last executing test programs: 19m50.898586493s ago: executing program 32 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000af000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000048000100637279707464287368613235362d63652900"/344], 0x1a0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x6, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0], 0x70}}, 0x0) 11m1.07787397s ago: executing program 33 (id=2499): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x7855, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0x5}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000fa43"], 0x0}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0x80086305, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x18, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r6, &(0x7f0000000140)="be22a6412aa4b7016327dbe4ac3199e4a7c6f779359e22b2250963904a0f93532b6418b6183792768eecea59f98b4322245ab946498876ca0b14679ee736fc2248475214493e6aafaea55ef78ab260755583c8258e09ea36c0c1bf906e7bb8faddcf811bd806df5e789b49b49a55fb60dcf3d6e29b5fe5c428683d4a0a8f9574998e43b076bbe4b477e2e92e61269fc573c685a7681edd45145194ddfa48b9d5d8bddd609a5cff7b5c3253ac26627a3fef65c2a9007e0c90dfd9a6ced3c6349c2b93f633098ecec3a83f292583d1c2a7cdd8626634086b11e100508fecb8343fbacfbe35b287906d77031dd63a2286d504fb"}, 0x1c) 5m35.861482308s ago: executing program 2 (id=3865): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000008780), 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x8000000000000001, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) 5m32.668727611s ago: executing program 2 (id=3876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fd", 0x29, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = socket$inet(0xa, 0x801, 0x84) r4 = getpgid(0x0) kcmp(r4, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CAP_VM_TYPES(r6, 0x4068aea3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x9}]}, &(0x7f00000002c0)=0xc) 5m29.523631675s ago: executing program 2 (id=3894): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 5m28.284299837s ago: executing program 5 (id=3898): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x356, 0x3a, '\xf1', 0x3a, '', 0x3a, './file0', 0x3a, [0x50]}, 0x29) openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0x9}, 0x1c) sendmsg$nl_netfilter(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8b, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10084, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000280)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x80000000, 0x3a, '', 0x3a, '^\x00\x00', 0x3a, './file0'}, 0x2a) 5m26.25747877s ago: executing program 2 (id=3904): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a00010000000000fbdbdf250a80800000000000000000000800010000000000080002"], 0x2c}}, 0x0) openat$dir(0xffffff9c, &(0x7f0000002340)='./file0\x00', 0x80240, 0xca3568489e940ee0) chown(&(0x7f0000003a40)='./file0\x00', 0x0, 0x0) 5m25.637146769s ago: executing program 5 (id=3906): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x60004ce) ftruncate(r6, 0x2000009) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000000000006) r8 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m24.282298736s ago: executing program 6 (id=3911): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7fd, 0xdddd0000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x15000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff1000, 0x101000}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8005, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300a, 0x0, 0x1, 0xa, 0x1, 0x700}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x8e42, 0x0) write$P9_ROPEN(r4, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x4, 0x2}, 0x9}}, 0x18) pselect6(0x40, &(0x7f0000000280)={0x81, 0x7, 0x9128, 0x7, 0xd, 0xffff, 0x4, 0xb}, &(0x7f00000002c0)={0x5, 0x46, 0x1, 0x800, 0xa16, 0x5, 0x51d4, 0x1d}, &(0x7f0000000300)={0x2, 0x7, 0xac, 0x9, 0x100000000, 0x6, 0xad7, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f0000000400)={&(0x7f0000000380)={[0x4, 0xffff]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x5a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 5m24.207473369s ago: executing program 5 (id=3912): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) 5m23.581545894s ago: executing program 6 (id=3913): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) 5m23.416161945s ago: executing program 6 (id=3914): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x2c}}, 0x4002) 5m23.255445584s ago: executing program 6 (id=3915): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0xa, 0x1, 0x0, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000080)={0xd82, 0x2, 0x1, 0x800, 0x4, 0x6, 0xe}) r7 = syz_io_uring_setup(0x186, &(0x7f0000000180)={0x0, 0xddb3, 0x80}, &(0x7f00000002c0), &(0x7f00000003c0)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4\x00', 0x2) 5m22.977661006s ago: executing program 2 (id=3916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 5m22.118308373s ago: executing program 5 (id=3919): r0 = socket(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, &(0x7f0000001100)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = dup2(r4, r3) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb48, 0x6, 0x2, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x20000001) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r7 = memfd_create(0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ptrace(0x10, 0x0) 5m21.659264993s ago: executing program 5 (id=3922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000840)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$hidraw(&(0x7f0000000040), 0x8b, 0x200) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m21.581683566s ago: executing program 0 (id=3923): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c003a0400fc800c0001800600060086dd00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xd16, &(0x7f0000000000)={0x0, 0xec61, 0x1, 0x2, 0x3c5, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000200)=0x2, 0x0, 0x4) 5m21.189324128s ago: executing program 6 (id=3924): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) 5m21.074505842s ago: executing program 0 (id=3925): syz_open_dev$video(&(0x7f0000000240), 0xfffffffa, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000080)=@arm64={0x4, 0x24, 0x7, '\x00', 0x8001}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$unix(0x1, 0x5, 0x0) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) (async) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m20.88427747s ago: executing program 6 (id=3926): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "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"}, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x1, "c9"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "0600"}, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44800) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000003f000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r2], 0x40}}, 0x0) 5m20.313698734s ago: executing program 0 (id=3932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m20.272270414s ago: executing program 3 (id=3933): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x200000, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000004c0)}, 0x40) 5m20.17922715s ago: executing program 5 (id=3934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r1, &(0x7f0000000000)={0x0, 0x16, 0x1}) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}]}) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x3, 0xf0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0xc, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x3, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf1, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0xfc}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x4, 0x2, 0x20, 0x20, 0xd3}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0xc, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x18, &(0x7f0000000580)=@string={0x18, 0x3, "b2df590baa358c8f6d1b26b3a20315ad7c2f70601dfe"}}, {0x89, &(0x7f0000000400)=@string={0x89, 0x3, "a01d764bb2c2fa7f8ea1f26a6487275055b4962da3ddbc97b6b9986dc9ddc4000b8f53dfc2172c6e9c74178d615163ef2d1d4fbf7473202ea505a9e62c1363e81fb672725da1e7a9a7b9d91ab350492873ee5614a809d0507ee783d171f96569cb618e9c4e6a49146b008de3dfe3202afeda42d5580747d5b79175cc8d8a58dc3a4e3dd13a4675"}}, {0x0, 0x0}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "d03be538e0f4d6f63f01ed6a6861655b412e85380182b20d7496ce58ffea6132c7732495bb69f55a15df58dc78c79aa0a3cdca4a85979d434a3e6f311230b6a0c3879c38448e9fa411a2ecd57861727ba11a21cc72b146ad4f75a05bcf252931dfc04ce7f8cf80892a33291293359c57b8918ae3682141c0c6e9c0fd"}}, {0xb6, &(0x7f0000000900)=@string={0xb6, 0x3, "4d0f5231de60fac75ebea0909c451f927014e5ea57970a0494f4358f3ebb9f38acc8f733d30f2a75701dd7b114d5783b038c01e8ee6773138c1a4375970231bc7cd8205f4d13ac26d90bda4510c1edec312a4abf728235a696b9e7e75961e16f4c6c54f1d38f044a36f37615d43f2f86f55a35b8632ea8d91663b9320c5f3075b7566bb27246c7a9a4ec26cd6392c3f505000ff755631405f1a6c1eef5a2afa5483fd1408a6ddfdc8ddaffa8b6e5f5bb25facb08"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x7fb7a026a7ef04b9}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x422}}, {0xea, &(0x7f0000000780)=@string={0xea, 0x3, "751cbb98cad463c2cc38f430520b7216626486abc89481e21e75f2a18aeb56e792ac8d258470c44b5c471275b2477adfeb510268f1a975fe4099b27e8b4f56f0837c7c10502218e34708eecc861be23688a043e221cb03933649b40fc37fb46df56a6512e3a295afd35438ab35eaba4227a937d856d1c91aed0936c5430f3e578c340a9dbcf2df81227bbbf0cd8617a51ad358c740bccbf1e8567e28449981ee3a9ad7f53dbaad9fa76685dae4cad464b14e95a64b0f4ae73380cc0b7bf88a06d44f1d35ad642578997f43ecfe602651a94442c145c81592b1900526b8966bb9b39ef0ba450cb2cd"}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xe0, 0x0, &(0x7f00000001c0)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x9, 0xfa, 0x1, {0x22, 0xb67}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xe, 0xf6, 0x2}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x250, 0x7, 0xb, 0xcd, 0x20, 0x3}, 0x70, &(0x7f0000000ac0)={0x5, 0xf, 0x70, 0x4, [@generic={0x42, 0x10, 0x3, "c084a3e779a6d2077d8e668f1556bfc7a71e8011bb710850f78f32ccec351da773a306b854710215a130469aa6b4b16e34a49a57a033cab2fab380743a82ad"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c22b548a08d95a3311a769262aa372e4"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xfa, 0x9, 0x0, 0x6, 0x2}]}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5m20.093565381s ago: executing program 3 (id=3935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(&(0x7f0000000180), 0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x5, 0xb, 0x1, 0x0, &(0x7f0000000100)=0x2, 0x2000000) r2 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000368000/0x1000)=nil, 0x1000, 0xa) fstatfs(r2, &(0x7f00000003c0)=""/146) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x60, 0xfffffffd, 0x100, 0x2, 0x0, 0x8, 0x9, 0xfff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x20004000) 5m20.070435916s ago: executing program 0 (id=3937): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "8b8e"}, @global=@item_4={0x3, 0x1, 0xa, "993f66e8"}]}}, 0x0}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, "80"}]}}}}}}}}, 0x0) 5m19.936451419s ago: executing program 2 (id=3938): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x1d, 0x803, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r5, &(0x7f0000000380), 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setstatus(r4, 0x4, 0x0) unshare(0x8040480) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r7, 0x2030}], 0x1, 0x0, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r7}}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x20000, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x400005, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0xf, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a09, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 4m10.044120134s ago: executing program 34 (id=3937): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "8b8e"}, @global=@item_4={0x3, 0x1, 0xa, "993f66e8"}]}}, 0x0}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, "80"}]}}}}}}}}, 0x0) 4m9.838082313s ago: executing program 35 (id=3934): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r1, &(0x7f0000000000)={0x0, 0x16, 0x1}) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}]}) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x3, 0xf0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x1, 0x7}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x4, 0xc, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x3, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf1, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x3, 0xfc}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x4, 0x2, 0x20, 0x20, 0xd3}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0xc, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}, {0x18, &(0x7f0000000580)=@string={0x18, 0x3, "b2df590baa358c8f6d1b26b3a20315ad7c2f70601dfe"}}, {0x89, &(0x7f0000000400)=@string={0x89, 0x3, "a01d764bb2c2fa7f8ea1f26a6487275055b4962da3ddbc97b6b9986dc9ddc4000b8f53dfc2172c6e9c74178d615163ef2d1d4fbf7473202ea505a9e62c1363e81fb672725da1e7a9a7b9d91ab350492873ee5614a809d0507ee783d171f96569cb618e9c4e6a49146b008de3dfe3202afeda42d5580747d5b79175cc8d8a58dc3a4e3dd13a4675"}}, {0x0, 0x0}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "d03be538e0f4d6f63f01ed6a6861655b412e85380182b20d7496ce58ffea6132c7732495bb69f55a15df58dc78c79aa0a3cdca4a85979d434a3e6f311230b6a0c3879c38448e9fa411a2ecd57861727ba11a21cc72b146ad4f75a05bcf252931dfc04ce7f8cf80892a33291293359c57b8918ae3682141c0c6e9c0fd"}}, {0xb6, &(0x7f0000000900)=@string={0xb6, 0x3, "4d0f5231de60fac75ebea0909c451f927014e5ea57970a0494f4358f3ebb9f38acc8f733d30f2a75701dd7b114d5783b038c01e8ee6773138c1a4375970231bc7cd8205f4d13ac26d90bda4510c1edec312a4abf728235a696b9e7e75961e16f4c6c54f1d38f044a36f37615d43f2f86f55a35b8632ea8d91663b9320c5f3075b7566bb27246c7a9a4ec26cd6392c3f505000ff755631405f1a6c1eef5a2afa5483fd1408a6ddfdc8ddaffa8b6e5f5bb25facb08"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x7fb7a026a7ef04b9}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x422}}, {0xea, &(0x7f0000000780)=@string={0xea, 0x3, "751cbb98cad463c2cc38f430520b7216626486abc89481e21e75f2a18aeb56e792ac8d258470c44b5c471275b2477adfeb510268f1a975fe4099b27e8b4f56f0837c7c10502218e34708eecc861be23688a043e221cb03933649b40fc37fb46df56a6512e3a295afd35438ab35eaba4227a937d856d1c91aed0936c5430f3e578c340a9dbcf2df81227bbbf0cd8617a51ad358c740bccbf1e8567e28449981ee3a9ad7f53dbaad9fa76685dae4cad464b14e95a64b0f4ae73380cc0b7bf88a06d44f1d35ad642578997f43ecfe602651a94442c145c81592b1900526b8966bb9b39ef0ba450cb2cd"}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xe0, 0x0, &(0x7f00000001c0)) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x5061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x9, 0xfa, 0x1, {0x22, 0xb67}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x7, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xe, 0xf6, 0x2}}]}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x250, 0x7, 0xb, 0xcd, 0x20, 0x3}, 0x70, &(0x7f0000000ac0)={0x5, 0xf, 0x70, 0x4, [@generic={0x42, 0x10, 0x3, "c084a3e779a6d2077d8e668f1556bfc7a71e8011bb710850f78f32ccec351da773a306b854710215a130469aa6b4b16e34a49a57a033cab2fab380743a82ad"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c22b548a08d95a3311a769262aa372e4"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xfa, 0x9, 0x0, 0x6, 0x2}]}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4m9.713502462s ago: executing program 36 (id=3938): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x1d, 0x803, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0) readv(r5, &(0x7f0000000380), 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setstatus(r4, 0x4, 0x0) unshare(0x8040480) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r7, 0x2030}], 0x1, 0x0, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r7}}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x20000, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x400005, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0xf, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a09, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 4m9.494819257s ago: executing program 37 (id=3935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pipe2$watch_queue(&(0x7f0000000180), 0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc)=0x5, 0xb, 0x1, 0x0, &(0x7f0000000100)=0x2, 0x2000000) r2 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000368000/0x1000)=nil, 0x1000, 0xa) fstatfs(r2, &(0x7f00000003c0)=""/146) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0xc45f5000) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x60, 0xfffffffd, 0x100, 0x2, 0x0, 0x8, 0x9, 0xfff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) memfd_create(0x0, 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}}) shutdown(r4, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44800) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$unix(0x1, 0x2, 0x0) preadv(r4, 0x0, 0x0, 0x1f1, 0x0) socket$inet(0x2, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000000340)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f00000003c0)=""/164, 0xa4}], 0x2}}], 0x1, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="1005000000ff8200040647", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x1, 0x6, @broadcast}, 0x14) 10.044328162s ago: executing program 1 (id=4791): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x35253b99, 0x414000) r1 = socket$inet6(0xa, 0x3, 0x11) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004480)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x9}, {}, 0x0, 0xffffffff, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in, 0x0, 0x1}}, 0xe4) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000200)={0x5cf, 0x6, [{0x9, 0x1}, {0x9}, {0x1}, {0x6, 0x1}, {0xd}, {0xa, 0x1}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getparam(r4, &(0x7f0000000080)) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rpcgss_import_ctx\x00', r2, 0x0, 0x1}, 0x18) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000280)={0x6, 'ipvlan0\x00', {0x4}, 0x6}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x47, 0x2482) ioctl$EVIOCGPROP(r6, 0x40044582, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r2, 0x0) r7 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r7, 0x3f) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000003c0)={0xc, &(0x7f0000000300)={0x40, 0x22, 0x81, {0x81, 0xf, "244cf79d438c012dee16387ab8d9b98651d302d3c22fbd44383bd6774c4e98fbf59e1763b4807ee9307cb4ec5612a4eb2ab18e8ef4101bcd753a1c3ec7bf5cf029af359429f88ce1788ce18b10b5521287e8e798213623d1e6e95955f2f413782ab5c542acce629e9aa52dcc6a65125ea34f22e6ed969d69369cb79c8fe1c3"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x10, &(0x7f0000000400)={0x40, 0x1, 0xb7, "9b0561936aa54c20355a5d72db54fdd1a06ff81769ead806f15bc1b5a4e3d67046bd69f314cbbfd836d93ec0c9d9af323dac2a823955710fc6245a753f26630d916cb57dc28936b6d01be185fd7ffb7dcc8a4560db5859b8d21e57715f61baf0ada388926bd13cbeaf476cc669dc6368adb6f72a7fdff90bedc7a281b39da807347c8569f1fb6edf9c6fd003c2337ada6dee53276860aab091c124ca76f9a07e8e458812951e0987a3e38d6d80fa2d222d4503a51d4df3"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r7, 0x0) syz_open_pts(r2, 0x4000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f00000002c0)='./bus\x00', 0x0, 0x10}, 0x14) 9.229842198s ago: executing program 4 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df25000000000a0000000c00020001000000060000000800010001"], 0x2c}}, 0x4000) 9.082932153s ago: executing program 4 (id=4793): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x9, {0x80, 0x10, 0x0, {0x4, 0x1002, 0x1000, 0x1, 0x2, 0x1000000000009, 0x80000000, 0xb, 0xe26, 0x8000, 0x800, 0x0, 0x0, 0x70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x1, 0x2) 8.704567482s ago: executing program 4 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 8.605375326s ago: executing program 4 (id=4795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000380)={0x40, 0x1, 0x4, "f9d4697e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0xfffffff7) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.274889184s ago: executing program 8 (id=4797): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001a40)={@fallback, 0xffffffffffffffff, 0x21, 0x1b}, 0x20) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x31}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) 8.093416074s ago: executing program 8 (id=4798): unshare(0x44040200) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000500), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000c6f0e2cba36ac7e169d90f372d222710", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r9, 0x0) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8, 0x0, r9}) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_getlink={0x158, 0x12, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x402, 0x4004}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0xe205}, @IFLA_NET_NS_FD={0x8, 0x1c, r9}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_MAP={0x20, 0xe, {0xffffffffffff6a74, 0x8, 0x6, 0x8, 0x8, 0x7}}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2bde6c3b9043d201407515b1c88c3134"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c618cb2ea421be7ea484df6a24292684"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, ':[@%\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "df0cf8531769f7703b71a75ff351c003"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c298c413cdf3f751e1c2a1710cf60ea1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x7, 0x2, ')\xc4\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, '!(!:&\xfe:\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b9e055603f090dcfa546ab9a3f300e6e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "df79c7755ed833b42393afd521670beb"}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000841) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 7.861211125s ago: executing program 7 (id=4800): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000008780), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) 7.509559878s ago: executing program 1 (id=4801): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x9a0001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000002", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r2, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) 7.465806827s ago: executing program 8 (id=4802): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x80, 0x0}, 0x400485c) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bind$packet(r4, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x4, r8}, 0x10) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001ec037e08fb09beeb8dd40102030109021b00010700f0090904c00701977837030905010220008007022de294fbae37a5a58da714b4544c4ff0bc306580fc11ac330da40c10ed04ac28a74849c7d3e714c0d3596325571f12bfd529f26bfaf279f91fada4cf0faa9fd6"], 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r10, 0x0, r7}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000001c0)=0x304214, 0x4) 6.651911607s ago: executing program 1 (id=4803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000540), 0x100, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000007c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f0000) r4 = userfaultfd(0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x140, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0x1, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000001dc0)={0x0, 0x73, 0x34bcfbb2e2c2b5a8}, 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_io_uring_setup(0x6826, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080), &(0x7f00000001c0)) socket$inet6(0x2d, 0x2, 0x0) 6.36742328s ago: executing program 7 (id=4804): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) syz_fuse_handle_req(r0, &(0x7f0000004900)="fac4e7c21565f79b73d8d7dcc36944c7d36505ed55b2c535ba5bc78cc94f55e518d13a9f4dd794ecf1b09fe12f2893933931db285710f8c78793ddf30ff7dd86203ab0177f8aa062d6fe9529d65fab047ca34c6840b505eee9082e8ccf311bfb84ee46c0d0dd466ba326c6410b06b48ffc309ddd9fcdd816ded9830e41f8cce8d3bc31a817f29e3ecdd0329aadc8b022c55c70eff8905b9bf223ea44cbb290ffe098bb78fcc9e39f16f4f0e8d60e440abc192d530e146bdb59e9e522668bebec672a965ee7bdb300ab4314235dc0e62e94e398742cfeee3b92ce29e1a62fd8375d95ef502ebc1f04959d83a15ee9496198f0b3440b80cb9950324c9d4dfa69381c5c0920e307ab1528efe02739c2a49fc4cf09ff76c165d5005234b8f9378c74040d212eed9e7485cdd758bf4d34c2cf52b278eb3114b13b43214814ba2e2a357c028c737892d0e8ab1f1d009a00ad0dcdb9ffd0f4fa0b03d3b006fd66e8faa4fd44b64dcb92cbb5e9da64165ef01602538708e5dad3c0986a2b03d4d4276c9268af76d300b01ceef84e2a501e2c3d04e31875d1e81270409516d4272d73e9899c5a939c03be73352b61cf32ea1f6cc2d31847703843cd2e54de294b1c957ae618dddd7fdb018908dd7be379fb3db575b0859d9f2a190d8f7abc8400bbcfc866c8f8454102a5b0c215f140cb17677556241e33443aacb35073752aa65f450b2d03750ebbc07ed809f97b5a55a4f11b920cc9bf0a1db7fce63718f85c3326120c8b774ec22ff9c1b7e9114c0b931b6805fa672b53a6a617881fd73dc1b79fbeade0120e08c7abbba9bed82e9700bbf779328ce0a73f7e60459ecfc3f0daf26da8d1b57c1536ec967fdcab8cca66aab0ce0a02320c0090c78511b1672d65b3d62ed38e2655bc6ebfb2480a0c33fc68bba5c444d8cde3f977a382d6413947fcb25e3e9330f45b8874463e2a3fab87d877652de9c2d35208ad5d3e59ee9e63061af0b119d8174e7eaf71551b1f3551d0247717b5bb7d4db41767e2608a2472c7258932e22eb591c957da5fad5732c86cf18ec338e83ed25e41a2e500360c7ea86755efe0962f0d1d4cc945645e01b5a34fc74630c91cd02c5932f2df9ec1e090dd83bda328a7c8d1b8a8294c3c551c1954a7f024eb7ac01e35538612f2f23a6c52c59beab75910c5abad25a3789baa0001569e93561a8992450bdb0a757b916af413d63badc4aeeb9489357ff7fdb27e913278dbb5f2d69bc196d110638601f31fb4db2b301faa7516955d6971b562288328e14c7957696eaa03d3911ec661279e37a850b7515fb4e122c39fd6dc3af40980173e6324ee678b47f74428a593827d75aae3368e661dbe9738a2704d8f7a086e77b9ffb3eb0e16199c58eff45dbe628d268e88bb2d69a310b60db0a850afcb08a2a7b316c70209ecf034d484a6b1f68de857d4ebfd45936c04b532202bea6b3a6d3751cf73db4ca0a76faf7a972f8a68a523b0a51d593436aed65999fe96058e085b4352c0d5603365ae4cf724e5801da03665ee2071e04b45c6de0a59afc376e3ce2ef206c3161f235049d7e0b52e04ccac4f1699629b3f8736601a6dadfd00dd9545cb7cabd1cba12ddb2a23c58b1da9c69ee4ec9853aaa81e1cf7a169f91a1c077fd6c5c2fd366c9a2a285420d5633bf0544003251768db01281f8259a0d0c489f7f7cfc0fa7ff2878fb0cea89ddb3593539a1184e667f3840e8e5043508777dcef371e2ea3cf489fcfd60066a8dcfc9d0fbc21aac05f24a88ceb5c186326d1fe5b6cb4a40d25e6f847f7a4030d0a9cd29b0f9e3b49471730df5c5d1e172376ab2a27f3aaa3d1c5f354952745db1c54464e9f4d224ca1bcc7a4004bbba7a21d60a1fd5a35c1179738fbcb61241f38703610d51b18afc0e0bce11564167344568875374c6114c64b7cd25cb3c005b2577afe3c0f528d5c838152fe7b307d743596c91f43f3958e1f25f741aa4b30baa4063d0d9c3453fa18de83f744786c7b4294415e0222ecd9bd9a115663f32e9505d3618f9c716f23d9e536d429557774f7910aded24931f373507dba89766d760b714da6e264492ffee985422e60da15b7ea862935d21bb878560b0f8270f82cb3a8fc99ac35c30038b95532fe848f8a2876f5782acbad93f1426fee13fa4f0b778950bb2096c7d1c5bdd481ecae83254800f78a762983418c3fd673deda93c206ad399144b141db743640e3102fb453d553f939ad643ce9faabbb01bfad49cd30a61cce67fd46782447e14c7b2d2dc1df244cd7d72404a0f5b54187c75aa45b9b2a73727de0ce187b7e9cfd471efb73e9a84971185cf335cb33fce92e06992398e53be779782a436579bef6d7b0d93915e758fde3fd67b9a964d5a8ddc5950cb2a78262d0e36d329f9ba56b06266a126334c56852b290937423bc178a575a442046a8a4406e88b829d36bea6786774b0c513dc951b330eb5dd914a907b97e83db55cf73c2897dc3d6944dac797b8b1434327fc15caa6b309b62e1aa52d4e8ca7a7db6f99e423489951961f147b3cb14956e801f7b1a15b959546ea229898ab9b99c9a080f5d9176c59ace26b72e620b9ff6e558bfe7808a7b430c414ab90cb0f1e4101be46dc360928797171922d41bcc8c12d17375222c706b3f864f8937ca947b33eb13216b1cd1d4119fa6de7e1a07c652671d20b1930ccf14c443223a4fb93848969465feaffc703347a5d5a9b68339e3951d3b8fc17c6045201af7e84a7026bc741592bd47768a793abe5009eb9427dfcfc4e4a9b9ae71f8582b0cd9c28c6270d5bbdf0f1415c722384808cc8fdaea65eb97d5fda8dd2014163598411c51495fd9fea5ae48c9e0d158217335c0181db4d196af623b5de7ebb1a0a71090e896c11b33cccd4515d1370b00ca48df5b855b8942cf35a8da12d4eb68b52ad786e2146383c54a13a3de979d03039e42a440c6d0db2a1509ccd1aa5097af5b15b49b90928d82e7b944d0750ac6d9433526e65d3ae79201b4a20175aa12692e4ba41c4733673a47e8ea44ed2b34d3ae80ca8b05aa159662f75ba748ef793aa184c8405796185ffb25ca4cb324f4f77610a3b372f5fad04ef85ab771f2f5efa3d95ca0074b9363b3b4095dacc04d48b9c86ebdfd94981a33b2fdb712409462aca416079a5daf92fd24374b6f3f76277fc36bd6d38832ae14db4711b0503fe12b647516d1df64c11962219c17ecc60fd25704a94742d6655e57ac9f89ae1db77fe8679b7f84b403e101d70352f1d80bba74c4aefe14cec35f4168d2e9c2625a0e692504299cf8ca875e7b45fd3c71df003628c3ac6616b3b1a8edb7879e5781877a9873b3885958edec9d1a7d24cc22c49047335dec3cf9b2821c267ac8dfaea3bdb3dde0fc7d1c1c96ce04f3bd5ddd7ec3ba253cc34e7df4a03d58e716b5bf8d681c65931407a60c28922aceff1edb45417bae99167d99e97669d68efddd00a867f5b3ce5763be30e07ff2cf8b15c90a6f656f717bc1b590231f48e3fc4a85124d43a1a811b6043604870e56b81f127db36a686eb77d612609f44b0fb262b17739fbb36c67ed305e114b7b595626e897af9d59acee1af38295c366bc32e3af59427dc11d5cd594add4e226d947ff26a2140f476a43695ebc8f73cf5b7efeb2ce46d63484b9f3ded774088a0a31cb2eeae9538bf0c071f572657f905b33d4b3fb5280879cab0bc5fc7a89be10a9118c419f974c454a37bb934bd488cb1ecbdcb2ac26094f90b8093fc75454317b92278eff430f6622cbb2c4f6a8a2ef5c7388b504a6cf89bf889990977fd4f5ea1a530131a8e2356e3f1db0d9f93d7a65af79f1fadc0b40279965522d47dfe154d62036ce4e53eeb6e96473d3e2f59ce1f54414af8bada3d9b6089e7a670c7418d0f906ddd8494bbea718fb91acd0fdd0f2c19746f4c1ff87167987f056a86f03aad8c11aec6ea967383c29b9c8bc6d4f46c9c2f44fa5a43f52cda78cf36f270a7a9c77c7007a55b6770847aa8cf4676ea9abcbb91ca9a41ad56682f3dae20ed1a67d75391caabdb66808b91e86b9db4a13f7935fff256b54818a589402967c2242a70afffbc7ca73116a1ca81a126d2d609174a93b16d1fa4d18bd6a4e277aa42a8551765b241d1e54174ba7993d1694d5a191b3036cab5eed5311403ba6de613b73beddc753359f7339417e4f07724c6ba1ce99a55c6b8ec72c0a4df4776146877309382d3af87c204ce86f54c2a7c1027adee9ab2e4f6bd205fb41d7d6b2fabf7308ced5c870f156aaa9dbd24f232ad85d6123426c5e5264b4418ebc7acf1cac380212f48dd87c2000f0f0c7e4a54c04523fb7cebbc50c26691ca8ab9748831851392864c02166f5e2f0c7d5d76b71908de9ba69a88b0bbaad0dcfb9e3ad8680275e35218a60227bfb6f773fea9570831db671ec8912abe6c6190499e0100232aba631b9ab148547041f1bfabec860d19ce987c019249f07bf3effcff35a6c5402a584f0a55a3a580aa8303aa9a67856f8cc27abdfde11fd2b8c5432a46fe2c3c08ae53ff42d1c545fb890d097d9b31437c53f6563fe416570b4cb3d5fb084d9ad4165e6eaa6a24a5b77dfd6c0962d233a2030427dcab08660143dc3853d3ae8907a21f812501b1e96fca4e4c73226827477ae9e5e87f88be74228afc7393d7ed98f090577db9d70158e3acc36e07f959d32de1e34b471e2732e38d0a9397c6d3a218d0abd71af71993cff9e47793dc72d00c5d5079ad76e935c58d349f03c6a976ac204b4663324b63fba9fb7b4a048186d53f72012779b02ecc61faeed40494538a2df95f14be70f80e2c1072f56ccf59ff5d75dea6652ef90138b22c943fd4863e90216cf9ba84e69cbf43661031720bbc22e94bf2fa1dbfe8313487b4cf6cb31e9d26995471ab64a120e0eef82d95620890aaa48afa7acf4ba274dba1b5a1e37c1062fd70fab8218ceddaa8d10154e567c7cb8e5f4bb07c6c6065164c0b374b17c555f9c1ec8d108ae7ada1913db7a447e8ea3713d6e2fd6384ac3286d9941523e01d3fefb32cd65922f2113a5de4c7334657106a2c97a6282b22d7d67f39fd6601916b0d5bdcbe382fa786a3cf74b24cdbb5a2843b56ddb14d5514139b1cffcd68d45f9f082186e2ea8f774c899cbbaac2e6207cbe86645fb346fd360d94a2b61e0cf9d33778cf3b3aac5fbf29288fc065ea5a218b404b82c79098b48a8051d03b6f8c4df4843b665eaf6935ad0e703cd928d228a48b51d23afa1bde22b7655dd4d8fb73b2b10533d6da9b9fe6aac3d1e73e5157c0e33bae4f31f10212d7f87d9341e3090b3c7c8ef79efae8bb744a5f8db2bcedeceea81e8c23716e113bbd24722d6f33dfe6438006fadc9bab9809c5c5b3371994a55263a52e9bcdcd3665f8472bbc0c59d27c0a7d023763ca55f80b7a20014636be698a2f1e0a5ed5320b1591e0c1350fe41593942495ba1a214cf18dee3c73635d208a60737b253cc716d1cdf0c7546dab111bfdc0777c4ae297e9a35153e84d7c5411df5e134f2a128d5c0240aff77e076a1113214ee68fe0c294996944180a7a5c4c35ce341682cb31607c3cf5514b1f1035673f3475376a8cbf20b50cf3272a49c8aafda33fef13aa90781f9c14741886fbdda634205fa98c94dfe5f06533d17d772ec5be90243a24f1db46530fc8b8e167cec2276dc16cd755e371f85827f44da53114333abd41b2ea70faac6762d38b5751e243b2e01ce7d00dce1069419fde74c49ebfabf86eb696fc6f07a8b4f95683449416c9633f3ef6a2eba6a687291e2e7f48a3fd15bdd2187e7790fbfe684b5764d7ef0bb3ba99c2e120300cf58c408608ba6090e15539024787a0290083d808380214a8ecd11effcc05149e476b1ea5b82047411050068806e331171513c57713f0987133e155d3b312aadc9f243f8533fb07ce208d46c42604669ff4b8a28be3bc71f38b45081d262ec130a818d05d8a8b52cf923727f59380441524be1d3448223a2cccaabe7d86a88c4a9ad8683a42cadc41b4f26faa91d9c927edf30cb8137e74d7c8b40a9adc2567de40144ba8f86776a1ee234d02c56fbfecdc636aac44aa59d0392d8e8c13531350f2c4b5b6417db0667a557acca8f931d31a56c3b55f603e9646cc409dd54db6d89be0a7a5b5459639915bacc24885e4a1e2f3a805cd7a315f71601d5fcb2b658deaa676d77ad646003770df1be040641ff3391c4770e5461c38eb2b0eb58e9134de52e78d36c3dfd1ef42d9561b78116e70b3658ba7ff9411a7085b80a8082977d57e9df4851e5f7da33f06f7c47447bab0b4c7d3b9c9a511ff6d8ed4a26287d9ed154302ff6ed1aecaa226d60ded733eebc924ce2df1f7ada22a10db46e768918178cffc926b61544f59f6b0be26900a5204e97b6b91b16c227796f903e5e1d3924a4f3286579507a30a1486d7d186a2fd5059b2e83cecae0c7ae26dc7c262e717263c1599e7da38f3e3ce06abaf77876979c0835c859e101ff6fa4ab2a96e65a497cdf27b1df052d07bbe1bd4284d8f817d586667dca367a668a1904430ee1ca62098d919f0a4eea1244a8e4a7792c86165fdd8b9be99262d2f40ecda00a9a5afc1bde0e630814e8aef82176dcd37463e34e63c115d9d33012e497c41c22e98978ee1e4d44becb9df7920d9f8490427d020d602cc741a03284d01e81804714d46f13ac08e2a6a8677286fd66c528b985dc51d7b150417ce8fe991e2db228bca99fa6eecfe654307fda8a227ce880e7da556ffd3ed3adca545953da9c369033f2e819a1d66636fd1e9794bbd0d7a75e68c44c632eef85b205cab173aa5a9023ecbcdbdd43e4afc7ee5346075ee1bd79795245a8437d41496d3a25144af27fa026fc1b4135e28c753127fa19c147bc14c68b15fe170fff5b916eb069a414c069da3dd2640ddde8e819ae37b670ff42dca8010cced7373d0ee0c2fb05de16dc8959d172c4f467a25038b97fbf9e60bd3c40c73871d4114d6d81acb7d57552495c336e5da9b71b7872e9ebdf082023674118c3f94af6f05ab5e19ecd8ec055dd6eece56f850e902745173f758e2387c1464866348bbb5d436937192371564fd9769eb4542444ef4e60701594fbd6afc80fc7e0f7616ec8286fa1059395a2ff7ffd3fc434b84f23ca88fe44c8cf21e1b13b3f3f66543e71b855f3f785dfe1f954462fbcf57b591c0a725d27381251828d7fdf7e09bdbd625e89e98f61fb76d56ad69106510ecefa93853f0da630f7b4f324c17494d1fa51f94e9daa978b572065f6396a7f3d649060798b32b61ee7bc7ff03fdfd800e8dba8c9b0c8d51433972db34e0cc2666d54dacc4c1da366bfd58f5321f6daa88d4e49a450a75e2ae935471886bda66022b4167a743d8e7518fa2b427408f5c3278152f3d97404e34c2e0531a322518bea013e44c82546b135398263854cc3fa21f72389170c4e422e2e221c43634442eec3712c172f3b9a4e29c43d59ed1715391dc27f7254ac5918f9985288b5ff44a52c93c5663312331a3341fdff4d24607f91c4fc0cce634a4f69f686ab52ec6e36e41a1fc87af4eba40ab2da228194a6cc9b98f271f74666c47a3e371e866dd8a41293dd6474b2dde3f6bc452b010490e17cc4e7df92e7436788e7e60dda166a38314f18e631656862ff7ecdbb85cdad2dea4365443da5617877df6bad1abc1be597a2961df6cf34f5f110a60694b406e4ae9e48077132ed583f76b54f3c37108b19c47acc4bc02072a64a0da39bbbbd6f2110a8e925a63389d963057f466d02a10f6a6ba2112b74e28e0aae33b0f028c2270f1f07c42b25c812c3dc34f811b862c3485b4396cceca3ec6a62e47bd519533c30f3d9cf05b0ec9886f8abb796ce31b290ab6b515dcc7d7f3ab11582fff535ffe2746333c1d288f7a22ee36ed232f1a7d6dc3c825d86d211af3eecdfdea7cb7a4e5139ebec4a3b7e81518e76a6d8951bfb090705f21d158d89061815e7dba1cc8134e2f80955dc63f3fc0a5fb953b4ab05c22ca761092418c32725732e54dcf086430f6b114761b745ae8ab00127ca375ca08d7c4ff7e306f7bfeab6d87a7e43218c267ef145095fc7a1ad58a283007734de55aea229a24c63372ae40e32618468612464d61840d79d837722d8204ed09b9bda9f438df009c9a2e4584755dd4ad91a3378255e0b104258baf6175e7d9df45c3caa2aebfb5866e4d20fa09e06ab689903a1c1b622ea04f1208adbf7cd6ab7a53068441eab17dafb00a07bbd5083a6691f6f34a9fa82b1ded4660deaf67343ab9aaae5f70c0b5a287ba669f32a1431ede98ac58bb4f42ef2a23122cd6a3da7658174853a7400bbda3ea58ce0f5589a6d5eb45e0a17aedf12bb175a8d083492e768f52b23881e61f3492fc039e478a712918ff2b1721b9e6e7911e16539f6104fbd0457b5521391672f1e57cdc2632ace97d4e21372213d1546578f7c8c12218600d85bd53cc6a5f2a2b1e88400c55f13703df10ab28a327112404f4663b19c4e938acd3917bfa5580845d0060a9136dfd88000bc05d07476bda0742ced80e1f61103ac1a501cb648ec6ffcfb0c1ce6fcce6e97832a720eb621091f2bb8ca2535e4c4c2335d6cf8a88cdc484b19dd12a0cad69bcef70f1c5a416ea21ccdbaef497a4ae417370531e48fc48fd01106934b6fc6cfae0acfe78f208d5ecbb773707484b57768781f57126d774a75099b308035862572d3fbf86692d474bd92850405bfbb80dc8a525ff594bb0d908ceaa9f51b2ac7b41a2b4c45621b62b1e1ba55e394ee15c4c222598b4e58b8addf87474a3aa94e9233d36520ded5f6ede8be6c32d38af2f8a0fb27562b2e3330490d46047e0a2d383830c2b0525c049d3005888bbbd247162275b157e440942b37eaf4abb9a4d22ef15d6d3009096d9b3d6732c35c2878e4c2fc905f2d961bf3700f0c08740249b57a18be63a18ff2fd7340fa3baa719839cf8eaa389a2f3b81af202c4a9abbdd030bfaef70cb65fc961bb579ed400e648cd8c1b100b289c38067a6d422c1a0a9f027795eecdaa7230d6e0662d0f59ab1cb0671b3b99ec12b65771f0c7416456b99537d10779d496f17e0c04160e879a5d089adf6f8060d92c44039ef2475f4647b5f3b30335ba2a50403d09644a00122d3bf7553c8eccb0e8dc612a83e6e5a7acab9f014fbbc712623ea86edc9bec0e4c392efaea3c56bb5ec45832ccbe6329509a6800ee36e85bb3b65dcf5aff9aa2db6569a230cdf1296e815d717191bad83ba31c1e42b69c6a5cd214739b1af105a244283c59c4f60d730fe6835ca983f3bea050012d6b6bc13a70591950de0d0d8857c200b61158a13f2c2d2536a799b7b4ac302ffbc78e9769e324c6ebfd567f5f4c2b053f7b59b6b07285194526d40ca6a5c4c376fa127b6b100489ce5266ebafa0cdec24b5bd7a22f295402303f8d1ddc3d1427d4c3beece3309d55f138d878c8054b259c53e59489f5f3610b3784489cdfa6083867a92a5f7e30826a6f590b9c809020c0f8eb73b70a971c050a70af2ca3a70573554b97c60037872df3e5c3f2e91103827306e72fbf1b072250e432b7bf8a5540783a2848724989eb86670e1f5b0675a39f7b1548260fd211d9c05e48e1a3df852842c477a36bbbac07317246dc8b4c3383227485556992735bfea38ef7a8a3a372464dc0ee6b9a09548a37dce62d563d04eaec5cb54c9614170e0811b53fd05dbd192744f74b5e0e3cc1b29dc0755ae4fc0c14ae8927f72864a796e65130e05d012336a96e5b15f17ae6258c67ecab6505bc1a26c00d5010e86f243412ca4264da4ed41670238faca1d7c7ed6ae74cc104ff3f9c045ce7efad15db83c3f5bbf001507caf3e6ee0a11a9c10205d91a7bbc12b2a91065352440a18493315df7dfa671bf8e1bd6d67119fbc3bb69d5661a43481b00ee60dab9d725f7f166ff989a0cbe21ec7f0007bf09cf5b5bc65b5835c4d0bfe6981616dffe0eae36d5b8c39d14645801919bc537212fb941ebe346bcb5037cf8b894ca92a0682fb2b37f08609a4a9465f0c423250343fc2367da64b690e273293431a36813cea94de5cf411c5c3c0265239aafb8fbe45c55fabd94baf7053023d1b0f647abcc07be35fa5a0c3aba2da35f6c2d8a739beccd96916cd30bdd8533411a425ae30b5d02b8d79c3622118641fb8551a31e1c1f4a0551d2b57eeee4097e9c48e09481c228bef6aa3c4aa7b9e72e8731cbc57a20a9e3417ec718c6d57a401d3c04ee2e4066d6d950149e277dc2bdaa23879b2c5135611d82ad8d20a4b2235c09da69fbd9878cbc52b25622165e0ab3bffe476eb2884629596dc865f6b13ba510cb375e59195636deeeb06786a7c9904ccdc58eb8664fe7b4d32bcb9fc8ab135c25ee2c22837c6c3a8c116e8fdcfc310799d0fc974e43d3a73fa0f8bd9057a1465823567f681c1d2e6c4a33770a4dccd06bce94b0af0e4d198b040d8094d610bbbd4501d8da6028b5e73f135cba6a8d7bb6cab2f06576eacd823e520282f9f883634a6dd4cc4810cba3f760b9842a0acae7a396892b658e3b6c84d0e75196b4e6a3240e9d2aadf257ae970153238e347d3cbcbfabae300494ea0d1bf292799e09b8064ed885cce1574ee94c216c50017c43b3407716e5919fa0706fc9e9c382bb321e8d6fa2520543d0427a620bb45c56d3f7e66aa025f17863024a2bd693d932bacfa516fec791e86982d020faa819bf2264f8606ef260a29af16300971d0ec49d6f5a21f9c437b75b44eb59bbaf71947621a1e78c68e2767dd42c7f6e3dd6faeebfc8fdfe4dec6db3fdd2d53c906f6040278ea235b37442f34cfa1a1f1064acce6a7cdb9657c1ea2def6c1f2220ab57ececfe53b4bdb6e57afaac1c055f25202c1efa65b3e48f5b57dcd2b7f3572d1d96a736813ca6acc75c967a89edc5dd62eea64cd46eeab6aa879887360aec466dd287705497e832bd4eb3d73524e4847c18f8b46de1a88a00dfa43acf51fe97288d53e30c6f2739b4532c6e8f7286a25c5f5f10532fee71d7c1c1f6a1c56f2535d94e2dd774f424cab2bf3673e097fd3cfb55ba1f29a6d03dc31abc214a6dc5950824f05f0a3036690120684a7117d42e9d40b56f3738428540c27f25ce4130966fc9b08f831756d5448be9ad7d07b95bfe61fb396438bba4ccaffa7a8a21edc5324d72514427a75a3619e48400e1b13a97ae7097f87c9253035ac3a1e3bf6d22725d22e31b7e0c9515f98f34ba357cc136190f81c010f83306d97a89184656bef128a648b9878bbefc508a631f949d8540ed16aead49d51911901d74d7aa9649317356ebd2ac0441be95291c1c2ba803b2e4604ac4b09e29fc6200819fb2603b46dbe929e4cc661c4f31a6cdc94a81fa62eb28bf447fe2ddbbb3d5f2b97d4189ffe5d83bc8be19ee5c92b958488a55c859d7eb5885674bd351c4125a02151529e9ab01685f2e4bba3aef0d5e9ad8678dab470d761beb8785424d51c4aa728417d1edc7cc44d8c7f2f5a09c68f940fc72a4ed2952e1985b2727befdf551d95e8d43e4dcab6f65b12ea706cbc10e5354a894e7646118e60", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x9, {0x80, 0x10, 0x0, {0x4, 0x1002, 0x1000, 0x1, 0x2, 0x1000000000009, 0x80000000, 0xb, 0xe26, 0x8000, 0x800, 0x0, 0x0, 0x70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x1, 0x2) 6.06190158s ago: executing program 9 (id=4805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) 6.001519689s ago: executing program 7 (id=4806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0xfffffffb, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 5.575289876s ago: executing program 9 (id=4807): r0 = socket(0x10, 0x2, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x0) 5.404303277s ago: executing program 7 (id=4808): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x356, 0x3a, '\xf1', 0x3a, '', 0x3a, './file0', 0x3a, [0x50]}, 0x29) openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0x9}, 0x1c) sendmsg$nl_netfilter(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x8b, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) openat$fb0(0xffffffffffffff9c, 0x0, 0x10084, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000280)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x80000000, 0x3a, '', 0x3a, '^\x00\x00', 0x3a, './file0'}, 0x2a) 4.353621978s ago: executing program 4 (id=4809): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0x37}, 0x275a}], 0x1, 0x60010020, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) ioprio_set$pid(0x3, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) 4.255685434s ago: executing program 1 (id=4810): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x48d, 0xce50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1e, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0xff, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x184f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x1, 0x1}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x201, 0xf, 0x5, 0x8, 0x8, 0x14}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x404}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x3f, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000000000086a05230040000102030109022d0001010040030904000901030102080921f7ff0b0122d60f09058103100008f80e0905e97df54fbf8e0029cc034548547eea89903298655baab08b66fcc9f5d985fef5292f28d5"], &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7f, 0xe, 0x9, 0x40}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "cbce284d668ede09468a1a3295b7cc1a"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0x4, 0x9, 0x3}]}, 0x6, [{0xd9, &(0x7f0000000280)=@string={0xd9, 0x3, "a61dfd9ede51582c861dad387b9b46b057b18d634672e5898c1e5e3c0ca09e0c01bd0ccfad945654801d2e33306b97f043769d012b4832736d0d7d50f4cc48aad856ac20323893ea8f23c424f2323ba9520433f34a3b12116a9c1441c308011405997784d7dee61179b85c00c4d0dfd95785e075ba4d3b2649ea38597e99efae4a75b070d2eb1d91c9fd74cd1ab2a918c6b0a30fac60e4ee649511513367e8853fdf6dd1e265431c72e8b706245288efdb3257941ebc9407410370e3a941de992ca859ee25fc15a07c75258d21c41d40b2082998fe663c"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x801}}, {0xc8, &(0x7f00000003c0)=@string={0xc8, 0x3, "70e7006d47a9a6e667125a0b82559797a2ccfa5cdbb68cd86390240a6a5ec97fda55c4f721a250801e4a93513a355aea22c4cc3df270fe72c5c1a80756b0c9e2305c813166a68f163a1368d2427810ca951ff498fccaa8517e692a4e854c238ee272799dfddf2a8f201558ae9e5cdb085a74ec9fa64c8acd063e56f6d2040cb2c96b18915be2adf172b7c73c83983c46c79dd1f05ddaa7ddfe0218c6d70f7b23953d9305f02aecd6a4369a1b8c9010fd67b580bcccf8a7b04cb3084517e80ae5471b1ffac2c9"}}, {0x61, &(0x7f00000004c0)=@string={0x61, 0x3, "be0117c8b35ee8bfad2618c0e929ea04829de60c17573162837ec5c997b87729aac832cb7d730a0449368b7c0b453fd6b3eef6e032e0f985d20a56007fdc4bf38176f23b68d7bf0b3469892033e72271fbd9c26fec8947e4511424b6d38145"}}, {0xc0, &(0x7f0000000540)=@string={0xc0, 0x3, "8e7e88f2523cfeda325d4ef610a8c9b3ca0333833e53f53bcd9a122837e65ff654fd63f238fe8153d80a87e520dd7b01d514d1763d81804840192730eef15dc2e1e58470cb59e010d1ad1db336fff688622608ad673aecfce27f94a29d69b88d99d127a82531faefaeaf7f8775d1d9ecbc63f5d0025bf4caeb539c04430f0a82e930128d87d139d5c42d5057cc531f7a9f202cd973ef07a2fab480a7538029fa74815c5ce202c3dd7a7d295d969de729416cbbe8847d05f1176e095fbfd0"}}]}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="ce83e0c7dd12363458cf945c43908a3dd7b41ba4827a5856333be43c2bc01c1c180de792ba9b3eea11fbcb2847056b5dd795395811579ed8179c0f513b8056569509ee9eb42a1b12b01445dead8e1a4941df8c73ff43a2ab83ecf0d22cc73dc6d45c6a2dc0188fa567f901b2e8878354af269a9c53240eede8bb38626a38975da9a95b7539ad560f70a53cac7c9bf8a1d05ea48c8bbb241646737d24fc4f4399f64ee05e25e91006f20a065bf8e1a5f5d0654d39cceb2b10ab329c", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="b1aad62ac99e18ba2bcfc6735843df8867d974038bc9567afabbdb8e", @ANYRES64=r0, @ANYRES8=r1], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.644273259s ago: executing program 8 (id=4811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) socket$key(0xf, 0x3, 0x2) socket(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpgid(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x578410eb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x45f0}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') close_range(r2, r9, 0x0) 3.093602346s ago: executing program 8 (id=4812): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x60004ce) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x20000000000006) r9 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2.88162207s ago: executing program 9 (id=4813): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x9a0001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000002", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000500"], 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r2, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) 2.591798344s ago: executing program 9 (id=4814): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0x7, 0x200, 0x9, 0x1, 0xfffffff7, 0x5, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) rt_sigprocmask(0x0, &(0x7f0000000400)={[0x6, 0x3]}, &(0x7f0000000380), 0x8) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x7ffffffe}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) io_uring_setup(0x1530, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) 1.865162892s ago: executing program 7 (id=4815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x1, 0xb, 0x1, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0xffe0}, {0x2, 0xfff3}, {0xb, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x240202) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4004af61, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.381579367s ago: executing program 4 (id=4816): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000008780), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}}, 0x0) 1.131453319s ago: executing program 1 (id=4817): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, 0x9, {0x80, 0x10, 0x0, {0x4, 0x1002, 0x1000, 0x1, 0x2, 0x1000000000009, 0x80000000, 0xb, 0xe26, 0x8000, 0x800, 0x0, 0x0, 0x70, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x1, 0x2) 999.226791ms ago: executing program 9 (id=4818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 477.617652ms ago: executing program 1 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x2040600) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x5, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2b, 0x801, 0x0) listen(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r5, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='task\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) splice(r4, 0x0, r3, 0x0, 0x8ec0, 0x0) r7 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000040)=""/2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x3e, 0x107, 0x70bd27, 0x25dfdbfe, {0x1f, 0x7c}}, 0x4a}, 0x1, 0x0, 0x0, 0x15}, 0xc000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 425.247575ms ago: executing program 9 (id=4820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, &(0x7f0000000340)=""/13, 0xd) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x105, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x8, 0x0, 0xa, 0x10, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2402, 0x0) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 0s ago: executing program 8 (id=4821): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000500000004000080050011802f"], 0x1c}], 0x1}, 0x310) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r2, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r5, &(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) close(r7) socket$inet_mptcp(0x2, 0x1, 0x106) kernel console output (not intermixed with test programs): 84][T19779] sock_recvmsg+0x229/0x270 [ 1195.857422][T19779] ____sys_recvmsg+0x1c9/0x460 [ 1195.857460][T19779] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1195.857485][T19779] ? get_compat_msghdr+0x37e/0x4a0 [ 1195.857534][T19779] ? ktime_get_ts64+0xa2/0x3d0 [ 1195.857565][T19779] ___sys_recvmsg+0x1b5/0x510 [ 1195.857597][T19779] ? __pfx____sys_recvmsg+0x10/0x10 [ 1195.857649][T19779] ? __fget_files+0x3a0/0x420 [ 1195.857678][T19779] do_recvmmsg+0x36a/0x770 [ 1195.857714][T19779] ? __pfx_do_recvmmsg+0x10/0x10 [ 1195.857754][T19779] ? _copy_from_user+0x94/0xb0 [ 1195.857797][T19779] __sys_recvmmsg+0x127/0x280 [ 1195.857826][T19779] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1195.857850][T19779] ? ksys_write+0x22a/0x250 [ 1195.857887][T19779] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1195.857923][T19779] __do_fast_syscall_32+0xb6/0x2b0 [ 1195.857948][T19779] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.857974][T19779] do_fast_syscall_32+0x34/0x80 [ 1195.857998][T19779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.858023][T19779] RIP: 0023:0xf702e539 [ 1195.858036][T19779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1195.858049][T19779] RSP: 002b:00000000f541e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1195.858065][T19779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1195.858075][T19779] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 1195.858084][T19779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1195.858093][T19779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1195.858102][T19779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.858121][T19779] [ 1196.255095][T11648] gspca_sonixj: reg_r err -110 [ 1196.265339][T11648] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 1196.621405][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1196.621424][ T30] audit: type=1326 audit(1758924275.888:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.630911][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4168'. [ 1196.744253][ T30] audit: type=1326 audit(1758924275.888:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.811934][ T30] audit: type=1326 audit(1758924275.888:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.845124][ T30] audit: type=1326 audit(1758924275.888:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.867836][ T30] audit: type=1326 audit(1758924275.888:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.892245][ T30] audit: type=1326 audit(1758924275.888:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.914955][ T30] audit: type=1326 audit(1758924275.888:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.937538][ T30] audit: type=1326 audit(1758924275.888:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1196.988809][ T30] audit: type=1326 audit(1758924275.888:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1197.155129][ T30] audit: type=1326 audit(1758924275.888:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19788 comm="syz.8.4168" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1197.727345][ T5868] Bluetooth: hci3: command 0x0405 tx timeout [ 1197.957841][T11654] usb 10-1: USB disconnect, device number 5 [ 1197.962304][T19811] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4172'. [ 1198.005994][T19813] netlink: 'syz.7.4171': attribute type 3 has an invalid length. [ 1198.090655][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4172'. [ 1198.122728][T19813] netlink: 830 bytes leftover after parsing attributes in process `syz.7.4171'. [ 1198.131808][T19813] bond_slave_0: entered promiscuous mode [ 1198.137495][T19813] bond_slave_1: entered promiscuous mode [ 1198.234174][T19813] netlink: 988 bytes leftover after parsing attributes in process `syz.7.4171'. [ 1198.769922][T17349] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 1198.935478][T17349] usb 9-1: device descriptor read/64, error -71 [ 1199.185481][T17349] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1199.325700][T17349] usb 9-1: device descriptor read/64, error -71 [ 1199.455870][T17349] usb usb9-port1: attempt power cycle [ 1199.683334][T19844] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4178'. [ 1199.835757][T17349] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1199.909465][T17349] usb 9-1: device descriptor read/8, error -71 [ 1200.325375][T17349] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1200.494997][T17349] usb 9-1: device descriptor read/8, error -71 [ 1200.621663][T17349] usb usb9-port1: unable to enumerate USB device [ 1200.724200][T19860] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4180'. [ 1200.975342][T19860] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1202.152844][T19889] batadv_slave_1: entered promiscuous mode [ 1202.316615][T19888] batadv_slave_1: left promiscuous mode [ 1202.546828][T14049] syzkaller0: tun_net_xmit 76 [ 1202.575895][T14049] syzkaller0: tun_net_xmit 48 [ 1202.590906][T19896] tipc: Started in network mode [ 1202.591051][T11654] syzkaller0: tun_net_xmit 76 [ 1202.596335][T19896] tipc: Node identity , cluster identity 4711 [ 1202.621312][T19896] tipc: Failed to obtain node identity [ 1202.674987][T19896] tipc: Enabling of bearer rejected, failed to enable media [ 1202.926490][T11654] syzkaller0: tun_net_xmit 76 [ 1203.141904][T19915] fuse: Bad value for 'fd' [ 1206.332404][T19952] batadv_slave_1: entered promiscuous mode [ 1206.345978][T19953] batadv_slave_1: left promiscuous mode [ 1208.385339][T17923] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1208.548022][T17923] usb 10-1: config index 0 descriptor too short (expected 292, got 36) [ 1208.577370][T17923] usb 10-1: config 24 has an invalid interface number: 0 but max is -1 [ 1208.640667][T17923] usb 10-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.712702][T17923] usb 10-1: config 24 has 1 interface, different from the descriptor's value: 0 [ 1208.832904][T17923] usb 10-1: too many endpoints for config 24 interface 0 altsetting 0: 230, using maximum allowed: 30 [ 1208.878678][T17923] usb 10-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1208.945277][T17923] usb 10-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1209.030219][T17923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.039882][T20016] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4219'. [ 1209.041685][T20013] batadv_slave_1: entered promiscuous mode [ 1209.117143][T20012] batadv_slave_1: left promiscuous mode [ 1209.438860][T20025] fuse: Bad value for 'fd' [ 1211.281379][T11648] usb 10-1: USB disconnect, device number 6 [ 1214.216330][T17349] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1214.386841][T17349] usb 9-1: config index 0 descriptor too short (expected 292, got 36) [ 1214.411245][T17349] usb 9-1: config 24 has an invalid interface number: 0 but max is -1 [ 1214.441570][T17349] usb 9-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.471682][T17349] usb 9-1: config 24 has 1 interface, different from the descriptor's value: 0 [ 1214.655352][T17349] usb 9-1: too many endpoints for config 24 interface 0 altsetting 0: 230, using maximum allowed: 30 [ 1214.697137][T17349] usb 9-1: config 24 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1214.750966][T17349] usb 9-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1214.791700][T17349] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.901624][T20144] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4251'. [ 1216.338492][T20166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1216.363793][T20166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1217.234368][T17349] usb 9-1: USB disconnect, device number 10 [ 1217.506075][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4259'. [ 1217.958774][T20210] FAULT_INJECTION: forcing a failure. [ 1217.958774][T20210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1217.972464][T20210] CPU: 1 UID: 0 PID: 20210 Comm: syz.9.4262 Not tainted syzkaller #0 PREEMPT(full) [ 1217.972489][T20210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1217.972502][T20210] Call Trace: [ 1217.972511][T20210] [ 1217.972520][T20210] dump_stack_lvl+0x189/0x250 [ 1217.972548][T20210] ? __pfx____ratelimit+0x10/0x10 [ 1217.972570][T20210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1217.972593][T20210] ? __pfx__printk+0x10/0x10 [ 1217.972619][T20210] ? __might_fault+0xb0/0x130 [ 1217.972656][T20210] should_fail_ex+0x414/0x560 [ 1217.972689][T20210] _copy_from_iter+0x1de/0x1790 [ 1217.972717][T20210] ? finish_task_switch+0x266/0x950 [ 1217.972742][T20210] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.972764][T20210] ? finish_task_switch+0x266/0x950 [ 1217.972790][T20210] ? __pfx__copy_from_iter+0x10/0x10 [ 1217.972828][T20210] tun_get_user+0x488/0x3ea0 [ 1217.972863][T20210] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 1217.972897][T20210] ? __pfx_tun_get_user+0x10/0x10 [ 1217.972925][T20210] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1217.972953][T20210] ? rcu_is_watching+0x15/0xb0 [ 1217.972973][T20210] ? trace_irq_disable+0x37/0x110 [ 1217.973002][T20210] ? rcu_is_watching+0x15/0xb0 [ 1217.973023][T20210] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 1217.973049][T20210] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1217.973066][T20210] ? irqentry_exit+0x74/0x90 [ 1217.973090][T20210] ? tun_get+0x1c/0x2f0 [ 1217.973119][T20210] ? tun_get+0x1c/0x2f0 [ 1217.973145][T20210] tun_chr_write_iter+0x113/0x200 [ 1217.973170][T20210] vfs_write+0x5c9/0xb30 [ 1217.973201][T20210] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1217.973224][T20210] ? __pfx_vfs_write+0x10/0x10 [ 1217.973259][T20210] ? __fget_files+0x2a/0x420 [ 1217.973290][T20210] ksys_write+0x145/0x250 [ 1217.973326][T20210] ? __pfx_ksys_write+0x10/0x10 [ 1217.973355][T20210] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.973378][T20210] __do_fast_syscall_32+0xb6/0x2b0 [ 1217.973402][T20210] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.973425][T20210] do_fast_syscall_32+0x34/0x80 [ 1217.973449][T20210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1217.973472][T20210] RIP: 0023:0xf70ee539 [ 1217.973488][T20210] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1217.973505][T20210] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1217.973526][T20210] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1217.973540][T20210] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 1217.973551][T20210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1217.973563][T20210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1217.973575][T20210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1217.973602][T20210] [ 1222.384449][T20276] FAULT_INJECTION: forcing a failure. [ 1222.384449][T20276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.629391][T20276] CPU: 1 UID: 0 PID: 20276 Comm: syz.1.4272 Not tainted syzkaller #0 PREEMPT(full) [ 1222.629410][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1222.629419][T20276] Call Trace: [ 1222.629425][T20276] [ 1222.629431][T20276] dump_stack_lvl+0x189/0x250 [ 1222.629452][T20276] ? __pfx____ratelimit+0x10/0x10 [ 1222.629467][T20276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1222.629483][T20276] ? __pfx__printk+0x10/0x10 [ 1222.629503][T20276] ? __might_fault+0xb0/0x130 [ 1222.629529][T20276] should_fail_ex+0x414/0x560 [ 1222.629553][T20276] _copy_from_iter+0x1de/0x1790 [ 1222.629574][T20276] ? rcu_is_watching+0x15/0xb0 [ 1222.629589][T20276] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1222.629609][T20276] ? __pfx__copy_from_iter+0x10/0x10 [ 1222.629627][T20276] ? __build_skb_around+0x257/0x3e0 [ 1222.629644][T20276] ? netlink_sendmsg+0x642/0xb30 [ 1222.629659][T20276] ? skb_put+0x11b/0x210 [ 1222.629676][T20276] netlink_sendmsg+0x6b2/0xb30 [ 1222.629697][T20276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.629713][T20276] ? __import_iovec+0x5d4/0x7f0 [ 1222.629729][T20276] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1222.629744][T20276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1222.629760][T20276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.629775][T20276] __sock_sendmsg+0x219/0x270 [ 1222.629798][T20276] ____sys_sendmsg+0x505/0x830 [ 1222.629818][T20276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.629846][T20276] ___sys_sendmsg+0x21f/0x2a0 [ 1222.629864][T20276] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.629904][T20276] ? __fget_files+0x2a/0x420 [ 1222.629916][T20276] ? __fget_files+0x3a0/0x420 [ 1222.629934][T20276] __sys_sendmsg+0x164/0x220 [ 1222.629953][T20276] ? __pfx___sys_sendmsg+0x10/0x10 [ 1222.629980][T20276] ? lockdep_hardirqs_on+0x9c/0x150 [ 1222.629996][T20276] __do_fast_syscall_32+0xb6/0x2b0 [ 1222.630013][T20276] ? lockdep_hardirqs_on+0x9c/0x150 [ 1222.630036][T20276] do_fast_syscall_32+0x34/0x80 [ 1222.630052][T20276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1222.630069][T20276] RIP: 0023:0xf7f12539 [ 1222.630080][T20276] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1222.630093][T20276] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1222.630108][T20276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 1222.630117][T20276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1222.630126][T20276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1222.630133][T20276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1222.630142][T20276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1222.630160][T20276] [ 1223.445375][T17923] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1223.653849][T17923] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1223.686324][T17923] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1223.707129][T20290] syzkaller0: entered promiscuous mode [ 1223.712662][T20290] syzkaller0: entered allmulticast mode [ 1223.733567][T17923] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1223.784640][T17923] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1223.804074][T17923] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1223.858177][T17923] usb 9-1: Manufacturer: syz [ 1223.862801][T17923] usb 9-1: SerialNumber: syz [ 1224.147108][T20298] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4278'. [ 1224.155705][T17923] yealink 9-1:36.0: invalid payload size 0, expected 16 [ 1224.188171][T17923] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input36 [ 1224.247958][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.254942][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.261929][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.270120][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.285421][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.286364][T20298] ip6gretap0: entered promiscuous mode [ 1224.296116][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.305257][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.312326][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1224.319099][ C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1224.325990][T20298] macsec1: entered promiscuous mode [ 1224.355990][T17923] usb 9-1: USB disconnect, device number 11 [ 1224.845549][T17923] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1225.017874][T17923] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.033356][T17923] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1225.094113][T17923] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.136752][T17923] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1225.150035][T17923] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1225.160036][T17923] usb 9-1: Manufacturer: syz [ 1225.172806][T17923] usb 9-1: SerialNumber: syz [ 1225.570851][T17923] yealink 9-1:36.0: invalid payload size 0, expected 16 [ 1225.579635][T17923] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input37 [ 1226.854308][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.861292][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.868461][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.875452][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.882385][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.889329][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.896252][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1226.903006][ C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1226.915295][T11654] usb 9-1: USB disconnect, device number 12 [ 1227.832438][T20350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1227.879268][T20350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1227.970995][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1227.971012][ T30] audit: type=1326 audit(1758924307.228:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.077444][T20357] binder: 20354:20357 ioctl c018620c 800000c0 returned -22 [ 1228.199873][ T30] audit: type=1326 audit(1758924307.228:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.221981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1228.258668][ T30] audit: type=1326 audit(1758924307.228:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.348862][ T30] audit: type=1326 audit(1758924307.228:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.450606][ T30] audit: type=1326 audit(1758924307.228:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.478928][ T30] audit: type=1326 audit(1758924307.228:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.705397][T11654] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1228.747118][ T30] audit: type=1326 audit(1758924307.228:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.835367][ T30] audit: type=1326 audit(1758924307.228:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.869471][ T30] audit: type=1326 audit(1758924307.228:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1228.946612][ T30] audit: type=1326 audit(1758924307.228:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20351 comm="syz.8.4286" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1229.211455][T11654] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1229.257892][T11654] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1229.429277][T11654] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1229.495343][T11654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.661994][T20365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1229.687001][T11654] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.775527][T20374] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1229.933820][T20365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.942400][T20374] usb 10-1: Using ep0 maxpacket: 8 [ 1229.951526][T20365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.979398][T20374] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.991460][T20374] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.069285][T20374] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1230.089097][T20374] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.119294][T20374] usb 10-1: Product: syz [ 1230.134842][T20374] usb 10-1: Manufacturer: syz [ 1230.146236][T20374] usb 10-1: SerialNumber: syz [ 1230.162653][T20374] usb 10-1: config 0 descriptor?? [ 1230.231377][T20365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.240994][T20365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.510752][T20374] usb 10-1: USB disconnect, device number 7 [ 1230.848488][T20377] Bluetooth: hci5: command 0x0406 tx timeout [ 1230.855447][T20377] Bluetooth: hci6: command 0x0406 tx timeout [ 1230.861952][T20377] Bluetooth: hci7: command 0x0406 tx timeout [ 1230.866744][T20376] Bluetooth: hci2: command 0x0406 tx timeout [ 1230.868142][T20377] Bluetooth: hci3: command 0x0405 tx timeout [ 1231.833650][T10532] usb 2-1: USB disconnect, device number 10 [ 1232.234120][T17490] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1232.405369][T17490] usb 9-1: Using ep0 maxpacket: 16 [ 1232.413398][T17490] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1232.423730][T17490] usb 9-1: config 0 has no interface number 0 [ 1232.481622][T17490] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1232.511828][T17490] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 1232.521881][T17490] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1232.530284][T17490] usb 9-1: Product: syz [ 1232.534462][T17490] usb 9-1: SerialNumber: syz [ 1232.607360][T17490] usb 9-1: config 0 descriptor?? [ 1232.923868][T17490] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71 [ 1232.939574][T17490] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1233.037964][T17490] usb 9-1: USB disconnect, device number 13 [ 1233.258945][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1233.667392][T20471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4312'. [ 1233.885365][T11648] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1234.159698][T11648] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1234.172183][T11648] usb 9-1: config 0 has no interface number 0 [ 1234.186284][T11648] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1234.197686][T11648] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.206951][T11648] usb 9-1: Product: syz [ 1234.211880][T11648] usb 9-1: Manufacturer: syz [ 1234.232519][T11648] usb 9-1: SerialNumber: syz [ 1234.258742][T20484] FAULT_INJECTION: forcing a failure. [ 1234.258742][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.349225][T20484] CPU: 1 UID: 0 PID: 20484 Comm: syz.7.4316 Not tainted syzkaller #0 PREEMPT(full) [ 1234.349253][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1234.349266][T20484] Call Trace: [ 1234.349274][T20484] [ 1234.349283][T20484] dump_stack_lvl+0x189/0x250 [ 1234.349313][T20484] ? __pfx____ratelimit+0x10/0x10 [ 1234.349334][T20484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.349365][T20484] ? __pfx__printk+0x10/0x10 [ 1234.349397][T20484] ? __pfx___might_resched+0x10/0x10 [ 1234.349415][T20484] ? fs_reclaim_acquire+0x7d/0x100 [ 1234.349438][T20484] should_fail_ex+0x414/0x560 [ 1234.349470][T20484] ? alloc_netdev_mqs+0xa46/0x11b0 [ 1234.349497][T20484] should_failslab+0xa8/0x100 [ 1234.349527][T20484] __kvmalloc_node_noprof+0x161/0x5f0 [ 1234.349555][T20484] ? alloc_netdev_mqs+0xa46/0x11b0 [ 1234.349587][T20484] alloc_netdev_mqs+0xa46/0x11b0 [ 1234.349621][T20484] rtnl_create_link+0x31f/0xd10 [ 1234.349655][T20484] rtnl_newlink_create+0x25c/0xb00 [ 1234.349684][T20484] ? __mutex_lock+0x5bb/0x1350 [ 1234.349710][T20484] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1234.349736][T20484] ? __pfx___mutex_lock+0x10/0x10 [ 1234.349767][T20484] ? ns_capable+0x8a/0xf0 [ 1234.349791][T20484] rtnl_newlink+0x16d6/0x1c70 [ 1234.349814][T20484] ? netlink_sendmsg+0x805/0xb30 [ 1234.349847][T20484] ? __pfx_rtnl_newlink+0x10/0x10 [ 1234.349891][T20484] ? kasan_quarantine_put+0xdd/0x220 [ 1234.349915][T20484] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.349942][T20484] ? nlmon_xmit+0xb0/0x100 [ 1234.349962][T20484] ? kmem_cache_free+0x18f/0x400 [ 1234.349995][T20484] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1234.350015][T20484] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.350036][T20484] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1234.350054][T20484] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1234.350076][T20484] ? __dev_queue_xmit+0x27b/0x3b50 [ 1234.350102][T20484] ? __dev_queue_xmit+0x27b/0x3b50 [ 1234.350127][T20484] ? __dev_queue_xmit+0x27b/0x3b50 [ 1234.350154][T20484] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1234.350185][T20484] ? __lock_acquire+0xab9/0xd20 [ 1234.350237][T20484] ? __pfx_rtnl_newlink+0x10/0x10 [ 1234.350257][T20484] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1234.350281][T20484] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1234.350301][T20484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1234.350319][T20484] ? ref_tracker_free+0x63a/0x7d0 [ 1234.350338][T20484] ? __asan_memcpy+0x40/0x70 [ 1234.350367][T20484] ? __pfx_ref_tracker_free+0x10/0x10 [ 1234.350384][T20484] ? __skb_clone+0x63/0x7a0 [ 1234.350418][T20484] netlink_rcv_skb+0x208/0x470 [ 1234.350440][T20484] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1234.350463][T20484] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1234.350494][T20484] ? netlink_deliver_tap+0x2e/0x1b0 [ 1234.350523][T20484] netlink_unicast+0x82f/0x9e0 [ 1234.350563][T20484] ? __pfx_netlink_unicast+0x10/0x10 [ 1234.350593][T20484] ? netlink_sendmsg+0x642/0xb30 [ 1234.350612][T20484] ? skb_put+0x11b/0x210 [ 1234.350636][T20484] netlink_sendmsg+0x805/0xb30 [ 1234.350667][T20484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.350684][T20484] ? __import_iovec+0x5d4/0x7f0 [ 1234.350700][T20484] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1234.350716][T20484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1234.350731][T20484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1234.350747][T20484] __sock_sendmsg+0x219/0x270 [ 1234.350770][T20484] ____sys_sendmsg+0x505/0x830 [ 1234.350791][T20484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1234.350819][T20484] ___sys_sendmsg+0x21f/0x2a0 [ 1234.350837][T20484] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.350878][T20484] ? __fget_files+0x2a/0x420 [ 1234.350889][T20484] ? __fget_files+0x3a0/0x420 [ 1234.350909][T20484] __sys_sendmsg+0x164/0x220 [ 1234.350927][T20484] ? __pfx___sys_sendmsg+0x10/0x10 [ 1234.350955][T20484] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.350972][T20484] __do_fast_syscall_32+0xb6/0x2b0 [ 1234.350988][T20484] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.351005][T20484] do_fast_syscall_32+0x34/0x80 [ 1234.351021][T20484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1234.351038][T20484] RIP: 0023:0xf70be539 [ 1234.351049][T20484] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1234.351062][T20484] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1234.351077][T20484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1234.351087][T20484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1234.351095][T20484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1234.351103][T20484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1234.351112][T20484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1234.351132][T20484] [ 1234.842480][T11648] usb 9-1: config 0 descriptor?? [ 1235.086440][T11648] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1235.239725][T11648] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1235.330858][T20497] No memory to map [ 1235.341481][T11648] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1235.454831][T11648] usb 9-1: media controller created [ 1235.552053][T11648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1235.674035][T11648] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1235.685577][T20398] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 1235.789688][T11648] usb 9-1: USB disconnect, device number 14 [ 1235.862874][T20398] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1235.927120][T20398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.012871][T20398] usb 2-1: config 0 descriptor?? [ 1236.070584][T20398] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1236.305296][T11648] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1236.495489][T11648] usb 9-1: Using ep0 maxpacket: 32 [ 1236.507486][T11648] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.521697][T11648] usb 9-1: New USB device found, idVendor=05ac, idProduct=5565, bcdDevice= 0.ae [ 1236.563773][T11648] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.632298][T11648] usb 9-1: config 0 descriptor?? [ 1236.748606][T20527] netlink: 'syz.9.4328': attribute type 10 has an invalid length. [ 1236.841107][T20527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.850901][T20527] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1237.209745][T11648] hid-generic 0003:05AC:5565.0015: hidraw0: USB HID v0.00 Device [HID 05ac:5565] on usb-dummy_hcd.8-1/input0 [ 1237.389472][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4322'. [ 1238.363648][T20398] pwc: Failed to set LED on/off time (-71) [ 1238.457956][T20398] pwc: send_video_command error -71 [ 1238.463695][T20398] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1238.525272][T20398] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1238.573002][T20398] usb 2-1: USB disconnect, device number 11 [ 1239.171837][T17923] usb 9-1: USB disconnect, device number 15 [ 1239.930782][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1242.131141][T20645] tipc: Started in network mode [ 1242.138731][T20645] tipc: Node identity bee27dca7c0d, cluster identity 4711 [ 1242.239055][T20645] tipc: Enabled bearer , priority 0 [ 1242.267042][T20653] syzkaller0: entered promiscuous mode [ 1242.275367][T20653] syzkaller0: entered allmulticast mode [ 1242.330626][T20645] tipc: Resetting bearer [ 1242.338428][T20655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4353'. [ 1242.605362][T17923] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1242.710080][T20663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4354'. [ 1242.805379][T17923] usb 9-1: Using ep0 maxpacket: 32 [ 1242.832956][T17923] usb 9-1: config 0 has an invalid interface number: 213 but max is 0 [ 1242.855280][T17923] usb 9-1: config 0 has no interface number 0 [ 1242.861401][T17923] usb 9-1: config 0 interface 213 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1242.908873][T17923] usb 9-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=eb.19 [ 1242.929042][T17923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.943705][T17923] usb 9-1: Product: syz [ 1242.965892][T17923] usb 9-1: Manufacturer: syz [ 1242.980541][T17923] usb 9-1: SerialNumber: syz [ 1243.027097][T17923] usb 9-1: config 0 descriptor?? [ 1243.048769][T20645] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1243.358180][T20642] tipc: Resetting bearer [ 1243.376037][ T5939] tipc: Node number set to 3270475210 [ 1243.381643][T17923] asix 9-1:0.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1243.475826][T17923] asix 9-1:0.213: probe with driver asix failed with error -71 [ 1243.551664][T20642] tipc: Disabling bearer [ 1243.603636][T17923] usb 9-1: USB disconnect, device number 16 [ 1244.061329][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.067659][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.487472][T20706] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1244.797623][T17923] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1244.825074][T20716] tipc: Enabled bearer , priority 0 [ 1244.838562][T20716] syzkaller0: entered promiscuous mode [ 1244.844155][T20716] syzkaller0: entered allmulticast mode [ 1244.871420][T20716] tipc: Resetting bearer [ 1244.985280][T17923] usb 10-1: Using ep0 maxpacket: 8 [ 1245.008650][T17923] usb 10-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1245.022820][T17923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.066537][T17923] usb 10-1: Product: syz [ 1245.095561][T17923] usb 10-1: Manufacturer: syz [ 1245.103816][T17923] usb 10-1: SerialNumber: syz [ 1245.146003][T20723] tipc: Resetting bearer [ 1245.191060][T20723] tipc: Disabling bearer [ 1245.264691][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4371'. [ 1245.766977][T17923] mxuport 10-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1245.796374][T17923] mxuport 10-1:254.0: probe with driver mxuport failed with error -5 [ 1245.848764][T17923] usb 10-1: USB disconnect, device number 8 [ 1246.605652][T17490] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1246.820786][T17490] usb 2-1: Invalid ep0 maxpacket: 9 [ 1246.977014][T17490] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1246.986474][T20764] netlink: zone id is out of range [ 1246.991621][T20764] netlink: zone id is out of range [ 1247.011877][T20764] netlink: zone id is out of range [ 1247.016277][T20766] netlink: zone id is out of range [ 1247.024125][T20766] netlink: zone id is out of range [ 1247.054421][T20766] netlink: zone id is out of range [ 1247.054526][T20764] netlink: zone id is out of range [ 1247.147635][T20766] netlink: zone id is out of range [ 1247.151708][T20764] netlink: zone id is out of range [ 1247.165643][T17490] usb 2-1: Invalid ep0 maxpacket: 9 [ 1247.173535][T17490] usb usb2-port1: attempt power cycle [ 1247.263737][T20764] netlink: zone id is out of range [ 1247.625804][T17490] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1247.666166][T17490] usb 2-1: Invalid ep0 maxpacket: 9 [ 1247.805809][T17490] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1247.820810][T20774] fuse: Unknown parameter '0x000000000000000d' [ 1247.863154][T17490] usb 2-1: Invalid ep0 maxpacket: 9 [ 1247.910940][T17490] usb usb2-port1: unable to enumerate USB device [ 1248.666483][T20795] netlink: 'syz.9.4384': attribute type 4 has an invalid length. [ 1248.705619][T11654] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1248.815676][T20804] netlink: 'syz.9.4386': attribute type 3 has an invalid length. [ 1248.943097][T20804] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4386'. [ 1249.057651][T20804] bond_slave_0: entered promiscuous mode [ 1249.063702][T20804] bond_slave_1: entered promiscuous mode [ 1249.069490][T20804] batadv0: entered promiscuous mode [ 1249.102773][T20804] netlink: 988 bytes leftover after parsing attributes in process `syz.9.4386'. [ 1250.078856][T20838] binder: 20829:20838 ioctl 3b88 0 returned -22 [ 1250.103001][T20838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1250.134654][T20838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1250.150220][T20838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1250.209818][T20847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1251.326769][T11654] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1251.395876][T11654] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1251.459574][T11654] usb 9-1: can't read configurations, error -71 [ 1252.149195][T20877] netlink: 'syz.8.4405': attribute type 1 has an invalid length. [ 1252.412007][T20888] misc userio: Invalid payload size [ 1253.615332][T11654] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1253.805380][T11654] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.845435][T11654] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.862699][T11654] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1253.904549][T11654] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1253.953134][T11654] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.978525][T11654] usb 9-1: config 0 descriptor?? [ 1254.292947][T19222] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.345755][T19222] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1254.432574][T19222] usb 5-1: USB disconnect, device number 43 [ 1255.251607][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4421'. [ 1255.758667][T20961] netlink: 364 bytes leftover after parsing attributes in process `syz.4.4423'. [ 1255.779689][T20961] net_ratelimit: 334 callbacks suppressed [ 1255.779705][T20961] openvswitch: netlink: Flow key attr not present in new flow. [ 1255.855695][T20963] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4424'. [ 1256.665492][T11654] usbhid 9-1:0.0: can't add hid device: -71 [ 1256.671508][T11654] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1256.730717][T11654] usb 9-1: USB disconnect, device number 19 [ 1258.875292][T11654] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1259.115456][T11654] usb 9-1: Using ep0 maxpacket: 16 [ 1259.454154][T11654] usb 9-1: config 0 has no interfaces? [ 1259.470167][T11654] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1259.483255][T11654] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.503598][T11654] usb 9-1: Product: syz [ 1259.508059][T11654] usb 9-1: Manufacturer: syz [ 1259.514155][T11654] usb 9-1: SerialNumber: syz [ 1259.674645][T11654] usb 9-1: config 0 descriptor?? [ 1259.737932][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4438'. [ 1259.965448][T17349] usb 9-1: USB disconnect, device number 20 [ 1261.026509][T21048] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4443'. [ 1261.728423][T21065] bridge1: port 1(macvlan2) entered blocking state [ 1261.800488][T21065] bridge1: port 1(macvlan2) entered disabled state [ 1261.843530][T21065] macvlan2: entered allmulticast mode [ 1261.926079][T21065] macvlan2: entered promiscuous mode [ 1262.219951][T21084] veth0: entered promiscuous mode [ 1262.255751][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4450'. [ 1262.598901][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4452'. [ 1263.036546][T21105] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1263.185000][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1263.185017][ T30] audit: type=1326 audit(1758924342.448:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21113 comm="syz.7.4460" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 1263.415290][T17349] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1263.441216][T21120] bridge1: entered allmulticast mode [ 1263.587109][T17349] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.600428][T17349] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.635340][T17349] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1263.650185][T17349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.667837][T17349] usb 9-1: Product: syz [ 1263.680170][T17349] usb 9-1: Manufacturer: syz [ 1263.692701][T17349] usb 9-1: SerialNumber: syz [ 1263.788674][T17349] cdc_ncm 9-1:1.0: skipping garbage [ 1263.804131][T17349] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 1263.822608][T17349] cdc_ncm 9-1:1.0: bind() failure [ 1263.872090][T17349] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1263.888853][T17349] cdc_ncm 9-1:1.1: bind() failure [ 1263.919537][T21137] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 1264.054884][T17349] usb 9-1: USB disconnect, device number 21 [ 1264.827712][ T30] audit: type=1326 audit(1758924344.088:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1264.919800][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'. [ 1265.006206][ T30] audit: type=1326 audit(1758924344.088:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.060401][ T30] audit: type=1326 audit(1758924344.098:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.082930][ T30] audit: type=1326 audit(1758924344.098:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.107200][ T30] audit: type=1326 audit(1758924344.118:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.131758][ T30] audit: type=1326 audit(1758924344.118:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.156571][ T30] audit: type=1326 audit(1758924344.118:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.180446][ T30] audit: type=1326 audit(1758924344.118:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.291323][ T30] audit: type=1326 audit(1758924344.128:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21154 comm="syz.1.4468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1265.935402][T19222] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1266.193673][T21194] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4477'. [ 1266.232315][T19222] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1266.241309][T19222] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1266.333115][T19222] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1266.384732][T19222] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1266.470228][T19222] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1266.501035][T19222] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1266.520126][T19222] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1266.541591][T19222] usb 10-1: Product: syz [ 1266.551629][T19222] usb 10-1: Manufacturer: syz [ 1266.585974][T21203] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4478'. [ 1266.679077][T21203] bond_slave_0: left promiscuous mode [ 1266.684892][T21203] bond_slave_1: left promiscuous mode [ 1267.123542][T19222] cdc_wdm 10-1:1.0: skipping garbage [ 1267.185608][T19222] cdc_wdm 10-1:1.0: skipping garbage [ 1267.194894][T19222] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1267.201179][T19222] cdc_wdm 10-1:1.0: Unknown control protocol [ 1267.523647][T21207] fuse: Bad value for 'group_id' [ 1267.534110][T21207] fuse: Bad value for 'group_id' [ 1267.563465][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.570282][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.576767][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.583459][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.589860][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.596549][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.603556][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.610232][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.617192][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.623867][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.630211][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.636879][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.643194][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.649860][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.656280][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.662969][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.669409][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.676077][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.682389][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1267.689057][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1267.698023][T19222] usb 10-1: USB disconnect, device number 9 [ 1267.703938][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1268.259625][T21203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.294671][T21203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.405375][T21203] bond0 (unregistering): Released all slaves [ 1268.650081][T21241] fuse: Bad value for 'fd' [ 1268.670301][T21243] netlink: 172 bytes leftover after parsing attributes in process `syz.9.4488'. [ 1268.704940][T21243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1268.722470][T21249] fuse: Bad value for 'group_id' [ 1268.735145][T21249] fuse: Bad value for 'group_id' [ 1269.001073][T21258] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4495'. [ 1270.255252][T19222] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1270.449750][T19222] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1270.461058][T19222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.497212][T19222] usb 5-1: Product: syz [ 1270.645311][T19222] usb 5-1: Manufacturer: syz [ 1270.649929][T19222] usb 5-1: SerialNumber: syz [ 1270.672973][T19222] usb 5-1: config 0 descriptor?? [ 1270.833379][T21297] fuse: Bad value for 'group_id' [ 1270.838570][T21297] fuse: Bad value for 'group_id' [ 1271.037374][T19222] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1271.530219][T21309] IPv6: Can't replace route, no match found [ 1271.840512][T21310] syzkaller0: entered promiscuous mode [ 1271.854555][T21323] netlink: 'syz.1.4507': attribute type 1 has an invalid length. [ 1271.862881][T21310] syzkaller0: entered allmulticast mode [ 1271.883122][T21323] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1272.003871][T21326] FAULT_INJECTION: forcing a failure. [ 1272.003871][T21326] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.091492][T21326] CPU: 0 UID: 0 PID: 21326 Comm: syz.9.4509 Not tainted syzkaller #0 PREEMPT(full) [ 1272.091516][T21326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1272.091529][T21326] Call Trace: [ 1272.091538][T21326] [ 1272.091547][T21326] dump_stack_lvl+0x189/0x250 [ 1272.091576][T21326] ? __pfx____ratelimit+0x10/0x10 [ 1272.091596][T21326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.091619][T21326] ? __pfx__printk+0x10/0x10 [ 1272.091648][T21326] ? __lock_acquire+0xab9/0xd20 [ 1272.091685][T21326] should_fail_ex+0x414/0x560 [ 1272.091720][T21326] should_failslab+0xa8/0x100 [ 1272.091751][T21326] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1272.091777][T21326] ? skb_clone+0x212/0x3a0 [ 1272.091808][T21326] skb_clone+0x212/0x3a0 [ 1272.091837][T21326] __netlink_deliver_tap+0x404/0x850 [ 1272.091870][T21326] ? netlink_deliver_tap+0x2e/0x1b0 [ 1272.091893][T21326] netlink_deliver_tap+0x19c/0x1b0 [ 1272.091916][T21326] netlink_unicast+0x7fa/0x9e0 [ 1272.091955][T21326] ? __pfx_netlink_unicast+0x10/0x10 [ 1272.091991][T21326] ? netlink_sendmsg+0x642/0xb30 [ 1272.092010][T21326] ? skb_put+0x11b/0x210 [ 1272.092036][T21326] netlink_sendmsg+0x805/0xb30 [ 1272.092067][T21326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.092091][T21326] ? __import_iovec+0x5d4/0x7f0 [ 1272.092115][T21326] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1272.092137][T21326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1272.092158][T21326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.092181][T21326] __sock_sendmsg+0x219/0x270 [ 1272.092214][T21326] ____sys_sendmsg+0x505/0x830 [ 1272.092244][T21326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.092284][T21326] ___sys_sendmsg+0x21f/0x2a0 [ 1272.092311][T21326] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.092370][T21326] ? __fget_files+0x2a/0x420 [ 1272.092394][T21326] ? __fget_files+0x3a0/0x420 [ 1272.092422][T21326] __sys_sendmsg+0x164/0x220 [ 1272.092448][T21326] ? __pfx___sys_sendmsg+0x10/0x10 [ 1272.092488][T21326] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.092513][T21326] __do_fast_syscall_32+0xb6/0x2b0 [ 1272.092537][T21326] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.092561][T21326] do_fast_syscall_32+0x34/0x80 [ 1272.092584][T21326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1272.092609][T21326] RIP: 0023:0xf70ee539 [ 1272.092625][T21326] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1272.092643][T21326] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1272.092664][T21326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1272.092679][T21326] RDX: 0000000020048004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1272.092691][T21326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1272.092703][T21326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1272.092715][T21326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1272.092742][T21326] [ 1273.020675][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1273.031699][T21287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1273.045669][T19222] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1273.059923][T19222] usb 5-1: USB disconnect, device number 44 [ 1274.325888][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4509'. [ 1274.427428][T21336] tipc: Started in network mode [ 1274.432332][T21336] tipc: Node identity , cluster identity 4711 [ 1274.449052][T21336] tipc: Failed to obtain node identity [ 1274.461372][T21336] tipc: Enabling of bearer rejected, failed to enable media [ 1274.955029][T21368] syz.8.4517 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1275.124722][T21372] netlink: 6 bytes leftover after parsing attributes in process `syz.8.4517'. [ 1276.325033][T17919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1276.343060][T17919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1276.351292][T17919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1276.370972][T17919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1276.383586][T17919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1277.578577][ T9026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.781756][T21397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1277.789063][T21397] IPv6: NLM_F_CREATE should be set when creating new route [ 1277.796352][T21397] IPv6: NLM_F_CREATE should be set when creating new route [ 1277.860054][ T9026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.975555][T21397] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4524'. [ 1277.985350][T11654] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1278.042563][ T9026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.131958][ T9026] bond0: (slave netdevsim0): Releasing backup interface [ 1278.157036][ T9026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.179923][T11654] usb 2-1: Using ep0 maxpacket: 16 [ 1278.199888][T11654] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1278.212498][T11654] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1278.224972][T11654] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1278.237112][T11654] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1278.251703][T11654] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1278.266462][T11654] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1278.276348][T11654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.284438][T11654] usb 2-1: Product: syz [ 1278.301406][T11654] usb 2-1: Manufacturer: syz [ 1278.306778][T11654] usb 2-1: SerialNumber: syz [ 1278.315027][T21393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1278.336729][T20374] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1278.445450][T17919] Bluetooth: hci0: command tx timeout [ 1278.497669][T20374] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1278.514003][T20374] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1278.537607][T11654] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 1278.558501][T20374] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1278.574796][T20374] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.589412][T20374] usb 10-1: Product: syz [ 1278.599453][T20374] usb 10-1: Manufacturer: syz [ 1278.604312][T20374] usb 10-1: SerialNumber: syz [ 1278.623247][T20374] usb 10-1: config 0 descriptor?? [ 1278.889976][ T9026] bridge_slave_1: left allmulticast mode [ 1278.890291][ T5218] bcm5974 2-1:1.0: could not read from device [ 1278.927721][ T9026] bridge_slave_1: left promiscuous mode [ 1278.940977][T11654] bcm5974 2-1:1.0: could not read from device [ 1278.961768][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.976772][T20374] usb 10-1: USB disconnect, device number 10 [ 1278.998626][ T9026] bridge_slave_0: left allmulticast mode [ 1279.024391][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.032112][ T5218] bcm5974 2-1:1.0: could not read from device [ 1279.105347][T19222] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1279.128116][T21420] udevd[21420]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1279.166707][T11654] input: failed to attach handler mousedev to device input39, error: -5 [ 1279.192460][ T5218] bcm5974 2-1:1.0: could not read from device [ 1279.212919][T11654] usb 2-1: USB disconnect, device number 16 [ 1279.235984][ T5218] bcm5974 2-1:1.0: could not read from device [ 1279.275361][T19222] usb 9-1: Using ep0 maxpacket: 8 [ 1279.298041][T19222] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1279.347191][T19222] usb 9-1: config 196 has an invalid interface number: 206 but max is 0 [ 1279.393322][T19222] usb 9-1: config 196 has no interface number 0 [ 1279.421917][T19222] usb 9-1: config 196 interface 206 altsetting 8 bulk endpoint 0x8C has invalid maxpacket 64 [ 1279.452395][T19222] usb 9-1: config 196 interface 206 altsetting 8 bulk endpoint 0xF has invalid maxpacket 1023 [ 1279.475478][T19222] usb 9-1: config 196 interface 206 has no altsetting 0 [ 1279.512407][T19222] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=74.41 [ 1279.548494][T19222] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.565726][T19222] usb 9-1: Product: syz [ 1279.570012][T19222] usb 9-1: Manufacturer: syz [ 1279.574675][T19222] usb 9-1: SerialNumber: syz [ 1279.605007][T21416] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1279.615063][T21416] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1280.524505][ T9026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.525464][T17919] Bluetooth: hci0: command tx timeout [ 1280.548526][ T9026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.561093][ T9026] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1280.571401][ T9026] bond0 (unregistering): Released all slaves [ 1280.612141][T21386] chnl_net:caif_netlink_parms(): no params data found [ 1280.722169][T20398] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1280.814347][T19222] kvaser_usb 9-1:196.206: error -EPROTO: Cannot get software info [ 1280.824361][T19222] kvaser_usb 9-1:196.206: probe with driver kvaser_usb failed with error -71 [ 1280.841739][T19222] usb 9-1: USB disconnect, device number 22 [ 1280.875646][T20398] usb 10-1: device descriptor read/64, error -71 [ 1280.936023][T21460] FAULT_INJECTION: forcing a failure. [ 1280.936023][T21460] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.981079][T21460] CPU: 0 UID: 0 PID: 21460 Comm: syz.1.4536 Not tainted syzkaller #0 PREEMPT(full) [ 1280.981103][T21460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1280.981116][T21460] Call Trace: [ 1280.981124][T21460] [ 1280.981133][T21460] dump_stack_lvl+0x189/0x250 [ 1280.981159][T21460] ? __pfx____ratelimit+0x10/0x10 [ 1280.981181][T21460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.981204][T21460] ? __pfx__printk+0x10/0x10 [ 1280.981233][T21460] ? __pfx___might_resched+0x10/0x10 [ 1280.981252][T21460] ? fs_reclaim_acquire+0x7d/0x100 [ 1280.981275][T21460] should_fail_ex+0x414/0x560 [ 1280.981309][T21460] should_failslab+0xa8/0x100 [ 1280.981338][T21460] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1280.981365][T21460] ? __alloc_skb+0x112/0x2d0 [ 1280.981390][T21460] __alloc_skb+0x112/0x2d0 [ 1280.981415][T21460] alloc_skb_with_frags+0xca/0x890 [ 1280.981452][T21460] sock_alloc_send_pskb+0x857/0x990 [ 1280.981496][T21460] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1280.981533][T21460] ? iov_iter_advance+0x8b/0x1c0 [ 1280.981558][T21460] tun_get_user+0xa43/0x3ea0 [ 1280.981599][T21460] ? aa_file_perm+0x44d/0x1550 [ 1280.981620][T21460] ? __pfx_tun_get_user+0x10/0x10 [ 1280.981641][T21460] ? _parse_integer_limit+0x1ae/0x1f0 [ 1280.981669][T21460] ? __lock_acquire+0xab9/0xd20 [ 1280.981703][T21460] ? ref_tracker_alloc+0x318/0x460 [ 1280.981719][T21460] ? __lock_acquire+0xab9/0xd20 [ 1280.981748][T21460] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1280.981772][T21460] ? tun_get+0x1c/0x2f0 [ 1280.981798][T21460] ? tun_get+0x1c/0x2f0 [ 1280.981819][T21460] ? tun_get+0x1c/0x2f0 [ 1280.981845][T21460] tun_chr_write_iter+0x113/0x200 [ 1280.981870][T21460] vfs_write+0x5c9/0xb30 [ 1280.981899][T21460] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1280.981922][T21460] ? __pfx_vfs_write+0x10/0x10 [ 1280.981956][T21460] ? __fget_files+0x2a/0x420 [ 1280.981982][T21460] ksys_write+0x145/0x250 [ 1280.982017][T21460] ? __pfx_ksys_write+0x10/0x10 [ 1280.982047][T21460] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.982071][T21460] __do_fast_syscall_32+0xb6/0x2b0 [ 1280.982099][T21460] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.982123][T21460] do_fast_syscall_32+0x34/0x80 [ 1280.982146][T21460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.982170][T21460] RIP: 0023:0xf7f12539 [ 1280.982186][T21460] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1280.982204][T21460] RSP: 002b:00000000f53c455c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1280.982225][T21460] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 1280.982238][T21460] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.982250][T21460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.982262][T21460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1280.982274][T21460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.982301][T21460] [ 1281.191493][T20398] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1281.343892][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4538'. [ 1281.776561][T20398] usb 10-1: device descriptor read/64, error -71 [ 1281.932224][T20398] usb usb10-port1: attempt power cycle [ 1282.520416][T20398] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1282.547250][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1282.553900][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1282.605414][T17919] Bluetooth: hci0: command tx timeout [ 1282.617212][T20398] usb 10-1: device descriptor read/8, error -71 [ 1282.655735][T21386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.682552][T21386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.762084][T21386] bridge_slave_0: entered allmulticast mode [ 1282.816887][T21386] bridge_slave_0: entered promiscuous mode [ 1282.880541][T21386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.912663][T21386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.933703][T21386] bridge_slave_1: entered allmulticast mode [ 1282.957780][T21386] bridge_slave_1: entered promiscuous mode [ 1283.313778][T21497] fuse: Unknown parameter 'appraise_type' [ 1283.418702][ T9026] hsr_slave_0: left promiscuous mode [ 1283.522179][ T9026] hsr_slave_1: left promiscuous mode [ 1283.557430][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.606883][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.627646][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.656257][T21500] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4544'. [ 1283.665411][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.705977][T21500] openvswitch: netlink: Flow key attr not present in new flow. [ 1283.761974][ T9026] veth1_macvtap: left promiscuous mode [ 1283.770525][ T9026] veth0_macvtap: left promiscuous mode [ 1283.780868][ T9026] veth1_vlan: left promiscuous mode [ 1283.789967][ T9026] veth0_vlan: left promiscuous mode [ 1284.181259][T21510] FAULT_INJECTION: forcing a failure. [ 1284.181259][T21510] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.198108][T21510] CPU: 1 UID: 0 PID: 21510 Comm: syz.7.4546 Not tainted syzkaller #0 PREEMPT(full) [ 1284.198133][T21510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1284.198145][T21510] Call Trace: [ 1284.198153][T21510] [ 1284.198162][T21510] dump_stack_lvl+0x189/0x250 [ 1284.198190][T21510] ? __pfx____ratelimit+0x10/0x10 [ 1284.198211][T21510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1284.198234][T21510] ? __pfx__printk+0x10/0x10 [ 1284.198262][T21510] ? __lock_acquire+0xab9/0xd20 [ 1284.198299][T21510] should_fail_ex+0x414/0x560 [ 1284.198332][T21510] should_failslab+0xa8/0x100 [ 1284.198361][T21510] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1284.198388][T21510] ? skb_clone+0x212/0x3a0 [ 1284.198417][T21510] skb_clone+0x212/0x3a0 [ 1284.198446][T21510] __netlink_deliver_tap+0x404/0x850 [ 1284.198479][T21510] ? netlink_deliver_tap+0x2e/0x1b0 [ 1284.198502][T21510] netlink_deliver_tap+0x19c/0x1b0 [ 1284.198524][T21510] netlink_unicast+0x7fa/0x9e0 [ 1284.198562][T21510] ? __pfx_netlink_unicast+0x10/0x10 [ 1284.198594][T21510] ? netlink_sendmsg+0x642/0xb30 [ 1284.198613][T21510] ? skb_put+0x11b/0x210 [ 1284.198639][T21510] netlink_sendmsg+0x805/0xb30 [ 1284.198669][T21510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1284.198693][T21510] ? __import_iovec+0x5d4/0x7f0 [ 1284.198717][T21510] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1284.198738][T21510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1284.198759][T21510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1284.198787][T21510] __sock_sendmsg+0x219/0x270 [ 1284.198820][T21510] ____sys_sendmsg+0x505/0x830 [ 1284.198851][T21510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1284.198891][T21510] ___sys_sendmsg+0x21f/0x2a0 [ 1284.198918][T21510] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.198983][T21510] ? __fget_files+0x2a/0x420 [ 1284.199000][T21510] ? __fget_files+0x3a0/0x420 [ 1284.199027][T21510] __sys_sendmsg+0x164/0x220 [ 1284.199054][T21510] ? __pfx___sys_sendmsg+0x10/0x10 [ 1284.199094][T21510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1284.199119][T21510] __do_fast_syscall_32+0xb6/0x2b0 [ 1284.199142][T21510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1284.199165][T21510] do_fast_syscall_32+0x34/0x80 [ 1284.199187][T21510] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1284.199211][T21510] RIP: 0023:0xf70be539 [ 1284.199228][T21510] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1284.199245][T21510] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1284.199265][T21510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 1284.199279][T21510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1284.199290][T21510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1284.199302][T21510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1284.199313][T21510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1284.199341][T21510] [ 1284.686617][T17919] Bluetooth: hci0: command tx timeout [ 1285.125998][ T9026] team0 (unregistering): Port device team_slave_1 removed [ 1285.199127][ T9026] team0 (unregistering): Port device team_slave_0 removed [ 1285.990452][T21386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.122186][T21386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.162562][T21525] FAULT_INJECTION: forcing a failure. [ 1286.162562][T21525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.241220][T21525] CPU: 1 UID: 0 PID: 21525 Comm: syz.1.4550 Not tainted syzkaller #0 PREEMPT(full) [ 1286.241244][T21525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1286.241257][T21525] Call Trace: [ 1286.241265][T21525] [ 1286.241273][T21525] dump_stack_lvl+0x189/0x250 [ 1286.241301][T21525] ? __pfx____ratelimit+0x10/0x10 [ 1286.241322][T21525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.241344][T21525] ? __pfx__printk+0x10/0x10 [ 1286.241381][T21525] should_fail_ex+0x414/0x560 [ 1286.241415][T21525] _copy_to_user+0x31/0xb0 [ 1286.241442][T21525] simple_read_from_buffer+0xe1/0x170 [ 1286.241474][T21525] proc_fail_nth_read+0x1b3/0x220 [ 1286.241500][T21525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.241524][T21525] ? rw_verify_area+0x2a6/0x4d0 [ 1286.241548][T21525] ? __lock_acquire+0xab9/0xd20 [ 1286.241574][T21525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1286.241597][T21525] vfs_read+0x1fd/0xa30 [ 1286.241620][T21525] ? fdget_pos+0x247/0x320 [ 1286.241653][T21525] ? __pfx___mutex_lock+0x10/0x10 [ 1286.241676][T21525] ? __pfx_vfs_read+0x10/0x10 [ 1286.241700][T21525] ? __fget_files+0x2a/0x420 [ 1286.241717][T21525] ? __fget_files+0x3a0/0x420 [ 1286.241729][T21525] ? __fget_files+0x2a/0x420 [ 1286.241749][T21525] ksys_read+0x145/0x250 [ 1286.241772][T21525] ? __pfx_ksys_read+0x10/0x10 [ 1286.241795][T21525] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.241815][T21525] __do_fast_syscall_32+0xb6/0x2b0 [ 1286.241834][T21525] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.241853][T21525] do_fast_syscall_32+0x34/0x80 [ 1286.241871][T21525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1286.241890][T21525] RIP: 0023:0xf7f12539 [ 1286.241905][T21525] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1286.241919][T21525] RSP: 002b:00000000f53e5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1286.241936][T21525] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e5620 [ 1286.241947][T21525] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 1286.241956][T21525] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1286.241965][T21525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1286.241974][T21525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1286.241996][T21525] [ 1286.675765][T21386] team0: Port device team_slave_0 added [ 1286.721009][T21386] team0: Port device team_slave_1 added [ 1286.864633][T21537] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4552'. [ 1286.989468][T21386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.073084][T21386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.175629][T21386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.249131][T21386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.427980][T21386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.455441][T19222] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1287.572885][T21386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.652961][T21552] netlink: 'syz.7.4555': attribute type 29 has an invalid length. [ 1287.726959][T19222] usb 10-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 1287.765250][T19222] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1287.824949][T19222] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1287.843901][T21555] netlink: 'syz.7.4555': attribute type 29 has an invalid length. [ 1287.898281][T19222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.988902][T19222] usb 10-1: config 0 descriptor?? [ 1288.087351][T21386] hsr_slave_0: entered promiscuous mode [ 1288.142633][T21386] hsr_slave_1: entered promiscuous mode [ 1289.396718][T19222] usb 10-1: USB disconnect, device number 15 [ 1289.812591][T21386] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1289.893860][T21386] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1290.002737][T21386] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1290.104947][T21386] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1290.291066][T21610] erspan0: entered promiscuous mode [ 1291.092811][T21386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.339179][T21386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.370714][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.377902][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.493988][T14053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.501260][T14053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.995501][T19222] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1292.186899][T19222] usb 10-1: config 0 has no interfaces? [ 1292.194161][T19222] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1292.205315][T19222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.213920][T21386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.223978][T19222] usb 10-1: Product: syz [ 1292.242574][T19222] usb 10-1: Manufacturer: syz [ 1292.265826][T19222] usb 10-1: SerialNumber: syz [ 1292.309737][T19222] usb 10-1: config 0 descriptor?? [ 1292.481882][T21386] veth0_vlan: entered promiscuous mode [ 1292.587621][T21386] veth1_vlan: entered promiscuous mode [ 1292.716527][T21386] veth0_macvtap: entered promiscuous mode [ 1292.940518][T21640] veth0_vlan: left promiscuous mode [ 1292.964753][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.989349][T21640] veth0_vlan: entered promiscuous mode [ 1293.060729][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.165102][T21386] veth1_macvtap: entered promiscuous mode [ 1293.229647][T11647] usb 10-1: USB disconnect, device number 16 [ 1293.251557][T21386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.321531][T21386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.371567][T14053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.399749][T14053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.434649][T14053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.476776][T14053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.578182][T19222] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1293.631009][T14039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.638943][T19222] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1293.935007][T14039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1294.520970][T21681] FAULT_INJECTION: forcing a failure. [ 1294.520970][T21681] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.705432][T21681] CPU: 0 UID: 0 PID: 21681 Comm: syz.9.4581 Not tainted syzkaller #0 PREEMPT(full) [ 1294.705459][T21681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1294.705472][T21681] Call Trace: [ 1294.705480][T21681] [ 1294.705489][T21681] dump_stack_lvl+0x189/0x250 [ 1294.705516][T21681] ? __pfx____ratelimit+0x10/0x10 [ 1294.705539][T21681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.705562][T21681] ? __pfx__printk+0x10/0x10 [ 1294.705592][T21681] ? __pfx___might_resched+0x10/0x10 [ 1294.705611][T21681] ? fs_reclaim_acquire+0x7d/0x100 [ 1294.705635][T21681] should_fail_ex+0x414/0x560 [ 1294.705668][T21681] should_failslab+0xa8/0x100 [ 1294.705698][T21681] __kmalloc_cache_noprof+0x70/0x3d0 [ 1294.705725][T21681] ? alloc_netdev_mqs+0xb90/0x11b0 [ 1294.705752][T21681] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1294.705779][T21681] alloc_netdev_mqs+0xb90/0x11b0 [ 1294.705814][T21681] rtnl_create_link+0x31f/0xd10 [ 1294.705849][T21681] rtnl_newlink_create+0x25c/0xb00 [ 1294.705878][T21681] ? __mutex_lock+0x5bb/0x1350 [ 1294.705906][T21681] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1294.705934][T21681] ? __pfx___mutex_lock+0x10/0x10 [ 1294.705965][T21681] ? ns_capable+0x8a/0xf0 [ 1294.705989][T21681] rtnl_newlink+0x16d6/0x1c70 [ 1294.706011][T21681] ? netlink_sendmsg+0x805/0xb30 [ 1294.706050][T21681] ? __pfx_rtnl_newlink+0x10/0x10 [ 1294.706094][T21681] ? kasan_quarantine_put+0xdd/0x220 [ 1294.706118][T21681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.706145][T21681] ? nlmon_xmit+0xb0/0x100 [ 1294.706165][T21681] ? kmem_cache_free+0x18f/0x400 [ 1294.706198][T21681] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1294.706218][T21681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.706240][T21681] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1294.706266][T21681] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1294.706289][T21681] ? __dev_queue_xmit+0x27b/0x3b50 [ 1294.706316][T21681] ? __dev_queue_xmit+0x27b/0x3b50 [ 1294.706341][T21681] ? __dev_queue_xmit+0x27b/0x3b50 [ 1294.706368][T21681] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1294.706400][T21681] ? __lock_acquire+0xab9/0xd20 [ 1294.706454][T21681] ? __pfx_rtnl_newlink+0x10/0x10 [ 1294.706475][T21681] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1294.706500][T21681] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1294.706520][T21681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1294.706539][T21681] ? ref_tracker_free+0x63a/0x7d0 [ 1294.706559][T21681] ? __asan_memcpy+0x40/0x70 [ 1294.706580][T21681] ? __pfx_ref_tracker_free+0x10/0x10 [ 1294.706598][T21681] ? __skb_clone+0x63/0x7a0 [ 1294.706632][T21681] netlink_rcv_skb+0x208/0x470 [ 1294.706654][T21681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1294.706677][T21681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1294.706708][T21681] ? netlink_deliver_tap+0x2e/0x1b0 [ 1294.706737][T21681] netlink_unicast+0x82f/0x9e0 [ 1294.706776][T21681] ? __pfx_netlink_unicast+0x10/0x10 [ 1294.706808][T21681] ? netlink_sendmsg+0x642/0xb30 [ 1294.706828][T21681] ? skb_put+0x11b/0x210 [ 1294.706854][T21681] netlink_sendmsg+0x805/0xb30 [ 1294.706885][T21681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.706909][T21681] ? __import_iovec+0x5d4/0x7f0 [ 1294.706933][T21681] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1294.706955][T21681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.706977][T21681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.706999][T21681] __sock_sendmsg+0x219/0x270 [ 1294.707038][T21681] ____sys_sendmsg+0x505/0x830 [ 1294.707068][T21681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.707109][T21681] ___sys_sendmsg+0x21f/0x2a0 [ 1294.707136][T21681] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.707196][T21681] ? __fget_files+0x2a/0x420 [ 1294.707213][T21681] ? __fget_files+0x3a0/0x420 [ 1294.707241][T21681] __sys_sendmsg+0x164/0x220 [ 1294.707268][T21681] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.707308][T21681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.707332][T21681] __do_fast_syscall_32+0xb6/0x2b0 [ 1294.707355][T21681] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.707380][T21681] do_fast_syscall_32+0x34/0x80 [ 1294.707403][T21681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1294.707426][T21681] RIP: 0023:0xf70ee539 [ 1294.707443][T21681] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1294.707460][T21681] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1294.707481][T21681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1294.707495][T21681] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1294.707507][T21681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1294.707519][T21681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1294.707531][T21681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1294.707559][T21681] [ 1295.608274][T21682] syz.8.4580 (21682): drop_caches: 2 [ 1295.735413][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.743579][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.115279][T20398] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1296.310618][T20398] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1296.320141][T20398] usb 10-1: config 0 has no interface number 0 [ 1296.342393][T20398] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1296.382223][T20398] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.404141][T20398] usb 10-1: Product: syz [ 1296.409376][T20398] usb 10-1: Manufacturer: syz [ 1296.414142][T20398] usb 10-1: SerialNumber: syz [ 1296.432470][T20398] usb 10-1: config 0 descriptor?? [ 1296.643814][T20398] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1296.652818][T21705] tipc: Enabling of bearer rejected, failed to enable media [ 1296.662026][T20398] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1296.675138][T20398] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1296.687454][T20398] usb 10-1: media controller created [ 1296.963329][T20398] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1297.076398][T20398] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1297.215440][T20398] usb 10-1: USB disconnect, device number 17 [ 1297.570580][T21727] loop2: detected capacity change from 0 to 7 [ 1297.583920][T18669] Dev loop2: unable to read RDB block 7 [ 1297.594050][T18669] loop2: unable to read partition table [ 1297.610324][T18669] loop2: partition table beyond EOD, truncated [ 1297.630792][T21727] Dev loop2: unable to read RDB block 7 [ 1297.639883][T21727] loop2: unable to read partition table [ 1297.657973][T21727] loop2: partition table beyond EOD, truncated [ 1297.695299][T21727] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1297.842030][T21730] netlink: 'syz.1.4588': attribute type 10 has an invalid length. [ 1297.912182][T21730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.956559][T21730] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1298.621902][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 1298.740989][T21754] overlayfs: missing 'lowerdir' [ 1298.805265][T11649] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1299.165250][T11649] usb 10-1: Using ep0 maxpacket: 32 [ 1299.200315][T11649] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1299.249350][T11649] usb 10-1: config 0 has no interface number 0 [ 1299.269492][T11649] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1299.320678][T11649] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1299.364415][T11649] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.415394][T11649] usb 10-1: Product: syz [ 1299.419678][T11649] usb 10-1: Manufacturer: syz [ 1299.424366][T11649] usb 10-1: SerialNumber: syz [ 1299.514029][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1299.563109][T11649] usb 10-1: config 0 descriptor?? [ 1299.597892][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1299.627289][T11649] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1299.652772][T21782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.733190][T11649] em28xx 10-1:0.132: Video interface 132 found: [ 1300.179455][T11649] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1300.464105][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1300.464123][ T30] audit: type=1326 audit(1758924379.718:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1300.864708][T11649] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1300.872554][ T30] audit: type=1326 audit(1758924379.718:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1300.965228][T11649] em28xx 10-1:0.132: board has no eeprom [ 1301.017587][T21804] syzkaller0: entered promiscuous mode [ 1301.023096][T21804] syzkaller0: entered allmulticast mode [ 1301.255262][T11649] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1301.255312][ T30] audit: type=1326 audit(1758924379.718:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.298477][T11649] em28xx 10-1:0.132: analog set to bulk mode. [ 1301.339982][T17349] em28xx 10-1:0.132: Registering V4L2 extension [ 1301.370971][T11649] usb 10-1: USB disconnect, device number 18 [ 1301.389638][ T30] audit: type=1326 audit(1758924379.728:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.392437][T11649] em28xx 10-1:0.132: Disconnecting em28xx [ 1301.619584][ T30] audit: type=1326 audit(1758924379.728:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.749119][ T30] audit: type=1326 audit(1758924379.728:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.793300][ T30] audit: type=1326 audit(1758924379.728:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.833028][ T30] audit: type=1326 audit(1758924379.728:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.855319][ T30] audit: type=1326 audit(1758924379.728:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.878633][ T30] audit: type=1326 audit(1758924379.728:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21797 comm="syz.1.4606" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f12539 code=0x7ffc0000 [ 1301.985258][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4607'. [ 1302.052408][T17349] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1302.052426][T17349] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1302.052436][T17349] em28xx 10-1:0.132: No AC97 audio processor [ 1302.053949][T17349] usb 10-1: Decoder not found [ 1302.053962][T17349] em28xx 10-1:0.132: failed to create media graph [ 1302.053979][T17349] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1302.055000][T17349] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1302.055043][T11649] em28xx 10-1:0.132: Closing input extension [ 1302.058258][T11649] em28xx 10-1:0.132: Freeing device [ 1304.175323][T11649] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1304.355453][T11649] usb 9-1: Using ep0 maxpacket: 16 [ 1304.378397][T11649] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.394210][T11649] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1304.412504][T11649] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1304.431443][T11649] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.452109][T11649] usb 9-1: config 0 descriptor?? [ 1304.465625][T11649] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input40 [ 1305.182422][T21826] tipc: Started in network mode [ 1305.188660][T21826] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 1305.197859][T21826] tipc: Enabling of bearer rejected, failed to enable media [ 1305.236056][T11649] usb 9-1: USB disconnect, device number 23 [ 1305.401350][T21843] netlink: 428 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1305.424274][T21843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1305.492170][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.498550][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.166702][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4621'. [ 1306.393382][T21865] team0: Device gtp0 is of different type [ 1306.656530][T21870] netlink: 'syz.8.4623': attribute type 3 has an invalid length. [ 1308.498410][T21892] : renamed from ip6tnl0 (while UP) [ 1309.102812][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4631'. [ 1310.373237][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4635'. [ 1310.458580][T21922] binder: binder_mmap: 21921 80000000-80003000 bad vm_flags failed -1 [ 1312.730603][T21943] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1312.831673][T21944] fuse: Unknown parameter '184467440737095516150x0000000000000006' [ 1312.856526][T21944] overlayfs: missing 'lowerdir' [ 1313.405136][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1313.435353][T21948] netlink: 101 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1313.529688][ T37] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.821324][T21982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4653'. [ 1315.115363][T19222] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1315.326250][T19222] usb 2-1: Using ep0 maxpacket: 32 [ 1315.337194][T19222] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1315.363418][T19222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1315.395252][T19222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1315.417400][T19222] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1315.442588][T19222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1315.482741][T19222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1315.504707][T19222] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1315.516513][T19222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.530196][T19222] usb 2-1: Product: syz [ 1315.543708][T19222] usb 2-1: Manufacturer: syz [ 1315.560274][T19222] usb 2-1: SerialNumber: syz [ 1315.591226][T19222] usb 2-1: config 0 descriptor?? [ 1315.807503][T19222] usb 2-1: USB disconnect, device number 17 [ 1316.292580][T22024] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4667'. [ 1318.614473][T22066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4681'. [ 1318.666354][T22067] loop2: detected capacity change from 0 to 7 [ 1318.709948][T22067] Dev loop2: unable to read RDB block 7 [ 1318.730103][T22067] loop2: unable to read partition table [ 1318.745807][T22067] loop2: partition table beyond EOD, truncated [ 1318.801634][T22067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1318.897440][T22071] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4683'. [ 1319.429551][T22080] FAULT_INJECTION: forcing a failure. [ 1319.429551][T22080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.485340][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.8.4687 Not tainted syzkaller #0 PREEMPT(full) [ 1319.485366][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1319.485379][T22080] Call Trace: [ 1319.485387][T22080] [ 1319.485396][T22080] dump_stack_lvl+0x189/0x250 [ 1319.485423][T22080] ? __pfx____ratelimit+0x10/0x10 [ 1319.485445][T22080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1319.485468][T22080] ? __pfx__printk+0x10/0x10 [ 1319.485507][T22080] should_fail_ex+0x414/0x560 [ 1319.485541][T22080] _copy_to_user+0x31/0xb0 [ 1319.485569][T22080] simple_read_from_buffer+0xe1/0x170 [ 1319.485602][T22080] proc_fail_nth_read+0x1b3/0x220 [ 1319.485628][T22080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1319.485653][T22080] ? rw_verify_area+0x2a6/0x4d0 [ 1319.485677][T22080] ? __lock_acquire+0xab9/0xd20 [ 1319.485704][T22080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1319.485728][T22080] vfs_read+0x1fd/0xa30 [ 1319.485752][T22080] ? fdget_pos+0x247/0x320 [ 1319.485773][T22080] ? __pfx___mutex_lock+0x10/0x10 [ 1319.485797][T22080] ? __pfx_vfs_read+0x10/0x10 [ 1319.485823][T22080] ? __fget_files+0x2a/0x420 [ 1319.485845][T22080] ? __fget_files+0x3a0/0x420 [ 1319.485861][T22080] ? __fget_files+0x2a/0x420 [ 1319.485887][T22080] ksys_read+0x145/0x250 [ 1319.485915][T22080] ? __pfx_ksys_read+0x10/0x10 [ 1319.485944][T22080] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.485968][T22080] __do_fast_syscall_32+0xb6/0x2b0 [ 1319.485990][T22080] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.486015][T22080] do_fast_syscall_32+0x34/0x80 [ 1319.486037][T22080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1319.486061][T22080] RIP: 0023:0xf702e539 [ 1319.486077][T22080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1319.486094][T22080] RSP: 002b:00000000f541e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1319.486114][T22080] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f541e620 [ 1319.486128][T22080] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 1319.486140][T22080] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1319.486151][T22080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1319.486163][T22080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.486191][T22080] [ 1320.193247][T22086] fuse: Unknown parameter 'Id' [ 1320.392428][T22093] FAULT_INJECTION: forcing a failure. [ 1320.392428][T22093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.465232][T22093] CPU: 1 UID: 0 PID: 22093 Comm: syz.8.4691 Not tainted syzkaller #0 PREEMPT(full) [ 1320.465258][T22093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1320.465270][T22093] Call Trace: [ 1320.465278][T22093] [ 1320.465287][T22093] dump_stack_lvl+0x189/0x250 [ 1320.465316][T22093] ? __pfx____ratelimit+0x10/0x10 [ 1320.465337][T22093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.465360][T22093] ? __pfx__printk+0x10/0x10 [ 1320.465398][T22093] should_fail_ex+0x414/0x560 [ 1320.465432][T22093] _copy_to_user+0x31/0xb0 [ 1320.465460][T22093] simple_read_from_buffer+0xe1/0x170 [ 1320.465493][T22093] proc_fail_nth_read+0x1b3/0x220 [ 1320.465518][T22093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.465544][T22093] ? rw_verify_area+0x2a6/0x4d0 [ 1320.465567][T22093] ? __lock_acquire+0xab9/0xd20 [ 1320.465594][T22093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1320.465617][T22093] vfs_read+0x1fd/0xa30 [ 1320.465641][T22093] ? fdget_pos+0x247/0x320 [ 1320.465662][T22093] ? __pfx___mutex_lock+0x10/0x10 [ 1320.465684][T22093] ? __pfx_vfs_read+0x10/0x10 [ 1320.465710][T22093] ? __fget_files+0x2a/0x420 [ 1320.465731][T22093] ? __fget_files+0x3a0/0x420 [ 1320.465747][T22093] ? __fget_files+0x2a/0x420 [ 1320.465776][T22093] ksys_read+0x145/0x250 [ 1320.465804][T22093] ? __pfx_ksys_read+0x10/0x10 [ 1320.465832][T22093] ? lockdep_hardirqs_on+0x9c/0x150 [ 1320.465856][T22093] __do_fast_syscall_32+0xb6/0x2b0 [ 1320.465879][T22093] ? lockdep_hardirqs_on+0x9c/0x150 [ 1320.465910][T22093] do_fast_syscall_32+0x34/0x80 [ 1320.465933][T22093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1320.465956][T22093] RIP: 0023:0xf702e539 [ 1320.465972][T22093] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1320.465989][T22093] RSP: 002b:00000000f541e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1320.466009][T22093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541e620 [ 1320.466023][T22093] RDX: 000000000000000f RSI: 00000000f73c5ff4 RDI: 0000000000000000 [ 1320.466035][T22093] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1320.466047][T22093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1320.466058][T22093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.466086][T22093] [ 1320.845958][T11647] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1321.008814][T22102] bond2: entered promiscuous mode [ 1321.013875][T22102] bond2: entered allmulticast mode [ 1321.016744][T11647] usb 2-1: Using ep0 maxpacket: 8 [ 1321.028144][T11647] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1321.048080][T11647] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.061495][T11647] usb 2-1: config 0 has no interface number 0 [ 1321.073377][T11647] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1321.083573][T11647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.174460][T22102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1321.184446][T11647] usb 2-1: Product: syz [ 1321.189439][T22104] batman_adv: batadv0: Adding interface: dummy0 [ 1321.196218][T22104] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.221567][T11647] usb 2-1: Manufacturer: syz [ 1321.225900][T22104] batman_adv: batadv0: Interface activated: dummy0 [ 1321.226584][T11647] usb 2-1: SerialNumber: syz [ 1321.240617][T11647] usb 2-1: config 0 descriptor?? [ 1321.313984][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1321.521218][ T9026] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.591846][T22110] netlink: 101 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1321.668774][T11649] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1321.825243][T11649] usb 10-1: device descriptor read/64, error -71 [ 1322.419254][T11649] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 1322.585273][T11649] usb 10-1: device descriptor read/64, error -71 [ 1322.727441][T11649] usb usb10-port1: attempt power cycle [ 1322.774893][T11647] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1322.835264][T11647] usb 2-1: No valid video chain found. [ 1322.882349][T11647] usb 2-1: USB disconnect, device number 18 [ 1323.146236][T11649] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1323.187792][T11649] usb 10-1: device descriptor read/8, error -71 [ 1323.435270][T11649] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1323.456535][T11649] usb 10-1: device descriptor read/8, error -71 [ 1323.578129][T11649] usb usb10-port1: unable to enumerate USB device [ 1323.609322][T22137] FAULT_INJECTION: forcing a failure. [ 1323.609322][T22137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.624216][T22137] CPU: 0 UID: 0 PID: 22137 Comm: syz.8.4705 Not tainted syzkaller #0 PREEMPT(full) [ 1323.624240][T22137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1323.624252][T22137] Call Trace: [ 1323.624261][T22137] [ 1323.624269][T22137] dump_stack_lvl+0x189/0x250 [ 1323.624297][T22137] ? __pfx____ratelimit+0x10/0x10 [ 1323.624317][T22137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1323.624340][T22137] ? __pfx__printk+0x10/0x10 [ 1323.624368][T22137] ? __might_fault+0xb0/0x130 [ 1323.624406][T22137] should_fail_ex+0x414/0x560 [ 1323.624438][T22137] _copy_from_user+0x2d/0xb0 [ 1323.624465][T22137] get_compat_msghdr+0xad/0x4a0 [ 1323.624487][T22137] ? __lock_acquire+0xab9/0xd20 [ 1323.624520][T22137] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1323.624545][T22137] ? get_pid_task+0x20/0x1f0 [ 1323.624576][T22137] ___sys_recvmsg+0x17f/0x510 [ 1323.624608][T22137] ? __pfx____sys_recvmsg+0x10/0x10 [ 1323.624656][T22137] ? __fget_files+0x3a0/0x420 [ 1323.624684][T22137] __sys_recvmsg+0x161/0x220 [ 1323.624712][T22137] ? __pfx___sys_recvmsg+0x10/0x10 [ 1323.624753][T22137] ? lockdep_hardirqs_on+0x9c/0x150 [ 1323.624777][T22137] __do_fast_syscall_32+0xb6/0x2b0 [ 1323.624801][T22137] ? lockdep_hardirqs_on+0x9c/0x150 [ 1323.624825][T22137] do_fast_syscall_32+0x34/0x80 [ 1323.624848][T22137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1323.624871][T22137] RIP: 0023:0xf702e539 [ 1323.624887][T22137] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1323.624904][T22137] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1323.624925][T22137] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a40 [ 1323.624950][T22137] RDX: 0000000040000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1323.624962][T22137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1323.624973][T22137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1323.624985][T22137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1323.625012][T22137] [ 1323.912928][T22140] netlink: 'syz.7.4706': attribute type 1 has an invalid length. [ 1325.689213][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4715'. [ 1326.521128][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4722'. [ 1326.652791][T22189] loop6: detected capacity change from 0 to 63 [ 1326.671504][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.715400][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.728146][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.738460][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.760092][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.768434][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.777313][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.785615][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.796095][T22189] ldm_validate_partition_table(): Disk read failed. [ 1326.802751][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.811376][T22189] Buffer I/O error on dev loop6, logical block 0, async page read [ 1326.977655][T22206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1326.986101][T22206] batadv_slave_0: entered promiscuous mode [ 1327.098241][T22189] Dev loop6: unable to read RDB block 0 [ 1327.115660][T22189] loop6: unable to read partition table [ 1327.125993][T22189] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1328.223329][T22218] bridge2: port 1(macvlan3) entered blocking state [ 1328.230308][T22218] bridge2: port 1(macvlan3) entered disabled state [ 1328.238800][T22218] macvlan3: entered allmulticast mode [ 1328.249908][T22218] macvlan3: entered promiscuous mode [ 1328.282475][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4730'. [ 1328.343635][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4730'. [ 1330.792932][T22261] netlink: 'syz.9.4742': attribute type 11 has an invalid length. [ 1332.039041][T22271] bridge1: entered allmulticast mode [ 1332.257564][T22277] vlan2: entered promiscuous mode [ 1332.262781][T22277] bridge0: entered promiscuous mode [ 1332.271337][T22277] bridge0: port 3(vlan2) entered blocking state [ 1332.279546][T22277] bridge0: port 3(vlan2) entered disabled state [ 1332.445042][T22277] vlan2: entered allmulticast mode [ 1332.466339][T22277] bridge0: entered allmulticast mode [ 1332.474674][T22277] vlan2: left allmulticast mode [ 1332.482929][T22277] bridge0: left allmulticast mode [ 1333.305397][T11654] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1333.550164][T11654] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1333.570608][T11654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.596929][T11654] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1333.620999][T11654] usb 2-1: config 1 has no interface number 1 [ 1333.637920][T11654] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1333.675518][T11647] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1333.696701][T11654] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1333.739198][T11654] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.768261][T11654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.839159][T11654] usb 2-1: Product: syz [ 1333.844809][T11654] usb 2-1: Manufacturer: syz [ 1333.849502][T11647] usb 5-1: Using ep0 maxpacket: 8 [ 1333.857551][T11654] usb 2-1: SerialNumber: syz [ 1333.864554][T11647] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1333.874094][T11647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.888216][T11647] usb 5-1: Product: syz [ 1333.896197][T11647] usb 5-1: Manufacturer: syz [ 1333.904929][T11647] usb 5-1: SerialNumber: syz [ 1333.931917][T11647] usb 5-1: config 0 descriptor?? [ 1333.961154][T11647] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1334.089147][T11654] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1334.105249][T11654] usb 2-1: MIDIStreaming interface descriptor not found [ 1334.234768][T11654] usb 2-1: USB disconnect, device number 19 [ 1334.351709][T18570] udevd[18570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1334.758805][T22310] netlink: 'syz.1.4755': attribute type 3 has an invalid length. [ 1334.765630][T22312] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4763'. [ 1334.782906][T22303] batadv_slave_1: entered promiscuous mode [ 1334.789460][T22303] batadv_slave_1: left promiscuous mode [ 1334.966656][T11647] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1334.985642][T11647] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1335.019968][T22310] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1335.022262][T11647] usb 5-1: USB disconnect, device number 45 [ 1335.029514][T22310] bond_slave_1: entered promiscuous mode [ 1335.040749][T22310] batadv0: entered promiscuous mode [ 1335.119781][T22310] netlink: 988 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1336.113252][T22337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1336.121808][T22337] batadv_slave_0: entered promiscuous mode [ 1336.249743][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4760'. [ 1336.309983][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4760'. [ 1337.267722][T22359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1337.318782][T22362] FAULT_INJECTION: forcing a failure. [ 1337.318782][T22362] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.352108][T22362] CPU: 0 UID: 0 PID: 22362 Comm: syz.8.4769 Not tainted syzkaller #0 PREEMPT(full) [ 1337.352126][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1337.352135][T22362] Call Trace: [ 1337.352141][T22362] [ 1337.352147][T22362] dump_stack_lvl+0x189/0x250 [ 1337.352167][T22362] ? __pfx____ratelimit+0x10/0x10 [ 1337.352183][T22362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1337.352199][T22362] ? __pfx__printk+0x10/0x10 [ 1337.352220][T22362] ? __pfx___might_resched+0x10/0x10 [ 1337.352233][T22362] ? fs_reclaim_acquire+0x7d/0x100 [ 1337.352249][T22362] should_fail_ex+0x414/0x560 [ 1337.352273][T22362] should_failslab+0xa8/0x100 [ 1337.352294][T22362] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1337.352313][T22362] ? dup_task_struct+0x52/0x860 [ 1337.352331][T22362] dup_task_struct+0x52/0x860 [ 1337.352345][T22362] ? lockdep_hardirqs_on+0x9c/0x150 [ 1337.352361][T22362] copy_process+0x54b/0x3c00 [ 1337.352388][T22362] ? get_pid_task+0x20/0x1f0 [ 1337.352408][T22362] ? __pfx_copy_process+0x10/0x10 [ 1337.352430][T22362] kernel_clone+0x21e/0x840 [ 1337.352445][T22362] ? vfs_write+0x956/0xb30 [ 1337.352465][T22362] ? __pfx_kernel_clone+0x10/0x10 [ 1337.352487][T22362] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1337.352508][T22362] __ia32_compat_sys_ia32_clone+0x189/0x1e0 [ 1337.352525][T22362] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 1337.352558][T22362] ? lockdep_hardirqs_on+0x9c/0x150 [ 1337.352575][T22362] __do_fast_syscall_32+0xb6/0x2b0 [ 1337.352591][T22362] ? lockdep_hardirqs_on+0x9c/0x150 [ 1337.352608][T22362] do_fast_syscall_32+0x34/0x80 [ 1337.352624][T22362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1337.352640][T22362] RIP: 0023:0xf702e539 [ 1337.352652][T22362] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1337.352664][T22362] RSP: 002b:00000000f541e50c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 1337.352678][T22362] RAX: ffffffffffffffda RBX: 0000000020223000 RCX: 0000000000000000 [ 1337.352688][T22362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.352696][T22362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1337.352704][T22362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1337.352712][T22362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1337.352730][T22362] [ 1338.195227][T11649] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1338.243380][T22377] fuse: Bad value for 'group_id' [ 1338.252744][T22377] fuse: Bad value for 'group_id' [ 1338.547023][T11649] usb 2-1: Using ep0 maxpacket: 16 [ 1338.594558][T11649] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1338.675422][T11649] usb 2-1: config 0 has no interface number 0 [ 1338.819658][T11649] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1339.042599][T11649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.061169][T11649] usb 2-1: Product: syz [ 1339.077446][T11649] usb 2-1: Manufacturer: syz [ 1339.124719][T11649] usb 2-1: SerialNumber: syz [ 1339.195250][T11649] usb 2-1: config 0 descriptor?? [ 1339.236914][T11649] asix 2-1:0.251: probe with driver asix failed with error -22 [ 1339.706508][T22369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.887825][T22369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.912993][T22369] CUSE: info not properly terminated [ 1339.937769][T11654] usb 2-1: USB disconnect, device number 20 [ 1340.758457][T22396] block nbd0: Attempted send on invalid socket [ 1340.764933][T22396] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1341.065377][T11649] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1341.235281][T11649] usb 5-1: Using ep0 maxpacket: 8 [ 1341.241352][T22413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1341.246160][T11649] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 1341.269997][T11649] usb 5-1: config 162 has an invalid interface number: 3 but max is 2 [ 1341.280636][T11649] usb 5-1: config 162 has no interface number 0 [ 1341.295302][T11649] usb 5-1: config 162 has no interface number 1 [ 1341.301832][T11649] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1341.329085][T11649] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1341.344219][T11649] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1341.360010][T11649] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1341.372516][T11649] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1341.395351][T11649] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1341.411985][T11649] usb 5-1: config 162 interface 84 has no altsetting 0 [ 1341.425560][T22413] 0ªX¹¦À: renamed from caif0 [ 1341.441880][T11649] usb 5-1: config 162 interface 2 has no altsetting 0 [ 1341.452655][T11649] usb 5-1: config 162 interface 3 has no altsetting 0 [ 1341.480107][T11649] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 1341.504926][T22413] 0ªX¹¦À: entered allmulticast mode [ 1341.520847][T11649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.535543][T22413] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1341.578751][T11649] usb 5-1: Product: syz [ 1341.582971][T11649] usb 5-1: Manufacturer: syz [ 1341.615302][T11649] usb 5-1: SerialNumber: syz [ 1341.922441][T22424] ip6gretap0: entered promiscuous mode [ 1342.017548][T22424] macsec1: entered promiscuous mode [ 1342.273927][T22429] binder: 22428:22429 ioctl c018620c 800000c0 returned -22 [ 1343.368549][T19222] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1343.659369][T19222] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1343.675537][T19222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.729764][T19222] usb 2-1: config 0 descriptor?? [ 1343.777724][T17919] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 1343.941470][T11649] usb 5-1: USB disconnect, device number 46 [ 1344.139282][T22442] fuse: Bad value for 'fd' [ 1344.655667][T11649] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1344.757853][T22448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1344.771693][T19222] usb 2-1: Cannot set autoneg [ 1344.776765][T19222] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1344.811023][T19222] usb 2-1: USB disconnect, device number 21 [ 1344.827421][T11649] usb 5-1: Using ep0 maxpacket: 8 [ 1344.857105][T11649] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1344.886907][T11649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.929702][T11649] usb 5-1: config 0 descriptor?? [ 1345.101006][T22455] macvlan4: entered promiscuous mode [ 1345.106612][T22455] macvlan4: entered allmulticast mode [ 1345.167828][T11649] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1346.252657][T22473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1346.545328][T19222] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1346.717757][T19222] usb 9-1: config 7 has an invalid interface number: 192 but max is 0 [ 1346.726397][T19222] usb 9-1: config 7 has no interface number 0 [ 1346.745376][T19222] usb 9-1: config 7 interface 192 has no altsetting 0 [ 1346.752444][T22482] fuse: Bad value for 'fd' [ 1346.771784][T19222] usb 9-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1346.785294][T19222] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.794275][T19222] usb 9-1: Product: syz [ 1346.827941][T19222] usb 9-1: Manufacturer: syz [ 1346.874410][T19222] usb 9-1: SerialNumber: syz [ 1347.291900][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1347.323756][T22486] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4806'. [ 1347.897634][T11649] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1347.915320][T11649] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1347.958877][T11649] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1347.999309][T11649] usb 5-1: USB disconnect, device number 47 [ 1348.194213][T19222] usb 9-1: USB disconnect, device number 24 [ 1349.251327][T11649] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1349.527881][T11649] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1349.537423][T11649] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1349.548456][T11649] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1349.561416][T11649] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1349.574707][T11649] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1349.583540][T11649] usb 2-1: Product: syz [ 1349.588000][T11649] usb 2-1: Manufacturer: syz [ 1349.592617][T11649] usb 2-1: SerialNumber: syz [ 1349.652452][T11649] usb 2-1: config 0 descriptor?? [ 1349.703183][T11649] hub 2-1:0.0: bad descriptor, ignoring hub [ 1349.720007][T11649] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1349.843567][T11649] usb 2-1: selecting invalid altsetting 0 [ 1349.925766][T22500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.955666][T22500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.048036][T11649] usb 2-1: USB disconnect, device number 22 [ 1350.536444][T22519] syzkaller0: entered promiscuous mode [ 1350.562344][T22519] syzkaller0: entered allmulticast mode [ 1350.585456][T11649] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1350.766599][T22520] xfrm0: entered promiscuous mode [ 1350.771723][T22520] xfrm0: entered allmulticast mode [ 1350.777738][T11649] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1350.786512][T11649] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1350.840164][T11649] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1350.872060][T11649] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1350.881391][T11649] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1350.901107][T11649] usb 2-1: Product: syz [ 1350.909022][T11649] usb 2-1: Manufacturer: syz [ 1350.917143][T11649] usb 2-1: SerialNumber: syz [ 1350.940536][T11649] usb 2-1: config 0 descriptor?? [ 1350.956012][T11649] hub 2-1:0.0: bad descriptor, ignoring hub [ 1350.962423][T11649] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1350.974768][T11649] usb 2-1: selecting invalid altsetting 0 [ 1351.163033][T11649] usb 2-1: USB disconnect, device number 23 [ 1351.273447][T18569] udevd[18569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.050676][T22538] fuse: Invalid rootmode [ 1352.064904][T22539] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4818'. [ 1353.071220][T17349] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1353.107884][ T30] audit: type=1326 audit(1758924432.378:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.130029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.175737][T22548] debugfs: '!' already exists in 'ieee80211' [ 1353.271264][ T30] audit: type=1326 audit(1758924432.418:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.328204][T17349] usb 10-1: Using ep0 maxpacket: 8 [ 1353.348365][T17349] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1353.360043][T17349] usb 10-1: config 179 has no interface number 0 [ 1353.373830][T17349] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1353.389808][ T30] audit: type=1326 audit(1758924432.418:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.427130][T17349] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1353.504896][T17349] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1353.519184][ T30] audit: type=1326 audit(1758924432.418:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.561400][T17349] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1353.618844][T17349] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1353.640188][ T30] audit: type=1326 audit(1758924432.418:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.685614][T17349] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1353.721094][T17349] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.749069][ T30] audit: type=1326 audit(1758924432.418:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.797649][T22543] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1353.928175][ T30] audit: type=1326 audit(1758924432.418:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1353.950661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.994923][ T30] audit: type=1326 audit(1758924432.418:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1354.017524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.026292][ T30] audit: type=1326 audit(1758924432.418:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1354.048463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1354.170366][ T30] audit: type=1326 audit(1758924432.718:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22545 comm="syz.8.4821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000 [ 1354.284100][T19222] usb 10-1: USB disconnect, device number 23 [ 1354.284139][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1354.298674][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1354.307946][ C0] ================================================================== [ 1354.316037][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1354.323877][ C0] Read of size 4 at addr ffff8880529f905c by task udevd/18669 [ 1354.331345][ C0] [ 1354.333702][ C0] CPU: 0 UID: 0 PID: 18669 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1354.333731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1354.333754][ C0] Call Trace: [ 1354.333766][ C0] [ 1354.333777][ C0] dump_stack_lvl+0x189/0x250 [ 1354.333809][ C0] ? __kasan_check_byte+0x12/0x40 [ 1354.333846][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.333874][ C0] ? lock_release+0x4b/0x3e0 [ 1354.333920][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 1354.333954][ C0] print_report+0xca/0x240 [ 1354.333977][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1354.334005][ C0] kasan_report+0x118/0x150 [ 1354.334040][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1354.334075][ C0] do_raw_spin_lock+0x23d/0x290 [ 1354.334104][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1354.334135][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1354.334170][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1354.334207][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1354.334244][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1354.334279][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1354.334321][ C0] __usb_hcd_giveback_urb+0x3b0/0x540 [ 1354.334351][ C0] dummy_timer+0x862/0x4550 [ 1354.334375][ C0] ? __pfx___calc_delta+0x10/0x10 [ 1354.334420][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1354.334464][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1354.334489][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1354.334511][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1354.334531][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1354.334565][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1354.334586][ C0] ? read_tsc+0x9/0x20 [ 1354.334632][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1354.334658][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1354.334682][ C0] handle_softirqs+0x283/0x870 [ 1354.334705][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1354.334731][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1354.334768][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1354.334795][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1354.334823][ C0] irq_exit_rcu+0x9/0x30 [ 1354.334843][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1354.334867][ C0] [ 1354.334875][ C0] [ 1354.334884][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1354.334909][ C0] RIP: 0010:lock_acquire+0xc9/0x360 [ 1354.334943][ C0] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 e0 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 83 [ 1354.334981][ C0] RSP: 0018:ffffc900040cf3a8 EFLAGS: 00000246 [ 1354.335016][ C0] RAX: ffff888028295a00 RBX: 0000000000000000 RCX: f3e1191e814d2b00 [ 1354.335033][ C0] RDX: 0000000000000000 RSI: ffffffff81cea527 RDI: 1ffffffff1c2741c [ 1354.335050][ C0] RBP: ffffffff81cea506 R08: 0000000000000000 R09: 0000000000000000 [ 1354.335065][ C0] R10: ffffc900040cf538 R11: ffffffff81ac3c30 R12: 0000000000000002 [ 1354.335081][ C0] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000000 [ 1354.335098][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1354.335133][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1354.335163][ C0] ? is_bpf_text_address+0x47/0x2b0 [ 1354.335206][ C0] is_bpf_text_address+0x47/0x2b0 [ 1354.335239][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1354.335272][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1354.335306][ C0] kernel_text_address+0xa5/0xe0 [ 1354.335338][ C0] __kernel_text_address+0xd/0x40 [ 1354.335368][ C0] unwind_get_return_address+0x4d/0x90 [ 1354.335395][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1354.335423][ C0] arch_stack_walk+0xfc/0x150 [ 1354.335457][ C0] stack_trace_save+0x9c/0xe0 [ 1354.335484][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.335517][ C0] kasan_save_track+0x3e/0x80 [ 1354.335545][ C0] ? kasan_save_track+0x3e/0x80 [ 1354.335572][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1354.335603][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1354.335633][ C0] ? security_file_alloc+0x34/0x330 [ 1354.335662][ C0] ? init_file+0x93/0x2f0 [ 1354.335681][ C0] ? alloc_empty_file+0x6e/0x1d0 [ 1354.335696][ C0] ? path_openat+0x107/0x3830 [ 1354.335715][ C0] ? do_filp_open+0x1fa/0x410 [ 1354.335732][ C0] ? do_sys_openat2+0x121/0x1c0 [ 1354.335756][ C0] ? __x64_sys_openat+0x138/0x170 [ 1354.335772][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1354.335789][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.335822][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1354.335844][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1354.335865][ C0] ? security_file_alloc+0x34/0x330 [ 1354.335888][ C0] security_file_alloc+0x34/0x330 [ 1354.335909][ C0] init_file+0x93/0x2f0 [ 1354.335925][ C0] alloc_empty_file+0x6e/0x1d0 [ 1354.335942][ C0] path_openat+0x107/0x3830 [ 1354.335960][ C0] ? arch_stack_walk+0xfc/0x150 [ 1354.335983][ C0] ? stack_trace_save+0x9c/0xe0 [ 1354.336002][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1354.336028][ C0] ? stack_trace_save+0x9c/0xe0 [ 1354.336047][ C0] ? kasan_save_track+0x4f/0x80 [ 1354.336066][ C0] ? kasan_save_track+0x3e/0x80 [ 1354.336085][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1354.336105][ C0] ? getname_flags+0xb8/0x540 [ 1354.336120][ C0] ? __pfx_path_openat+0x10/0x10 [ 1354.336138][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.336161][ C0] do_filp_open+0x1fa/0x410 [ 1354.336179][ C0] ? __lock_acquire+0xab9/0xd20 [ 1354.336203][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1354.336230][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1354.336243][ C0] ? alloc_fd+0x64c/0x6c0 [ 1354.336272][ C0] do_sys_openat2+0x121/0x1c0 [ 1354.336289][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.336308][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 1354.336331][ C0] __x64_sys_openat+0x138/0x170 [ 1354.336350][ C0] do_syscall_64+0xfa/0x3b0 [ 1354.336368][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.336384][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1354.336400][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1354.336417][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.336432][ C0] RIP: 0033:0x7f4e49ea7407 [ 1354.336447][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1354.336460][ C0] RSP: 002b:00007ffcf5cecf00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1354.336476][ C0] RAX: ffffffffffffffda RBX: 00007f4e4a575880 RCX: 00007f4e49ea7407 [ 1354.336488][ C0] RDX: 0000000000080000 RSI: 00007ffcf5ced080 RDI: ffffffffffffff9c [ 1354.336502][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1354.336511][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e8f4f77f5 [ 1354.336521][ C0] R13: 0000557e8f4f77f5 R14: 0000000000000001 R15: 0000000000000000 [ 1354.336538][ C0] [ 1354.336544][ C0] [ 1354.983811][ C0] Allocated by task 17349: [ 1354.988216][ C0] kasan_save_track+0x3e/0x80 [ 1354.992904][ C0] __kasan_kmalloc+0x93/0xb0 [ 1354.997528][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 1355.002897][ C0] xpad_probe+0x428/0x1fc0 [ 1355.007316][ C0] usb_probe_interface+0x665/0xc30 [ 1355.012432][ C0] really_probe+0x26a/0x9e0 [ 1355.016940][ C0] __driver_probe_device+0x18c/0x2f0 [ 1355.022226][ C0] driver_probe_device+0x4f/0x430 [ 1355.027268][ C0] __device_attach_driver+0x2ce/0x530 [ 1355.032652][ C0] bus_for_each_drv+0x251/0x2e0 [ 1355.037599][ C0] __device_attach+0x2b8/0x400 [ 1355.042370][ C0] bus_probe_device+0x185/0x260 [ 1355.047217][ C0] device_add+0x7b6/0xb50 [ 1355.051547][ C0] usb_set_configuration+0x1a87/0x20e0 [ 1355.057013][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1355.062484][ C0] usb_probe_device+0x1c4/0x390 [ 1355.067347][ C0] really_probe+0x26a/0x9e0 [ 1355.071864][ C0] __driver_probe_device+0x18c/0x2f0 [ 1355.077164][ C0] driver_probe_device+0x4f/0x430 [ 1355.082250][ C0] __device_attach_driver+0x2ce/0x530 [ 1355.087637][ C0] bus_for_each_drv+0x251/0x2e0 [ 1355.092488][ C0] __device_attach+0x2b8/0x400 [ 1355.097257][ C0] bus_probe_device+0x185/0x260 [ 1355.102103][ C0] device_add+0x7b6/0xb50 [ 1355.106431][ C0] usb_new_device+0xa39/0x16f0 [ 1355.111199][ C0] hub_event+0x2958/0x4a20 [ 1355.115639][ C0] process_scheduled_works+0xae1/0x17b0 [ 1355.121179][ C0] worker_thread+0x8a0/0xda0 [ 1355.125767][ C0] kthread+0x70e/0x8a0 [ 1355.129888][ C0] ret_from_fork+0x439/0x7d0 [ 1355.134479][ C0] ret_from_fork_asm+0x1a/0x30 [ 1355.139252][ C0] [ 1355.141575][ C0] Freed by task 19222: [ 1355.145669][ C0] kasan_save_track+0x3e/0x80 [ 1355.150351][ C0] kasan_save_free_info+0x46/0x50 [ 1355.155378][ C0] __kasan_slab_free+0x5b/0x80 [ 1355.160151][ C0] kfree+0x18e/0x440 [ 1355.164050][ C0] xpad_disconnect+0x350/0x480 [ 1355.168826][ C0] usb_unbind_interface+0x26e/0x910 [ 1355.174034][ C0] device_release_driver_internal+0x4d6/0x800 [ 1355.180189][ C0] bus_remove_device+0x34d/0x410 [ 1355.185122][ C0] device_del+0x511/0x8e0 [ 1355.189464][ C0] usb_disable_device+0x3e9/0x8a0 [ 1355.194488][ C0] usb_disconnect+0x330/0x950 [ 1355.199166][ C0] hub_event+0x1cf5/0x4a20 [ 1355.203591][ C0] process_scheduled_works+0xae1/0x17b0 [ 1355.209144][ C0] worker_thread+0x8a0/0xda0 [ 1355.213734][ C0] kthread+0x70e/0x8a0 [ 1355.217808][ C0] ret_from_fork+0x439/0x7d0 [ 1355.222399][ C0] ret_from_fork_asm+0x1a/0x30 [ 1355.227186][ C0] [ 1355.229508][ C0] The buggy address belongs to the object at ffff8880529f9000 [ 1355.229508][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 1355.243552][ C0] The buggy address is located 92 bytes inside of [ 1355.243552][ C0] freed 1024-byte region [ffff8880529f9000, ffff8880529f9400) [ 1355.257341][ C0] [ 1355.259661][ C0] The buggy address belongs to the physical page: [ 1355.266070][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x529f8 [ 1355.274821][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1355.283312][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1355.291293][ C0] page_type: f5(slab) [ 1355.295293][ C0] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 0000000000000001 [ 1355.303875][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1355.312454][ C0] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 0000000000000001 [ 1355.321120][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1355.329786][ C0] head: 00fff00000000003 ffffea00014a7e01 00000000ffffffff 00000000ffffffff [ 1355.338454][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1355.347111][ C0] page dumped because: kasan: bad access detected [ 1355.353511][ C0] page_owner tracks the page as allocated [ 1355.359220][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 146, tgid 146 (kworker/u8:5), ts 1330475697789, free_ts 1329913428369 [ 1355.378665][ C0] post_alloc_hook+0x240/0x2a0 [ 1355.383437][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 1355.388977][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 1355.394780][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1355.399648][ C0] allocate_slab+0x8a/0x370 [ 1355.404143][ C0] ___slab_alloc+0xbeb/0x1420 [ 1355.408841][ C0] __kmalloc_noprof+0x305/0x4f0 [ 1355.413693][ C0] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 1355.419583][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 1355.424869][ C0] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 1355.431114][ C0] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 1355.436752][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 1355.442825][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 1355.448469][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 1355.454562][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 1355.459853][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 1355.464967][ C0] page last free pid 18425 tgid 18425 stack trace: [ 1355.471458][ C0] __free_frozen_pages+0xbc4/0xd30 [ 1355.476577][ C0] __put_partials+0x156/0x1a0 [ 1355.481246][ C0] put_cpu_partial+0x17c/0x250 [ 1355.486000][ C0] __slab_free+0x2d5/0x3c0 [ 1355.490416][ C0] qlist_free_all+0x97/0x140 [ 1355.495006][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1355.500481][ C0] __kasan_slab_alloc+0x22/0x80 [ 1355.505426][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1355.510889][ C0] getname_flags+0xb8/0x540 [ 1355.515407][ C0] user_path_at+0x24/0x60 [ 1355.519743][ C0] __ia32_sys_umount+0xee/0x160 [ 1355.524592][ C0] __do_fast_syscall_32+0xb6/0x2b0 [ 1355.529703][ C0] do_fast_syscall_32+0x34/0x80 [ 1355.534607][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1355.540945][ C0] [ 1355.543266][ C0] Memory state around the buggy address: [ 1355.548891][ C0] ffff8880529f8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1355.556947][ C0] ffff8880529f8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1355.565002][ C0] >ffff8880529f9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1355.573057][ C0] ^ [ 1355.579981][ C0] ffff8880529f9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1355.588037][ C0] ffff8880529f9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1355.596085][ C0] ================================================================== [ 1355.604146][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1355.611330][ C0] CPU: 0 UID: 0 PID: 18669 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1355.620260][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1355.630398][ C0] Call Trace: [ 1355.633680][ C0] [ 1355.636607][ C0] dump_stack_lvl+0x99/0x250 [ 1355.641197][ C0] ? __asan_memcpy+0x40/0x70 [ 1355.645796][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.650996][ C0] ? __pfx__printk+0x10/0x10 [ 1355.655598][ C0] vpanic+0x281/0x750 [ 1355.659577][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 1355.664775][ C0] ? __pfx_vpanic+0x10/0x10 [ 1355.669286][ C0] panic+0xb9/0xc0 [ 1355.673009][ C0] ? __pfx_panic+0x10/0x10 [ 1355.677451][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1355.683360][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1355.688384][ C0] check_panic_on_warn+0x89/0xb0 [ 1355.693330][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1355.698355][ C0] end_report+0x78/0x160 [ 1355.702612][ C0] kasan_report+0x129/0x150 [ 1355.707120][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 1355.712145][ C0] do_raw_spin_lock+0x23d/0x290 [ 1355.716996][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 1355.722405][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.727957][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1355.733167][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1355.739065][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 1355.744008][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 1355.749212][ C0] __usb_hcd_giveback_urb+0x3b0/0x540 [ 1355.754586][ C0] dummy_timer+0x862/0x4550 [ 1355.759087][ C0] ? __pfx___calc_delta+0x10/0x10 [ 1355.764121][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.769505][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.774445][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.779815][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1355.784753][ C0] __hrtimer_run_queues+0x529/0xc60 [ 1355.789957][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1355.795775][ C0] ? read_tsc+0x9/0x20 [ 1355.799863][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1355.805676][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1355.810788][ C0] handle_softirqs+0x283/0x870 [ 1355.815552][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1355.820313][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1355.825606][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1355.830209][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1355.835463][ C0] irq_exit_rcu+0x9/0x30 [ 1355.839901][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1355.845555][ C0] [ 1355.848490][ C0] [ 1355.851420][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1355.857409][ C0] RIP: 0010:lock_acquire+0xc9/0x360 [ 1355.862630][ C0] Code: 03 11 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 e0 a0 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 4c 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 83 [ 1355.882347][ C0] RSP: 0018:ffffc900040cf3a8 EFLAGS: 00000246 [ 1355.888425][ C0] RAX: ffff888028295a00 RBX: 0000000000000000 RCX: f3e1191e814d2b00 [ 1355.896398][ C0] RDX: 0000000000000000 RSI: ffffffff81cea527 RDI: 1ffffffff1c2741c [ 1355.904368][ C0] RBP: ffffffff81cea506 R08: 0000000000000000 R09: 0000000000000000 [ 1355.912334][ C0] R10: ffffc900040cf538 R11: ffffffff81ac3c30 R12: 0000000000000002 [ 1355.920305][ C0] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000000 [ 1355.928283][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1355.933494][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.939656][ C0] ? is_bpf_text_address+0x47/0x2b0 [ 1355.944873][ C0] is_bpf_text_address+0x47/0x2b0 [ 1355.949908][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1355.955108][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1355.960323][ C0] kernel_text_address+0xa5/0xe0 [ 1355.965265][ C0] __kernel_text_address+0xd/0x40 [ 1355.970299][ C0] unwind_get_return_address+0x4d/0x90 [ 1355.975798][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1355.981956][ C0] arch_stack_walk+0xfc/0x150 [ 1355.986670][ C0] stack_trace_save+0x9c/0xe0 [ 1355.991358][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.996740][ C0] kasan_save_track+0x3e/0x80 [ 1356.001419][ C0] ? kasan_save_track+0x3e/0x80 [ 1356.006267][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1356.011292][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1356.016928][ C0] ? security_file_alloc+0x34/0x330 [ 1356.022124][ C0] ? init_file+0x93/0x2f0 [ 1356.026452][ C0] ? alloc_empty_file+0x6e/0x1d0 [ 1356.031385][ C0] ? path_openat+0x107/0x3830 [ 1356.036058][ C0] ? do_filp_open+0x1fa/0x410 [ 1356.040823][ C0] ? do_sys_openat2+0x121/0x1c0 [ 1356.045696][ C0] ? __x64_sys_openat+0x138/0x170 [ 1356.050718][ C0] ? do_syscall_64+0xfa/0x3b0 [ 1356.055395][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.061481][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1356.066348][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1356.071835][ C0] ? security_file_alloc+0x34/0x330 [ 1356.077054][ C0] security_file_alloc+0x34/0x330 [ 1356.082118][ C0] init_file+0x93/0x2f0 [ 1356.086307][ C0] alloc_empty_file+0x6e/0x1d0 [ 1356.091093][ C0] path_openat+0x107/0x3830 [ 1356.095605][ C0] ? arch_stack_walk+0xfc/0x150 [ 1356.100463][ C0] ? stack_trace_save+0x9c/0xe0 [ 1356.105334][ C0] ? stack_depot_save_flags+0x40/0x860 [ 1356.110810][ C0] ? stack_trace_save+0x9c/0xe0 [ 1356.115669][ C0] ? kasan_save_track+0x4f/0x80 [ 1356.120524][ C0] ? kasan_save_track+0x3e/0x80 [ 1356.125382][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1356.130415][ C0] ? getname_flags+0xb8/0x540 [ 1356.135106][ C0] ? __pfx_path_openat+0x10/0x10 [ 1356.140055][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.146145][ C0] do_filp_open+0x1fa/0x410 [ 1356.150653][ C0] ? __lock_acquire+0xab9/0xd20 [ 1356.155524][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1356.160560][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1356.165427][ C0] ? alloc_fd+0x64c/0x6c0 [ 1356.169768][ C0] do_sys_openat2+0x121/0x1c0 [ 1356.174454][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1356.179680][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 1356.184636][ C0] __x64_sys_openat+0x138/0x170 [ 1356.189491][ C0] do_syscall_64+0xfa/0x3b0 [ 1356.194009][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.200109][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1356.206271][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1356.210961][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.216884][ C0] RIP: 0033:0x7f4e49ea7407 [ 1356.221308][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1356.240957][ C0] RSP: 002b:00007ffcf5cecf00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1356.249388][ C0] RAX: ffffffffffffffda RBX: 00007f4e4a575880 RCX: 00007f4e49ea7407 [ 1356.257375][ C0] RDX: 0000000000080000 RSI: 00007ffcf5ced080 RDI: ffffffffffffff9c [ 1356.265368][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1356.273349][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e8f4f77f5 [ 1356.281331][ C0] R13: 0000557e8f4f77f5 R14: 0000000000000001 R15: 0000000000000000 [ 1356.289342][ C0] [ 1356.292539][ C0] Kernel Offset: disabled [ 1356.296872][ C0] Rebooting in 86400 seconds..