlink: 'syz.7.5832': attribute type 10 has an invalid length. [ 1544.452614][T27513] team0: Device veth1_vlan failed to register rx_handler [ 1544.531032][T24204] usb 9-1: USB disconnect, device number 2 [ 1544.719662][T27523] FAULT_INJECTION: forcing a failure. [ 1544.719662][T27523] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.895577][T27523] CPU: 1 UID: 0 PID: 27523 Comm: syz.8.5835 Not tainted syzkaller #0 PREEMPT(full) [ 1544.895604][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1544.895619][T27523] Call Trace: [ 1544.895628][T27523] [ 1544.895637][T27523] dump_stack_lvl+0x189/0x250 [ 1544.895668][T27523] ? __pfx____ratelimit+0x10/0x10 [ 1544.895689][T27523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1544.895711][T27523] ? __pfx__printk+0x10/0x10 [ 1544.895743][T27523] ? __pfx___might_resched+0x10/0x10 [ 1544.895761][T27523] ? fs_reclaim_acquire+0x7d/0x100 [ 1544.895783][T27523] should_fail_ex+0x414/0x560 [ 1544.895822][T27523] should_failslab+0xa8/0x100 [ 1544.895851][T27523] __kmalloc_noprof+0xcb/0x4f0 [ 1544.895875][T27523] ? kfree+0x4d/0x440 [ 1544.895894][T27523] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1544.895919][T27523] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1544.895940][T27523] ? tomoyo_domain+0xd9/0x130 [ 1544.895964][T27523] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1544.895991][T27523] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1544.896020][T27523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1544.896063][T27523] ? __lock_acquire+0xab9/0xd20 [ 1544.896112][T27523] ? __fget_files+0x2a/0x420 [ 1544.896134][T27523] ? __fget_files+0x2a/0x420 [ 1544.896151][T27523] ? __fget_files+0x3a0/0x420 [ 1544.896167][T27523] ? __fget_files+0x2a/0x420 [ 1544.896187][T27523] security_file_ioctl+0xcb/0x2d0 [ 1544.896216][T27523] __se_sys_ioctl+0x47/0x170 [ 1544.896242][T27523] do_syscall_64+0xfa/0x3b0 [ 1544.896263][T27523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1544.896283][T27523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.896304][T27523] ? clear_bhb_loop+0x60/0xb0 [ 1544.896326][T27523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.896345][T27523] RIP: 0033:0x7f862df8eba9 [ 1544.896363][T27523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.896382][T27523] RSP: 002b:00007f862ee12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.896404][T27523] RAX: ffffffffffffffda RBX: 00007f862e1d6180 RCX: 00007f862df8eba9 [ 1544.896420][T27523] RDX: 0000200000000a80 RSI: 0000000000008955 RDI: 0000000000000007 [ 1544.896433][T27523] RBP: 00007f862ee12090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.896447][T27523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.896460][T27523] R13: 00007f862e1d6218 R14: 00007f862e1d6180 R15: 00007f862e2ffa28 [ 1544.896491][T27523] [ 1545.141738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.177774][T27523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1545.681613][T24204] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1545.844303][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.850700][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.861576][T24204] usb 6-1: Using ep0 maxpacket: 16 [ 1545.879012][T24204] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 1545.929208][T24204] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1545.974614][T27533] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1546.012856][T24204] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1546.041667][T24204] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1546.091595][T24204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.135711][T24204] usb 6-1: config 0 descriptor?? [ 1547.127070][T27557] netlink: 'syz.0.5840': attribute type 15 has an invalid length. [ 1547.135255][T27557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1547.506164][ T30] audit: type=1326 audit(1757805051.619:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27560 comm="syz.8.5841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f862df8eba9 code=0x0 [ 1547.929417][T24204] usbhid 6-1:0.0: can't add hid device: -71 [ 1547.935708][T24204] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1547.950771][T24204] usb 6-1: USB disconnect, device number 18 [ 1548.349438][T27577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5843'. [ 1549.249055][T27596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5848'. [ 1549.319473][T24209] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1549.455966][T27605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1549.513529][T24209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.523883][T24209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1549.541761][T27603] netlink: 'syz.5.5849': attribute type 5 has an invalid length. [ 1549.542471][T24209] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1549.571798][T24209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1549.589799][T24209] usb 2-1: SerialNumber: syz [ 1549.926038][T24209] usb 2-1: 0:2 : does not exist [ 1550.055264][T24209] usb 2-1: USB disconnect, device number 13 [ 1550.099571][T23341] udevd[23341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.716906][T27626] bond7: entered promiscuous mode [ 1550.723292][T27626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1550.930763][T27633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1552.602793][T27665] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5858'. [ 1552.611897][T24180] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1552.677326][T27667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5860'. [ 1552.866827][T24180] usb 9-1: config index 0 descriptor too short (expected 69, got 36) [ 1552.892694][T24180] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.943730][T24180] usb 9-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1552.958966][T24180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.096910][T24180] usb 9-1: Product: syz [ 1553.111285][T24180] usb 9-1: Manufacturer: syz [ 1553.115963][T24180] usb 9-1: SerialNumber: syz [ 1553.181358][T24180] usb 9-1: config 0 descriptor?? [ 1553.199286][T24180] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1553.784857][T24186] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1553.945449][T24186] usb 2-1: Using ep0 maxpacket: 16 [ 1553.953844][T24186] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1553.966992][T24186] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.996224][T24186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.048225][T24186] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.059173][T24186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.074706][T24186] usb 2-1: Product: syz [ 1554.085024][T24186] usb 2-1: Manufacturer: syz [ 1554.098197][T24186] usb 2-1: SerialNumber: syz [ 1554.116898][T27683] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.5865'. [ 1554.129572][T27683] netlink: del zone limit has 4 unknown bytes [ 1554.155256][T24180] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1554.185532][T24180] gspca_pac7302 9-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1554.293694][T24180] usb 9-1: USB disconnect, device number 3 [ 1554.568262][T27676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.587713][T27676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.614037][T24186] usb 2-1: 0:2 : does not exist [ 1554.822845][T27695] netlink: 'syz.5.5867': attribute type 15 has an invalid length. [ 1554.831252][T27695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1555.269883][T24186] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1555.307863][T24186] usb 2-1: USB disconnect, device number 14 [ 1555.675175][T23342] udevd[23342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.984615][T27721] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.5876'. [ 1555.995015][T27721] netlink: del zone limit has 4 unknown bytes [ 1557.051843][T27739] gretap1: entered promiscuous mode [ 1557.641055][T24204] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 1557.650694][T24204] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 1557.689163][T24204] hid-generic 0000:0004:0000.001C: unknown main item tag 0x0 [ 1557.767320][T24204] hid-generic 0000:0004:0000.001C: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1557.898837][T27746] fido_id[27746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1558.374946][T27757] gretap1: entered promiscuous mode [ 1558.451980][T24185] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1558.532343][T27759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1558.628741][T27759] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1558.642644][T24185] usb 9-1: device descriptor read/64, error -71 [ 1558.677017][T27759] netlink: del zone limit has 4 unknown bytes [ 1558.892065][T24185] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1559.101807][T24185] usb 9-1: device descriptor read/64, error -71 [ 1559.213011][T24185] usb usb9-port1: attempt power cycle [ 1559.563552][T24185] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1559.595308][T24185] usb 9-1: device descriptor read/8, error -71 [ 1559.871912][T24185] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1560.022218][T24185] usb 9-1: device descriptor read/8, error -71 [ 1560.185667][T24204] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1560.205153][T27787] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5896'. [ 1560.472049][T24185] usb usb9-port1: unable to enumerate USB device [ 1560.510023][T24204] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1560.529360][T24204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.543033][T24204] usb 6-1: config 0 descriptor?? [ 1561.187035][T27770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5892'. [ 1561.431049][T27799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1561.731568][T24204] ath6kl: Failed to submit usb control message: -110 [ 1561.743195][T24204] ath6kl: unable to send the bmi data to the device: -110 [ 1561.932236][T24204] ath6kl: Unable to send get target info: -110 [ 1561.960695][T24204] ath6kl: Failed to init ath6kl core: -110 [ 1562.026094][T24204] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1562.132545][T27807] loop2: detected capacity change from 0 to 7 [ 1562.159061][T24204] usb 6-1: USB disconnect, device number 19 [ 1562.200268][T23341] Dev loop2: unable to read RDB block 7 [ 1562.288958][T23341] loop2: unable to read partition table [ 1562.396187][T23341] loop2: partition table beyond EOD, truncated [ 1562.485490][T27807] Dev loop2: unable to read RDB block 7 [ 1562.522321][T27807] loop2: unable to read partition table [ 1562.545549][T27807] loop2: partition table beyond EOD, truncated [ 1562.580954][T27807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1562.641253][T27812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1562.791706][T24204] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1563.009619][T24204] usb 6-1: config 0 has no interfaces? [ 1563.021060][T24204] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1563.049771][T24204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.106624][T24204] usb 6-1: Product: syz [ 1563.161785][T24204] usb 6-1: Manufacturer: syz [ 1563.188264][T24204] usb 6-1: SerialNumber: syz [ 1563.233333][T24204] usb 6-1: config 0 descriptor?? [ 1563.381721][T24185] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1563.543297][T27811] netlink: 'syz.5.5901': attribute type 10 has an invalid length. [ 1563.551521][T24185] usb 9-1: Using ep0 maxpacket: 8 [ 1563.558162][T24185] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.570716][T24185] usb 9-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1563.583805][T24180] usb 6-1: USB disconnect, device number 20 [ 1563.607358][T27831] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.5905'. [ 1563.614959][T24185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.638109][T24185] usb 9-1: config 0 descriptor?? [ 1563.649015][T24185] usbhid 9-1:0.0: can't add hid device: -22 [ 1563.658168][T24185] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 1564.026702][T27840] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1564.033142][T27840] syzkaller1: linktype set to 774 [ 1564.239712][T24185] usb 9-1: USB disconnect, device number 8 [ 1564.821595][T24185] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1565.090323][T27856] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1565.316568][T24185] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.329425][T24185] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1565.343915][T24185] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.361680][T24185] usb 9-1: config 0 descriptor?? [ 1565.416298][T24185] pwc: Askey VC010 type 2 USB webcam detected. [ 1565.819565][T24185] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1565.885773][T24185] pwc: recv_control_msg error -32 req 02 val 2700 [ 1565.958371][T24185] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1565.978032][T24185] pwc: recv_control_msg error -32 req 04 val 1000 [ 1565.994436][T24185] pwc: recv_control_msg error -32 req 04 val 1300 [ 1566.001923][T24185] pwc: recv_control_msg error -32 req 04 val 1400 [ 1566.008987][T24185] pwc: recv_control_msg error -32 req 02 val 2000 [ 1566.016451][T24185] pwc: recv_control_msg error -32 req 02 val 2100 [ 1566.023767][T24185] pwc: recv_control_msg error -32 req 04 val 1500 [ 1566.030942][T24185] pwc: recv_control_msg error -32 req 02 val 2500 [ 1566.193556][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5911'. [ 1566.239123][T27845] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5908'. [ 1566.432761][T24185] pwc: recv_control_msg error -71 req 02 val 2600 [ 1566.489880][T24185] pwc: recv_control_msg error -71 req 02 val 2900 [ 1566.529632][T24185] pwc: recv_control_msg error -71 req 02 val 2800 [ 1566.545731][T24185] pwc: recv_control_msg error -71 req 04 val 1100 [ 1566.554231][T24185] pwc: recv_control_msg error -71 req 04 val 1200 [ 1566.563045][T24185] pwc: Registered as video103. [ 1566.575632][T24185] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input89 [ 1566.702775][T24185] usb 9-1: USB disconnect, device number 9 [ 1566.915646][T27866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5913'. [ 1567.109865][T27868] netlink: 9896 bytes leftover after parsing attributes in process `syz.8.5914'. [ 1567.164008][T27869] netlink: del zone limit has 4 unknown bytes [ 1567.437754][T27875] netlink: 'syz.5.5917': attribute type 12 has an invalid length. [ 1567.487987][T27875] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1567.529759][T27877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.545567][T27878] netlink: 'syz.5.5917': attribute type 12 has an invalid length. [ 1567.553946][T27878] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1567.921520][T24204] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1567.960698][T27890] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.5922'. [ 1567.976852][T27890] netlink: del zone limit has 4 unknown bytes [ 1568.151617][T24204] usb 9-1: Using ep0 maxpacket: 16 [ 1568.162765][T24204] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1568.174752][T24204] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1568.190152][T24204] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1568.199891][T24204] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.211111][T24204] usb 9-1: Product: syz [ 1568.216726][T24204] usb 9-1: Manufacturer: syz [ 1568.286641][T24204] usb 9-1: SerialNumber: syz [ 1568.456744][T24204] usb 9-1: config 0 descriptor?? [ 1568.492010][T24204] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1568.512969][T24204] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1568.636572][T27898] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5925'. [ 1569.152890][T24204] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1569.160242][T24204] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1569.337770][T27905] gretap2: entered promiscuous mode [ 1569.911772][T24204] em28xx 9-1:0.0: AC97 command still being executed: not handled properly! [ 1569.923542][T24204] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1570.141677][T24209] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1570.301524][T24209] usb 2-1: Using ep0 maxpacket: 16 [ 1570.310269][T24209] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1570.341468][T24209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.390968][T24209] usb 2-1: Product: syz [ 1570.402416][T24209] usb 2-1: Manufacturer: syz [ 1570.421286][T24209] usb 2-1: SerialNumber: syz [ 1570.454586][T24209] usb 2-1: config 0 descriptor?? [ 1570.470093][T24209] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1570.680848][T24209] gspca_sn9c2028: read1 error -32 [ 1570.756504][T27913] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1570.952326][T24204] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1570.972282][T24204] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1570.984756][T24204] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1571.055882][T24209] gspca_sn9c2028: read1 error -71 [ 1571.064311][T24209] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1571.075447][T24204] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1571.082795][T24209] usb 2-1: USB disconnect, device number 15 [ 1571.093860][T27914] ptrace attach of "./syz-executor exec"[27048] was attempted by "./syz-executor exec"[27914] [ 1571.105987][T24204] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1571.690982][T27930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5933'. [ 1571.879535][T27930] vlan0: entered promiscuous mode [ 1571.885382][T27930] vlan0: entered allmulticast mode [ 1571.892569][T27930] hsr_slave_1: entered allmulticast mode [ 1572.692935][T24186] usb 9-1: USB disconnect, device number 10 [ 1573.651856][T24204] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1573.693476][T27954] input: syz1 as /devices/virtual/input/input90 [ 1573.811931][T24204] usb 6-1: Using ep0 maxpacket: 16 [ 1573.818457][T24204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.831627][T24204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1573.861662][T24204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1573.885081][T24204] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1573.925139][T27958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1574.022343][T24204] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1574.922786][T24204] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1574.941480][T24204] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1574.959706][T24204] usb 6-1: Manufacturer: syz [ 1575.057943][T24204] usb 6-1: config 0 descriptor?? [ 1576.305025][T27965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.342351][T27966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.361270][T27966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.814546][T24204] rc_core: IR keymap rc-hauppauge not found [ 1576.825375][T24204] Registered IR keymap rc-empty [ 1576.830769][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1576.865126][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1576.918685][T24204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1576.943363][T27971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5944'. [ 1576.946926][T24204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input91 [ 1577.011114][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.022405][T27971] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5944'. [ 1577.061688][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.071918][T27971] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1577.079735][T27971] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1577.086530][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.091615][T27971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1577.121312][T27971] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1577.136518][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5938'. [ 1577.174638][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.204366][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.251768][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.305346][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.334965][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.361643][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.391912][T24204] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1577.421311][T24204] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1577.432003][T24204] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1577.461825][T24204] usb 6-1: USB disconnect, device number 21 [ 1577.654268][T27982] ptrace attach of "./syz-executor exec"[16827] was attempted by "./syz-executor exec"[27982] [ 1577.668752][T27982] dns_resolver: Unsupported server list version (0) [ 1578.215372][T27995] binder: 27994:27995 ioctl 4008af7c 200000000480 returned -22 [ 1578.680854][T27999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1579.181516][T26183] Bluetooth: hci3: command 0x0c1a tx timeout [ 1579.187745][T26183] Bluetooth: hci4: command 0x0405 tx timeout [ 1579.889364][T28025] netlink: 9896 bytes leftover after parsing attributes in process `syz.5.5959'. [ 1579.922069][T28022] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5960'. [ 1580.072513][T28027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.158841][T28027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.235143][T28030] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5958'. [ 1580.619528][T28031] ptrace attach of "./syz-executor exec"[16827] was attempted by "./syz-executor exec"[28031] [ 1580.661121][T28027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1580.670541][T28027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.680227][T28027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.956531][T28033] netlink: 'syz.7.5961': attribute type 10 has an invalid length. [ 1580.988578][T28033] team0: left allmulticast mode [ 1581.001684][T28033] team_slave_0: left allmulticast mode [ 1581.021864][T28033] team_slave_1: left allmulticast mode [ 1581.046127][T28033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.077307][T28033] team0: entered allmulticast mode [ 1581.225380][T28033] team_slave_0: entered allmulticast mode [ 1581.271877][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 1581.278164][T28033] team_slave_1: entered allmulticast mode [ 1581.459443][T28033] bond0: (slave team0): Enslaving as an active interface with an up link [ 1581.754766][T28040] fuse: Unknown parameter 'f‰' [ 1582.151534][T24185] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1582.321801][T24185] usb 2-1: Using ep0 maxpacket: 32 [ 1582.346647][T24185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.411659][T24185] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1582.431152][T24185] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1582.441113][T24180] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1582.455222][T24185] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1582.501120][T24185] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1582.517481][T24185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.549153][T24185] usb 2-1: Product: syz [ 1582.554758][T24185] usb 2-1: Manufacturer: syz [ 1582.559451][T24185] usb 2-1: SerialNumber: syz [ 1582.621894][T24180] usb 6-1: Using ep0 maxpacket: 16 [ 1582.628626][T24180] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1582.639798][T24180] usb 6-1: config 129 has an invalid interface number: 145 but max is 0 [ 1582.675391][T24180] usb 6-1: config 129 has no interface number 0 [ 1582.695705][T24180] usb 6-1: config 129 interface 145 has no altsetting 0 [ 1582.711680][T28070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1582.745122][T24180] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 1582.754221][T24180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.783538][T24180] usb 6-1: Product: syz [ 1582.790869][T24180] usb 6-1: Manufacturer: syz [ 1582.797881][T24180] usb 6-1: SerialNumber: syz [ 1583.014252][T28054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.032129][T28054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.063983][T24180] usb 6-1: disable ehci-hcd to run US-144 [ 1583.074173][T24180] usb 6-1: USB disconnect, device number 22 [ 1583.110847][T28079] netlink: 9896 bytes leftover after parsing attributes in process `syz.7.5972'. [ 1583.354433][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 1584.509676][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5976'. [ 1584.985840][T24185] cdc_ncm 2-1:1.0: bind() failure [ 1585.016475][T24185] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1585.023723][T24185] cdc_ncm 2-1:1.1: bind() failure [ 1585.034816][T24185] usb 2-1: USB disconnect, device number 16 [ 1585.132900][T28105] input: syz1 as /devices/virtual/input/input92 [ 1585.175531][T28106] ptrace attach of "./syz-executor exec"[17700] was attempted by "./syz-executor exec"[28106] [ 1587.270792][T26183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1587.291800][T26183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1587.300255][T26183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1587.311856][T26183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1587.319568][T26183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1587.462513][T28124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5987'. [ 1587.478499][T28124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5987'. [ 1587.700808][T24268] syz_tun (unregistering): left promiscuous mode [ 1588.131956][T25714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.405736][T25714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.031702][T24204] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1589.093165][T25714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.189814][T28126] chnl_net:caif_netlink_parms(): no params data found [ 1589.211965][T24204] usb 9-1: Using ep0 maxpacket: 8 [ 1589.237352][T24204] usb 9-1: config 2 has an invalid interface number: 99 but max is 3 [ 1589.259266][T24204] usb 9-1: config 2 has an invalid interface number: 52 but max is 3 [ 1589.321041][T24204] usb 9-1: config 2 has an invalid interface number: 103 but max is 3 [ 1589.352141][T26183] Bluetooth: hci5: command tx timeout [ 1589.386661][T24204] usb 9-1: config 2 has an invalid interface number: 178 but max is 3 [ 1589.407508][T25714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.424626][T24204] usb 9-1: config 2 has an invalid interface number: 50 but max is 3 [ 1589.434117][T24204] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1589.447514][T24204] usb 9-1: config 2 has 6 interfaces, different from the descriptor's value: 4 [ 1589.466502][T24204] usb 9-1: config 2 has no interface number 0 [ 1589.561942][T24180] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1589.567873][T24204] usb 9-1: config 2 has no interface number 2 [ 1589.567896][T24204] usb 9-1: config 2 has no interface number 3 [ 1589.567912][T24204] usb 9-1: config 2 has no interface number 4 [ 1589.725878][T28126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.733370][T24180] usb 2-1: Using ep0 maxpacket: 8 [ 1589.739303][T28126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.746511][T24186] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1589.759972][T24180] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1589.776553][T24180] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1589.787943][T24180] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1589.817402][T28126] bridge_slave_0: entered allmulticast mode [ 1589.823756][T24180] usb 2-1: Product: syz [ 1589.835440][T24180] usb 2-1: Manufacturer: syz [ 1589.850405][T28126] bridge_slave_0: entered promiscuous mode [ 1589.856366][T24180] usb 2-1: SerialNumber: syz [ 1589.915650][T24204] usb 9-1: config 2 has no interface number 5 [ 1589.929205][T28126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.951986][T24186] usb 6-1: Using ep0 maxpacket: 32 [ 1589.960720][T24186] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 1589.970119][T24186] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.971581][T24204] usb 9-1: config 2 interface 1 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1589.996734][T28126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.009101][T24186] usb 6-1: config 0 has no interface number 0 [ 1590.028142][T28126] bridge_slave_1: entered allmulticast mode [ 1590.037034][T24186] usb 6-1: config 0 interface 136 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1590.072350][T24204] usb 9-1: config 2 interface 1 altsetting 2 bulk endpoint 0xE has invalid maxpacket 1024 [ 1590.081821][T28126] bridge_slave_1: entered promiscuous mode [ 1590.107433][T24186] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1590.153577][T24186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.177147][T24204] usb 9-1: config 2 interface 1 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1590.223245][T24180] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 1590.255418][T24204] usb 9-1: config 2 interface 1 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1590.256303][T24180] visor 2-1:1.0: probe with driver visor failed with error -110 [ 1590.293068][T24204] usb 9-1: config 2 interface 1 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1590.296649][T24186] usb 6-1: config 0 descriptor?? [ 1590.702218][T24204] usb 9-1: config 2 interface 1 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1590.713053][T28145] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1590.713080][T28145] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1590.713131][ C1] ------------[ cut here ]------------ [ 1590.713307][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 1590.713419][ C1] WARNING: CPU: 1 PID: 24204 at kernel/workqueue.c:2256 __queue_work+0xd38/0xfb0 [ 1590.713454][ C1] Modules linked in: [ 1590.713510][ C1] CPU: 1 UID: 0 PID: 24204 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 1590.713533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1590.713549][ C1] Workqueue: usb_hub_wq hub_event [ 1590.713578][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 1590.713601][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a 9e 35 00 90 0f 0b 90 e9 dd fc ff [ 1590.713619][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 1590.713638][ C1] RAX: b72dbdb334cda200 RBX: 0000000000000100 RCX: ffff88802d295a00 [ 1590.713655][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1590.713668][ C1] RBP: 1ffff1100ac83838 R08: ffffffff8e12e2c3 R09: 1ffffffff1c25c58 [ 1590.713686][ C1] R10: dffffc0000000000 R11: fffffbfff1c25c59 R12: dffffc0000000000 [ 1590.713703][ C1] R13: ffff88805cee4988 R14: 0000000000000008 R15: ffff88805641c178 [ 1590.713720][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 1590.713739][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.713754][ C1] CR2: 000000110c365401 CR3: 000000003d9c6000 CR4: 00000000003526f0 [ 1590.713774][ C1] DR0: 0000000000000000 DR1: 0000000000000079 DR2: 0000000000000000 [ 1590.713789][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1590.713803][ C1] Call Trace: [ 1590.713812][ C1] [ 1590.713835][ C1] call_timer_fn+0x17b/0x5f0 [ 1590.713866][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1590.713890][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1590.713926][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1590.713967][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1590.713993][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1590.714020][ C1] __run_timer_base+0x646/0x860 [ 1590.714047][ C1] ? ktime_get+0x3e/0x1f0 [ 1590.714084][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1590.714110][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1590.714153][ C1] run_timer_softirq+0xb7/0x180 [ 1590.714181][ C1] handle_softirqs+0x283/0x870 [ 1590.714207][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1590.714235][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1590.714262][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1590.714291][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1590.714313][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1590.714344][ C1] irq_exit_rcu+0x9/0x30 [ 1590.714363][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1590.714395][ C1] [ 1590.714403][ C1] [ 1590.714414][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1590.714437][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1590.714462][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 4a 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 4a 1f 00 eb 06 e8 ff 49 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a bc 82 00 48 8b 1b 48 8b 44 24 [ 1590.714481][ C1] RSP: 0018:ffffc900154eece0 EFLAGS: 00000287 [ 1590.714500][ C1] RAX: 1ffffffff1d36977 RBX: ffffffff8e9b4bb8 RCX: 0000000000100000 [ 1590.714517][ C1] RDX: ffffc9001a45d000 RSI: 00000000000bd67a RDI: 00000000000bd67b [ 1590.714532][ C1] RBP: ffffc900154eee30 R08: ffffffff8fa3a537 R09: 1ffffffff1f474a6 [ 1590.714549][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: dffffc0000000000 [ 1590.714566][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b4b60 [ 1590.714603][ C1] ? console_flush_all+0x13a/0xc40 [ 1590.714635][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1590.714672][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1590.714703][ C1] console_unlock+0xc4/0x270 [ 1590.714729][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1590.714756][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1590.714788][ C1] vprintk_emit+0x5b7/0x7a0 [ 1590.714814][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1590.714840][ C1] ? __pfx_snprintf+0x10/0x10 [ 1590.714882][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1590.714920][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1590.714964][ C1] dev_printk_emit+0xe0/0x130 [ 1590.715001][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1590.715036][ C1] ? __dev_printk+0x131/0x190 [ 1590.715066][ C1] _dev_notice+0x10a/0x160 [ 1590.715094][ C1] ? _dev_notice+0x10a/0x160 [ 1590.715123][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1590.715151][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1590.715181][ C1] ? rcu_is_watching+0x15/0xb0 [ 1590.715204][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1590.715231][ C1] ? usb_get_configuration+0x1c4f/0x52e0 [ 1590.715259][ C1] usb_get_configuration+0x3098/0x52e0 [ 1590.715337][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1590.715373][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.715405][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.715429][ C1] usb_new_device+0x146/0x16f0 [ 1590.715462][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1590.715489][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1590.715518][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.715547][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.715572][ C1] hub_event+0x2958/0x4a20 [ 1590.715652][ C1] ? __pfx_hub_event+0x10/0x10 [ 1590.715680][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.715708][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.715738][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.715758][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.715782][ C1] process_scheduled_works+0xae1/0x17b0 [ 1590.715833][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1590.715872][ C1] worker_thread+0x8a0/0xda0 [ 1590.715926][ C1] kthread+0x70e/0x8a0 [ 1590.715956][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1590.715977][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.716006][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.716036][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.716056][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.716084][ C1] ret_from_fork+0x436/0x7d0 [ 1590.716109][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1590.716138][ C1] ? __switch_to_asm+0x39/0x70 [ 1590.716164][ C1] ? __switch_to_asm+0x33/0x70 [ 1590.716190][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.716217][ C1] ret_from_fork_asm+0x1a/0x30 [ 1590.716260][ C1] [ 1590.716272][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1590.716287][ C1] CPU: 1 UID: 0 PID: 24204 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 1590.716312][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1590.716326][ C1] Workqueue: usb_hub_wq hub_event [ 1590.716354][ C1] Call Trace: [ 1590.716363][ C1] [ 1590.716372][ C1] dump_stack_lvl+0x99/0x250 [ 1590.716398][ C1] ? __asan_memcpy+0x40/0x70 [ 1590.716423][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1590.716448][ C1] ? __pfx__printk+0x10/0x10 [ 1590.716491][ C1] vpanic+0x281/0x750 [ 1590.716515][ C1] ? __pfx__printk+0x10/0x10 [ 1590.716541][ C1] ? __pfx_vpanic+0x10/0x10 [ 1590.716565][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1590.716607][ C1] panic+0xb9/0xc0 [ 1590.716630][ C1] ? __pfx_panic+0x10/0x10 [ 1590.716670][ C1] __warn+0x31b/0x4b0 [ 1590.716691][ C1] ? __queue_work+0xd38/0xfb0 [ 1590.716715][ C1] ? __queue_work+0xd38/0xfb0 [ 1590.716736][ C1] report_bug+0x2be/0x4f0 [ 1590.716755][ C1] ? __queue_work+0xd38/0xfb0 [ 1590.716778][ C1] ? __queue_work+0xd38/0xfb0 [ 1590.716799][ C1] ? __queue_work+0xd3a/0xfb0 [ 1590.716820][ C1] handle_bug+0x84/0x160 [ 1590.716845][ C1] exc_invalid_op+0x1a/0x50 [ 1590.716869][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1590.716890][ C1] RIP: 0010:__queue_work+0xd38/0xfb0 [ 1590.716917][ C1] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 f3 10 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 20 e1 89 8b 4c 89 fa e8 99 39 f9 ff 90 <0f> 0b 90 90 e9 1a f5 ff ff e8 2a 9e 35 00 90 0f 0b 90 e9 dd fc ff [ 1590.716935][ C1] RSP: 0018:ffffc90000a08b10 EFLAGS: 00010046 [ 1590.716954][ C1] RAX: b72dbdb334cda200 RBX: 0000000000000100 RCX: ffff88802d295a00 [ 1590.716970][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1590.716984][ C1] RBP: 1ffff1100ac83838 R08: ffffffff8e12e2c3 R09: 1ffffffff1c25c58 [ 1590.717000][ C1] R10: dffffc0000000000 R11: fffffbfff1c25c59 R12: dffffc0000000000 [ 1590.717017][ C1] R13: ffff88805cee4988 R14: 0000000000000008 R15: ffff88805641c178 [ 1590.717062][ C1] call_timer_fn+0x17b/0x5f0 [ 1590.717091][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1590.717114][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1590.717142][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1590.717180][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1590.717206][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1590.717231][ C1] __run_timer_base+0x646/0x860 [ 1590.717258][ C1] ? ktime_get+0x3e/0x1f0 [ 1590.717294][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1590.717320][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1590.717362][ C1] run_timer_softirq+0xb7/0x180 [ 1590.717391][ C1] handle_softirqs+0x283/0x870 [ 1590.717416][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1590.717443][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1590.717470][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1590.717498][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1590.717519][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1590.717549][ C1] irq_exit_rcu+0x9/0x30 [ 1590.717568][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1590.717600][ C1] [ 1590.717608][ C1] [ 1590.717618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1590.717639][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1590.717664][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 4a 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 4a 1f 00 eb 06 e8 ff 49 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 8a bc 82 00 48 8b 1b 48 8b 44 24 [ 1590.717683][ C1] RSP: 0018:ffffc900154eece0 EFLAGS: 00000287 [ 1590.717701][ C1] RAX: 1ffffffff1d36977 RBX: ffffffff8e9b4bb8 RCX: 0000000000100000 [ 1590.717716][ C1] RDX: ffffc9001a45d000 RSI: 00000000000bd67a RDI: 00000000000bd67b [ 1590.717732][ C1] RBP: ffffc900154eee30 R08: ffffffff8fa3a537 R09: 1ffffffff1f474a6 [ 1590.717748][ C1] R10: dffffc0000000000 R11: fffffbfff1f474a7 R12: dffffc0000000000 [ 1590.717765][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b4b60 [ 1590.717801][ C1] ? console_flush_all+0x13a/0xc40 [ 1590.717833][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1590.717869][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1590.717901][ C1] console_unlock+0xc4/0x270 [ 1590.717932][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1590.717959][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1590.717990][ C1] vprintk_emit+0x5b7/0x7a0 [ 1590.718016][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1590.718042][ C1] ? __pfx_snprintf+0x10/0x10 [ 1590.718083][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1590.718113][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1590.718156][ C1] dev_printk_emit+0xe0/0x130 [ 1590.718192][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1590.718227][ C1] ? __dev_printk+0x131/0x190 [ 1590.718256][ C1] _dev_notice+0x10a/0x160 [ 1590.718283][ C1] ? _dev_notice+0x10a/0x160 [ 1590.718312][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1590.718339][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1590.718370][ C1] ? rcu_is_watching+0x15/0xb0 [ 1590.718392][ C1] ? trace_kmalloc+0x1f/0xd0 [ 1590.718417][ C1] ? usb_get_configuration+0x1c4f/0x52e0 [ 1590.718445][ C1] usb_get_configuration+0x3098/0x52e0 [ 1590.718521][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1590.718557][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.718587][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.718611][ C1] usb_new_device+0x146/0x16f0 [ 1590.718642][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1590.718669][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1590.718697][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.718727][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.718751][ C1] hub_event+0x2958/0x4a20 [ 1590.718830][ C1] ? __pfx_hub_event+0x10/0x10 [ 1590.718858][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.718886][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.718919][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.718939][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1590.718963][ C1] process_scheduled_works+0xae1/0x17b0 [ 1590.719012][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1590.719051][ C1] worker_thread+0x8a0/0xda0 [ 1590.719098][ C1] kthread+0x70e/0x8a0 [ 1590.719127][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1590.719149][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.719176][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.719206][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1590.719225][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.719252][ C1] ret_from_fork+0x436/0x7d0 [ 1590.719276][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1590.719304][ C1] ? __switch_to_asm+0x39/0x70 [ 1590.719330][ C1] ? __switch_to_asm+0x33/0x70 [ 1590.719355][ C1] ? __pfx_kthread+0x10/0x10 [ 1590.719383][ C1] ret_from_fork_asm+0x1a/0x30 [ 1590.719425][ C1] [ 1590.719663][ C1] Kernel Offset: disabled