last executing test programs: 25.528397739s ago: executing program 4 (id=168): syz_usbip_server_init(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23.901985642s ago: executing program 4 (id=176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x32) (async) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x0, 0x3a, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x81, 0x40, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xe, 0x9, {0x7, 0x25, 0x1, 0x4, 0x4, 0xa52}}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x3ca21824, 0x80) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x700, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x69, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010104, @empty}}}}) (async) fchmod(r1, 0x80) 22.348207323s ago: executing program 4 (id=182): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x80) write$dsp(r4, &(0x7f0000000240)=' ', 0x1) close(0x3) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000000001050400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400200100000000000000000000000000020c0002800500"], 0xa4}}, 0x810) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x20000080) 19.247482753s ago: executing program 4 (id=189): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r4, 0x1000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r4, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 18.229386601s ago: executing program 4 (id=195): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x44, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x30, 0x1, [@m_xt={0x2c, 0xf, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}}, 0x0) (fail_nth: 2) 17.868254368s ago: executing program 4 (id=196): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x4, 0x0, [0x756, 0xe92b, 0xfffff1ab, 0x8, 0x9, 0xfffffffa, 0x5, 0x379, 0x4, 0x4993, 0x9, 0x3, 0x9, 0x8000, 0x3]}, {0x12, 0x0, [0x8, 0xb, 0x10, 0x8, 0x80000000, 0x80000001, 0x2, 0x6, 0xffffffff, 0x8, 0x5, 0x4, 0x6, 0x5, 0xff, 0x5]}, {0x0, 0x0, [0xe3, 0x6, 0x40, 0x241, 0x0, 0x6, 0x4, 0x71c17528, 0x7, 0xff, 0x8001, 0x9894, 0xea7e, 0x2, 0x10001, 0x5]}], r2, 0x1, 0x1, 0xd8}}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 17.434345413s ago: executing program 32 (id=196): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x4, 0x0, [0x756, 0xe92b, 0xfffff1ab, 0x8, 0x9, 0xfffffffa, 0x5, 0x379, 0x4, 0x4993, 0x9, 0x3, 0x9, 0x8000, 0x3]}, {0x12, 0x0, [0x8, 0xb, 0x10, 0x8, 0x80000000, 0x80000001, 0x2, 0x6, 0xffffffff, 0x8, 0x5, 0x4, 0x6, 0x5, 0xff, 0x5]}, {0x0, 0x0, [0xe3, 0x6, 0x40, 0x241, 0x0, 0x6, 0x4, 0x71c17528, 0x7, 0xff, 0x8001, 0x9894, 0xea7e, 0x2, 0x10001, 0x5]}], r2, 0x1, 0x1, 0xd8}}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 11.78402379s ago: executing program 3 (id=212): syz_usbip_server_init(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xa1, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x7f, 0x10, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef9926b902"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0x100, 0x8a}, {0x6, 0x24, 0x1a, 0x3, 0x2b}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0xd, [0x5, 0xd, 0x2, 0xab4f, 0x5, 0x3]}, @obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0xfffe}, @mbim_extended={0x8, 0x24, 0x1c, 0x5ab, 0x10, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xa295, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa2, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0x7, 0x99, 0x40, 0x4}, 0x35, &(0x7f0000000200)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc, 0x2, 0xa28}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x113, 0xf000, 0x2, [0xffc00f, 0xc000, 0xffc000, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x6, 0x4}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}]}) 9.110941096s ago: executing program 0 (id=213): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r1, &(0x7f00000023c0)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, 'A\x00', 0x8, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local}}}}}, 0x62) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.9371331s ago: executing program 2 (id=215): socket$nl_netfilter(0x10, 0x3, 0xc) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x7, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x223021d7e2098c03, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x4, 0x0, r3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa000108000604001e00000000000000000000e6fb3e69903de4ee9e00"], 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40051) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {&(0x7f0000000700), r5, 0x6}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, &(0x7f0000000300)="6218633c30a2") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 8.739753686s ago: executing program 2 (id=217): syz_open_dev$cec(0x0, 0x0, 0x0) setuid(0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xe9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x24048000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x20008000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x1000000) 8.625459359s ago: executing program 3 (id=218): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x101021) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 7.208962609s ago: executing program 3 (id=221): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = socket$isdn(0x22, 0x2, 0x10) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1d17}], 0x1, 0x40000060, 0x0) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 7.049011228s ago: executing program 2 (id=222): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdb7b, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x3, 0x0, 0x40, 0xfffffffffffffffd, 0x20000002}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0xc18}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = socket$isdn(0x22, 0x2, 0x10) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1d17}], 0x1, 0x40000060, 0x0) r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (fail_nth: 1) 6.020285584s ago: executing program 1 (id=223): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) r1 = shmget$private(0x0, 0x2000, 0x3c001301, &(0x7f0000000000/0x2000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r5}) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000340)=""/4096) syz_usb_connect$cdc_ecm(0xe3793c7b002693e2, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "e4"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffff646a, 0xcc, 0xff, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x94, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2b, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x3, 0x30, 0x8}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0xb5, 0x2, 0x7, 0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_ep_write(r0, 0x8d, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000001340)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) 5.750430056s ago: executing program 0 (id=224): syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000380)={0x8, 'veth0_to_hsr\x00', {'wg1\x00'}, 0x6}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, &(0x7f0000000000)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r6 = syz_clone(0x1000, &(0x7f0000000180)="d80b4ba0391d9be78e43175d", 0xc, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="6335e85774263d6fcc518dedbfa000c3cf0d22101c1543a83ba7708d0baab11fb4a361687219098963f45c0f5281dea014bd4fe54e3074a7c0328b85d7db8230035128eee22ef335fb9ae2fed3a594688a7be7dc0a66b7f75ac046a97aa8cbe2b73c741868dd88de6b4b060408869d1b76d2d9fdcd75a1906c2dbddd506d3e3ceeebac9dbd19d51f35bcaf62ee") r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000340)={r8, r1, 0x3}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b04000000000a0101000000000000b2a2ea7255fddda57a"], 0x20}, 0x0) 5.338189087s ago: executing program 5 (id=226): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) 5.051053774s ago: executing program 5 (id=227): syz_usbip_server_init(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x14e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xa1, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x30, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x2, 0x1, 0x7f, 0x10, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef9926b902"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0x100, 0x8a}, {0x6, 0x24, 0x1a, 0x3, 0x2b}, [@country_functional={0x12, 0x24, 0x7, 0x4, 0xd, [0x5, 0xd, 0x2, 0xab4f, 0x5, 0x3]}, @obex={0x5, 0x24, 0x15, 0x5}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0xfffe}, @mbim_extended={0x8, 0x24, 0x1c, 0x5ab, 0x10, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xa295, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x40, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xa2, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x8, 0x7, 0x99, 0x40, 0x4}, 0x35, &(0x7f0000000200)={0x5, 0xf, 0x35, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc, 0x2, 0xa28}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x113, 0xf000, 0x2, [0xffc00f, 0xc000, 0xffc000, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x6, 0x4}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}]}) 4.031603055s ago: executing program 3 (id=228): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f0000000180)={0xa, {0x0, 0x1, 0x1, 0xff}}) 3.897903625s ago: executing program 0 (id=229): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) (fail_nth: 1) 3.895289118s ago: executing program 1 (id=230): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x101021) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 3.764435581s ago: executing program 2 (id=231): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000040)=0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000280012800a00010076786c616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000002000040008000a00", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008020) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast1, 0xffff}, 0x1c) 3.349881071s ago: executing program 0 (id=232): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x6a3}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1, {[0x5, 0xa526, 0x4, 0x3, 0xfffffff1, 0x98, 0x3b, 0x4]}}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x7, {0xffff, 0x1}, {0x48, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x7}, {0x1, 0x5, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r8, &(0x7f0000000040)="e2", 0x2250) 2.861373055s ago: executing program 2 (id=233): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1d, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000fc0)=[@exit_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000500)="b3185d7b19438bab8166204bb18d83ffb56f70b003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c0801000000cf5ad07693727980eea946e6c9a1723e81bfa5c3688803c8a124d4e236079682e0addcb27dff938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x0, 0x2}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 2.833786103s ago: executing program 1 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc0501, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000024c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x10000, 0x10, 0x1, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.713790929s ago: executing program 3 (id=235): close(0xffffffffffffffff) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) futex_waitv(&(0x7f0000001980)=[{0x2, &(0x7f00000018c0)=0x2, 0x82}, {0x0, &(0x7f0000001900), 0x2}, {0x2000, 0x0, 0x82}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x240000c1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3}, 0x8) syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000600)=""/194) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) 2.62123979s ago: executing program 1 (id=236): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) bind$can_j1939(r0, &(0x7f00000000c0), 0x18) read$FUSE(0xffffffffffffffff, &(0x7f000000fdc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009080)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x6, {0x8, 0xa, 0x0, {0x0, 0x6, 0x1, 0xa30, 0x7, 0x552, 0xe767, 0x8, 0x10000, 0x2000, 0x2, r2, r3, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0xf) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000400)={0xb0, 0x0, 0x3, [{{0x0, 0x2, 0x6, 0x9eae00000000000, 0xffff, 0x1ff, {0x5, 0x1, 0x6, 0x0, 0x7, 0x7, 0xfffffffd, 0x1, 0x0, 0x6000, 0x59b1, r6, r7, 0x5, 0x2}}, {0x1, 0x0, 0x6, 0x3, 'source'}}]}, 0xb0) fcntl$getownex(r0, 0x10, &(0x7f0000000740)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r10 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1000080, &(0x7f0000006200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYRESDEC=0x0, @ANYBLOB="0e", @ANYRES32]) read$FUSE(r12, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000000040)={0x50, 0x0, r13, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r12, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r12, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x9, 0xfffffffe, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x5, 0x8000, 0xfffffffc, 0x0, r14, 0x6, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a00)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r16 = getegid() stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000002e80)='./file0\x00', 0x0, 0x20, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000380)="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", 0x2000, &(0x7f0000003100)={&(0x7f0000002380)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x2d, 0x230f, 0x48001000, 0x0, 0xa, 0x8, 0x5, 0x0, 0x0, 0x8, 0xe}}, &(0x7f00000001c0)={0x18, 0xfffffffffffffff5, 0x8000000000000001, {0x401}}, &(0x7f0000002400)={0x18, 0x0, 0x9f, {0x5}}, &(0x7f0000002440)={0x18, 0xffffffffffffffda, 0x3, {0x10}}, &(0x7f0000002480)={0x18, 0x0, 0x40, {0x7}}, 0x0, &(0x7f0000002500)={0x60, 0x0, 0x4, {{0xff, 0x8, 0x0, 0x2, 0x9, 0xa8, 0x1, 0xffffffff}}}, &(0x7f0000002580)={0x18, 0x0, 0x734, {0x5}}, &(0x7f00000025c0)={0x12, 0x0, 0x9f, {'\xff\xff'}}, &(0x7f0000002600)={0x20, 0x0, 0xf, {0x0, 0x5}}, &(0x7f00000027c0)={0x78, 0x0, 0x5, {0x5, 0x4, 0x0, {0x3, 0x0, 0x43af, 0x1, 0xd1a8, 0x2, 0x5, 0x40, 0x9, 0xa000, 0x215f, 0x0, r9, 0x9, 0x8}}}, &(0x7f0000002840)={0x90, 0x0, 0x5, {0x0, 0x0, 0x3, 0x5, 0x2, 0x1, {0x1, 0x2, 0x2, 0x9, 0xa9, 0x2, 0x10, 0x9, 0x5, 0x6000, 0x8, r10, 0xffffffffffffffff, 0x4, 0xfffffff8}}}, &(0x7f0000002900)={0x30, 0x0, 0x6, [{0x2, 0x1, 0x1, 0x10000, '}'}]}, &(0x7f0000002b40)={0x148, 0x0, 0x7f, [{{0x1, 0x3, 0xc, 0x0, 0x0, 0x81, {0x6, 0x100, 0x8000, 0xfffffffffffffffc, 0x6, 0x5, 0x7, 0xda45, 0x1200000, 0x8000, 0x81, r11, r14, 0x33a, 0xd6}}, {0x6, 0x2000000000, 0x2, 0x3, '\xff\xff'}}, {{0x1, 0x2, 0x8001, 0xfb5, 0xc06, 0x7, {0x3, 0x3, 0xfffffffffffffff2, 0x1, 0x1000, 0x5, 0x7, 0x1, 0x38, 0x2000, 0x4, r15, r16, 0x1, 0x10000}}, {0x0, 0x2, 0x0, 0x10000}}]}, 0x0, &(0x7f0000002d80)={0x20, 0x0, 0x8001, {0xc1c, 0x0, 0xffe00000, 0x3}}, &(0x7f0000002fc0)={0x130, 0x0, 0xffffffff80000000, {0x81, 0x2bc, 0x0, '\x00', {0x20, 0x9, 0x6, 0x800, r17, r18, 0x2000, '\x00', 0xfffffffff0d11712, 0x6199, 0xfff, 0x1, {0x6, 0x800}, {0xb220, 0x2}, {0x4ee, 0x80000000}, {0x9, 0x1c7}, 0x1d1, 0xfffffffb, 0x600000}}}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="d913ed3ace547f2bf20114829207ea05faffb3d18e7f000958c384e1224eace31d936890a2682fc8fd702aa381c489d361f5215b6b5d93704176150be83ff00b81026e99426dac3702b6db4c6fc059d8bcb8294e890d39f2f273c0", 0x5b}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x78, 0x20000040}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="87ebd6db2ebdf4cc236b3dfb58ec4bd838d6934217018b8c472a5300c72e499c8e5dbb010eb14480c21a03b842b758ed0637824acc3a8a8937bb28b6a60af786017606467bc735c5bb831bce91047f42d17d472c17e450470b435a1cca210a3e27b1c8283bd6", 0x66}, {&(0x7f00000005c0)="7300a6befcdd3e16b3c5e6f584c3f716d2d82f4bcd43644fc63b56e2a6b4d30f62c74ab7ed8ca8ec1296bd6315d32434827f42ed1e9bd591a10533da1d140357b1a3518c67857da39921e58a5f0c7ee4fbc7f368ed4d1d54542829f5213acdc1dd9c70a264ff991b47b4", 0x6a}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r14}}}], 0xc0, 0x8000}}], 0x2, 0x48) connect$can_j1939(r0, &(0x7f0000000140), 0x18) sendfile(r0, r0, 0x0, 0x1) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 2.479157306s ago: executing program 1 (id=237): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (fail_nth: 2) 1.985155522s ago: executing program 5 (id=238): mq_open(0x0, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e5, &(0x7f0000000300)="6218633c30a2") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) (fail_nth: 2) 1.076519747s ago: executing program 1 (id=239): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) 1.024863234s ago: executing program 5 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xc0501, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000024c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffffffffff36, 0x10000, 0x10, 0x1, 0x7, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (fail_nth: 2) 869.288203ms ago: executing program 2 (id=241): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) r1 = shmget$private(0x0, 0x2000, 0x3c001301, &(0x7f0000000000/0x2000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040), 0x0, r5}) write$binfmt_script(r2, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000340)=""/4096) syz_usb_connect$cdc_ecm(0xe3793c7b002693e2, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "e4"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffff646a, 0xcc, 0xff, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x94, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2b, 0x1, 0x5}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x3, 0x30, 0x8}, 0x13, &(0x7f00000000c0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0xb5, 0x2, 0x7, 0x3}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_ep_write(r0, 0x8d, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2c, &(0x7f0000001340)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) 464.151683ms ago: executing program 3 (id=242): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x9, 0x200e, 0x0, 0xd, 0x7, 0x3, 0x6}}) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000a0b80000000002000002400004803c0001800dffee00696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000001400000011000100"/146], 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(r0, 0x6, 0x0, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200099dd554d7000ffdbdf250200"/36], 0x24}}, 0xc800) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x37) 463.670348ms ago: executing program 0 (id=243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970000000002204fffd0008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 327.737714ms ago: executing program 5 (id=244): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe}}, './file0\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000640)=""/241, 0xf1, 0x0, &(0x7f0000000740)=""/226, 0xe2}}, 0x10) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4) (async, rerun: 32) io_setup(0x202, &(0x7f0000000200)=0x0) (rerun: 32) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r2, 0x0, 0x0, 0x2000}]) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000011}) (async, rerun: 64) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x8, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f0000000240)='GPL\x00', 0x81, 0x72, &(0x7f00000002c0)=""/114, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x0, &(0x7f0000000940)=[r4, 0xffffffffffffffff, r6], 0x0, 0x10, 0x3}, 0x94) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xff7f, 0x1, 0x0, 0x0, {{0x5, 0x1, 0xa}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r9, 0x25, 0x9, @void}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x0) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r12, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x9a, 0xe3, 0x58, 0x10, 0x7ca, 0xb800, 0x2209, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x82, 0x80, 0xaa, "", [{{0x9, 0x4, 0x76, 0x4, 0x1, 0x3, 0x0, 0x0, 0xff, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x2, 0x6}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f00000003c0)={0x4, 0xf2b8, 0x4, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2800, 0x4, 0xd3a6, 0x400, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x3, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x8, 0x6, 0xf, 0xc, 0x2, 0x5, 0x4, 0x10, 0x3, 0x0, 0x5, 0x9, 0x9, 0x0, 0x3, 0x3, 0x6, 0x8, 0x3, 0x7b, 0x3, 0xe22, 0xffff, 0x6, 0x7b, 0xd, 0x6, 0x3, 0x20, 0xc], 0x7}}, 0x3ff}) (async, rerun: 64) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xfffffffffffffd27}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000d04269aa40fd7b72a4b18000000", @ANYRES32=r14, @ANYBLOB="02000000000000000800040002000000"], 0x28}}, 0x8000) 286.856546ms ago: executing program 0 (id=245): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x101021) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 0s ago: executing program 5 (id=246): unshare(0xc040400) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xbbe40000) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x25, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x12, "4bf8269dc8c718c9d46b6fed87700d14836709"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) kernel console output (not intermixed with test programs): ve_0 (retrying later): interface not active [ 75.544559][ T5843] hsr_slave_0: entered promiscuous mode [ 75.551250][ T5843] hsr_slave_1: entered promiscuous mode [ 75.557849][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 75.563885][ T5843] Cannot create hsr debugfs directory [ 75.571295][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.578687][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.604798][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.765437][ T5846] hsr_slave_0: entered promiscuous mode [ 75.772032][ T5846] hsr_slave_1: entered promiscuous mode [ 75.778989][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 75.785030][ T5846] Cannot create hsr debugfs directory [ 75.801745][ T5847] hsr_slave_0: entered promiscuous mode [ 75.808564][ T5847] hsr_slave_1: entered promiscuous mode [ 75.815085][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 75.821278][ T5847] Cannot create hsr debugfs directory [ 76.237501][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.256023][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.272116][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.282504][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.366705][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.379229][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.405690][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.431044][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.485374][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.499272][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.510988][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.549373][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.627863][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.651966][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.665790][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.677854][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.701295][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.760357][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.798630][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.805946][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.821346][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.828629][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.853615][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.864303][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.896335][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.907156][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.948413][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.023972][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.039988][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.066668][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.074069][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.097754][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.106120][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.138066][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.170031][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.177389][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.202601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.209753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.214131][ T5836] Bluetooth: hci2: command tx timeout [ 77.219470][ T5834] Bluetooth: hci4: command tx timeout [ 77.222325][ T5836] Bluetooth: hci1: command tx timeout [ 77.228196][ T5834] Bluetooth: hci3: command tx timeout [ 77.235248][ T5826] Bluetooth: hci0: command tx timeout [ 77.262669][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.295220][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.366477][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.386810][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.409923][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.417075][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.436828][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.448297][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.456541][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.486067][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.496268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.503442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.515434][ T5845] veth0_vlan: entered promiscuous mode [ 77.537683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.545090][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.582472][ T5845] veth1_vlan: entered promiscuous mode [ 77.610283][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.713997][ T5845] veth0_macvtap: entered promiscuous mode [ 77.738983][ T5842] veth0_vlan: entered promiscuous mode [ 77.751954][ T5845] veth1_macvtap: entered promiscuous mode [ 77.770571][ T5842] veth1_vlan: entered promiscuous mode [ 77.810968][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.827358][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.845478][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.857483][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.869501][ T5843] veth0_vlan: entered promiscuous mode [ 77.897342][ T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907537][ T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.924568][ T5843] veth1_vlan: entered promiscuous mode [ 77.941299][ T168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.957960][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977011][ T5842] veth0_macvtap: entered promiscuous mode [ 78.018189][ T5842] veth1_macvtap: entered promiscuous mode [ 78.068512][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.079437][ T5843] veth0_macvtap: entered promiscuous mode [ 78.115642][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.135525][ T5843] veth1_macvtap: entered promiscuous mode [ 78.146474][ T5847] veth0_vlan: entered promiscuous mode [ 78.170159][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180360][ T5846] veth0_vlan: entered promiscuous mode [ 78.187903][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.194321][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.204515][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.219259][ T5847] veth1_vlan: entered promiscuous mode [ 78.246107][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.255527][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270823][ T5846] veth1_vlan: entered promiscuous mode [ 78.282373][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.330499][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.341723][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.360348][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.390182][ T5847] veth0_macvtap: entered promiscuous mode [ 78.403651][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.435945][ T5847] veth1_macvtap: entered promiscuous mode [ 78.438078][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.444993][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.465421][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.488171][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.507421][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.516771][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.520578][ T5846] veth0_macvtap: entered promiscuous mode [ 78.557704][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.626568][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.642244][ T5846] veth1_macvtap: entered promiscuous mode [ 78.663633][ T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.674379][ T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.695758][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.704938][ T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.705571][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.716196][ T168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.750811][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.836872][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.937037][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.947884][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965350][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.002043][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.014436][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.028514][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063681][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.122842][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.140484][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.344765][ T5826] Bluetooth: hci0: command tx timeout [ 79.350283][ T5826] Bluetooth: hci1: command tx timeout [ 79.355874][ T5826] Bluetooth: hci3: command tx timeout [ 79.361738][ T5836] Bluetooth: hci4: command tx timeout [ 79.361791][ T5147] Bluetooth: hci2: command tx timeout [ 79.616708][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.687618][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.837493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.875292][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.900225][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.106522][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.118455][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.188396][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.223032][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.348582][ T5935] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 80.355473][ T5935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.432805][ T5935] vhci_hcd vhci_hcd.0: Device attached [ 80.571631][ T5940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 80.578173][ T5940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.663642][ T980] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 81.007784][ T5940] vhci_hcd vhci_hcd.0: Device attached [ 81.135991][ T5946] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 81.142643][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 81.287380][ T5936] vhci_hcd: connection reset by peer [ 81.316046][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 81.374119][ T48] vhci_hcd vhci_hcd.4: stop threads [ 81.387041][ T5956] fuse: Unknown parameter 'group_id00000000000000000000' [ 81.481382][ T5834] Bluetooth: hci3: command tx timeout [ 81.483060][ T5905] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 81.488557][ T5834] Bluetooth: hci1: command tx timeout [ 81.488583][ T5834] Bluetooth: hci0: command tx timeout [ 81.507541][ T5834] Bluetooth: hci2: command tx timeout [ 81.510495][ T5147] Bluetooth: hci4: command tx timeout [ 81.514258][ T48] vhci_hcd vhci_hcd.4: release socket [ 81.528382][ T48] vhci_hcd vhci_hcd.4: disconnect device [ 81.747600][ T29] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 83.063515][ T5966] could not allocate digest TFM handle sha1-ssse3 [ 83.271046][ T5974] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 83.277805][ T5974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.363149][ T5974] vhci_hcd vhci_hcd.0: Device attached [ 83.368864][ T5976] syz.3.8 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 83.388117][ T5948] vhci_hcd: connection reset by peer [ 83.396326][ T1159] vhci_hcd vhci_hcd.2: stop threads [ 83.415439][ T1159] vhci_hcd vhci_hcd.2: release socket [ 83.428819][ T1159] vhci_hcd vhci_hcd.2: disconnect device [ 83.558039][ T5978] fuse: Unknown parameter 'group_id00000000000000000000' [ 83.841418][ T5941] vhci_hcd: connection reset by peer [ 84.416993][ T1159] vhci_hcd vhci_hcd.1: stop threads [ 84.424616][ T1159] vhci_hcd vhci_hcd.1: release socket [ 84.462882][ T1159] vhci_hcd vhci_hcd.1: disconnect device [ 84.564317][ T5987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 84.571088][ T5987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.711898][ T5987] vhci_hcd vhci_hcd.0: Device attached [ 85.214323][ T5914] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 85.698189][ T6004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.15'. [ 85.924397][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.283079][ T5988] vhci_hcd: connection reset by peer [ 86.300185][ T1094] vhci_hcd vhci_hcd.3: stop threads [ 86.306330][ T1094] vhci_hcd vhci_hcd.3: release socket [ 86.326599][ T1094] vhci_hcd vhci_hcd.3: disconnect device [ 86.528962][ T5975] vhci_hcd: connection reset by peer [ 86.540423][ T1094] vhci_hcd vhci_hcd.4: stop threads [ 86.548651][ T1094] vhci_hcd vhci_hcd.4: release socket [ 86.687650][ T5905] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 86.696780][ T1094] vhci_hcd vhci_hcd.4: disconnect device [ 86.888701][ T6009] Zero length message leads to an empty skb [ 86.906379][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 86.983730][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 87.014438][ T9] cfg80211: failed to load regulatory.db [ 87.155558][ T6011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 87.162237][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.170893][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 87.359121][ T6020] fuse: Unknown parameter 'group_i00000000000000000000' [ 87.591153][ T980] usb 41-1: device descriptor read/64, error -110 [ 88.038703][ T980] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 88.141720][ T6025] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.523044][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.694883][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 89.893610][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.909417][ T6042] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.966158][ T29] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.006692][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.026937][ T29] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.062586][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.121031][ T6012] vhci_hcd: connection reset by peer [ 90.127412][ T29] usb 1-1: config 0 descriptor?? [ 90.140103][ T168] vhci_hcd vhci_hcd.4: stop threads [ 90.175841][ T168] vhci_hcd vhci_hcd.4: release socket [ 90.236568][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 90.422483][ T5914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 90.483353][ T6045] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 90.490094][ T6045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.498421][ T6045] vhci_hcd vhci_hcd.0: Device attached [ 90.589846][ T6050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 90.596391][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.613771][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 90.627590][ T6053] fuse: Bad value for 'user_id' [ 90.632705][ T6053] fuse: Bad value for 'user_id' [ 91.048495][ T6056] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 91.358320][ T5914] usb 39-1: device descriptor read/64, error -110 [ 91.642947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.913062][ T5914] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 92.669907][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 92.719527][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.003012][ T29] usb 1-1: USB disconnect, device number 2 [ 93.450885][ T6072] IPv6: Can't replace route, no match found [ 93.569939][ T6046] vhci_hcd: connection reset by peer [ 93.575886][ T168] vhci_hcd vhci_hcd.4: stop threads [ 93.581237][ T168] vhci_hcd vhci_hcd.4: release socket [ 93.604016][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 93.674499][ T980] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 94.222688][ T6051] vhci_hcd: connection reset by peer [ 94.297994][ T13] vhci_hcd vhci_hcd.3: stop threads [ 94.308283][ T13] vhci_hcd vhci_hcd.3: release socket [ 94.318654][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 95.107279][ T6087] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 95.113866][ T6087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.133999][ T6087] vhci_hcd vhci_hcd.0: Device attached [ 95.839717][ T6088] vhci_hcd: connection closed [ 95.870519][ T58] vhci_hcd vhci_hcd.3: stop threads [ 95.894885][ T58] vhci_hcd vhci_hcd.3: release socket [ 95.909505][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 96.033816][ T6095] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 96.048679][ T6095] team0: Port device netdevsim0 added [ 96.532374][ T6109] QAT: Device 11 not found [ 97.073288][ T5914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 98.047279][ T6123] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 98.053867][ T6123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.103642][ T6123] vhci_hcd vhci_hcd.0: Device attached [ 98.179856][ T6128] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.186394][ T6128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.203537][ T6128] vhci_hcd vhci_hcd.0: Device attached [ 98.379397][ T6137] fuse: Bad value for 'fd' [ 98.550072][ T5914] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 98.568812][ T29] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 99.281365][ T6124] vhci_hcd: connection reset by peer [ 99.295787][ T168] vhci_hcd vhci_hcd.0: stop threads [ 99.301226][ T168] vhci_hcd vhci_hcd.0: release socket [ 99.327453][ T168] vhci_hcd vhci_hcd.0: disconnect device [ 99.505529][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.681111][ T6129] vhci_hcd: connection reset by peer [ 99.694467][ T1094] vhci_hcd vhci_hcd.2: stop threads [ 99.703337][ T1094] vhci_hcd vhci_hcd.2: release socket [ 99.712977][ T1094] vhci_hcd vhci_hcd.2: disconnect device [ 99.855325][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.872833][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.910058][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.950977][ T5885] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 99.976576][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.010200][ T5885] usb 5-1: config 0 descriptor?? [ 100.553814][ T6150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.560539][ T6150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.570580][ T6150] vhci_hcd vhci_hcd.0: Device attached [ 101.446725][ T5885] usb 5-1: USB disconnect, device number 2 [ 102.270425][ T6163] capability: warning: `syz.4.48' uses deprecated v2 capabilities in a way that may be insecure [ 102.411602][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.603762][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.773115][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 102.813496][ T5892] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 102.830269][ T5892] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 102.841756][ T5892] usb 4-1: Product: syz [ 102.846401][ T5892] usb 4-1: Manufacturer: syz [ 102.851227][ T5892] usb 4-1: SerialNumber: syz [ 102.877966][ T5892] usb 4-1: config 0 descriptor?? [ 102.910583][ T5892] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 103.520025][ T5892] gspca_zc3xx: reg_w_i err -110 [ 103.529532][ T5892] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 103.580107][ T6151] vhci_hcd: connection closed [ 103.593359][ T168] vhci_hcd vhci_hcd.0: stop threads [ 103.629546][ T168] vhci_hcd vhci_hcd.0: release socket [ 103.643532][ T168] vhci_hcd vhci_hcd.0: disconnect device [ 103.895088][ T5914] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 104.103111][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 104.198383][ T6185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 104.205248][ T6185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.274728][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.284505][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.325793][ T6185] vhci_hcd vhci_hcd.0: Device attached [ 104.706739][ T29] usb 33-1: device descriptor read/64, error -110 [ 105.093744][ T29] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 105.592564][ T6199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.54'. [ 105.901650][ T6200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.041336][ T30] audit: type=1326 audit(1775153034.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 106.068973][ T30] audit: type=1326 audit(1775153034.870:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 106.191150][ T30] audit: type=1326 audit(1775153034.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 106.341735][ T30] audit: type=1326 audit(1775153034.950:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8cadb5d04e code=0x7ffc0000 [ 106.371746][ T30] audit: type=1326 audit(1775153034.950:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 106.386871][ T5914] usb 4-1: USB disconnect, device number 2 [ 106.617313][ T6206] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.699449][ T30] audit: type=1326 audit(1775153034.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 106.859002][ T30] audit: type=1326 audit(1775153035.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 107.164910][ T30] audit: type=1326 audit(1775153035.130:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cadb3db99 code=0x7ffc0000 [ 107.211529][ T30] audit: type=1326 audit(1775153035.140:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cadb9c819 code=0x7ffc0000 [ 107.242545][ T6186] vhci_hcd: connection reset by peer [ 107.255210][ T1159] vhci_hcd vhci_hcd.0: stop threads [ 107.260464][ T1159] vhci_hcd vhci_hcd.0: release socket [ 107.328388][ T1159] vhci_hcd vhci_hcd.0: disconnect device [ 107.572835][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 109.293090][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 109.995932][ T6237] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.263039][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.273069][ T29] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 110.433027][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 110.508499][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.525132][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.553521][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.568470][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 110.578009][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.591583][ T9] usb 5-1: config 0 descriptor?? [ 111.126720][ T6251] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.363274][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.533664][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 111.545812][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.649192][ T5892] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.686036][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.700134][ T5892] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 111.718317][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.761347][ T5892] usb 3-1: config 0 descriptor?? [ 111.963097][ T5905] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 112.125991][ T5905] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.137680][ T5905] usb 4-1: config 0 has no interface number 0 [ 112.210282][ T5905] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 112.249538][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.350914][ T6261] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 112.432123][ T5905] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.483542][ T5905] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 112.516265][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 112.555363][ T5905] usb 4-1: Product: syz [ 112.596917][ T5905] usb 4-1: SerialNumber: syz [ 112.649208][ T5905] usb 4-1: config 0 descriptor?? [ 112.659757][ T5905] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 112.675644][ T5905] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 112.831863][ T6264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 112.838621][ T6264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.920007][ T6264] vhci_hcd vhci_hcd.0: Device attached [ 112.942586][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 113.153273][ T5905] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 113.373241][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 113.379776][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 113.458491][ T9] usb 5-1: USB disconnect, device number 3 [ 114.027704][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.029211][ T5914] usb 4-1: USB disconnect, device number 3 [ 114.034874][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.088300][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 114.248230][ T6265] vhci_hcd: connection reset by peer [ 114.273179][ T48] vhci_hcd vhci_hcd.1: stop threads [ 114.278523][ T48] vhci_hcd vhci_hcd.1: release socket [ 114.287255][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 114.678768][ T5914] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 114.727725][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 114.749411][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.841999][ T5892] usb 3-1: USB disconnect, device number 2 [ 115.592104][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 116.794821][ T6308] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.827834][ T6304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.246142][ T30] audit: type=1326 audit(1775153046.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 117.303131][ T30] audit: type=1326 audit(1775153046.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 117.865967][ T30] audit: type=1326 audit(1775153046.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 117.997663][ T30] audit: type=1326 audit(1775153046.060:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 118.020034][ T30] audit: type=1326 audit(1775153046.060:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 118.073816][ T6319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 118.080544][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.088447][ T30] audit: type=1326 audit(1775153046.100:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93735d04e code=0x7ffc0000 [ 118.121884][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 118.288249][ T5905] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 118.468614][ T9] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 118.586527][ T6330] fuse: Bad value for 'group_id' [ 118.591827][ T6330] fuse: Bad value for 'group_id' [ 118.793100][ T30] audit: type=1326 audit(1775153046.190:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 118.953037][ T30] audit: type=1326 audit(1775153046.190:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 119.132414][ T6333] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 119.138965][ T6333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.149997][ T6333] vhci_hcd vhci_hcd.0: Device attached [ 119.155798][ T30] audit: type=1326 audit(1775153046.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 119.713841][ T5905] usb 35-1: device descriptor read/64, error -110 [ 119.779204][ T6322] vhci_hcd: connection reset by peer [ 119.803126][ T30] audit: type=1326 audit(1775153046.250:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff93739c819 code=0x7ffc0000 [ 119.825359][ T1085] vhci_hcd vhci_hcd.0: stop threads [ 119.830780][ T1085] vhci_hcd vhci_hcd.0: release socket [ 119.853697][ T6340] FAULT_INJECTION: forcing a failure. [ 119.853697][ T6340] name failslab, interval 1, probability 0, space 0, times 1 [ 119.867335][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT(full) [ 119.867353][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 119.867365][ T6340] Call Trace: [ 119.867370][ T6340] [ 119.867376][ T6340] dump_stack_lvl+0xe8/0x150 [ 119.867405][ T6340] should_fail_ex+0x412/0x560 [ 119.867424][ T6340] should_failslab+0xa8/0x100 [ 119.867440][ T6340] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 119.867453][ T6340] ? __alloc_skb+0x186/0x7d0 [ 119.867465][ T6340] ? __alloc_skb+0x1d0/0x7d0 [ 119.867474][ T6340] ? __local_bh_enable_ip+0xd0/0x130 [ 119.867490][ T6340] __alloc_skb+0x1d0/0x7d0 [ 119.867503][ T6340] netlink_sendmsg+0x5d4/0xb40 [ 119.867519][ T6340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.867531][ T6340] ? aa_sock_msg_perm+0xf1/0x1b0 [ 119.867548][ T6340] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.867562][ T6340] ____sys_sendmsg+0x972/0x9f0 [ 119.867579][ T6340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.867595][ T6340] ? import_iovec+0x73/0xa0 [ 119.867610][ T6340] ___sys_sendmsg+0x2a5/0x360 [ 119.867624][ T6340] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.867651][ T6340] ? __fget_files+0x2a/0x420 [ 119.867660][ T6340] ? __fget_files+0x3a0/0x420 [ 119.867673][ T6340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 119.867686][ T6340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.867702][ T6340] ? __pfx_ksys_write+0x10/0x10 [ 119.867719][ T6340] do_syscall_64+0x14d/0xf80 [ 119.867733][ T6340] ? trace_irq_disable+0x3b/0x150 [ 119.867742][ T6340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.867751][ T6340] ? clear_bhb_loop+0x40/0x90 [ 119.867763][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.867773][ T6340] RIP: 0033:0x7f8cadb9c819 [ 119.867790][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.867799][ T6340] RSP: 002b:00007f8cabdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.867816][ T6340] RAX: ffffffffffffffda RBX: 00007f8cade15fa0 RCX: 00007f8cadb9c819 [ 119.867823][ T6340] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.867829][ T6340] RBP: 00007f8cabdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.867835][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.867841][ T6340] R13: 00007f8cade16038 R14: 00007f8cade15fa0 R15: 00007f8cadf3fa48 [ 119.867855][ T6340] [ 120.202422][ T6334] vhci_hcd: connection closed [ 120.202813][ T1085] vhci_hcd vhci_hcd.0: disconnect device [ 120.242122][ T1085] vhci_hcd vhci_hcd.1: stop threads [ 120.248909][ T1085] vhci_hcd vhci_hcd.1: release socket [ 120.254524][ T1085] vhci_hcd vhci_hcd.1: disconnect device [ 120.275794][ T5905] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 120.303104][ T5905] usb 35-1: enqueue for inactive port 0 [ 120.406493][ T5905] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 121.464506][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 121.568379][ T5833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.763179][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 121.770269][ T5833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.781665][ T5833] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.798814][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.826082][ T5833] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 121.871244][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.935099][ T5833] usb 5-1: config 0 descriptor?? [ 122.273797][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.88'. [ 122.306716][ T6360] FAULT_INJECTION: forcing a failure. [ 122.306716][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 122.324665][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz.1.90 Not tainted syzkaller #0 PREEMPT(full) [ 122.324691][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.324701][ T6360] Call Trace: [ 122.324708][ T6360] [ 122.324716][ T6360] dump_stack_lvl+0xe8/0x150 [ 122.324749][ T6360] should_fail_ex+0x412/0x560 [ 122.324781][ T6360] should_failslab+0xa8/0x100 [ 122.324806][ T6360] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 122.324828][ T6360] ? __alloc_skb+0x186/0x7d0 [ 122.324848][ T6360] ? __alloc_skb+0x1d0/0x7d0 [ 122.324863][ T6360] ? __local_bh_enable_ip+0xd0/0x130 [ 122.324890][ T6360] __alloc_skb+0x1d0/0x7d0 [ 122.324911][ T6360] netlink_sendmsg+0x5d4/0xb40 [ 122.324938][ T6360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.324958][ T6360] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.324994][ T6360] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.325018][ T6360] ____sys_sendmsg+0x972/0x9f0 [ 122.325049][ T6360] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.325078][ T6360] ? import_iovec+0x73/0xa0 [ 122.325104][ T6360] ___sys_sendmsg+0x2a5/0x360 [ 122.325130][ T6360] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.325182][ T6360] ? __fget_files+0x2a/0x420 [ 122.325198][ T6360] ? __fget_files+0x3a0/0x420 [ 122.325221][ T6360] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.325244][ T6360] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.325272][ T6360] ? __pfx_ksys_write+0x10/0x10 [ 122.325302][ T6360] do_syscall_64+0x14d/0xf80 [ 122.325325][ T6360] ? trace_irq_disable+0x3b/0x150 [ 122.325340][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.325358][ T6360] ? clear_bhb_loop+0x40/0x90 [ 122.325378][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.325395][ T6360] RIP: 0033:0x7fe7d0d9c819 [ 122.325411][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.325424][ T6360] RSP: 002b:00007fe7d1cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.325443][ T6360] RAX: ffffffffffffffda RBX: 00007fe7d1015fa0 RCX: 00007fe7d0d9c819 [ 122.325455][ T6360] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 122.325466][ T6360] RBP: 00007fe7d1cda090 R08: 0000000000000000 R09: 0000000000000000 [ 122.325476][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.325487][ T6360] R13: 00007fe7d1016038 R14: 00007fe7d1015fa0 R15: 00007fe7d113fa48 [ 122.325513][ T6360] [ 122.767340][ T6367] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 122.883502][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.084438][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 123.112576][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 123.141486][ T29] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 123.176222][ T29] usb 2-1: Product: syz [ 123.190460][ T29] usb 2-1: Manufacturer: syz [ 123.203014][ T29] usb 2-1: SerialNumber: syz [ 123.229405][ T29] usb 2-1: config 0 descriptor?? [ 123.250299][ T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 123.623132][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 123.877669][ T29] gspca_zc3xx: reg_w_i err -110 [ 123.882762][ T29] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 124.197690][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.92'. [ 124.577007][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.586865][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.897206][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 124.903747][ T5833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.936657][ T5833] usb 5-1: USB disconnect, device number 4 [ 125.109281][ T6382] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.418975][ T29] usb 2-1: USB disconnect, device number 2 [ 126.773730][ T6399] FAULT_INJECTION: forcing a failure. [ 126.773730][ T6399] name failslab, interval 1, probability 0, space 0, times 0 [ 126.839775][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 126.839798][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.839809][ T6399] Call Trace: [ 126.839815][ T6399] [ 126.839822][ T6399] dump_stack_lvl+0xe8/0x150 [ 126.839851][ T6399] should_fail_ex+0x412/0x560 [ 126.839881][ T6399] should_failslab+0xa8/0x100 [ 126.839912][ T6399] __kmalloc_noprof+0xe8/0x760 [ 126.839931][ T6399] ? tomoyo_encode+0x28b/0x550 [ 126.839953][ T6399] tomoyo_encode+0x28b/0x550 [ 126.839976][ T6399] tomoyo_realpath_from_path+0x58d/0x5d0 [ 126.840003][ T6399] ? tomoyo_path_number_perm+0x219/0x630 [ 126.840030][ T6399] tomoyo_path_number_perm+0x246/0x630 [ 126.840055][ T6399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 126.840080][ T6399] ? __lock_acquire+0x6b5/0x2cf0 [ 126.840112][ T6399] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 126.840146][ T6399] ? __fget_files+0x2a/0x420 [ 126.840163][ T6399] ? __fget_files+0x2a/0x420 [ 126.840174][ T6399] ? __fget_files+0x3a0/0x420 [ 126.840187][ T6399] ? __fget_files+0x2a/0x420 [ 126.840205][ T6399] security_file_ioctl+0xc3/0x2a0 [ 126.840227][ T6399] __se_sys_ioctl+0x47/0x170 [ 126.840248][ T6399] do_syscall_64+0x14d/0xf80 [ 126.840266][ T6399] ? trace_irq_disable+0x3b/0x150 [ 126.840278][ T6399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.840295][ T6399] ? clear_bhb_loop+0x40/0x90 [ 126.840312][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.840327][ T6399] RIP: 0033:0x7ff93739c819 [ 126.840341][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.840353][ T6399] RSP: 002b:00007ff9381ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.840371][ T6399] RAX: ffffffffffffffda RBX: 00007ff937616090 RCX: 00007ff93739c819 [ 126.840381][ T6399] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 126.840389][ T6399] RBP: 00007ff9381ec090 R08: 0000000000000000 R09: 0000000000000000 [ 126.840397][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.840405][ T6399] R13: 00007ff937616128 R14: 00007ff937616090 R15: 00007ff93773fa48 [ 126.840430][ T6399] [ 126.840521][ T6399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.885805][ T6401] syzkaller1: entered promiscuous mode [ 126.994507][ T5905] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 127.016415][ T6401] syzkaller1: entered allmulticast mode [ 127.128959][ T6398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.100'. [ 127.138695][ T6398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.100'. [ 127.234915][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.245791][ T5905] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.270394][ T5905] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 127.314794][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.332951][ T5905] usb 2-1: config 0 descriptor?? [ 127.367529][ T5905] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 127.406097][ T5905] dvb-usb: bulk message failed: -22 (3/0) [ 127.434841][ T6414] syzkaller0: entered promiscuous mode [ 127.440384][ T6414] syzkaller0: entered allmulticast mode [ 127.453680][ T6414] FAULT_INJECTION: forcing a failure. [ 127.453680][ T6414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.495690][ T6414] CPU: 1 UID: 0 PID: 6414 Comm: syz.2.105 Not tainted syzkaller #0 PREEMPT(full) [ 127.495715][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.495724][ T6414] Call Trace: [ 127.495731][ T6414] [ 127.495739][ T6414] dump_stack_lvl+0xe8/0x150 [ 127.495768][ T6414] should_fail_ex+0x412/0x560 [ 127.495798][ T6414] _copy_from_user+0x2d/0xb0 [ 127.495820][ T6414] __copy_msghdr+0x3c5/0x5b0 [ 127.495846][ T6414] ___sys_sendmsg+0x213/0x360 [ 127.495872][ T6414] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.495932][ T6414] ? __fget_files+0x2a/0x420 [ 127.495947][ T6414] ? __fget_files+0x3a0/0x420 [ 127.495977][ T6414] __x64_sys_sendmsg+0x1bd/0x2a0 [ 127.496001][ T6414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.496032][ T6414] ? __pfx_ksys_write+0x10/0x10 [ 127.496061][ T6414] do_syscall_64+0x14d/0xf80 [ 127.496083][ T6414] ? trace_irq_disable+0x3b/0x150 [ 127.496098][ T6414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.496115][ T6414] ? clear_bhb_loop+0x40/0x90 [ 127.496136][ T6414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.496153][ T6414] RIP: 0033:0x7f8cadb9c819 [ 127.496170][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.496183][ T6414] RSP: 002b:00007f8cabdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.496202][ T6414] RAX: ffffffffffffffda RBX: 00007f8cade15fa0 RCX: 00007f8cadb9c819 [ 127.496214][ T6414] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 127.496224][ T6414] RBP: 00007f8cabdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.496235][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.496245][ T6414] R13: 00007f8cade16038 R14: 00007f8cade15fa0 R15: 00007f8cadf3fa48 [ 127.496272][ T6414] [ 127.510032][ T5905] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 127.527371][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 127.545110][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 127.725709][ T5905] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 127.734609][ T5905] usb 2-1: media controller created [ 127.742349][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.844697][ T5905] dvb-usb: bulk message failed: -22 (6/0) [ 127.873141][ T5905] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 127.944600][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 127.970860][ T5905] dvb-usb: schedule remote query interval to 150 msecs. [ 127.988310][ T5905] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.011936][ T5905] usb 2-1: USB disconnect, device number 3 [ 128.067004][ T6433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 128.073568][ T6433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.109490][ T6433] vhci_hcd vhci_hcd.0: Device attached [ 128.193413][ T6427] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 128.199994][ T6427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.500586][ T5905] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 128.543769][ T6329] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 128.595616][ T6427] vhci_hcd vhci_hcd.0: Device attached [ 128.603981][ T5892] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 129.037632][ T6448] FAULT_INJECTION: forcing a failure. [ 129.037632][ T6448] name failslab, interval 1, probability 0, space 0, times 0 [ 129.088535][ T6434] vhci_hcd: connection reset by peer [ 129.097645][ T48] vhci_hcd vhci_hcd.1: stop threads [ 129.113147][ T48] vhci_hcd vhci_hcd.1: release socket [ 129.119112][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 129.123387][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 129.123412][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.123421][ T6448] Call Trace: [ 129.123428][ T6448] [ 129.123435][ T6448] dump_stack_lvl+0xe8/0x150 [ 129.123463][ T6448] should_fail_ex+0x412/0x560 [ 129.123501][ T6448] should_failslab+0xa8/0x100 [ 129.123528][ T6448] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 129.123547][ T6448] ? __alloc_skb+0x186/0x7d0 [ 129.123565][ T6448] ? __alloc_skb+0x1d0/0x7d0 [ 129.123580][ T6448] ? __local_bh_enable_ip+0xd0/0x130 [ 129.123605][ T6448] __alloc_skb+0x1d0/0x7d0 [ 129.123622][ T6448] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 129.123646][ T6448] netlink_sendmsg+0x5d4/0xb40 [ 129.123672][ T6448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.123692][ T6448] ? aa_sock_msg_perm+0xf1/0x1b0 [ 129.123718][ T6448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.123739][ T6448] ____sys_sendmsg+0x972/0x9f0 [ 129.123766][ T6448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.123793][ T6448] ? import_iovec+0x73/0xa0 [ 129.123815][ T6448] ___sys_sendmsg+0x2a5/0x360 [ 129.123840][ T6448] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.123889][ T6448] ? __fget_files+0x2a/0x420 [ 129.123903][ T6448] ? __fget_files+0x3a0/0x420 [ 129.123926][ T6448] __x64_sys_sendmsg+0x1bd/0x2a0 [ 129.123949][ T6448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.123976][ T6448] ? __pfx_ksys_write+0x10/0x10 [ 129.124003][ T6448] do_syscall_64+0x14d/0xf80 [ 129.124024][ T6448] ? trace_irq_disable+0x3b/0x150 [ 129.124038][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.124055][ T6448] ? clear_bhb_loop+0x40/0x90 [ 129.124074][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.124090][ T6448] RIP: 0033:0x7f8cadb9c819 [ 129.124105][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.124118][ T6448] RSP: 002b:00007f8cabdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.124136][ T6448] RAX: ffffffffffffffda RBX: 00007f8cade15fa0 RCX: 00007f8cadb9c819 [ 129.124147][ T6448] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 129.124157][ T6448] RBP: 00007f8cabdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.124167][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.124176][ T6448] R13: 00007f8cade16038 R14: 00007f8cade15fa0 R15: 00007f8cadf3fa48 [ 129.124201][ T6448] [ 129.373253][ T5914] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 129.387558][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.395854][ T5892] usb 5-1: not running at top speed; connect to a high speed hub [ 129.407872][ T6432] vhci_hcd: connection reset by peer [ 129.408749][ T5892] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.427482][ T5892] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.454628][ T13] vhci_hcd vhci_hcd.3: stop threads [ 129.459906][ T13] vhci_hcd vhci_hcd.3: release socket [ 129.469621][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 129.479325][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 129.483044][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.502963][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.543654][ T5892] usb 5-1: 0:2 : does not exist [ 129.965161][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'. [ 130.459225][ T5892] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 130.470562][ T5892] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 130.531335][ T5892] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 130.602883][ T6461] syzkaller0: entered promiscuous mode [ 130.630123][ T6464] FAULT_INJECTION: forcing a failure. [ 130.630123][ T6464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.645188][ T6461] syzkaller0: entered allmulticast mode [ 130.660486][ T5892] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 130.753067][ T6464] CPU: 1 UID: 0 PID: 6464 Comm: syz.1.114 Not tainted syzkaller #0 PREEMPT(full) [ 130.753091][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.753100][ T6464] Call Trace: [ 130.753106][ T6464] [ 130.753114][ T6464] dump_stack_lvl+0xe8/0x150 [ 130.753142][ T6464] should_fail_ex+0x412/0x560 [ 130.753171][ T6464] _copy_from_user+0x2d/0xb0 [ 130.753192][ T6464] __copy_msghdr+0x3c5/0x5b0 [ 130.753218][ T6464] ___sys_sendmsg+0x213/0x360 [ 130.753244][ T6464] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.753295][ T6464] ? __fget_files+0x2a/0x420 [ 130.753310][ T6464] ? __fget_files+0x3a0/0x420 [ 130.753335][ T6464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 130.753357][ T6464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.753387][ T6464] ? __pfx_ksys_write+0x10/0x10 [ 130.753415][ T6464] do_syscall_64+0x14d/0xf80 [ 130.753436][ T6464] ? trace_irq_disable+0x3b/0x150 [ 130.753451][ T6464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.753468][ T6464] ? clear_bhb_loop+0x40/0x90 [ 130.753489][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.753505][ T6464] RIP: 0033:0x7fe7d0d9c819 [ 130.753521][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.753534][ T6464] RSP: 002b:00007fe7d1cb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.753552][ T6464] RAX: ffffffffffffffda RBX: 00007fe7d1016090 RCX: 00007fe7d0d9c819 [ 130.753564][ T6464] RDX: 0000000000004041 RSI: 0000200000000640 RDI: 0000000000000007 [ 130.753575][ T6464] RBP: 00007fe7d1cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 130.753585][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.753602][ T6464] R13: 00007fe7d1016128 R14: 00007fe7d1016090 R15: 00007fe7d113fa48 [ 130.753628][ T6464] [ 130.955680][ T29] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.007617][ T6469] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 131.203679][ T6477] FAULT_INJECTION: forcing a failure. [ 131.203679][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 131.242150][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 131.253712][ T29] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 131.302795][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.302893][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(full) [ 131.302913][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 131.302923][ T6477] Call Trace: [ 131.302930][ T6477] [ 131.302937][ T6477] dump_stack_lvl+0xe8/0x150 [ 131.302966][ T6477] should_fail_ex+0x412/0x560 [ 131.302994][ T6477] should_failslab+0xa8/0x100 [ 131.303018][ T6477] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 131.303038][ T6477] ? __alloc_skb+0x186/0x7d0 [ 131.303055][ T6477] ? __alloc_skb+0x1d0/0x7d0 [ 131.303070][ T6477] ? __local_bh_enable_ip+0xd0/0x130 [ 131.303095][ T6477] __alloc_skb+0x1d0/0x7d0 [ 131.303116][ T6477] netlink_sendmsg+0x5d4/0xb40 [ 131.303142][ T6477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.303162][ T6477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 131.303187][ T6477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.303209][ T6477] ____sys_sendmsg+0x972/0x9f0 [ 131.303228][ T6477] ? __lock_acquire+0x6b5/0x2cf0 [ 131.303255][ T6477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.303282][ T6477] ? import_iovec+0x73/0xa0 [ 131.303303][ T6477] ___sys_sendmsg+0x2a5/0x360 [ 131.303328][ T6477] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.303352][ T6477] ? kstrtouint+0x6e/0xe0 [ 131.303395][ T6477] ? __fget_files+0x2a/0x420 [ 131.303409][ T6477] ? __fget_files+0x3a0/0x420 [ 131.303432][ T6477] __sys_sendmmsg+0x27c/0x4e0 [ 131.303458][ T6477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 131.303476][ T6477] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 131.303524][ T6477] ? ksys_write+0x242/0x270 [ 131.303545][ T6477] ? __pfx_ksys_write+0x10/0x10 [ 131.303569][ T6477] __x64_sys_sendmmsg+0xa0/0xc0 [ 131.303590][ T6477] do_syscall_64+0x14d/0xf80 [ 131.303609][ T6477] ? trace_irq_disable+0x3b/0x150 [ 131.303623][ T6477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.303639][ T6477] ? clear_bhb_loop+0x40/0x90 [ 131.303659][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.303675][ T6477] RIP: 0033:0x7f8cadb9c819 [ 131.303689][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.303702][ T6477] RSP: 002b:00007f8cabdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.303720][ T6477] RAX: ffffffffffffffda RBX: 00007f8cade15fa0 RCX: 00007f8cadb9c819 [ 131.303732][ T6477] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.303742][ T6477] RBP: 00007f8cabdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.303752][ T6477] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.303761][ T6477] R13: 00007f8cade16038 R14: 00007f8cade15fa0 R15: 00007f8cadf3fa48 [ 131.303786][ T6477] [ 131.596612][ T5892] usb 5-1: USB disconnect, device number 5 [ 131.702098][ T29] usb 1-1: config 0 descriptor?? [ 131.739993][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.118'. [ 131.760070][ T6482] tipc: Started in network mode [ 131.775739][ T6482] tipc: Node identity 5ac4070785e3, cluster identity 4711 [ 131.783973][ T6484] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 131.793723][ T6482] tipc: Enabled bearer , priority 0 [ 131.809071][ T6486] tipc: Resetting bearer [ 131.936875][ T29] usb 1-1: string descriptor 0 read error: -71 [ 131.945076][ T29] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 131.959744][ T29] uvcvideo 1-1:0.0: Found UVC 0.00 device (2833:0201) [ 131.972508][ T29] uvcvideo 1-1:0.0: No valid video chain found. [ 131.985639][ T29] usb 1-1: USB disconnect, device number 3 [ 132.079388][ T6481] tipc: Disabling bearer [ 132.310674][ T6493] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.124'. [ 132.428547][ T6495] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 132.435827][ T6495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.452162][ T6495] vhci_hcd vhci_hcd.0: Device attached [ 132.667224][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 132.957845][ T29] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 133.093259][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099648][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270259][ T6496] vhci_hcd: connection reset by peer [ 133.278858][ T13] vhci_hcd vhci_hcd.2: stop threads [ 133.284469][ T13] vhci_hcd vhci_hcd.2: release socket [ 133.290406][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 133.448922][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 133.462771][ T6511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'. [ 133.688330][ T6329] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 134.002781][ T6535] FAULT_INJECTION: forcing a failure. [ 134.002781][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 134.152313][ T6539] program syz.3.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.166368][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(full) [ 134.166384][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.166390][ T6535] Call Trace: [ 134.166395][ T6535] [ 134.166399][ T6535] dump_stack_lvl+0xe8/0x150 [ 134.166419][ T6535] should_fail_ex+0x412/0x560 [ 134.166437][ T6535] should_failslab+0xa8/0x100 [ 134.166451][ T6535] __kmalloc_noprof+0xe8/0x760 [ 134.166463][ T6535] ? tomoyo_encode+0x28b/0x550 [ 134.166476][ T6535] tomoyo_encode+0x28b/0x550 [ 134.166488][ T6535] tomoyo_realpath_from_path+0x58d/0x5d0 [ 134.166503][ T6535] ? tomoyo_path_number_perm+0x219/0x630 [ 134.166517][ T6535] tomoyo_path_number_perm+0x246/0x630 [ 134.166531][ T6535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.166545][ T6535] ? __lock_acquire+0x6b5/0x2cf0 [ 134.166563][ T6535] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 134.166585][ T6535] ? __fget_files+0x2a/0x420 [ 134.166595][ T6535] ? __fget_files+0x2a/0x420 [ 134.166603][ T6535] ? __fget_files+0x3a0/0x420 [ 134.166611][ T6535] ? __fget_files+0x2a/0x420 [ 134.166621][ T6535] security_file_ioctl+0xc3/0x2a0 [ 134.166635][ T6535] __se_sys_ioctl+0x47/0x170 [ 134.166648][ T6535] do_syscall_64+0x14d/0xf80 [ 134.166660][ T6535] ? trace_irq_disable+0x3b/0x150 [ 134.166668][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.166678][ T6535] ? clear_bhb_loop+0x40/0x90 [ 134.166689][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.166699][ T6535] RIP: 0033:0x7ff93739c819 [ 134.166709][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.166717][ T6535] RSP: 002b:00007ff93820d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.166728][ T6535] RAX: ffffffffffffffda RBX: 00007ff937615fa0 RCX: 00007ff93739c819 [ 134.166735][ T6535] RDX: 0000200000000200 RSI: 0000000000004b4a RDI: 0000000000000004 [ 134.166741][ T6535] RBP: 00007ff93820d090 R08: 0000000000000000 R09: 0000000000000000 [ 134.166747][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.166752][ T6535] R13: 00007ff937616038 R14: 00007ff937615fa0 R15: 00007ff93773fa48 [ 134.166767][ T6535] [ 134.166779][ T6535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.453161][ T6535] syz.3.138 uses obsolete (PF_INET,SOCK_PACKET) [ 134.494938][ T5914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 134.683089][ T5892] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.847017][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.858342][ T5892] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 134.881212][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.892600][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.904169][ T5892] usb 5-1: Product: syz [ 134.910629][ T5892] usb 5-1: Manufacturer: syz [ 134.929935][ T5892] usb 5-1: SerialNumber: syz [ 134.995729][ T5892] cdc_mbim 5-1:1.0: skipping garbage [ 135.883057][ T6574] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 135.902823][ T6574] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 135.910855][ T6576] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 135.917410][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.938548][ T6576] vhci_hcd vhci_hcd.0: Device attached [ 135.997442][ T6574] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 136.005347][ T6574] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 136.087186][ T6582] fuse: Unknown parameter 'grou00000000000000000000' [ 136.482925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.491383][ T6329] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 136.749169][ T6577] vhci_hcd: connection reset by peer [ 136.763462][ T168] vhci_hcd vhci_hcd.0: stop threads [ 136.831105][ T168] vhci_hcd vhci_hcd.0: release socket [ 136.876730][ T168] vhci_hcd vhci_hcd.0: disconnect device [ 137.726467][ T5892] cdc_mbim 5-1:1.0: bind() failure [ 137.775864][ T5892] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.824620][ T5892] cdc_ncm 5-1:1.1: bind() failure [ 137.837154][ T6597] FAULT_INJECTION: forcing a failure. [ 137.837154][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 137.854060][ T5892] usb 5-1: USB disconnect, device number 6 [ 137.887866][ T6597] CPU: 1 UID: 0 PID: 6597 Comm: syz.1.158 Not tainted syzkaller #0 PREEMPT(full) [ 137.887881][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.887887][ T6597] Call Trace: [ 137.887892][ T6597] [ 137.887896][ T6597] dump_stack_lvl+0xe8/0x150 [ 137.887915][ T6597] should_fail_ex+0x412/0x560 [ 137.887933][ T6597] should_failslab+0xa8/0x100 [ 137.887947][ T6597] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 137.887959][ T6597] ? __alloc_skb+0x186/0x7d0 [ 137.887970][ T6597] ? __alloc_skb+0x1d0/0x7d0 [ 137.887979][ T6597] ? __local_bh_enable_ip+0xd0/0x130 [ 137.887994][ T6597] __alloc_skb+0x1d0/0x7d0 [ 137.888006][ T6597] netlink_sendmsg+0x5d4/0xb40 [ 137.888021][ T6597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.888033][ T6597] ? aa_sock_msg_perm+0xf1/0x1b0 [ 137.888049][ T6597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.888061][ T6597] ____sys_sendmsg+0x972/0x9f0 [ 137.888077][ T6597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.888093][ T6597] ? import_iovec+0x73/0xa0 [ 137.888106][ T6597] ___sys_sendmsg+0x2a5/0x360 [ 137.888120][ T6597] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.888146][ T6597] ? __fget_files+0x2a/0x420 [ 137.888155][ T6597] ? __fget_files+0x3a0/0x420 [ 137.888167][ T6597] __x64_sys_sendmsg+0x1bd/0x2a0 [ 137.888180][ T6597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.888196][ T6597] ? __pfx_ksys_write+0x10/0x10 [ 137.888212][ T6597] do_syscall_64+0x14d/0xf80 [ 137.888224][ T6597] ? trace_irq_disable+0x3b/0x150 [ 137.888233][ T6597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.888242][ T6597] ? clear_bhb_loop+0x40/0x90 [ 137.888253][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.888263][ T6597] RIP: 0033:0x7fe7d0d9c819 [ 137.888272][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.888280][ T6597] RSP: 002b:00007fe7d1cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.888291][ T6597] RAX: ffffffffffffffda RBX: 00007fe7d1015fa0 RCX: 00007fe7d0d9c819 [ 137.888298][ T6597] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 137.888304][ T6597] RBP: 00007fe7d1cda090 R08: 0000000000000000 R09: 0000000000000000 [ 137.888310][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.888315][ T6597] R13: 00007fe7d1016038 R14: 00007fe7d1015fa0 R15: 00007fe7d113fa48 [ 137.888329][ T6597] [ 138.247067][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 138.354688][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 138.354706][ T30] audit: type=1326 audit(1775153067.190:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 138.394093][ T30] audit: type=1326 audit(1775153067.230:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 138.532691][ T30] audit: type=1326 audit(1775153067.360:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 138.613627][ T6615] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 138.620204][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.621861][ T30] audit: type=1326 audit(1775153067.360:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 138.773213][ T6615] vhci_hcd vhci_hcd.0: Device attached [ 138.780214][ T30] audit: type=1326 audit(1775153067.410:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 139.226412][ T30] audit: type=1326 audit(1775153067.410:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 139.544208][ T30] audit: type=1326 audit(1775153067.410:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 139.713211][ T30] audit: type=1326 audit(1775153067.410:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 139.770918][ T30] audit: type=1326 audit(1775153067.410:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 139.812566][ T30] audit: type=1326 audit(1775153067.410:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1116d9c819 code=0x7ffc0000 [ 140.047775][ T6628] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 140.065892][ T6628] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 140.150910][ T6630] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 140.213410][ T6630] netlink: 'syz.1.165': attribute type 2 has an invalid length. [ 140.219119][ T6617] vhci_hcd: connection closed [ 140.260810][ T1094] vhci_hcd vhci_hcd.0: stop threads [ 140.279957][ T1094] vhci_hcd vhci_hcd.0: release socket [ 140.304335][ T1094] vhci_hcd vhci_hcd.0: disconnect device [ 140.589444][ T6637] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 140.595987][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.766826][ T6647] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 140.801396][ T5892] IPVS: starting estimator thread 0... [ 140.809479][ T6652] fuse: Unknown parameter 'grou00000000000000000000' [ 140.870501][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 141.218594][ T6651] IPVS: using max 54 ests per chain, 129600 per kthread [ 141.293289][ T29] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.313108][ T9] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 141.392834][ T6639] vhci_hcd: connection reset by peer [ 141.402980][ T48] vhci_hcd vhci_hcd.4: stop threads [ 141.408392][ T48] vhci_hcd vhci_hcd.4: release socket [ 141.420838][ T48] vhci_hcd vhci_hcd.4: disconnect device [ 141.480329][ T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 141.503977][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.512066][ T29] usb 2-1: Product: syz [ 141.521100][ T29] usb 2-1: Manufacturer: syz [ 141.525898][ T29] usb 2-1: SerialNumber: syz [ 141.574353][ T29] usb 2-1: config 0 descriptor?? [ 141.609432][ T29] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 141.609844][ T6329] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 141.683035][ T5833] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.722637][ T6660] binder: 6659:6660 ioctl c0306201 200000000040 returned -22 [ 141.733392][ T6660] binder: 6659:6660 ioctl c0306201 200000000640 returned -22 [ 141.833225][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 141.844556][ T5833] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 141.864280][ T5833] usb 1-1: config 0 has no interface number 0 [ 141.870445][ T5833] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.923347][ T5833] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 141.941614][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.971004][ T5833] usb 1-1: Product: syz [ 141.983138][ T5833] usb 1-1: Manufacturer: syz [ 141.987784][ T5833] usb 1-1: SerialNumber: syz [ 142.025487][ T5833] usb 1-1: config 0 descriptor?? [ 142.044088][ T5833] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 142.064876][ T5833] em28xx 1-1:0.132: Video interface 132 found: [ 142.379589][ T6662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.175'. [ 142.472998][ T29] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 142.519233][ T5833] em28xx 1-1:0.132: chip ID is em2874 [ 142.635782][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 142.650040][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 142.664749][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 142.693868][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 142.704314][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.712669][ T29] usb 5-1: Product: syz [ 142.727758][ T29] usb 5-1: Manufacturer: syz [ 142.737765][ T29] usb 5-1: SerialNumber: syz [ 142.974365][ T29] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.997016][ T29] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 143.091540][ T29] usb 5-1: USB disconnect, device number 7 [ 143.171454][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.220573][ T5833] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 143.270870][ T5833] em28xx 1-1:0.132: board has no eeprom [ 143.343472][ T5833] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 143.351764][ T5833] em28xx 1-1:0.132: analog set to bulk mode. [ 143.361877][ T6329] em28xx 1-1:0.132: Registering V4L2 extension [ 143.675003][ T5892] usb 2-1: USB disconnect, device number 4 [ 144.169272][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 144.207411][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'. [ 144.570925][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.182'. [ 144.654745][ T6329] em28xx 1-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 144.672766][ T6329] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 144.683767][ T6329] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 144.849953][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.184'. [ 145.022266][ T6702] binder: 6701:6702 ioctl c0306201 200000000040 returned -22 [ 145.038140][ T6702] binder: 6701:6702 ioctl c0306201 200000000640 returned -22 [ 145.323342][ T6329] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 145.415051][ T6329] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 145.453367][ T29] usb 1-1: USB disconnect, device number 4 [ 145.460837][ T29] em28xx 1-1:0.132: Disconnecting em28xx [ 145.525410][ T6705] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 145.531982][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.585483][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 145.663187][ T6329] usb 1-1: Decoder not found [ 145.668002][ T6329] em28xx 1-1:0.132: failed to create media graph [ 145.703200][ T6329] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 145.772816][ T6329] em28xx 1-1:0.132: Remote control support is not available for this card. [ 145.834375][ T6719] fuse: Unknown parameter 'grou00000000000000000000' [ 145.902543][ T5829] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 146.395701][ T6706] vhci_hcd: connection reset by peer [ 146.395721][ T29] em28xx 1-1:0.132: Closing input extension [ 146.417297][ T168] vhci_hcd vhci_hcd.1: stop threads [ 146.422575][ T168] vhci_hcd vhci_hcd.1: release socket [ 146.428200][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 146.443082][ T168] vhci_hcd vhci_hcd.1: disconnect device [ 146.566326][ T29] em28xx 1-1:0.132: Freeing device [ 146.703620][ T6722] fuse: Invalid uid '00000000000000000000003' [ 146.778158][ T6724] netlink: 'syz.3.190': attribute type 6 has an invalid length. [ 147.252029][ T6729] netlink: 124 bytes leftover after parsing attributes in process `syz.1.192'. [ 147.329181][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 147.469600][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 147.573083][ T6727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 147.580193][ T6727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.612866][ T6727] vhci_hcd vhci_hcd.0: Device attached [ 147.642745][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 147.654557][ T6741] vhci_hcd: connection closed [ 147.656010][ T1094] vhci_hcd vhci_hcd.3: stop threads [ 147.667984][ T1094] vhci_hcd vhci_hcd.3: release socket [ 147.678845][ T1094] vhci_hcd vhci_hcd.3: disconnect device [ 148.042190][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.349823][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.616271][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.741549][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.751728][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.760284][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.783076][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.811526][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.833956][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.946034][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 148.955341][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.330456][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 149.362617][ T5914] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 149.391268][ T5914] usb 2-1: config 0 has no interface number 0 [ 149.405015][ T5914] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.430781][ T5914] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 149.464182][ T5914] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 36, changing to 7 [ 149.493720][ T5914] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.655553][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 149.716014][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.741552][ T5914] usb 2-1: Product: syz [ 149.752394][ T5914] usb 2-1: Manufacturer: syz [ 149.803347][ T5914] usb 2-1: SerialNumber: syz [ 149.828701][ T5914] usb 2-1: config 0 descriptor?? [ 149.855737][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input9 [ 150.019501][ T1094] bridge_slave_1: left allmulticast mode [ 150.048453][ T1094] bridge_slave_1: left promiscuous mode [ 150.081907][ T6752] FAULT_INJECTION: forcing a failure. [ 150.081907][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 150.098539][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) [ 150.098555][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 150.098562][ T6752] Call Trace: [ 150.098567][ T6752] [ 150.098572][ T6752] dump_stack_lvl+0xe8/0x150 [ 150.098591][ T6752] should_fail_ex+0x412/0x560 [ 150.098610][ T6752] should_failslab+0xa8/0x100 [ 150.098624][ T6752] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 150.098636][ T6752] ? __alloc_skb+0x186/0x7d0 [ 150.098647][ T6752] ? __alloc_skb+0x1d0/0x7d0 [ 150.098656][ T6752] ? __local_bh_enable_ip+0xd0/0x130 [ 150.098670][ T6752] __alloc_skb+0x1d0/0x7d0 [ 150.098683][ T6752] netlink_sendmsg+0x5d4/0xb40 [ 150.098698][ T6752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.098709][ T6752] ? aa_sock_msg_perm+0xf1/0x1b0 [ 150.098725][ T6752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.098738][ T6752] ____sys_sendmsg+0x972/0x9f0 [ 150.098754][ T6752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.098770][ T6752] ? import_iovec+0x73/0xa0 [ 150.098783][ T6752] ___sys_sendmsg+0x2a5/0x360 [ 150.098797][ T6752] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.098824][ T6752] ? __fget_files+0x2a/0x420 [ 150.098838][ T6752] ? __fget_files+0x3a0/0x420 [ 150.098851][ T6752] __x64_sys_sendmsg+0x1bd/0x2a0 [ 150.098864][ T6752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.098880][ T6752] ? __pfx_ksys_write+0x10/0x10 [ 150.098896][ T6752] do_syscall_64+0x14d/0xf80 [ 150.098909][ T6752] ? trace_irq_disable+0x3b/0x150 [ 150.098917][ T6752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.098927][ T6752] ? clear_bhb_loop+0x40/0x90 [ 150.098938][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.098947][ T6752] RIP: 0033:0x7fe7d0d9c819 [ 150.098957][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.098965][ T6752] RSP: 002b:00007fe7d1cb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.098976][ T6752] RAX: ffffffffffffffda RBX: 00007fe7d1016090 RCX: 00007fe7d0d9c819 [ 150.098983][ T6752] RDX: 0000000004004020 RSI: 0000200000000100 RDI: 0000000000000007 [ 150.098989][ T6752] RBP: 00007fe7d1cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 150.098994][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.099000][ T6752] R13: 00007fe7d1016128 R14: 00007fe7d1016090 R15: 00007fe7d113fa48 [ 150.099014][ T6752] [ 150.345002][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.495723][ T1094] bridge_slave_0: left allmulticast mode [ 150.502176][ T1094] bridge_slave_0: left promiscuous mode [ 150.508743][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.893195][ T5147] Bluetooth: hci1: command tx timeout [ 151.034539][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.068837][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.106393][ T1094] bond0 (unregistering): Released all slaves [ 151.123066][ T5829] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 151.164069][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 151.689024][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.716159][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.734089][ T6761] bridge_slave_0: entered allmulticast mode [ 151.757188][ T6761] bridge_slave_0: entered promiscuous mode [ 151.832454][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.854655][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.873593][ T6761] bridge_slave_1: entered allmulticast mode [ 151.896561][ T6761] bridge_slave_1: entered promiscuous mode [ 151.985117][ T5829] usb 2-1: USB disconnect, device number 5 [ 151.994465][ T1094] hsr_slave_0: left promiscuous mode [ 152.028960][ T1094] hsr_slave_1: left promiscuous mode [ 152.040295][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.049428][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.097272][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.124173][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.144620][ T6797] FAULT_INJECTION: forcing a failure. [ 152.144620][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 152.167542][ T6797] CPU: 0 UID: 0 PID: 6797 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT(full) [ 152.167563][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.167572][ T6797] Call Trace: [ 152.167586][ T6797] [ 152.167592][ T6797] dump_stack_lvl+0xe8/0x150 [ 152.167615][ T6797] should_fail_ex+0x412/0x560 [ 152.167639][ T6797] should_failslab+0xa8/0x100 [ 152.167655][ T6797] ? do_getname+0x2e/0x250 [ 152.167671][ T6797] kmem_cache_alloc_noprof+0x87/0x650 [ 152.167692][ T6797] do_getname+0x2e/0x250 [ 152.167708][ T6797] ? getname_flags+0x11/0x20 [ 152.167726][ T6797] do_sys_openat2+0xca/0x200 [ 152.167746][ T6797] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.167775][ T6797] __se_sys_openat2+0x223/0x2d0 [ 152.167796][ T6797] ? __pfx___se_sys_openat2+0x10/0x10 [ 152.167825][ T6797] do_syscall_64+0x14d/0xf80 [ 152.167843][ T6797] ? trace_irq_disable+0x3b/0x150 [ 152.167854][ T6797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.167867][ T6797] ? clear_bhb_loop+0x40/0x90 [ 152.167882][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.167894][ T6797] RIP: 0033:0x7fda6c59c819 [ 152.167907][ T6797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.167917][ T6797] RSP: 002b:00007fda6d43b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 152.167931][ T6797] RAX: ffffffffffffffda RBX: 00007fda6c815fa0 RCX: 00007fda6c59c819 [ 152.167940][ T6797] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 152.167948][ T6797] RBP: 00007fda6d43b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.167956][ T6797] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 152.167962][ T6797] R13: 00007fda6c816038 R14: 00007fda6c815fa0 R15: 00007fda6c93fa48 [ 152.167983][ T6797] [ 152.448479][ T1094] veth1_macvtap: left promiscuous mode [ 152.456679][ T1094] veth0_macvtap: left promiscuous mode [ 152.465191][ T1094] veth1_vlan: left promiscuous mode [ 152.470920][ T1094] veth0_vlan: left promiscuous mode [ 152.704624][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.862968][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 152.870902][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.882415][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.896350][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.909499][ T5829] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 152.924083][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.954317][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.963967][ T5829] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.972093][ T5829] usb 1-1: Manufacturer: syz [ 152.983023][ T5147] Bluetooth: hci1: command tx timeout [ 152.991728][ T5829] usb 1-1: config 0 descriptor?? [ 153.136452][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 153.158587][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 153.355610][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.370332][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.604560][ T6803] syzkaller0: entered promiscuous mode [ 153.613355][ T6803] syzkaller0: entered allmulticast mode [ 153.708736][ T6818] FAULT_INJECTION: forcing a failure. [ 153.708736][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.725097][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 153.725123][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 153.725134][ T6818] Call Trace: [ 153.725142][ T6818] [ 153.725150][ T6818] dump_stack_lvl+0xe8/0x150 [ 153.725180][ T6818] should_fail_ex+0x412/0x560 [ 153.725214][ T6818] _copy_from_iter+0x1d3/0x1670 [ 153.725242][ T6818] ? rcu_is_watching+0x15/0xb0 [ 153.725267][ T6818] ? __pfx__copy_from_iter+0x10/0x10 [ 153.725282][ T6818] ? trace_kmalloc+0x2a/0x110 [ 153.725304][ T6818] ? rcu_is_watching+0x15/0xb0 [ 153.725328][ T6818] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 153.725354][ T6818] file_tty_write+0x4c1/0xa20 [ 153.725380][ T6818] vfs_write+0x61d/0xb90 [ 153.725406][ T6818] ? __pfx_vfs_write+0x10/0x10 [ 153.725432][ T6818] ? __fget_files+0x2a/0x420 [ 153.725461][ T6818] ksys_write+0x150/0x270 [ 153.725481][ T6818] ? __pfx_ksys_write+0x10/0x10 [ 153.725510][ T6818] do_syscall_64+0x14d/0xf80 [ 153.725531][ T6818] ? trace_irq_disable+0x3b/0x150 [ 153.725545][ T6818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.725563][ T6818] ? clear_bhb_loop+0x40/0x90 [ 153.725584][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.725599][ T6818] RIP: 0033:0x7ff93739c819 [ 153.725615][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.725628][ T6818] RSP: 002b:00007ff93820d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.725646][ T6818] RAX: ffffffffffffffda RBX: 00007ff937615fa0 RCX: 00007ff93739c819 [ 153.725658][ T6818] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.725669][ T6818] RBP: 00007ff93820d090 R08: 0000000000000000 R09: 0000000000000000 [ 153.725680][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.725689][ T6818] R13: 00007ff937616038 R14: 00007ff937615fa0 R15: 00007ff93773fa48 [ 153.725714][ T6818] [ 154.080518][ T6826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 154.087088][ T6826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.098629][ T6826] vhci_hcd vhci_hcd.0: Device attached [ 154.128697][ T6830] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 154.135694][ T6830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.147574][ T6830] vhci_hcd vhci_hcd.0: Device attached [ 154.383118][ T5914] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 154.730411][ T6835] fuse: Unknown parameter '00000000000000000000' [ 154.773142][ T9] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 154.795397][ T6834] fuse: Invalid rootmode [ 155.213108][ T5147] Bluetooth: hci1: command tx timeout [ 156.664307][ T6761] team0: Port device team_slave_0 added [ 156.673188][ T6761] team0: Port device team_slave_1 added [ 156.843847][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.866357][ T5829] rc_core: IR keymap rc-hauppauge not found [ 156.871851][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.903666][ T5829] Registered IR keymap rc-empty [ 156.917411][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.942547][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.001022][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.002795][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.036182][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.036786][ T5829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 157.087116][ T6847] netlink: 'syz.2.215': attribute type 3 has an invalid length. [ 157.098184][ T5829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 157.167311][ T6827] vhci_hcd: connection reset by peer [ 157.192401][ T58] vhci_hcd vhci_hcd.1: stop threads [ 157.198700][ T58] vhci_hcd vhci_hcd.1: release socket [ 157.209708][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.220717][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.232249][ T6851] FAULT_INJECTION: forcing a failure. [ 157.232249][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 157.235190][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 157.255585][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.293054][ T5147] Bluetooth: hci1: command tx timeout [ 157.298609][ T6831] vhci_hcd: connection reset by peer [ 157.313756][ T6851] CPU: 0 UID: 0 PID: 6851 Comm: syz.2.217 Not tainted syzkaller #0 PREEMPT(full) [ 157.313780][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.313790][ T6851] Call Trace: [ 157.313797][ T6851] [ 157.313804][ T6851] dump_stack_lvl+0xe8/0x150 [ 157.313833][ T6851] should_fail_ex+0x412/0x560 [ 157.313863][ T6851] should_failslab+0xa8/0x100 [ 157.313886][ T6851] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 157.313905][ T6851] ? __alloc_skb+0x186/0x7d0 [ 157.313923][ T6851] ? __alloc_skb+0x1d0/0x7d0 [ 157.313939][ T6851] ? __local_bh_enable_ip+0xd0/0x130 [ 157.313964][ T6851] __alloc_skb+0x1d0/0x7d0 [ 157.313987][ T6851] netlink_sendmsg+0x5d4/0xb40 [ 157.314015][ T6851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.314036][ T6851] ? aa_sock_msg_perm+0xf1/0x1b0 [ 157.314061][ T6851] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.314081][ T6851] ____sys_sendmsg+0x972/0x9f0 [ 157.314109][ T6851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.314136][ T6851] ? import_iovec+0x73/0xa0 [ 157.314158][ T6851] ___sys_sendmsg+0x2a5/0x360 [ 157.314194][ T6851] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.314244][ T6851] ? __fget_files+0x2a/0x420 [ 157.314257][ T6851] ? __fget_files+0x3a0/0x420 [ 157.314282][ T6851] __x64_sys_sendmsg+0x1bd/0x2a0 [ 157.314306][ T6851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.314336][ T6851] ? __pfx_ksys_write+0x10/0x10 [ 157.314363][ T6851] do_syscall_64+0x14d/0xf80 [ 157.314383][ T6851] ? trace_irq_disable+0x3b/0x150 [ 157.314398][ T6851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.314414][ T6851] ? clear_bhb_loop+0x40/0x90 [ 157.314434][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.314450][ T6851] RIP: 0033:0x7f8cadb9c819 [ 157.314467][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.314480][ T6851] RSP: 002b:00007f8cabdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.314499][ T6851] RAX: ffffffffffffffda RBX: 00007f8cade15fa0 RCX: 00007f8cadb9c819 [ 157.314511][ T6851] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 157.314520][ T6851] RBP: 00007f8cabdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.314529][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.314538][ T6851] R13: 00007f8cade16038 R14: 00007f8cade15fa0 R15: 00007f8cadf3fa48 [ 157.314566][ T6851] [ 157.325987][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.410660][ T36] vhci_hcd vhci_hcd.3: stop threads [ 157.443011][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.585897][ T6761] hsr_slave_0: entered promiscuous mode [ 157.599157][ T36] vhci_hcd vhci_hcd.3: release socket [ 157.602401][ T6761] hsr_slave_1: entered promiscuous mode [ 157.605029][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 157.642844][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.672346][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.683474][ T6329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.692562][ T6761] debugfs: 'hsr0' already exists in 'hsr' [ 157.701418][ T6761] Cannot create hsr debugfs directory [ 157.716352][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.753043][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.798453][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.836547][ T5829] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 157.843101][ T6329] usb 3-1: Using ep0 maxpacket: 8 [ 157.862499][ T6329] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 157.875187][ T6329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.877832][ T5829] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 157.906313][ T6329] usb 3-1: config 0 has no interface number 0 [ 157.925653][ T6329] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 157.932941][ T5829] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.939601][ T6329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.963104][ T6329] usb 3-1: Product: syz [ 157.967314][ T6329] usb 3-1: Manufacturer: syz [ 157.981496][ T6329] usb 3-1: SerialNumber: syz [ 157.989512][ T5829] usb 1-1: USB disconnect, device number 5 [ 158.062121][ T6329] usb 3-1: config 0 descriptor?? [ 158.089257][ T6329] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 158.122019][ T6329] uvcvideo 3-1:0.31: No valid video chain found. [ 158.295934][ T5833] usb 3-1: USB disconnect, device number 3 [ 158.355955][ T6761] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.378232][ T6761] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.410140][ T6761] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.422787][ T6874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.473377][ T6873] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 158.492851][ T5829] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.495896][ T6761] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.664138][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 158.670734][ T5829] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.686078][ T5829] usb 1-1: config 0 has no interface number 0 [ 158.734935][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.769889][ T5829] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.770720][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.824318][ T5829] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 158.838147][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.845369][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.869786][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 158.893444][ T5829] usb 1-1: Product: syz [ 158.905171][ T5829] usb 1-1: SerialNumber: syz [ 158.908298][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.917112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.934776][ T5829] usb 1-1: config 0 descriptor?? [ 158.961715][ T5829] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 159.065313][ T5829] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 159.183836][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.192985][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.352991][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 159.356726][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.366075][ T5892] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.368318][ T5892] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.383615][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 159.404685][ T5905] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.416743][ T5905] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.447195][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.461440][ T5905] usb 3-1: Product: syz [ 159.474826][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.494847][ T5892] usb 4-1: Product: syz [ 159.497541][ T5905] usb 3-1: Manufacturer: syz [ 159.499332][ T5892] usb 4-1: Manufacturer: syz [ 159.513771][ T5905] usb 3-1: SerialNumber: syz [ 159.514259][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 159.529940][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.537215][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.544533][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.551712][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.558931][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.566149][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.574172][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.581829][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.585203][ T6761] veth0_vlan: entered promiscuous mode [ 159.589024][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.602292][ T5829] usb 1-1: USB disconnect, device number 6 [ 159.608254][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.608289][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 159.631987][ T5892] usb 4-1: SerialNumber: syz [ 159.644264][ T5892] usb 4-1: config 0 descriptor?? [ 159.644908][ T5905] usb 3-1: config 0 descriptor?? [ 159.664341][ T6761] veth1_vlan: entered promiscuous mode [ 159.697434][ T5829] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 159.789043][ T6761] veth0_macvtap: entered promiscuous mode [ 159.820676][ T6761] veth1_macvtap: entered promiscuous mode [ 159.853129][ T5914] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 159.882391][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.898981][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.923206][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 159.940119][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.967000][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.004427][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.016127][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.064927][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.085496][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.119526][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.134323][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.214580][ T5905] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.393032][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 160.400382][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 160.423989][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.434720][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.447763][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 160.462557][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 160.476938][ T5905] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 160.486783][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.496184][ T6329] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 160.517861][ T5905] usb 2-1: config 0 descriptor?? [ 160.524707][ T6902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.614096][ T6924] FAULT_INJECTION: forcing a failure. [ 160.614096][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.624970][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 160.624985][ T30] audit: type=1326 audit(1775153089.450:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 160.647564][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT(full) [ 160.647589][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.647598][ T6924] Call Trace: [ 160.647605][ T6924] [ 160.647612][ T6924] dump_stack_lvl+0xe8/0x150 [ 160.647644][ T6924] should_fail_ex+0x412/0x560 [ 160.647673][ T6924] _copy_from_user+0x2d/0xb0 [ 160.647693][ T6924] ___sys_sendmsg+0x1c6/0x360 [ 160.647719][ T6924] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.647768][ T6924] ? __fget_files+0x2a/0x420 [ 160.647783][ T6924] ? __fget_files+0x3a0/0x420 [ 160.647805][ T6924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 160.647827][ T6924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.647856][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 160.647884][ T6924] do_syscall_64+0x14d/0xf80 [ 160.647911][ T6924] ? trace_irq_disable+0x3b/0x150 [ 160.647925][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.647941][ T6924] ? clear_bhb_loop+0x40/0x90 [ 160.647961][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.647977][ T6924] RIP: 0033:0x7f8cadb9c819 [ 160.647993][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.648006][ T6924] RSP: 002b:00007f8cabdb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.648024][ T6924] RAX: ffffffffffffffda RBX: 00007f8cade16180 RCX: 00007f8cadb9c819 [ 160.648035][ T6924] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 160.648045][ T6924] RBP: 00007f8cabdb4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.648054][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.648064][ T6924] R13: 00007f8cade16218 R14: 00007f8cade16180 R15: 00007f8cadf3fa48 [ 160.648087][ T6924] [ 160.669955][ T6329] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 160.688436][ T30] audit: type=1326 audit(1775153089.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 160.727894][ T6329] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 160.732669][ T30] audit: type=1326 audit(1775153089.510:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 160.763524][ T6329] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 160.877966][ T6929] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 160.932225][ T6929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.942278][ T30] audit: type=1326 audit(1775153089.510:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 160.972624][ T30] audit: type=1326 audit(1775153089.510:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 160.977002][ T6929] vhci_hcd vhci_hcd.0: Device attached [ 161.007448][ T30] audit: type=1326 audit(1775153089.510:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 161.018447][ T6329] usb 1-1: config 150 has no interface number 0 [ 161.036518][ T6329] usb 1-1: config 150 interface 204 has no altsetting 0 [ 161.045236][ T30] audit: type=1326 audit(1775153089.510:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 161.069719][ T30] audit: type=1326 audit(1775153089.510:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 161.079078][ T5829] usb 2-1: USB disconnect, device number 6 [ 161.093750][ T30] audit: type=1326 audit(1775153089.510:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 161.100150][ T5147] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 161.121542][ T6329] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 161.121569][ T6329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.121587][ T6329] usb 1-1: Product: syz [ 161.121598][ T6329] usb 1-1: Manufacturer: syz [ 161.183002][ T30] audit: type=1326 audit(1775153089.510:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.5.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1b99c819 code=0x7ffc0000 [ 161.234287][ T6329] usb 1-1: SerialNumber: syz [ 161.250355][ T6934] fuse: Unknown parameter '00000000000000000000' [ 161.321681][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 161.852721][ T6885] delete_channel: no stack [ 161.859458][ T5905] usb 4-1: USB disconnect, device number 4 [ 161.913082][ T6329] usb 1-1: USB disconnect, device number 7 [ 162.035964][ T5829] usb 3-1: USB disconnect, device number 4 [ 162.042316][ T6944] mmap: syz.3.228 (6944) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.074922][ T6911] delete_channel: no stack [ 162.156977][ T6949] FAULT_INJECTION: forcing a failure. [ 162.156977][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 162.213118][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 162.213141][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.213150][ T6949] Call Trace: [ 162.213157][ T6949] [ 162.213164][ T6949] dump_stack_lvl+0xe8/0x150 [ 162.213192][ T6949] should_fail_ex+0x412/0x560 [ 162.213220][ T6949] should_failslab+0xa8/0x100 [ 162.213239][ T6949] ? audit_log_start+0x36e/0xa20 [ 162.213259][ T6949] kmem_cache_alloc_noprof+0x87/0x650 [ 162.213275][ T6949] ? auditd_test_task+0x22/0x280 [ 162.213291][ T6949] ? auditd_test_task+0x22/0x280 [ 162.213314][ T6949] audit_log_start+0x36e/0xa20 [ 162.213337][ T6949] ? __pfx_audit_log_start+0x10/0x10 [ 162.213368][ T6949] audit_seccomp+0x63/0x190 [ 162.213384][ T6949] ? clear_bhb_loop+0x40/0x90 [ 162.213400][ T6949] ? clear_bhb_loop+0xe/0x90 [ 162.213420][ T6949] __seccomp_filter+0xd48/0x1ef0 [ 162.213449][ T6949] ? __pfx___seccomp_filter+0x10/0x10 [ 162.213470][ T6949] ? rcu_is_watching+0x15/0xb0 [ 162.213499][ T6949] ? __pfx___schedule+0x10/0x10 [ 162.213542][ T6949] ? __secure_computing+0xe1/0x2a0 [ 162.213562][ T6949] do_syscall_64+0xf4/0xf80 [ 162.213582][ T6949] ? trace_irq_disable+0x3b/0x150 [ 162.213594][ T6949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.213608][ T6949] ? clear_bhb_loop+0x40/0x90 [ 162.213626][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.213638][ T6949] RIP: 0033:0x7fda6c59c819 [ 162.213652][ T6949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.213662][ T6949] RSP: 002b:00007fda6d43b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 162.213679][ T6949] RAX: ffffffffffffffda RBX: 00007fda6c815fa0 RCX: 00007fda6c59c819 [ 162.213687][ T6949] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.213694][ T6949] RBP: 00007fda6d43b090 R08: 0000000000000007 R09: 0000000000000000 [ 162.213702][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.213709][ T6949] R13: 00007fda6c816038 R14: 00007fda6c815fa0 R15: 00007fda6c93fa48 [ 162.213730][ T6949] [ 162.513335][ T6952] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 162.665052][ T6958] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 162.680496][ T6952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.708442][ T6958] vxlan0: entered promiscuous mode [ 162.756478][ T6958] bond1: (slave vxlan0): making interface the new active one [ 162.868272][ T6958] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 162.885668][ T168] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.901589][ T168] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.944028][ T168] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.961462][ T6961] process 'syz.0.232' launched './file2' with NULL argv: empty string added [ 163.002047][ T6961] vivid-007: disconnect [ 163.031392][ T168] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.161671][ T6966] syzkaller0: entered promiscuous mode [ 163.167532][ T6966] syzkaller0: entered allmulticast mode [ 163.307695][ T6973] binder: BINDER_SET_CONTEXT_MGR already set [ 163.314198][ T6973] binder: 6967:6973 ioctl 4018620d 200000004a80 returned -16 [ 163.494510][ T6955] vivid-007: reconnect [ 163.553545][ T6981] FAULT_INJECTION: forcing a failure. [ 163.553545][ T6981] name failslab, interval 1, probability 0, space 0, times 0 [ 163.567313][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.1.237 Not tainted syzkaller #0 PREEMPT(full) [ 163.567337][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.567348][ T6981] Call Trace: [ 163.567356][ T6981] [ 163.567364][ T6981] dump_stack_lvl+0xe8/0x150 [ 163.567394][ T6981] should_fail_ex+0x412/0x560 [ 163.567426][ T6981] should_failslab+0xa8/0x100 [ 163.567450][ T6981] __kmalloc_noprof+0xe8/0x760 [ 163.567472][ T6981] ? tomoyo_encode+0x28b/0x550 [ 163.567495][ T6981] tomoyo_encode+0x28b/0x550 [ 163.567518][ T6981] tomoyo_realpath_from_path+0x58d/0x5d0 [ 163.567546][ T6981] ? tomoyo_path_number_perm+0x219/0x630 [ 163.567571][ T6981] tomoyo_path_number_perm+0x246/0x630 [ 163.567597][ T6981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.567624][ T6981] ? __lock_acquire+0x6b5/0x2cf0 [ 163.567656][ T6981] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 163.567698][ T6981] ? __fget_files+0x2a/0x420 [ 163.567717][ T6981] ? __fget_files+0x2a/0x420 [ 163.567731][ T6981] ? __fget_files+0x3a0/0x420 [ 163.567745][ T6981] ? __fget_files+0x2a/0x420 [ 163.567765][ T6981] security_file_ioctl+0xc3/0x2a0 [ 163.567790][ T6981] __se_sys_ioctl+0x47/0x170 [ 163.567813][ T6981] do_syscall_64+0x14d/0xf80 [ 163.567844][ T6981] ? trace_irq_disable+0x3b/0x150 [ 163.567859][ T6981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.567877][ T6981] ? clear_bhb_loop+0x40/0x90 [ 163.567898][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.567915][ T6981] RIP: 0033:0x7fe7d0d9c819 [ 163.567932][ T6981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.567947][ T6981] RSP: 002b:00007fe7d1c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.567972][ T6981] RAX: ffffffffffffffda RBX: 00007fe7d1016180 RCX: 00007fe7d0d9c819 [ 163.567984][ T6981] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000005 [ 163.567995][ T6981] RBP: 00007fe7d1c98090 R08: 0000000000000000 R09: 0000000000000000 [ 163.568006][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.568016][ T6981] R13: 00007fe7d1016218 R14: 00007fe7d1016180 R15: 00007fe7d113fa48 [ 163.568044][ T6981] [ 163.568064][ T6981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.897289][ T6930] vhci_hcd: connection reset by peer [ 163.903075][ T36] vhci_hcd vhci_hcd.5: stop threads [ 163.908526][ T36] vhci_hcd vhci_hcd.5: release socket [ 163.924354][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 164.374973][ T6985] FAULT_INJECTION: forcing a failure. [ 164.374973][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 164.439756][ T6985] CPU: 1 UID: 0 PID: 6985 Comm: syz.5.238 Not tainted syzkaller #0 PREEMPT(full) [ 164.439774][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.439780][ T6985] Call Trace: [ 164.439785][ T6985] [ 164.439791][ T6985] dump_stack_lvl+0xe8/0x150 [ 164.439810][ T6985] should_fail_ex+0x412/0x560 [ 164.439828][ T6985] should_failslab+0xa8/0x100 [ 164.439843][ T6985] ? do_getname+0x2e/0x250 [ 164.439857][ T6985] kmem_cache_alloc_noprof+0x87/0x650 [ 164.439872][ T6985] do_getname+0x2e/0x250 [ 164.439884][ T6985] ? getname_flags+0x11/0x20 [ 164.439897][ T6985] do_sys_openat2+0xca/0x200 [ 164.439913][ T6985] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.439933][ T6985] __se_sys_openat2+0x223/0x2d0 [ 164.439947][ T6985] ? __pfx___se_sys_openat2+0x10/0x10 [ 164.439967][ T6985] do_syscall_64+0x14d/0xf80 [ 164.439980][ T6985] ? trace_irq_disable+0x3b/0x150 [ 164.439988][ T6985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.439998][ T6985] ? clear_bhb_loop+0x40/0x90 [ 164.440009][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.440019][ T6985] RIP: 0033:0x7f6c1b99c819 [ 164.440028][ T6985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.440036][ T6985] RSP: 002b:00007f6c19bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 164.440048][ T6985] RAX: ffffffffffffffda RBX: 00007f6c1bc15fa0 RCX: 00007f6c1b99c819 [ 164.440055][ T6985] RDX: 0000200000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 164.440062][ T6985] RBP: 00007f6c19bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.440068][ T6985] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 164.440074][ T6985] R13: 00007f6c1bc16038 R14: 00007f6c1bc15fa0 R15: 00007f6c1bd3fa48 [ 164.440088][ T6985] [ 164.969837][ T6990] syzkaller0: entered promiscuous mode [ 164.983076][ T6990] syzkaller0: entered allmulticast mode [ 165.032654][ T6990] FAULT_INJECTION: forcing a failure. [ 165.032654][ T6990] name failslab, interval 1, probability 0, space 0, times 0 [ 165.058482][ T6990] CPU: 1 UID: 0 PID: 6990 Comm: syz.5.240 Not tainted syzkaller #0 PREEMPT(full) [ 165.058504][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.058513][ T6990] Call Trace: [ 165.058520][ T6990] [ 165.058526][ T6990] dump_stack_lvl+0xe8/0x150 [ 165.058554][ T6990] should_fail_ex+0x412/0x560 [ 165.058597][ T6990] should_failslab+0xa8/0x100 [ 165.058619][ T6990] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 165.058639][ T6990] ? __alloc_skb+0x186/0x7d0 [ 165.058656][ T6990] ? __alloc_skb+0x1d0/0x7d0 [ 165.058670][ T6990] ? __local_bh_enable_ip+0xd0/0x130 [ 165.058689][ T6990] __alloc_skb+0x1d0/0x7d0 [ 165.058701][ T6990] alloc_skb_with_frags+0xca/0x890 [ 165.058714][ T6990] ? __lock_acquire+0x6b5/0x2cf0 [ 165.058729][ T6990] ? __lock_acquire+0x6b5/0x2cf0 [ 165.058742][ T6990] sock_alloc_send_pskb+0x878/0x990 [ 165.058759][ T6990] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.058773][ T6990] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 165.058788][ T6990] ? dev_get_by_index+0x22/0x2e0 [ 165.058802][ T6990] ? dev_get_by_index+0x22/0x2e0 [ 165.058817][ T6990] packet_sendmsg+0x33e5/0x50f0 [ 165.058835][ T6990] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 165.058851][ T6990] ? __lock_acquire+0x6b5/0x2cf0 [ 165.058868][ T6990] ? __lock_acquire+0x6b5/0x2cf0 [ 165.058887][ T6990] ? aa_sk_perm+0x6d5/0x900 [ 165.058900][ T6990] ? __pfx_packet_sendmsg+0x10/0x10 [ 165.058914][ T6990] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 165.058927][ T6990] ? aa_sock_msg_perm+0xf1/0x1b0 [ 165.058942][ T6990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.058953][ T6990] ? __pfx_packet_sendmsg+0x10/0x10 [ 165.058965][ T6990] __sys_sendto+0x672/0x710 [ 165.058977][ T6990] ? __pfx___sys_sendto+0x10/0x10 [ 165.058986][ T6990] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 165.059005][ T6990] ? __fget_files+0x3a0/0x420 [ 165.059018][ T6990] ? ksys_write+0x242/0x270 [ 165.059031][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 165.059043][ T6990] __x64_sys_sendto+0xde/0x100 [ 165.059056][ T6990] do_syscall_64+0x14d/0xf80 [ 165.059067][ T6990] ? trace_irq_disable+0x3b/0x150 [ 165.059076][ T6990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.059086][ T6990] ? clear_bhb_loop+0x40/0x90 [ 165.059097][ T6990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.059107][ T6990] RIP: 0033:0x7f6c1b99c819 [ 165.059117][ T6990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.059126][ T6990] RSP: 002b:00007f6c19bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 165.059137][ T6990] RAX: ffffffffffffffda RBX: 00007f6c1bc15fa0 RCX: 00007f6c1b99c819 [ 165.059144][ T6990] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000006 [ 165.059150][ T6990] RBP: 00007f6c19bf6090 R08: 00002000000001c0 R09: 0000000000000014 [ 165.059156][ T6990] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 165.059161][ T6990] R13: 00007f6c1bc16038 R14: 00007f6c1bc15fa0 R15: 00007f6c1bd3fa48 [ 165.059175][ T6990] [ 165.413066][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.479417][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 165.575230][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 165.593435][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.601479][ T10] usb 2-1: config 0 has no interface number 0 [ 165.631154][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.665221][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 165.735135][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.758972][ T6996] netlink: 56 bytes leftover after parsing attributes in process `syz.3.242'. [ 165.793750][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.808960][ T10] usb 2-1: Product: syz [ 165.813608][ T10] usb 2-1: SerialNumber: syz [ 165.822558][ T10] usb 2-1: config 0 descriptor?? [ 165.838770][ T10] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 165.848971][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input12 [ 165.874283][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 166.053010][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 166.092995][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 166.107986][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.121164][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.133364][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 166.168842][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.182172][ T5829] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 166.196504][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.215537][ T5829] usb 3-1: config 0 descriptor?? [ 166.222017][ T6995] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.316419][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 166.324048][ C0] ------------[ cut here ]------------ [ 166.329621][ C0] URB ffff88802b059100 submitted while active [ 166.335812][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.1.239/6987 [ 166.346375][ C0] Modules linked in: [ 166.350722][ C0] CPU: 0 UID: 0 PID: 6987 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 166.360487][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.370680][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 166.376272][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e7 7d f8 fa 49 83 3e 00 74 40 e8 bc 30 8e fa 48 8d 3d 65 87 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 30 8e fa eb 05 e8 9a 30 [ 166.396093][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010087 [ 166.402204][ C0] RAX: ffffffff87378414 RBX: ffff88802b059100 RCX: 0000000000040000 [ 166.410200][ C0] RDX: ffffc90002151000 RSI: ffff88802b059100 RDI: ffffffff901f0b80 [ 166.418207][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 166.426380][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 166.434465][ C0] R13: ffff888052a81830 R14: ffff88802b059108 R15: dffffc0000000000 [ 166.442517][ C0] FS: 000055556c32d500(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 166.451443][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.458096][ C0] CR2: 00002000001b7000 CR3: 0000000035512000 CR4: 00000000003526f0 [ 166.466078][ C0] Call Trace: [ 166.469356][ C0] [ 166.472211][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 166.478105][ C0] ? ___ratelimit+0x58c/0x8d0 [ 166.482775][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 166.488135][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 166.493519][ C0] dummy_timer+0xbbd/0x45d0 [ 166.498018][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 166.502962][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 166.508698][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 166.514077][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 166.519006][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.524811][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 166.529758][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 166.534736][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 166.540053][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 166.545787][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 166.551861][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 166.557412][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.562613][ C0] handle_softirqs+0x22a/0x870 [ 166.567472][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 166.572224][ C0] __irq_exit_rcu+0x5f/0x150 [ 166.576809][ C0] irq_exit_rcu+0x9/0x30 [ 166.581041][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 166.586656][ C0] [ 166.589569][ C0] [ 166.592480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.598476][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 166.604872][ C0] Code: f7 e8 dd 61 f0 f5 f7 c3 00 02 00 00 74 05 e8 70 cd 1b f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 1e e2 f5 65 8b 05 0d c0 6a 07 85 c0 74 18 5b 41 5e c3 cc cc [ 166.624463][ C0] RSP: 0018:ffffc900050afa68 EFLAGS: 00000206 [ 166.630513][ C0] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000080000001 [ 166.638471][ C0] RDX: 0000000000000006 RSI: ffffffff8defa72d RDI: 0000000000000001 [ 166.646478][ C0] RBP: ffffc900050afb48 R08: ffffffff9011ccb7 R09: 1ffffffff2023996 [ 166.654613][ C0] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff888029408318 [ 166.662564][ C0] R13: ffff888029408300 R14: ffffffff8f47bf60 R15: 0000000000000001 [ 166.670527][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 166.675890][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 166.681779][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.687593][ C0] dummy_pullup+0x19b/0x200 [ 166.692082][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 166.697110][ C0] usb_gadget_disconnect_locked+0x143/0x4d0 [ 166.703001][ C0] gadget_unbind_driver+0xc7/0x450 [ 166.708094][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 166.713805][ C0] device_release_driver_internal+0x46f/0x870 [ 166.719862][ C0] driver_detach+0x1f3/0x2d0 [ 166.724438][ C0] bus_remove_driver+0x226/0x320 [ 166.729802][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 166.735499][ C0] raw_release+0xd7/0x260 [ 166.739810][ C0] ? __pfx_raw_release+0x10/0x10 [ 166.744726][ C0] __fput+0x44f/0xa70 [ 166.748699][ C0] task_work_run+0x1d9/0x270 [ 166.753273][ C0] ? __pfx_task_work_run+0x10/0x10 [ 166.758383][ C0] exit_to_user_mode_loop+0xed/0x480 [ 166.763655][ C0] ? rcu_is_watching+0x15/0xb0 [ 166.768403][ C0] do_syscall_64+0x32d/0xf80 [ 166.772979][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.779023][ C0] ? clear_bhb_loop+0x40/0x90 [ 166.783683][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.789644][ C0] RIP: 0033:0x7fe7d0d9c819 [ 166.794040][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.813648][ C0] RSP: 002b:00007fe7d113fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 166.822042][ C0] RAX: 0000000000000000 RBX: 00007fe7d113fc90 RCX: 00007fe7d0d9c819 [ 166.829992][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 166.837959][ C0] RBP: 00000000000283f0 R08: 0000000000000001 R09: 0000000000000000 [ 166.845908][ C0] R10: 0000001b2fd20000 R11: 0000000000000246 R12: 00007fe7d113fcd0 [ 166.853861][ C0] R13: 00007fe7d1015fac R14: 000000000002899e R15: 00007fe7d1015fa0 [ 166.861839][ C0] [ 166.864867][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.872130][ C0] CPU: 0 UID: 0 PID: 6987 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 166.881315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 166.891539][ C0] Call Trace: [ 166.894821][ C0] [ 166.897662][ C0] vpanic+0x56c/0xa60 [ 166.901741][ C0] ? __pfx__printk+0x10/0x10 [ 166.906343][ C0] ? __pfx_vpanic+0x10/0x10 [ 166.911719][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 166.917122][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 166.922329][ C0] panic+0xc5/0xd0 [ 166.926153][ C0] ? __pfx_panic+0x10/0x10 [ 166.930814][ C0] __warn+0x315/0x4f0 [ 166.934827][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 166.939737][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 166.944763][ C0] __report_bug+0x29a/0x540 [ 166.949254][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 166.954639][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 166.959487][ C0] ? __pfx___report_bug+0x10/0x10 [ 166.964497][ C0] ? dev_printk_emit+0xee/0x140 [ 166.969337][ C0] report_bug_entry+0x19a/0x290 [ 166.974194][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 166.979064][ C0] ? usb_submit_urb+0x83/0x18b0 [ 166.984000][ C0] handle_bug+0xce/0x200 [ 166.988234][ C0] exc_invalid_op+0x1a/0x50 [ 166.992750][ C0] asm_exc_invalid_op+0x1a/0x20 [ 166.997932][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 167.003408][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e7 7d f8 fa 49 83 3e 00 74 40 e8 bc 30 8e fa 48 8d 3d 65 87 e7 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 a1 30 8e fa eb 05 e8 9a 30 [ 167.023015][ C0] RSP: 0018:ffffc90000007960 EFLAGS: 00010087 [ 167.029069][ C0] RAX: ffffffff87378414 RBX: ffff88802b059100 RCX: 0000000000040000 [ 167.037043][ C0] RDX: ffffc90002151000 RSI: ffff88802b059100 RDI: ffffffff901f0b80 [ 167.044996][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 167.052946][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: 0000000000000820 [ 167.060923][ C0] R13: ffff888052a81830 R14: ffff88802b059108 R15: dffffc0000000000 [ 167.068899][ C0] ? usb_submit_urb+0x74/0x18b0 [ 167.073745][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 167.079539][ C0] ? ___ratelimit+0x58c/0x8d0 [ 167.084406][ C0] cm109_urb_irq_callback+0x6e2/0xcb0 [ 167.089799][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 167.095167][ C0] dummy_timer+0xbbd/0x45d0 [ 167.099732][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 167.104686][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 167.110408][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 167.115766][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 167.120754][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 167.127153][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 167.132076][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 167.137035][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 167.142271][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 167.147978][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 167.154046][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 167.159154][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.164337][ C0] handle_softirqs+0x22a/0x870 [ 167.169085][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 167.173834][ C0] __irq_exit_rcu+0x5f/0x150 [ 167.178419][ C0] irq_exit_rcu+0x9/0x30 [ 167.182663][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 167.188280][ C0] [ 167.191279][ C0] [ 167.194191][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.200161][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 167.206571][ C0] Code: f7 e8 dd 61 f0 f5 f7 c3 00 02 00 00 74 05 e8 70 cd 1b f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 1e e2 f5 65 8b 05 0d c0 6a 07 85 c0 74 18 5b 41 5e c3 cc cc [ 167.226155][ C0] RSP: 0018:ffffc900050afa68 EFLAGS: 00000206 [ 167.232220][ C0] RAX: 0000000000000006 RBX: 0000000000000202 RCX: 0000000080000001 [ 167.240172][ C0] RDX: 0000000000000006 RSI: ffffffff8defa72d RDI: 0000000000000001 [ 167.248130][ C0] RBP: ffffc900050afb48 R08: ffffffff9011ccb7 R09: 1ffffffff2023996 [ 167.256121][ C0] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffff888029408318 [ 167.264073][ C0] R13: ffff888029408300 R14: ffffffff8f47bf60 R15: 0000000000000001 [ 167.272047][ C0] usb_hcd_poll_rh_status+0x40c/0x620 [ 167.277413][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 167.283310][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 167.289138][ C0] dummy_pullup+0x19b/0x200 [ 167.293638][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 167.298655][ C0] usb_gadget_disconnect_locked+0x143/0x4d0 [ 167.304673][ C0] gadget_unbind_driver+0xc7/0x450 [ 167.309832][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 167.315578][ C0] device_release_driver_internal+0x46f/0x870 [ 167.321652][ C0] driver_detach+0x1f3/0x2d0 [ 167.326239][ C0] bus_remove_driver+0x226/0x320 [ 167.331165][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 167.336878][ C0] raw_release+0xd7/0x260 [ 167.341191][ C0] ? __pfx_raw_release+0x10/0x10 [ 167.346127][ C0] __fput+0x44f/0xa70 [ 167.350104][ C0] task_work_run+0x1d9/0x270 [ 167.354704][ C0] ? __pfx_task_work_run+0x10/0x10 [ 167.359811][ C0] exit_to_user_mode_loop+0xed/0x480 [ 167.365169][ C0] ? rcu_is_watching+0x15/0xb0 [ 167.369919][ C0] do_syscall_64+0x32d/0xf80 [ 167.374509][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.380578][ C0] ? clear_bhb_loop+0x40/0x90 [ 167.385254][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.391128][ C0] RIP: 0033:0x7fe7d0d9c819 [ 167.395613][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.415563][ C0] RSP: 002b:00007fe7d113fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 167.423962][ C0] RAX: 0000000000000000 RBX: 00007fe7d113fc90 RCX: 00007fe7d0d9c819 [ 167.431913][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 167.439884][ C0] RBP: 00000000000283f0 R08: 0000000000000001 R09: 0000000000000000 [ 167.447876][ C0] R10: 0000001b2fd20000 R11: 0000000000000246 R12: 00007fe7d113fcd0 [ 167.455843][ C0] R13: 00007fe7d1015fac R14: 000000000002899e R15: 00007fe7d1015fa0 [ 167.463812][ C0] [ 168.540974][ C0] Shutting down cpus with NMI [ 168.546070][ C0] Kernel Offset: disabled [ 168.550385][ C0] Rebooting in 86400 seconds..