last executing test programs: 7m28.034806906s ago: executing program 1 (id=120): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8) shutdown(r0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x4d, 0x7, 0x1, 0x0, "34ef29aac21325cb98e43c3dccb1d1db72e88326608349194184b01a6848ad8814fad4f2ab815c8cbbd3db31445b178e124c10040e05fc57c795b8f0e84bb01708834892ab46129a97"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x100800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000003c0)=@t={0x81, 0x8, 0x6, 0x4}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m27.861992696s ago: executing program 1 (id=121): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb250d6707540288a83e0088641100feff44080283"], 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x96) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 7m27.691620656s ago: executing program 1 (id=123): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{0x51e, 0x1}, 0x0, 0x0, 0x8, 0xffff, 0xa8, 0x4, 0x1d, 0x100000000}}], 0x58, 0x20048050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 7m24.591985864s ago: executing program 1 (id=131): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x245) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="a0fedf9c81c1431d534ac3672b37790d53cc04b010f4033e1ffe858e309c6b277c5a6f113b8034e57180a297929e0956a72309bcb0a8c164cd3b4300ea2a41c0b75f86bf05f8e8cd6e72f12783950046ffed6e64e06aab062e7671dbeef4220127c212f805545f30558b4b5b6463fe938a02469ee9b5e9a7e6fe9ecc1d7a5f2cefcfdfa9abc4b7284d6906a0055c253172ec6fc5c99fe8748ed4ebca75155c437cfa3f6fefc26f", 0xa7) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7m24.192073049s ago: executing program 1 (id=132): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r3 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'nr0\x00'}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r4, 0x1, 0x0, 0x3}) (async, rerun: 32) r5 = userfaultfd(0x801) (rerun: 32) mremap(&(0x7f0000053000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000079f000/0x4000)=nil) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004000000000000000000e0000002000000000000000000000000e80011"], 0x154}}, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) landlock_restrict_self(r0, 0x0) (async, rerun: 32) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0x5421, 0x0) 7m23.936843076s ago: executing program 1 (id=135): syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x6}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000e00)="f269370551d49688d09f4356fa3df34594f6cb2a975bb0ca743dbeb6fc464d9a694fa749527f8efda95ad307beeab486a97ed4f1d195efbd4742612f485b7b38edf67558e2f76f7e4fd845aa6644dee484c195ab8d782f6eff380c35cbb2dd0949a93c5e7fc00ade2e57fe241b21d26947069a6b1d3b0f39a1a82919728287cb0c7fd710b8f564ac790c6442872eab343837d0feeef99166925a205cd3489c59ef26423ece8eb181f13d0ff20e9ba8e201b9402195fd09fd1e0002042fa5e833babd4229974966f0b06b51ce8fd4f3f6b90c81cc40762f159a97652ffd010322918746ef92d6151506929df3dd081f4f6066013a4b135a0aa8331b8326d2963ec2869980cc471afa232b5d4375af86b591315cee454ef8c28eb9ab346ac837999684d9a00988cd7aac964b47732294452a16ada8347ee0987cc397af5f3dddcec5bd0ce249dce0a8288f14dce16020d94a5162f57610f91b47fd235b1ae1dee21e49bbba62d5a007bcf1baf9e1200063d851bdf49bbb8dceec45b15a2ef9d7a1078e832151ac5d380f007ec96549659edcf9a415d6e1d62c6e46a55c6e2daf40326a61a4328928ce0dae1d4f1981850bab0b5785f0c69cff95d400064e819b7e957e0715874c6ef6374097d57efa8b147099ea62cffcbe3ce20e787108bce1df28aad2d4fb4775702e022462ac42a5d81b3212e74e434b9c214e5e3da51a6bcbb97fa308e37ca2a9e2d2fe62910cd85cab50c3d490cb5c6bd38109c5e228444c2f6caf9ef47f7085c3c98e31810b3781a1121e74f7ba9069a2e53e167e8b85368fa56295da478c4d07afd14ba0d9ea680e0e86adab12190ea6dd5624474fb912428256b3c90d99cabb8b531e980e2772d9e974531612a014447aa7b7402eba69b2809a107329b93728bf4c7044e37f8120dc7f55b7406aa47a712fc725e18253945252860d465f2504b4f10ba04d113402c816ee1d61f7280719e3e901f68acfb4e86ad646fba5ca5693f81b2821eae3842fea255197860f9e615a095805c6979448aaa25734a938494750ffa0b4f11917f8a8c0cd8dad07cb4e5ef8aa489b95fe5e71e175ffc53dd931416dd94dfc6c84faa13905ed79c0a9e4d72d087a3f9319ed7a5a1ef6bb0dd7244f999ad61ffd59b139f01424950a1d28f98b33842dc809e702b14b0cd096fc40d91c1e9edbe69d91dfada8345134802232f81d3718adeea78e52f4c60c3c3a0420cbd3cd054a449e719c02c2cf288366bfbde6d0a8bdf7b2897ddbe48c4caa90c21bdad574e5806028cf8e54c235fac06eacad22b1453e2cbec93198e992348f4d102745bacca5f748c8970661a623280f0ced7e2f2f7dbd8278c4bd68b419c113c409025a632072dd0592d3c9910f08ed261400c3f17108513bd2afcf960f1d2ac052bea4a291395d81832e60177feea4bf2d4ff42383789dda49f65bbbb5e89e777a305447a155e362a812fe5b11d9378fee74cc92eb8c0f298574e3b10140ba5528938fb02d034f4a57dd339e1b4f9658557bb547a82b8535378994c30c428aa5ced85c49fb1cce51f596a9f1e55a7d7f36896994664099c3294bdd34077e84c304f693c3feb17c1e1e5032dfbd43ca03f4181935b7f43d661b734792f1119840c81d5249d0152781376b4d2f32e9a741a65f0c038ae2f503161ba1c9e5cc0b0f86978abf53c5da6adb4aa6906f8ab39460e158fd4ffbaa11d530d11c327646a81a14f10919f111998a65d2ac2fc17854f3c46c0ce3bb83502e4c0af2505c7832099381e4cef15d087c3c534a073fe54fa1d41139f5e3c06ac7e25464cc70fa440c3f83f6ec9a67bb3c401e62d599d1a06e05ff09300b2c295d4ddc55ee09f560b1d85850c1d5b161c00c8481125b49125bee2a23f8d7a6a67e00167de56c4f360c4695cc4051eb52c2e5915f126a3b35ee6a6e5ba76dfe4451bbd3832226c857cc32f6ee8e07799fb0a30b8719deac8c3e4489acb0780c9a15d95d09040ddc65d9141673e6f1e4518ab07d65baeb9dcbc5f6e65c31d3c6728d07024a700b05c5e08146a9946a909e37675022eb17c429469e447867e117ce30e786e09590568761662c9c9cc098add3a5595483f1342d78c3d2e8bca36fed7d17b17d3df2dc522a68a9ec6d0c8a12a5f18204b3bf082555bbd9bf108cba8ea066ce87d955500c955ca1b6303dac57712989778ddc7de8c33c6e01b46f122b79a4f53724e85edba2c8681f7c0d10befc27deec5ddc30096074caca581211831090a3949f3d1b9cd0ff91bc5c565829d5df18956c892b7c85016a1945de2c34491ea04748b1e2b56543b10fb18acfa6575016e55d5ab6b6cb99c4e27a9e30ff1494540cc7d333d420cdf4b7b000c26378497779599a6632e08e5bbe9e6c261cdb1f748aa745906ba42240e279ff24bb0937f9e8a4ee8a3b4f4915acea2e2eb9e9159c57a170dac91fda62432ae300361f63c744235f934b9f7b9ce490d926b3201b384b661b32fd4bca0ca2fee324a759cb46e466e43382b2366c34cf630fa12e47ba67d1bece8ebddf7a2c84ebf695d946f73e128de9b0eeed5af0b2da4e82884246bbedd38498fcb54688f2c6089c904b5124f89c3d529f0ed54cdb005e3f0b071a2f49d60e3a9de15899bbb51b8dbf64daaad3848dbd70e23886a01dc0200c2944e40666ce38bb09f857b3ac996875678175e01a5151ba644ce21addb42df334a604ef52ba678f24e986b72bfff00c9815676811e58fc34af1ec8e56a641638ec65de5a8d17379765b9c108abfe9016c7e87f5e27b7fd5127ee74f77447576dcba1b0f6d45576e4638a3b364cedf5df59cb5354dfc190da98613bb367e150f7d6dcb52ffc46d5fb6ef82d5752bb0649e81f33604e7f8f431263d75", 0x801}, {0x0}, {&(0x7f0000000d40)="be1f118e9c46acbf3ea65f0d4455facf2c44c045946b84cdecf3ac7c6b4f826a0ecea25307927ff268e2327e2cd1153c54fa5cc706e09c531ab150b2309503c7e8102f927b79bc28e048906e70e993188e06fd21b14fe5403af1ad78c2f440215941e6b02c0050f8309648d3e269635b400c4eb0e9265ae6cf202a0a2e64b1daef0b1a35ce501511160b5928e12f30675f0f43511af730f120891ddb552274db25cf", 0xa2}], 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x80, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x2120}, {r0, 0x944a}], 0x2, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060080"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc050) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f00000001c0)="dc61c5bbd75c35872ff6af091a5635a4b198d39864f07aff42d2bae485ea2caa03442373675885a17e5f8ef569decb5a6058c1bf095b3e815d95851c2907403709d77a5fb36394bcdb01eefc811ca4605a47680c9c3676225085ad183411553000032ed87d8aadc6020c69f083520423a13042a101d07bb70c716852874180ef5a51cd91af15c774dc40cad7e59d71e0d185513ae8337aa2c9b853918b393ce19ce96628072fb8ff81", 0xa9, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 7m23.360170578s ago: executing program 32 (id=135): syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x6}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000e00)="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", 0x801}, {0x0}, {&(0x7f0000000d40)="be1f118e9c46acbf3ea65f0d4455facf2c44c045946b84cdecf3ac7c6b4f826a0ecea25307927ff268e2327e2cd1153c54fa5cc706e09c531ab150b2309503c7e8102f927b79bc28e048906e70e993188e06fd21b14fe5403af1ad78c2f440215941e6b02c0050f8309648d3e269635b400c4eb0e9265ae6cf202a0a2e64b1daef0b1a35ce501511160b5928e12f30675f0f43511af730f120891ddb552274db25cf", 0xa2}], 0x3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x80, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x2120}, {r0, 0x944a}], 0x2, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060080"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc050) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f00000001c0)="dc61c5bbd75c35872ff6af091a5635a4b198d39864f07aff42d2bae485ea2caa03442373675885a17e5f8ef569decb5a6058c1bf095b3e815d95851c2907403709d77a5fb36394bcdb01eefc811ca4605a47680c9c3676225085ad183411553000032ed87d8aadc6020c69f083520423a13042a101d07bb70c716852874180ef5a51cd91af15c774dc40cad7e59d71e0d185513ae8337aa2c9b853918b393ce19ce96628072fb8ff81", 0xa9, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 4m43.257092313s ago: executing program 3 (id=603): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x8000000, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) 4m43.01546595s ago: executing program 3 (id=604): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000340)={0xfffffffc, 0x4, 0x1}) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) (async) socket(0x200000100000011, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6}, 0x94) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_DEVICE_INFO(r6, 0xc1007c00, &(0x7f0000000080)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x244}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') (async) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') writev(r11, &(0x7f0000000000), 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) 4m42.735629401s ago: executing program 3 (id=607): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000017c0)={0x2, 0x0, {&(0x7f00000005c0)=""/21, 0x15, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7880, 0x7, 0x8, 0x4b, {{0x26, 0x4, 0x0, 0x2, 0x98, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x5, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@empty, 0x7}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7ff}, {@loopback, 0x5}, {@broadcast, 0x5}]}, @lsrr={0x83, 0x13, 0x75, [@local, @local, @rand_addr=0x64010100, @remote]}, @ssrr={0x89, 0x23, 0xc3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @empty, @rand_addr=0x64010101]}, @noop, @ssrr={0x89, 0xf, 0xc6, [@local, @empty, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x6, 0xf, 0x9, 0x44, @local, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x7, 0xca, 0x3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000480001002dbd7000fcdbdf250a002000", @ANYRES32, @ANYBLOB="040000001400010020010000000000000000000000000001080002"], 0x68}}, 0x460400e4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000017c0)={0x2, 0x0, {&(0x7f00000005c0)=""/21, 0x15, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) (async) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) (async) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7880, 0x7, 0x8, 0x4b, {{0x26, 0x4, 0x0, 0x2, 0x98, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x5, [{@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1f}}, {@empty, 0x7}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7ff}, {@loopback, 0x5}, {@broadcast, 0x5}]}, @lsrr={0x83, 0x13, 0x75, [@local, @local, @rand_addr=0x64010100, @remote]}, @ssrr={0x89, 0x23, 0xc3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @empty, @rand_addr=0x64010101]}, @noop, @ssrr={0x89, 0xf, 0xc6, [@local, @empty, @broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x6, 0xf, 0x9, 0x44, @local, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x7, 0xca, 0x3}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="68000000480001002dbd7000fcdbdf250a002000", @ANYRES32, @ANYBLOB="040000001400010020010000000000000000000000000001080002"], 0x68}}, 0x460400e4) (async) 4m42.270073618s ago: executing program 3 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4m41.265880102s ago: executing program 3 (id=613): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bdb3fe989122e65ed40000", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfcf, 0x1}, 0x8) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 4m40.93191544s ago: executing program 3 (id=617): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r4, 0x47, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x2}, &(0x7f0000000500)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x54, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4048840) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@delchain={0x6cc, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x0, 0x5}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x69c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_ACT={0x66c, 0x3, [@m_connmark={0x198, 0x14, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x10, 0x7, 0x1, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xac, 0x7, 0x7f3, 0x5}, 0xfdd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x0, 0x4, 0x40c2, 0x9a40}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x20000000, 0x4, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x4, 0x4, 0x6, 0x1}, 0xf9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x7, 0x1, 0x401}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x4, 0xb, 0x6e549d90, 0xc}, 0xe0d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x800, 0xffffffffffffffff, 0xef0f, 0x1}, 0x5}}]}, {0x86, 0x6, "33cb7c5b1c3945dd5a689c179745dad58795569f9a99a2ddf1668c50208d533339550ddaddb5ddd41e986e404d83b4c055fa7b53376a43323cb1fe084334537e6d1ed8086729df43c8e0aadc5ffce3c9c9a54f54818e3aea3780be7ad49de3ba5200c21d7790ae6781d74a14bcd895a3dd48b38b93afb5534abee984ae92241fe57d"}, {0xc}, {0xc}}}, @m_ct={0xf8, 0x18, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "87e423fa95a3a324e31218b10b486ae3"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0xa8, 0x6, "8ae1ad687a07b2f7c72a1813aa486b9c767448c4863224cc721eeabc3012865621adfd452e5648245644307ced7f47575dee3c13631627f26f8b38aeb313ac9713cc112982cf2a7716d3d6e68c5335613c1a7f2c2ab1a63f8b43faa2fac8a86bd32e00367ee5088ca9be5dd3ac7838a456c9a80668d7751b35f0996726f685b01f518a9f496980c35e87b40cc0562b64a26ea2e43a3668f48d29b08347136756ce12ee25"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1a0, 0x10, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x401, 'security\x00'}}, @TCA_IPT_INDEX={0x8, 0x3, 0x54}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xc5, 0x6, "122f28d02be26ef0fc0275023dd6873b59077de57b544a281987a2654200bc4622ce0231517847238d965b75b4b5f08969fd0aa25bc2de40c204a9d68e7fce275be175106efc340055f6aec81c95832b042a7d1a72ecd2edec601601bbb7ce540bd8e15221b4fefa675ea22aa7f184e3ecb48edae2d045053486cc3e853a2a140bef8ae4c94a1ce9f058bd5a620fb28eaf9cb50db8fef3966922f8dbbab8ec295f80dd6850d667ad6ebc822937b08af76f054405eba6ea7cfa1d6c61b899f343a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x13c, 0xd, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6e54, 0xffffffffffffffff, 0x4bf9}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xff, 0x3, 0x10000, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x7, 0x3}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3e2, 0x9, 0x4, 0x8000, 0x3}, 0x3}}]}, {0x9b, 0x6, "338586c312c455c487bd90e0f4bb1b595b13e064762b3bc0eba1e1228f6144947077d076cced5e8d0d0dc8801a0bbace8cf811abfd16e09c8b0f46f3d05b382f0ff9763d14029d6c3f56500ed0b3a850cb2dd15925b0fd89304cc00aa48c82a08189151fe218830d392c2c639e6935c35d7fa330f62295bedaca3e7fba01cf29141c7d2a82d55592b81628da84c57f9ddd11980f218c69"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xfc, 0x2, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xb9, 0x6, "9248f85541edf1de6943b32aad66a5e327a0afe77f104730cc3ad747b1c9a7a181bbc468bb048ca352140cf9e69873cdffb352628c51c2a758af769b3a26e6922bce71344b01b7b4fe4d6406bf49a86fc856b1329daddb11497007db4ac313d8439227055b5ac7a265039d7f4f5e5d842cc4f08fd3f564ea04ad33030c5f09d15f7dcc50d4053770ddb75a0e6e79c849258eacf03f0220936331c25de7181c0a1d18712003bebd8c6a7823d4b28c317da246ac3e42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x8, 0x8, @l2={'ib', 0x3a, 'pimreg1\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="e1c71abfd704000f4c0c3d4e7d73de21fd9a151f0aa9816a63965e9cc780bee56d75b4a3ca1f22b20e2cdd5e886e86aac5f421a8932351978bed2dcac9cddc7ea613600de598573154565274b0a2a90543b9f5d683a48d5fb5e747799188bd03203f28f2910cc2ea98eb3ca37b47c0d978dc2f4b163097625bf719d4ffac9d8fb42e44144084727540fa7807ae056dce0a6da94e80086bef1c7aad79966a29167df45b485af7d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 4m40.275448366s ago: executing program 33 (id=617): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r4, 0x47, 0x6}, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x2}, &(0x7f0000000500)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x54, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x4048840) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=@delchain={0x6cc, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x0, 0x5}, {0x8, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x69c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_ACT={0x66c, 0x3, [@m_connmark={0x198, 0x14, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x10, 0x7, 0x1, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xac, 0x7, 0x7f3, 0x5}, 0xfdd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x0, 0x4, 0x40c2, 0x9a40}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x20000000, 0x4, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x4, 0x4, 0x6, 0x1}, 0xf9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x7, 0x1, 0x401}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x4, 0xb, 0x6e549d90, 0xc}, 0xe0d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x800, 0xffffffffffffffff, 0xef0f, 0x1}, 0x5}}]}, {0x86, 0x6, "33cb7c5b1c3945dd5a689c179745dad58795569f9a99a2ddf1668c50208d533339550ddaddb5ddd41e986e404d83b4c055fa7b53376a43323cb1fe084334537e6d1ed8086729df43c8e0aadc5ffce3c9c9a54f54818e3aea3780be7ad49de3ba5200c21d7790ae6781d74a14bcd895a3dd48b38b93afb5534abee984ae92241fe57d"}, {0xc}, {0xc}}}, @m_ct={0xf8, 0x18, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "87e423fa95a3a324e31218b10b486ae3"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0xa8, 0x6, "8ae1ad687a07b2f7c72a1813aa486b9c767448c4863224cc721eeabc3012865621adfd452e5648245644307ced7f47575dee3c13631627f26f8b38aeb313ac9713cc112982cf2a7716d3d6e68c5335613c1a7f2c2ab1a63f8b43faa2fac8a86bd32e00367ee5088ca9be5dd3ac7838a456c9a80668d7751b35f0996726f685b01f518a9f496980c35e87b40cc0562b64a26ea2e43a3668f48d29b08347136756ce12ee25"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1a0, 0x10, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x401, 'security\x00'}}, @TCA_IPT_INDEX={0x8, 0x3, 0x54}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xc5, 0x6, "122f28d02be26ef0fc0275023dd6873b59077de57b544a281987a2654200bc4622ce0231517847238d965b75b4b5f08969fd0aa25bc2de40c204a9d68e7fce275be175106efc340055f6aec81c95832b042a7d1a72ecd2edec601601bbb7ce540bd8e15221b4fefa675ea22aa7f184e3ecb48edae2d045053486cc3e853a2a140bef8ae4c94a1ce9f058bd5a620fb28eaf9cb50db8fef3966922f8dbbab8ec295f80dd6850d667ad6ebc822937b08af76f054405eba6ea7cfa1d6c61b899f343a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x13c, 0xd, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6e54, 0xffffffffffffffff, 0x4bf9}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xff, 0x3, 0x10000, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x7, 0x3}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3e2, 0x9, 0x4, 0x8000, 0x3}, 0x3}}]}, {0x9b, 0x6, "338586c312c455c487bd90e0f4bb1b595b13e064762b3bc0eba1e1228f6144947077d076cced5e8d0d0dc8801a0bbace8cf811abfd16e09c8b0f46f3d05b382f0ff9763d14029d6c3f56500ed0b3a850cb2dd15925b0fd89304cc00aa48c82a08189151fe218830d392c2c639e6935c35d7fa330f62295bedaca3e7fba01cf29141c7d2a82d55592b81628da84c57f9ddd11980f218c69"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xfc, 0x2, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xb9, 0x6, "9248f85541edf1de6943b32aad66a5e327a0afe77f104730cc3ad747b1c9a7a181bbc468bb048ca352140cf9e69873cdffb352628c51c2a758af769b3a26e6922bce71344b01b7b4fe4d6406bf49a86fc856b1329daddb11497007db4ac313d8439227055b5ac7a265039d7f4f5e5d842cc4f08fd3f564ea04ad33030c5f09d15f7dcc50d4053770ddb75a0e6e79c849258eacf03f0220936331c25de7181c0a1d18712003bebd8c6a7823d4b28c317da246ac3e42"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x8, 0x8, @l2={'ib', 0x3a, 'pimreg1\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="e1c71abfd704000f4c0c3d4e7d73de21fd9a151f0aa9816a63965e9cc780bee56d75b4a3ca1f22b20e2cdd5e886e86aac5f421a8932351978bed2dcac9cddc7ea613600de598573154565274b0a2a90543b9f5d683a48d5fb5e747799188bd03203f28f2910cc2ea98eb3ca37b47c0d978dc2f4b163097625bf719d4ffac9d8fb42e44144084727540fa7807ae056dce0a6da94e80086bef1c7aad79966a29167df45b485af7d7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 13.447929704s ago: executing program 2 (id=1397): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r5 = socket$inet(0xa, 0x800, 0x20000084) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r7, @ANYBLOB="0103001500000000000000000003000000e5", @ANYRES32=r8], 0x1c}}, 0x0) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 12.378689748s ago: executing program 5 (id=1402): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x20010, r1, 0x2b9f1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 11.76208851s ago: executing program 4 (id=1403): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000024) fcntl$notify(r4, 0x402, 0x80000032) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x0, 0xfffffaef, 0x0, 0x0, 0x0, "1eebb05412e0acba6e32e41a75222702bd994e"}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) 10.507714146s ago: executing program 2 (id=1404): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00460000040000002809001f3ae9f266211e1c3c64aa69672ea776862f40533131f77d5d7c494db273bbf9668ddd2c3906208a3f757aa3d777e8f6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x5) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f74"], 0xa8}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xea, 0x4, 0x7f, 0x25, 0x1, 0x7, 0x90, 0x2, 0x2, 0x3, 0x12, 0x5, 0x0, 0x2}, 0xe) (async) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200000000000000084000000020000000afaea00280400000b000002f17dd690674f951dfbe7d66ddf1b28b4140862f6ded2633b70acaed5d392260e3acc5269c7", @ANYRES32=r5], 0x20, 0x2400e044}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async, rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000600)=@req3={0x6, 0x0, 0x8, 0xffffff80, 0x7df79cd0, 0x1}, 0x1c) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) preadv(r9, &(0x7f0000000600), 0x0, 0x2, 0xbd67) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x620103, 0x0) (rerun: 32) r10 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000097076f00000000000000", @ANYRES64=r10, @ANYRES32=r3, @ANYBLOB='\x00'/28, @ANYRESOCT=0x0, @ANYRES64=r11, @ANYRES8=r1, @ANYBLOB="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"], 0x48) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000440)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x10) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async, rerun: 32) unshare(0x20000400) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES8=r11, @ANYBLOB="010800048000000000000b98b70008000300", @ANYRES64=r4, @ANYRESDEC=0x0, @ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x8d0}, 0x11) 10.427423148s ago: executing program 2 (id=1405): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) mkdirat(r1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r5, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r6 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) r7 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000200)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 10.354194983s ago: executing program 0 (id=1406): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x400c004) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000106e4ff0000000000001c140000fe000001"], 0x24}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000c40)={[0x9]}, 0x0, 0x0, 0x8) 9.850474982s ago: executing program 4 (id=1407): inotify_init() (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xffffffffffffffef}) r1 = epoll_create1(0x0) (async) madvise(&(0x7f0000113000/0x2000)=nil, 0x2000, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOCLEX(r0, 0x5451) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) (async) munlockall() (async) dup(r2) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) 8.363973918s ago: executing program 4 (id=1408): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bdb3fe989122e65ed40000", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xfcf, 0x1}, 0x8) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 7.932278109s ago: executing program 0 (id=1409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x71, 0x40000009, r8, 0x0) fanotify_mark(r7, 0x80, 0x40000009, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder}, 0x0}}], 0x0, 0x0, 0x0}) 7.481335191s ago: executing program 0 (id=1410): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x10006}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000202000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r2, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x188) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0xc0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r5, 0x0, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x3ffffffe}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001340)='stat\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x4cfa, &(0x7f0000000580)={0x0, 0x8917, 0x2, 0x3, 0xbfdffffb, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c, 0x400, 0x3, 0x9, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af83, &(0x7f0000000400)={0x1d}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r6, &(0x7f0000000340), 0x8) socket$pppl2tp(0x18, 0x1, 0x1) 5.39931186s ago: executing program 5 (id=1411): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}}], 0x1, 0x44004) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB='\b\x00'], 0x10}}], 0x1, 0x4004804) 5.367261203s ago: executing program 0 (id=1412): madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) map_shadow_stack(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140), 0x800) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000002200)={@dev, @initdev, 0x0}, &(0x7f0000002240)=0xc) sendmsg$nl_route(r3, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@dellinkprop={0x28, 0x6d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x0, 0x100}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xccc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24040085) close_range(r1, r1, 0x2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000002380)=0x2, 0x4) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x35) prctl$PR_SET_MM(0x23, 0x4412894621ac30c0, &(0x7f0000ffa000/0x4000)=nil) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) recvmsg$can_bcm(r5, &(0x7f0000002600)={&(0x7f00000023c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/76, 0x4c}], 0x1, &(0x7f0000002500)=""/219, 0xdb}, 0x100) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000002640)={0x0, 0x0, r6, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x17, 0x8, &(0x7f0000002680)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x81}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x3, 0x1, 0x3, 0x2, 0x0, 0x0, 0xfffffffffffffff0}, @generic={0x9a, 0x1, 0x4, 0x4d10, 0xfffffff9}], &(0x7f00000026c0)='syzkaller\x00', 0x80, 0x7a, &(0x7f0000002700)=""/122, 0x40f00, 0x18, '\x00', r4, @fallback=0x2c, r5, 0x8, &(0x7f0000002780)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000027c0)={0x2, 0x9, 0x5, 0x5}, 0x10, 0x0, r3, 0x2, &(0x7f0000002800)=[r3, r5, r5, r3, r3, r5], &(0x7f0000002840)=[{0x3, 0x4, 0x7, 0x6}, {0x0, 0x10, 0x10, 0x3}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002940)=r7, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000002b40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xcc, r8, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa0, 0x111, 0x0, 0x1, {0x9c, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x487c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000041}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002bc0), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002c00)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002c40)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c80)={'syzkaller0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000002e40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x124, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 5.295995256s ago: executing program 5 (id=1413): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r0, r1, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 5.226723644s ago: executing program 4 (id=1414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = getpid() statx(0xffffffffffffffff, &(0x7f0000001ac0)='./file0\x00', 0x400, 0x2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000c6c0)=[{{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001100)="8589e1b0f79744a16a6681cd007b74a7f087a775e6ece9efde5dc0d9cb8e6435c733e599bd56c882fba5c82f96c2b60dfc68c7a7077375a9d2e3a76bb30d6c6cf6a1eeff5f0bf913895c503d7be8f8588caeb93ab4532b160f7df54e32254f7cc2aa6e0f6f9a8d7fc6513a1b7788065646f8bf6394082972a558efcbf30522dbf048567132f73907079d583254159442f031daa0d22401c8ebb3ed0648c20e84f947575eef9f4566db7c11911165897dbc84591b994edc86632d95", 0xbb}, {&(0x7f00000093c0)="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", 0x1000}, {&(0x7f00000011c0)="d6a522a4da25c21ff4086f9122de761eeb2aaddb867eb486162f94c0a93c85a8de9d1d2af83f375394d5e6b8d5a7dcbf9eb775e918bf8429196453cd90b777f05c38856f6c4d3bf721a5bbb563b8ee8e43d0e59982075b19a2fefb25dbb2bc1dfd850c5bdef9bdb91afc8593f940aae76145106b9e7271e9de6e11471a5ce595823eae6f64855d0f87ae48b4879a5e330670bab6cbe16b468c92dde49316f099814331ce5cbb947f2cb2b824a500815798655ac27b216e73da7a44bf115de289fd9c782be47ee047b12401df4eebf602210f03f2df478c092f66c72a26ab", 0xde}, {&(0x7f00000012c0)="3a3ba3193b00744fd8fa2c65bb3d270fbcb6992db254d338e23ae41796cbd04dea50bcde76624a977f2e66e9a823e7bcb7e7bd1d03e81919983f12a2c5e400d2d149e4054b4c9fb7d514aa9c8f617efffc051b393204c6e833eaf22c7cd087d021f4a6c490e1cb03fceca4edb8d567c3eb7a2b104dde0105b55ee3e2e2d737a15a47ed5e0f501580ac47aef364dd", 0x8e}, {&(0x7f0000001380)="ee4d0c3fde550dc074c576dd652ca46bb6c2563e8796ce617293587a831cde9b5c6880eb5cb129fc80722d1376cebf8c28c52c02cc4c32485bf79167b36dcd10b636348f816391ccc6aa95f32a5c8bac7bb944e5d939e40dd0b7b5bb40f3ba18bfbeaedda08449d7eea058c6a4238f26bfbb6aff", 0x74}, {&(0x7f0000001400)="6abaf4c5d8b8897a205445aa73796d600fb9dedfa80d22d30cf81034ab0e710c578bc40b3352a75be76a6342dfa17acb29ed34ab6813cb3bff5525a405f9c94d20624990a4049634927fba25d7a13b756d3a9125ab88b6", 0x57}, {&(0x7f0000001480)="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", 0xfd}, {&(0x7f0000001580)="99f6254cf0137099a04d63d2977211fe2ab2e14dab2faa436a9be465680779f713c45c9f69166f9b7eca69e25462f4a3ad5839ec86", 0x35}, {&(0x7f00000015c0)="e946a65ad394ab323b18b8b24d3c59bf097f4df60cb8670ed71992097ba515e6a5c53dda6d26d8bf1a5f63a76b9ce8c71cbb1f372ecacf901b1694bde833b5c894c602524314e79284ba1d9d9c1b91dd629b87105b24e12778d40e47575cd4dbd59d506c7ff7585e6e57b24c9d191b89ad6596b7305e8ed00810a0bd1624b404b989b285b838bc", 0x87}], 0x9, &(0x7f0000001c00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1400000000000000010000e200000000", @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x4040000}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="bd64baa2eb0d3c3bd430a57c31adb8d43fc66c1b665c71d36476404889f16f5b272338d21d0aeeda82de5f72e108d25a0b4ab96c92a200d58a9894baa9fb186cfef7464b5a9650619bde2013885db4749f6a3546e025e05e15606f0fa7c84ed222d06a9726600557f1737818f4898f3dbf8a0664aab3c383bb85888e17cb9a5961faec6c93ea00aae5630cb70d987709ca2e9e1c61e7ae29d45a5d4899dbfdd5241e50fc15791a2ed53face04dd622c4dc00ebc8d2", 0xb5}], 0x1, 0x0, 0x0, 0x840}}, {{&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001e80)="8e4765a106aeeb3e3d6a284eb33fb3ac3818377710f46180a9cf34df09b2bf49932cf02a095fc6416a382860d95dae471df47547b00d986844dd1d357ce4d9553943806fb4b2b68b0c910c761bf6c1066c78d0a074359e8402f88ddd", 0x5c}, {&(0x7f0000001f00)="7a24ea8bd46f2939b708719f8886b9c21d4cdc5691637d2c0a36b12248c4030031e9e19cd45eeea73c0233aeb5534fa316f95eeb387088a5194405ed53e3cbf0d4d22a8547eb4c8ad634b9888e1b43b4036d6c74760eee67451d255d9f2829f4d3ec6432dc0d410efc", 0x69}, {&(0x7f0000001f80)="eb3b96ad8cb335bab05f76439728504125982c6183a61a8299207c732298e62c6f07dc5e35142803765ad8d05db6868df9e36060a23b0e5242d708c6c5e519db238b75662d43e976f4c5d25b5df6e10a3c7c0a8b338eea22eb5efc051eb28b8fddf3259ddb2c8a5cb5905d2d6d1e16d5cfde3ee70aa001891379f3d64f648b3990011d68c2e56c7723d22862bb1a7afb4fd0b5c6", 0x94}, {&(0x7f000000c400)="baabf04f229bf075e64ec84d6cf08057aad0062635fa755f76800650cfaead4b89e7baa133d6519604d70528bda31df71dd7a98f93246eb0ec82f419bcbe7c55d0bf9de6c8eea33574487b0703c2f2dd1960c9caabfcb83d8be29a65fd2095106d4901a78321ee193eca9e206f402e83b49378ec6222846a9d088aa5cbf36cd91519c5bfe6533ff19f13476996f9a9061fd98b94f58c1721756a2f92e2c3e0c7ec8631df605e758220e65ade4ccc36260efd273b157ed37e90e5edba14828e2a98a0c82030a4f6d2dedf619a5b88", 0xce}, {&(0x7f0000002080)="51c09ea9e5", 0x5}, {&(0x7f000000c500)="54baf31065ae4d406fb69427e996488004d18ff57aafc537365d74cd4a9e5f0bf1c30a7af70a4b0d7dd2be66a02642c8af8e8461ff8bef46ca9f51d0cb6a2554ef008896ff1c7181b430cc67a0329ec04fddb498eda323933af4530a78b46fcb80bbdf7ef7e79d66d28a5f1a9fb57a260879b61f28374df644f53b6bcbe6311325b3e48128ad7db189890381b46e57c5129c5c8349fdeba2d1c62db1bad2106202cd9e525922cb5813811f286456", 0xae}, {&(0x7f000000c5c0)="582ebcc451581186a16ad92a582c4583df373d69242f4e0b25156a29469fb090ade396502f543efb7599247e84d32149104fb2393068031c3f363723676769cc7c9a46c7b749daf8160cb858f438f8770bc31e01a2cba225ce34c041cb98f8b5311829258db2c39a4786f2de6f234163653232318802080f3f233ab3637a8296672937bde0813fd3502e1b5d81307f45b91ab8f0e9aedaa5c7a4708256fa0248149d63c389782712125d3a85b7086d9e8ec4bf38ee2c360c2ecba36f03ee00cc9e24a263645ec138faed1b351ab1c9f7bd4029d7f6f2f8e79417d65b40cc7fdb721fd4027f584eb8afbffdf713e4d7cb", 0xf0}], 0x7, 0x0, 0x0, 0x40}}], 0x3, 0xc050) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="aa042b61f3082e60f8bb", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r10, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000000000000010000000000000000000000002000000100000002b900000008"], 0x2a) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x270, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x220, 0x2, [@TCA_RED_STAB={0x104, 0x2, "f95215479e48d5184cc5f43ff978d3fbcc597705a9e1fa852fd0fb6c61cea4ff099af5973feaf1a546490f1327d7d346dfdc7338c693c40eadbe33b4e776f8ffdf3ebb8a9180ec9c9896141e0871158f5df66c5fb29e34e0984848e70e6968a24d1bc251fe9488b675e81a8bffbdebe99a90008293588ea458ff45b5bbc5f2b2e09a2bd1f5d8d98758e4d2962a7e992a1d41c644f090a080a1873b26d4daf624668e86446ab42a162f9afe34b505a961e68a43a65e22d78edcfa9bbef74091dfaebe852d106400d2051a95d0977138421e873633f6fbaf7c0651df965cbeba80f02c9a17acc067c9f4483757f81cc70321a2315057335ef4f8591370ed7fdaec"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x8, 0x5, 0xf, 0x1e, 0x7, 0x8}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xcf}}, {0x4}}]}]}, 0x270}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500"], 0x1c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e45aa5205b109917e9360102030109023d0001000000000904ef0404ff010100090502020800d0000909050800ff030700060705a902e86f4c0905d5bb"], 0x0) recvmmsg(r1, &(0x7f0000000f40)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f0000000440)=""/232, 0xe8}], 0x1, &(0x7f0000000380)=""/40, 0x28}, 0x8}, {{&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f00000083c0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/151, 0x97}, {&(0x7f0000000c00)=""/128, 0x80}, {&(0x7f0000000c80)=""/234, 0xea}, {&(0x7f0000000d80)=""/135, 0x87}], 0x7, &(0x7f0000000ec0)=""/99, 0x63}, 0x2}], 0x2, 0x0, &(0x7f00000003c0)={0x0, 0x989680}) 5.198399423s ago: executing program 6 (id=1415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 5.047973993s ago: executing program 6 (id=1416): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_open_dev$rtc(&(0x7f0000000340), 0x7, 0x1) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x4ac) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000440)=[{0x4dd7, 0x401, 0xdc, &(0x7f0000000040)="fd3cd8806883c7337043538a0793408bc1bf9e3047166a85aec6b8d22fb9a26b852caaac24589b6155ff7c18c2e1fe3d11404fd01b11df0a544e1d98c19dabd743aa79d8d2baa0acf40d1d3610d03d805e942e8b41915637650899ce2ede1ce9031e4b992469fc92270b3104374b61542ed55aa1271f0a5d157fafe90ee23645ebe64fc1e93c7a64c49a806d6154b6fe42993c2a4964e173d67157eeadc81bbea733ab228b2f3f038ad46bb3b5f89a37b374ecfa9759e661afd60cab38df8bcc8bcac00097d3ca00f61e429ed62070a5a4c6bb10bcd7922c527bad90"}, {0x94a, 0x8810, 0xc2, &(0x7f0000000140)="e7d7e57d8ed654e998f214852d3f0c3ae20266e8d2691505bff5886077de8c6c0a00203d76425587fc8829e2fc571bc52c3d7d87bae11e468790d50bcee6edfc4575085fce6772ff57ae2ad7b5af7a8e1e954b73e1a51caecb121d7298b43fe7854ef0f7e9dd0d5a6a7367d2ff5f8fe027b06a6fcb5919fee119da18e9c5ca7124be9088c7b38b833323043c13b550f7efe964ea55d3d1744f81c3d3d12466a60040b4f87b3a149e879fbd414cd7a37a8491590785cfc2b6fbcd923554a1de30bbb2"}, {0xc0d2, 0x600, 0x78, &(0x7f00000002c0)="5bb20652802fdbd5b53357a171728d0bfc81d597935aba256a1344f834c47b270c7b98b83cbb6d138d0ef18f54817d54a7bb05f9302bf6a807e7baf508d127666f2f0e35f4f246a0f3b7418f65fb10dae16d7e4e5132783773439da34abd9fecbd71d4c907c81d02373b3695a87aa1e4b2aa964289470b02"}, {0x1, 0x1, 0x79, &(0x7f00000003c0)="1f501fc846ecf79d05171bb150411aa84e96f01767eed1b72a592060e57107a85dc11f2d106fc7d5f47920d2d111d37c846ef2751d48162cea1cb2089cf604037a25f6a0c70bfa44f5aa21ef0c101e6eab14cfe07fd2fb55a4704831d5986ffbc1aa6bd105c622b03febd85c8529abaf1f57bf2acae01b5eaf"}, {0x7fff, 0x8000, 0x2a, &(0x7f0000000240)="809e2844c0e889c51bc125771d931bd636288b6ae32a4e929d3662945ca9d9a89aec7efa2961d3fa63a1"}], 0x5}) 5.043707911s ago: executing program 0 (id=1417): madvise(&(0x7f00001ac000/0x2000)=nil, 0x2000, 0x1) getpid() syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028400030105a0100904000000010100000a24010400000201020924030105030202060524050408052404030109040100000102000009040101010102000009050109100002020107250100030600090402000001"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x100, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xcc, 0x2, [@TCA_MATCHALL_ACT={0xc8, 0x2, [@m_ife={0xc4, 0x1, 0x0, 0x0, {{0x12}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xed43, 0xf8, 0x6, 0x9, 0x151}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7bd}]}]}, {0x73, 0x6, "25049a9c9809b0e619438601f68a3ddc9a665a87857e1c4829ae6fb902e6b7e71616763ef78cac6fe59cbcbfe183ebb1e459572107ab95569c3184828702bfe99cf3d8033a2d8d847c7d6ef1f53c1430bee713c056e828a96009f5d2043d8e0097612287c759fec4f8dabdce64ac68"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x110}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r10], 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 4.920807832s ago: executing program 5 (id=1418): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) close(0x4) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x377}, &(0x7f0000000040), &(0x7f0000000080)) (async) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x377}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) listen(r1, 0x802) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7fffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', r0}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x8c0}, 0x1, 0x0, 0x0, 0x48090}, 0x48800) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x20000007d, 0x0) socket(0x3a, 0x6, 0x3) 4.596019431s ago: executing program 2 (id=1419): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{0x51e, 0x1}, 0x0, 0x0, 0x8, 0xffff, 0xa8, 0x4, 0x1d, 0x100000000}}], 0x58, 0x20048050}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 1.684316728s ago: executing program 6 (id=1420): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14006000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1.07729725s ago: executing program 2 (id=1421): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000100001002a0900000000000000000001000000000000000000000000ffffffedad00000000000000000000004e2400034e2000050a008080330000004bc885f785ffe4d95cce60d81127155e95e57e4099e148790e52a9c98319f13da2218b86f943eef1f97dd7d320fb55d703c2c7c6297d121e62daf72b106200aa582428179d2906cbaa84089d4e590a217a31e63ecc282d04601107fc90e0c6f67a78cab209cda3d375de9f83265d3fb0a6b2c8d940337ed948871767b92ad27a0dfe1bdc4110f411ea1495ff389239b7e86bb4f7b775", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d32b000000fc020000000000000000000000000000ffffff7f000000000800000000000000c60000000000000005000000000000005b08000000000000070000000000000006000000000000000100008000000000050000000000000001000000000000000500000000000000000000000000000003000000010000000300000029bd7000013500000a00018aca00000000000000480003006c7a7300"/240], 0x138}, 0x1, 0x0, 0x0, 0x810}, 0x400c080) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000300)={0x18, r1, 0x100000001}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x2, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) open_by_handle_at(r0, &(0x7f0000000040)=@orangefs={0x14, 0x1, {"b2e845ecb97bf95e59a0b11724a342e1", 0x8}}, 0x204000) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) (async) io_uring_enter(r3, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 896.037285ms ago: executing program 5 (id=1422): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x20497000) fcntl$lock(r3, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) (async) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5}) fcntl$lock(r3, 0x7, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x9394}) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r1, @ANYBLOB="02000000", @ANYRES16=r0], 0x21c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 702.462566ms ago: executing program 4 (id=1423): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="cb", 0x1}], 0x1}}], 0x1, 0x44004) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB='\b\x00'], 0x10}}], 0x1, 0x4004804) 702.161242ms ago: executing program 6 (id=1424): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x210500) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x9, 0x2, 0x3, 0x4, 0x8, 0xa8bc}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r5}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xffffffd9}}, 0x7, 0x3, 0x10, 0x1, 0x12, 0xb6c, 0xd5}, &(0x7f0000000000)=0x9c) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) 606.960009ms ago: executing program 5 (id=1425): syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x81, 0x3d, 0x40, 0x40}, 0x3c, &(0x7f0000000080)={0x5, 0xf, 0x3c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x1, 0xf7, 0xfa1e, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x10, 0x965}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3975470ab9e421c76285b5a9d762fee3"}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xe6, &(0x7f0000000140)=@string={0xe6, 0x3, "61d6ebd33d3eff8fad3be484d1948920b50f0b140640a6d1f617e225be4f5136ac420cd6302973379f66b97518eb6fa78faeb52ac5876c4b0b2d956aaab657353b584a0a49e2cb0ecfdc766173d310ae1f0fae827f5d4b7774f167145cf58ac8b937576bd3c5363a01c15444c5280827ca023912b157d19c971e8c95e1043fd26a0ba9d59349fb15b50971caf6720742d2bca50f8fb980d39b4a3499debc08a1c609f5e4597ff626d249c2a3c93d94a9b39e3234ed22c720a947dac2c7e889077a7bbc391bcc28ff324834f1ff5ded9e6bdfb3182b9a773ce48f80afb564ad01b8da45b8"}}, {0xed, &(0x7f00000003c0)=@string={0xed, 0x3, "97cc79dbd1ad24959559d14d0cf93b28d3d2ff314f7bc934d3a59790b336367bfd4fb5cd933cf0f85aed17ce42713918b6eddcee103d7b78fe4cd60742ef88d149f1ce77213bad0ef68529ed6177154cd1ee485dae82f8da88b01573f8cee5b012c88ff0639770bd551c16058a9ee2ee724d62ac08597920d9be7dcdacee4b502de94fe11f5df7ed374605b2d57879a570e8a4f6dd18b62d6b5e8656fa912aea655369cac53e7d0f7505a1d28d433e8286fdf9d2b634e8335b60f8b99f9a57d3a688e9b75ada70464e8dc236a24dfa2a6a21ef0b0e00439b8173af0ce3072589d387934955328ae6232747"}}, {0xb, &(0x7f0000000240)=@string={0xb, 0x3, "b96bb05c7492ec7c78"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x411}}, {0xdf, &(0x7f00000004c0)=@string={0xdf, 0x3, "f5b25fcd455d29571be9e200d89803a4a6dba9b3ad7f9b0cc4f9a94ddebb4892507fc7d60dd846ebd5211e797a98883c373deb0aed01373082a6fb2f47e9ecb6c7625c872a30567be3d1122ecb12d98156fc42a9894c037a680d73cd9bed5c578ad269251007ae8460121456389de0560abeb61851e8d29340ef5343892d902956d23340927a2f2fe4d2830d52bf41670f0e0d317094a330441d36db49af190c2a5dbde14cbf45db20884cde67dd3618fbbe14811c74b967c00feab459520e5efd5e6da6c6e208430ae37717eb11cbc40e9d46ade4a2297ea6f996fcd9"}}]}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 581.036007ms ago: executing program 4 (id=1426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d6", 0xea}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r7, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f00000000c0)=""/120) ioctl$KVM_RUN(r4, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f00000001c0)={&(0x7f0000003000), 0x9, 0x3}, 0x1) 483.823563ms ago: executing program 2 (id=1427): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x2e) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@empty, @dev}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0xca}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffe6, 0xb}, {0xb, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x92}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x24004840) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) setresuid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) 284.277784ms ago: executing program 6 (id=1428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0xb1, 0x9, 0x0, 0x8}, {0x8, 0x1, 0x0, 0xbffff038}, {0xfffb, 0x6, 0x4, 0x5}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c000000000000002f73797c2f6b65726e656c2f64656275672f7379b5d3ec7c384b24266a"], 0x45) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 273.529049ms ago: executing program 0 (id=1429): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r1, &(0x7f0000002a40)={0x2020}, 0x2020) 0s ago: executing program 6 (id=1430): syz_open_dev$video(0x0, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x58, 0x2, 0x0, 0xd, 0x4000400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000101010200000000000000000a0000010c00198008000100ad0400003c0001802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x2404c844) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000000)) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000380)=""/122, 0x106000, 0x800, 0x7, 0x3}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200000069000305000000000000000000000000000000000800010002000000"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.516247][T10864] usb 7-1: USB disconnect, device number 28 [ 437.032363][T10963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.268580][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.299966][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.365804][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.394628][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.404153][ T5949] usb 6-1: USB disconnect, device number 53 [ 437.496548][ T929] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 437.648502][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 438.502243][T10981] block device autoloading is deprecated and will be removed. [ 439.284018][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 439.300849][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 439.427430][ T5966] usb 5-1: USB disconnect, device number 72 [ 440.150769][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158928][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.577673][ T929] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 441.770060][ T929] usb 1-1: Using ep0 maxpacket: 16 [ 441.813176][ T929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.844219][ T929] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 441.876928][ T929] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 441.956011][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.989619][ T929] usb 1-1: Product: syz [ 442.016000][ T929] usb 1-1: Manufacturer: syz [ 442.095289][ T929] usb 1-1: SerialNumber: syz [ 442.197814][ T929] usb 1-1: config 0 descriptor?? [ 442.211824][T10864] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 442.423209][T10864] usb 5-1: config 0 has no interfaces? [ 442.432210][T10864] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 442.441651][T10864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.587343][T10864] usb 5-1: Product: syz [ 442.639669][T10864] usb 5-1: Manufacturer: syz [ 442.650410][T10864] usb 5-1: SerialNumber: syz [ 442.674582][T10864] usb 5-1: config 0 descriptor?? [ 442.907356][T11032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.916363][T11032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.552059][T10864] usb 1-1: USB disconnect, device number 84 [ 444.741500][T11063] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.1045'. [ 444.790666][T11063] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 444.975080][T11071] @: renamed from syz_tun (while UP) [ 444.981430][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1046'. [ 445.611245][ T5949] usb 5-1: USB disconnect, device number 73 [ 445.895975][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 446.293557][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.342483][ T24] usb 7-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 446.380540][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.434052][ T24] usb 7-1: config 0 descriptor?? [ 446.858457][ T24] razer 0003:1532:010D.0015: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.6-1/input0 [ 447.053404][ T24] usb 7-1: USB disconnect, device number 30 [ 447.927816][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1055'. [ 448.387984][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 448.702496][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 448.766068][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 448.845807][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.989368][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1062'. [ 449.008635][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.068707][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.174173][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 449.231713][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.327995][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 449.331766][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 449.364532][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.364709][ T10] usb 6-1: config 6 has an invalid interface number: 170 but max is 0 [ 449.373802][ T10] usb 6-1: config 6 has no interface number 0 [ 449.437766][ T10] usb 6-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 449.456225][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.491642][ T5966] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 449.509762][ T10] usb 6-1: Product: syz [ 449.516889][ T10] usb 6-1: Manufacturer: syz [ 449.522726][ T10] usb 6-1: SerialNumber: syz [ 449.661827][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 449.682724][ T5966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 449.689606][ T24] usb 7-1: usb_control_msg returned -32 [ 449.699232][ T24] usbtmc 7-1:16.0: can't read capabilities [ 449.700229][ T5966] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 449.715214][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 449.727325][ T5966] usb 3-1: Product: syz [ 449.732984][ T5966] usb 3-1: Manufacturer: syz [ 449.740675][ T5966] usb 3-1: SerialNumber: syz [ 449.780634][ T5966] usb 3-1: config 0 descriptor?? [ 449.795849][T11142] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 449.887472][ T10] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 449.908950][ T10] gspca_sn9c20x: Write register 1000 failed -71 [ 449.960966][ T10] gspca_sn9c20x: Device initialization failed [ 449.967342][ T10] gspca_sn9c20x 6-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 450.009615][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1063'. [ 450.166311][ T10] usb 6-1: USB disconnect, device number 54 [ 450.213938][T11142] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 450.660264][T11157] syz.4.1065: attempt to access beyond end of device [ 450.660264][T11157] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 450.855014][T11119] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 450.889552][T11166] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 450.944969][ T5949] usb 3-1: USB disconnect, device number 90 [ 451.309671][T11171] fuse: Bad value for 'fd' [ 451.369435][ T30] audit: type=1800 audit(1754520134.317:224): pid=11172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1070" name="file1" dev="tmpfs" ino=168 res=0 errno=0 [ 451.452317][T11175] ptrace attach of "./syz-executor exec"[6602] was attempted by "./syz-executor exec"[11175] [ 451.600058][ T30] audit: type=1800 audit(1754520134.317:225): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1070" name="file1" dev="tmpfs" ino=168 res=0 errno=0 [ 451.772635][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1068'. [ 451.791795][T11180] netlink: 'syz.0.1068': attribute type 7 has an invalid length. [ 451.808647][ T30] audit: type=1326 audit(1754520134.757:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 451.914927][T11180] netlink: 'syz.0.1068': attribute type 8 has an invalid length. [ 451.935997][ T30] audit: type=1326 audit(1754520134.757:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 451.952293][ T5949] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 451.986479][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 452.183739][ T10] usb 7-1: USB disconnect, device number 31 [ 452.213089][ T30] audit: type=1326 audit(1754520134.757:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 452.395521][T11180] ip6gretap0: entered promiscuous mode [ 452.417544][ T30] audit: type=1326 audit(1754520134.767:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 452.449181][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 452.466718][T11180] batadv_slave_1: entered promiscuous mode [ 452.474953][ T5949] usb 6-1: not running at top speed; connect to a high speed hub [ 452.504671][ T5949] usb 6-1: config 129 has an invalid interface number: 135 but max is 1 [ 452.513954][ T5949] usb 6-1: config 129 has no interface number 1 [ 452.520505][ T5949] usb 6-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 452.541988][ T30] audit: type=1326 audit(1754520134.797:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 452.570320][T11180] erspan0: entered promiscuous mode [ 452.576547][ T5949] usb 6-1: config 129 interface 135 has no altsetting 0 [ 452.589729][ T5949] usb 6-1: config 129 interface 0 has no altsetting 0 [ 452.656926][ T5949] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 452.722114][ T30] audit: type=1326 audit(1754520134.797:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 452.722121][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.722146][ T5949] usb 6-1: Product: syz [ 452.744665][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.795653][ T5949] usb 6-1: Manufacturer: syz [ 452.800495][ T5949] usb 6-1: SerialNumber: syz [ 452.946616][ T30] audit: type=1326 audit(1754520134.797:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 453.057706][ T929] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 453.077977][ T30] audit: type=1326 audit(1754520134.797:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f45fc78ebe9 code=0x7ffc0000 [ 453.312090][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 453.396685][ T929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.463828][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 453.551877][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 453.563056][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.691947][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1075'. [ 453.710632][T11211] input: syz0 as /devices/virtual/input/input20 [ 453.778555][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 453.800102][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.907745][ T929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.963306][ T929] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.988804][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.034495][ T929] usb 5-1: config 0 descriptor?? [ 454.341950][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 454.342751][T11199] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.388857][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.431919][ T10] usb 1-1: Product: syz [ 454.442499][ T10] usb 1-1: Manufacturer: syz [ 454.468556][ T10] usb 1-1: SerialNumber: syz [ 454.495621][ T10] usb 1-1: config 0 descriptor?? [ 454.590668][ T5949] au0828: au0828: Device initialization failed. [ 454.620443][ T5949] au0828: au0828: Device must be connected to a high-speed USB 2.0 port. [ 454.647820][ T5949] usb 6-1: USB disconnect, device number 55 [ 454.697127][T11218] Failed to get privilege flags for destination (handle=0x0:0x0) [ 454.733320][ T5957] usb 1-1: USB disconnect, device number 85 [ 454.790840][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.807427][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.840031][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.855872][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.883918][ T929] hid_parser_main: 3 callbacks suppressed [ 454.883940][ T929] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.945898][ T929] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.953469][ T929] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.960967][ T929] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.969638][ T929] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.994546][ T929] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 455.140655][T11222] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 455.148777][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1074'. [ 455.184462][T11222] bond0: entered promiscuous mode [ 455.195725][T11222] bond_slave_0: entered promiscuous mode [ 455.204120][T11222] bond_slave_1: entered promiscuous mode [ 455.212664][ T5949] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 455.220549][T11222] bond0: entered allmulticast mode [ 455.226629][T11222] bond_slave_0: entered allmulticast mode [ 455.233486][T11222] bond_slave_1: entered allmulticast mode [ 455.252700][T11222] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 455.381814][ T5949] usb 6-1: Using ep0 maxpacket: 16 [ 455.396741][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.431785][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.444168][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 455.456400][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.478676][ T5949] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.488548][ T5949] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.498081][ T5949] usb 6-1: Manufacturer: syz [ 455.514740][ T5949] usb 6-1: config 0 descriptor?? [ 455.879182][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 456.097107][ T10] usb 1-1: config 0 has no interfaces? [ 456.127597][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 456.151050][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.210396][ T10] usb 1-1: Product: syz [ 456.232417][ T10] usb 1-1: Manufacturer: syz [ 456.316393][ T10] usb 1-1: SerialNumber: syz [ 456.449145][ T10] usb 1-1: config 0 descriptor?? [ 456.548952][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 456.558666][ T5957] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 456.595967][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 456.729628][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.744984][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.763863][ T5957] usb 7-1: device descriptor read/64, error -71 [ 457.001908][ T5957] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 457.145977][ T5957] usb 7-1: device descriptor read/64, error -71 [ 457.166274][ T929] usb 5-1: USB disconnect, device number 74 [ 457.282153][ T5957] usb usb7-port1: attempt power cycle [ 457.722720][ T5957] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 457.753280][ T5957] usb 7-1: device descriptor read/8, error -71 [ 457.856182][ T5966] usb 6-1: USB disconnect, device number 56 [ 457.980827][T11256] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1087'. [ 457.995511][ T5957] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 458.047462][ T5957] usb 7-1: device descriptor read/8, error -71 [ 458.191444][ T5957] usb usb7-port1: unable to enumerate USB device [ 458.287410][ T5966] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 458.471631][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 458.478971][ T5966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.505211][ T5966] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 458.525887][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.540738][ T5966] usb 6-1: config 0 descriptor?? [ 458.574125][T10865] usb 1-1: USB disconnect, device number 86 [ 458.601710][ T5957] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 458.791903][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 458.810073][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.885468][ T5957] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.925071][ T5957] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 458.942140][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.952334][ T5957] usb 5-1: Product: syz [ 458.959624][ T5957] usb 5-1: Manufacturer: syz [ 458.970052][ T5966] steelseries 0003:1038:1410.0017: missing HID_OUTPUT_REPORT 0 [ 459.013015][ T5957] usb 5-1: SerialNumber: syz [ 459.029816][ T5957] usb 5-1: config 0 descriptor?? [ 459.070043][ T5966] usb 6-1: USB disconnect, device number 57 [ 459.108539][T11274] syzkaller0: entered promiscuous mode [ 459.114479][T11274] syzkaller0: entered allmulticast mode [ 459.123008][T10865] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 459.260786][ T5957] usb 5-1: USB disconnect, device number 75 [ 459.301851][T10865] usb 1-1: Using ep0 maxpacket: 32 [ 459.311522][T10865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.327895][T10865] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 459.348136][T10865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.362864][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1095'. [ 459.375903][T10865] usb 1-1: Product: syz [ 459.380315][T10865] usb 1-1: Manufacturer: syz [ 459.386484][T10865] usb 1-1: SerialNumber: syz [ 459.400803][T10865] usb 1-1: config 0 descriptor?? [ 459.405591][T11279] loop8: detected capacity change from 0 to 7 [ 459.416508][T11279] Dev loop8: unable to read RDB block 7 [ 459.426682][T11279] loop8: unable to read partition table [ 459.432943][T11279] loop8: partition table beyond EOD, truncated [ 459.439370][T11279] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 459.731649][T10865] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 459.739639][T10865] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 459.956626][T10865] usb 1-1: USB disconnect, device number 87 [ 460.809029][T11311] kvm: kvm [11309]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfc0000c9ad [ 460.873947][T11311] kvm: kvm [11309]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfc000089ad [ 460.911715][ T5957] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 461.145777][ T5957] usb 5-1: config 0 has no interfaces? [ 461.168094][ T5957] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 461.185730][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.202028][ T5949] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 461.260073][ T5957] usb 5-1: Product: syz [ 461.276038][ T5957] usb 5-1: Manufacturer: syz [ 461.285613][ T5957] usb 5-1: SerialNumber: syz [ 461.316347][ T5957] usb 5-1: config 0 descriptor?? [ 461.411768][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 461.429983][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.456362][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.483746][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.498507][ T5949] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.510347][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.522480][ T5949] usb 3-1: config 0 descriptor?? [ 461.560735][T11310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.577497][T11310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.239350][T11332] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1108'. [ 462.371115][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1109'. [ 462.421160][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 463.908827][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 463.945698][ T5949] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max [ 463.973635][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 463.999878][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.011905][ T43] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 464.029748][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.058211][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.066092][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.083134][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.090579][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.172668][ T5966] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 464.179554][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.199137][ T5949] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 464.207354][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.219435][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.232429][ T43] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 464.242111][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.260658][ T10] usb 5-1: USB disconnect, device number 76 [ 464.321855][ T43] usb 7-1: config 0 descriptor?? [ 464.351270][ T5966] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 464.354142][ T5949] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0018/input/input22 [ 464.392647][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.421193][ T5966] usb 6-1: Product: syz [ 464.430150][ T5966] usb 6-1: Manufacturer: syz [ 464.436333][ T5966] usb 6-1: SerialNumber: syz [ 464.457327][ T5966] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 464.477772][T10865] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 464.507956][ T5949] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 465.035109][ T5966] usb 6-1: USB disconnect, device number 58 [ 465.042709][ T5949] usb 3-1: USB disconnect, device number 91 [ 465.143921][T11363] fido_id[11363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 465.503446][T10865] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 465.530464][T10865] ath9k_htc: Failed to initialize the device [ 465.558808][T11353] sctp: [Deprecated]: syz.6.1114 (pid 11353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.558808][T11353] Use struct sctp_sack_info instead [ 465.612174][ T5966] usb 6-1: ath9k_htc: USB layer deinitialized [ 466.681683][T10865] usb 7-1: USB disconnect, device number 36 [ 466.911756][ T5949] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 467.157919][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.339332][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.735948][ T5949] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 467.753613][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.321172][ T5949] usb 6-1: config 0 descriptor?? [ 468.735822][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'. [ 469.133488][T10865] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 469.340158][T11438] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1135'. [ 469.351823][T10865] usb 1-1: Using ep0 maxpacket: 16 [ 469.729684][T11406] sctp: [Deprecated]: syz.5.1125 (pid 11406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.729684][T11406] Use struct sctp_sack_info instead [ 470.041897][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 470.696553][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 470.745104][ T10] usb 3-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 470.756237][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 20224, setting to 1024 [ 470.792690][ T5927] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 470.836618][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 470.908587][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 471.022278][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 471.033066][T10864] usb 6-1: USB disconnect, device number 59 [ 471.044683][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.078028][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 471.106789][ T5927] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.184087][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.239329][ T5927] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 471.256639][ T10] usb 3-1: Product: syz [ 471.261139][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.270419][ T10] usb 3-1: Manufacturer: syz [ 471.275226][ T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 471.293964][ T5927] usb 7-1: Product: syz [ 471.306144][ T5927] usb 7-1: Manufacturer: syz [ 471.311169][ T10] usb 3-1: SerialNumber: syz [ 471.318733][ T5927] usb 7-1: SerialNumber: syz [ 471.346432][T11443] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 471.413288][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1140'. [ 471.422666][ T43] usb 5-1: device descriptor read/64, error -71 [ 471.423334][ T5927] usb 7-1: config 0 descriptor?? [ 471.435542][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 471.481188][ T10] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 471.518691][ T10] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 471.671931][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 471.811710][ T43] usb 5-1: device descriptor read/64, error -71 [ 471.874633][ T10] usb 3-1: USB disconnect, device number 92 [ 472.310311][ T43] usb usb5-port1: attempt power cycle [ 472.494106][T10865] usb 1-1: unable to get BOS descriptor or descriptor too short [ 472.517946][T10865] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 472.592721][T10865] usb 1-1: can't read configurations, error -71 [ 472.800929][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 472.811645][ T10] usb 7-1: USB disconnect, device number 37 [ 472.822374][ T43] usb 5-1: device descriptor read/8, error -71 [ 473.257390][ T43] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 473.284960][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 473.284980][ T30] audit: type=1800 audit(1754520156.187:252): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1143" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=36202 res=0 errno=0 [ 473.302446][ T43] usb 5-1: device descriptor read/8, error -71 [ 473.323182][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.679176][ T43] usb usb5-port1: unable to enumerate USB device [ 473.864809][T11488] gretap0: entered promiscuous mode [ 474.528363][T11493] syz.2.1145 (11493): drop_caches: 2 [ 474.678435][T11504] netlink: 'syz.0.1149': attribute type 63 has an invalid length. [ 474.792916][T11506] netlink: 'syz.0.1149': attribute type 63 has an invalid length. [ 475.471942][ T43] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 475.581753][T10865] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 475.623928][ T43] usb 1-1: config 0 has no interfaces? [ 475.634370][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.644441][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.672360][ T43] usb 1-1: Product: syz [ 475.682504][ T43] usb 1-1: Manufacturer: syz [ 475.699410][ T43] usb 1-1: SerialNumber: syz [ 475.726275][ T43] usb 1-1: config 0 descriptor?? [ 475.799660][T11517] raw_sendmsg: syz.2.1152 forgot to set AF_INET. Fix it! [ 475.985556][T10865] usb 7-1: Using ep0 maxpacket: 16 [ 476.101072][T10865] usb 7-1: too many configurations: 26, using maximum allowed: 8 [ 476.198148][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.208902][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.247949][T11525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.376235][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.425658][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.442797][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.458937][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.472690][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.496892][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.529981][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.549033][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.668857][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.685036][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.728948][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.741091][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.770626][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 476.787270][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.792687][ T43] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 476.979611][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 477.001262][ T43] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.027038][ T43] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 477.065919][T10865] usb 7-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 477.096051][T10865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.110931][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 477.136034][T10865] usb 7-1: New USB device found, idVendor=1781, idProduct=0888, bcdDevice= 0.00 [ 477.164295][ T43] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 477.184906][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.208268][T10865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.224474][ T43] usb 5-1: config 0 descriptor?? [ 477.265880][T10865] usb 7-1: config 0 descriptor?? [ 477.486630][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.502094][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.299415][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 478.320612][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 478.390330][ T43] usb 5-1: USB disconnect, device number 81 [ 478.495939][ T5949] usb 1-1: USB disconnect, device number 90 [ 479.031912][ T929] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 479.503442][ T5949] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 479.641101][ T5957] usb 7-1: USB disconnect, device number 38 [ 479.673496][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 479.726878][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 36 [ 479.757323][ T5949] usb 5-1: can't read configurations, error -22 [ 479.941757][ T5949] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 480.065169][T10865] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 480.161758][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 480.182580][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 36 [ 480.231717][ T5949] usb 5-1: can't read configurations, error -22 [ 480.259338][ T5949] usb usb5-port1: attempt power cycle [ 480.274606][T10865] usb 1-1: Using ep0 maxpacket: 8 [ 480.308197][T10865] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 480.344904][T10865] usb 1-1: config 179 has no interface number 0 [ 480.397691][T10865] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 480.601705][T10865] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 480.631859][ T5949] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 480.666963][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 480.676817][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 36 [ 480.690912][ T5949] usb 5-1: can't read configurations, error -22 [ 480.701730][ T5927] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 480.721607][T10865] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 480.789277][T10865] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 480.821740][ T5949] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 480.883281][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 480.890360][ T5949] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 36 [ 480.905459][ T5949] usb 5-1: can't read configurations, error -22 [ 480.925960][ T5949] usb usb5-port1: unable to enumerate USB device [ 480.945963][T10865] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.998990][ T5927] usb 7-1: config 0 has no interfaces? [ 481.045361][ T5927] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 481.070549][T10865] usb 1-1: config 179 interface 65 has no altsetting 0 [ 481.106519][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.136015][T10865] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 481.157269][ T5927] usb 7-1: Product: syz [ 481.161492][ T5927] usb 7-1: Manufacturer: syz [ 481.173120][T10865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.216196][ T5927] usb 7-1: SerialNumber: syz [ 481.236878][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.262542][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.289870][ T5927] usb 7-1: config 0 descriptor?? [ 481.298085][T11588] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 481.451729][ T929] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 481.603625][T10865] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 481.660502][ T929] usb 3-1: not running at top speed; connect to a high speed hub [ 481.670667][ T929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.706334][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.715876][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.741924][ T929] usb 3-1: config 0 has no interface number 0 [ 481.761701][ T929] usb 3-1: config 0 interface 1 has no altsetting 0 [ 481.799606][ T5219] input input24: unable to receive magic message: -71 [ 481.813660][T10865] usb 1-1: USB disconnect, device number 91 [ 481.813700][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 481.828629][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 482.071308][ T929] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0 [ 482.104945][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.165754][ T929] usb 3-1: Product: syz [ 482.178357][ T929] usb 3-1: Manufacturer: syz [ 482.211798][ T929] usb 3-1: SerialNumber: syz [ 482.296196][ T929] usb 3-1: config 0 descriptor?? [ 482.302904][T10864] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 482.502264][T10864] usb 6-1: Using ep0 maxpacket: 16 [ 482.514667][T10864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.574682][T10864] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.587265][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 482.759908][T10864] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 482.814122][T10864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.824828][T11611] vlan2: entered promiscuous mode [ 482.846051][T10864] usb 6-1: Product: syz [ 482.875605][T10864] usb 6-1: Manufacturer: syz [ 482.889528][T11611] macsec0: entered promiscuous mode [ 482.902085][T10864] usb 6-1: SerialNumber: syz [ 482.915809][T10864] usb 6-1: config 0 descriptor?? [ 482.967770][T11611] vlan2: entered allmulticast mode [ 483.162713][T11611] macsec0: entered allmulticast mode [ 483.178937][T11611] veth1_macvtap: entered allmulticast mode [ 483.204558][T11612] bridge_slave_0: left allmulticast mode [ 483.210423][T11612] bridge_slave_0: left promiscuous mode [ 483.244801][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.280865][T11612] bridge_slave_1: left allmulticast mode [ 483.287270][T11612] bridge_slave_1: left promiscuous mode [ 483.295892][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.371247][T11612] bond0: (slave bond_slave_0): Releasing backup interface [ 483.464821][T11612] bond0: (slave bond_slave_1): Releasing backup interface [ 483.482465][T11612] team0: Port device team_slave_0 removed [ 483.494606][T11612] team0: Port device team_slave_1 removed [ 483.501111][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.508757][T11612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.569929][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.578005][T11612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.588587][ T24] usb 7-1: USB disconnect, device number 39 [ 483.765977][ T929] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 483.825891][ T929] usb 3-1: USB disconnect, device number 93 [ 483.899052][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.384392][T11646] FAULT_INJECTION: forcing a failure. [ 484.384392][T11646] name failslab, interval 1, probability 0, space 0, times 0 [ 484.394737][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 484.481663][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.4.1185 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 484.481691][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.481703][T11646] Call Trace: [ 484.481710][T11646] [ 484.481719][T11646] dump_stack_lvl+0x189/0x250 [ 484.481746][T11646] ? __pfx____ratelimit+0x10/0x10 [ 484.481774][T11646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.481795][T11646] ? __pfx__printk+0x10/0x10 [ 484.481821][T11646] ? __pfx___might_resched+0x10/0x10 [ 484.481836][T11646] ? fs_reclaim_acquire+0x7d/0x100 [ 484.481865][T11646] should_fail_ex+0x414/0x560 [ 484.481889][T11646] should_failslab+0xa8/0x100 [ 484.481914][T11646] __kmalloc_noprof+0xcb/0x4f0 [ 484.481936][T11646] ? kfree+0x4d/0x440 [ 484.481954][T11646] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 484.481984][T11646] tomoyo_realpath_from_path+0xe3/0x5d0 [ 484.482010][T11646] ? tomoyo_domain+0xd9/0x130 [ 484.482040][T11646] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 484.482061][T11646] tomoyo_path_number_perm+0x1e8/0x5a0 [ 484.482085][T11646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 484.482123][T11646] ? __lock_acquire+0xab9/0xd20 [ 484.482166][T11646] ? __fget_files+0x2a/0x420 [ 484.482193][T11646] ? __fget_files+0x2a/0x420 [ 484.482215][T11646] ? __fget_files+0x3a0/0x420 [ 484.482238][T11646] ? __fget_files+0x2a/0x420 [ 484.482266][T11646] security_file_ioctl+0xcb/0x2d0 [ 484.482289][T11646] __se_sys_ioctl+0x47/0x170 [ 484.482312][T11646] do_syscall_64+0xfa/0x3b0 [ 484.482332][T11646] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.482352][T11646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.482370][T11646] ? clear_bhb_loop+0x60/0xb0 [ 484.482391][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.482409][T11646] RIP: 0033:0x7fde0178ebe9 [ 484.482426][T11646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.482441][T11646] RSP: 002b:00007fde025ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.482461][T11646] RAX: ffffffffffffffda RBX: 00007fde019b5fa0 RCX: 00007fde0178ebe9 [ 484.482474][T11646] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 484.482486][T11646] RBP: 00007fde025ac090 R08: 0000000000000000 R09: 0000000000000000 [ 484.482497][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.482508][T11646] R13: 00007fde019b6038 R14: 00007fde019b5fa0 R15: 00007fde01adfa28 [ 484.482537][T11646] [ 484.482546][T11646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 484.811694][T10864] usb 6-1: USB disconnect, device number 61 [ 485.129462][T11658] syz.6.1187: attempt to access beyond end of device [ 485.129462][T11658] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 485.201859][T11665] FAULT_INJECTION: forcing a failure. [ 485.201859][T11665] name failslab, interval 1, probability 0, space 0, times 0 [ 485.317422][T11665] CPU: 1 UID: 0 PID: 11665 Comm: syz.2.1191 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 485.317439][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.317445][T11665] Call Trace: [ 485.317450][T11665] [ 485.317455][T11665] dump_stack_lvl+0x189/0x250 [ 485.317471][T11665] ? __pfx____ratelimit+0x10/0x10 [ 485.317483][T11665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.317495][T11665] ? __pfx__printk+0x10/0x10 [ 485.317511][T11665] ? __pfx___might_resched+0x10/0x10 [ 485.317523][T11665] should_fail_ex+0x414/0x560 [ 485.317536][T11665] should_failslab+0xa8/0x100 [ 485.317551][T11665] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 485.317565][T11665] ? __alloc_skb+0x112/0x2d0 [ 485.317580][T11665] __alloc_skb+0x112/0x2d0 [ 485.317594][T11665] netlink_sendmsg+0x5c6/0xb30 [ 485.317611][T11665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.317625][T11665] ? aa_sock_msg_perm+0xf1/0x1d0 [ 485.317639][T11665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.317650][T11665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.317662][T11665] __sock_sendmsg+0x219/0x270 [ 485.317681][T11665] ____sys_sendmsg+0x505/0x830 [ 485.317698][T11665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.317715][T11665] ? import_iovec+0x74/0xa0 [ 485.317727][T11665] ___sys_sendmsg+0x21f/0x2a0 [ 485.317741][T11665] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.317773][T11665] ? __fget_files+0x2a/0x420 [ 485.317786][T11665] ? __fget_files+0x3a0/0x420 [ 485.317805][T11665] __x64_sys_sendmsg+0x19b/0x260 [ 485.317820][T11665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.317838][T11665] ? __pfx_ksys_write+0x10/0x10 [ 485.317850][T11665] ? rcu_is_watching+0x15/0xb0 [ 485.317862][T11665] ? do_syscall_64+0xbe/0x3b0 [ 485.317876][T11665] do_syscall_64+0xfa/0x3b0 [ 485.317887][T11665] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.317899][T11665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.317909][T11665] ? clear_bhb_loop+0x60/0xb0 [ 485.317921][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.317930][T11665] RIP: 0033:0x7f45fc78ebe9 [ 485.317940][T11665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.317948][T11665] RSP: 002b:00007f45fd5d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.317960][T11665] RAX: ffffffffffffffda RBX: 00007f45fc9b5fa0 RCX: 00007f45fc78ebe9 [ 485.317967][T11665] RDX: 0000000000008040 RSI: 0000200000000180 RDI: 0000000000000003 [ 485.317973][T11665] RBP: 00007f45fd5d4090 R08: 0000000000000000 R09: 0000000000000000 [ 485.317979][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.317985][T11665] R13: 00007f45fc9b6038 R14: 00007f45fc9b5fa0 R15: 00007f45fcadfa28 [ 485.318000][T11665] [ 486.122219][T10864] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 486.252087][T10864] usb 5-1: device descriptor read/64, error -71 [ 486.442063][T11685] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1198'. [ 486.528748][T10864] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 486.531063][T11692] FAULT_INJECTION: forcing a failure. [ 486.531063][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 486.586756][T11692] CPU: 1 UID: 0 PID: 11692 Comm: syz.5.1200 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 486.586783][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.586794][T11692] Call Trace: [ 486.586801][T11692] [ 486.586810][T11692] dump_stack_lvl+0x189/0x250 [ 486.586837][T11692] ? __pfx____ratelimit+0x10/0x10 [ 486.586869][T11692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.586889][T11692] ? __pfx__printk+0x10/0x10 [ 486.586915][T11692] ? __pfx___might_resched+0x10/0x10 [ 486.586932][T11692] ? fs_reclaim_acquire+0x7d/0x100 [ 486.586962][T11692] should_fail_ex+0x414/0x560 [ 486.586987][T11692] should_failslab+0xa8/0x100 [ 486.587013][T11692] __kmalloc_noprof+0xcb/0x4f0 [ 486.587035][T11692] ? tomoyo_encode+0x28b/0x550 [ 486.587062][T11692] tomoyo_encode+0x28b/0x550 [ 486.587092][T11692] tomoyo_realpath_from_path+0x58d/0x5d0 [ 486.587127][T11692] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 486.587148][T11692] tomoyo_path_number_perm+0x1e8/0x5a0 [ 486.587172][T11692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.587209][T11692] ? __lock_acquire+0xab9/0xd20 [ 486.587253][T11692] ? __fget_files+0x2a/0x420 [ 486.587279][T11692] ? __fget_files+0x2a/0x420 [ 486.587301][T11692] ? __fget_files+0x3a0/0x420 [ 486.587324][T11692] ? __fget_files+0x2a/0x420 [ 486.587351][T11692] security_file_ioctl+0xcb/0x2d0 [ 486.587373][T11692] __se_sys_ioctl+0x47/0x170 [ 486.587398][T11692] do_syscall_64+0xfa/0x3b0 [ 486.587418][T11692] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.587437][T11692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.587454][T11692] ? clear_bhb_loop+0x60/0xb0 [ 486.587475][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.587492][T11692] RIP: 0033:0x7fc8c418ebe9 [ 486.587508][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.587521][T11692] RSP: 002b:00007fc8c5080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.587539][T11692] RAX: ffffffffffffffda RBX: 00007fc8c43b5fa0 RCX: 00007fc8c418ebe9 [ 486.587552][T11692] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 486.587563][T11692] RBP: 00007fc8c5080090 R08: 0000000000000000 R09: 0000000000000000 [ 486.587574][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.587584][T11692] R13: 00007fc8c43b6038 R14: 00007fc8c43b5fa0 R15: 00007fc8c44dfa28 [ 486.587611][T11692] [ 486.587632][T11692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 486.681648][T10864] usb 5-1: device descriptor read/64, error -71 [ 486.689323][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 486.831442][T10864] usb usb5-port1: attempt power cycle [ 486.991868][ T929] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 487.031874][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 487.145799][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.163232][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.185009][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.190801][T11707] syz.2.1202: attempt to access beyond end of device [ 487.190801][T11707] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 487.214797][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.223964][ T929] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.268731][ T929] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 487.282072][T10864] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 487.282099][ T929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 487.305161][ T24] usb 1-1: config 0 descriptor?? [ 487.312476][T10864] usb 5-1: device descriptor read/8, error -71 [ 487.312497][ T929] usb 7-1: Product: syz [ 487.325123][ T929] usb 7-1: Manufacturer: syz [ 487.337499][ T929] usb 7-1: SerialNumber: syz [ 487.391881][T10865] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 487.559392][ T929] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 487.571869][T10864] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 487.590591][T10865] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 487.622929][T10865] usb 6-1: config 0 has no interface number 0 [ 487.630012][T10864] usb 5-1: device descriptor read/8, error -71 [ 487.638990][T10865] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 487.673125][T10865] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 487.686928][T10865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.705602][T10865] usb 6-1: Product: syz [ 487.709958][T10865] usb 6-1: Manufacturer: syz [ 487.714673][T10865] usb 6-1: SerialNumber: syz [ 487.736715][T10865] usb 6-1: config 0 descriptor?? [ 487.748802][T11704] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 487.762464][T10864] usb usb5-port1: unable to enumerate USB device [ 487.776665][T10865] usb-storage 6-1:0.20: USB Mass Storage device detected [ 487.789382][T10865] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 487.978831][T11704] fuse: Bad value for 'fd' [ 489.415824][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 489.447511][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 489.504888][ T24] usb 1-1: USB disconnect, device number 92 [ 489.979041][T10865] scsi host1: usb-storage 6-1:0.20 [ 490.040037][T10865] usb 6-1: USB disconnect, device number 62 [ 490.110743][T11745] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 490.214240][T11748] FAULT_INJECTION: forcing a failure. [ 490.214240][T11748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.328766][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.5.1213 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 490.328783][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.328790][T11748] Call Trace: [ 490.328795][T11748] [ 490.328800][T11748] dump_stack_lvl+0x189/0x250 [ 490.328823][T11748] ? __pfx____ratelimit+0x10/0x10 [ 490.328843][T11748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.328863][T11748] ? __pfx__printk+0x10/0x10 [ 490.328885][T11748] ? __might_fault+0xb0/0x130 [ 490.328915][T11748] should_fail_ex+0x414/0x560 [ 490.328929][T11748] _copy_from_user+0x2d/0xb0 [ 490.328940][T11748] binder_ioctl_write_read+0x124/0xa040 [ 490.328960][T11748] ? is_bpf_text_address+0x292/0x2b0 [ 490.328982][T11748] ? is_bpf_text_address+0x26/0x2b0 [ 490.329009][T11748] ? kernel_text_address+0xa5/0xe0 [ 490.329034][T11748] ? __kernel_text_address+0xd/0x40 [ 490.329055][T11748] ? unwind_get_return_address+0x4d/0x90 [ 490.329069][T11748] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 490.329081][T11748] ? arch_stack_walk+0xfc/0x150 [ 490.329099][T11748] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 490.329112][T11748] ? stack_trace_save+0x9c/0xe0 [ 490.329126][T11748] ? __pfx_stack_trace_save+0x10/0x10 [ 490.329156][T11748] ? stack_depot_save_flags+0x40/0x860 [ 490.329185][T11748] ? kasan_save_track+0x4f/0x80 [ 490.329203][T11748] ? kasan_save_track+0x3e/0x80 [ 490.329216][T11748] ? kasan_save_free_info+0x46/0x50 [ 490.329225][T11748] ? __kasan_slab_free+0x5b/0x80 [ 490.329236][T11748] ? kfree+0x18e/0x440 [ 490.329247][T11748] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 490.329258][T11748] ? security_file_ioctl+0xcb/0x2d0 [ 490.329268][T11748] ? __se_sys_ioctl+0x47/0x170 [ 490.329287][T11748] ? do_syscall_64+0xfa/0x3b0 [ 490.329307][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.329335][T11748] ? __lock_acquire+0xab9/0xd20 [ 490.329357][T11748] ? binder_debug+0x13f/0x1b0 [ 490.329374][T11748] ? __pfx_binder_debug+0x10/0x10 [ 490.329385][T11748] ? do_raw_spin_lock+0x121/0x290 [ 490.329406][T11748] ? _raw_spin_unlock+0x28/0x50 [ 490.329416][T11748] ? binder_get_thread+0x178/0x6d0 [ 490.329442][T11748] binder_ioctl+0x3e0/0x19c0 [ 490.329466][T11748] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 490.329486][T11748] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 490.329509][T11748] ? do_vfs_ioctl+0xbe8/0x1430 [ 490.329520][T11748] ? __pfx_binder_ioctl+0x10/0x10 [ 490.329533][T11748] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 490.329551][T11748] ? __lock_acquire+0xab9/0xd20 [ 490.329582][T11748] ? __fget_files+0x2a/0x420 [ 490.329610][T11748] ? __fget_files+0x2a/0x420 [ 490.329631][T11748] ? __fget_files+0x3a0/0x420 [ 490.329656][T11748] ? __fget_files+0x2a/0x420 [ 490.329672][T11748] ? bpf_lsm_file_ioctl+0x9/0x20 [ 490.329684][T11748] ? __pfx_binder_ioctl+0x10/0x10 [ 490.329697][T11748] __se_sys_ioctl+0xfc/0x170 [ 490.329710][T11748] do_syscall_64+0xfa/0x3b0 [ 490.329726][T11748] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.329745][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.329762][T11748] ? clear_bhb_loop+0x60/0xb0 [ 490.329784][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.329800][T11748] RIP: 0033:0x7fc8c418ebe9 [ 490.329813][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.329822][T11748] RSP: 002b:00007fc8c5080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.329834][T11748] RAX: ffffffffffffffda RBX: 00007fc8c43b5fa0 RCX: 00007fc8c418ebe9 [ 490.329841][T11748] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 490.329847][T11748] RBP: 00007fc8c5080090 R08: 0000000000000000 R09: 0000000000000000 [ 490.329853][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.329859][T11748] R13: 00007fc8c43b6038 R14: 00007fc8c43b5fa0 R15: 00007fc8c44dfa28 [ 490.329880][T11748] [ 490.330229][T11748] binder: 11747:11748 ioctl c0306201 2000000001c0 returned -14 [ 491.314540][T10865] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 491.351786][T10864] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 492.081778][T10865] usb 1-1: Using ep0 maxpacket: 8 [ 492.136958][T10864] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.149495][T10865] usb 1-1: config 1 interface 0 has no altsetting 0 [ 492.168407][T10864] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.234023][T10865] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 492.267305][T10865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.294059][T10864] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.331680][T10865] usb 1-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 492.384210][T10864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.461703][T11751] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 492.472809][T10864] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.531737][T10865] usb 1-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 492.738351][T10865] usb 1-1: SerialNumber: 殹岰鉴糬 [ 492.844061][T11769] binder: 11768:11769 unknown command 0 [ 492.850113][T11769] binder: 11768:11769 ioctl c0306201 2000000001c0 returned -22 [ 492.868526][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.895280][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.109540][T11753] syzkaller0: entered promiscuous mode [ 493.120617][T11753] syzkaller0: entered allmulticast mode [ 493.887916][ T43] usb 3-1: USB disconnect, device number 94 [ 494.519099][T10864] usb 7-1: USB disconnect, device number 40 [ 494.542346][T10864] usblp0: removed [ 495.642284][T11795] fuse: Unknown parameter 'fF'0x0000000000000004' [ 496.564097][T11804] FAULT_INJECTION: forcing a failure. [ 496.564097][T11804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.577681][T11804] CPU: 0 UID: 0 PID: 11804 Comm: syz.2.1225 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 496.577706][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.577716][T11804] Call Trace: [ 496.577723][T11804] [ 496.577730][T11804] dump_stack_lvl+0x189/0x250 [ 496.577754][T11804] ? __pfx____ratelimit+0x10/0x10 [ 496.577775][T11804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.577797][T11804] ? __pfx__printk+0x10/0x10 [ 496.577818][T11804] ? __might_fault+0xb0/0x130 [ 496.577848][T11804] should_fail_ex+0x414/0x560 [ 496.577872][T11804] _copy_from_user+0x2d/0xb0 [ 496.577890][T11804] binder_ioctl_write_read+0xa61/0xa040 [ 496.577934][T11804] ? __kernel_text_address+0xd/0x40 [ 496.577960][T11804] ? arch_stack_walk+0xfc/0x150 [ 496.577990][T11804] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 496.578011][T11804] ? stack_trace_save+0x9c/0xe0 [ 496.578030][T11804] ? __pfx_stack_trace_save+0x10/0x10 [ 496.578051][T11804] ? stack_depot_save_flags+0x40/0x860 [ 496.578078][T11804] ? kasan_save_track+0x4f/0x80 [ 496.578097][T11804] ? kasan_save_track+0x3e/0x80 [ 496.578115][T11804] ? kasan_save_free_info+0x46/0x50 [ 496.578131][T11804] ? __kasan_slab_free+0x5b/0x80 [ 496.578150][T11804] ? kfree+0x18e/0x440 [ 496.578169][T11804] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 496.578188][T11804] ? security_file_ioctl+0xcb/0x2d0 [ 496.578205][T11804] ? __se_sys_ioctl+0x47/0x170 [ 496.578223][T11804] ? do_syscall_64+0xfa/0x3b0 [ 496.578243][T11804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.578280][T11804] ? __pfx_binder_debug+0x10/0x10 [ 496.578300][T11804] ? do_raw_spin_lock+0x121/0x290 [ 496.578332][T11804] ? _raw_spin_unlock+0x28/0x50 [ 496.578346][T11804] ? binder_get_thread+0x178/0x6d0 [ 496.578368][T11804] binder_ioctl+0x3e0/0x19c0 [ 496.578388][T11804] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 496.578405][T11804] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 496.578438][T11804] ? do_vfs_ioctl+0xbe8/0x1430 [ 496.578454][T11804] ? __pfx_binder_ioctl+0x10/0x10 [ 496.578473][T11804] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 496.578500][T11804] ? __lock_acquire+0xab9/0xd20 [ 496.578535][T11804] ? __fget_files+0x2a/0x420 [ 496.578568][T11804] ? __fget_files+0x2a/0x420 [ 496.578586][T11804] ? __fget_files+0x3a0/0x420 [ 496.578604][T11804] ? __fget_files+0x2a/0x420 [ 496.578626][T11804] ? bpf_lsm_file_ioctl+0x9/0x20 [ 496.578643][T11804] ? __pfx_binder_ioctl+0x10/0x10 [ 496.578661][T11804] __se_sys_ioctl+0xfc/0x170 [ 496.578680][T11804] do_syscall_64+0xfa/0x3b0 [ 496.578696][T11804] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.578712][T11804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.578725][T11804] ? clear_bhb_loop+0x60/0xb0 [ 496.578742][T11804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.578756][T11804] RIP: 0033:0x7f45fc78ebe9 [ 496.578770][T11804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.578782][T11804] RSP: 002b:00007f45fd5d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.578798][T11804] RAX: ffffffffffffffda RBX: 00007f45fc9b5fa0 RCX: 00007f45fc78ebe9 [ 496.578809][T11804] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 496.578818][T11804] RBP: 00007f45fd5d4090 R08: 0000000000000000 R09: 0000000000000000 [ 496.578827][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.578835][T11804] R13: 00007f45fc9b6038 R14: 00007f45fc9b5fa0 R15: 00007f45fcadfa28 [ 496.578859][T11804] [ 496.578894][T11804] binder: 11803:11804 ioctl c0306201 2000000001c0 returned -14 [ 497.403707][T11812] capability: warning: `syz.2.1228' uses 32-bit capabilities (legacy support in use) [ 497.918760][T10865] usbhid 1-1:1.0: can't add hid device: -32 [ 497.926587][T10865] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 498.154261][T11788] bridge0: entered promiscuous mode [ 498.187125][T11788] debugfs: 'hsr1' already exists in 'hsr' [ 498.196630][T11788] Cannot create hsr debugfs directory [ 498.204932][T11788] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 498.219695][ T24] usb 1-1: USB disconnect, device number 93 [ 498.238609][T11788] hsr1: entered allmulticast mode [ 498.247632][T11788] bridge0: entered allmulticast mode [ 498.255872][T11788] bond0: entered allmulticast mode [ 498.261081][T11788] bond_slave_0: entered allmulticast mode [ 498.269611][T11788] bond_slave_1: entered allmulticast mode [ 498.276484][T11788] macvlan3: entered allmulticast mode [ 498.285771][T11788] team0: entered allmulticast mode [ 498.302963][T11788] team_slave_0: entered allmulticast mode [ 498.313091][T11788] team_slave_1: entered allmulticast mode [ 498.333401][T11788] geneve0: entered allmulticast mode [ 498.771828][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 498.971656][ T5957] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 498.995483][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 499.001724][T11840] syz.6.1234: attempt to access beyond end of device [ 499.001724][T11840] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 499.066939][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.397538][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 499.412361][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 499.466423][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 499.484466][ T5957] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.588827][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 499.609144][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 499.817351][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 499.848843][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 499.872652][ T5957] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 499.889267][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.063306][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.094251][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 500.100258][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 500.120038][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 500.135723][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 500.177501][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 500.187812][ T5957] usb 6-1: config 0 descriptor?? [ 500.196744][T11833] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 500.205636][ T5957] hub 6-1:0.0: USB hub found [ 500.227860][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 500.440013][ T5957] hub 6-1:0.0: 15 ports detected [ 500.446046][ T5957] hub 6-1:0.0: insufficient power available to use all downstream ports [ 500.547670][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.557024][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.595384][T10865] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 500.763215][T10865] usb 5-1: device descriptor read/64, error -71 [ 501.061648][T10865] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 501.221689][T10865] usb 5-1: device descriptor read/64, error -71 [ 501.334719][T10865] usb usb5-port1: attempt power cycle [ 501.361999][ T10] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 501.390716][T11859] input: syz0 as /devices/virtual/input/input25 [ 501.517043][ T5957] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 501.524322][ T5957] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 501.556240][ T5957] usbhid 6-1:0.0: can't add hid device: -32 [ 501.569493][ T5957] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 501.585202][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592293][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.699929][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.710892][T10865] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 501.721454][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.732840][ T10] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 501.979392][T10865] usb 5-1: device descriptor read/8, error -71 [ 502.007046][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.083650][ T10] usb 1-1: config 0 descriptor?? [ 502.252119][ T5927] usb 6-1: USB disconnect, device number 63 [ 502.271675][T10865] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 502.314403][T10865] usb 5-1: device descriptor read/8, error -71 [ 502.631930][T10865] usb usb5-port1: unable to enumerate USB device [ 503.303599][ T929] usb 3-1: USB disconnect, device number 95 [ 503.405786][T11855] sctp: [Deprecated]: syz.0.1237 (pid 11855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.405786][T11855] Use struct sctp_sack_info instead [ 503.731673][ T43] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 503.991642][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 504.009517][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 504.049659][ T43] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 504.070291][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.084220][ T43] usb 5-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 504.130030][ T43] usb 5-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 504.367254][ T43] usb 5-1: SerialNumber: 殹岰鉴糬 [ 504.541334][ T10] usb 1-1: USB disconnect, device number 94 [ 504.843500][T11877] syzkaller0: entered promiscuous mode [ 504.849320][T11877] syzkaller0: entered allmulticast mode [ 505.102077][T11900] futex_wake_op: syz.2.1247 tries to shift op by 32; fix this program [ 506.402591][ T929] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 506.551730][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 506.590410][ T929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.603207][ T929] usb 3-1: config 7 has an invalid interface number: 79 but max is 0 [ 506.622171][ T929] usb 3-1: config 7 has no interface number 0 [ 506.638452][ T929] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 506.654267][ T929] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 506.665824][ T929] usb 3-1: config 7 interface 79 has no altsetting 0 [ 506.685737][ T929] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 506.761803][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.770144][ T929] usb 3-1: Product: syz [ 506.781085][ T929] usb 3-1: Manufacturer: syz [ 506.791684][ T929] usb 3-1: SerialNumber: syz [ 506.821840][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 506.937833][T11908] delete_channel: no stack [ 507.016320][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 507.032690][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.057116][T11919] netlink: 'syz.2.1252': attribute type 28 has an invalid length. [ 507.058082][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 507.080924][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.082411][T11919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.090005][ T10] usb 1-1: Product: syz [ 507.119565][T11919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.121997][ T10] usb 1-1: Manufacturer: syz [ 507.172622][ T10] usb 1-1: SerialNumber: syz [ 507.191932][ T929] usb 3-1: USB disconnect, device number 96 [ 507.192603][ T10] usb 1-1: config 0 descriptor?? [ 507.204344][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 507.243647][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 507.574817][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 508.501790][ T5957] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 508.736044][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.759677][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.769769][ T5957] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 508.787698][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.799498][ T5957] usb 3-1: config 0 descriptor?? [ 509.195401][T11937] syz.5.1256: attempt to access beyond end of device [ 509.195401][T11937] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 509.718330][ T43] usbhid 5-1:1.0: can't add hid device: -32 [ 509.729814][ T43] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 509.937686][T11930] sctp: [Deprecated]: syz.2.1255 (pid 11930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.937686][T11930] Use struct sctp_sack_info instead [ 510.344311][T10865] usb 1-1: USB disconnect, device number 95 [ 510.386346][ T43] usb 5-1: USB disconnect, device number 94 [ 510.924826][ T43] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 511.020249][ T929] usb 3-1: USB disconnect, device number 97 [ 511.091768][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 511.098730][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 511.149169][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.226233][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.353551][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 511.411680][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 511.442098][ T5957] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 511.507955][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.541739][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.552982][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.593647][ T43] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 511.631769][ T929] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 511.701637][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 511.708529][ T5957] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 511.720396][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 511.731794][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 511.745466][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.755409][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 511.768211][ T5957] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 511.779619][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.791760][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 511.811747][ T5957] usb 1-1: Product: syz [ 511.823482][ T929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.841633][ T5957] usb 1-1: Manufacturer: syz [ 511.849125][ T929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.858592][ T5957] usb 1-1: SerialNumber: syz [ 511.890919][ T5957] usb 1-1: config 0 descriptor?? [ 511.902538][ T929] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 511.915854][T11964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 511.934728][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.001860][ T929] usb 3-1: Product: syz [ 512.017133][ T929] usb 3-1: Manufacturer: syz [ 512.022161][ T5957] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 512.053681][ T929] usb 3-1: SerialNumber: syz [ 512.061835][ T5957] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 512.082449][ T929] usb 3-1: config 0 descriptor?? [ 512.425973][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.435023][ T5957] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 512.472314][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.503155][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.520417][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.566081][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.578310][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.592205][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.601942][ T5957] usb 3-1: USB disconnect, device number 98 [ 512.650340][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.661671][ T929] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 512.701886][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.730924][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.763150][ T24] usb 1-1: USB disconnect, device number 96 [ 512.882469][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.894346][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.970564][ T929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.027123][ T929] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 513.066163][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.094822][ T929] usb 6-1: config 0 descriptor?? [ 513.596262][ T10] usb 5-1: USB disconnect, device number 95 [ 513.708698][ T929] hid_parser_main: 6 callbacks suppressed [ 513.708720][ T929] acrux 0003:1A34:0802.001D: unknown main item tag 0x0 [ 515.108231][ T929] acrux 0003:1A34:0802.001D: unknown main item tag 0x0 [ 515.243269][ T929] acrux 0003:1A34:0802.001D: unknown main item tag 0x0 [ 515.328654][ T929] acrux 0003:1A34:0802.001D: unknown main item tag 0x0 [ 515.338465][ T929] acrux 0003:1A34:0802.001D: unknown main item tag 0x0 [ 515.386848][ T929] acrux 0003:1A34:0802.001D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 515.429371][ T929] acrux 0003:1A34:0802.001D: no inputs found [ 515.468192][ T929] acrux 0003:1A34:0802.001D: Failed to enable force feedback support, error: -19 [ 515.667324][ T929] usb 6-1: USB disconnect, device number 64 [ 515.942281][ T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 516.134749][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 516.249852][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 516.260237][ T10] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 516.310933][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.336234][ T10] usb 7-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 516.424081][ T10] usb 7-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 516.457634][ T10] usb 7-1: SerialNumber: 殹岰鉴糬 [ 517.025615][T12003] syzkaller0: entered promiscuous mode [ 517.031831][T12003] syzkaller0: entered allmulticast mode [ 517.201769][ T929] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 517.490930][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.512562][ T929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.528463][ T929] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 517.545365][ T929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.579352][ T929] usb 6-1: config 0 descriptor?? [ 517.595094][T12017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.002003][ T24] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 518.143810][ T24] usb 5-1: device descriptor read/64, error -71 [ 518.482245][ T24] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 518.715116][ T24] usb 5-1: device descriptor read/64, error -71 [ 518.816175][T12015] sctp: [Deprecated]: syz.5.1273 (pid 12015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 518.816175][T12015] Use struct sctp_sack_info instead [ 518.843802][ T24] usb usb5-port1: attempt power cycle [ 519.021721][T10333] Bluetooth: hci4: command 0x0406 tx timeout [ 519.181718][T10865] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 519.298547][ T24] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 519.344727][T10865] usb 3-1: config 0 has no interfaces? [ 519.354408][T10865] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 519.371367][T10865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.394206][T10865] usb 3-1: Product: syz [ 519.433119][ T24] usb 5-1: device descriptor read/8, error -71 [ 519.440643][T10865] usb 3-1: Manufacturer: syz [ 519.456572][T10865] usb 3-1: SerialNumber: syz [ 519.589742][T10865] usb 3-1: config 0 descriptor?? [ 519.763677][ T24] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 519.847126][ T24] usb 5-1: device descriptor read/8, error -71 [ 519.972494][ T24] usb usb5-port1: unable to enumerate USB device [ 520.281265][T10865] usb 6-1: USB disconnect, device number 65 [ 520.558185][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1280'. [ 520.578361][T12043] FAULT_INJECTION: forcing a failure. [ 520.578361][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 520.611653][T12043] CPU: 0 UID: 0 PID: 12043 Comm: syz.5.1279 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 520.611677][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.611686][T12043] Call Trace: [ 520.611694][T12043] [ 520.611702][T12043] dump_stack_lvl+0x189/0x250 [ 520.611725][T12043] ? __pfx____ratelimit+0x10/0x10 [ 520.611744][T12043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.611765][T12043] ? __pfx__printk+0x10/0x10 [ 520.611790][T12043] ? __pfx___might_resched+0x10/0x10 [ 520.611808][T12043] should_fail_ex+0x414/0x560 [ 520.611831][T12043] should_failslab+0xa8/0x100 [ 520.611854][T12043] __kmalloc_noprof+0xcb/0x4f0 [ 520.611871][T12043] ? __kasan_kmalloc+0x93/0xb0 [ 520.611888][T12043] ? nla_strdup+0x9d/0x140 [ 520.611910][T12043] nla_strdup+0x9d/0x140 [ 520.611931][T12043] nf_tables_newtable+0x491/0x1890 [ 520.611952][T12043] ? __pfx_nfnl_pernet+0x2/0x10 [ 520.611984][T12043] nfnetlink_rcv+0x1132/0x2520 [ 520.612028][T12043] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 520.612059][T12043] ? ref_tracker_free+0x63a/0x7d0 [ 520.612103][T12043] ? __netlink_deliver_tap+0x807/0x850 [ 520.612120][T12043] ? netlink_deliver_tap+0x2e/0x1b0 [ 520.612154][T12043] netlink_unicast+0x82c/0x9e0 [ 520.612179][T12043] ? __pfx_netlink_unicast+0x10/0x10 [ 520.612197][T12043] ? netlink_sendmsg+0x642/0xb30 [ 520.612213][T12043] ? skb_put+0x11b/0x210 [ 520.612236][T12043] netlink_sendmsg+0x805/0xb30 [ 520.612273][T12043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.612295][T12043] ? aa_sock_msg_perm+0xf1/0x1d0 [ 520.612317][T12043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.612333][T12043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.612352][T12043] __sock_sendmsg+0x219/0x270 [ 520.612373][T12043] ____sys_sendmsg+0x505/0x830 [ 520.612399][T12043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.612428][T12043] ? import_iovec+0x74/0xa0 [ 520.612447][T12043] ___sys_sendmsg+0x21f/0x2a0 [ 520.612470][T12043] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.612524][T12043] ? __fget_files+0x2a/0x420 [ 520.612545][T12043] ? __fget_files+0x3a0/0x420 [ 520.612576][T12043] __x64_sys_sendmsg+0x19b/0x260 [ 520.612600][T12043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.612630][T12043] ? __pfx_ksys_write+0x10/0x10 [ 520.612648][T12043] ? rcu_is_watching+0x15/0xb0 [ 520.612668][T12043] ? do_syscall_64+0xbe/0x3b0 [ 520.612691][T12043] do_syscall_64+0xfa/0x3b0 [ 520.612709][T12043] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.612726][T12043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.612740][T12043] ? clear_bhb_loop+0x60/0xb0 [ 520.612759][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.612774][T12043] RIP: 0033:0x7fc8c418ebe9 [ 520.612790][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.612803][T12043] RSP: 002b:00007fc8c5080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.612820][T12043] RAX: ffffffffffffffda RBX: 00007fc8c43b5fa0 RCX: 00007fc8c418ebe9 [ 520.612831][T12043] RDX: 0000000000008040 RSI: 0000200000000180 RDI: 0000000000000003 [ 520.612841][T12043] RBP: 00007fc8c5080090 R08: 0000000000000000 R09: 0000000000000000 [ 520.612851][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.612860][T12043] R13: 00007fc8c43b6038 R14: 00007fc8c43b5fa0 R15: 00007fc8c44dfa28 [ 520.612887][T12043] [ 520.947324][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.016989][ T929] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 521.196736][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.213160][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.226411][ T929] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 521.237835][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.323163][ T929] usb 1-1: config 0 descriptor?? [ 521.551799][ T10] usbhid 7-1:1.0: can't add hid device: -32 [ 521.557983][ T10] usbhid 7-1:1.0: probe with driver usbhid failed with error -32 [ 521.774622][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1281'. [ 521.840788][ T929] pyra 0003:1E7D:2CF6.001F: unknown global tag 0xe [ 521.849526][ T929] pyra 0003:1E7D:2CF6.001F: item 0 4 1 14 parsing failed [ 521.866754][ T929] pyra 0003:1E7D:2CF6.001F: parse failed [ 521.872749][ T929] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -22 [ 522.740677][ T5957] usb 3-1: USB disconnect, device number 99 [ 522.757636][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.788924][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.812038][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.820885][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.334844][T12040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.363158][T12058] veth1_macvtap: left promiscuous mode [ 523.395512][ T5927] usb 7-1: USB disconnect, device number 41 [ 523.468867][T12041] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 524.903042][ T10] usb 1-1: USB disconnect, device number 97 [ 525.176539][T12092] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1290'. [ 525.456174][T12099] FAULT_INJECTION: forcing a failure. [ 525.456174][T12099] name failslab, interval 1, probability 0, space 0, times 0 [ 525.469288][T12099] CPU: 0 UID: 0 PID: 12099 Comm: syz.0.1291 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 525.469314][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.469324][T12099] Call Trace: [ 525.469332][T12099] [ 525.469340][T12099] dump_stack_lvl+0x189/0x250 [ 525.469366][T12099] ? __pfx____ratelimit+0x10/0x10 [ 525.469386][T12099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.469407][T12099] ? __pfx__printk+0x10/0x10 [ 525.469434][T12099] ? __pfx___might_resched+0x10/0x10 [ 525.469450][T12099] ? fs_reclaim_acquire+0x7d/0x100 [ 525.469479][T12099] should_fail_ex+0x414/0x560 [ 525.469505][T12099] should_failslab+0xa8/0x100 [ 525.469529][T12099] __kmalloc_cache_noprof+0x70/0x3d0 [ 525.469551][T12099] ? nft_trans_elem_alloc+0x55/0x320 [ 525.469571][T12099] ? nft_set_elem_expr_setup+0xab/0x830 [ 525.469596][T12099] nft_trans_elem_alloc+0x55/0x320 [ 525.469614][T12099] ? nf_tables_newsetelem+0x24bc/0x4340 [ 525.469641][T12099] nf_tables_newsetelem+0x24db/0x4340 [ 525.469705][T12099] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 525.469729][T12099] ? __lock_acquire+0xab9/0xd20 [ 525.469783][T12099] ? nla_validate_array+0xfc/0x260 [ 525.469834][T12099] ? __pfx___nla_validate_parse+0x10/0x10 [ 525.469860][T12099] ? __lock_acquire+0xab9/0xd20 [ 525.469894][T12099] ? nfnl_pernet+0x23/0x240 [ 525.469920][T12099] ? __nla_parse+0x40/0x60 [ 525.469945][T12099] nfnetlink_rcv+0x1132/0x2520 [ 525.469988][T12099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 525.470024][T12099] ? ref_tracker_free+0x63a/0x7d0 [ 525.470067][T12099] ? __netlink_deliver_tap+0x807/0x850 [ 525.470087][T12099] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.470123][T12099] netlink_unicast+0x82c/0x9e0 [ 525.470150][T12099] ? __pfx_netlink_unicast+0x10/0x10 [ 525.470170][T12099] ? netlink_sendmsg+0x642/0xb30 [ 525.470190][T12099] ? skb_put+0x11b/0x210 [ 525.470216][T12099] netlink_sendmsg+0x805/0xb30 [ 525.470245][T12099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.470270][T12099] ? aa_sock_msg_perm+0xf1/0x1d0 [ 525.470293][T12099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.470313][T12099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.470335][T12099] __sock_sendmsg+0x219/0x270 [ 525.470356][T12099] ____sys_sendmsg+0x505/0x830 [ 525.470387][T12099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.470422][T12099] ? import_iovec+0x74/0xa0 [ 525.470459][T12099] ___sys_sendmsg+0x21f/0x2a0 [ 525.470486][T12099] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.470543][T12099] ? __fget_files+0x2a/0x420 [ 525.470567][T12099] ? __fget_files+0x3a0/0x420 [ 525.470602][T12099] __x64_sys_sendmsg+0x19b/0x260 [ 525.470627][T12099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.470659][T12099] ? __pfx_ksys_write+0x10/0x10 [ 525.470678][T12099] ? rcu_is_watching+0x15/0xb0 [ 525.470702][T12099] ? do_syscall_64+0xbe/0x3b0 [ 525.470728][T12099] do_syscall_64+0xfa/0x3b0 [ 525.470748][T12099] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.470773][T12099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.470791][T12099] ? clear_bhb_loop+0x60/0xb0 [ 525.470812][T12099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.470827][T12099] RIP: 0033:0x7f0cf098ebe9 [ 525.470845][T12099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.470861][T12099] RSP: 002b:00007f0cf1851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.470881][T12099] RAX: ffffffffffffffda RBX: 00007f0cf0bb5fa0 RCX: 00007f0cf098ebe9 [ 525.470896][T12099] RDX: 0000000000008040 RSI: 0000200000000180 RDI: 0000000000000003 [ 525.470908][T12099] RBP: 00007f0cf1851090 R08: 0000000000000000 R09: 0000000000000000 [ 525.470920][T12099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.470930][T12099] R13: 00007f0cf0bb6038 R14: 00007f0cf0bb5fa0 R15: 00007f0cf0cdfa28 [ 525.470960][T12099] [ 526.691733][ T5927] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 527.061668][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 527.071799][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.208690][T12109] netlink: 'syz.0.1293': attribute type 10 has an invalid length. [ 527.235952][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 527.272354][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 527.339691][ T5927] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 527.379343][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.418090][ T5927] usb 3-1: Product: syz [ 527.441663][ T5927] usb 3-1: Manufacturer: syz [ 527.463736][ T24] usb 7-1: config 0 has no interfaces? [ 527.478384][ T5927] usb 3-1: SerialNumber: syz [ 527.531912][ T5927] usb 3-1: config 0 descriptor?? [ 527.595501][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 527.649810][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.683564][ T24] usb 7-1: Product: syz [ 527.700886][ T24] usb 7-1: Manufacturer: syz [ 527.721237][ T24] usb 7-1: SerialNumber: syz [ 527.769752][ T24] usb 7-1: config 0 descriptor?? [ 527.845087][T10865] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 528.080632][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.131609][T10865] usb 5-1: Using ep0 maxpacket: 8 [ 528.145119][T10865] usb 5-1: config 1 interface 0 has no altsetting 0 [ 528.155403][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.171057][T10865] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 528.192342][T10865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.193882][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 528.212182][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 528.279702][T10865] usb 5-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 528.312881][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.366571][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 528.377848][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 528.389264][T10865] usb 5-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 528.422312][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.485519][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.495402][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.504004][ T24] usb 6-1: Product: ㅶ鐈驥谣砘蔰葿椣箛釬蜔봄靷ﰙ첾释㌷沉瑛⠸覫Ꝋꞗ쎏따ᏺ忲돑䈃Ꝥ煙擐翕좹ꉬ㗦ꀆ䤟놊㾜뎔浘䃡䀉ﭹ嫗脜蟜䂐᧨㍆௛珈傫갗ﲿ쨘瞆ᤵ잍曄 [ 528.533630][T10865] usb 5-1: SerialNumber: 殹岰鉴糬 [ 528.539296][ T24] usb 6-1: Manufacturer: з [ 528.556548][ T24] usb 6-1: SerialNumber: ӿ [ 528.819672][T12127] sctp: [Deprecated]: syz.0.1300 (pid 12127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.819672][T12127] Use struct sctp_sack_info instead [ 528.848307][T12118] syzkaller0: entered promiscuous mode [ 528.854163][T12118] syzkaller0: entered allmulticast mode [ 529.042417][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'. [ 529.191512][ T24] cdc_ncm 6-1:1.0: bind() failure [ 529.220065][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 529.230300][ T24] cdc_ncm 6-1:1.1: bind() failure [ 529.286866][ T24] usb 6-1: USB disconnect, device number 66 [ 529.467566][ T5927] usb 3-1: USB disconnect, device number 100 [ 529.858556][ T5927] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 530.023875][ T5927] usb 3-1: device descriptor read/64, error -71 [ 530.049070][T12142] syz.5.1303: attempt to access beyond end of device [ 530.049070][T12142] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 530.332003][ T5927] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 530.481712][ T5927] usb 3-1: device descriptor read/64, error -71 [ 530.582999][ T5927] usb usb3-port1: attempt power cycle [ 530.921732][ T5927] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 530.952466][ T5927] usb 3-1: device descriptor read/8, error -71 [ 531.202189][ T5927] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 531.244571][ T5927] usb 3-1: device descriptor read/8, error -71 [ 531.353562][ T5927] usb usb3-port1: unable to enumerate USB device [ 533.315841][T12132] macvtap0: entered allmulticast mode [ 533.321287][T12132] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 533.351088][T12158] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1305'. [ 533.387121][T10865] usbhid 5-1:1.0: can't add hid device: -71 [ 533.396608][T10864] usb 7-1: USB disconnect, device number 42 [ 533.402874][T10865] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 533.442801][T10865] usb 5-1: USB disconnect, device number 100 [ 535.761703][T10864] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 535.936510][T12197] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 535.996883][T12195] fuse: Bad value for 'fd' [ 536.036499][T10864] usb 3-1: config 0 has no interfaces? [ 536.047217][T10864] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 536.088278][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 536.101689][T10864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.133256][T10864] usb 3-1: Product: syz [ 536.149850][T10864] usb 3-1: Manufacturer: syz [ 536.181766][T10864] usb 3-1: SerialNumber: syz [ 536.206917][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1314'. [ 536.227131][T10864] usb 3-1: config 0 descriptor?? [ 536.696290][T12202] fuse: Unknown parameter 'group?H00000000000000000000' [ 536.972405][T12211] syz.4.1315: attempt to access beyond end of device [ 536.972405][T12211] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 537.241805][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 537.490385][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 537.523946][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1320'. [ 537.592428][ T24] usb 7-1: config 0 has no interfaces? [ 537.699576][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 537.732519][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.755280][ T24] usb 7-1: Product: syz [ 537.771883][ T24] usb 7-1: Manufacturer: syz [ 537.782062][ T24] usb 7-1: SerialNumber: syz [ 537.791675][ T5927] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 537.813019][ T24] usb 7-1: config 0 descriptor?? [ 537.962855][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 537.975323][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.083512][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.094067][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.484889][ T5927] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.528209][ T5927] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 538.576630][T12222] cifs: Unknown parameter 'fd' [ 538.599936][ T5927] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 538.641838][ T5927] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 538.677105][T12224] misc userio: No port type given on /dev/userio [ 538.694187][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 538.723472][ T5927] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.744826][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 538.779860][ T5927] usb 1-1: SerialNumber: syz [ 538.814573][T12217] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 538.846609][ T5927] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 538.890176][ T5927] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 539.082275][ T5927] usb 3-1: USB disconnect, device number 105 [ 539.097171][ T5957] usb 1-1: USB disconnect, device number 99 [ 539.501872][ T5927] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 539.517678][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 539.647281][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 539.693031][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.717869][ T5927] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.785924][ T5927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.798555][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.821411][ T5927] usb 3-1: Product: syz [ 539.836016][ T5927] usb 3-1: Manufacturer: syz [ 539.840835][ T5927] usb 3-1: SerialNumber: syz [ 539.872347][ T24] usb 7-1: USB disconnect, device number 43 [ 540.073972][T12238] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1326'. [ 540.177628][T12229] pim6reg1: entered allmulticast mode [ 540.415193][ T5927] cdc_ncm 3-1:1.0: bind() failure [ 540.519076][ T5927] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 540.569203][ T5927] cdc_ncm 3-1:1.1: bind() failure [ 540.608647][ T5927] usb 3-1: USB disconnect, device number 106 [ 540.791815][ T24] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 541.062614][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.087596][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 541.105763][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 541.142811][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.192616][ T24] usb 7-1: config 0 descriptor?? [ 541.213875][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 541.239087][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 541.267608][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 541.378727][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 541.396934][ T24] usb 7-1: media controller created [ 541.808340][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.051444][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 542.066367][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 542.140069][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 542.173891][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 542.196626][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 542.353618][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.361710][ T24] dvb-usb: error while querying for an remote control event. [ 542.533687][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.539750][ T24] dvb-usb: error while querying for an remote control event. [ 542.678304][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 542.731789][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 542.740539][ T24] dvb-usb: error while querying for an remote control event. [ 543.111769][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 543.117557][ T24] dvb-usb: error while querying for an remote control event. [ 543.189526][ T5957] usb 7-1: USB disconnect, device number 44 [ 543.357637][ T5957] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 544.515564][T12314] syz.2.1341: attempt to access beyond end of device [ 544.515564][T12314] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 544.615042][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 544.748876][T12322] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1345'. [ 544.812568][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 544.825953][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.942510][ T24] usb 5-1: config 0 has no interfaces? [ 545.028909][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 545.172941][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.356729][ T24] usb 5-1: config 0 descriptor?? [ 545.642615][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.652147][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.702763][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.734876][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.022307][ T929] usb 5-1: USB disconnect, device number 101 [ 546.661675][ T5927] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 546.804461][ T929] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 546.851756][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 546.886028][ T5927] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.934779][ T5927] usb 3-1: config 0 has no interface number 0 [ 547.046434][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.088053][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 547.100199][ T5927] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 547.315761][ T929] usb 5-1: config 0 has no interfaces? [ 547.322599][ T5927] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.362498][ T929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 547.426256][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.447430][ T5927] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 547.507126][ T929] usb 5-1: Product: syz [ 547.511451][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.526786][ T929] usb 5-1: Manufacturer: syz [ 547.531505][ T929] usb 5-1: SerialNumber: syz [ 547.559972][ T5927] usb 3-1: config 0 descriptor?? [ 547.562502][ T929] usb 5-1: config 0 descriptor?? [ 547.597625][ T5927] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.632495][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1355'. [ 547.700797][T12366] bridge1: entered promiscuous mode [ 547.882792][ T929] usb 3-1: USB disconnect, device number 107 [ 547.931213][ T929] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 548.282141][T10865] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 548.482466][T10865] usb 7-1: Using ep0 maxpacket: 8 [ 548.500396][T10865] usb 7-1: config 1 interface 0 has no altsetting 0 [ 548.514734][T10865] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 548.528662][T10865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.554243][T10865] usb 7-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 548.643396][T10865] usb 7-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 548.844536][T10865] usb 7-1: SerialNumber: 殹岰鉴糬 [ 549.237732][ T43] usb 5-1: USB disconnect, device number 102 [ 549.239430][T12373] syzkaller0: entered promiscuous mode [ 549.255455][T12373] syzkaller0: entered allmulticast mode [ 549.822031][ T5957] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 549.910625][T12414] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 549.917172][T12414] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.996299][T12414] vhci_hcd vhci_hcd.0: Device attached [ 550.079422][ T5957] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 550.088141][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.142146][ T5957] usb 1-1: config 0 has no interface number 0 [ 550.181770][ T5957] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 550.238206][ T5957] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.258416][ T5957] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 550.281855][ T5927] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 550.300925][ T5957] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 550.336990][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.370426][ T5957] usb 1-1: config 0 descriptor?? [ 550.388847][ T5957] HFC-S_USB 1-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 550.600009][ T43] usb 1-1: USB disconnect, device number 100 [ 550.622206][T12419] vhci_hcd: connection reset by peer [ 550.628242][ T6490] vhci_hcd: stop threads [ 550.641644][ T6490] vhci_hcd: release socket [ 550.664429][ T6490] vhci_hcd: disconnect device [ 550.831817][ T5957] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 550.991427][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.020090][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.034096][ T5957] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.043471][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.066717][ T5957] usb 3-1: SerialNumber: syz [ 551.299299][ T5957] usb 3-1: 0:2 : does not exist [ 551.362140][ T5957] usb 3-1: USB disconnect, device number 108 [ 551.475970][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.557525][T12440] fuse: Bad value for 'fd' [ 553.919360][T10865] usbhid 7-1:1.0: can't add hid device: -32 [ 553.926145][T10865] usbhid 7-1:1.0: probe with driver usbhid failed with error -32 [ 554.239283][T12445] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 554.256669][T12461] pim6reg: entered allmulticast mode [ 554.263932][T12462] pim6reg: left allmulticast mode [ 554.337995][ T43] usb 7-1: USB disconnect, device number 45 [ 554.406844][T12470] program syz.0.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.439875][T12470] program syz.0.1384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.585802][T12473] ALSA: mixer_oss: invalid OSS volume './file0' [ 554.592654][T12473] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 554.601011][T12473] ALSA: mixer_oss: invalid OSS volume '2' [ 554.609895][T12474] Option ' ' to dns_resolver key: bad/missing value [ 554.640890][T12473] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 554.669383][T12473] ALSA: mixer_oss: invalid OSS volume '3' [ 554.678545][T12479] syz.0.1388: attempt to access beyond end of device [ 554.678545][T12479] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 554.715892][T12473] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 555.132272][ T43] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 555.293743][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.337839][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 555.368413][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.378368][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.393165][T12490] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 555.404557][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.411780][ T5927] vhci_hcd: vhci_device speed not set [ 555.563141][ T5966] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 555.729405][ T43] usb 7-1: USB disconnect, device number 46 [ 555.731626][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 555.763638][ T5966] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 555.781216][ T5966] usb 5-1: config 0 has no interface number 0 [ 555.788745][ T5966] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.801483][ T5966] usb 5-1: config 0 interface 85 has no altsetting 0 [ 555.812710][ T5966] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 555.833639][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.854525][ T5966] usb 5-1: Product: syz [ 555.858768][ T5966] usb 5-1: Manufacturer: syz [ 555.871950][ T5966] usb 5-1: SerialNumber: syz [ 555.895871][ T5966] usb 5-1: config 0 descriptor?? [ 556.343124][ T5966] appletouch 5-1:0.85: Geyser mode initialized. [ 556.442263][ T5966] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input29 [ 556.501932][ T43] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 556.716615][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 556.734668][ T43] usb 7-1: config 1 interface 0 has no altsetting 0 [ 556.747476][ T43] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.40 [ 556.803851][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.812753][ T43] usb 7-1: Product: 첗귑锤妕䷑奈⠻틓ㇿ筏㓉ꗓ邗㚳笶俽춵㲓츗煂ᠹ㴐硻䳾ߖ톈矎㬡ອ藶睡䰕嵈芮낈猕컸냥젒靣뵰᱕Ԗ麊䵲걢夈⁹뻙쵽偋崟䘷눅磕ꕹᣝⶶ幫嚆釺卥쩩㻅ཽյ튡䎍舾ﶆ틹㒶㏨恛맸骟퍗袦럩䙰赎㛂䶢⫺Ⅺ௯魃玁ಯߣ褥蟓䦓㉕✣ [ 556.846725][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.866527][ T43] usb 7-1: Manufacturer: 홡폫㸽迿㮭蓤铑₉ྵᐋ䀆톦៶◢侾㙑䊬혌⤰㝳暟疹ꝯ꺏⪵蟅䭬ⴋ檕뚪㕗堻੊໋慶퍳긐༟芮嵿睋ᑧ좊㞹歗엓㨶섁䑔⣅✈ˊሹ垱鳑ẗ閌ӡ툿୪햩䦓ᗻ঵쩱狶䈇볒ྥ릏펀䪛餴볞ꄈ৆罙⛶䧒ꏂ㷉ꦔ麳㐲⋭⃇䞩싚މ筺㦼찛Ｈ䠲巿黭ᢳ騫㱷迤꾀撵ƭ롅 [ 556.900125][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.913327][ T43] usb 7-1: SerialNumber: 殹岰鉴糬 [ 556.930093][T12495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.950011][T12495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.137595][ T5927] usb 5-1: USB disconnect, device number 103 [ 557.168542][ T5927] appletouch 5-1:0.85: input: appletouch disconnected [ 557.364185][T12511] syzkaller0: entered promiscuous mode [ 557.370751][T12511] syzkaller0: entered allmulticast mode [ 558.882189][T12534] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.905676][ T5957] IPVS: starting estimator thread 0... [ 558.991699][T12536] IPVS: using max 49 ests per chain, 117600 per kthread [ 559.459945][T12540] [U] 5ѨDՍ [ 559.464163][T12540] [U] DLY>D@ [ 559.467987][T12540] [U] [ 559.470678][T12540] [U] [ 559.473358][T12540] [U] [ 559.481073][T12540] [U] [ 559.483798][T12540] [U] [ 559.486482][T12540] [U] [ 559.489183][T12540] [U] [ 559.492004][T12540] [U] [ 559.494794][T12540] [U] [ 559.497501][T12540] [U] [ 559.510872][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 560.313301][T12537] [U] [ 562.115741][ T43] usbhid 7-1:1.0: can't add hid device: -32 [ 562.122066][ T43] usbhid 7-1:1.0: probe with driver usbhid failed with error -32 [ 563.027773][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.034830][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.122610][ T5966] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 563.207440][T12575] binder: BINDER_SET_CONTEXT_MGR already set [ 563.213829][T12575] binder: 12573:12575 ioctl 4018620d 200000000040 returned -16 [ 563.352717][ T5966] usb 5-1: config 0 has no interfaces? [ 563.369488][ T5966] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 563.379874][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.390426][ T5966] usb 5-1: Product: syz [ 563.407766][ T5966] usb 5-1: Manufacturer: syz [ 563.439455][ T5966] usb 5-1: SerialNumber: syz [ 563.482176][ T5966] usb 5-1: config 0 descriptor?? [ 563.678385][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 563.689535][T12579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'. [ 563.857216][ T30] audit: type=1326 audit(1754520246.777:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cf098ebe9 code=0x0 [ 565.536968][ T43] usb 7-1: USB disconnect, device number 47 [ 565.731749][ T929] usb 5-1: USB disconnect, device number 104 [ 565.798583][T12589] dlm: non-version read from control device 8224 [ 565.807353][T12590] bridge1: entered promiscuous mode [ 565.934906][T12595] fuse: Bad value for 'user_id' [ 565.939990][T12595] fuse: Bad value for 'user_id' [ 566.131523][T12602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1418'. [ 566.288858][T10865] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 566.362082][ T43] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 566.372351][T10864] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 566.463573][T10865] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 566.491615][T10865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.517930][T10865] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.534427][T10865] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.591971][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 566.607101][ T43] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 566.617518][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.626398][T10865] usb 1-1: Product: syz [ 566.628695][ T43] usb 7-1: Product: syz [ 566.640991][T10865] usb 1-1: Manufacturer: syz [ 566.663225][T10864] usb 5-1: Using ep0 maxpacket: 32 [ 566.676919][T10865] usb 1-1: SerialNumber: syz [ 566.683256][ T43] usb 7-1: Manufacturer: syz [ 566.690463][T10864] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 566.701220][ T43] usb 7-1: SerialNumber: syz [ 566.726339][T10864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.743077][T10865] usb 1-1: config 0 descriptor?? [ 566.748141][ T43] usb 7-1: config 0 descriptor?? [ 566.754537][T10864] usb 5-1: config 0 has no interface number 0 [ 566.764627][T10865] usb 1-1: selecting invalid altsetting 0 [ 566.770585][T10864] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 567.291241][T10864] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 567.322041][T10864] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 567.351844][T10864] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 567.515494][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.525088][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.566724][T12615] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1417'. [ 567.576233][T12615] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1417'. [ 567.647743][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 567.666970][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 567.721674][ T5966] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 568.746737][T10864] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 568.760329][T10864] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 568.775526][T10864] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 568.782361][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 568.859195][ T43] usb 7-1: media controller created [ 568.901670][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 568.919269][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.971328][T10864] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 568.989468][T10864] usb 5-1: config 0 interface 239 has no altsetting 0 [ 569.007014][ T5966] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.068601][ T5966] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.202493][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 569.243247][ T5966] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 569.304829][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.323857][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 569.392795][ T5966] usb 3-1: Product: syz [ 569.400639][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 569.403753][ T5966] usb 3-1: Manufacturer: syz [ 569.473556][ T5966] usb 3-1: SerialNumber: syz [ 569.484167][ T43] usb 7-1: USB disconnect, device number 48 [ 569.569459][ T5966] usb 3-1: config 0 descriptor?? [ 569.691908][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 569.859351][ T5966] usb 3-1: can't set config #0, error -71 [ 569.922185][ T5966] usb 3-1: USB disconnect, device number 109 [ 570.015428][T10864] usb 5-1: string descriptor 0 read error: -71 [ 570.016391][T12620] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1421'. [ 570.057165][T10864] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 570.071600][T10864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.136243][T10864] usb 5-1: config 0 descriptor?? [ 570.174189][T10864] usb 5-1: can't set config #0, error -71 [ 570.234864][T10864] usb 5-1: USB disconnect, device number 105 [ 570.672082][T10864] usb 1-1: USB disconnect, device number 101 [ 570.862312][T12634] syzkaller0: entered promiscuous mode [ 570.922918][T12634] syzkaller0: entered allmulticast mode [ 570.962545][ T5957] ------------[ cut here ]------------ [ 570.973668][ T5957] WARNING: CPU: 1 PID: 5957 at kernel/cgroup/rstat.c:305 css_rstat_flush+0x6d0/0x1890 [ 570.983257][ T5957] Modules linked in: [ 570.987570][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: kworker/1:7 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 570.999292][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.009384][ T5957] Workqueue: cgroup_destroy css_free_rwork_fn [ 571.015509][ T5957] RIP: 0010:css_rstat_flush+0x6d0/0x1890 [ 571.021137][ T5957] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 2a 80 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57 [ 571.040736][ T5957] RSP: 0018:ffffc90004f2f848 EFLAGS: 00010093 [ 571.046796][ T5957] RAX: ffffffff81b8963f RBX: ffff88814d87f800 RCX: ffff888056cbbc00 [ 571.054946][ T5957] RDX: 0000000000000000 RSI: ffffffff8be325e0 RDI: ffff8880b8640f88 [ 571.062902][ T5957] RBP: ffffffff8dbdbd10 R08: ffffffff8fa34137 R09: 1ffffffff1f46826 [ 571.071112][ T5957] R10: dffffc0000000000 R11: fffffbfff1f46827 R12: ffff88814d87f800 [ 571.079078][ T5957] R13: 1ffff11024b84801 R14: ffff888125c24008 R15: ffffe8ffffc626f8 [ 571.087135][ T5957] FS: 0000000000000000(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 [ 571.096604][ T5957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.103272][ T5957] CR2: 000020000005e030 CR3: 00000000673b4000 CR4: 00000000003526f0 [ 571.111348][ T5957] Call Trace: [ 571.114635][ T5957] [ 571.117608][ T5957] ? __lock_acquire+0xab9/0xd20 [ 571.122455][ T5957] css_rstat_exit+0xa9/0x320 [ 571.127036][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.132742][ T5957] ? percpu_ref_exit+0xc5/0x1c0 [ 571.137598][ T5957] css_free_rwork_fn+0x90/0xb80 [ 571.142433][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.148218][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.153924][ T5957] process_scheduled_works+0xade/0x17b0 [ 571.159459][ T5957] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.165433][ T5957] worker_thread+0x8a0/0xda0 [ 571.170011][ T5957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.176339][ T5957] ? __kthread_parkme+0x7b/0x200 [ 571.181270][ T5957] kthread+0x70e/0x8a0 [ 571.185334][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 571.190989][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.195613][ T5957] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.200816][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.206020][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.210623][ T5957] ret_from_fork+0x3fc/0x770 [ 571.215284][ T5957] ? __pfx_ret_from_fork+0x10/0x10 [ 571.220566][ T5957] ? __switch_to_asm+0x39/0x70 [ 571.225427][ T5957] ? __switch_to_asm+0x33/0x70 [ 571.230188][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.234774][ T5957] ret_from_fork_asm+0x1a/0x30 [ 571.239662][ T5957] [ 571.242674][ T5957] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 571.249932][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: kworker/1:7 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 571.261725][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.271943][ T5957] Workqueue: cgroup_destroy css_free_rwork_fn [ 571.278007][ T5957] Call Trace: [ 571.281287][ T5957] [ 571.284290][ T5957] dump_stack_lvl+0x99/0x250 [ 571.288868][ T5957] ? __asan_memcpy+0x40/0x70 [ 571.293482][ T5957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.298660][ T5957] ? __pfx__printk+0x10/0x10 [ 571.303252][ T5957] vpanic+0x281/0x750 [ 571.307225][ T5957] ? __pfx__printk+0x10/0x10 [ 571.311830][ T5957] ? __pfx_vpanic+0x10/0x10 [ 571.316591][ T5957] ? is_bpf_text_address+0x26/0x2b0 [ 571.321780][ T5957] panic+0xb9/0xc0 [ 571.325482][ T5957] ? __pfx_panic+0x10/0x10 [ 571.329896][ T5957] __warn+0x31b/0x4b0 [ 571.333854][ T5957] ? css_rstat_flush+0x6d0/0x1890 [ 571.338856][ T5957] ? css_rstat_flush+0x6d0/0x1890 [ 571.343869][ T5957] report_bug+0x2be/0x4f0 [ 571.348201][ T5957] ? css_rstat_flush+0x6d0/0x1890 [ 571.353394][ T5957] ? css_rstat_flush+0x6d0/0x1890 [ 571.358415][ T5957] ? css_rstat_flush+0x6d2/0x1890 [ 571.363436][ T5957] handle_bug+0x84/0x160 [ 571.367703][ T5957] exc_invalid_op+0x1a/0x50 [ 571.372207][ T5957] asm_exc_invalid_op+0x1a/0x20 [ 571.377052][ T5957] RIP: 0010:css_rstat_flush+0x6d0/0x1890 [ 571.382780][ T5957] Code: ff df 80 3c 08 00 74 08 4c 89 ff e8 2a 80 6a 00 4d 8b 27 4c 3b 64 24 20 74 24 e8 7b 15 07 00 e9 77 ff ff ff e8 71 15 07 00 90 <0f> 0b 90 eb be e8 66 15 07 00 4c 8b 74 24 20 e9 c5 10 00 00 e8 57 [ 571.402547][ T5957] RSP: 0018:ffffc90004f2f848 EFLAGS: 00010093 [ 571.408691][ T5957] RAX: ffffffff81b8963f RBX: ffff88814d87f800 RCX: ffff888056cbbc00 [ 571.416648][ T5957] RDX: 0000000000000000 RSI: ffffffff8be325e0 RDI: ffff8880b8640f88 [ 571.424696][ T5957] RBP: ffffffff8dbdbd10 R08: ffffffff8fa34137 R09: 1ffffffff1f46826 [ 571.432757][ T5957] R10: dffffc0000000000 R11: fffffbfff1f46827 R12: ffff88814d87f800 [ 571.440740][ T5957] R13: 1ffff11024b84801 R14: ffff888125c24008 R15: ffffe8ffffc626f8 [ 571.448880][ T5957] ? css_rstat_flush+0x6cf/0x1890 [ 571.453920][ T5957] ? css_rstat_flush+0x6cf/0x1890 [ 571.458940][ T5957] ? __lock_acquire+0xab9/0xd20 [ 571.463907][ T5957] css_rstat_exit+0xa9/0x320 [ 571.468496][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.474205][ T5957] ? percpu_ref_exit+0xc5/0x1c0 [ 571.479153][ T5957] css_free_rwork_fn+0x90/0xb80 [ 571.484092][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.489807][ T5957] ? process_scheduled_works+0x9ef/0x17b0 [ 571.495532][ T5957] process_scheduled_works+0xade/0x17b0 [ 571.501083][ T5957] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.507065][ T5957] worker_thread+0x8a0/0xda0 [ 571.511661][ T5957] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.518150][ T5957] ? __kthread_parkme+0x7b/0x200 [ 571.523251][ T5957] kthread+0x70e/0x8a0 [ 571.527395][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 571.532945][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.537526][ T5957] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.542719][ T5957] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.547898][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.552470][ T5957] ret_from_fork+0x3fc/0x770 [ 571.557130][ T5957] ? __pfx_ret_from_fork+0x10/0x10 [ 571.562221][ T5957] ? __switch_to_asm+0x39/0x70 [ 571.566980][ T5957] ? __switch_to_asm+0x33/0x70 [ 571.571818][ T5957] ? __pfx_kthread+0x10/0x10 [ 571.576407][ T5957] ret_from_fork_asm+0x1a/0x30 [ 571.581163][ T5957] [ 571.584439][ T5957] Kernel Offset: disabled [ 571.588749][ T5957] Rebooting in 86400 seconds..