last executing test programs: 31m35.915447129s ago: executing program 2 (id=824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00000000aa0000000000fb0000004000", [0x0, 0x2000000000001]}}) 31m35.375232318s ago: executing program 2 (id=827): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@isdn={0x22, 0x2, 0x7, 0x1f, 0xff}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="1f920b3e8e6b95e684a62cb879027f756e4c22c6ddca78cea7fdd983efec97b3706d", 0x22}, {&(0x7f0000000140)="b0965d99cf676b055b0f36f94d8a7f5c1400c27301b25dc09ebfe596e250484cf7fafd7e621559a63721f7ab57494b5cd0d595ad6341ee10c149af2f1974ca9b481bcb57a47a1781", 0x48}, {&(0x7f00000002c0)="da17a56f21d52c750756b20342e402ab635b32b812e47808c269f4fc2ada27866420d7931b9ebe25d375834c0cc3b1abe126febc26edf3c7f8cc67d9d79b0d0b4e22c753638e4f3c61a43e21ba0bd0aeee3bce4b319cd63066456ec82a1ab3735bad970dfeeebd892536532926b72389eca60d66316c9fd28deab7b311de54d8abfc7c1c6b91", 0x86}, {&(0x7f0000000200)="b8d9877e29bc04b26ba25eb6", 0xc}], 0x4, &(0x7f0000001100)=[{0x48, 0x10f, 0xe, "2aab777fc9eedd2ec5671efa9d14e23d21aff7b72e129872c5b8c343c9a004640a8bc6e4626f3b44500faaad6efd201654a0a74788fedcb9"}, {0x1010, 0x118, 0x9e3, "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"}, {0x78, 0x111, 0x8, "cf0ddd6ce1190c9865849b24d30fd8992f06abca9b3181a12291c79c1f60c4eb28f186e3d38748f749acf08c0ffdd9033d31ba08d1015caaccc0485207b8434920b7dd8eb2edd23d65a8b9e21b1eeff51a2d910e2117805872e4e943c4c03dedabc1da8e"}, {0x1010, 0x116, 0x0, "6a42a8558ea5990a121d9487b8c18ac6e669e2f84669b5fedd73871b180b1496c8e1f77a5652ef2675cac70f53b64e09795375083b3f770ce0da3ce1ba012a088b0a6c2ff9f44e77e14b66d227eb1f2c6c66ed571eb6a08b54a423ccf15bd91c5cc27de95079cb41222455f70c248e0a2ea2732e93f228aa2c639fd1377bfba93f8707aee2096e12409cfccb316a4cf722b2119bbf08ec73cd726fa39c64dd0533d1d85775c41ab07a9cf10d0b3bd4cebe362187be97d2daf9d330f1a51818ab9c78295ff43450dd252d14f242d9d4b43ec57bbc242f4cad832441fe09d1beaca1ec47fa30f3ecc7e19b3f909bf099d307a7748374bd946b584f3a31d61aab6d8dd8c6da37623a828ec88864ace75f09bff07dd76e377a0d77c4148ce844555da9b656462ec8b6c332fc80ab626904299265e579236ed5030c7f454598fd15094d8282e7a3d9259daf894932bcbfb6ae105a023fb81c6f668f3d92a713288ff6ae9791137b2e9b10b66742971ce6768a0a2e20e81b74a13b218e36a8a5f8ee2f32d5325cd4febc7100bf6cc0e52fd65d74b8ffc2c8d7e868c07ceb5e80efb60cc8e82667c323bcd4740bd1963d569b485915af9f58206428f93e48113509aae02129219fa148598ddfababf7a29342edb954f3f6188ffd30816d5a8051551a4393f2679d2409be9519a4fceb7866e3101071f92467120df85f461fdbb56eff726d37ae204d0fee150c7be102cdf67a6f58b5c94dbe0ae9837ad77578f1bbe5380dfd2238df3f39d7b744855ddef0fc98a7ca6d34d4e0b5890098a53a8e7d87f41eac9376884586565c7e642e885dbd53f6f9435c75d4c53d6cd462e3ba975620f1b8b090e55127828324c54a689eee765f9190d87d312c79843d835aa3307d3f6c02a9773b0b9b1705e99d8a5ef4026783a7dd6e9b4c0b9c4b3da026c210386168e0e7f9b6174fc9b4274f124a9f1c2372b63f441e63ae107897d7c2f11772f80ad7feff182362874c4f365435c313d9839457b591c9f386f17e7de3739e3c8174c003d5ff86a23ecd7d388bea9d4c3cf5a58d27a5107c8b0788479850566b16e1e8c86fe881c2879550542a17893dbea98ebe6cb720eae8e93d6c861ae6a217e78215be810ee80eb08ecab851c57023fd89ba46672cedbcfbf9428e2f9c9c9e85eec59e28c0a896244028402b27518f9c932f08331cb0dfa597af3a4933ca4b2bbdd47bbfb0575305f4390fcb19a116116e8f1ec85f5e9e4698b0ad8ebefc982cb6d7bfa033f45e7505e9e5c4a75a0fa5517ccce6100ea7974a2e358874fe50e9068f8047c0e9bb25956f5de678be48bc6b209f16267ddf0646ce633bd996cabb04cabb73b9736478bb2ff3a868a17d262bbf1a74b95f841583f7db4d23f345aeb5f02bb44d3af4455d3f631249fbb0397482cbade8ef62bab8dcb87ba1aa15241c0c514a62e4f196d81e85efec9ec52c9087218f4daabcc6dd628933c26a5ee7cb2e5fb511aec99394340e1a5dd45b6bda782e4d7e3f697c0b0f1b0d6b0803156526de5025c10660f8e5baf412acad107f122cb035b907dd431bddaf2a9abec64ab37d172232bd5a87997d31c3a32301f50a9285a833d12b7a6d2acbb052af1333a66f5e013616e3cbf68f9e8b57a3639aebaca056bcf5f61a3f77634b9c79bc39c704126c676b26fb79b79346c7f54a2d6204550cfe5690887829f53c99b0006cfb05f13da80103cb9137012950f65b4cdd47ed9f32f8a2fc16d22425a80d7fcfa2fb2510d0656db30d55d0508b77ed8c248c78bfea8631e58301734aab6491216d38e3fcb1a38909cb265897c51dcc64612bb4f9735d896e9a109c62e4a99c2b90a045f2d4f60bfc32984d479beef23e80bf29a8979f481177a8ad56df481b6eb078b4efbd0de6b597fab959a7fda9a38cccefcdb1c88ea891351060298d96d9eefbae73bd4f58316e3267ece8434d84b76b9e020b1cfac60db463d3db8aa516b38ca16db7e45ff533bef03bd34f38ce790e9b4bbd3210255a252c3b2adc912838136d48ece1361f5b6a9fb4da380cec41fb21c24b0d02d536c2eb5d91f3b21ea821b5ac60044bc99743439752aa1f908bc46450dcef99b47920f5fdc27cac330b7e7ae2fea8fd8ce2da7a7e354e5ffb9c880c34b867b09ce895c9cfa1747d7c0d6b4d617b101ca142697a329368cfb1c1835e60dbb8ea586d0600ee6281229620d4e4275eeb19b86243783edf0bd45c450559a476ea7903d87fbc418d4aa4e36a350d649cdcfc88748af2a80719bd9d3a5d61a45277c6c36d139b636fcc19b6f4d72ed4be48a1ad2d8022af25551e1dfa7d485830832cbabaa1f4d24ad00e7be46c7c4ccc9fb12fd52712372e46651e45010be1d634ef6e11402af93fe9b55fadca345d511d2af5df4e38d8e83a5ba355e8482650c92452fd0a953972a182c06a591e547fa6949c5367868e8092e9bdb02ecae87d8b7fb8f462f4954666dec6ffe9c59b66bfbb904317ab4da0251697dfabd437d8f5c33d03452617f7f1872700aef5739fde6329547cdb91c4eba2e08163784bb80b9994ca37a613e294d5cbb6b2c10762df847b8f6e3050e5becd00dd0d74172000e8308b8669204c5eda77576b152a09e39d8758a8d047b87ad7c86fe2f5f8ebcec28089e7d59d0c993a2ad61d5a1347db8191e9c6ab61803b307ae1a9d0a13248b63cbdcae20658c281aebd3f6f1d4f3b7f5e5308e990c03d0e8f3a0d1514eb14b028d7827ef18049b41697f9f0c8efbde98768ca9ad1f6e88d422b9c97e625e0c6bb2bf0ae61667e13499e045c0575a9fb928465f67e7cbf253a2b085b29707a6ca150b63b611926a99d49529b82cddd81b277e59ec7e57f3558d49a3482ce76e515b57052d52a324e4faa4cf4c1180e151ea7a2fa014f03dec92322714080a2b499ec3fd96c8477094a01360fd84f03d530d80ecef8be0124608f1b029df6fc94fd9b856cf2cd91f1d97e58ef72c01d8dcb0b06049e6eab5a77ff64a0cd92b980861c227871bb35f7e434bd447009076f05ea04196806dc4afbad357e36cb3134ef98eab50de2a3d2514fc5d02e8d4c01187f3608c1112c1ec6b317e4e607c93f57de0f4976da642079c44872b2f0e79c24b3c92b860a3de7ee73f89d4340b580579a042d099e109e82195a71552ec78ef33c4d9fd4b7859c0ec7e75c8c89a264b6347937414e8b3a0aa6a85427c921a942c962ed69a77f44ee9e543472b6bd4c92f2a1deddb09bdfe22209f886a0f86cc463ed483b1085d5a438f372448b3d6012293ddc6da2d2c448224176f0e7153e070172ce5aff6e34ba78cc1f8d64cebcc993cca4155f9cc8234a54b7685db28cd81547d20d18e429d0855390c768835b9010321dfb90f6d25a26f4d73fabf5e3d502f8b33c5c5e157848ac08fd7ba29b3a3c9017fcfcdba701ad6e3ce0154facc35dc83a9accb0a3af5ec3ddf12f767c8c9fe8575420eca37632c942eec9a5509700af5601f1b12d905bb9415d80b368260b8867381f4567bd0cce0be51ec1476a1d4565ae45ce8b7f2beafca39ee5034bbe1e54f79638345a4d3705acc80801b7be1e09f77e5d1a7518bcbc3f3c794a81c548546eb35c95dbe88f1c23309f44b55c8c73d5c63edd0a7fb9ef1d6666b497b5124fafba23cf74a894f9e8ed86d0e57720bb592cc80cef507e6be66b53b78fbe3cd4e780a90b7e0d144fec6be58033ae31948a9594f49dbe7ed685df42c74148681cfc3f6633d41d7914a8d67da202330b346cff6ebff57c973558e2608fcf15dc6438b466a817af5785580150d374480b89d6fd203c361cb00c33dca94d4849cabb072cbd8921084e369e0fbc418892a387c6007b64a3dbd296d4a74a2b6dba79201237e896614ea02a4a64efb8522b25f16d146a4015f38a04d61652b0df54d25348521720db45fc188aef9ffe8282c7e06624b5ffe872321d0d750760e0c60794e45c9fd6dfbe8a6ead27d99efd4bf0ce5eab9a4a09d486d25cd8b1f6deba8a9611e664c0f765f00f1de5f45af0e555e606345631975c0520828b513c055fae610ae467d3b397a4a63408149680f2aca57c67c597aad2418705a9b87873d58d0f4525747717a6b605777e4c072b2f91a32d82150a6bc890bda0e53690cc400f78d73fc3b6e237f3881c6e20679042e33664a7e92021e4cfe5ea26bd1a6640ed21e872c544868ad31869e66981628f1cd8d3eb558e0e7598169e226a4d52baaf9f17bcd3d58b98b21242ca8b1f2e656eb67d704c61de0e569da5ec002af5e24221ed49bb6bee842f6a1926c3160ea88f6d1ff8f5c77e9e23ed48006b2c9d6bd91b0152c72c31b1b420e7b2c69f618f1c0886958a303299ffe7ef609000a986b329eea3135857d7df6bf11e201b14242039dbe071e4ebe16193ad03e840190f394d7c3f69b17fce61b1e88b8c08fa2369a6e067ffddeb6f54e4e2ad52965bc9461a59d8fca18039ef64b7a5ed6dd4ff4862d583027ff6d096d46cdd33e3bd3d7e405d505289b200c178aa27b51c07ecfb68a59f4bb30760a2daf37025b025cc16cbb70db2672d3533bb51cfa7f1c997d477b77d676203056159f8acaeabcacbac1917391f2aab888941ec1bc56d805def1c9e867cc95222cd0bf4a25a5a350acaa76ae31964113693ae9ef6bf7473016b191f0e85f1889e916347c3730c5fd9639699dc8217cfcdd4c1fc0541f4be40f39f1c7cb76b07044889c832de3459daaf2f3f6e2beb7ed3c34a4cdf18e22bcf77213d59e4294be1dbb68244cfff70e777688bf3004c2ae8faeb824d016bc3e0ef9f71323f5123b2ec6f27f0eb6dce02b84d03803ede9b76dd010cbc4b50e24c98a4c6f4230675060c4c3d699ccc275f9659483a43f9e4e6dfb4b9603823c812248575b482e9e6b8204304fc63ba7bb64e064c0c72ff4bac06d7e20807a6a2d27292327da55c3a6fbd396509471ac656a7199c2bf47e09ba0ad8d744b3d9da5b6ed99b2c448bf23b452a2623ac91ad90d5c65b623d5e0045abea79150aea9c18412e4e53033a48e01c7dd55c1026b56022548ce5530b7c5cb7fa49b045d69b7cb13682ef6b908c68e372e4665293af6edf0a5cef514203ba168a5453520c99c8902c9f8ccf0af9d57069364c090dc56ef0656af9c5d3ad7b4cf5dc455adea8ff54966081ba7eeb4dd542ebee799ed79cfcf0f2395e7102d8d2d422ed8f4dfceb0b3ee38db070779b5ecd619cbdf5d795768648d94d7add5471fd6b5d84b0f148997239ba1e2fdb467a8db7a2a151330160a1c5de6602b8486909ce90045edee45d2e6d4cea5e6e9f91e984359e626fe8eccb6b2f1e259629d374de53771c1a0eb87c9d9fabea4f9f8f76b60b287017599bcc2aedb6f78bb3b4f051dc3fb37ea9f87a65a71544bea31f9e5b9fc530b7b3e4f83c00bb31707b9b6d4d7d4ddabe8ad7dad1f3485611ddb5b0a7f75b0fa14795c970a219161916a9cf8ea9d3d3f09e8b7e91d8b8a465d0c50b2daead8716646ffb0fb9f0e1408d840f5ff6c07c0e31871074f0eb4d713edf93b95051bab80b96ee73e2988a4cbf0fd2482de338dfca3c186ca9a465754a619b060021e928ac1a4bac0f782f433be5aaac797fe8c54fb6b4e02c02995bb90bf3413b5df59768b025653a074917d532fddab80d643122a1d1d3043089b4a5b790fabafdd361963160aeab2a86d44ca09da6d08680af078cb2c08e35932ba27611dd7b209f7cb16801b6e0998fd12f5348d7ef2ff1823bdf1181acd79dafacf7b9edb497ba6accaf4587d8a6"}, {0x18, 0x115, 0x9, '*E'}, {0xa8, 0x10a, 0x2, "143065a47305c67251111bb68df55ad1366a102130f6b42d0b525e40d0f33a3a8163c664e6e0ce36b8e910bb3f2038994aa05793bd4e13f338c15c0b5a6b701d75dc318514f5c7fb67aa29392944fe27ed36694219ddde7325f22f32f3399bc192a7bfd59807beeba71f8cd5b5ee590cbbb1b9d8bad77c197204b4a41cf6b5874457b6b521ada500b014a7afe8399c1a05f4ecfe11a61fb9"}, {0x18, 0x112, 0x8, '-'}, {0xf0, 0x110, 0x1, "7e8908fabf6cd415ee5f1ca2213219013a63c65d16258ed58b0d0913e89ca0e16e622c11e71523a2bbd51074d64cbc0aeb794162f3e2dca4f0e7ae8fe518b5c549f213759fc8fb1c91713615ff81affe3745c5b44feff6b1469406f41f74a29454eeb2b323e9e14113b0b1c1f1a0926d981dcae98f06dd4b1eadacb8bf074f91ad32eeb92a5c40ca8ef512f55b08ae16dfe56951fd8450cfbe094564b45cc959d7b94adb00b40b57073d1e0c455fd9e021a00ec935cb32b2bbf7f58c3b9cffc19d0d6fb130323d6670c0625178e59702649ce0231f20b4e873"}, {0x48, 0x115, 0x8, "9675dec6291199f371eef43b68398a57d2118bda72f43fa905b2a6bf604bcf8c36af3d46803cb097ea7dc32280d9a07330a6"}, {0xf0, 0x115, 0x4, "c67bb94c8badcdd96e028ea665cdf38fe11dcb58c479973b88dcc21e2849084997c3f9de728594b4b0a8207163349da9af8047c5740cd129aac8bcf70b629f1f55cfbec674bcdca1b63f7c2832969585800f748d2f648beb9822ac4082f045e96a5cc70f4d256f185ef8f54a5b64b6c03c4645ed5986daa2c7a2355603bad50a5578244d6c7b439bc7b11bffe692695e41ee70cd7b40a428111d7a8f3028fcedcf3af3d679d956fc2867e90248eb7c6df2fcd88ed27894191e34a7794c613425b73bfde6817bb2dd03fc67001eb60be32e74302d0ec8fbf3bbf10d00"}], 0x23e0}, 0x8850) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r1}}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x4, "c6bee303"}, 0x0, 0x0}) 31m34.672494424s ago: executing program 2 (id=831): syz_open_dev$video4linux(&(0x7f00000000c0), 0x7f, 0x101000) (async) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7f, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001980)) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001980)) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) (async) socket$inet(0x2, 0x3, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) (async) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) (async) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) socket$inet(0x2, 0x3, 0x6) unshare(0x28000600) unshare(0x26020400) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x416d40) 31m32.920311598s ago: executing program 2 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r4 = fcntl$dupfd(r1, 0x0, r1) write$tun(r4, 0x0, 0xa2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10201, 0x0) close(r8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 31m32.83224898s ago: executing program 2 (id=843): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="74000000020601020000000000000000050000060500040001000000180007800c000180080001407f00000105001400050000000900020073797a31000000002400078008000a403d705dadd851ce7300000eb408000a4000000008050003000500000010000300686151124424702c6d616300"], 0x74}, 0x1, 0x0, 0x0, 0x40040010}, 0x2404c080) r1 = socket(0xa, 0x3, 0x3a) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = dup2(r7, r3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f00000006c0)=@v1={0x1000000, [{0x4, 0x3}]}, 0xc, 0x1) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=@delqdisc={0x2f0, 0x25, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xb, 0xf}, {0xfff1, 0xffff}, {0x7, 0xfff3}}, [@TCA_STAB={0x150, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0xf, 0xa2e, 0x403, 0x2, 0x586, 0x7, 0x3}}, {0xa, 0x2, [0x7, 0x27a4, 0x8]}}, {{0x1c, 0x1, {0xe, 0x1, 0x1, 0x6, 0x2, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x80, 0x5, 0x7, 0x1]}}, {{0x1c, 0x1, {0x4, 0xfc, 0x6, 0x54ae, 0x0, 0x5, 0xe, 0x3}}, {0xa, 0x2, [0x5, 0x6, 0x8]}}, {{0x1c, 0x1, {0x0, 0x3f, 0x7, 0xd, 0x1, 0x7fffffff, 0xed71, 0x7}}, {0x12, 0x2, [0x7, 0x1, 0x9, 0x5, 0x24ff, 0x7, 0x2]}}, {{0x1c, 0x1, {0x2, 0x9, 0x5, 0x6, 0x0, 0x6, 0x8001, 0x3}}, {0xa, 0x2, [0x0, 0x2, 0x3]}}, {{0x1c, 0x1, {0xfc, 0x5, 0x6, 0x2, 0x2, 0x4, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x9, 0x1, 0x3777, 0x2, 0x8006, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x3ff]}}, {{0x1c, 0x1, {0x2, 0x6, 0x5, 0x14, 0x1, 0x5, 0x55, 0xa}}, {0x18, 0x2, [0x7f, 0x6, 0x100, 0x66a, 0x2, 0x4, 0xd9a, 0x63, 0x9, 0x1]}}]}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x7, 0x9, 0x0, 0x2, 0x7, 0x4}}, {0xc, 0x2, [0xf95, 0x0, 0x40, 0x1]}}, {{0x1c, 0x1, {0x48, 0x9, 0x865c, 0xffff04ee, 0x0, 0x8, 0x8, 0x8}}, {0x14, 0x2, [0x1, 0x3, 0x8000, 0x1, 0x2, 0x4f, 0x7, 0x6]}}, {{0x1c, 0x1, {0x9, 0x5, 0x2, 0x800, 0x2, 0x501, 0xa1f, 0x8}}, {0x14, 0x2, [0xedd, 0x3, 0x0, 0x0, 0x6, 0x16, 0x8d51, 0xb]}}, {{0x1c, 0x1, {0x4, 0x4, 0x1, 0xff, 0x2, 0xfffffffe, 0xfff, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0x3000]}}, {{0x1c, 0x1, {0x8, 0x2, 0xfff, 0x7fffffff, 0x3, 0x100, 0x4, 0x2}}, {0x8, 0x2, [0xfff2, 0x0]}}, {{0x1c, 0x1, {0x96, 0x0, 0x8001, 0x4be, 0x1, 0x401, 0x0, 0x5}}, {0xe, 0x2, [0xce, 0x80, 0xf40, 0x9, 0x8000]}}, {{0x1c, 0x1, {0x7f, 0x7, 0x4e2d, 0x3, 0x1, 0xd26, 0x2, 0x9}}, {0x16, 0x2, [0x2, 0x3, 0x4, 0x1, 0x8, 0x4, 0x2d2, 0x899e, 0xd573]}}, {{0x1c, 0x1, {0x4, 0x5, 0x8, 0x6, 0x2, 0x9, 0x3000, 0x4}}, {0xc, 0x2, [0xc, 0x4, 0x2e02, 0x84c1]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000140)=0x1, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000580)=0x1, 0x4) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_BEARER_ADD(r12, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80020000", @ANYRES16=r13, @ANYBLOB="000427bd7000fedbdf2515000000600005800800010075647000540002800800040003000000080004000a000000080001001500000008000300ff0100000800040005000000080002000500000008000400080000000800040006000000080003000900000008000200000070b714000980080002000100000008000100030000004400038008000100ff0f0000080001006f110000080003000200000008000300b19400000800030001000000080002000300000008000200f5ffffff08000100070000006c0005801c0002800800010003000000080003000000000008000400938effff24000280480001000a00000008000300010100000008000100020000001c0002800800040001000000080002000200000008000400080000000c0002800800020006000000740001802c0002800800040001010000080004000600000008000300090000000800030025000000080002000e000000100001006574683a62617461647630001c000280080004000400000008000400dfffffff07000100080000000d0001007564703a73797a310000000008000300ad000000880001800d0001007564703a73797a30000000001400028008000300050000000800030009000000080003000700000038000400200001000a004e24000000a9fe8000000000000000000000000000bb100600001400020002004e207f0000010000000000000000100001006574683a6e657470636930000d0001007564703a73797a30000000002c000580080001006574680008000100756470000800010065746800080001006574680008000100657468001c0002800400040008000200ffffff7f0400040008000100ff0f00000400018000000000000000"], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x4044014) mq_open(&(0x7f00000004c0)='nl80211\x00', 0x1, 0xa, &(0x7f0000000500)={0x0, 0x7, 0x1, 0xffffffff807acadf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00210000000000000000070000e5373526a0"], 0x1c}, 0x1, 0x0, 0x0, 0x4048850}, 0x0) socket$igmp(0x2, 0x3, 0x2) 31m32.539409379s ago: executing program 2 (id=845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x2f) r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 31m32.268111119s ago: executing program 32 (id=845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x3, 0x20, 0x10000000fffff}, 0x2f) r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 17m32.619131795s ago: executing program 0 (id=4066): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x5dc, 0x8500) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="7f000000000000004b"]) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000100)={0x14, 0x16, 0x301, 0x0, 0x0, {0x1e}, [@generic]}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000010000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f00000100"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000001c0)=0x2000, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r9, 0x0, 0x0) preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x4000c00) 17m30.155381386s ago: executing program 0 (id=4074): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1}}}}}]}}]}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e740009058b5e"], 0x0) 17m28.727357217s ago: executing program 0 (id=4079): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x90, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002000010300000000008000000200000000150003020000000500160004000000bf60"], 0x24}}, 0x44004) sendmsg$nl_route(r5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/96, 0x60}], 0x2, 0x0, 0xfffffffe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x82, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000300)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$alg(0xffffffffffffffff, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="7e0bb7f8", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="9c9c", 0x2}, {&(0x7f0000000300)="922b", 0x2}], 0x2}}], 0x2, 0x4000) 17m26.146407724s ago: executing program 0 (id=4090): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="e8924d7e487f87896c4757aeac19473cb480701164015d0b71178d32752d9afc8d86a35708a45844dd13b4a91c932e5cc6671f86c2cc98e91b2cc185a069b3cfc27d68a58d383322f7c78ce72003f9db394340b322bcd796ed8d42f90b9c6bb21014f5f56396bf6afc540031f78f24b0426d366725b93f7bd7bbd97c3e2e1df4ebb39ff6757ea7794953a8b54d3e56fb58bf3c03c02a7e7a9f151d239446bb43e919728f341f7620513c606a402b90aeb874478b626c938bed60583d65495bb7fd0e974ea836de981fb59ca40208469d75f9ff33f398d02e7fa1", 0xda}, {&(0x7f0000000400)="77a467d61f69e6301abc3317cffc3eb95d38516b9811aec0d73991936e6fe0bea9a8efe850eb78387c198cdca42cb710c653c68b6f091755d400a75c90e535138b239be3a835749427583f14a1186f5c7be375634f181feaf4", 0x59}], 0x2, 0x7, 0x7, 0x4) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x3000000, @empty}}]}, 0x110) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000400000009000000dc0c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/15], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f00000000c0), 0x275f3b0249a66392}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000400)='u\xe9d', &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x200800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0xc01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000000600)=""/4099, 0x1003, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x10}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) 17m26.014790844s ago: executing program 0 (id=4092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xffff7ffc, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "ef842b2c205d5b8d", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)}}], 0x1, 0x2400c040) 17m25.154878921s ago: executing program 0 (id=4096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6c1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, @in6={0xa, 0x4e23, 0xffffff07, @dev={0xfe, 0x80, '\x00', 0xd}, 0x3}]}, &(0x7f0000000240)=0x10) (async) socketpair(0x9, 0x800, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r4) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000300)={'pim6reg1\x00', {0x2, 0x0, @dev}}) shutdown(r4, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe}, [@alu={0x7, 0x0, 0x0, 0x8, 0x2, 0x6, 0x10}]}, &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x37, &(0x7f00000003c0)=""/55, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xf, 0x6, 0xffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x1, 0x9}, {0x4, 0x2, 0xb, 0xc}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x4, 0x6, 0x4}, {0x1, 0x2, 0x4, 0x1}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x4, 0xe, 0xc}, {0x3, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0xee5c}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000780)={r5, 0x0, 0x51, 0x0, &(0x7f0000000640)="c818f216faa2981e243595d1f7d173903e3cdf3dbe295b0d329818f44ad11fe6e2264e8e64104aff5a5fc26b46dfd2bcc5f42781b56fb3252b415fc36ee10827f0e428c7bc8a0dfbdd77c99eb81e846dd3", 0x0, 0x1, 0x0, 0x83, 0x0, &(0x7f00000006c0)="d90a15822fdd078fee34f68d1d7395e1b49c8e088487758f33f4368a451b5a1bf4ae65c4f1b32a5f20611e4be564abd0e996a43f9c1b7cbdb45e53127b30d416665c554a2f095e7bf8f7ee3d128a61ccc50e10eba3c3545d4f864becb1a673ad4971b0d2a8c5415ff05707c614057dea47d68c7bf8ac2b00fc28646be63391e35704ea", 0x0, 0x2, 0x0, 0x3}, 0x50) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x5}, 0x90) (async) r6 = syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0xfd, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "52e3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x828, 0xfa, 0x8001, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x2f, 0x88, 0x5, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0x1, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x8, [0xa, 0x1000, 0xf91e, 0x3, 0x951]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x60, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x53, 0xe, 0x1}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x250, 0xd, 0x4, 0xa2, 0x0, 0xf9}, 0x3b, &(0x7f00000009c0)={0x5, 0xf, 0x3b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x24, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x9, 0x0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0xb, 0xf4}, @ss_container_id={0x14, 0x10, 0x4, 0xb4, "b65c48fffed0804f8ed5118357b46156"}]}, 0x1, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io(r6, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x0, 0x2, 0x4b, {0x4b, 0x7, "108459e7920f6173523b2f49d9f75f1ad868fa4cde32c4c86b02b08a0cc88f0b48cce88504dd9df5cfd6c2363a9b0e65ac7361a7dd5d8d45827764a661ed0520f9a95840b869bf056d"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c1e}}, &(0x7f0000000b40)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a14534ba8fd5e434cd2341bc05e61f8d"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f808de8291d2a0cf17df522f609ab3ed"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7, 0x8, "10f52b13", "7754d485"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0xbc, 0x0, 0x4, 0xdb, 0x2}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x20, 0xd, 0x54, "c4da79a6b88327b5dc46a67fda2a0f4c420574847f014499067fb3c2fb3b35b32adf50d6177da224162dc0c29e5cfb4d5bdf1af7a1adeb1c74f676339c161c5373a322a862ba4fe455eba139a69c5b3d3ae145e7"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x60, 0x80, [0xf00f]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xa44}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x13}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "16f4"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "2692"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x1e, 0x1}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001140)={0x5, [0x3c, 0x7fff, 0x9, 0x0, 0x5]}, 0xe) r7 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001200)={r2, 0x1c, &(0x7f00000011c0)=[@in6={0xa, 0x4e21, 0x3, @remote, 0x7}]}, &(0x7f0000001240)=0x10) socketpair(0x25, 0x4, 0x8, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000012c0)={0x0}, &(0x7f0000001300)=0xc) r10 = getgid() setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340)={r9, 0xee00, r10}, 0xc) open_tree(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0x800) syz_open_procfs(r9, &(0x7f00000013c0)='net/fib_trie\x00') (async, rerun: 64) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=@bridge_setlink={0x78, 0x13, 0x800, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x2000, 0x800}, [@IFLA_PHYS_PORT_ID={0x20, 0x22, "951f3ce8a8ee7f1631410f39995b603c4cced3320a66a852989f9242"}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x81}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x4001) syncfs(r3) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) 17m24.354393887s ago: executing program 33 (id=4096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6c1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, @in6={0xa, 0x4e23, 0xffffff07, @dev={0xfe, 0x80, '\x00', 0xd}, 0x3}]}, &(0x7f0000000240)=0x10) (async) socketpair(0x9, 0x800, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r4) (async) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000300)={'pim6reg1\x00', {0x2, 0x0, @dev}}) shutdown(r4, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xe}, [@alu={0x7, 0x0, 0x0, 0x8, 0x2, 0x6, 0x10}]}, &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x37, &(0x7f00000003c0)=""/55, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xf, 0x6, 0xffff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x1, 0x4, 0x1, 0x9}, {0x4, 0x2, 0xb, 0xc}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x4, 0x6, 0x4}, {0x1, 0x2, 0x4, 0x1}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x4, 0xe, 0xc}, {0x3, 0x4, 0x2, 0xa}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0xee5c}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000780)={r5, 0x0, 0x51, 0x0, &(0x7f0000000640)="c818f216faa2981e243595d1f7d173903e3cdf3dbe295b0d329818f44ad11fe6e2264e8e64104aff5a5fc26b46dfd2bcc5f42781b56fb3252b415fc36ee10827f0e428c7bc8a0dfbdd77c99eb81e846dd3", 0x0, 0x1, 0x0, 0x83, 0x0, &(0x7f00000006c0)="d90a15822fdd078fee34f68d1d7395e1b49c8e088487758f33f4368a451b5a1bf4ae65c4f1b32a5f20611e4be564abd0e996a43f9c1b7cbdb45e53127b30d416665c554a2f095e7bf8f7ee3d128a61ccc50e10eba3c3545d4f864becb1a673ad4971b0d2a8c5415ff05707c614057dea47d68c7bf8ac2b00fc28646be63391e35704ea", 0x0, 0x2, 0x0, 0x3}, 0x50) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x5}, 0x90) (async) r6 = syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0xfd, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "52e3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x828, 0xfa, 0x8001, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x2f, 0x88, 0x5, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2, 0x1, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x8, [0xa, 0x1000, 0xf91e, 0x3, 0x951]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x4, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x60, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x53, 0xe, 0x1}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x250, 0xd, 0x4, 0xa2, 0x0, 0xf9}, 0x3b, &(0x7f00000009c0)={0x5, 0xf, 0x3b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x24, 0x1}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0x9, 0x0, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0xb, 0xf4}, @ss_container_id={0x14, 0x10, 0x4, 0xb4, "b65c48fffed0804f8ed5118357b46156"}]}, 0x1, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io(r6, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x0, 0x2, 0x4b, {0x4b, 0x7, "108459e7920f6173523b2f49d9f75f1ad868fa4cde32c4c86b02b08a0cc88f0b48cce88504dd9df5cfd6c2363a9b0e65ac7361a7dd5d8d45827764a661ed0520f9a95840b869bf056d"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c1e}}, &(0x7f0000000b40)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "a14534ba8fd5e434cd2341bc05e61f8d"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "f808de8291d2a0cf17df522f609ab3ed"}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7, 0x8, "10f52b13", "7754d485"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0xbc, 0x0, 0x4, 0xdb, 0x2}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x20, 0xd, 0x54, "c4da79a6b88327b5dc46a67fda2a0f4c420574847f014499067fb3c2fb3b35b32adf50d6177da224162dc0c29e5cfb4d5bdf1af7a1adeb1c74f676339c161c5373a322a862ba4fe455eba139a69c5b3d3ae145e7"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x60, 0x80, [0xf00f]}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0xa44}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x13}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "16f4"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "2692"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x1e, 0x1}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001140)={0x5, [0x3c, 0x7fff, 0x9, 0x0, 0x5]}, 0xe) r7 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001200)={r2, 0x1c, &(0x7f00000011c0)=[@in6={0xa, 0x4e21, 0x3, @remote, 0x7}]}, &(0x7f0000001240)=0x10) socketpair(0x25, 0x4, 0x8, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000012c0)={0x0}, &(0x7f0000001300)=0xc) r10 = getgid() setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340)={r9, 0xee00, r10}, 0xc) open_tree(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0x800) syz_open_procfs(r9, &(0x7f00000013c0)='net/fib_trie\x00') (async, rerun: 64) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)=@bridge_setlink={0x78, 0x13, 0x800, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x2000, 0x800}, [@IFLA_PHYS_PORT_ID={0x20, 0x22, "951f3ce8a8ee7f1631410f39995b603c4cced3320a66a852989f9242"}, @IFLA_ADDRESS={0xa}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x81}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x4001) syncfs(r3) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) 15m50.811386507s ago: executing program 4 (id=4306): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x100) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x4) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000ffd62017cb40000102030109022d00010104308609040000010301030209210400050122ce0f090581030000fe090d090502034000100201"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000880)={0x40, 0x12, 0x37, "862cfc08c1dae1eaeaaa35c7c42fa614b516acf89a1e7e0de4405ee3fc1ce0d9ae37ecfb4d269d6ee33711df0200000000000000db743f"}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0xc8}}, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @my=0x1, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x0, 0x2}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r6, &(0x7f0000000580)=[{&(0x7f00000000c0)="396c737d6e0ce504fc6b4e4712fb5b2c9faf3ba908cbc131b06850dd14930ee9f61e71646f0ae65de49968a54ec6a381f3ae218a50578711b34630a848a68eb69f000a82f4513d8f02536f5d0aa83248d737a7fa8cc5da894940fac93e8ecdb0140c1ff7c1b016d556b1c712787ce23a25c1987733499c6fb818943c8e4f3a821c1d8778e8b5bb702ab1acab3089ba924671202d6472", 0x96}, {&(0x7f0000000240)="14554b8b84a13380acc3390d1a49f918c6720e5a607bd2dc3b5422e6489366b2c017d24eec060a5acf0fe036c353bce810d7aeeaea49c29e460411731b55", 0x3e}, {&(0x7f0000000ac0)="ff83d728f41b74eafdfa0dea39799bcfced0433e6c3ee9eecc77c5d85af12c92b0f0e980a643afb48be9c00053be310ebcff1b4eb9940c25b5a013b2e0edf610f5dd13463de0570ce5d9926026b8db69e84eabe02a55f55f9c65834228db6321828dff80c49725db57df8e4b61bcffa18ea751a991f2f0f900934f85af51455dd21cdad25ff4b72c40477af16358f7961a9b7b87bca9815c4427694c6edb", 0x9e}, {&(0x7f0000000280)="24ca958fb0b5739cb0e251a8337c1dc3662a8e8e8b6635c43ad6751e16525a45fc7c958fc5165c032f9fd0ea7e44563d70456ab0fd564163a7733b289f6063463bde0f1ceab93834f4290570df954abc38160037e0ca810b176cb078da6acaa04a5175b29202001ec13721453aa9b57223da797979d9a816cf40b4a3bcc871d87d566d20e0b8b13786280354d8cdda507260d5ff0deadd24710d35268220361f897baaf2a8df5c02bdcc7d1ee187f4bdb40c38e8100b15d6038cfd729dbe75d72a29409d303844456bf5694a3030b31a32cfbbc33de1000d5738238f4828eff12bf97e4710ad896defaab892dd5d0ac989ef95188914eb13", 0xf8}, {&(0x7f0000000400)="338c65ab157fb1e14abb6a6fd29f2bff4a3923d8475d4cfb67fd6cf8dae40d3a982203c615365fc218a46a6ca70787a4a1140733b6fd56c9e679b367a704d045970a8d2d4f7a3c058e1ce7168555c3457953c1e30c0f587077b5ff9e19cc3f9133e677cfffb2e441418137b764acf10adc81081213b93e336a7a8257eea83a1c82b815af08a3ba13e6ecf747b4fbd33c1ff204db6c33a9f61d5b8ac17cf9b7d96ca5b6e16e5e5c57f4717159e70bcff2cf8f286efcc30b6f5814322fb48acf80c34e8acf9b4b6bab39f392006713938f51e2fac91d0a720078442bc509", 0xdd}, {&(0x7f0000000500)="63d12619ec59030c0bb3a001fda0ce57ffaee0389634d012f8526ae8cee14e506a13a084ae5ce991cca82a37791224de25010b315d2691083cfd6dc650b53b6d3a64b9e75520bd08b099f559e92bfbc1b8556eb97817983ddb4b932d", 0x5c}, {&(0x7f0000000380)="5cc7f9ba07d7a5e7202c299c4efb1de7c5af04", 0x13}], 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="13528a844115a79e99838b0aee3524446cb22ba43f0c1bfedd95b92098bcdb779fa5bf74d059ff03a9b8f1a9bf2406b4b05703e94e0e37637bd57c88d11d04a985522ae19e95e1a1915a73ac2a6b3f0a681a9ec067415308342be435d16db7a28d8de1b5bfadd0bf7767b7226df559088cddf89b5eb52248b7a41344f7c607a503b7c016367f581eb54b5292221b76dcbdad4bc7a4f144fc0d0453d3ecbc651c4cfce1f9a3e6d46e49e67847", @ANYBLOB="4f9783aaa26c0b60517ddf8753a8d451d56406dd", @ANYRES8=r3, @ANYRES16=r4, @ANYRESHEX=r5, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRESDEC=r1], 0xe4}}, 0x0) 15m47.59908954s ago: executing program 4 (id=4315): vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="c448945054ad0c07a3b24a68e9c7866c10d8d28d13af0486271aa6263e916ac55ed8fcf31703acac04b3820eafcb7c5528654bd466952782673ac7cf881494531c3f0db2ad68d83535c05d90dcbf722b0f9fc550058175c4ea6ac1e10d32785b488c231172360bc372f63f59960c00295d0b59e4848e978a11fc8aee634a47dc761e250f06552126b901ad1030a4fd2668f71c8f01fcbf0b31cad3f6cc8c061460149270e2bdb417bd", 0xa9}, {&(0x7f00000010c0)="e786888e7df8eb02e798028c960dc238124c9b", 0x13}, {&(0x7f0000001100)="7d7f5a20aa2f7b4c400edf013258142edf51a153ec48c5b89369d9a5fc49cfcc63f73560ee31515e3bdd5a4941dc75279df11bd76a2b7373cba30d7c63618dda3e682a260a137bb1d1bbbf17f42ed8b2c0f1f8060f28caa5a25fd32db378284f58a6526d406fbfc0f1d2dbc72e3c50b9193c756fe785", 0x76}, {&(0x7f0000001180)="894c1e241aedb84501cb675cab86e9c7cb030f75b0461c8de7", 0x19}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="eaf872da8882d7bcc9b9f03d8c10616b1b7d39819aec638da04753ce10a7f7bd567ac6ea514251803a261a8090e59a22f80c8100098e459dd3a43ae4d88175", 0x3f}, {&(0x7f0000001240)="095bd63f83da19ee199dd7235aca58ad3636f62e95f00aaee5fc168ceb200dc24285887bb9", 0x25}, {&(0x7f0000001280)="418c89f66e369fa3297e103ddadf5487244212ac58dfecd89bcb73b1305836d53fe8d84cc993762b60edbe33e3296b65731ce0f1dd963701477e25e884027f2a31c9a888ed8263c8e4c3ce98c939f1b0233291f9ee36ab0d298121edac6fb92074dc0bbee4e4c070c37419d96b6091fdf907369b9d32eaee63d82e4f1b1a35412ccc16260b799471d1f5d9ba923472632e4ea118e6366e11d702b93af9db6de195c6577f44f3a7d3c0f847985aaa49dc69f5c3b42b07915a0ea346", 0xbb}, {&(0x7f0000001340)="80b74aff7b145a7acc054642407aa79d55a1bb4202f72061f28120165325ce5350810c13190e42d21848e47b86e6df492b1f708e61c18d1cac66e0ae913fbbb8017ce5f0bf88832a7aa4cf43afe5871329e349d8169af2f82503ee715b875cff", 0x60}], 0xa, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001480)={'caif0\x00'}) splice(r0, &(0x7f00000014c0)=0x3ff, 0xffffffffffffffff, &(0x7f0000001500)=0x5, 0x6, 0xf) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001540)=0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb}}, './file0\x00'}) r3 = dup2(r1, r2) pipe2(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) sendmsg$xdp(r2, &(0x7f00000019c0)={&(0x7f0000001600)={0x2c, 0x8, 0x0, 0x36}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001640)}, {&(0x7f0000001680)="2731840716740319236a5d2d32ed9e200918ed88e0e72df59095c79a425b3a0ad0e8a4c14d2ccb8a226dfd5ea2a8021b5cfd9fc32ca999e5e87b9bf5cd5b00544bf597b646d9a5408e21850065c2394463d9bdb0bdeb04a703f7ffa0242fa3293fb5c7de53192bf97754d774b6c33b01d5a9224ed56f4ac179af95970f52247f4a39b51ebf3a7beca4104bc6e7402b46f34b2ac3753454e4f425bd1a3a62cedd8fe37abaeb3207e056810e0b8e526100444dadee65eca4ad87d3f2a1131134cbe33ed9161d31da58c35d8d39a6f6e33c1bc01fe50cfd9f0165bdcc209f8681c0d01b31505376c51bb04ab9de00a6da4142f362d405e4", 0xf6}, {&(0x7f0000001780)="194ddcd079b14aa3804401b65f0c3d454f8cfbb1e81fc9c33d588f81aae6d40efc25ef61a551cc6faa30d4be4ff904f849cfc075af3dcfd12867e8b4f5008b836a065809eb856c1020b1cbcbbd03a8882f745f554e134b54c60af23012dfeb83ce9b2d9dbb64f48666d1dd11af6c25bd571dcef475b1b03c59c309b06c611075fe3ab6bee1e2ac90376ab06a81d52b700bee505011ce0a7009c238493ade4a2f53f5d3d91023751e09e51cbc9b3842564fac191929bdab23f8af28c0dc4e8478485db758778a33ff3757c48cef2f5c1389f23a17ad6057f317dd05cec7506228d0006daaaa5da57071ffb495c773b4", 0xef}, {&(0x7f0000001880)="da6758d2528e3227777e9801d3788a80d66ac1024fa267c5", 0x18}, {&(0x7f00000018c0)="7e6cd5ad03f3ab28410f32dc083edbc7a344e2faf302b4bc3a3860bac7f2659e4dd4096563bac0fe43db05d1c7fb8cb07e21d029dabc7a42152574c0498ccf066f01fff4daed0c5a88d01675a426e9a52a24", 0x52}], 0x5, 0x0, 0x0, 0x4000}, 0x20000000) syz_emit_ethernet(0x2c, &(0x7f0000001a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@mpls_mc={0x8848, {[{0xb}], @generic="10367cf6837d735ddc5fc1fd3fa930fb96590466bda60b00bbab"}}}}, &(0x7f0000001a40)={0x0, 0x2, [0x7a2, 0xa45, 0x7a6, 0xb8e]}) getsockopt$inet_mreqn(r3, 0x0, 0x7, &(0x7f0000001a80)={@remote, @loopback, 0x0}, &(0x7f0000001ac0)=0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', r6, r4, 0x4, 0x3, 0x3}, 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001b80), 0x199001) write$tun(r2, &(0x7f0000001bc0)={@val={0x0, 0x8848}, @val={0x3, 0x0, 0xb71, 0x4, 0x8001, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mcast2, @random="a9ffc9cf0536", @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x42) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000001c40)=[@timestamp, @sack_perm, @window={0x3, 0x6, 0xff}, @sack_perm], 0x4) accept4$tipc(r5, &(0x7f0000001c80)=@name, &(0x7f0000001cc0)=0x10, 0x0) mkdirat(r3, &(0x7f0000001d00)='./file0\x00', 0x112) fsopen(&(0x7f0000001d40)='adfs\x00', 0x3b90675379c7d870) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000001d80)='veth1_virt_wifi\x00') connect$l2tp(r3, &(0x7f0000001dc0)={0x2, 0x0, @local, 0x2}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x8000, 0x8a) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r7, 0x541a7000) rt_sigprocmask(0x3, &(0x7f0000001e40)={[0x9]}, &(0x7f0000001e80), 0x8) preadv(r3, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/194, 0xc2}], 0x1, 0x4, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) r9 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x67, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x44041) 15m47.533374549s ago: executing program 4 (id=4316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)='N', 0x1}], 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0xa, 0x10000, 0x5, "1afa86d32101b5128ed271c679583d00", 0x3f, 0x5}) readv(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) timerfd_create(0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000240), 0x0, 0x1000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 15m45.364533144s ago: executing program 4 (id=4320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000), 0x800) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x4, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x60, &(0x7f0000001100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r3, 0x0, 0x3) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002008000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000840)={"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"}) creat(&(0x7f0000000240)='./file0\x00', 0x122) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 15m44.230605222s ago: executing program 4 (id=4323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 15m43.424633672s ago: executing program 4 (id=4327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040c4109cea00d5000000001d0400000103000581030000000000e712ef0af2cfb1c2d14a4f8dcd6c83f300"/61], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f00000017c0)=[{&(0x7f00000001c0)="5c024d9fadbffd5a3024622199918c6e3131c453e9e0255d34fe790753c81b2d3fdb2b9c17e589cf564835d9783c2a5b6baeac1813f9cb1ac65bdab7da2953ab7da6aca4c093d10a4ad7746a", 0x4c}, {&(0x7f0000000140)="c7fd41eeddf0cec2e742cc6c4d058c8a44ff49b28c7d4353a2d2424412e9e912", 0x20}, {&(0x7f00000002c0)="5a33103e4d52143acdd61dfec332dc6a9927c01bca9e096691cb744dcab9c6a8f0f43fd9c678", 0x26}], 0x3) 15m42.935033364s ago: executing program 34 (id=4327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040c4109cea00d5000000001d0400000103000581030000000000e712ef0af2cfb1c2d14a4f8dcd6c83f300"/61], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f00000017c0)=[{&(0x7f00000001c0)="5c024d9fadbffd5a3024622199918c6e3131c453e9e0255d34fe790753c81b2d3fdb2b9c17e589cf564835d9783c2a5b6baeac1813f9cb1ac65bdab7da2953ab7da6aca4c093d10a4ad7746a", 0x4c}, {&(0x7f0000000140)="c7fd41eeddf0cec2e742cc6c4d058c8a44ff49b28c7d4353a2d2424412e9e912", 0x20}, {&(0x7f00000002c0)="5a33103e4d52143acdd61dfec332dc6a9927c01bca9e096691cb744dcab9c6a8f0f43fd9c678", 0x26}], 0x3) 9.3514502s ago: executing program 7 (id=8160): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffa}}, {@blksize={'blksize', 0x3d, 0x600}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x21}}], [{@flag='silent'}]}}, 0x1, 0x0, &(0x7f0000000180)="931965f7b048c0e17541895c61f62f22ec3d741cc73a431c42cc0ce56d9425645eaa371e95ccd0d8e60a06f212d77bafbb04379810ab4e92fdd943f7a3880118f7d5bb2fb22bda0fb30953d532b54776f358ecf0359ec0a26377c66f29d367775fe90fd8480133e11072795773ce0eec5af14f4fd6e728ddc0ededa475294df052073bd905a6ae523eef216bae9e1b876b06f018bc20c9136ef36778d0688e2af774e56f804395ac123a7e2e0f5578b6f9aedcedb6cacd53b8bab5cce80d230add8673c930636b0c7a9812b302eb84b6f83a7698de96d7dcf720") (async) r1 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(r0, r1, &(0x7f0000000380)={[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000400)={[&(0x7f00000003c0)='\'(&-,*^+%-%,]}#!+\x00']}, 0x1000) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000000500)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[r4], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) execveat$binfmt(r5, r1, &(0x7f0000000700)={[&(0x7f0000000680)=')}\x00', &(0x7f00000006c0)='silent']}, &(0x7f00000009c0)={[&(0x7f0000000740)='\'(&-,*^+%-%,]}#!+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\\&*).\x8e\':]\x00', &(0x7f0000000800)='fuse\x00', &(0x7f0000000840)='\'#{($%s+%\x00', &(0x7f0000000880)='user_id', &(0x7f00000008c0)='allow_other', &(0x7f0000000900)='\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='\x00']}, 0x400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a40)={r5, r5}, 0xc) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000a80)={0x10, 0xb, 0xe}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) (async) read$FUSE(r5, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r6, &(0x7f0000002b40)={0x20, 0x0, r7, {0x0, 0x34}}, 0x20) (async) r8 = add_key$fscrypt_v1(&(0x7f0000002b80), &(0x7f0000002bc0)={'fscrypt:', @desc2}, &(0x7f0000002c00)={0x0, "0434a5a2f63d1392fa8034e3e75b6d76bbe48c67d56162856e42239e122b8f537b8683d2b4fe492de9163daee9a14a2853c7d0f46957c7f76515aee6c697ecf2", 0x1c}, 0x48, 0xfffffffffffffffe) (async) r9 = add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @desc3}, &(0x7f0000002d00)={0x0, "566a5ae0b1dfa5b9a18217a5e429634c37c3b340fdf8d5542c23bae13e38c5e4fdd35305c7208d50d7f0db4d0e4f40c1981f4ef18319d72aed37b93282b07422", 0x3e}, 0x48, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000002d80)={r8, 0x0, r9}, &(0x7f0000002dc0)=""/66, 0x42, 0x0) (async) ioctl$HIDIOCGVERSION(r5, 0x80044801, &(0x7f0000002e40)) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e80)='./cgroup.net/syz1\x00', 0x200002, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000002ec0)) (rerun: 32) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000002f00)={0x2, 0x8000000000000000, 0x3}) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000002f40)={0x0}, &(0x7f0000002f80)=0xc) sched_setattr(r12, &(0x7f0000002fc0)={0x38, 0x0, 0x2, 0x6, 0x7, 0x7, 0x4, 0x9, 0xfffffe01, 0x3}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000003000)={r9, r9, r8}, &(0x7f0000003040)=""/247, 0xf7, 0x0) (async, rerun: 32) ioprio_set$pid(0x2, r12, 0x6000) (rerun: 32) keyctl$search(0xa, r9, &(0x7f0000003140)='cifs.idmap\x00', &(0x7f0000003180)={'syz', 0x0}, r9) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000031c0), &(0x7f0000003200)) r13 = accept(r5, &(0x7f0000003240)=@un=@abs, &(0x7f00000032c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000003300)={{0x1, 0x1, 0x18, r13, {0xb}}, './file0\x00'}) 9.146660566s ago: executing program 7 (id=8161): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8947, &(0x7f0000000000)={'vlan0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS0(r5, 0x401845c0, 0x0) lseek(r4, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x4, 0xfc, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000800)="2f653db1", 0x0, 0xffffffff, 0x0, 0x1, 0x0}) r7 = socket$kcm(0x11, 0x2, 0x300) sendmsg$inet(r7, 0x0, 0x0) unshare(0x42000000) r8 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 9.068537677s ago: executing program 6 (id=8163): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/229, 0xe5) getdents(r2, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x10001]}, 0x8, 0x9e3fce895bc79c3c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x5) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) connect$inet6(r6, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffb}, 0x1c) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newneigh={0x28, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r9, 0x1, 0x6, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @random="43515bde5fdc"}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c085}, 0x4054) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.676801972s ago: executing program 6 (id=8164): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x804, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x35, 0x61, 0x31, 0x33, 0x34, 0x64], 0x2d, [0x66, 0x2, 0x34, 0x32], 0x2d, [0x30, 0x35, 0x61, 0x37], 0x2d, [0x63, 0x39, 0x35, 0x34], 0x2d, [0x65, 0x32, 0x38, 0x61, 0x63, 0x65, 0x39, 0x35]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller1\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x1, 0x0, &(0x7f0000000100)="087d5fadbe11727d296e955f3de5a920208830776f73e7d96c9a2f3a1252b237396ccce6492140f0473ff59b076c1186f33880df498c7a05d3cf11b122ea46dac8ba8350cb2bc432fb2c42d581f681b6da85fdede16d0841a005a7a47d96c73975413019bd167891") r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x12801, 0x0) mount_setattr(r4, &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)={0x81, 0x80087, 0x120000, {r5}}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x9, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0x1c, 0x64, 0x0, 0xb, 0x32, 0x0, @rand_addr=0x64010104, @broadcast}, "3297e3ba0fa8a2e7"}}, 0x2a) 8.163309899s ago: executing program 7 (id=8166): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x7ffe, 0x2000006, 0xe8a, 0x1, 0xfffffe0000000005, 0xfa11, 0x8}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x39}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x4, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0xa}, {0x1, 0x4, 0x5}, {0x3, 0x3, 0x7}, 0x9, 0x9f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x400000000008001, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x8}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000100)='./file0\x00', 0x7a) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) 7.967571909s ago: executing program 5 (id=8167): r0 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r6 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) sendmsg$tipc(r0, 0x0, 0x4) 6.807224663s ago: executing program 5 (id=8169): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9855899", 0x27}], 0x1}}], 0x1, 0x20044044) 6.560665451s ago: executing program 5 (id=8172): syz_usb_connect$hid(0x5, 0xffffffffffffff88, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1869, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x3f}}}}}]}}]}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0xa, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="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", 0xfc, 0x20040000, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @remote, 0xffffffff}, 0x1c) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, &(0x7f0000000500)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)=0x2) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}, {0x0, 0xfffffffffffffe93}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.363195365s ago: executing program 7 (id=8173): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f61, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a030000000000000000000200000009"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') unshare(0x22020400) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r5, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0xce, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="00000000d4000100000000000000200000b7036e09000000008500000083000000bf0900ec438eac0ea052000000000055090100000000009500ff7f0000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x9, &(0x7f0000000380)="b80000059a42cfacddc8985b00000008", &(0x7f0000000300)=""/9, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x50) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.314667587s ago: executing program 6 (id=8174): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x3}}]}, 0x60}}, 0x800) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/242, 0xf2}], 0x2, &(0x7f0000000500)=""/113, 0x71}}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f00000007c0)=""/196, 0xc4}, {&(0x7f00000008c0)=""/225, 0xe1}], 0x4, &(0x7f0000000a00)=""/249, 0xf9}, 0x3b8000}], 0x2, 0x40000001, &(0x7f0000000b80)={0x77359400}) r1 = syz_pidfd_open(0x0, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) r3 = semget$private(0x0, 0x0, 0x600) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000000bc0)) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000c40)={0x10f, 0x1, 0x5, 0x10001, "c0ea66490015d6fee672f5038fd4261df6c9b57d7e9a889e0f5e4aede07559dfef5fd30b29706e8ffc6dc8455879d8b6d3df495c9f09d2e6776a47faa3e8454d1ad73c7f878f31a94d203d523a4fd2ce857a18a70778eddfe789e6e223d65d7389f9404856c7094ef90fb1f612480d21b2a6809d3d36705aa7d0bf9976453d09dab8536b885663cfc34169bbe304ed9f3eb6121b45d04b79779dba91085e5cb026b8290fac6c0a6da0a0f85409983c98c5fff989dcc3e5b9e9b57124cf263a760fe41c54080ed52421f25a6923aa01f08f99ff7f986ca2d0c8919d9e137bce1ffcf9274d1fbc986a9cd9f60d851c4b42d75f596d72da08"}) sendmsg$alg(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d80)="b6bc9d114c232533e7981e50548ca860e2376f85432fc6a63309b47bc3ea828b4aeb044b171a6875de39c006721485bf3ca5a33732f5a7ceaf74bd728d793298a74dd35fee6b7cfc49b6c6c0562b90cc7f5cdcc33a0544d65020b48cff5d9a1c375e0d8629ec6a91bb6f7f8618c8a74ead3c50e0d85a181bcdb5689754862fdce4487729f75bb90b342dbeebb7c0e7c38896f9e73a4ef474932fc31faf04da2d901b0209154919f1b932965a2547b9271de81c1dac71bc33065442c8ad9afd7a34ad19936db847c727d31adf736dbc19b53288a27ced6f621cadee98d258487192883841", 0xe4}, {&(0x7f0000000e80)="96a77c54dc545a5b714a704e3d925a3ad28ed12c6f95f45321e051b718b6ee3fc66a2ceb7ce40c78d180e54ae0391658b956eefc32395cb395cbc8c196b4ec38fc8fa0c63151679990d7ff7d496540e57079d8a2d4ab1f6e506eeae56119d41176fe0a9e7e26fef2d8b88e004e0a615cc9704177b1269f2ba6a27d424eb83d9419fd6e177e427ddc35a4d66e6bd016cde0ea9a5ede5924f117bc3d38bea81db292f4838948e0b12638afcbbfe170f1fea15081479528364776f531e31a248c88444662b53d37570c521b6f028beff76cef4e2cbc909a6e9d81316ce12bcfa28404402706e8484ad734", 0xe9}, {&(0x7f0000000f80)="e953072e8c0430aed232dff6127d85f5ca0b37d07350bceca4abee9d18bc0b00d5fcb87148f357a30d066406c87cb710ee36e763d20f27962c681ed01606993b6c89dbbe6501e13cd099391487a6a5073c3aa33902ba477e9532b8f420389b9152345300b3caae9cbf589f875528419c564073c601bcbcaf022d18914859454c7cd2db696adad525f1f2d5e3a995569f4c722f9443628f91cc3ece000edd1103857e7fe4c822b1eadb68c5082620a9228586388cac19aaa1d1f3dfe32ebd60756bb450ec6206b1f617c11349cd85822aae4decee485817419ec1b802c7d3d1f51e1f6963d964fbefb59bd27343b128f52c785a89275fcdb3d45842bd4bbe814cba85e8be51baa8bf5b6f7727bc7c62b84c440c1262bac31c65921aa27fa9766c301800ac64a313db9ba9851c2d34bf15151f15a92b7b89b2c954bf8b24b098d5bc60f21a6a2651ef43c7669905c3202da824d0a2e5391bc0af3e5653c9ba2f478429aa0555afa9df51ee7a2987a970ddb7bb1ee9a7301f8bf11ab411d1c5777f2fb07a4655d2e82b45f680397199105e036b11a1d497c6520afd6ba7638fdf36d962cae9ea325ec1ca28f263cbd79ea8b772b67b7468e8e33c420155e0269ef388c56ba90584bc7f4cf0612f5118a2c28e3fc5c7eb6ca5301d16b4eb025c85d0340fa9b65e89cfc8683ded5fa4441520ae5bb38260477c7931327707181a1f94c643453b73c2bdac0df84a597988f740f5d8387ab2d543f1a00c95b0d6883b44283d43ae62e40258449cda9198b18d9091bda144f3c6585113f3b5d8379c364a050d8c04f858371a4d37f141bc9092c3a55fe4f75a922d3a388d9f9a8494190980af535da716e7eef38e3569d04eb0fa53bbfa1d56119c4e8a3f8b93e693a946d9702d66dcffd32c9155217d8d89d666b516144d557c69159464c797400bd57de7df2a77a3b6d496eb4311f34e08961b717c9ccda431b1f3f3831d129c6668f1dd0a726a462305a83cdbc9577e22c3f433fb8c6d65c234beac6481a98997641f9469a930a1c0919623f3f95d8158fcd24364a3ed18ed1b9b07363dfb3cb6489b9e2e407ca5113257e2f63a9e28c23ca41bffcff1541e638fa0ecdc7817dafe62f445c59a8164cc5ab2b356633558b3ea91152c8b067a26a019fd9ea16469a6abb0fa207aa9eeb60dece566f989609263c25f96b463c50b0c728ff43dff3edd4c498d1d36b1035189a9b0b55c17e74c654e8dc2b5186a334d810d31b41247bbe01253685ec06aed37f70f5bb9c7a5a8bf66ee1959e266b19c8051e1462e255f93c6a8307e73a76cacddfbfdcc5b60387da1b88110b1bf7684d44297dbad7e501a451b82f27d4d1102e16eaca4bb0c4420adfbf41a9a65aef7c3f1ec9b1df5a1f3a5ae42e1404eee79b52d9ef3439af6688ba60b7ec767129c948e9a5dec618fd5350d4e8e1f76afe5c4f99a09d2db5f000d54aab4e58ef56e9ae44b1bc4c6b6c56a86a8d576109db07f011c2e91ba9d8ca2b90cb0072694e971679f58bfbb29e7f93bcb8a14d6438ede065d43e679895507647d80c22668e74063ed7f14a8f459a6089a0a7621721805bce96ec6f67ed2258108d00bf5f4f1953f608be4532c75a3913b249a1ac378e95b9ec9659fd84c9eb3985b2519bb002aade79356fef0adcdf2f311b11980ffd472929ed7c0e904f3ab9f8b10a1e1a43a7c958261746ab92df415292699ad6a1209ab672a5d78a3d63f38d803199b9b426d01933765531d90db62d1196d913f4de56e7a25f35c5709b9fb975ea96382dd7cc4dfff1917de47b51eaf349cfefedfa681e966837d0052d1dbf2c0d06aa269e10c36703bcc3c0b80bff0d8eb373249643bca3d88bbeac0f7f40d97aacf4a1401aba5c6f6d932f64be9ae7099bdb7dd6ac420b1bc8d6c4c9d28e3782f724ac41c0299f92f14288447e02292f47d4ade7b011641514d0f5876faef28dab01204e1350048c4597217ea1c8934d750a7a4eca395e4973dbd8acf1d419fc0bbdc7688fd02330c4b8846be2e424adb27a7e691a771f3e961b20d63a657d7bc25f38ec8b092dcb40d339210e1518e622b8b55efd9ac6aadd9b946efaa2d945ae62e7744bebeafe53d8bf73f9ef942f15193ab9d27c839e024ba0caa344437cb0a12902f2b9da0848723ff3a376f3fca56417edb4920403896b996c9c5cf6eab20d34077812e67b69ec21cd4c3583fd2d34c101686c743b45b7937ff9a595686e2fa23360058c0de7b609802d9345c85248478b3f5ef40bc5e64d802cab1168335514677c7b1814091c37a9a2b475a281536435f25d574582f227d2efcc5b08862182f2996c6ddf816b896014b7000c68a30142010c6bae651fb2b249a24b0c9c1c10e434563510e7f36f8555a3218e24f99e3d3cbe37cbd6152ecc33ff068b2c3670bd310bb1ae74208bba86d1d784ad42ab0783776895b8633b59ae1ed468354c0cbb57bbdff96227d4b8114454857d2d08a160e235d8731db3e909ac313fef17b4193317dc7298df2ac00bce55db8cade8523cd025d89897ace9fc54810206f91bd135eaa94aaf1c4aeacf2ec691c1533ddecdeab8cdf5a750255adc771db6d15b912a9be2c97d1eb5499d0b4c7e8c630df92b1254c1c368519939a37ddc00802013c92f408589aa51af7b1ff4d148115f8c8602d34fe40e494558cec18c4ca7e184f95951041953aa23c1fd4b0e7baac7c6af4d34e98e2d7af8a0fe31bcf109f32bfc6d6bc9418484715d30bbd6e819e2bd364f61fdf7bccd32139d3618a2c13b6e66cc51291e5e699cde6d1e4e6fda1e20de9520d67f79b7eb59796f8295cd90ce578803be2cd9e1dd12416c4972bf9ad6e4b5f553c54ac4c68c3b305033448588719412fa910789a6dd2e49f3ba5d70de805246629dc9a55535794a183ab59a635b5aab66bbd1c8baff154ab3bacc48097c0c8586e6337b458da87464f4b8d779baa8e91ca6a51b4a04ef0b8c26f19b3e1dbe29e5151de9689dd087fd1fb575f0b2f51aad33f35bf5102d902340186dd4b5dd22c9f11306fdfc720aa6de7c28c79f7c8e4d3c15cb858aeccbeec10db949e17d84a6bbbcc3a3d95755b93e2dee27cc3b4b2caf97ada88bf6b693f54885227af06931af9f14a11c6e98ef2c0c716f384e636b1a2f566ff6993fb77c17072dbbbe11e42b362149692965a47fe2ccb79d3c64a23208e9cca26975c825a70f91dab33668cddf9c3b8f5d5df86583a3cf2d19d6dd5734d02a69adb95549d181b236b95ff91fbfd3cd95d3b9762a2b1aa1da41f0ca8319742c371d0de76ae5bd1ddac3f053d9f72b66c9c38d8fffc777afc55c05f7bebaeb9c89d23de191fd5a485be0816c2a5a9e24e6462eeaa3eb0ade45ea20c2c43fede526e3bc04aaf807a2d0d8ddb344d0dd5859913fa72c5bf9a3cf5f17d1d63bfdd62cc303dc0a0c4ae6b2583a83e48c3b1662020a82c02caee3e5d44701c5710650bf15d5e21c3c17093a20fd0e84f120e74c09d2b724155c5e51cb75f2dc013e8fb1114fd1008b88f7720b9e47795374bf3ec8157c6f6d9bf0871cb23b37d569f346b437e14f37a97bf4d225f2cfacf18acae41676d228d30c0f367c87ed4250e96c3b3436125840da1e9f17ce8a1476e3b7afc66c16853fe88e87e26e47795ca22ab4221940485be9470b2870344b04dda5969fa3b50ba414a5de721d3dcbc43db8261cf04f8aae6c65baafdb32837177d7ca3271261775dbdc7eeb1263b4017b433049d94814c99b209c4cbe8c7995135e610be6ca356b630d7c4f99850d8bdc7d9444fa73746565b044e5fe1551718b7e91280884e185f58f9b64d1290fc640056d9e31746b5abc921fc96c1faed994313712e597823cca0e54ce3101e0e63114ec2d12cf81fa022b84957705e2ff3af1cbc81e4d29432863f048ca5d44e90fac0aa6e68a18b78d7e1bb37de7fb79334aac6d760f3d6f75a73ffec58a7d557d8171881bbf675b5dfc78782c16f1e36d57f51a603283c7792871fa21ede0847d7ce75732731db2fba6a07c0da478c2b5db8058920c1cfff925bbad5a791e07b7372b6ec54ac49d8ec7dc474ffcc9f7439b062e8273e359cb863c97f70002adeb15911f8c42a7d9bc853c680ac23771a74f0ca6640452c6a3ed2156dfd800a5dc205c4876cc87534626fdd02980a07455affb2444c1fb142ab1b63c94b900fe0b6dac72ca05ef29d1e610f79f3bc724bc962458322c8f39a0a6c2d28dabfd940077ed4bbdedaf350da2dc081311ef494fd24493496ec935b96143566bb303b91bfe0597d22a981005809e743d46986b4b01a68d770328fc9d61b51d88feee5c3849208e89b21636a996a44e83c6ab54a1775438ac211bc5ad19726b442d5581a48e97d62aebbb8b3974b6c97375629fb3359263b6a01f1e3a1868dba3e30e6c096a0361a7d9a588e4cb4bae7d076aa8d29b5d9240ee1dc0acc5446424824db3637edf3c30eac4cd685a9dfb121b86f6559aebfd36118290684467aabf741ed99c6b6115f6bc604c0daf05919b1adcde4b62c0000d72709bf924a91b0de554ee3c8bccfb63cf605789d561817f183a78d5c5a01da8d18bbaf650c1236b433d3277fcd00d9046e62a6a3ce3816ef73110e26183d415f349124289f2758d20adbbb6e4274f16cdc42ee60e47416bcd349f37ad260e1cb3a08daf90f57fad3d1ce860b89fd801d26de59ebd2b112d27d8829d7f6c06261beee044fe64e54064bcec798da467083e2b2de121aee971272c80836046b613543ed3ff39cd8126b85e624bcdec78eddf57ac8c45cbd6b3af6c31b6a5d78970d5392b3024ba1138ea5ce82a44236951a8497bcd153d607b2675bb1b68993f6ec4a23de5ea54cfe8f29ff4634ce22e7053c47e4708b0754f2846d4b52cb4031203ac5961c94c601aa922941576d1854ac21fff53d56be907d7ec988932aa4f7f57193bedb66d689181b6259e66e52c6050bb383032b8dbf592b4e48174934401f30d8a078b93c3597f9d0d414eb9fa909d469f49305a1bf62d94f35bb2086c0101d1eed09c4adbfa6ccb3ffcd42fe0140bdd8273b09884ab7461c98e9500c1f4911c0e8c519fa8cd2abbd90a7abb29e3c540fc9320f677f72fbdfccebe20fdc5c163d48f34781aac74e0488e890818e0ab6434549dbe0ad7bf23a973e24b537c16dbf50e416344c5a20b948ad734513b971bd2b1e4634de7e44efe6f7e8ccf8a7d6de6854f70719dd0a81a39a33eb41b2a5febb2aca3d8355b925329f5a0a8ce8f720e86afd464684d94404ec89e6bdcc79c9114bd77b9677552053f631912736892bcb4a839907b458b5017586eeb2a341481868bb18f7428781bb07a641b4de2e1138ca7dd6840047c514ff29a89f0623f1b291d1d2eee365de870015eb76d11293fc3e24b68015b0bc17f28ad7c3b71696bc4322db9e424d5a1059cf1c8c19fb6d3e334d3f3d7e8b6e9b66e929118eabb764b7fd2fea00e4bae4a8e4ec11d3ce78386859673a894eb74d0f60d47bb99e049e2d675e3e7d10417f5b49724cc913913c54a0d6b47e4a7845203ca5d35d9fc6aa22962907c9e249903f6ed5a6d2a7750c126c9b3a294d0b88c03e584fdb59b5f183438f1a8ca512b8a7069521849fe4f15702dca8093bdee11167e8e78262c0e5452769803c48f5af626420f3115f2ccb5dedea0a3c46d8c4952dc6ababcd46fd1e218a4b6e0f0a6b8b087ddafcc61fa6beb4baa82041cdb689298d47f0261281c3d2d1c9096e9218e03f5bc9dacbba0e4758d27d810ca6", 0x1000}], 0x3, &(0x7f0000001fc0)=[@assoc={0x18, 0x117, 0x4, 0xa9c}, @iv={0x118, 0x117, 0x2, 0xff, "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"}, @iv={0x78, 0x117, 0x2, 0x5f, "9d668640a021c39c5254ec04698cb4e0add73049240d7d633d2c3c11ef7a3c5faee6c0607450aa054aee40450de02ee0d3af8e3b306c3318de01f0e2162cc258b9e4bbbe5f087a390131f48a2e7ad0f076fc4559d8fb2f94d0313d7a695265"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x90, 0x117, 0x2, 0x78, "e06e1a851a69196837494cbe3eea9a9b83408af30722e06e6b1bd62903e0e1741ad90283b4755ced5629573f4bd4536ab6cf1097436b67aa0f8944bb755db369043acea4ec2ea21388f358ab99fc491becd63b24823da6ea86d011f84e4981dbdb9db7adccf4b559b4ed0e05b001c7377bb9dd8440c70d68"}, @assoc={0x18, 0x117, 0x4, 0x68c}, @iv={0x60, 0x117, 0x2, 0x4c, "4ca4414a402785d4f97b38d8fff555a4e88a559f98fdd5e3c2ba0e876f6e3af2cfcc2b91ab66f5ca2d32eb6e67c0bb73de377279961f6bb6540b46ea2d2322f1e6e4323048f2e9d77408519b"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x2e0, 0x4}, 0x240008c1) semtimedop(r3, &(0x7f0000002300)=[{0x3, 0x9, 0x1800}, {0x1, 0x3, 0x1c00}, {0x4, 0x8}, {0x2, 0xee00, 0x1000}, {0x3, 0x9, 0x800}, {0x4, 0x3ff, 0x800}, {0x3, 0x7}, {0x2, 0x3, 0x800}], 0x8, &(0x7f0000002340)) open_by_handle_at(r2, &(0x7f0000002380)=@xfs={0x1c, 0x81, {0xffffffffffffff5c, 0x94d, 0x0, 0x2}}, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000023c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000002400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000002440)={0x28, 0x2, r4, r5, 0x2a042c, 0x8, 0x2, 0x397e15}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002480)={0x0}, &(0x7f00000024c0)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x0, &(0x7f0000002500)) r7 = semget(0x2, 0x2, 0x400) semctl$GETVAL(r7, 0x0, 0xc, &(0x7f0000002540)=""/238) r8 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000002640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f00000028c0)={0x2c, &(0x7f0000002680)={0x40, 0x21, 0xde, {0xde, 0xb, "d039ef4c0136425467c5a7adf99d88d99af0605efd2947530d11b5d9e671edea6762df1552565316d1014c18cca41efbb8af712e98b2ed750cac8a1907f262ecf15edf3a227554f60c87e7f37ace54ef2e45c2e0c26b41889f2b8afcf8c6c24657ff84945e8ab6469ac5d5ab421fba0927131ef7ef50b0ed6c783b8b08fe5ddedb88d77db075ca4a5e59164d6f9c8c4c2fa900b5da2dfef463577f0089c884b45500949795c4b271fad7d3a80335a19af5c9faa0007cf8b9a59b25714b78f538aee3a39973f8587aba7263d91ca675f1b4fa9a8a8859aee7599ff80d"}}, &(0x7f0000002780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f00000027c0)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x6, 0xff00, 0xd}, @generic={0x2c, 0x10, 0x3, "9467f94f19b72284edaaeefbeae327e850d3b90d38a8361a799d770ee4091a91e3f3ccc92b316a7464"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0xffff, 0x0, 0x8, [0xc00f, 0xff00, 0xff0060, 0xc000]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x3, 0xf8, 0xe857}]}}, &(0x7f0000002840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0xe9, 0xc, "0dead02a", "d4caae42"}}, &(0x7f0000002880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x6, 0x0, 0x5d, 0x3ff, 0x101}}}, &(0x7f0000002d40)={0x84, &(0x7f0000002900)={0x40, 0x9, 0x63, "c9d3de579358e0b1d15fc34494c1eb0463b9dc32117535f2ea1fed8e2da74fab23cf74a401ec9ea74108c7d704b19ba6e8722835727ed45eb43c3ddd33f49b8c089008a97d2bd2c3bb52bd352c4ba1a47f886a10d516dd0529932e038b04b4708b73b2"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000002a00)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002a40)={0x20, 0x0, 0x8, {0x40, 0x2, [0xf000]}}, &(0x7f0000002a80)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000002ac0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002b00)={0x40, 0xb, 0x2, "e626"}, &(0x7f0000002b40)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000002b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000002bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002c00)={0x40, 0x19, 0x2, "822e"}, &(0x7f0000002c40)={0x40, 0x1a, 0x2, 0xa}, &(0x7f0000002c80)={0x40, 0x1c, 0x1, 0xc3}, &(0x7f0000002cc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000002d00)={0x40, 0x21, 0x1, 0x7}}) r9 = syz_usb_connect$cdc_ecm(0x0, 0x8d, &(0x7f0000002e00)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0xff, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "7e54a861d6"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x435, 0x6, 0x9, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0x8, 0xa4a, [0x0, 0x6, 0x7]}, @mdlm={0x15, 0x24, 0x12, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xb8, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x22, 0xd8, 0x8}}}}}]}}]}}, &(0x7f0000003000)={0xa, &(0x7f0000002ec0)={0xa, 0x6, 0x200, 0x3, 0x8, 0xb, 0x48, 0x5}, 0xb2, &(0x7f0000002f00)={0x5, 0xf, 0xb2, 0x5, [@generic={0x43, 0x10, 0x6, "88fe2d914c447002aa992ca73e0e5d63848d5e04114bdb23a3430250a7143b79755ecef3ba131af398bd48fdd5089fad957f563e4c86413b07b461496e4308f1"}, @generic={0x42, 0x10, 0x1, "60fcf1e19c3198403bb66ad035ab30320ec640271f077b5bc4c9d55ba337ba33a406fabc55e38dd879c59d448fb76cf8594e96085a30ff9a4d3879fd008f91"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x40, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xe2, 0x5, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3ed049f5bfcf94b1ca09f914ef7f90e4"}]}, 0x1, [{0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000003100)={0x14, &(0x7f0000003040)={0x20, 0x23, 0x68, {0x68, 0xc, "2c8fcc457e941033df78d8c29c29f7e32dd59c37c50903098b9771a094df285c045a2b1a3a254df3029460a82ae3eac34adecfa82c24358b7283660d55315d084fcb89c9256a270856ae94fdc5db883e58000c81b2f14b1731a874d2541f71d0b64087ee2aac"}}, &(0x7f00000030c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003280)={0x1c, &(0x7f0000003140)={0x20, 0xc, 0xb8, "a2068ca39139b99594f698e312dcf345692da60f71e38c7e0110c27963fb4a7c59b61e32d04313db09014aa86bfec7570fbcf1382f2f4d1520088fffab5d30d768a0dd8b7db7d1bdc9b96bf20ddf137fdbe5b6401726ea59f7913bb0af7e327591dd93531a9cacac9bbc540dc0b4f79b363a2a9937d2147381451b24c5113dfca9057b90afd8193120a1b121da1064af49b35b7bccf65effd2865ed9bcf022817a285391339470680d91d5ef960ade6f78fb094eaef7c254"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0xc2}}) clock_gettime(0x0, &(0x7f0000003300)={0x0, 0x0}) semtimedop(r7, &(0x7f00000032c0)=[{0x0, 0x2}, {0x2, 0x40, 0x1000}, {0x0, 0x8, 0x800}, {0x4, 0x9}, {0x1, 0x3, 0x1000}, {0x1, 0x1, 0x1000}, {0x0, 0x5, 0x1000}, {0x3, 0x9, 0x800}, {0x1, 0x7, 0x800}], 0x9, &(0x7f0000003340)={r10, r11+10000000}) personality(0x5000004) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000034c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003480)={&(0x7f00000033c0)={0xbc, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc0b}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_usb_connect(0x3, 0x8a3, &(0x7f0000003500)={{0x12, 0x1, 0x201, 0x23, 0x77, 0x3b, 0x40, 0x19d2, 0x1018, 0x9afe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x891, 0x4, 0x3, 0xc, 0x0, 0x9f, [{{0x9, 0x4, 0x3, 0xc0, 0x4, 0xf9, 0x95, 0x7e, 0x9, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6d, 0xe, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x6, 0x7, "f9839ffc9fe8ed3e"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x10, "4e915a3b16330e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc, 0x1, 0xed, 0xc, "c9d8"}]}, @uac_control={{0xa, 0x24, 0x1, 0xff, 0x6}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, 0x2, [0xa, 0x5], 0x5}]}], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x6, 0xe, 0x5}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x8, 0x40, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x1, 0x5}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x10, 0x7, 0x6}}]}}, {{0x9, 0x4, 0x5, 0x7, 0xd, 0xff, 0x5d, 0x1, 0x6, [@hid_hid={0x9, 0x21, 0xf7, 0x1, 0x1, {0x22, 0x9a6}}], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x80, 0xd4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x30}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ef, 0x3c, 0xd, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x2, 0x80, 0x4}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x94, 0x1, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xfc, 0x0, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0xa5, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1000}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x6, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x30, 0x60, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd1, 0x7}, @generic={0x56, 0x6, "9d54cc6be14f7138d712fd14cb796cb94867e15e11b67b4308db686254c3d9f35d82ac57c0c0746cb048b5feaba7ac2a05c7db7d8e9694ba212b60c143369a5e5c7c3327a962a482ad55a1b6fcc3456ac9d874d1"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x1, 0x52, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x6e, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xbd, 0xcbd}, @generic={0xe0, 0xc, "958384cc07cb5814c98813912b2b7d6716698dd8bdd1d14f4c0937b3e85923bc5ceded91f7851a8c8c6e5c8f3bf8f637afca75d8059e8f8f81a246fc34d9dc421b0a4eb7dec21fcf38678bd36973ac5c9d57aa89e26227094574a963dd3aa115fbf4eac181bd666a415c66059bf0bd8eb0f98b69937a7f4d4bcea632ce46ce2d634b50df7c688e13652ce6091d0d52d002e08907318d7c3320c4639a9adf34c5c094d6058f36ce77b71f2071475b5c6a05a36e4e100891f66210a810aa9e331053ca061ef62b18c9516c4c5944bc802b88f6422485373e043db8e2bb9768"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x0, 0x9, [@generic={0x9a, 0x941a2bb2a1a5cf67, "a6ebc49a16aa5bd91397154d86749ad7a1034d05c8c73d683f08d298ba15db3d7a0a10f7e1fcdff9710fa338b0f6d85eeeecf28205cdb5b8a1676576d3291275b326f958acbaa2319a4a2952a53eb83cb5ef39fde830397eb6d754b300c0e3aa151abb520573df5bc9fb029af44f61eb1563a2cd30106176fb5bfe24f6dde9c54a5211cc51daafa892b8ca3f4599d02213390fb2bc89b68f"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf1, 0x8, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x4, 0x5, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x58, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}]}}, {{0x9, 0x4, 0xbe, 0x7, 0x7, 0xcf, 0xfe, 0x89, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x4f0a, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x2, 0x3, 0x7}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x7, "45b1"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x5, 0x2, 0x1}]}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x2, 0x5, [@generic={0xa7, 0xa, "7a9199328880704189ff1d422d2a8864683a339ee7d48504cca3ef89b421e0cb784d3c5435a60a94ecf25b5f32fbab1ecec475ee33320018800b7f74094b3c21b91d445981d4a8796fb430e376dc627efa420d28656a45f3e0099089dfc54bc2094ea3b91ef59a8ee1b2a1fd4866274578c1dc9689bfe9c54084c4aac7c2016dbd6204ede122c899254d17744130362b3cee5c29837dd3f3cb171d24f24a4797474bbdcc97"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xfc, 0x5, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x8, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x0, 0x56, [@generic={0x46, 0x6, "229af83219d54880a966a6fdd455b080a300fb79415121654e2d8585afb3265fb47535a854f366799b9b607564e862934b7b57fe3e11944b7154b325d0ec8fcd288d015e"}, @generic={0xe, 0xf, "df02dceb2f47a0fd05d5a9ad"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x8, 0xb, [@generic={0xa9, 0x2, "66c9816d4b824fe03f7e522343bf550246fb910cd5b74ee21ddcfa4e2200274cd5f25e94d2c7a3a8f607f016e86006f33a87d08f7927d6a8176ee4b91f19d00b890bade345b9173d14e5087725cb2562ceebe6b2e870d887a82efcd783a1ee4b842f50c5ceffbfc6299aa77af7a34b9387acfb5d3c150044e2056397730e5bf51d8934ad810c1b953616f8bf539de60acf46d3450e38532425292e0d184e63b4d7171f0382429c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0xb9}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x3}, @generic={0xff, 0xe, "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"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xa, 0x1, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7f}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x6, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x43, 0xffff}, @generic={0x24, 0x23, "dded695fcd7b1adafbe8f9034e9a2eb5af4bd9ba1928d81243fbc4dfbee6ae26824d"}]}}]}}, {{0x9, 0x4, 0x4c, 0xae, 0x4, 0xff, 0x0, 0x0, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xf6}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x4, "08d8d0"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x1, 0x5, "09bc"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x2, 0x7f, "f9"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x4, 0x3, 0xdd}]}, @hid_hid={0x9, 0x21, 0x200, 0xa, 0x1, {0x22, 0xa66}}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x29, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x8, 0xa8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x400}]}}, {{0x9, 0x5, 0xd, 0x3, 0x430, 0x4, 0x1, 0x8, [@generic={0xc8, 0x5, "fcce8685bc3a7919cc1d975bf22c1ce1bb01061242b0d3b268b371eac2c75fec1a5633ffac6ea82e3e6d9345b5786fc53c8d35364882557e14e688bb2eb697124ee2abdbbb21b282165df24d3ddaac7a9df8d8fd024191eb65b7e64f28e64196a4b94060b994828199ad7ef1a50005913709d6eae889f098f3ed89c1bc030e67ce2ca04105146ee1200d224a82fa851cd1a434aad346e6da9ce643b76c119227cfce7dc452cf7bad44f053bee6add2c1261010879afd1cab1e97e75171f2748310cde992d76d"}, @generic={0xe7, 0x4, "2561a25a5ce408b8a11926658d03ca726d97504eb65930ecf8f15b5a86e63a727b786f0f0903e5f3d1c0ff9b254e6b221ac37abe0891beb35558e7b0c4ca61ed9dccec965ebc7ce9bf2fe545a575485c8be95cd5db01fa3cb4214d966921359b827814f36876fb714e6614ec941692ff4ce4f55bc890f886e0530954baa1aebf8898c0f351c934fba355d7924c881e10c656d5a88003d53dc04e0307e6ee28f9fd3cd48bbfac445046cabadded154acef11e0f540b0232f245620eafc5f528af26a9caf8bfb035eccff50ea9001bfa86d2afe1347fdd871f2f3ade760dfde376b7b7d5d399"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0xf, 0x1e, 0x6}}]}}]}}]}}, &(0x7f0000003f40)={0xa, &(0x7f0000003dc0)={0xa, 0x6, 0x250, 0x8, 0x3, 0x9, 0x20, 0x9}, 0x3b, &(0x7f0000003e00)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x0, 0xf0f, 0xe48a, [0x0, 0x0, 0xc03f, 0xff003f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "04ae146f736fee3fb53af18157dbbac3"}]}, 0x2, [{0xa4, &(0x7f0000003e40)=@string={0xa4, 0x3, "f2a8b688e51893078a6c1bec7f84384e23a28db9942dac448b548588705949976af4acc0c1748c76d47bd1e86fe65200f73df6a60170a7b931811f180a94f2c4c535e3240c5b70153452217ef24136031a9594ff51cde1027a02039bd01fc19dcea478cd38a14eb5e4d15e490497481be000f910756e9f3cb0ec16547a6ce5cd760350d6b01b77d5c6f9a570c0a828bc522510a457d8d7ce5ffc10b3fdc153388c9b"}}, {0x4, &(0x7f0000003f00)=@lang_id={0x4, 0x3, 0x422}}]}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003fc0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000004140)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004100)={&(0x7f0000004000)={0xc4, r12, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x9f, 0x5b, "40244e5732ddb40069ca3cc06a9627443901f90bfc7d86dd69529471cc64b5a1da9d898975d484da65db7aae033918b435598268dd3f0876753e46799f89154ebdfdd61928bd06bfe0660e9cd9b3ee2fe161e0e630c278a36848ad1e24186564851e6022ec05acf449fedfce8793f7549f77039a0e651abe2d3f12414837da87ccbf56a21e1a370b458e58e2f2cb5979088d85ef1062c26b4dfa45"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 5.898438849s ago: executing program 1 (id=8179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x4, 0x1}, 0x6, 0x80, &(0x7f0000000000)={0x4, 0x14, 0x2, 0x2, 0x200}, 0x8, 0x9, 0xe7a, 0x0, 0x4, 0x1, &(0x7f0000000140)="5f8b23ad4606231dad3bc4dc329593b8be4dd53b616d30ad8b9b946e6ffa6a451399845d183f10c4a67d0b0898172b4c8e5431dd3e57524d9ef1c16eebf7e725718cc9d3a11ded72630d435d48750935e840bd885dccdde635a4af72b71c4d7c41195adf8e"}) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x40}) io_uring_enter(r3, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000680)={{r10, 0x7, 0xffffffffffffffff, 0xff, 0x7, 0x7, 0x7ff, 0x5deb072f, 0xb7b9, 0x3, 0x80000001, 0xdd0, 0x4, 0xead, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r7, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r7, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000015000100feffffff0000000002000000", @ANYRES32=r13], 0x20}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r14) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf", @ANYRES32=r16, @ANYBLOB="80140000042100009e8bee7e4bb1cee4a251d48ab3eaa60660ff6a8ac0734e3a37c54e54974def6cc96c3ee1b5d4116c3aafff4fade2c307fea0f6505c392fa332b4dface34a838af379ae9c82af0ad3de412035cfe6f278cc7a8e80ca98c86431d4ff76ef47"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 5.732368347s ago: executing program 3 (id=8181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="180000007176e13dfd7c8b31bfcaae3ef9233215dededa0862adc103c75b7994a4c9442669d725d724079c85793cf221889b7bd2891b7b6d4dc32fb0ffaeabf5521a762fde473f9596258d5c8f4a6100744f768ebb8b505d8f360d47bc0c3ffca925bb50916f23c7208c3a5a0d9501b7cb775a8a815b4ca506058230843a7f0ecad3786ca5a0add1000000002db836f838b591eff7e3b1ffc53515da07238367fa30f25e858a55b541b60b1ef9b740cada1d582cb5188378673b4f02ff5f77b247150a6292a3737f17", @ANYRES16=r3, @ANYBLOB="040027bd7000fcdbdf250d00000005002e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0xa880) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800310700000000fbdbdf250a142000fde90000000100001400050000000000000000000000000000000001"], 0x30}}, 0x850) socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000001d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) clock_gettime(0x0, &(0x7f0000001c40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001b80)=[{{&(0x7f0000000500)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001ec0)=""/226, 0xe2}, 0x4}, {{&(0x7f0000000680)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/163, 0xa3}], 0x2, &(0x7f0000001840)=""/174, 0xae}, 0x7}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000001900)=""/67, 0x43}, {&(0x7f0000000700)=""/42, 0x2a}, {&(0x7f0000001980)=""/99, 0x63}, {&(0x7f0000001a00)=""/118, 0x76}, {&(0x7f0000001a80)=""/102, 0x66}], 0x6}, 0x9}], 0x3, 0x40010122, &(0x7f0000001c80)={r10, r11+10000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.667262908s ago: executing program 1 (id=8182): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0x2, 0x0, 0x4}, 0x20) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'batadv0\x00', &(0x7f0000000640)=@ethtool_stats={0x33}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000440)="3e45d9fab9800000c00f3235010000000f300f20d83e2e6465490f38f65a0bc4e18173f53866baf80c3e400f01c8c402e3f6bd4000000066bafc0c66b88e0071c0c01aa8000041a9", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYBLOB=',grou', @ANYRESDEC=0x0]) sched_getscheduler(0x0) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, 0x0) lsetxattr(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r10, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r9, 0x407, 0xc000) 5.367250689s ago: executing program 3 (id=8183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) r4 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_STATFS(r3, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff9, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x4, 0x1, @thr={&(0x7f0000000200)="71e7b3983171a10bd6bccad69f38f6244faf7fac0ec8dd4cbb21fd1a2f53c253badef87fbc15a6b1b1deaf0f42b1ce14fabe10aa6aced26f01a65704dd7925f5cfe6fff6dac29692af5a53572cc25d6bf003693d5ada97905951d07bd4a74e099bed461b02257cef25883c93c75e000e942019d38295b371ba24440733b8398c522fc2f87f540b7b953b121dd942a548483459138bd39b3a1b40f0977c", &(0x7f00000002c0)="828054465de49814e9ed471ce37998386d8172ce3fab04eaac8ca3684daa302556a8c86b1c5a7b547386207d9c2ebb1152a887f2c3f8dcf7d062105ff533b14e96321d453410921e11bf587c76ef05e0de6c"}}, &(0x7f0000000100)) 4.376086005s ago: executing program 1 (id=8184): syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000008c0)={0x13, 0x1, 0x0, "0e6a605103787fa03e08fd65b728aec1b20a1ca8de67a818b1c85f5a22f39ca6"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000040)) 4.327240414s ago: executing program 3 (id=8185): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000040)) syz_usb_control_io(r0, 0x0, 0x0) 3.797348147s ago: executing program 1 (id=8186): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x20000) dup3(r1, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x6, 0xffff, 0x3, 0x6, 0x4, "1dbc2e2db3983c75"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x0) (rerun: 32) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (rerun: 32) dup3(r3, r1, 0x80000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010500000300800006004579008c00670073457fe98b3f9f5d02640101004e244e20007890780400000005000000010000000000000085b0df8f2dba92816ba562bf03000000f1b6b7451042d91c1656a4bb1e209551a1a8d0ac778e6c3d77e9c062e32fb984ace1cd38d7e7451fd71ad8dc560550ed1fc9e77ef85a299a9d272106762aa68ad47967ab5a9fd4511d4783b576ec0000"], 0x9a) (async) pipe(&(0x7f00000000c0)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000080)=0x20) (async, rerun: 64) r7 = memfd_create(&(0x7f0000000340)='\'-(.-/&$+!\'\x00', 0x1) (rerun: 64) fsetxattr$security_capability(r7, &(0x7f00000004c0), 0x0, 0x0, 0x2) (async) syz_open_dev$dmmidi(&(0x7f0000000100), 0xd, 0x40081) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @rand_addr=0x3}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0xfffd, @rand_addr=0x64010100}, 0x2a0}) (rerun: 64) 3.63644241s ago: executing program 1 (id=8187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setrlimit(0x6, &(0x7f0000002000)={0xe4}) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 3.539076101s ago: executing program 1 (id=8188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000140)={0x9, 0x3, 0x9}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003940)=@newtfilter={0x2620, 0x2c, 0x400, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {0x0, 0x17}, {0x3, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x25d8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x12, 0x2}}, @TCA_BASIC_EMATCHES={0x140c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x138, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x40}, {0x400, 0x3, 0x3, 0x4, 0x9, 0x1, 0x1}}}, @TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0xfffd, 0x4, 0x930e}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xb, 0x2}, {0x3, 0xff, 0x1}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f60987f5473b2320", @TCF_META_TYPE_VAR="298b"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="90f4ab73", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="db625b18aed3cd23", @TCF_META_TYPE_VAR="9afd3e5ebb632c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x5, 0x2}, {0x40, 0x44, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="6c2d15b01adab6e3510d"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3b89}, {0x3, 0x5, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0x416, 0x14e17e19, 0x8, 0xb8}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x40}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfeff, 0x8, 0x1}, {0x1, 0xd, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf1c, 0x81}, {0x3, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x5, 0x1}, {0x0, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x1}, {0x4a9, 0xa0}}}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x9}, {0x7, 0xa, 0x0, "2cee1b0a6dcdace7c534"}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR="42f776bb71", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x8, 0x2}, {0xf1, 0x43, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1184, 0x2, 0x0, 0x1, [@TCF_EM_META={0xbc, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_VAR="bf2885b8", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="b54e0ed2f4736c83cabd", @TCF_META_TYPE_VAR="64f8", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="b104", @TCF_META_TYPE_VAR="c764e1fde5", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="5320be"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xd, 0x1}, {0x8, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="b5a4c2e71ae786019d", @TCF_META_TYPE_VAR="a87dc2"]}, @TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="88eb3422a36c11c33672", @TCF_META_TYPE_VAR="e72675ca", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b18c8e1998b12a6e", @TCF_META_TYPE_VAR="24cbfe16d1c1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x81}, {0x7, 0xf7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1}, {0x0, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ff", @TCF_META_TYPE_VAR="14a2af839c3398", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1fc29e7a"]}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x288e, 0x2, 0x1}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0xde, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x88b0, 0x24}, {0x4, 0x6}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x54, 0x3, 0x2}, {0xd811, 0xe, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x8, 0x2}, {0x10}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='$)g\a', @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="e355", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x9}, {0x4, 0x9, 0x0, "fb84a6a22acb7c9cd2"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7000, 0x1, 0x8}, {0x6, 0xb, 0xff, 0x1, 0xf, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xfd, 0x3, 0x9}, {0x0, 0x1, 0x80000001, 0x6}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x449b, 0x0, 0x20}, "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"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9c8}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0x18, 0x3, 0x81, 0x1, 0xc, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x74, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x5}, "9d8cf89a29ec680215933ea0b56113deda42cfd800eeb6f47c2538769adba68456258634562bc45b2f1484a41bc077c6cb5e96cbaae5f2cd2741ad364e56e268de122606b2619652a153f76abf703368d4a008782f5d65f37527dbb8c6f12dda3c037c72c365aadd"}}, @TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x90, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x40}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x1, 0x2, 0xe}, {0x4, 0x8, 0x2, "d1aecee130736029"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x67e8}, {0x1, 0x4, 0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xad0, 0x3, 0x1}, {0xa, 0x0, 0x10, 0x8}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3ff, 0x3, 0x71a}, {0x0, 0x28b3e6a8, 0x2, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf32, 0x3, 0x5}, {0x0, 0xe, 0x0, 0x7ff}}}]}]}, @TCA_BASIC_ACT={0x11c0, 0x3, [@m_mpls={0x1088, 0x14, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x2, 0xe315, 0xb48}, 0x3}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xb, 0x3ff, 0x3, 0x2, 0x7e}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x86dd}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x134, 0x1b, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x320}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe46}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xecd}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x51e}]}, {0xdd, 0x6, "a85284a260791af2c4e98be5b79707244fdb0edf1dbd0af28e4fc7f76c3d6e31aba4873b462d4660e59bdc307e92d79d7f4384fa4684e2e016788befab28d447468ae77bf910203935e3fff5bd1222370e2ee99968fb148af90791135da6fd1cc76096281e920c97e46b66296af3954dcb4c404b9f92882e7af02c038dc6ee2acf3c5c5273fb7dbe820161416129c20f674bdb11f22d3e191b1ef6f707d4eaed2a40f3f15ebef0f6d283958423833be7b66864c15e787c8e642778d74db4293c8e075de8f9f930b0c11bb78c7ab9e4f6c20b269a603a2a1d0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2620}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, &(0x7f00000000c0)=0xffffffffffffffff, 0x22ae, 0x7) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x6db, @local, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="335c249b0a19ab396e898cc35c87a6d9b71aa67e66f9d5cbbe5745d10c786164a7c4ca7bde5f8b4247b3a23acf9470199784ba444d9a5928a902c0dac524a90dbfd11c176472c130354149958eb866eff8399d1797", 0x55}], 0x1, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1a}, r3}}}, @hopopts={{0x50, 0x29, 0x36, {0x32, 0x6, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x401}}], 0xa8}}], 0x1, 0x4048044) 3.455453896s ago: executing program 5 (id=8190): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$loop(&(0x7f00000026c0), 0xf, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000300)='./mnt\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340), 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000100)={0x0, 0x100a, 0x0, @discrete={0x10}}) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) 3.213840651s ago: executing program 6 (id=8191): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="66b99d00004066b80600000066ba000000000f30f226f365640f09baf80c66b848ea948666efbafc0c66b80200000066ef0f01c80fa0650f0f4c3fb636640f22d40f090fc7ab0000ba4300ec", 0x4c}], 0x1, 0x1, &(0x7f0000000100)=[@flags={0x3, 0x100}, @cstype3={0x5, 0xe}], 0x2) (async) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0), &(0x7f00000003c0)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x8000000) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) (rerun: 32) 3.025835675s ago: executing program 7 (id=8192): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close(r1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd9d7, 0x5) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6305) write$FUSE_INIT(r2, &(0x7f0000000340)={0x55, 0x0, 0x0, {0x7, 0x28, 0x3, 0xc002e38, 0x3ff, 0x5, 0x10000, 0xa7d, 0x0, 0x0, 0x100}}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) (async) close(r1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) splice(r2, 0x0, r0, 0x0, 0xd9d7, 0x5) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x6305) (async) write$FUSE_INIT(r2, &(0x7f0000000340)={0x55, 0x0, 0x0, {0x7, 0x28, 0x3, 0xc002e38, 0x3ff, 0x5, 0x10000, 0xa7d, 0x0, 0x0, 0x100}}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bb"], 0x2c}}, 0x0) (async) 2.898976409s ago: executing program 6 (id=8193): r0 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) r6 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) sendmsg$tipc(r0, 0x0, 0x4) 2.512711811s ago: executing program 7 (id=8194): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000017c0)={0x84, &(0x7f00000012c0)={0x40, 0xa, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x60, 0x11, 0x2, "5ebd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.515295035s ago: executing program 6 (id=8195): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x2}, 0xff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x101640, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "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"}) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r3, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000003dfbda2e310d797969593654f4d763c71440d76d29a0d2051530e972f060390e9bba2b4641b041ff9d0ba106f5be71879154975e9812f0cba64fa162d99758879783c03e7217ba6d323248c72e"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0xa, 0x300) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xa) dup(r7) 1.199563161s ago: executing program 3 (id=8196): modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/70, 0x46) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071107900000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 1.047714952s ago: executing program 3 (id=8197): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4f8, &(0x7f0000000b00)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "595b99", 0x4c2, 0x3a, 0x1, @mcast1, @mcast2, {[@dstopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @pad1]}, @fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x64}, @hopopts={0x0, 0x12, '\x00', [@pad1, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0x6, [0x4, 0xa, 0x3, 0x62]}}, @generic={0x40, 0x5d, "de34a908c012abd7b4434861d46f4c854a54c71b474f21e45160e44f727b349f59a0a04d5433ca2d5050b5cf387b7bfd761a41adefefb97236e2f7268827b4304728e3618f5f6e3e3a5990c34f542b49dc7a3ec55649913b70cc709d01"}]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2, [{0x3, 0x11, "f0acf238dc1693a3347684e66b961cb36a7d3fa3a32d6b13f52322a7c0b61ec03ddedbab7e1f92e99476cedb6c558b478e989a1b3fc9edaf2db7589efbfba444049f3124e369d7582f69c45b4f3bf53251adfc29543b38aa76a09f783f0f7ea55d43d038ff6fd0147ceffd3d29191530984ede6678ba06eb3fe67e4742d03fc0e498892b0c365700c1fdd8"}, {0x5, 0x15, "68d5b237d898d5ca508179dcda2720c6d8cc205420ffb153028c644fd3643e2fe156f98f908f1d1ceb9b72c1b2338debfb4d98c686288e32fef4013ec0cc645c5f635f34636097128116a4b96737303e3f6d8104efabcca42b32ff101cd76c92b0e11da209307faffee6dab5355677c33bec8c9476dde0db4b01fc26db0b0e80f187a02bc3d68b843fd5c5ed5605ee00f082f30d7597ab2b3fa9495c1b92621fde910729faecf5f04c183e1829"}, {0x1f}, {0x11, 0x1c, "92fb5a802ee06907866834ccecd75a99b27855eda5b9bff15a64948f933ca476c81bcfcb2c91d96eb7c3127aa28db15363bd6cf2aa7709ce0780dd0d1b8f7a9a7c34f314fbfe2b67119a111d83e1b5b5a3296024edd08a06d6b1f9f229e2270b178fb3e1e101151a04a53934053009cc8655d047c5dd240a03b265d43dfb332fbfd7a7f56ab9418a3a387b6f79a23f0ca68514de294ab8fef9cffe345aa2e6c1fd787cb61e1fa141f608aad9d43bc023c7ae21d5f943f11155b5c903c5012104573ac8241f3bff10ab7c3a7beb4e5059a5395fd1a657d8a73ed4019f8182b4dd"}, {0x26, 0x1b, "bb8ad09d796e54577e2636d16a8ade9461badf608a61b8fabc5bc227aa2f009ccd6b82a84db90bf6fdaabadfb8b2586d764d1cf6949149e62b045087b73653f2c23705faaa77abb16b584c39e1560fe33d9bf255060ee941f67e343736ac168a1edf80d32439de6702c04104d678d31caae7f4d75c4d420cc3b04c52996b68f1a6b174d38419e171e52e809436712e491ffd1ea4afad3d982bf54398e31c80cb73f0a36f312076f0998afb3553e4605e32ac54eee991602251d4c3207fad377d0ee2c45149d6723fa0f3490a373d240f2462f79078cf89d4"}, {0x4, 0xf, "86b45492433616bce5c1289edd7b2e7d2a0f1dbd0299c230dbbb393f515518443beaec0e4db69264ec982701cef424533327af281c817e96105e87fdd534b8443f13ebd97e1a4d17f62fd89d370d28a655dba8dbec7430ede4cecc882efab47ea0ae72644e0d78879ebe7ed6308f3100936e842557e3"}, {0x18, 0xc, "4898521f6e38862d58e37100d2047d34d4c5e78252f61d1a39010204a3e5ee6af40ef0add26dcf233ce27c160d33662745dce5d50fdfbac1803f0016f35028a941fb37c42382addc69114e27b70c9fabd351b472961b47a7e3b76a2f4cdd02339b"}, {0x19, 0x0, '[\f'}, {0x0, 0x3, "66f902ceb64962d543949e96a5334aec8c43462c7e0f6847f09579"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000ba2f050000000000000000000700000114000480080001400000cfa8b671a0f509e1225804b3"], 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x28040600) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') ioctl$SIOCSIFHWADDR(r4, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {0x0}, {&(0x7f0000000200)=""/129, 0x81}], 0x3, 0x6, 0xfffeeffa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x50, 0x7, 0x1, 0x0, "25a2a23a881606da55d8b3f977f7ae81e13bbd1a87c68c0da08ace7c36327dbdea8931f42003d2e846c883b23cd84ff955c2d052e00a1fccd333b32330b4d0f3658ee3452afb8f603f5c7ef4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 356.868634ms ago: executing program 5 (id=8198): r0 = socket$packet(0x11, 0x3, 0x300) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r1 = gettid() (rerun: 32) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/42, 0x2a) (async) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) tkill(r1, 0x16) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x4, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xdffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x23b, &(0x7f0000000480)=ANY=[@ANYBLOB="b8f34a457b050180c200000386dd680582fa02050601fe880000000000000000000000000401000000000000000000000000000000002b1e0000000000001ee9b4e8460277736ca5a000d23687e22849d76b79c827dbd76a291719d110b269c28e995903deb920de1430d6651089fb3b7c85f671d242985debfd4900964740e77f8447fe11af40ff1801ebedb3e2a270fcc819cb12da7ebc3599a1d9f1421bd8be2df4a95beb9563fa263f20eb67b46f5d6807889e3d6f96b1f09527b1c7022577eff9d0a7ff3a52ba3b1f4c898009ed9b76a41afe4d9ff0ef36e93dd0a50785815794c3a52fcdfda993037338dcfdb5aa321351a9dece92966e3f39a438d8d56b6a12e0375ed767c14733c0811fa5d75cd37eb025777c3b1b1016a9cc97f8992e3b8bf5ad87bc2432c66f8265c923c6ec010400000000050234434b9e2b04812d0068e9350006000000890c01ff00000000ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000000000000001fe880000000000000000000000000001ff00ff6165000000880b00000000000007180000000304050600000000000000000007000000000000000720000000000608b47bbc0000000000000000020000000000000200000000000000c20400000005040105000100040102010a00000000000000000000c2040000074a0000000000000000000000000000000000000000004e2300004e2400000003000000040000000400000002000000000012ebfcc82e7afdd524dcc289188e74"], 0x0) 73.036356ms ago: executing program 5 (id=8199): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @any, 0x0, 0xffffffffffffffff, 0x4000000f8, 0x8, 0x0, 0x4000002, 0x7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) read(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='ed:cb2e') pipe2$9p(&(0x7f00000027c0), 0x0) unshare(0x22020000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000340)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4bfa, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) 0s ago: executing program 3 (id=8200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 6646][ T5950] hid-generic 00A0:0006:0003.0094: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2062.609033][ T4529] bridge_slave_0: entered promiscuous mode [ 2062.615044][ T4529] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2062.633006][ T4533] sock: sock_timestamping_bind_phc: sock not bind to device [ 2062.982051][ T4545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2063.563313][ T4551] netlink: 'syz.3.7754': attribute type 3 has an invalid length. [ 2063.767070][ T4557] input: syz1 as /devices/virtual/input/input206 [ 2064.355793][T19318] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2064.505790][T19318] usb 4-1: device descriptor read/64, error -71 [ 2064.505789][ T5950] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2064.685844][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 2064.746003][T19318] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2064.799540][ T4576] FAULT_INJECTION: forcing a failure. [ 2064.799540][ T4576] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.814860][ T5950] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.826122][ T4576] CPU: 1 UID: 0 PID: 4576 Comm: syz.1.7761 Not tainted syzkaller #0 PREEMPT(full) [ 2064.826148][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2064.826159][ T4576] Call Trace: [ 2064.826167][ T4576] [ 2064.826175][ T4576] dump_stack_lvl+0x189/0x250 [ 2064.826203][ T4576] ? __pfx____ratelimit+0x10/0x10 [ 2064.826224][ T4576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2064.826245][ T4576] ? __pfx__printk+0x10/0x10 [ 2064.826266][ T4576] ? __pfx___might_resched+0x10/0x10 [ 2064.826283][ T4576] ? fs_reclaim_acquire+0x7d/0x100 [ 2064.826313][ T4576] should_fail_ex+0x414/0x560 [ 2064.826343][ T4576] should_failslab+0xa8/0x100 [ 2064.826363][ T4576] __kmalloc_noprof+0xcb/0x7f0 [ 2064.826386][ T4576] ? tomoyo_encode+0x28b/0x550 [ 2064.826416][ T4576] tomoyo_encode+0x28b/0x550 [ 2064.826461][ T4576] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2064.826487][ T4576] ? tomoyo_domain+0xd9/0x130 [ 2064.826507][ T4576] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2064.826538][ T4576] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2064.826562][ T4576] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2064.826622][ T4576] ? __fget_files+0x2a/0x420 [ 2064.826645][ T4576] ? __fget_files+0x3a0/0x420 [ 2064.826661][ T4576] ? __fget_files+0x2a/0x420 [ 2064.826682][ T4576] security_file_ioctl+0xcb/0x2d0 [ 2064.826706][ T4576] __se_sys_ioctl+0x47/0x170 [ 2064.826731][ T4576] do_syscall_64+0xfa/0xfa0 [ 2064.826754][ T4576] ? lockdep_hardirqs_on+0x9c/0x150 [ 2064.826776][ T4576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.826795][ T4576] ? clear_bhb_loop+0x60/0xb0 [ 2064.826816][ T4576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.826834][ T4576] RIP: 0033:0x7fc9b158f6c9 [ 2064.826851][ T4576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.826866][ T4576] RSP: 002b:00007fc9b23d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2064.826887][ T4576] RAX: ffffffffffffffda RBX: 00007fc9b17e5fa0 RCX: 00007fc9b158f6c9 [ 2064.826901][ T4576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2064.826912][ T4576] RBP: 00007fc9b23d0090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.826924][ T4576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.826936][ T4576] R13: 00007fc9b17e6038 R14: 00007fc9b17e5fa0 R15: 00007fc9b190fa28 [ 2064.826968][ T4576] [ 2064.830401][ T4576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2064.895627][T19318] usb 4-1: device descriptor read/64, error -71 [ 2064.900139][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2065.017381][T19318] usb usb4-port1: attempt power cycle [ 2065.060352][ T4576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2065.113847][ T5950] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2065.129148][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.142576][ T5950] usb 6-1: Product: syz [ 2065.149808][ T5950] usb 6-1: Manufacturer: syz [ 2065.154553][ T5950] usb 6-1: SerialNumber: syz [ 2065.445956][T19318] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2065.466416][T19318] usb 4-1: device descriptor read/8, error -71 [ 2065.705907][T19318] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2065.726490][T19318] usb 4-1: device descriptor read/8, error -71 [ 2065.836679][T19318] usb usb4-port1: unable to enumerate USB device [ 2065.990713][ T4580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2066.007412][ T4580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.037546][ T4580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7762'. [ 2066.134179][ T4584] netlink: 'syz.6.7763': attribute type 21 has an invalid length. [ 2066.191084][ T4584] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7763'. [ 2066.205478][ T4584] netlink: 'syz.6.7763': attribute type 5 has an invalid length. [ 2066.213642][ T4584] netlink: 'syz.6.7763': attribute type 6 has an invalid length. [ 2066.223402][ T4584] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7763'. [ 2067.105563][ T4590] loop4: detected capacity change from 0 to 2560 [ 2067.115017][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7764'. [ 2067.142787][ T5950] usb 6-1: 0:2 : does not exist [ 2067.152723][ T3534] buffer_io_error: 333 callbacks suppressed [ 2067.152742][ T3534] Buffer I/O error on dev loop4, logical block 0, async page read [ 2067.222533][ T5950] usb 6-1: USB disconnect, device number 52 [ 2067.374797][ T4590] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 2067.385521][ T4590] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 2067.413053][ T4590] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 2067.468054][ T4590] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 2067.488164][ T4590] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 2067.529699][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.546189][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.656048][ T4590] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 2067.664837][ T4590] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 2067.673796][ T4590] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 2067.683122][ T4590] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 2068.349771][ T1681] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2068.370361][ T4618] loop6: detected capacity change from 0 to 524288000 [ 2068.528126][ T4619] support for the xor transformation has been removed. [ 2068.565885][ T1681] usb 4-1: Using ep0 maxpacket: 16 [ 2068.731190][ T1681] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2068.755502][ T1681] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2068.767464][ T4622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2068.793396][ T1681] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2068.835913][ T1681] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2068.855817][ T1681] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2068.868224][ T1681] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 2068.885407][ T1681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2068.894934][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2068.907588][ T1681] usb 4-1: SerialNumber: syz [ 2068.923078][ T1681] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 2069.011855][ T4631] program syz.1.7774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2069.025558][ T4632] FAULT_INJECTION: forcing a failure. [ 2069.025558][ T4632] name failslab, interval 1, probability 0, space 0, times 0 [ 2069.040055][ T4632] CPU: 1 UID: 0 PID: 4632 Comm: syz.7.7772 Not tainted syzkaller #0 PREEMPT(full) [ 2069.040081][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2069.040090][ T4632] Call Trace: [ 2069.040097][ T4632] [ 2069.040103][ T4632] dump_stack_lvl+0x189/0x250 [ 2069.040122][ T4632] ? __pfx____ratelimit+0x10/0x10 [ 2069.040136][ T4632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2069.040149][ T4632] ? __pfx__printk+0x10/0x10 [ 2069.040161][ T4632] ? __pfx___might_resched+0x10/0x10 [ 2069.040173][ T4632] ? fs_reclaim_acquire+0x7d/0x100 [ 2069.040192][ T4632] should_fail_ex+0x414/0x560 [ 2069.040209][ T4632] should_failslab+0xa8/0x100 [ 2069.040221][ T4632] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2069.040234][ T4632] ? trace_contention_end+0x39/0x120 [ 2069.040246][ T4632] ? vhost_task_create+0xf8/0x320 [ 2069.040262][ T4632] vhost_task_create+0xf8/0x320 [ 2069.040274][ T4632] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2069.040288][ T4632] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2069.040301][ T4632] ? __pfx_vhost_task_create+0x10/0x10 [ 2069.040317][ T4632] ? __pfx_vhost_task_fn+0x10/0x10 [ 2069.040339][ T4632] kvm_mmu_post_init_vm+0x14c/0x300 [ 2069.040374][ T4632] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2069.040392][ T4632] ? __mutex_trylock_common+0x153/0x260 [ 2069.040405][ T4632] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2069.040417][ T4632] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2069.040432][ T4632] ? rcu_is_watching+0x15/0xb0 [ 2069.040444][ T4632] ? trace_contention_end+0x39/0x120 [ 2069.040455][ T4632] ? look_up_lock_class+0x74/0x170 [ 2069.040470][ T4632] ? register_lock_class+0x51/0x320 [ 2069.040483][ T4632] ? __lock_acquire+0xab9/0xd20 [ 2069.040508][ T4632] kvm_vcpu_ioctl+0x95c/0xe90 [ 2069.040525][ T4632] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2069.040550][ T4632] ? __fget_files+0x2a/0x420 [ 2069.040562][ T4632] ? __fget_files+0x3a0/0x420 [ 2069.040571][ T4632] ? __fget_files+0x2a/0x420 [ 2069.040582][ T4632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2069.040594][ T4632] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2069.040607][ T4632] __se_sys_ioctl+0xfc/0x170 [ 2069.040621][ T4632] do_syscall_64+0xfa/0xfa0 [ 2069.040634][ T4632] ? lockdep_hardirqs_on+0x9c/0x150 [ 2069.040646][ T4632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.040656][ T4632] ? clear_bhb_loop+0x60/0xb0 [ 2069.040668][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2069.040678][ T4632] RIP: 0033:0x7fb4cad8f6c9 [ 2069.040688][ T4632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2069.040696][ T4632] RSP: 002b:00007fb4cbccc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2069.040708][ T4632] RAX: ffffffffffffffda RBX: 00007fb4cafe5fa0 RCX: 00007fb4cad8f6c9 [ 2069.040715][ T4632] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2069.040722][ T4632] RBP: 00007fb4cbccc090 R08: 0000000000000000 R09: 0000000000000000 [ 2069.040728][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2069.040734][ T4632] R13: 00007fb4cafe6038 R14: 00007fb4cafe5fa0 R15: 00007fb4cb10fa28 [ 2069.040754][ T4632] [ 2069.398840][ T4611] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2069.919742][ T4641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.992801][ T4641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.446345][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7777'. [ 2070.680324][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7779'. [ 2071.263970][ T5911] usb 4-1: USB disconnect, device number 106 [ 2072.415803][T19318] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2072.433352][ T4672] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7782'. [ 2072.568374][ T4672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2072.601226][T19318] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2072.613687][T19318] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2072.634875][T19318] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2072.661865][T19318] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2072.683397][T19318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.722810][T19318] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2072.825501][T19318] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2072.856771][ T3534] udevd[3534]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2072.931685][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2072.940758][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.435983][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2073.874195][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7789'. [ 2074.066228][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.075427][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.176070][ T5950] usb 6-1: USB disconnect, device number 53 [ 2075.955777][ T855] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2076.085784][ T855] usb 4-1: device descriptor read/64, error -71 [ 2076.325805][ T855] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2076.475980][ T855] usb 4-1: device descriptor read/64, error -71 [ 2076.596527][ T855] usb usb4-port1: attempt power cycle [ 2076.945916][ T855] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2076.986583][ T855] usb 4-1: device descriptor read/8, error -71 [ 2077.285989][ T855] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2077.327600][ T855] usb 4-1: device descriptor read/8, error -71 [ 2077.372270][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2077.388423][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.447776][ T855] usb usb4-port1: unable to enumerate USB device [ 2077.633780][ T4759] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7804'. [ 2077.646470][ T4759] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7804'. [ 2077.720639][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2077.720659][ T30] audit: type=1326 audit(1762540968.895:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.741314][ T4763] xt_TCPMSS: Only works on TCP SYN packets [ 2077.752191][ T30] audit: type=1326 audit(1762540968.895:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.779660][ T30] audit: type=1326 audit(1762540968.895:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.803174][ T30] audit: type=1326 audit(1762540968.895:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.826286][ T30] audit: type=1326 audit(1762540968.895:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.844290][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7806'. [ 2077.849500][ T30] audit: type=1326 audit(1762540968.895:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.881883][ T30] audit: type=1326 audit(1762540968.895:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.889775][ T4763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7806'. [ 2077.904810][ T30] audit: type=1326 audit(1762540968.895:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.937685][ T30] audit: type=1326 audit(1762540968.895:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2077.980317][ T30] audit: type=1326 audit(1762540968.905:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.5.7806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dc58f6c9 code=0x7ffc0000 [ 2078.265077][ T4780] netlink: 428 bytes leftover after parsing attributes in process `syz.5.7812'. [ 2078.376001][ T4788] netlink: 'syz.6.7814': attribute type 10 has an invalid length. [ 2078.384164][ T4788] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7814'. [ 2078.403944][ T4788] team0: Port device geneve0 added [ 2078.557719][ T5950] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 2078.647659][ T4798] fuse: Bad value for 'group_id' [ 2078.652859][ T4798] fuse: Bad value for 'group_id' [ 2078.681569][ T4798] sctp: [Deprecated]: syz.6.7817 (pid 4798) Use of int in max_burst socket option. [ 2078.681569][ T4798] Use struct sctp_assoc_value instead [ 2078.705890][ T5950] usb 6-1: device descriptor read/64, error -71 [ 2078.878432][ T4804] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2078.889106][ T4809] loop7: detected capacity change from 0 to 16384 [ 2078.965887][ T5950] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 2079.106291][ T4816] loop7: detected capacity change from 16384 to 16383 [ 2079.136312][ T5950] usb 6-1: device descriptor read/64, error -71 [ 2079.246705][ T5950] usb usb6-port1: attempt power cycle [ 2079.616679][ T5950] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2079.637220][ T5950] usb 6-1: device descriptor read/8, error -71 [ 2079.916251][ T5950] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 2079.966566][ T5950] usb 6-1: device descriptor read/8, error -71 [ 2080.118762][ T5950] usb usb6-port1: unable to enumerate USB device [ 2080.411601][ T4833] tipc: Resetting bearer [ 2080.865929][T19318] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2081.127239][T19318] usb 4-1: Using ep0 maxpacket: 16 [ 2081.210478][T19318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2081.225215][T19318] usb 4-1: config 8 has an invalid interface number: 132 but max is 0 [ 2081.233923][T19318] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.234919][ T4848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2081.244504][T19318] usb 4-1: config 8 has no interface number 0 [ 2081.282856][T19318] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2081.367593][T19318] usb 4-1: config 8 interface 132 has no altsetting 0 [ 2081.499019][T19318] usb 4-1: string descriptor 0 read error: -22 [ 2081.505591][T19318] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 2081.541604][T19318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.568789][T19318] usb-storage 4-1:8.132: USB Mass Storage device detected [ 2081.607390][ T4850] loop6: detected capacity change from 0 to 7 [ 2081.615073][ T4850] Dev loop6: unable to read RDB block 7 [ 2081.626491][ T4850] loop6: unable to read partition table [ 2081.632648][ T4850] loop6: partition table beyond EOD, truncated [ 2081.640178][T19318] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a [ 2081.683198][ T4850] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2081.879321][ C0] vkms_vblank_simulate: vblank timer overrun [ 2082.055318][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.064576][ T4866] program syz.1.7834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2082.082495][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.140261][ T4863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7833'. [ 2082.693122][ T4870] FAULT_INJECTION: forcing a failure. [ 2082.693122][ T4870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2082.707903][ T4870] CPU: 1 UID: 0 PID: 4870 Comm: syz.1.7835 Not tainted syzkaller #0 PREEMPT(full) [ 2082.707928][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2082.707939][ T4870] Call Trace: [ 2082.707946][ T4870] [ 2082.707954][ T4870] dump_stack_lvl+0x189/0x250 [ 2082.707981][ T4870] ? __pfx____ratelimit+0x10/0x10 [ 2082.708002][ T4870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2082.708023][ T4870] ? __pfx__printk+0x10/0x10 [ 2082.708041][ T4870] ? fs_reclaim_acquire+0x7d/0x100 [ 2082.708072][ T4870] should_fail_ex+0x414/0x560 [ 2082.708100][ T4870] prepare_alloc_pages+0x213/0x610 [ 2082.708125][ T4870] __alloc_frozen_pages_noprof+0x123/0x370 [ 2082.708148][ T4870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2082.708170][ T4870] ? policy_nodemask+0x27c/0x720 [ 2082.708182][ T4870] alloc_pages_bulk_noprof+0x560/0x710 [ 2082.708197][ T4870] ? alloc_pages_noprof+0xbe/0x190 [ 2082.708209][ T4870] kasan_populate_vmalloc+0xd1/0x270 [ 2082.708224][ T4870] ? do_raw_spin_unlock+0x122/0x240 [ 2082.708241][ T4870] alloc_vmap_area+0xd7a/0x14c0 [ 2082.708264][ T4870] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2082.708275][ T4870] ? __kasan_kmalloc+0x93/0xb0 [ 2082.708291][ T4870] ? __get_vm_area_node+0x13f/0x300 [ 2082.708305][ T4870] ? copy_process+0x54b/0x3c00 [ 2082.708317][ T4870] __get_vm_area_node+0x1f8/0x300 [ 2082.708333][ T4870] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 2082.708347][ T4870] ? copy_process+0x54b/0x3c00 [ 2082.708369][ T4870] ? percpu_ref_get_many+0x19/0x140 [ 2082.708385][ T4870] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 2082.708404][ T4870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2082.708419][ T4870] ? memcpy_and_pad+0x48/0x80 [ 2082.708435][ T4870] __vmalloc_node_noprof+0xc2/0x110 [ 2082.708449][ T4870] ? copy_process+0x54b/0x3c00 [ 2082.708458][ T4870] ? copy_process+0x54b/0x3c00 [ 2082.708469][ T4870] dup_task_struct+0x3d4/0x830 [ 2082.708480][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2082.708495][ T4870] copy_process+0x54b/0x3c00 [ 2082.708522][ T4870] ? __pfx_copy_process+0x10/0x10 [ 2082.708540][ T4870] vhost_task_create+0x1ce/0x320 [ 2082.708553][ T4870] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2082.708568][ T4870] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2082.708580][ T4870] ? __pfx_vhost_task_create+0x10/0x10 [ 2082.708597][ T4870] ? __pfx_vhost_task_fn+0x10/0x10 [ 2082.708619][ T4870] kvm_mmu_post_init_vm+0x14c/0x300 [ 2082.708636][ T4870] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2082.708661][ T4870] ? __mutex_trylock_common+0x153/0x260 [ 2082.708675][ T4870] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2082.708687][ T4870] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2082.708702][ T4870] ? rcu_is_watching+0x15/0xb0 [ 2082.708715][ T4870] ? trace_contention_end+0x39/0x120 [ 2082.708726][ T4870] ? look_up_lock_class+0x74/0x170 [ 2082.708740][ T4870] ? register_lock_class+0x51/0x320 [ 2082.708753][ T4870] ? __lock_acquire+0xab9/0xd20 [ 2082.708778][ T4870] kvm_vcpu_ioctl+0x95c/0xe90 [ 2082.708796][ T4870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2082.708820][ T4870] ? __fget_files+0x2a/0x420 [ 2082.708833][ T4870] ? __fget_files+0x3a0/0x420 [ 2082.708841][ T4870] ? __fget_files+0x2a/0x420 [ 2082.708852][ T4870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2082.708864][ T4870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2082.708877][ T4870] __se_sys_ioctl+0xfc/0x170 [ 2082.708891][ T4870] do_syscall_64+0xfa/0xfa0 [ 2082.708904][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2082.708917][ T4870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2082.708926][ T4870] ? clear_bhb_loop+0x60/0xb0 [ 2082.708939][ T4870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2082.708949][ T4870] RIP: 0033:0x7fc9b158f6c9 [ 2082.708960][ T4870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2082.708969][ T4870] RSP: 002b:00007fc9b23d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2082.708981][ T4870] RAX: ffffffffffffffda RBX: 00007fc9b17e5fa0 RCX: 00007fc9b158f6c9 [ 2082.708989][ T4870] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2082.708995][ T4870] RBP: 00007fc9b23d0090 R08: 0000000000000000 R09: 0000000000000000 [ 2082.709001][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2082.709007][ T4870] R13: 00007fc9b17e6038 R14: 00007fc9b17e5fa0 R15: 00007fc9b190fa28 [ 2082.709026][ T4870] [ 2082.709209][ T4870] syz.1.7835: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2083.172290][ T4870] CPU: 1 UID: 0 PID: 4870 Comm: syz.1.7835 Not tainted syzkaller #0 PREEMPT(full) [ 2083.172317][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2083.172329][ T4870] Call Trace: [ 2083.172337][ T4870] [ 2083.172346][ T4870] dump_stack_lvl+0x189/0x250 [ 2083.172368][ T4870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2083.172381][ T4870] ? __pfx__printk+0x10/0x10 [ 2083.172399][ T4870] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2083.172413][ T4870] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2083.172427][ T4870] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2083.172441][ T4870] warn_alloc+0x214/0x310 [ 2083.172456][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.172472][ T4870] ? __pfx_warn_alloc+0x10/0x10 [ 2083.172490][ T4870] ? copy_process+0x54b/0x3c00 [ 2083.172501][ T4870] ? __get_vm_area_node+0x211/0x300 [ 2083.172519][ T4870] __vmalloc_node_range_noprof+0x331/0x12d0 [ 2083.172538][ T4870] ? percpu_ref_get_many+0x19/0x140 [ 2083.172555][ T4870] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 2083.172572][ T4870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2083.172587][ T4870] ? memcpy_and_pad+0x48/0x80 [ 2083.172604][ T4870] __vmalloc_node_noprof+0xc2/0x110 [ 2083.172618][ T4870] ? copy_process+0x54b/0x3c00 [ 2083.172627][ T4870] ? copy_process+0x54b/0x3c00 [ 2083.172639][ T4870] dup_task_struct+0x3d4/0x830 [ 2083.172652][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.172667][ T4870] copy_process+0x54b/0x3c00 [ 2083.172693][ T4870] ? __pfx_copy_process+0x10/0x10 [ 2083.172711][ T4870] vhost_task_create+0x1ce/0x320 [ 2083.172729][ T4870] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2083.172744][ T4870] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2083.172757][ T4870] ? __pfx_vhost_task_create+0x10/0x10 [ 2083.172773][ T4870] ? __pfx_vhost_task_fn+0x10/0x10 [ 2083.172796][ T4870] kvm_mmu_post_init_vm+0x14c/0x300 [ 2083.172813][ T4870] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 2083.172831][ T4870] ? __mutex_trylock_common+0x153/0x260 [ 2083.172846][ T4870] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2083.172858][ T4870] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2083.172873][ T4870] ? rcu_is_watching+0x15/0xb0 [ 2083.172885][ T4870] ? trace_contention_end+0x39/0x120 [ 2083.172896][ T4870] ? look_up_lock_class+0x74/0x170 [ 2083.172910][ T4870] ? register_lock_class+0x51/0x320 [ 2083.172923][ T4870] ? __lock_acquire+0xab9/0xd20 [ 2083.172948][ T4870] kvm_vcpu_ioctl+0x95c/0xe90 [ 2083.172966][ T4870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2083.172992][ T4870] ? __fget_files+0x2a/0x420 [ 2083.173004][ T4870] ? __fget_files+0x3a0/0x420 [ 2083.173013][ T4870] ? __fget_files+0x2a/0x420 [ 2083.173023][ T4870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2083.173036][ T4870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2083.173049][ T4870] __se_sys_ioctl+0xfc/0x170 [ 2083.173062][ T4870] do_syscall_64+0xfa/0xfa0 [ 2083.173076][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2083.173089][ T4870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.173098][ T4870] ? clear_bhb_loop+0x60/0xb0 [ 2083.173110][ T4870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.173120][ T4870] RIP: 0033:0x7fc9b158f6c9 [ 2083.173130][ T4870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2083.173139][ T4870] RSP: 002b:00007fc9b23d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2083.173151][ T4870] RAX: ffffffffffffffda RBX: 00007fc9b17e5fa0 RCX: 00007fc9b158f6c9 [ 2083.173159][ T4870] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2083.173165][ T4870] RBP: 00007fc9b23d0090 R08: 0000000000000000 R09: 0000000000000000 [ 2083.173171][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2083.173177][ T4870] R13: 00007fc9b17e6038 R14: 00007fc9b17e5fa0 R15: 00007fc9b190fa28 [ 2083.173194][ T4870] [ 2083.174514][ T4870] Mem-Info: [ 2083.618369][ T4870] active_anon:7283 inactive_anon:0 isolated_anon:0 [ 2083.618369][ T4870] active_file:19596 inactive_file:4493 isolated_file:0 [ 2083.618369][ T4870] unevictable:768 dirty:161 writeback:0 [ 2083.618369][ T4870] slab_reclaimable:6721 slab_unreclaimable:115903 [ 2083.618369][ T4870] mapped:30843 shmem:1377 pagetables:1879 [ 2083.618369][ T4870] sec_pagetables:0 bounce:0 [ 2083.618369][ T4870] kernel_misc_reclaimable:0 [ 2083.618369][ T4870] free:1317335 free_pcp:18489 free_cma:0 [ 2083.624147][ T855] usb 4-1: USB disconnect, device number 111 [ 2083.677899][ T4870] Node 0 active_anon:29132kB inactive_anon:0kB active_file:78352kB inactive_file:17844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123340kB dirty:644kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13096kB pagetables:7244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2083.750449][ T4870] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2083.784155][ T4870] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2083.855713][ T4870] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 2083.861570][ T4870] Node 0 DMA32 free:1378628kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28932kB inactive_anon:0kB active_file:78352kB inactive_file:17944kB unevictable:1536kB writepending:644kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:35268kB local_pcp:20196kB free_cma:0kB [ 2083.930904][ T4870] lowmem_reserve[]: 0 0 0 0 0 [ 2083.937271][ T4870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2083.970128][ T4870] lowmem_reserve[]: 0 0 0 0 0 [ 2083.975098][ T4870] Node 1 Normal free:3875356kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39384kB local_pcp:11900kB free_cma:0kB [ 2084.024991][ T4870] lowmem_reserve[]: 0 0 0 0 0 [ 2084.025078][ T4870] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 2084.025268][ T4870] Node 0 DMA32: 2400*4kB (UM) 1264*8kB (UME) 958*16kB (UME) 1178*32kB (UME) 538*64kB (UME) 292*128kB (UME) 101*256kB (UME) 122*512kB (UME) 95*1024kB (UME) 6*2048kB (UM) 253*4096kB (UM) = 1378720kB [ 2084.045512][ T4870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2084.045626][ T4870] Node 1 Normal: 178*4kB (UM) 74*8kB (UME) 50*16kB (UME) 187*32kB (UME) 68*64kB (UME) 11*128kB (UME) 7*256kB (UME) 5*512kB (UM) 3*1024kB (UM) 6*2048kB (UME) 938*4096kB (UM) = 3875608kB [ 2084.045873][ T4870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2084.045891][ T4870] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2084.045908][ T4870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2084.045923][ T4870] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2084.045939][ T4870] 25461 total pagecache pages [ 2084.045947][ T4870] 0 pages in swap cache [ 2084.045955][ T4870] Free swap = 124996kB [ 2084.045963][ T4870] Total swap = 124996kB [ 2084.045972][ T4870] 2097051 pages RAM [ 2084.045981][ T4870] 0 pages HighMem/MovableOnly [ 2084.045990][ T4870] 424119 pages reserved [ 2084.045998][ T4870] 0 pages cma reserved [ 2084.175793][ T1681] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2084.329961][ T1681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2084.340048][ T1681] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2084.351828][ T1681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2084.361680][ T1681] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2084.371566][ T1681] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2084.388019][ T1681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.399315][ T1681] usb 6-1: config 0 descriptor?? [ 2084.535905][ T855] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2084.609511][ T4878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2084.618268][ T1681] hdpvr 6-1:0.0: firmware version 0x8 dated ¥)†#´–¶jnÛý [ 2084.619677][ T4878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2084.692425][ T855] usb 4-1: Using ep0 maxpacket: 8 [ 2084.702281][ T855] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 2084.716381][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 2084.727813][ T855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2084.741065][ T855] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 2084.750731][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.768222][ T855] usb 4-1: config 0 descriptor?? [ 2085.062265][ T1681] hdpvr 6-1:0.0: Could not setup controls [ 2085.076102][ T1681] hdpvr 6-1:0.0: registering videodev failed [ 2085.121153][ T1681] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 2085.153953][ T1681] usb 6-1: USB disconnect, device number 58 [ 2085.961579][ T855] redragon 0003:0C45:760B.0095: Fixing Redragon ASURA report descriptor. [ 2085.983344][ T855] hid_parser_main: 5 callbacks suppressed [ 2085.983369][ T855] redragon 0003:0C45:760B.0095: unknown main item tag 0x6 [ 2086.042012][ T855] redragon 0003:0C45:760B.0095: item fetching failed at offset 7/133 [ 2086.192624][ T855] redragon 0003:0C45:760B.0095: probe with driver redragon failed with error -22 [ 2087.344361][ T4926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2087.350680][ T4926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2087.365433][ T4926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2087.385626][ T4926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2087.394640][ T4926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2087.450644][ T4926] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2087.978508][ T4935] FAULT_INJECTION: forcing a failure. [ 2087.978508][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.137176][ T4935] CPU: 0 UID: 0 PID: 4935 Comm: syz.7.7853 Not tainted syzkaller #0 PREEMPT(full) [ 2088.137203][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2088.137215][ T4935] Call Trace: [ 2088.137223][ T4935] [ 2088.137232][ T4935] dump_stack_lvl+0x189/0x250 [ 2088.137260][ T4935] ? __pfx____ratelimit+0x10/0x10 [ 2088.137284][ T4935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2088.137306][ T4935] ? __pfx__printk+0x10/0x10 [ 2088.137332][ T4935] ? __pfx___might_resched+0x10/0x10 [ 2088.137352][ T4935] ? fs_reclaim_acquire+0x7d/0x100 [ 2088.137382][ T4935] should_fail_ex+0x414/0x560 [ 2088.137414][ T4935] should_failslab+0xa8/0x100 [ 2088.137434][ T4935] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2088.137457][ T4935] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2088.137485][ T4935] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2088.137519][ T4935] mmu_topup_memory_caches+0x21/0x170 [ 2088.137545][ T4935] kvm_mmu_load+0x9d/0x2300 [ 2088.137566][ T4935] ? kvm_msr_allowed+0x9a/0x490 [ 2088.137592][ T4935] ? kvm_msr_allowed+0x3f4/0x490 [ 2088.137610][ T4935] ? kvm_msr_allowed+0x9a/0x490 [ 2088.137631][ T4935] ? kvm_msr_allowed+0x9a/0x490 [ 2088.137658][ T4935] ? kvm_apic_has_interrupt+0x70a/0x770 [ 2088.137681][ T4935] ? kvm_apic_accept_pic_intr+0x11d/0x140 [ 2088.137715][ T4935] vcpu_run+0x48a8/0x7040 [ 2088.137805][ T4935] ? __pfx_vcpu_run+0x10/0x10 [ 2088.137828][ T4935] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2088.137868][ T4935] ? rcu_is_watching+0x15/0xb0 [ 2088.137895][ T4935] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2088.137934][ T4935] ? __mutex_trylock_common+0x153/0x260 [ 2088.137958][ T4935] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2088.137982][ T4935] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2088.138009][ T4935] ? rcu_is_watching+0x15/0xb0 [ 2088.138029][ T4935] ? trace_contention_end+0x39/0x120 [ 2088.138048][ T4935] ? look_up_lock_class+0x74/0x170 [ 2088.138075][ T4935] ? register_lock_class+0x51/0x320 [ 2088.138099][ T4935] ? __lock_acquire+0xab9/0xd20 [ 2088.138143][ T4935] kvm_vcpu_ioctl+0x95c/0xe90 [ 2088.138173][ T4935] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2088.138219][ T4935] ? __fget_files+0x2a/0x420 [ 2088.138241][ T4935] ? __fget_files+0x3a0/0x420 [ 2088.138256][ T4935] ? __fget_files+0x2a/0x420 [ 2088.138277][ T4935] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2088.138297][ T4935] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2088.138319][ T4935] __se_sys_ioctl+0xfc/0x170 [ 2088.138345][ T4935] do_syscall_64+0xfa/0xfa0 [ 2088.138367][ T4935] ? lockdep_hardirqs_on+0x9c/0x150 [ 2088.138390][ T4935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.138407][ T4935] ? clear_bhb_loop+0x60/0xb0 [ 2088.138430][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2088.138449][ T4935] RIP: 0033:0x7fb4cad8f6c9 [ 2088.138466][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2088.138482][ T4935] RSP: 002b:00007fb4cbccc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2088.138503][ T4935] RAX: ffffffffffffffda RBX: 00007fb4cafe5fa0 RCX: 00007fb4cad8f6c9 [ 2088.138517][ T4935] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2088.138529][ T4935] RBP: 00007fb4cbccc090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.138541][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.138552][ T4935] R13: 00007fb4cafe6038 R14: 00007fb4cafe5fa0 R15: 00007fb4cb10fa28 [ 2088.138586][ T4935] [ 2088.146631][ T1681] usb 4-1: USB disconnect, device number 112 [ 2088.704997][ T4945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.713968][ T4945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.876147][T23261] Bluetooth: hci3: command 0x0c1a tx timeout [ 2089.145853][ T1681] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2089.156278][T19318] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2089.306541][ T1681] usb 4-1: Using ep0 maxpacket: 32 [ 2089.316015][T19318] usb 6-1: Using ep0 maxpacket: 32 [ 2089.322551][ T1681] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 2089.323352][T19318] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2089.340423][ T1681] usb 4-1: config 0 has no interface number 0 [ 2089.347044][T19318] usb 6-1: config 0 has no interface number 0 [ 2089.350259][ T4971] netlink: 'syz.7.7863': attribute type 1 has an invalid length. [ 2089.364233][ T1681] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 2089.373775][ T1681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.415212][T19318] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2089.436523][T23261] Bluetooth: hci0: command 0x0c1a tx timeout [ 2089.458570][T19318] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2089.465970][ T1681] usb 4-1: Product: syz [ 2089.468465][T19318] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2089.475842][ T1681] usb 4-1: Manufacturer: syz [ 2089.484169][ T1681] usb 4-1: SerialNumber: syz [ 2089.493698][T19318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.496459][ T1681] usb 4-1: config 0 descriptor?? [ 2089.519251][ T1681] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 2089.522859][T19318] usb 6-1: Product: syz [ 2089.577012][T19318] usb 6-1: Manufacturer: syz [ 2089.582008][T19318] usb 6-1: SerialNumber: syz [ 2089.618453][T19318] usb 6-1: config 0 descriptor?? [ 2089.687414][ T4971] bond1: entered promiscuous mode [ 2089.693973][ T4971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2089.772792][ T4973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2089.897676][ T4973] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 2089.923430][ T4973] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2089.944336][T19318] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2089.947605][ T1681] gspca_sn9c2028: read1 error -71 [ 2089.960111][ T4973] bond1: (slave gre1): making interface the new active one [ 2089.967909][ T1681] gspca_sn9c2028: read1 error -71 [ 2089.976249][ T1681] sn9c2028 4-1:0.119: probe with driver sn9c2028 failed with error -71 [ 2089.989634][ T4973] gre1: entered promiscuous mode [ 2090.008657][ T1681] usb 4-1: USB disconnect, device number 113 [ 2090.030194][T19318] cx231xx 6-1:0.1: Failed to read PCB config [ 2090.038790][T19318] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 2090.109142][T19318] usb 6-1: USB disconnect, device number 59 [ 2090.116820][ T4973] bond1: (slave gre1): Enslaving as an active interface with an up link [ 2090.535770][T19318] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2090.696294][T19318] usb 6-1: Using ep0 maxpacket: 32 [ 2090.708124][T19318] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2090.751880][T19318] usb 6-1: config 0 has no interface number 0 [ 2090.764291][T19318] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2090.775459][T19318] usb 6-1: config 0 interface 1 has no altsetting 0 [ 2090.787556][T19318] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2090.825810][T19318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2090.834583][T19318] usb 6-1: Product: syz [ 2090.913329][ T4988] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7867'. [ 2090.923462][T19318] usb 6-1: Manufacturer: syz [ 2090.937835][T19318] usb 6-1: SerialNumber: syz [ 2090.965941][ T1681] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2090.980466][T23261] Bluetooth: hci3: command 0x0c1a tx timeout [ 2090.985045][T19318] usb 6-1: config 0 descriptor?? [ 2091.046495][ T4991] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.052565][ T4991] binder: 4981:4991 ioctl 4018620d 200000000040 returned -16 [ 2091.297776][ T4989] syz.6.7866 (4989): drop_caches: 2 [ 2091.357756][T19318] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2091.422709][T19318] cx231xx 6-1:0.1: bad scenario!!!!! [ 2091.422709][T19318] config_info=0 [ 2091.431805][T19318] cx231xx 6-1:0.1: Failed to read PCB config [ 2091.473416][ T1681] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.540135][T23261] Bluetooth: hci0: command 0x0c1a tx timeout [ 2091.565818][ T1681] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2091.588319][ T1681] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2091.601896][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.645916][ T5950] usb 6-1: USB disconnect, device number 60 [ 2091.867053][ T1681] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2092.008818][ T1681] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2092.036953][ T4983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.047520][ T4983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.083935][ T3534] udevd[3534]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2092.145077][ T1681] usb 4-1: USB disconnect, device number 114 [ 2092.242988][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7868'. [ 2092.349367][ T4998] bridge_slave_1: left allmulticast mode [ 2092.356160][ T4998] bridge_slave_1: left promiscuous mode [ 2092.362388][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.391530][ T5000] kvm: kvm [4999]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 2092.400792][ T5000] kvm: kvm [4999]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 2092.424887][ T4998] bridge_slave_0: left allmulticast mode [ 2092.442493][ T4998] bridge_slave_0: left promiscuous mode [ 2092.452283][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.640071][T24326] IPVS: starting estimator thread 0... [ 2092.668693][ T5006] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2092.677504][ T5911] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2092.688131][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 2092.734132][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7871'. [ 2092.743555][ T5007] IPVS: using max 51 ests per chain, 122400 per kthread [ 2092.817555][ T5911] usb 6-1: device descriptor read/64, error -71 [ 2092.840712][ T5006] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7871'. [ 2093.035849][T23261] Bluetooth: hci3: command 0x0c1a tx timeout [ 2093.066145][ T5911] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2093.206007][ T5911] usb 6-1: device descriptor read/64, error -71 [ 2093.316173][ T5911] usb usb6-port1: attempt power cycle [ 2093.599273][T23261] Bluetooth: hci0: command 0x0c1a tx timeout [ 2093.606823][ T5013] FAULT_INJECTION: forcing a failure. [ 2093.606823][ T5013] name failslab, interval 1, probability 0, space 0, times 0 [ 2093.619904][ T5013] CPU: 1 UID: 0 PID: 5013 Comm: syz.1.7873 Not tainted syzkaller #0 PREEMPT(full) [ 2093.619928][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2093.619940][ T5013] Call Trace: [ 2093.619948][ T5013] [ 2093.619958][ T5013] dump_stack_lvl+0x189/0x250 [ 2093.619987][ T5013] ? __pfx____ratelimit+0x10/0x10 [ 2093.620012][ T5013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2093.620035][ T5013] ? __pfx__printk+0x10/0x10 [ 2093.620060][ T5013] ? __pfx___might_resched+0x10/0x10 [ 2093.620080][ T5013] ? fs_reclaim_acquire+0x7d/0x100 [ 2093.620108][ T5013] should_fail_ex+0x414/0x560 [ 2093.620137][ T5013] should_failslab+0xa8/0x100 [ 2093.620155][ T5013] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2093.620179][ T5013] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2093.620207][ T5013] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 2093.620242][ T5013] mmu_topup_memory_caches+0x21/0x170 [ 2093.620268][ T5013] kvm_mmu_load+0x9d/0x2300 [ 2093.620289][ T5013] ? kvm_msr_allowed+0x9a/0x490 [ 2093.620311][ T5013] ? kvm_msr_allowed+0x3f4/0x490 [ 2093.620332][ T5013] ? kvm_msr_allowed+0x9a/0x490 [ 2093.620351][ T5013] ? kvm_msr_allowed+0x9a/0x490 [ 2093.620377][ T5013] ? kvm_apic_has_interrupt+0x70a/0x770 [ 2093.620400][ T5013] ? kvm_apic_accept_pic_intr+0x11d/0x140 [ 2093.620437][ T5013] vcpu_run+0x48a8/0x7040 [ 2093.620524][ T5013] ? __pfx_vcpu_run+0x10/0x10 [ 2093.620547][ T5013] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2093.620588][ T5013] ? rcu_is_watching+0x15/0xb0 [ 2093.620614][ T5013] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2093.620643][ T5013] ? __pfx___schedule+0x10/0x10 [ 2093.620663][ T5013] ? __mutex_trylock_common+0x153/0x260 [ 2093.620689][ T5013] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2093.620715][ T5013] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2093.620751][ T5013] ? look_up_lock_class+0x74/0x170 [ 2093.620777][ T5013] ? register_lock_class+0x51/0x320 [ 2093.620801][ T5013] ? __lock_acquire+0xab9/0xd20 [ 2093.620847][ T5013] kvm_vcpu_ioctl+0x95c/0xe90 [ 2093.620869][ T5013] ? rcu_is_watching+0x15/0xb0 [ 2093.620894][ T5013] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2093.620942][ T5013] ? __fget_files+0x2a/0x420 [ 2093.620964][ T5013] ? __fget_files+0x3a0/0x420 [ 2093.620980][ T5013] ? __fget_files+0x2a/0x420 [ 2093.620998][ T5013] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2093.621018][ T5013] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2093.621042][ T5013] __se_sys_ioctl+0xfc/0x170 [ 2093.621067][ T5013] do_syscall_64+0xfa/0xfa0 [ 2093.621093][ T5013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.621111][ T5013] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2093.621128][ T5013] ? clear_bhb_loop+0x60/0xb0 [ 2093.621150][ T5013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2093.621167][ T5013] RIP: 0033:0x7fc9b158f6c9 [ 2093.621185][ T5013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2093.621199][ T5013] RSP: 002b:00007fc9b23d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2093.621218][ T5013] RAX: ffffffffffffffda RBX: 00007fc9b17e5fa0 RCX: 00007fc9b158f6c9 [ 2093.621232][ T5013] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2093.621244][ T5013] RBP: 00007fc9b23d0090 R08: 0000000000000000 R09: 0000000000000000 [ 2093.621257][ T5013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2093.621268][ T5013] R13: 00007fc9b17e6038 R14: 00007fc9b17e5fa0 R15: 00007fc9b190fa28 [ 2093.621301][ T5013] [ 2093.955937][ T5911] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2093.990763][ T5911] usb 6-1: device descriptor read/8, error -71 [ 2094.236406][ T5911] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2094.266614][ T5911] usb 6-1: device descriptor read/8, error -71 [ 2094.379029][ T5911] usb usb6-port1: unable to enumerate USB device [ 2095.495856][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.510667][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.544910][ T5039] bcm5974 2-1:0.0: could not read from device [ 2095.966401][ T5046] netlink: 'syz.5.7882': attribute type 10 has an invalid length. [ 2095.974549][ T5046] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7882'. [ 2095.999127][ T5046] team0: Port device geneve0 added [ 2096.142499][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.174224][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.261274][ T5046] binder: 5045:5046 ioctl c0306201 200000001a80 returned -14 [ 2096.486796][ T5060] input: syz1 as /devices/virtual/input/input207 [ 2096.521271][ T5060] input: failed to attach handler leds to device input207, error: -6 [ 2097.240041][ T5070] tipc: Enabled bearer , priority 0 [ 2097.250857][ T5070] syzkaller0: entered promiscuous mode [ 2097.271787][ T5070] syzkaller0: entered allmulticast mode [ 2097.322982][ T5070] tipc: Resetting bearer [ 2097.389989][ T5070] tipc: Resetting bearer [ 2097.521215][ T5070] tipc: Disabling bearer [ 2099.059477][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.067552][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.093100][ T5098] bond0: (slave vlan4): Enslaving as an active interface with an up link [ 2099.115879][ T5911] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2099.265799][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 2101.552977][ T5114] binder: 5112:5114 ioctl c018620c 200000000000 returned -22 [ 2101.700526][ T5911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2101.717362][ T5911] usb 6-1: no configurations [ 2101.721992][ T5911] usb 6-1: can't read configurations, error -22 [ 2102.059204][ T5123] loop6: detected capacity change from 0 to 2640 [ 2102.100501][ T5124] blk_print_req_error: 10 callbacks suppressed [ 2102.100522][ T5124] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2102.145382][ T5123] buffer_io_error: 311 callbacks suppressed [ 2102.145400][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.185848][ T5124] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2102.215102][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.246601][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.279342][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.315816][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.336223][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.344201][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.354930][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2102.377978][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2102.388307][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2102.399067][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2102.407565][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2102.464642][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.489246][ T5123] ldm_validate_partition_table(): Disk read failed. [ 2102.531095][ T5132] No such timeout policy "syz1" [ 2102.576777][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.584895][ T5123] Buffer I/O error on dev loop6, logical block 0, async page read [ 2102.612505][ T5123] Dev loop6: unable to read RDB block 0 [ 2102.642968][ T5123] loop6: unable to read partition table [ 2102.650408][ T5123] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2102.713281][ T5199] ldm_validate_partition_table(): Disk read failed. [ 2102.720802][ T5199] Dev loop6: unable to read RDB block 0 [ 2102.797390][ T5199] loop6: unable to read partition table [ 2103.603658][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.612515][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.622654][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.631555][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2104.120486][ T5130] chnl_net:caif_netlink_parms(): no params data found [ 2104.348486][ C0] vkms_vblank_simulate: vblank timer overrun [ 2104.377695][ T855] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2104.480762][T23261] Bluetooth: hci4: command tx timeout [ 2104.570850][ T855] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2104.580342][ T855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.622596][ T855] usb 6-1: Product: syz [ 2104.627892][ T855] usb 6-1: Manufacturer: syz [ 2104.672654][ T855] usb 6-1: SerialNumber: syz [ 2104.827248][ T5171] x_tables: duplicate underflow at hook 1 [ 2105.176710][ T855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2105.191365][ T855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2105.299799][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.415909][ C0] vkms_vblank_simulate: vblank timer overrun [ 2105.437619][T25573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.448594][T25573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2105.459431][T25573] bond0 (unregistering): (slave vlan4): Releasing backup interface [ 2105.469932][T25573] bond0 (unregistering): Released all slaves [ 2105.569116][ T5169] pim6reg: entered allmulticast mode [ 2105.603204][T25573] tipc: Disabling bearer [ 2105.689299][T25573] tipc: Left network mode [ 2105.775480][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.783817][ T5130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.794144][ T5130] bridge_slave_0: entered allmulticast mode [ 2105.825313][ T5130] bridge_slave_0: entered promiscuous mode [ 2105.923267][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.940102][ T5130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.949250][ T5130] bridge_slave_1: entered allmulticast mode [ 2105.961971][ T5130] bridge_slave_1: entered promiscuous mode [ 2106.023212][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7920'. [ 2106.040658][ T5130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.097133][ T5130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2106.220786][T25573] hsr_slave_0: left promiscuous mode [ 2106.229951][T25573] hsr_slave_1: left promiscuous mode [ 2106.236980][T25573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.245233][T25573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2106.564580][T23261] Bluetooth: hci4: command tx timeout [ 2107.030827][ C0] vkms_vblank_simulate: vblank timer overrun [ 2107.039951][ T855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 2107.052610][ T855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2107.068997][ T855] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2107.100052][ T855] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2107.207260][ T855] usb 6-1: USB disconnect, device number 67 [ 2107.764510][T25573] team0 (unregistering): Port device team_slave_1 removed [ 2107.850794][T25573] team0 (unregistering): Port device team_slave_0 removed [ 2107.982486][ C0] vkms_vblank_simulate: vblank timer overrun [ 2108.375052][ T855] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 2108.570261][ T855] usb 6-1: Invalid ep0 maxpacket: 64 [ 2108.634066][ T5130] team0: Port device team_slave_0 added [ 2108.646925][T23261] Bluetooth: hci4: command tx timeout [ 2108.660665][ T5130] team0: Port device team_slave_1 added [ 2108.725895][ T855] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 2108.906064][ T855] usb 6-1: Invalid ep0 maxpacket: 64 [ 2108.912254][ T855] usb usb6-port1: attempt power cycle [ 2109.023398][ T5226] bond1: entered promiscuous mode [ 2109.047626][ T5226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2109.159561][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2109.263492][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2109.265899][ T855] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 2109.311122][ T5130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2109.324103][ T855] usb 6-1: Invalid ep0 maxpacket: 64 [ 2109.338945][ T5130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2109.354174][ T5130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2109.411060][ T5130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2109.455810][ T855] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 2109.496763][ T855] usb 6-1: Invalid ep0 maxpacket: 64 [ 2109.522280][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.533637][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.569727][ T855] usb usb6-port1: unable to enumerate USB device [ 2109.653116][ T5130] hsr_slave_0: entered promiscuous mode [ 2109.660461][ T5130] hsr_slave_1: entered promiscuous mode [ 2109.668469][ T5130] debugfs: 'hsr0' already exists in 'hsr' [ 2109.674649][ T5130] Cannot create hsr debugfs directory [ 2110.172882][T25573] IPVS: stop unused estimator thread 0... [ 2110.717643][ T5835] Bluetooth: hci4: command tx timeout [ 2111.541967][ T5130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2111.563582][ T5130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2111.588096][ T5130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2111.771334][ T5130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2112.504636][ T5130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.605128][ T5130] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.678864][T25573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.686094][T25573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.779959][ T5300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.823975][T25573] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.831263][T25573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.850817][ T5300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.978103][ T5310] fuse: Bad value for 'rootmode' [ 2112.992806][ T5130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2113.030334][ T5308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2113.112416][ T5130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.120765][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7936'. [ 2113.191009][ T5130] veth0_vlan: entered promiscuous mode [ 2113.247196][ T5130] veth1_vlan: entered promiscuous mode [ 2113.368301][ T5130] veth0_macvtap: entered promiscuous mode [ 2113.470219][ T5130] veth1_macvtap: entered promiscuous mode [ 2113.560627][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2113.664908][ T5130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.767995][T18890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.797366][T18890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.874000][T25550] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.945843][T25550] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.254570][ T4053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.300086][ T4053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.497883][T18890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.516230][T18890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.961831][ T5364] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7946'. [ 2115.776069][ T1681] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2115.948995][ T1681] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2116.015768][ T1681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.043243][ T1681] usb 4-1: config 0 descriptor?? [ 2116.862834][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2116.874458][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.410600][ T1681] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 2117.496696][ T1681] usb 4-1: USB disconnect, device number 115 [ 2117.539229][ T5399] binder: BINDER_SET_CONTEXT_MGR already set [ 2117.589052][ T5399] binder: 5398:5399 ioctl 4018620d 200000000040 returned -16 [ 2117.725898][T19318] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2117.914185][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.930463][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.938606][T19318] usb 6-1: Using ep0 maxpacket: 8 [ 2117.976013][T19318] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2117.985894][T19318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.026705][T19318] usb 6-1: config 0 descriptor?? [ 2118.054069][T19318] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 2118.317652][T19318] usb 6-1: USB disconnect, device number 72 [ 2118.876950][ T5950] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2119.064851][ T5950] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2119.085959][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.118181][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.149524][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2119.184582][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.203897][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.246384][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2119.269837][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.302952][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.329483][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2119.355458][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.380646][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.405361][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2119.423819][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.581002][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.645852][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2119.658897][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2119.670203][ T5446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.680071][ T5444] netlink: 'syz.6.7963': attribute type 6 has an invalid length. [ 2119.716331][ T5446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.739545][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2119.801064][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2120.008944][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2120.053682][ T5451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.063537][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2120.090273][ T5451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.098319][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2120.128236][ T5950] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2120.155114][ T5950] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2120.180700][ T5451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.211908][ T5451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.223494][ T5950] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2120.241522][ T5950] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2120.262068][ T5950] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2120.276729][T21703] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2120.296158][ T5950] usb 4-1: Product: syz [ 2120.306520][ T5950] usb 4-1: Manufacturer: syz [ 2120.317694][ T5950] usb 4-1: SerialNumber: syz [ 2120.347974][ T5950] usb 4-1: config 0 descriptor?? [ 2120.368709][ T5950] yurex 4-1:0.0: Could not find endpoints [ 2120.438603][T21703] usb 6-1: config 0 has an invalid interface number: 74 but max is 1 [ 2120.447481][T21703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.472014][T21703] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2120.505255][T21703] usb 6-1: config 0 has no interface number 0 [ 2120.520658][T21703] usb 6-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2120.563825][T21703] usb 6-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2120.707878][T21703] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 2120.725929][T21703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.758817][T21703] usb 6-1: Product: syz [ 2120.839909][T21703] usb 6-1: Manufacturer: syz [ 2120.864057][T21703] usb 6-1: SerialNumber: syz [ 2121.035543][T21703] usb 6-1: config 0 descriptor?? [ 2121.282975][T21703] cypress_m8 6-1:0.74: HID->COM RS232 Adapter converter detected [ 2121.325019][T21703] cyphidcom ttyUSB0: required endpoint is missing [ 2121.383547][T21703] usb 6-1: USB disconnect, device number 73 [ 2121.442895][T21703] cypress_m8 6-1:0.74: device disconnected [ 2122.240295][ T24] usb 4-1: USB disconnect, device number 116 [ 2122.450636][ T5911] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2122.839630][ T5911] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2122.889830][ T5911] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2122.965947][ T5911] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2122.980325][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2122.989105][ T855] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2123.011305][ T5911] usb 6-1: SerialNumber: syz [ 2123.059468][ T5472] netlink: 830 bytes leftover after parsing attributes in process `syz.7.7972'. [ 2123.099107][ T5472] bond_slave_0: entered promiscuous mode [ 2123.106243][ T5472] bond_slave_1: entered promiscuous mode [ 2123.156056][ T855] usb 4-1: Using ep0 maxpacket: 16 [ 2123.166159][ T855] usb 4-1: config 0 has no interfaces? [ 2123.265463][ T855] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2123.275777][ T855] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2123.296487][ T855] usb 4-1: Manufacturer: syz [ 2123.320390][ T855] usb 4-1: config 0 descriptor?? [ 2123.336548][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.345337][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.368635][ T5911] usb 6-1: 0:2 : does not exist [ 2123.475461][ T5911] usb 6-1: USB disconnect, device number 74 [ 2123.485184][ T5480] netlink: 364 bytes leftover after parsing attributes in process `syz.7.7974'. [ 2123.542940][ T3534] udevd[3534]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2125.395870][ T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2125.651143][ T5950] usb 4-1: USB disconnect, device number 117 [ 2125.875307][ T24] usb 6-1: config 0 has no interfaces? [ 2125.892790][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2125.908523][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.935705][ T24] usb 6-1: Product: syz [ 2125.939923][ T24] usb 6-1: Manufacturer: syz [ 2125.956976][ T24] usb 6-1: SerialNumber: syz [ 2126.091869][ T24] usb 6-1: config 0 descriptor?? [ 2126.190410][ T5519] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2126.208114][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7981'. [ 2126.356182][ T5523] fuse: Unknown parameter 'user_i' [ 2127.605763][ T5950] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 2127.777701][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 2127.800925][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2127.815221][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.840154][ T5950] usb 4-1: Product: syz [ 2127.850714][ T5950] usb 4-1: Manufacturer: syz [ 2127.855515][ T5950] usb 4-1: SerialNumber: syz [ 2127.864511][ T5950] usb 4-1: config 0 descriptor?? [ 2128.325024][ T5950] usb 6-1: USB disconnect, device number 75 [ 2128.466089][ T5911] usb 4-1: USB disconnect, device number 118 [ 2128.594073][ T5563] ipt_ECN: cannot use operation on non-tcp rule [ 2129.165007][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 2129.165026][ T30] audit: type=1326 audit(1762541020.335:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.1.7995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fc9b158f6c9 code=0x0 [ 2130.607801][ T5950] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2130.619256][ T5605] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8002'. [ 2130.656021][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.707812][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2130.735700][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2130.775559][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 2130.789206][ T5950] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2130.798717][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.807339][ T5950] usb 4-1: Product: syz [ 2130.814907][ T5950] usb 4-1: Manufacturer: syz [ 2130.825830][ T5950] usb 4-1: SerialNumber: syz [ 2130.901581][T21703] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2130.926133][ T5950] usb 4-1: config 0 descriptor?? [ 2130.937462][ T5950] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2131.271097][ T5950] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 2131.272072][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2131.280714][T25573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2131.369753][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2131.370246][T21703] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2131.387983][T21703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.403265][T21703] usb 6-1: Product: syz [ 2131.411677][T21703] usb 6-1: Manufacturer: syz [ 2131.418472][T21703] usb 6-1: SerialNumber: syz [ 2131.437495][T21703] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2131.475221][ T5950] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2131.722302][ T5911] usb 4-1: USB disconnect, device number 119 [ 2131.863006][ T5622] syzkaller0: entered promiscuous mode [ 2132.202094][ T5622] syzkaller0: entered allmulticast mode [ 2132.222348][T21703] usb 6-1: USB disconnect, device number 76 [ 2132.322494][T25573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.560419][ T5950] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2132.611484][ T5950] ath9k_htc: Failed to initialize the device [ 2132.630822][T21703] usb 6-1: ath9k_htc: USB layer deinitialized [ 2132.743756][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.766700][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.781916][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.852122][ T5641] IPv6: Can't replace route, no match found [ 2132.859909][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.877512][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.924179][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2133.745905][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.826007][ T5950] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2134.985892][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 2135.007337][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.023441][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2135.060287][ T5950] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2135.084106][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.210008][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8021'. [ 2135.319505][ T5950] usb 6-1: config 0 descriptor?? [ 2135.787170][ T5950] usbhid 6-1:0.0: can't add hid device: -71 [ 2135.794201][ T5950] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2135.821827][ T5950] usb 6-1: USB disconnect, device number 77 [ 2136.413962][ T5700] QAT: failed to copy from user. [ 2136.486303][T25573] net_ratelimit: 1 callbacks suppressed [ 2136.486319][T25573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.533061][ T5702] vivid-000: ================= START STATUS ================= [ 2136.541017][ T5702] vivid-000: Interlaced VBI Format: false [ 2136.549741][ T5702] vivid-000: ================== END STATUS ================== [ 2136.796435][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.562162][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.578953][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.597750][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.606814][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.005911][T19318] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2138.076232][ T4222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.126192][ T5722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8030'. [ 2138.219614][ T5722] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2138.461266][T19318] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 48617, setting to 1024 [ 2138.472703][T19318] usb 6-1: config 17 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2138.541002][T19318] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2138.567899][T19318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.588271][ T5716] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2138.600952][T19318] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2138.799931][ T5950] usb 6-1: USB disconnect, device number 78 [ 2138.807982][ T5724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.818209][ T5724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.164165][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.173110][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.189646][ T30] audit: type=1326 audit(1762541030.365:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.213807][ T30] audit: type=1326 audit(1762541030.365:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.239259][ T30] audit: type=1326 audit(1762541030.375:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.239733][ T5733] hfs: unable to load iocharset "io#harset" [ 2139.262066][ T30] audit: type=1326 audit(1762541030.375:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.292478][ T30] audit: type=1326 audit(1762541030.375:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.315924][ T30] audit: type=1326 audit(1762541030.375:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.338991][ T30] audit: type=1326 audit(1762541030.375:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.363416][ T30] audit: type=1326 audit(1762541030.375:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.389574][ T30] audit: type=1326 audit(1762541030.465:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.412417][ T30] audit: type=1326 audit(1762541030.465:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.6.8032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2139.435864][ T24] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2139.566878][ T24] usb 4-1: device descriptor read/64, error -71 [ 2139.805982][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2139.846411][T32445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.975830][ T24] usb 4-1: device descriptor read/64, error -71 [ 2140.209820][ T24] usb usb4-port1: attempt power cycle [ 2140.675750][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2140.696560][ T24] usb 4-1: device descriptor read/8, error -71 [ 2140.891463][ T5765] netlink: 'syz.5.8042': attribute type 10 has an invalid length. [ 2140.900344][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.907588][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.930918][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.938230][ T5765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2140.945900][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.953139][ T5765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2140.961717][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2140.972364][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8042'. [ 2140.975536][ T5765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2140.990963][ T24] usb 4-1: device descriptor read/8, error -71 [ 2141.017218][ T5767] bridge_slave_1: left allmulticast mode [ 2141.079387][ T5767] bridge_slave_1: left promiscuous mode [ 2141.096130][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2141.109565][ T24] usb usb4-port1: unable to enumerate USB device [ 2141.131900][ T5767] bridge_slave_0: left allmulticast mode [ 2141.149379][ T5767] bridge_slave_0: left promiscuous mode [ 2141.165223][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.343733][ T5767] bond0: (slave bridge0): Releasing backup interface [ 2141.415856][ T24] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2141.576438][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2141.596839][ T24] usb 6-1: config 11 has an invalid interface number: 95 but max is 0 [ 2141.605570][ T24] usb 6-1: config 11 has no interface number 0 [ 2141.623400][ T24] usb 6-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2141.636105][ T24] usb 6-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2141.646808][ T24] usb 6-1: config 11 interface 95 has no altsetting 0 [ 2141.658041][ T24] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 2141.668483][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.678736][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.687712][ T24] usb 6-1: Product: syz [ 2141.692550][ T24] usb 6-1: Manufacturer: syz [ 2141.700138][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.708204][ T24] usb 6-1: SerialNumber: syz [ 2141.923230][ T4221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.974671][ T24] usbtouchscreen 6-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 2141.993057][ T24] usb 6-1: USB disconnect, device number 79 [ 2142.255203][ T5787] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8049'. [ 2142.271886][ T5787] vlan2: entered allmulticast mode [ 2142.280462][ T5787] gretap0: entered allmulticast mode [ 2142.596472][T32445] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2142.837832][T32445] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2142.847153][T32445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.855173][T32445] usb 4-1: Product: syz [ 2142.859571][T32445] usb 4-1: Manufacturer: syz [ 2142.864200][T32445] usb 4-1: SerialNumber: syz [ 2142.898844][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.914211][T32445] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2142.920673][T32445] r8152-cfgselector 4-1: config 0 descriptor?? [ 2143.343475][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2143.352267][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2143.501679][T32445] r8152-cfgselector 4-1: USB disconnect, device number 124 [ 2143.836537][ T4221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.676733][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2145.676755][ T30] audit: type=1326 audit(1762541036.845:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.709281][ T30] audit: type=1326 audit(1762541036.845:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.718298][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.738183][ T30] audit: type=1326 audit(1762541036.885:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.757357][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.771983][ T30] audit: type=1326 audit(1762541036.885:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.772027][ T30] audit: type=1326 audit(1762541036.885:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.772060][ T30] audit: type=1326 audit(1762541036.885:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.794556][ C1] vkms_vblank_simulate: vblank timer overrun [ 2145.814026][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.857257][ T30] audit: type=1326 audit(1762541036.885:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.881450][ T5817] tty tty1: ldisc open failed (-12), clearing slot 0 [ 2145.892165][ T5819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8056'. [ 2145.918608][ T5819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8056'. [ 2145.920180][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.963026][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.963323][ T30] audit: type=1326 audit(1762541036.925:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2145.994479][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.009848][ T30] audit: type=1326 audit(1762541036.925:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2146.188229][ T30] audit: type=1326 audit(1762541036.925:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.6.8054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2146.210776][ C1] vkms_vblank_simulate: vblank timer overrun [ 2146.227698][ T5826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2146.923116][ T5831] netlink: 'syz.5.8060': attribute type 2 has an invalid length. [ 2147.306022][T32445] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2147.405041][ T5847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.426906][ T5847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.492574][ T5847] fuse: Unknown parameter 'rootmod' [ 2147.532078][T32445] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2147.677109][T25550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.777100][T32445] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2147.788287][T32445] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2147.805948][T32445] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2147.819304][T32445] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2147.828541][T32445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.847619][T32445] usb 6-1: config 0 descriptor?? [ 2148.376224][T32445] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2149.038035][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.598622][T25550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.411061][T21703] usb 6-1: USB disconnect, device number 80 [ 2151.615812][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2151.766015][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2151.776457][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2151.794149][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2151.827800][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2151.877411][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.903892][ T24] usb 6-1: config 0 descriptor?? [ 2152.083509][T32445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.383175][ T24] ft260 0003:0403:6030.0097: unknown main item tag 0x7 [ 2152.578393][ T24] ft260 0003:0403:6030.0097: chip code: 6424 8183 [ 2152.796292][ T4221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.825281][ T24] ft260 0003:0403:6030.0097: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 2152.877169][ T5923] Failed to get privilege flags for destination (handle=0x2:0x25) [ 2153.046434][ T24] ft260 0003:0403:6030.0097: failed to retrieve status: -32, no wakeup [ 2153.520995][ T24] ft260 0003:0403:6030.0097: failed to reset I2C controller: -71 [ 2153.579802][ T24] usb 6-1: USB disconnect, device number 81 [ 2153.995989][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2154.176178][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2154.186587][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2154.218480][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 2154.238638][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 2154.248568][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.260645][ T24] usb 6-1: Product: syz [ 2154.264855][ T24] usb 6-1: Manufacturer: syz [ 2154.295769][ T24] usb 6-1: SerialNumber: syz [ 2154.311723][ T24] usb 6-1: config 0 descriptor?? [ 2154.745214][ T5949] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2155.147858][T32445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.359722][T25573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.368521][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.456385][ T855] usb 6-1: USB disconnect, device number 82 [ 2155.612665][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8090'. [ 2155.646879][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8090'. [ 2156.230581][ T5970] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8093'. [ 2156.260698][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.476683][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.551662][ T5969] IPv6: sit1: Disabled Multicast RS [ 2156.567908][ T5969] sit1: entered allmulticast mode [ 2157.309003][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2157.309019][ T30] audit: type=1326 audit(1762541048.435:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.341555][ T30] audit: type=1326 audit(1762541048.435:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.498018][ T30] audit: type=1326 audit(1762541048.435:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.753632][ T30] audit: type=1326 audit(1762541048.445:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.875978][ T30] audit: type=1326 audit(1762541048.445:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.899545][ T30] audit: type=1326 audit(1762541048.445:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2157.922769][ T30] audit: type=1326 audit(1762541048.445:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2158.019721][ T30] audit: type=1326 audit(1762541048.445:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2158.284421][ T30] audit: type=1326 audit(1762541048.445:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2158.395997][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2158.472046][ T30] audit: type=1326 audit(1762541048.445:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.6.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624138f6c9 code=0x7ffc0000 [ 2158.557807][T25573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.071825][T19318] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2159.245751][T19318] usb 6-1: Using ep0 maxpacket: 32 [ 2159.267338][T19318] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2159.286435][T19318] usb 6-1: config 0 has no interface number 0 [ 2159.328270][T19318] usb 6-1: config 0 interface 2 has no altsetting 0 [ 2159.470324][T19318] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 2159.483393][T19318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.507701][T19318] usb 6-1: Product: syz [ 2159.511925][T19318] usb 6-1: Manufacturer: syz [ 2159.527500][T19318] usb 6-1: SerialNumber: syz [ 2159.659840][ T6000] bridge_slave_0: left allmulticast mode [ 2159.665944][ T6000] bridge_slave_0: left promiscuous mode [ 2159.672812][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.687285][T19318] usb 6-1: config 0 descriptor?? [ 2159.834790][ T6000] bridge_slave_1: left allmulticast mode [ 2159.840713][ T6000] bridge_slave_1: left promiscuous mode [ 2159.862467][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.880600][ T6000] bond0: (slave bond_slave_0): Releasing backup interface [ 2159.899830][ T6000] bond0: (slave bond_slave_1): Releasing backup interface [ 2159.984565][ T6000] team0: Port device team_slave_0 removed [ 2160.012680][ T6000] team0: Port device team_slave_1 removed [ 2160.020106][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2160.028645][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2160.039326][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2160.048276][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2160.074217][ T6000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2160.107781][T19318] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2160.258212][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.267982][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.288627][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.307895][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.335728][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.353426][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.375708][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.383158][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.383651][T19318] usb 6-1: USB disconnect, device number 83 [ 2160.432141][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.466175][ T24] hid-generic 00A0:0006:0003.0098: unknown main item tag 0x0 [ 2160.488216][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.494650][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.563017][ T24] hid-generic 00A0:0006:0003.0098: hidraw0: HID v0.05 Device [syz1] on syz1 [ 2161.066096][T19318] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2161.116229][ T4221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.318561][T19318] usb 6-1: Using ep0 maxpacket: 16 [ 2161.326114][T19318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.337233][T19318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2161.435903][T19318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2161.446211][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.461463][T19318] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2161.491702][T19318] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2161.857421][T19318] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2161.874477][T19318] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2161.950595][T19318] usb 6-1: Manufacturer: syz [ 2162.012453][T19318] usb 6-1: config 0 descriptor?? [ 2162.242067][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.263662][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.415768][T19318] rc_core: IR keymap rc-hauppauge not found [ 2162.480850][T19318] Registered IR keymap rc-empty [ 2162.504087][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2162.545468][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2162.577075][T19318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2162.602044][T19318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input211 [ 2162.974265][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2162.985416][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.009281][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.126223][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.155096][ T6055] bcm5974 2-1:0.0: could not read from device [ 2163.226018][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.397533][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.415807][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.446494][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.478038][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.505865][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.528711][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.555829][T19318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2163.604156][T19318] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2163.639014][T19318] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2163.690567][T19318] usb 6-1: USB disconnect, device number 84 [ 2164.131386][ T6075] veth0_to_team: entered promiscuous mode [ 2164.316996][ T4053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.326046][T19318] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 2164.375784][ T5950] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2164.476289][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.489509][T19318] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2164.500396][T19318] usb 6-1: not running at top speed; connect to a high speed hub [ 2164.511159][T19318] usb 6-1: config 9 has an invalid interface number: 207 but max is 0 [ 2164.520170][T19318] usb 6-1: config 9 has no interface number 0 [ 2164.530030][T19318] usb 6-1: config 9 interface 207 has no altsetting 0 [ 2164.537622][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.579644][ T5950] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2164.599970][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.611408][T19318] usb 6-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 2164.615189][ T5950] usb 4-1: config 0 descriptor?? [ 2164.621457][T19318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.634228][T19318] usb 6-1: Product: syz [ 2164.641175][T19318] usb 6-1: Manufacturer: syz [ 2164.648201][T19318] usb 6-1: SerialNumber: syz [ 2164.648282][T23261] Bluetooth: hci4: command 0x0405 tx timeout [ 2164.693282][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 2164.869778][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.881281][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.922348][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.932113][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.974152][T19318] usb 6-1: USB disconnect, device number 85 [ 2165.095522][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2165.175245][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2165.175264][ T30] audit: type=1326 audit(1762541056.345:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.216415][ T30] audit: type=1326 audit(1762541056.355:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.245030][ T30] audit: type=1326 audit(1762541056.355:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.270120][ T30] audit: type=1326 audit(1762541056.355:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.295945][ T30] audit: type=1326 audit(1762541056.355:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.321175][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2165.328501][ T30] audit: type=1326 audit(1762541056.355:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.330002][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 2165.351919][ T30] audit: type=1326 audit(1762541056.355:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.403533][ T30] audit: type=1326 audit(1762541056.355:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.405783][ T5950] pwc: recv_control_msg error -32 req 04 val 1300 [ 2165.436105][ T5950] pwc: recv_control_msg error -32 req 04 val 1400 [ 2165.449642][ T5950] pwc: recv_control_msg error -32 req 02 val 2000 [ 2165.457448][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8120'. [ 2165.466726][ T5950] pwc: recv_control_msg error -32 req 02 val 2100 [ 2165.467512][ T5950] pwc: recv_control_msg error -32 req 04 val 1500 [ 2165.480950][ T5950] pwc: recv_control_msg error -32 req 02 val 2500 [ 2165.488451][ T5950] pwc: recv_control_msg error -32 req 02 val 2400 [ 2165.495698][ T5950] pwc: recv_control_msg error -32 req 02 val 2600 [ 2165.565149][ T30] audit: type=1326 audit(1762541056.355:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.594726][ T30] audit: type=1326 audit(1762541056.355:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz.1.8120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc9b158f6c9 code=0x7ffc0000 [ 2165.619710][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.816843][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 2165.823889][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 2165.833923][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 2165.865886][ T5950] pwc: Registered as video103. [ 2165.881768][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input212 [ 2165.985839][ T24] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 2165.993877][ T5950] usb 4-1: USB disconnect, device number 125 [ 2166.198010][ T24] usb 6-1: Invalid ep0 maxpacket: 16 [ 2166.335832][ T24] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 2166.495732][ T24] usb 6-1: Invalid ep0 maxpacket: 16 [ 2166.501337][ T24] usb usb6-port1: attempt power cycle [ 2166.566661][ T5950] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2166.725828][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 2166.741121][ T5950] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 2166.762613][ T5950] usb 4-1: config 0 has no interface number 0 [ 2166.777022][ T5950] usb 4-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 2166.880962][ T24] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 2166.909838][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.918057][ T5950] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 2166.918096][ T5950] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2166.940716][ T24] usb 6-1: Invalid ep0 maxpacket: 16 [ 2166.954883][ T5950] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 2167.061466][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.075954][ T24] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 2167.100371][ T5950] usb 4-1: Product: syz [ 2167.106747][ T24] usb 6-1: Invalid ep0 maxpacket: 16 [ 2167.115344][ T5950] usb 4-1: Manufacturer: syz [ 2167.121498][ T24] usb usb6-port1: unable to enumerate USB device [ 2167.137099][ T5950] usb 4-1: SerialNumber: syz [ 2167.208380][ T5950] usb 4-1: config 0 descriptor?? [ 2167.373433][ T6109] netlink: 'syz.1.8127': attribute type 1 has an invalid length. [ 2167.399038][ T6109] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2167.419958][ T6109] bond3: (slave gretap1): making interface the new active one [ 2167.429935][ T6109] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 2167.433596][ T5950] usb 4-1: USB disconnect, device number 126 [ 2167.520526][ T6113] openvswitch: netlink: Key type 31 is not supported [ 2168.517599][ T6133] netlink: 'syz.3.8133': attribute type 4 has an invalid length. [ 2168.631645][ T6134] netlink: 'syz.3.8133': attribute type 1 has an invalid length. [ 2168.716920][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.911642][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2168.961042][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.141538][T19318] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2169.307752][T19318] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2169.328291][T19318] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2169.338281][T19318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.346985][T19318] usb 6-1: Product: syz [ 2169.351636][T19318] usb 6-1: Manufacturer: syz [ 2169.361849][T19318] usb 6-1: SerialNumber: syz [ 2170.030465][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2170.071146][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.086200][ T4053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.277521][ T6155] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2170.401480][T19318] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 2170.447879][T19318] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 2170.456217][T19318] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 2170.643711][T19318] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 2170.668266][T19318] usb 6-1: USB disconnect, device number 90 [ 2170.689011][T19318] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 2170.803413][T32445] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2170.969022][T32445] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2170.982518][T32445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2170.995014][T32445] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2171.005790][T32445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.020439][T32445] usb 4-1: config 0 descriptor?? [ 2171.053411][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2171.069314][T32445] hub 4-1:0.0: USB hub found [ 2171.506734][T32445] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2171.549718][T32445] usbhid 4-1:0.0: can't add hid device: -71 [ 2171.566110][T32445] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2171.625899][ T5950] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2171.666508][T32445] usb 4-1: USB disconnect, device number 127 [ 2171.756380][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.865740][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 2172.156238][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.581505][ T6185] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 2173.955788][T19318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2174.118542][T19318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.129729][T19318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2174.139810][T19318] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2174.149805][T19318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.162273][T19318] usb 4-1: config 0 descriptor?? [ 2174.569380][ T5950] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2174.584676][T19318] cp2112 0003:10C4:EA90.0099: unknown global tag 0xe [ 2174.596398][ T5950] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2174.609680][T19318] cp2112 0003:10C4:EA90.0099: item 0 2 1 14 parsing failed [ 2174.614473][ T5950] usb 6-1: can't read configurations, error -71 [ 2174.652023][T19318] cp2112 0003:10C4:EA90.0099: parse failed [ 2174.665005][T19318] cp2112 0003:10C4:EA90.0099: probe with driver cp2112 failed with error -22 [ 2174.877405][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.157965][ T855] usb 4-1: USB disconnect, device number 2 [ 2175.839241][ T4053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.921886][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.945246][T25550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.056957][ T6275] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2178.842597][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8164'. [ 2178.915870][ T6261] fuse: Bad value for 'group_id' [ 2178.920847][ T6261] fuse: Bad value for 'group_id' [ 2179.003737][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.027211][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.103095][ T6289] bond4: (slave bond_slave_1): Device is not our slave [ 2179.140436][ T6289] bond4: option active_slave: invalid value (bond_slave_1) [ 2179.191696][ T6289] bond4 (unregistering): Released all slaves [ 2179.265848][ T5950] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2179.378202][ T6301] netlink: 'syz.3.8175': attribute type 6 has an invalid length. [ 2179.488594][ T5950] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2179.497282][ T5950] usb 6-1: can't read configurations, error -22 [ 2179.552310][ T6307] tipc: Started in network mode [ 2179.563421][ T6307] tipc: Node identity 1a4add06e1b1, cluster identity 4711 [ 2179.571904][ T6307] tipc: Enabled bearer , priority 0 [ 2179.581470][ T6307] syzkaller0: entered promiscuous mode [ 2179.587688][ T6307] syzkaller0: entered allmulticast mode [ 2179.619191][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8177'. [ 2179.635863][ T5950] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2179.637750][ T6307] tipc: Resetting bearer [ 2179.657412][ T6306] tipc: Resetting bearer [ 2179.673819][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8179'. [ 2179.694369][ T6306] tipc: Disabling bearer [ 2179.716990][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8179'. [ 2179.808590][ T5950] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2179.826679][ T5950] usb 6-1: can't read configurations, error -22 [ 2179.835389][ T5950] usb usb6-port1: attempt power cycle [ 2180.023832][ T6318] fuse: Unknown parameter 'user_i' [ 2180.176316][ T5950] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2180.199167][ T5950] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2180.208155][ T5950] usb 6-1: can't read configurations, error -22 [ 2180.224668][ T6322] bcm5974 2-1:0.0: could not read from device [ 2180.396065][ T5950] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2180.453764][ T5950] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 2180.462020][ T5950] usb 6-1: can't read configurations, error -22 [ 2180.476264][ T5950] usb usb6-port1: unable to enumerate USB device [ 2180.965161][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.190299][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.202451][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.445886][ T855] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2181.596690][ T4053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.629331][ T855] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2181.638521][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.646735][ T855] usb 4-1: Product: syz [ 2181.650932][ T855] usb 4-1: Manufacturer: syz [ 2181.655511][ T855] usb 4-1: SerialNumber: syz [ 2182.164797][ T5950] usb 2-1: USB disconnect, device number 62 [ 2182.270982][ T855] (unnamed net_device) (uninitialized): Assigned a random MAC address: ae:09:85:00:56:3e [ 2182.349860][ T855] rtl8150 4-1:1.0: eth13: rtl8150 is detected [ 2182.445831][ T24] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2182.635871][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2182.652144][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 2182.671644][ T24] usb 6-1: config 0 has no interface number 0 [ 2182.696139][ T24] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2182.721184][ T24] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2182.734184][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2182.748371][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2182.756883][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2182.766091][ T24] usb 6-1: Product: syz [ 2182.770512][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2182.778134][ T24] usb 6-1: Manufacturer: syz [ 2182.783194][ T24] usb 6-1: SerialNumber: syz [ 2182.788649][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2182.798023][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2182.831896][ T24] usb 6-1: config 0 descriptor?? [ 2182.844727][ T24] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2182.865044][ T24] em28xx 6-1:0.132: Video interface 132 found: [ 2183.026998][ T6355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2183.156918][ T6355] kvm: pic: level sensitive irq not supported [ 2183.158120][ T6355] kvm: pic: non byte read [ 2183.247823][ T24] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 2183.317622][ T6371] input: syz0 as /devices/virtual/input/input213 [ 2183.517868][ T4053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2183.833410][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 2183.996665][ T855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.250827][ C0] read_bulk_callback: 19 callbacks suppressed [ 2184.250846][ C0] usb 4-1: Rx status -71 [ 2184.261353][ C0] usb 4-1: eth13: intr status -71 [ 2184.272139][ C0] usb 4-1: Rx status -71 [ 2184.276529][ C0] usb 4-1: eth13: intr status -71 [ 2184.284554][ C0] usb 4-1: Rx status -71 [ 2184.288940][ C0] usb 4-1: eth13: intr status -71 [ 2184.295392][ T855] usb 4-1: USB disconnect, device number 3 [ 2184.301506][ C0] usb 4-1: Rx status -71 [ 2184.301551][ C0] usb 4-1: eth13: intr status -71 [ 2184.339998][ T5494] usb 4-1: device reset failed [ 2184.351675][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.360732][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.420471][ T24] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2184.460991][ T6356] bridge_slave_0: entered allmulticast mode [ 2184.482411][ T24] em28xx 6-1:0.132: board has no eeprom [ 2184.519654][ T6356] bridge_slave_0: entered promiscuous mode [ 2184.566453][ T24] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2184.603306][ T24] em28xx 6-1:0.132: analog set to bulk mode. [ 2184.612128][ T5950] em28xx 6-1:0.132: Registering V4L2 extension [ 2184.824724][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.825164][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 2184.832186][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.832441][ T6356] bridge_slave_1: entered allmulticast mode [ 2184.857840][ T6356] bridge_slave_1: entered promiscuous mode [ 2184.874654][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 2184.886358][ T5835] Bluetooth: hci1: command tx timeout [ 2184.900819][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 2184.913781][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 2185.020085][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.076089][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 2185.104105][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.123106][ T5950] em28xx 6-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 2185.170201][ T855] usb 6-1: USB disconnect, device number 97 [ 2185.194233][ T855] em28xx 6-1:0.132: Disconnecting em28xx [ 2185.264282][ T5950] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 2185.315360][ T5950] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 2185.415894][ T5950] em28xx 6-1:0.132: No AC97 audio processor [ 2185.474443][ T5950] usb 6-1: Decoder not found [ 2185.510047][ T6356] team0: Port device team_slave_0 added [ 2185.534322][ T5950] em28xx 6-1:0.132: failed to create media graph [ 2185.584272][ T5950] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 2185.589906][ T6356] team0: Port device team_slave_1 added [ 2185.607125][ T5950] em28xx 6-1:0.132: Remote control support is not available for this card. [ 2185.616513][ T6412] ================================================================== [ 2185.624604][ T6412] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2185.631973][ T6412] Read of size 8 at addr ffff888023d7c740 by task v4l_id/6412 [ 2185.639431][ T6412] [ 2185.641770][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2185.641793][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2185.641805][ T6412] Call Trace: [ 2185.641813][ T6412] [ 2185.641822][ T6412] dump_stack_lvl+0x189/0x250 [ 2185.641850][ T6412] ? __virt_addr_valid+0x1c8/0x5c0 [ 2185.641874][ T6412] ? rcu_is_watching+0x15/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2185.641895][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2185.641916][ T6412] ? rcu_is_watching+0x15/0xb0 [ 2185.641935][ T6412] ? lock_release+0x4b/0x3e0 [ 2185.641952][ T6412] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2185.641976][ T6412] ? __virt_addr_valid+0x1c8/0x5c0 [ 2185.641998][ T6412] ? __virt_addr_valid+0x4a5/0x5c0 [ 2185.642021][ T6412] print_report+0xca/0x240 [ 2185.642042][ T6412] ? v4l2_fh_open+0xac/0x420 [ 2185.642060][ T6412] kasan_report+0x118/0x150 [ 2185.642079][ T6412] ? v4l2_fh_open+0xac/0x420 [ 2185.642099][ T6412] v4l2_fh_open+0xac/0x420 [ 2185.642117][ T6412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2185.642149][ T6412] em28xx_v4l2_open+0x157/0x9a0 [ 2185.642179][ T6412] v4l2_open+0x1bf/0x3a0 [ 2185.642198][ T6412] chrdev_open+0x4cc/0x5e0 [ 2185.642216][ T6412] ? __pfx_chrdev_open+0x10/0x10 [ 2185.642234][ T6412] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2185.642256][ T6412] ? __pfx_chrdev_open+0x10/0x10 [ 2185.642271][ T6412] do_dentry_open+0x953/0x13f0 [ 2185.642296][ T6412] vfs_open+0x3b/0x340 [ 2185.642313][ T6412] ? path_openat+0x2ecd/0x3830 [ 2185.642335][ T6412] path_openat+0x2ee5/0x3830 [ 2185.642369][ T6412] ? __pfx_path_openat+0x10/0x10 [ 2185.642403][ T6412] do_filp_open+0x1fa/0x410 [ 2185.642422][ T6412] ? __lock_acquire+0xab9/0xd20 [ 2185.642439][ T6412] ? __pfx_do_filp_open+0x10/0x10 [ 2185.642468][ T6412] ? _raw_spin_unlock+0x28/0x50 [ 2185.642488][ T6412] ? alloc_fd+0x64c/0x6c0 [ 2185.642515][ T6412] do_sys_openat2+0x121/0x1c0 [ 2185.642536][ T6412] ? __pfx_do_sys_openat2+0x10/0x10 [ 2185.642555][ T6412] ? exc_page_fault+0x82/0x100 [ 2185.642580][ T6412] ? do_user_addr_fault+0xc85/0x1380 [ 2185.642598][ T6412] __x64_sys_openat+0x138/0x170 [ 2185.642620][ T6412] do_syscall_64+0xfa/0xfa0 [ 2185.642642][ T6412] ? lockdep_hardirqs_on+0x9c/0x150 [ 2185.642664][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.642682][ T6412] ? clear_bhb_loop+0x60/0xb0 [ 2185.642701][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.642718][ T6412] RIP: 0033:0x7f6aaeca7407 [ 2185.642735][ T6412] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2185.642751][ T6412] RSP: 002b:00007ffd7c9e6390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2185.642770][ T6412] RAX: ffffffffffffffda RBX: 00007f6aaf374880 RCX: 00007f6aaeca7407 [ 2185.642784][ T6412] RDX: 0000000000000000 RSI: 00007ffd7c9e6f1a RDI: ffffffffffffff9c [ 2185.642797][ T6412] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2185.642808][ T6412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2185.642819][ T6412] R13: 00007ffd7c9e65e0 R14: 00007f6aaf479000 R15: 000055dd844fb4d8 [ 2185.642840][ T6412] [ 2185.642847][ T6412] [ 2185.945633][ T6412] Allocated by task 5950: [ 2185.949954][ T6412] kasan_save_track+0x3e/0x80 [ 2185.954635][ T6412] __kasan_kmalloc+0x93/0xb0 [ 2185.959222][ T6412] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2185.964595][ T6412] em28xx_v4l2_init+0x10b/0x2e70 [ 2185.969581][ T6412] em28xx_init_extension+0x120/0x1c0 [ 2185.974871][ T6412] process_scheduled_works+0xae1/0x17b0 [ 2185.980411][ T6412] worker_thread+0x8a0/0xda0 [ 2185.985014][ T6412] kthread+0x711/0x8a0 [ 2185.989082][ T6412] ret_from_fork+0x4bc/0x870 [ 2185.993665][ T6412] ret_from_fork_asm+0x1a/0x30 [ 2185.998434][ T6412] [ 2186.000757][ T6412] Freed by task 5950: [ 2186.004726][ T6412] kasan_save_track+0x3e/0x80 [ 2186.009407][ T6412] __kasan_save_free_info+0x46/0x50 [ 2186.014614][ T6412] __kasan_slab_free+0x5c/0x80 [ 2186.019394][ T6412] kfree+0x19a/0x6d0 [ 2186.023294][ T6412] em28xx_v4l2_init+0x1683/0x2e70 [ 2186.028323][ T6412] em28xx_init_extension+0x120/0x1c0 [ 2186.033621][ T6412] process_scheduled_works+0xae1/0x17b0 [ 2186.039164][ T6412] worker_thread+0x8a0/0xda0 [ 2186.043754][ T6412] kthread+0x711/0x8a0 [ 2186.047839][ T6412] ret_from_fork+0x4bc/0x870 [ 2186.052425][ T6412] ret_from_fork_asm+0x1a/0x30 [ 2186.057185][ T6412] [ 2186.059504][ T6412] The buggy address belongs to the object at ffff888023d7c000 [ 2186.059504][ T6412] which belongs to the cache kmalloc-8k of size 8192 [ 2186.073553][ T6412] The buggy address is located 1856 bytes inside of [ 2186.073553][ T6412] freed 8192-byte region [ffff888023d7c000, ffff888023d7e000) [ 2186.087521][ T6412] [ 2186.089842][ T6412] The buggy address belongs to the physical page: [ 2186.096260][ T6412] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23d78 [ 2186.105019][ T6412] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2186.113511][ T6412] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2186.121055][ T6412] page_type: f5(slab) [ 2186.125050][ T6412] raw: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 2186.133635][ T6412] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2186.142216][ T6412] head: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 2186.150882][ T6412] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2186.159552][ T6412] head: 00fff00000000003 ffffea00008f5e01 00000000ffffffff 00000000ffffffff [ 2186.168223][ T6412] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2186.176885][ T6412] page dumped because: kasan: bad access detected [ 2186.183307][ T6412] page_owner tracks the page as allocated [ 2186.189018][ T6412] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5494, tgid 5494 (dhcpcd), ts 2184345533253, free_ts 2184154896440 [ 2186.209945][ T6412] post_alloc_hook+0x240/0x2a0 [ 2186.214716][ T6412] get_page_from_freelist+0x2365/0x2440 [ 2186.220263][ T6412] __alloc_frozen_pages_noprof+0x181/0x370 [ 2186.226071][ T6412] alloc_pages_mpol+0x232/0x4a0 [ 2186.230916][ T6412] allocate_slab+0x96/0x350 [ 2186.235418][ T6412] ___slab_alloc+0xe94/0x18a0 [ 2186.240092][ T6412] __slab_alloc+0x65/0x100 [ 2186.244502][ T6412] __kvmalloc_node_noprof+0x6ba/0x910 [ 2186.249875][ T6412] pfifo_fast_init+0x372/0x6c0 [ 2186.254643][ T6412] qdisc_create_dflt+0x13b/0x4e0 [ 2186.259585][ T6412] dev_activate+0x378/0x1150 [ 2186.264166][ T6412] __dev_open+0x69c/0x880 [ 2186.268491][ T6412] __dev_change_flags+0x1ea/0x6d0 [ 2186.273510][ T6412] netif_change_flags+0x88/0x1a0 [ 2186.278467][ T6412] dev_change_flags+0x130/0x260 [ 2186.283315][ T6412] devinet_ioctl+0xbb4/0x1b50 [ 2186.287994][ T6412] page last free pid 6383 tgid 6383 stack trace: [ 2186.294312][ T6412] __free_frozen_pages+0xbc4/0xd30 [ 2186.299431][ T6412] __put_partials+0x146/0x170 [ 2186.304110][ T6412] put_cpu_partial+0x1f2/0x2e0 [ 2186.308871][ T6412] __slab_free+0x2b9/0x390 [ 2186.313282][ T6412] qlist_free_all+0x97/0x140 [ 2186.317872][ T6412] kasan_quarantine_reduce+0x148/0x160 [ 2186.323345][ T6412] __kasan_slab_alloc+0x22/0x80 [ 2186.328202][ T6412] kmem_cache_alloc_noprof+0x367/0x6e0 [ 2186.333664][ T6412] vm_area_dup+0x2b/0x680 [ 2186.337989][ T6412] __split_vma+0x1a9/0xa00 [ 2186.342408][ T6412] vma_modify+0x12c3/0x1970 [ 2186.346910][ T6412] vma_modify_flags+0x1e8/0x230 [ 2186.351757][ T6412] mprotect_fixup+0x407/0x9c0 [ 2186.356429][ T6412] do_mprotect_pkey+0x8c5/0xcd0 [ 2186.361274][ T6412] __x64_sys_mprotect+0x80/0x90 [ 2186.366124][ T6412] do_syscall_64+0xfa/0xfa0 [ 2186.370632][ T6412] [ 2186.372947][ T6412] Memory state around the buggy address: [ 2186.378570][ T6412] ffff888023d7c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2186.386626][ T6412] ffff888023d7c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2186.394685][ T6412] >ffff888023d7c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2186.402740][ T6412] ^ [ 2186.408887][ T6412] ffff888023d7c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2186.416945][ T6412] ffff888023d7c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2186.424999][ T6412] ================================================================== [ 2186.452862][ T855] em28xx 6-1:0.132: Closing input extension [ 2186.829498][ T6412] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2186.836771][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2186.845723][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2186.855782][ T6412] Call Trace: [ 2186.859062][ T6412] [ 2186.861989][ T6412] dump_stack_lvl+0x99/0x250 [ 2186.866586][ T6412] ? __asan_memcpy+0x40/0x70 [ 2186.871181][ T6412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.876386][ T6412] ? __pfx__printk+0x10/0x10 [ 2186.880985][ T6412] vpanic+0x237/0x6d0 [ 2186.884972][ T6412] ? __pfx_vpanic+0x10/0x10 [ 2186.889477][ T6412] ? preempt_schedule+0xae/0xc0 [ 2186.894328][ T6412] ? __pfx_preempt_schedule+0x10/0x10 [ 2186.899708][ T6412] panic+0xb9/0xc0 [ 2186.903433][ T6412] ? __pfx_panic+0x10/0x10 [ 2186.907853][ T6412] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2186.913751][ T6412] ? is_module_address+0x17/0xf0 [ 2186.918694][ T6412] ? v4l2_fh_open+0xac/0x420 [ 2186.923287][ T6412] check_panic_on_warn+0x89/0xb0 [ 2186.928234][ T6412] ? v4l2_fh_open+0xac/0x420 [ 2186.932820][ T6412] end_report+0x78/0x160 [ 2186.937066][ T6412] kasan_report+0x129/0x150 [ 2186.941570][ T6412] ? v4l2_fh_open+0xac/0x420 [ 2186.946196][ T6412] v4l2_fh_open+0xac/0x420 [ 2186.950618][ T6412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2186.956599][ T6412] em28xx_v4l2_open+0x157/0x9a0 [ 2186.961459][ T6412] v4l2_open+0x1bf/0x3a0 [ 2186.965704][ T6412] chrdev_open+0x4cc/0x5e0 [ 2186.970121][ T6412] ? __pfx_chrdev_open+0x10/0x10 [ 2186.975057][ T6412] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2186.981389][ T6412] ? __pfx_chrdev_open+0x10/0x10 [ 2186.986323][ T6412] do_dentry_open+0x953/0x13f0 [ 2186.991094][ T6412] vfs_open+0x3b/0x340 [ 2186.995201][ T6412] ? path_openat+0x2ecd/0x3830 [ 2186.999969][ T6412] path_openat+0x2ee5/0x3830 [ 2187.004588][ T6412] ? __pfx_path_openat+0x10/0x10 [ 2187.009541][ T6412] do_filp_open+0x1fa/0x410 [ 2187.014048][ T6412] ? __lock_acquire+0xab9/0xd20 [ 2187.018932][ T6412] ? __pfx_do_filp_open+0x10/0x10 [ 2187.023970][ T6412] ? _raw_spin_unlock+0x28/0x50 [ 2187.028829][ T6412] ? alloc_fd+0x64c/0x6c0 [ 2187.033169][ T6412] do_sys_openat2+0x121/0x1c0 [ 2187.037856][ T6412] ? __pfx_do_sys_openat2+0x10/0x10 [ 2187.043061][ T6412] ? exc_page_fault+0x82/0x100 [ 2187.047832][ T6412] ? do_user_addr_fault+0xc85/0x1380 [ 2187.053120][ T6412] __x64_sys_openat+0x138/0x170 [ 2187.057979][ T6412] do_syscall_64+0xfa/0xfa0 [ 2187.062487][ T6412] ? lockdep_hardirqs_on+0x9c/0x150 [ 2187.067689][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.073760][ T6412] ? clear_bhb_loop+0x60/0xb0 [ 2187.078438][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.084329][ T6412] RIP: 0033:0x7f6aaeca7407 [ 2187.088748][ T6412] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2187.108353][ T6412] RSP: 002b:00007ffd7c9e6390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2187.116768][ T6412] RAX: ffffffffffffffda RBX: 00007f6aaf374880 RCX: 00007f6aaeca7407 [ 2187.124826][ T6412] RDX: 0000000000000000 RSI: 00007ffd7c9e6f1a RDI: ffffffffffffff9c [ 2187.132808][ T6412] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2187.140878][ T6412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2187.148855][ T6412] R13: 00007ffd7c9e65e0 R14: 00007f6aaf479000 R15: 000055dd844fb4d8 [ 2187.156834][ T6412] [ 2187.160161][ T6412] Kernel Offset: disabled [ 2187.164481][ T6412] Rebooting in 86400 seconds..