last executing test programs: 15m6.695898331s ago: executing program 32 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 14m59.361326775s ago: executing program 33 (id=794): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40c0) epoll_create(0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 14m38.210103365s ago: executing program 34 (id=885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe, 0x5, 0x40000000}) 14m34.978832989s ago: executing program 35 (id=901): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="4ad91b84aa384ea4cd3ad0fed23122caf8ee2e84348764aeeea1b365db4e48005c158848863218a724984f281f2930d1af553706d4957eaaa5906fa3452b2c13d49c8c21ca55573b78228f1d3c23309b367cfe0efac04fa337524536267a64afb2a1fc20b8ef74a4276c621ac744402e4eeac114cd3799e7f73e924d8efaa12386", 0x81}], 0x1}, 0x4008800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x80000003f7, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x100000001015, 0x5, 0x3d4, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m33.670243166s ago: executing program 36 (id=905): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000"], 0x50}}, 0x20040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 14m24.048307866s ago: executing program 37 (id=918): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14m22.518695662s ago: executing program 38 (id=925): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) 14m19.310417431s ago: executing program 39 (id=941): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) close_range(r0, 0xffffffffffffffff, 0x0) 14m16.986642649s ago: executing program 40 (id=949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 14m0.200914702s ago: executing program 41 (id=1015): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 13m53.971620867s ago: executing program 42 (id=1063): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 13m48.45659986s ago: executing program 43 (id=1078): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="200f7e"], 0x0, 0x0}) 13m47.55948357s ago: executing program 44 (id=1084): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 13m46.395539677s ago: executing program 45 (id=1092): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 13m40.37574416s ago: executing program 46 (id=1099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000a00080008400000001005000500020000000500010006"], 0x70}}, 0x20040804) 13m0.015222537s ago: executing program 47 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539d80e29baefbb8c", 0x18}], 0x3) 12m46.073376259s ago: executing program 48 (id=1453): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast1, 0x4e22, 0x1, 'none\x00', 0x0, 0x10000, 0x23}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, 0x0, 0x0) 12m45.572697752s ago: executing program 49 (id=1457): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000380)) 11m11.912185161s ago: executing program 50 (id=2075): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 11m8.352727487s ago: executing program 51 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) 11m3.88942322s ago: executing program 52 (id=2094): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000240)='./file1\x00', 0x10) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 10m30.849246328s ago: executing program 53 (id=2266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 10m22.790257847s ago: executing program 54 (id=2242): syz_usb_connect(0x2, 0x157, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x9, 0x11, 0x15, 0x8, 0x1025, 0x5f, 0x327, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x145, 0x1, 0x6, 0x0, 0xd0, 0x9, [{{0x9, 0x4, 0xe4, 0x8, 0x5, 0xae, 0xbe, 0x1c, 0xd, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0xe, 0x40, 0xaa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @generic={0xea, 0xb, "6e7ddbe1ae878795f7e1429cbfd8180cfa9290626f19c9c623357a4dc76b71e2ae689e07ff18d900f3795727f988415e9ade387255f4bbb6aec9baaa369e92b2bfedf460726cedbd23d847b796926dcc8c09388e508aec8c700c217afd7765f2ac8334ffadad7a592db5a72dbec4a6cced122abfd28d682cd6c6d9b303d50456552644923d8f45fc1292effbb4b1dbcddf30d52329270bda202ff01ab0bb295c4d8cfbb534d98107baa4a198eb71b70de7f74aa1d39879e00f5b9ecf316df173377122d65e9ee26d35acfe779560ce05fb4f0cef647948a143145e34f5cb4aab76f39729e61b9d1e"}]}}, {{0x9, 0x5, 0x9, 0x14, 0x20, 0xa, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}, {{0x9, 0x5, 0x8c, 0x3, 0x20, 0xe2, 0x4, 0x1, [@generic={0x7, 0xb, "b55b79fc40"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x8, 0xaf, 0x53}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x0, 0x9, 0x7}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x310, 0x5, 0x9, 0x7, 0x20, 0x9}, 0x5, &(0x7f00000012c0)={0x5, 0xf, 0x5}, 0x9, [{0x1c, &(0x7f0000001300)=@string={0x1c, 0x3, "96951c0213f4fc09efe53ae69f64bf62eb7d851c30f530c75500"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x418}}, {0x88, &(0x7f0000001380)=@string={0x88, 0x3, "7fd57f701da5b642bf12108e53db05eca2ba8af3833cfe8e8d23d2a91b38ec1e3a2f0d6a41bc3a736925955bba815ac2a65ecc33070f6dd3f2fedfc82c04fb545f48d736b3fbdd80b7ffb61eca623401561251b516476c0d05c9ea44894cc2f2b5a24f10aef6783380b6cb361f0d591349958e07a00cbd54a5a2c7463002a3e49b8fd4efd6e1"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x401}}, {0xfc, &(0x7f0000001480)=@string={0xfc, 0x3, "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"}}, {0x82, &(0x7f0000001580)=@string={0x82, 0x3, "1785d0b2482d9f5b061a7c65347104aa715da12f23a2122a73c3242bce9fc4ccc062d88f6515dfe80c9f7cfc65834a1f937466e24e04a491ef92a60e69cdd3a6c8d7776d121f2df76bb74ace1ad0f9afafa351ea0f332da3fc1cb2aed25bfe1edcad25ecddeae80dc56f77c2f550763a9884d9be910642f1be6ee83c792921b5"}}, {0xd3, &(0x7f0000001640)=@string={0xd3, 0x3, "04abe324daf68d00a005edb68ca10776e4f3165d4582104a781cf1da30b92309cb98e34dd814cd318e9eb4c49f2c8e9d5beead3e03cce13a83cc7ce52a9912bbb117fedb40b5d7b1c70561ffa587796556a2b2077a399ad80d6a44442e9d6bcd21276a74f510f6e0cc99a26a98e16d2d23e3bdcc16ae57b799356cdbbb99f96bfdf5b9156608c4e8a3f1e6aeeebc83ad26ad565abc3946c769725bbdc212b8778faf18f35d08ad789191796f10728785de49609fd8d59b0abe9794b4227c07ee0b594a33b6d8d7110db16e369dc74e4e9c"}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xb5, &(0x7f0000001780)=@string={0xb5, 0x3, "dd272035c7229011c74bd5bf46c27b0477a070c7bb4f52f668c57cd8e7d24657fcb4f5e34f73d4c6b3d19a14626fb87e532bb95310a8b271316b6840798d8927bab6923983344a89aca47765d0319f863fbe58900d7ef2ab51b1811d81492b807f32b0f16fef7b5ae6436abf1092111b6c9353714b0464684eba1cd060d09fa97a4004a76dcef8da6e623ddc68c35fddde8da4fdb0287fe8ac0a9c81a0942fdf13fb56bc77a2849e31cc15f43e4f97b1eda2f2"}}]}) 10m21.990741936s ago: executing program 55 (id=2244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442f2ffe8000000000000000000000000000aaff020000000000000000000000000001000000be000000030c00080005008640"], 0xfdef) 9m57.752483375s ago: executing program 56 (id=2397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x22, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9m34.159110007s ago: executing program 57 (id=2432): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$MON_IOCT_RING_SIZE(r1, 0x80089203, 0x200000000000000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xd6, 0xa04}, 0xab8, 0xbbd4, 0x0, 0x0, 0x0, 0x0, 0xfff9}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022dbd7000ffdbdf252100000009001f007068790700000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt(r5, 0x4, 0x4, &(0x7f00000000c0)="84bba26483b2dfb3a20a6f47fd273494b65245359ea17aa2554affdd5ae5db07ce7d5106074f37421fb8e1df19705cc0752ec85b4a8780a94d7c9c6f4ffe5626121c962d678ec53fc49d5d889055aed6", 0x50) write$binfmt_aout(r9, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 9m2.759740566s ago: executing program 58 (id=2556): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="4ad91b84aa384ea4cd3ad0fed23122caf8ee2e84348764aeeea1b365db4e48005c158848863218a724984f281f2930d1af553706d4957eaaa5906fa3452b2c13d49c8c21ca55573b78228f1d3c23309b367cfe0efac04fa337524536267a64afb2a1fc20b8ef74a4276c621ac744402e4eeac114cd3799e7f73e924d8efaa12386", 0x81}], 0x1}, 0x4008800) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m59.081136747s ago: executing program 59 (id=2568): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 8m17.001881472s ago: executing program 60 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e48902"], 0x36) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x9) 5m28.811898296s ago: executing program 61 (id=3436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r2, 0x0, 0x0, 0x240008d4, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000580), 0x4) 5m18.188454924s ago: executing program 5 (id=3483): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x7f, 0x0, 0x4}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m17.201450742s ago: executing program 5 (id=3485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c0000001400", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 5m17.004162791s ago: executing program 5 (id=3486): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="04002a0020002d800a0000000202020202020000", @ANYRES16=r3], 0x48}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 5m16.926025109s ago: executing program 5 (id=3487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004c80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000180)="c579059d65131894278ec71871c441bc4eb885", 0x13}, {&(0x7f0000001880)="e3a0e801a40c426010ed9ace08bb304a7dc01889e9e44203539976fcf6e0a590fc063ccda718e4ccf6fb0daffa1ac509ea6b3166318a2cbd2468c8dcc8f3b4fd47cf7eefbd33da638f258374362e71deac9f394c3b19a4ab1bccfd954db9694bc0eace3906aacd4d6bf7f8e4d5631b29c88cb26d51761ef51b0fc311014ae6782a3cfd612bd4276e74797c3328149c779a29e0d2d996e89c0b77f7dbe17984b0320f5dff5045207a74", 0xa9}, {&(0x7f00000002c0)="c64096d15567b4e1e30c09ff0c93fe603dbf949d146f1f000838e59e8e31", 0x1e}, {&(0x7f0000001940)="fe913286f79b737f9c9b03992b6168a0251b65567c670f7023f53056b0bd97b8d47488787d0e864cf790aa8a6db4fffc5d1c6009c70706bc3846d9be9c6fbf92418de9c6c64981377ce1c5c080a5c36a5fe7459c93985a8d76912282ac14ff3612e5e3b348124b50b867d7a294ee638bc009893f4f04288c95dc4049f4ee1fdc8b8d91c8214b12d2ebfe60c1e40931071db8a729d3a29dd7d08f03496ff27d0da4447b34e33b36dbd68268", 0xab}, {&(0x7f0000001a00)="f03b7db45685ab72dea0a92dc4cc0fbcbbc051d5cd4125472f1dd59ea8487514502188561b7f8e469354353c4c6516b86a1f47561fb4f02920da85248287f40b549cfb7da4680170d04b54f463c84dda8d94fffe8394968388ffdf617e1cec4f6b666eefc873dc81f0daeb11c50115420f857633614d51af6d1ac44002644fd33ddbadf15831c4b60e6e4a05a3597509fb9b947cf102f53460a4f63dd75c6cf8df8e7411932c0cdcc13447b8f24638836188d1ddd532693fb34c169378d7772b02a67bec31fac2ee3832243607ea680ef401f1d4221e66ddcc40fd5a1dfc98ac7300073470", 0xe5}, {&(0x7f0000000440)="f01e154b0e4e5bb312ed37673668415c8c811ad4e29cbf6ce95db234408271b1e24fbf", 0x23}, {&(0x7f0000000540)="81a7e00a00879ec1b711a369cc67522d94eb85af754e1d9cc0140463f8382ececbe94a7e936703bbb9da81adf9e1581963ac05238992170a822a2fcaa8d28f7a80d8e1b8b82446311a6ec1476a490f738b5edbd87b7828bf91f7af5d264dd5f7981f7880", 0x64}, {&(0x7f0000001b00)="f154ae5a87c3881d3cf9f0238809266571aa5100b23b3eb417086e997e717e46c0e6a5991a774a123758d546bb3031916121f53c988995cc092e1fa3dd1fa7988bc8805b5dd04a521ea7a02487a33634519979afd64146e929940ee3d71b0364ae09493a30c3cfc1759f670a511d51ddea266d9a0487d718b96c583fb48ef0fa367c325a6cffda0c8f", 0x89}], 0x8, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000480)="133d", 0x2}, {&(0x7f0000001c40)="bea2fc4396e88895bd019bb696450c52e433a0148ac6edc6e09d39460db1461bb3c8103c06163fe8d2e7f06158fa12d7fdf167373a90d65e57b2513cfc2ac70be0b9aa6805c7fa46b805054c1146885f70135e6c0eaaf1a3f90e6b752f161f30461f2dad48b94e06c11584fbce964b0be94100d61e651837e80390c40fee33f563106bdf29da559aca2c85d7bec6a9225c0a94fc16e74730b7f1ee0fdb125f11e56a46b9b3c527e4a9f51cf907b1b85899", 0xb1}, {&(0x7f0000001d00)="e71a740cb95b466f954c6760b7269aba058385010694731744aa39fcd2e991c87435296517b785356729367e9b029ece0e53d31e861190425e3385b24be6b4c6221d06123d66a225f220441255a8ee4eaab06d08b4e9ff958b14cebab3651de87491ab77cdef26d2be81ad1a46e5247437a92dcb93209a93640a49f38fb4cf44ac39c762d8f1fc3c70a656c5e9ea29cf6da3d232ead8cd251f99ea34f53e6cdfa88838ab2907c4a8c575c8303f7b14e50ad061024662dbd3c75caa0bb5f5947bcbe479630b240dbd2a9c623556", 0xcd}, {&(0x7f0000001e00)="dad91ff2b995fc711c2851dffb879afdf7335c80ca95d557673846820415c3b9424801b6f2fe5b381e4f9dbeedbde5bee272571f93071b6acfff4ad8d01a88f757d86f2366401ece8cd12957843f30c020762dd701b9cfb2cc5cb2a796515b100e341bceff322f", 0x67}, {&(0x7f0000001e80)="810cc55632d05f6f75c85a1e9a250e6762a45529065b5fade6876e9b36ed7710c8e536dc4b2582fc49e7b88b2b457fb5a9dc9e8b80214d229af4b1fdb3f693332115259703755221cf9a6597a872ac1e77a1324442c03fe3b6f9bc44f1d748ff9a76e35bbfa6d437a46f1bedeb0a7cae4aa9d7f18103c7311df6adc4bd5beed1c8ac63df8f9facf897419f7fa9e9840e785ed3c6329b920acc4c4afc8566", 0x9e}, {&(0x7f0000001f40)="5f26bd9f0ff8b03876a50bd1f99ce4343199a5ef9fc5f2791485d0e2e79ef097b7956281d16333ebfbc45e738a4e3e7fe4dd1b6b2e78307918351803ea001a0b341ad1f1a65c6f105726f6042ebcc0c7a967ef1f599b7610f80386918d79757f0fb22b4d72f75665d2c0ed410be1a7b066760b10", 0x74}, {&(0x7f0000001fc0)="541fbe7618a2d7c6c0fb2a67f6ee76d3b99fe2b50acb39df707f0bd19750a808fd507b2ca270f0b8b17cc62f53f4577788b2ac36331a1fc9b1bc17c36612c8253f56acf5da07a632d0c288e70a64de46f6f3605f6ae3f88d11ef1ed2aa6a56424058581b83771e4b68fe0ef5daf69473a8ebe5d4967bdc9cec0e928754c649dac32a623a130d", 0x86}], 0x7, &(0x7f0000002100)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xb8, 0x117, 0x2, 0x9e, "a31c4978a75c6620d732aa488ca2c535325ea0313be7f84934da72963712f193853d42d52d87624f619bee39cb807b62c9ec236821560ea0c23001ec168df8f6da8dd8def9c6c0f7832475e48fbaf90c58d11c25605a7f659e245ccaf358eda6e726d9e0e8a2229e9016b35e4dc7e5f620e00084979d7f37f4bf3b92b8c7d5dffe0a4adf6ecca36047cd22406229724687e4db067bb8a1d677134a94c682"}], 0x100, 0x4000880}, {0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000004e40)="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", 0x160}, {&(0x7f0000002300)="ad56b8", 0x3}, {&(0x7f0000002340)="babdd73c1d17e52e405765289fe4df952d2ed8cde3859bd858e44cb212721b9537b88e45067426e6e82369084d8223302a4dd65dac118de9f2ae2f04018de27db83dcb64af1a996286c164407e1a63baa03563f1a42586f352bb", 0x5a}, {&(0x7f00000023c0)="36dd836ea0a1e114911cb3eaf360bac9d50ca7c5cc276e211e9c1252f2fc2df81b56b94290b97eb388531217100796a2b863744da484af931a93b19bf907db3ee5f7e79dc07131d920fe5581046633a60b0b8892ce4764690fc5157e834b6769c006ebe283ae847c25bcb9b69b6c590cc5ad47b1fd5edb407a06afaf8c1eb5b03fedb7c9b0a7aa29c523171ce30934aa372e32e90df8d85271e8808e6ce80e3eb550c69d34b858431ed5564b44530ff2a79bd2da361fa129418006854ff72759a1d0f6222525b35bbc63949e19dbcfd78757ab5031c4e616229a87406888072caa4d178918f3be8386f2768b154d", 0xee}, {&(0x7f00000024c0)="eb30449e34eb44b09e300005f959ffbaac1c82761462fbef04f4c0f51c2513117740ace0e628c6ef97986c8ccad7cd1469d22a04bac2e3683a84815aca2219875dc0cb075d1e0d4ad53605d78250630cb090daedcd7d93177b96de64200e65cdfb2000cd28cb1a72ea28047fb578d93c08b170ab43702674bc8641e9f37fb3bf2450ae6dd7d86daa443eae5e1f521316bb0f8c09385ceb7af6b44e8cbc0ed1a2483a800fa4f31102698b9141f78deb6c8123b62214", 0xb5}], 0x5, 0x0, 0x0, 0x4090}, {0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000002600)="07c763c04706c92f2ca6cc4d93272776e75e850c118f318f784283ff2932a15ecb7ce07efc9069b57dce9f6ef625959c5bc90d261accccc0bc358f3b5b1ecebdac4ad379396b0622210fa6ee1cda520329dedf88652e983dde4fd94a5a44f8e897c75dd90ca82e982ea6aef83a26ec9cedd67fbbd594175af145931f006167d371512c33b05fccb0fc0416fe976b0d38a7ac5bf76a17016ac7c650c53dde72a2190bce52bbaa0f4543506ac0a2ae3d5d3726d51b653a7f4de6e4ce7e981a658ec3860f783e17eb9a0a7867e067ec8a61c1bc5b4eb6f5c20a778a", 0xda}, {&(0x7f0000002700)="b9cc777f2c92ad5567faf4c989e6fbf1", 0x10}, {&(0x7f0000002740)="0f58eb8ff7749e98f6f414f2fe877ede4f6f7a", 0x13}, {&(0x7f0000004dc0)="2dc61036a5fdb701efbc96c07eff2ca1128fdd7458caab6e68a17c960d122bc640707d300c33a6d35b6682e399c488313aa0e4afb7ad67ce780784dc587a0e290b811183d2c4f3b462ec93039617cc495daebdf3e9dc", 0x56}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="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", 0xff}, {&(0x7f0000003900)="fecdec606ad79d17d385a3feb425bda0414c7ca64a00435b9827c076f3a7adf05d233c42591d70b030342da724aa4c437a3bd1a1c3bbb907d380e646c283c1ff278e1fb6a3e351f9d3f6198f62f036c5868b225895604a65812b8b68fd4fb2dbe94708776686b7bd83bf6d07c102e53831b63db406d5ac4b60db7f8e44c9", 0x7e}, {&(0x7f0000003980)="4b82049473bbaaad4e43b89f56d33609275a6020f3cd186cfb2b641662dce729564a1059aa7379ddb3d3a9a1488a041b6b64698ee355b5c06ed15e946f724dcc87994fa0b3b74d1f47f2e80176f04e82717e6e35b71348022e095d4740753f9336eba9b8935c813bfd8dabe4ac3ee32ca13180384a022351e720a176538dd8503f8ccb45b637c679b2f4458c084239551eee81a75b52acfc1802cf084c07565ffca77777d6833dbc620ba10822d997a653738d5c2a69b3bd04680cef9239150b03f5f933e8277f204abd8b4bf6fb88c776ec28f98c3b", 0xd6}, {&(0x7f0000003a80)="6d9d8eed839fa90adf1f3ec1dbd9e8", 0xf}, {&(0x7f0000003ac0)="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", 0x1000}], 0xa, &(0x7f0000004b80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xa0, 0x117, 0x2, 0x86, "0218d2dc7d7511f2c8094dbe7262a7c16a369f6fe27f661793b8e151948a5dacb8c0843d7bd3d266bdfbaadeda787b13921cf09c3235a993bb9bcf19c2d3243e98663dffc55c4253c0244550a3b90127b4ebf7383ae8c22f4420b66cff844a54ac3a46850043b41e3c8daad1dbefd37f1ab23113c186aa1ab6a287e70a1ee0871941a90304f2"}], 0xd0, 0x800}], 0x5, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x54a0feee7272d01c}}) 5m16.808588873s ago: executing program 5 (id=3488): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x801) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0x2a, 0x29, 0x7, {0x10, [{{0x4, 0x0, 0x7}, 0x3, 0x2, 0x7, './file2'}]}}, 0x2a) 5m16.778945687s ago: executing program 5 (id=3489): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5, r5], 0x2, r3, r4, 0x3, 0xddff, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 5m1.000624453s ago: executing program 62 (id=3489): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[r5, r5], 0x2, r3, r4, 0x3, 0xddff, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 4m19.769325948s ago: executing program 8 (id=3727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = gettid() r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="660f38804de00f01c9660f65da66baf80cb8d687668def66baf80cb886d1c385ef66bafc0cecece0d00f30b9050a00000f320f01b2008000000f00d1660f73de2f", 0x41}], 0x1, 0x43, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) 4m19.408338278s ago: executing program 8 (id=3732): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0, 0x0], 0x20, r3, r4, 0x3, 0x2fe0000, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 4m19.283172914s ago: executing program 8 (id=3733): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="04002a0020002d800a0000000202020202020000", @ANYRES16=r3], 0x48}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x11, 0xba, {0xba, 0x3, "fbe93e8d0225ba2c6e44fa71b8ced339b4702045e83757866ebb72f47ccde63186e8c16feb600a8f2cb9a15a8f25182866ac9dde026402866fb5bf26cbdbc3a8c9d32048288771daa5fe9452c79cf7dce0c65aaeb37e735e2e1231cd3a67efab645805a34b0b66827e3a95ed294ee56a017817936cddf3a0486ae89ea359e4152498c67e6bdfc52dadb8a9876023b276303f760d1542ce9fc91ae13f7a965d71bc139b7750011aee11fa9a478acbb305dffc48209f588a4c"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x6, 0x40, "dad67abda4f6fe6b3efe424460b31bd9f6f7539b3ffcdd5f46d9daf70d4ec51730560bfc8c94426220da978b2d8dcf4525ae7f47bd4313f66227d1bdf8b6903e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1}}) 4m16.189395848s ago: executing program 8 (id=3743): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x34, r2, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x0, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 4m16.087232482s ago: executing program 8 (id=3744): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e2b, 0x1, 0x0, 0x3, 0x2, 0x20, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x2, 0x0, 0x8, 0xa, 0x6}, {0x100000000000, 0x0, 0x2, 0x4f}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x32, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_GET_FPEMU(0x9, 0x0) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x14, 0x17, 0x301, 0x0, 0x25dfdbfb, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003240000000008000140"], 0x80}}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)={0x40000010}) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 4m15.79520374s ago: executing program 8 (id=3747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x9, 0x8, 0x40}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000404402, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x7, 0x2, 0x7fff, 0x9, 0xd7b, 0x9, 0x3}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r7, &(0x7f0000000140)="73fbff", 0x5cc, 0x40040, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x62, 0x6, @multicast}, 0x14) r8 = dup(r6) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc2361, 0x0) r10 = dup(r9) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r11, 0x29, 0x4e, 0x0, &(0x7f0000000100)) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000040)={0x4, "2e5e13"}, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) 4m15.672438957s ago: executing program 63 (id=3747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x9, 0x8, 0x40}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000404402, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x7, 0x2, 0x7fff, 0x9, 0xd7b, 0x9, 0x3}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r7, &(0x7f0000000140)="73fbff", 0x5cc, 0x40040, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x62, 0x6, @multicast}, 0x14) r8 = dup(r6) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc2361, 0x0) r10 = dup(r9) r11 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r11, 0x29, 0x4e, 0x0, &(0x7f0000000100)) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, &(0x7f0000000040)={0x4, "2e5e13"}, 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) 3m56.113421503s ago: executing program 1 (id=3839): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) 3m54.690001554s ago: executing program 1 (id=3850): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000003000/0xf000)=nil, 0xf000, 0x15) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x2, @raw_data="38175ed207001e865955595663236001fa07be47030889be80d49d06a746282b8fef2c2f8769f0ee07cab1907ee285d53c42e0a921f91991520631345f02a7a36722d36443983bf3d734ee9f55d2514d0eb113763bf52f582f87805a7b8867bc0400a8593f928a8194a934b7b615b30a89c87f515f708c750218968027c43480c0df58b0ed48a110ee63b82cbd218c748b7b768015a7b633cf69d3771007105ecaf6f7c9b03c1d6d2db5210febe3a652a8035515e3513046406b628d9e02d09e43895d6c93457d59"}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) umount2(&(0x7f00000000c0)='./file0\x00', 0x5) 3m53.493434502s ago: executing program 1 (id=3854): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r3) r6 = fcntl$dupfd(r2, 0x406, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000070000000000000000fffffffffffffffeffe600000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000f42f7170f3b7d52b0000000000"], 0xc4}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000000)="380000000100", 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'macvtap0\x00', {}, 0x8}) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 3m53.132955992s ago: executing program 1 (id=3858): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x240040, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000009) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x29, 0x10, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000180)={0x0, 0x0}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0xfffffffe, @remote, 0x5}, r5}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r5, 0x1}}, 0x18) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$dsp(r7, &(0x7f0000000000)=""/110, 0x6e) write(r2, &(0x7f0000000000)="5eca94f36e8fc2e5569c4c033876ffe7e54ce05dcc0cd24692a601628a9c73ff8943d12cd516eff9cc059939b69f79685aef5ec53fa1df5f12ef0e4df087a11618225c0d7cf610bf6985a261c5597c43618021615f7cd88a6f46d4fe4c361c6d1c13f0daf1fb26", 0x67) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES8=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) timer_getoverrun(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r10 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x103001) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000280)="a3c5264913cd", 0x0, 0x3, 0x10000, 0x22, 0x0}) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m53.003702701s ago: executing program 1 (id=3860): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xd) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x20ac00, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESDEC=r1, @ANYRESOCT=r5, @ANYRESDEC=r3, @ANYRES64=r0, @ANYRES32, @ANYBLOB="b8ee8f4663ce1d7599ec81706335c33bc1d39eb9fca6129f597413ab250d50185ad588ce8f747d61f189cf14a8670ff5f2c5446c8529f19291587f6c5d6b98a528e0ba3bd15f180e77b34507feb62744bb9822d5d6107dbd7cf7833d6faffeb6c7511a00c688f1814c"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48084) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) setsockopt$packet_int(r4, 0x107, 0x3b9807daba7504c7, &(0x7f0000000140)=0x4, 0x4) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}], 0x1}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) 3m51.021214864s ago: executing program 1 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a6000018000000000000935faf740294a891c41dfcfabcc5f82e02003baab5d3765a068e5d4a6582ac7f6b30d67ce8808bab20f167691975ebaea3e919f3e52d9731b596759b1feae8421bc5e75bc41a1b0098860e464a4470d36219da44940e9fba3da4946934b53bb66a51c924856a743bb9ed6a4454626f38d9f345b0701047e53676d5f218f3e90c732a2392bdcd0d12cbed6c07bed4ff9b6d"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x6, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x1f0e, r4, &(0x7f0000000140)='i', 0x1, 0x24}]) 3m41.078860994s ago: executing program 2 (id=3917): syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000340)=[@uexit={0x0, 0x18, 0x1}, @cpuid={0x14, 0x18, {0x1, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @wrmsr={0x1e, 0x20, {0x8e8, 0x5}}, @code={0xa, 0x8a, {"450f2327b979030000b809000000ba000000000f30b911000000b8772e7da2ba000000000f308fa97812cc8d6000c482e99a0c5766baf80cb8c6782787ef66bafc0cb00fee650f00d948b800000080000000000f23c80f21f8350800f0000f23f848b88b970000000000000f23c00f21f83500000a000f23f8"}}, @wr_drn={0x6e, 0x20, {0x5, 0x8000}}, @cpuid={0x14, 0x18, {0x6f99, 0x8001}}, @in_dx={0x82, 0x20, {0xa608, 0x1}}], 0x152}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000500)=@arm64_extra={0x603000000013c01b, &(0x7f00000004c0)=0x1}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000080)=0xbc738a992cb012d0) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x1b5b, 0x10000, 0xb2, 0x400, 0x3}) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x40, &(0x7f0000000100)={0x8ea, 0x3, 0x2, 0xc0e4, 0x3, 0x9, 0x1, 0x7}, &(0x7f0000000140)={0x9e98, 0xfffffffffffffffc, 0xfffffffffffffeff, 0x2, 0x200, 0x0, 0xd, 0x100a}, &(0x7f0000000180)={0x3, 0x6024e1ed, 0x200004, 0x6, 0x9, 0x24, 0x1, 0xd}, &(0x7f0000000200)={r5, r6/1000+10000}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bca352766725e104757e70525c6519a858fb194ba0800", "075db43f", "00000000c2ec23f8"}, 0x38) 3m40.917338816s ago: executing program 2 (id=3919): r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x4, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000580)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1263727631866eed6dc11ca000905060200020d00"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) r4 = syz_usb_connect(0x0, 0x438, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x4d, 0xcf, 0xca, 0xff, 0x16d8, 0x7252, 0x1b73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x426, 0x1, 0x2, 0xa, 0x60, 0x8, [{{0x9, 0x4, 0x1, 0x8, 0xd, 0xde, 0xa5, 0xca, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "3729be"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x2, 0x400, 0x7}, {0x6, 0x24, 0x1a, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, @hid_hid={0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0xf0f}}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xef, 0x186}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x29, 0x6, 0x8, [@generic={0x21, 0x22, "d846f26976ee1a4e492fac56fc53937f6efcee1a8d5e3fce32170339f50f97"}, @generic={0xc, 0x4, "740aa0e7ad026ad40efb"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x4, 0x9, 0x9, [@generic={0x13, 0x22, "245c8cac3280464948c45c4cd3d57ad868"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xed, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xcc, 0x9}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x2, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x8, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xf6, 0x8}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x2, 0x6, 0x8, [@generic={0xc4, 0x22, "4b43702df9c494a9ee01f3b943775e22b8a03375c21e1f254bafe4e52103874d9a22028cc69e56fdaa50326793e68d199b9f43ef9a7471571ab5cc88f700bddf848112d39de06816c60ed9a2da3b334b302141f1015ce8e85657cd2e2994df707c1e223e0eb79f0d3a276242845e259103bc844ed4d47f7b41912aacaf9e9c7735a15e902d6763aaafa829f0576546164fb20a66795253c85ae4b7a13ed43ef0111d5a01f0313ebd7c539188616ff130892c72a6fa15c687b4a29f2e329dd2bafc25"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x2, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x24, 0x7210}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x8, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xfffb}]}}, {{0x9, 0x5, 0x0, 0x2, 0x30, 0x8, 0xa, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3}, @generic={0xd0, 0x11, "3081541bc9c306ed7780841875e0a81807d2df150a957ba6537fbcc4690f7ca2f67afad84b19dae81cecf488abe80f27109568ece9daf52326d4213227f99887db8db11d68d9ef3fdf945590fbeb4dea03c4984f50e273352d94d1e4907b2636536d481330b4bbc995c0a09a3dbcb5ae408fd64c5d5746f6d7cf23d4eaf606ec95e806d75056394625a83f2c58f486f5edf24863f346cc6af07fe0d93c19f9acd31bef49fd08eaa34998694e2c097ef0754eefdcd069b5ef1e2ccc000dfa2b01d9ebcdedacb9aa8f1efc85b1bd49"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x3, 0x7c, [@generic={0x83, 0x6, "794ef90576fd31abaea6265dd4892eaf0d6cd68d5a1cfeb8dba9f950e4a5f3ac367e908fe5783d649df6f37cb6e83af6db196f1e808eb208f48a506ea35362e32ea3e60812b0cc6405c90a4d35c7347527113d37a885fab336e47de75baf0d2c5ff9049cee7e31cdc69c49dd176b2742fef90b638d93dbe73443868dafa6c0106e"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @generic={0xc4, 0x21, "399f1622dc35b3b833f57f14872641ee0dc26953fdb5941965a47c8424b751de1da9af7495d7f54d10bfce96556cb19e4c77f48fa55533aaa1463093adee42740d34f2d8c0192f767ec36a57e469daa5d8b13096b5d524dd0177a71297125896f124d840372b05e3088feb11447b5343b80f749bb0c8bb5c3a828fe89682a63702ca0de1b024374420b6869f80fe330d4e8101f94ef8e0b270c35088d6d8f525e72a50194dd773a948c40469962dae69afcad6ef66e77b1d7396a6ad6eb451aff781"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0xc3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x9}]}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0x6, 0x8, 0x20}, 0x16, &(0x7f0000000100)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x61, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x22, 0xb, 0xc, 0x2}]}, 0x6, [{0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "c64a0168ba4d34619514b885504b3e5348766df7bbd825dcbd081e87f79be2bf3e7276c8e197fb6a823435cc1ffa4ff3546fdde41b71f6af34ad7f539637bcf0db3190a801a0ae62e611545c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2409}}, {0x3d, &(0x7f00000002c0)=@string={0x3d, 0x3, "39eaed5c4b479820ed95524ccf471f89cf6a8dadaf11510f381660f7748309b7ee807d86c9acf77c949d2cafcdcbddf9f347c428126c1820532f9b"}}, {0x5f, &(0x7f0000000300)=@string={0x5f, 0x3, "7feb72daae7a363bd5bb4c4c9ffdbfc7e7860480bce4373bad3472e97a8d527fd5d99f5923d0aa684bd4249197a6dc37f7f7ea7380ecfc1755bf198766953fa34abad32f157d3439a2ccdd488f84d66480fbfd79790e30761c96bd5fe1"}}, {0x37, &(0x7f0000000440)=@string={0x37, 0x3, "ecebfe087e4fdfbf59f52686a959907608ee1354666ae0145bc03750a3a01334612f79e0f19386f218b4284e86131e31155279d05c"}}]}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\aL'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m39.603399129s ago: executing program 2 (id=3921): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) write$sndseq(r1, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}], 0x1c) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000200)={0x18, r4, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x3ea4}]}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r4, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) (async) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x22280a1, 0x0) 3m39.525390001s ago: executing program 2 (id=3922): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000380)={r3, 0x1, 0x0, @random="83f047e9529c"}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)={0x2, 'vlan1\x00', {}, 0x40}) close(0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r4, 0x8f5, 0x100000000000000) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000180)='./bus\x00', 0x55) lstat(&(0x7f0000000340)='\x00', &(0x7f00000003c0)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x91ea6c1af182532) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f00000002c0)={0x49, 0xb49d, 0x4, 0x6, 0xffffffff}) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r6, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x1f0e, r9, &(0x7f0000000140)='i', 0x1, 0x24}]) 3m37.688566526s ago: executing program 2 (id=3930): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000340)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000005c0)="ed0308b479b24d", 0x7}, {&(0x7f00000041c0)="924a466bf684b376", 0x8}], 0x3) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair(0x2c, 0x2, 0x8, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}}, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000180)=0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r9) socket$kcm(0x29, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 3m37.501590467s ago: executing program 2 (id=3931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x2000000, 0x1, 0x1f0e, r2, &(0x7f0000000140)='i', 0x1, 0x24}]) 3m35.498120132s ago: executing program 64 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a6000018000000000000935faf740294a891c41dfcfabcc5f82e02003baab5d3765a068e5d4a6582ac7f6b30d67ce8808bab20f167691975ebaea3e919f3e52d9731b596759b1feae8421bc5e75bc41a1b0098860e464a4470d36219da44940e9fba3da4946934b53bb66a51c924856a743bb9ed6a4454626f38d9f345b0701047e53676d5f218f3e90c732a2392bdcd0d12cbed6c07bed4ff9b6d"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x6, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x1f0e, r4, &(0x7f0000000140)='i', 0x1, 0x24}]) 3m22.498439147s ago: executing program 65 (id=3931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x2000000, 0x1, 0x1f0e, r2, &(0x7f0000000140)='i', 0x1, 0x24}]) 3m22.264705664s ago: executing program 3 (id=3976): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106a0511000000000000010902240001000700000122050009058103000200"/54], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) sendmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m21.209630351s ago: executing program 3 (id=3977): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x56, &(0x7f0000000080)={0x0, 0x10, 0x48}, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 3m19.389098902s ago: executing program 3 (id=3981): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@iv={0x60, 0x117, 0x2, 0x4c, "997d968259d87d35d76a1709803162347bb020190f05bd167bd798d54d3d5d373186a1fd3a9d1b7dd376a849e8eebbcd510e9cdb7a6810bebfde9124dae541a9d61eda58891296455ea99a07"}], 0x60, 0x4c050}], 0x1, 0x40080) capset(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3m17.636340662s ago: executing program 3 (id=3986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000070000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 3m17.385481198s ago: executing program 3 (id=3987): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYBLOB="3e9720fad33a"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1ffffd}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000074d564b"]) unshare(0x6a040000) socket(0x8, 0x3, 0x0) 3m17.064511654s ago: executing program 3 (id=3988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2882, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x7fff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @pid}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3m16.718627296s ago: executing program 66 (id=3988): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2882, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x7fff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x20, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x5, 0x0, 0x0, @pid}]}, 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3m7.055789119s ago: executing program 7 (id=4024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700090008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020080003400000000514000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x200288c0) 3m6.813415303s ago: executing program 7 (id=4027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xff04}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b00000000000300000005000000180001801400020073797a5f74756e00000080000000000008000500ff0300000c0003800400010004000380"], 0x40}}, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x2}}}, 0xa) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001840)={0x0, 0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="05009758580c83fc54e2273307801a071d2c885749975cbf95b5f7a40afd5d6471d26d045a5319b7afc62b1f83aa828ebaad71e7a980949be49f3ac40471360e94049727be88d44f6dc06690feaebbb208e58891e56d3172eb1a8e2cb14087c4c7f7a0ec000000006d06f20ca056e4cbfdffd646862269337153c2263a891daeb1c45f2afb0088930d247119ec245046854e9e7a"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 3m5.391154577s ago: executing program 7 (id=4030): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x40045436, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340047e9c6ae4c8fdcf10000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf2503000000080031000104000005002d000000000008002b00040000000500330001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x8014) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002b9d7000fbdbdf252100200008000300", @ANYRES32=r2, @ANYBLOB="3c002c8008000000fdffffff0800"], 0x74}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000040)) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) getpid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x4) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x80ff, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0) r10 = fanotify_init(0x500, 0x4ecae4ad3d24165f) r11 = fcntl$dupfd(r5, 0x0, r6) fanotify_mark(r10, 0x1, 0x40000019, r11, 0x0) read$dsp(r11, &(0x7f0000000340)=""/93, 0x5d) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r9, {0x1000}}, './file0\x00'}) 3m4.836358434s ago: executing program 7 (id=4032): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x33b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b00)=ANY=[@ANYBLOB="242000003c0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400250800050009000000f01f08"], 0x2024}, 0x1, 0x0, 0x0, 0xc080}, 0x40040c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet(0x2, 0xa, 0x7) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000280)=0x6e) chdir(&(0x7f0000000140)='./file1\x00') r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7f) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000002600000018000180140002006c6f00"], 0x2c}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 3m4.621661502s ago: executing program 7 (id=4033): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="f44a24f98bf510fbd4307656eb426c7b8150c15cf286cda381a5acfa2a37f7ff205382e9114e52e066f7ea177ff0ab7dbf18f5fc2b485c0f6ae58bc1e13114757aeefe23a25eebdf22c6e8972d1f272a1b7a8213d1e86a882c8009521a63875ed83cdabd0980", @ANYRES16], 0x0) 3m4.297204708s ago: executing program 7 (id=4034): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000440)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0xd02, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x1320, 0x16, 0x1, 0x0, 0x0, {0xa}, [@generic="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", @generic="319d00710373cfabbabf70c280c30149c6a6de5c3bcf0c72e92951240d497415b212ff6bf209f0b00910e19002743cfca8ce12a3c1dd4f1cc1decf94a1068647afc3e7627274c0a9f6a562d0142db3d65eee676a87371df1fa9d5c1778c8f4762823442d8bb3d45f9165dde68651c79598b0106560aeb1ad21806aee7952473ce756f93341f6b09b1936ee59b2a8307946ffc6ddf17f070568c727671fb98da0f95951c6d90a7ac5661ac401afbe169e869b4176ff502defa7c5f26edf4a15b1fa32d66be2ca80b14d2657c740b873cb0c768dd3", @generic="2a341b4815e71552936ea01ed50743f925565ba9209f7b1de46dbdac93d59ee93f0465a94f93a12d25d0", @nested={0xed, 0x118, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r1}, @generic="c427632038fd85ec2c5709c8a87a7f0b73e946a90b7631968bbbbd91d3ef7fd7d5d2007cb80711473a01be084f9a07a1aeca6ac32ff2e4f788b8158c3b527a7832c20b75d9579ba41767b7a0ee2ceb0d2d13e44838c264fa892ef4a5408f4d8846117dc8937354a904c3e0105c73741eedd7403aaec8f6581bb71c6c41476577dc179464a92bbe6ceefe0077218100a7e028fc1b368bc3135a0588817639df9bbdd3b4da0444e9e63a6157950d8b9430e7d6310deb1b5badd67b251bc2bd2a93b1243668983e8438b09d69855e7f03567ed929fc9214b4408822f3ae79fdade0c9"]}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x9f, 0xb9, 0x0, 0x0, @binary="97329af54e622b384ee3d56a0b833e6f17102a25f129ee50ae8d9a13deabf47e49b5e0ca5cca023d0e2176cf56a833af93b3c01c77b2ee2894a913c4f66731b229e5232ef5641e75b3aa2ca0f47152fc9ebe00940d938d4b2c8780b5045b6483bf5d4b61b152a5558b67de756fc55b43485e92ce8df64897832be22cade34c5b8a855dc736e0dec4f425b7c14618a2b3585c88caabac162765ecb4"}, @generic="2ca1cf7aff7bc67b2845fc0f637ec82b7ed190f11a648febf68a182b1c5c919bc470628444fb1ae9c4ce1b81d6c5e1e33f8b4520dba45de6c52c9e6a1082815530842dec86b6f70a950578d91a09e7cdf4cfdb44ad3543ae36362af7102aa08b88e3ff67fd91ac6d2b335200ec38", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r1}]}, 0x1320}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 3m4.008919574s ago: executing program 67 (id=4034): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000440)) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0xd02, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x1320, 0x16, 0x1, 0x0, 0x0, {0xa}, [@generic="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", @generic="319d00710373cfabbabf70c280c30149c6a6de5c3bcf0c72e92951240d497415b212ff6bf209f0b00910e19002743cfca8ce12a3c1dd4f1cc1decf94a1068647afc3e7627274c0a9f6a562d0142db3d65eee676a87371df1fa9d5c1778c8f4762823442d8bb3d45f9165dde68651c79598b0106560aeb1ad21806aee7952473ce756f93341f6b09b1936ee59b2a8307946ffc6ddf17f070568c727671fb98da0f95951c6d90a7ac5661ac401afbe169e869b4176ff502defa7c5f26edf4a15b1fa32d66be2ca80b14d2657c740b873cb0c768dd3", @generic="2a341b4815e71552936ea01ed50743f925565ba9209f7b1de46dbdac93d59ee93f0465a94f93a12d25d0", @nested={0xed, 0x118, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r1}, @generic="c427632038fd85ec2c5709c8a87a7f0b73e946a90b7631968bbbbd91d3ef7fd7d5d2007cb80711473a01be084f9a07a1aeca6ac32ff2e4f788b8158c3b527a7832c20b75d9579ba41767b7a0ee2ceb0d2d13e44838c264fa892ef4a5408f4d8846117dc8937354a904c3e0105c73741eedd7403aaec8f6581bb71c6c41476577dc179464a92bbe6ceefe0077218100a7e028fc1b368bc3135a0588817639df9bbdd3b4da0444e9e63a6157950d8b9430e7d6310deb1b5badd67b251bc2bd2a93b1243668983e8438b09d69855e7f03567ed929fc9214b4408822f3ae79fdade0c9"]}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=r3}, @typed={0x9f, 0xb9, 0x0, 0x0, @binary="97329af54e622b384ee3d56a0b833e6f17102a25f129ee50ae8d9a13deabf47e49b5e0ca5cca023d0e2176cf56a833af93b3c01c77b2ee2894a913c4f66731b229e5232ef5641e75b3aa2ca0f47152fc9ebe00940d938d4b2c8780b5045b6483bf5d4b61b152a5558b67de756fc55b43485e92ce8df64897832be22cade34c5b8a855dc736e0dec4f425b7c14618a2b3585c88caabac162765ecb4"}, @generic="2ca1cf7aff7bc67b2845fc0f637ec82b7ed190f11a648febf68a182b1c5c919bc470628444fb1ae9c4ce1b81d6c5e1e33f8b4520dba45de6c52c9e6a1082815530842dec86b6f70a950578d91a09e7cdf4cfdb44ad3543ae36362af7102aa08b88e3ff67fd91ac6d2b335200ec38", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r1}]}, 0x1320}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 7.187111998s ago: executing program 4 (id=4898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x13000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 7.029277904s ago: executing program 4 (id=4899): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xfff, 0xfd, 0x3, 0x8000}, {0xfffe, 0x40, 0x2, 0xa8}, {0x101, 0x9, 0xad, 0x6f67}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000240)=0x43, 0x5, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r5, 0x0, r4}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000200)=r2) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r8, 0x40045431, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000053c0)='./bus\x00', 0x364) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@nfs_export_on}]}) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000008116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000040)={0x2}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000000)={0x6, 0xa, "d00255cce666d26465de512c17709dd5e4fabddf14d3fb2e8c2b671dd96f53fc", 0x10001, 0x7f, 0x3, 0xcee, 0x22}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 6.138713161s ago: executing program 4 (id=4906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0xc008aeba, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0) 5.828814894s ago: executing program 4 (id=4911): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x40, 0xf, 0x6f, {0x6f, 0x2, "822c1a715426b9868da2c2ab9e2cdcd6ea2347c58b90c5a3eaffd46fa1477a4e070d2991985c854c6d5aa8cf48dba0986eff079e18e77a52eebe62c30f08b268fbdaa3f5cfe4118102ece1b2e5360d9f0b7684f52cc6c22d310f62f22523bcc0cefda210be297c06c21c21a0a5"}}, &(0x7f0000000540)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "b9e23d4c1f64f6a09174e2d3a5dd240d9d7e5c5d0c4da6dac6add90778ecc6b427e250099e0c598dab2963033f655847dcfb681f2cb4f6e4c0688d3cda0f4de9f2946041c3fed357e3aed7020b1a4ea6dbfc23003a5015edfc31f9012068640c787f54920a9e4c71e2cde7cc38fbd2cddb1c946941bb712f1c9145232c554781fa659c254dba20e9"}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000680)={0x0, 0x1d, 0xd3, "4e9cf9be6622b1dd7d9d331000b9721389c68ef35ec5577582a4359ae317f219f940de95149e815014b9e742a7133c9d8dc3dea251dd7320071f4cad9a636ae23a071cbe934f971b543b38997a13138961718b63c3f7f7a55882fb541f0e4873719e4e887ddd67b4ca8056671533a91a75ace06e3d3af35fcf6a06a3a35647183f3e8cec1ebf222ab6c9cbf3574e5aabaa44839fcd81613b86a88567a91a3ddec65fe4f6b76d76e03cd36e94a37489aec760da69d27e1d5621c27831faf4171102b8d5c0d5ff7087f7fa6a21a7af14ee9fb0e4"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000bc0)}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.329528482s ago: executing program 0 (id=4912): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b085512a0a900000000000000000000000000002200", [0x4, 0x31a]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x400000000000, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 5.153530661s ago: executing program 0 (id=4914): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 20) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81) 4.452806315s ago: executing program 0 (id=4915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xf0ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x5}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x10}, @fda={0x66646185, 0x0, 0x1, 0x800000000000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4.397931189s ago: executing program 0 (id=4916): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02105a290200000027bd010e3d8839e207c625b0feb61fd1c4524c4b7000fbdbdf25"], 0x10}}, 0x8000) setpriority(0x2, r0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02dc30200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) finit_module(r2, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) epoll_create1(0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02105a290200000027bd010e3d8839e207c625b0feb61fd1c4524c4b7000fbdbdf25"], 0x10}}, 0x8000) (async) setpriority(0x2, r0, 0x2) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(r4) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02dc30200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) finit_module(r2, 0x0, 0x3) (async) 4.293493438s ago: executing program 6 (id=4917): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0, 0x0], 0x20, r3, r4, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000050004b427180010"}}) 4.239545675s ago: executing program 6 (id=4918): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x9}) 4.220759689s ago: executing program 0 (id=4919): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x139, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x853, 0x148, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x83}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.117157114s ago: executing program 6 (id=4920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={0x5a8, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe, 0x2, "b61965c846c154afa8fa"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "dd"}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x8a, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7e, 0x0, @device_a, 0x7, @value=@device_b, 0x0, 0x9, @device_a, 0x5}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x21, {0x5, 0x6, 0x1, "eec7b7420ca5ef91148667e42e37272bfeb1c819ed9ceafae43953c316ff"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x7, @val=0x7fff, @val=0x29, @val="b7edd1ec4472bd48176a439546b25294"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x3, @val=0x86, @val=0x30, @val="823825365a230fcaa541c8281e4d45c6"}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@cf={0x4, 0x6, {0x7, 0x7, 0x14, 0x18}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x2, 0x29}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x79}, @fast_bss_trans={0x37, 0x9d, {0x7, 0x7, "cb640c1bab007a73f0dc79587b922fc7", "3408a44aa44ea6651bfe5c8a9e378c86e74e2a169aac812d1433ff6787e934cc", "5c2e03ad22e2a9d001335142221432d00c5c6be27215e6b968a8ecaf2974e1a7", [{0x1, 0x3, "d2be4d"}, {0x2, 0x3, "a389f7"}, {0x1, 0x13, "f69f84df9c53d247be475a6991cf7d7c5b1c5c"}, {0x4, 0x1, '\v'}, {0x3}, {0x1, 0xa, "1f73752d6bbfeb3d1880"}, {0x1, 0x19, "5d1e5489a737dbb3ae4661e35756fbf9f5bd58ecd1e3c0e5a0"}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1aa, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @random="997afe9bf17b", {0x6, 0x7}}, 0xfffffffffffffffe, @default, 0x4000, @void, @void, @val={0x3, 0x1, 0x88}, @val={0x4, 0x6, {0x6, 0xe, 0x7ff}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x6}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1}}, @val={0x76, 0x6, {0xe, 0x67, 0x2c, 0xb}}, [{0xdd, 0xba, "99260dfbf11a9d55ceeb4d88840d0a11ec908979c4cb054182658cb5cf36ec0d95edbd8589463e1999fd7861cb7779cd66d5803dd180ad2f395205d7a4922d7316415855460c49ce52f4c0c0bb9a786d499705e573ea5bdd18971b3c715437b0c2e83d5fae7340555b2e6dc2d92b633e5befe6725acdd3569a673180476045a93e1dcfb8709f9c6c3fe4aaad104cc6421fc84ee24fed0168dc07d78fe5e7f18dca4e4ec3c996fac491679b54613c969c976f54b2fc900071b62f"}, {0xdd, 0x7f, "1276dda957e041c14074914f60c346b8761e893d99b2b86e43214d421476dcff43a6c3423e7e197ca359b33c1a690157d0c930bb8798b0a8cd2ca8ee5adeac8d25e6ca24805cdafcdb32042c591b39f1c02988776697ab4711e63485b1d78a936ba32e497f2e1c6de579c1996a184cd1adbd0863ebebeefad2946b7aea003e"}, {0xdd, 0x1e, "12624eee4abbe43048579837e74fac0a8165babb2d1ac63806b4eb23a956"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1cf, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x32ce}, @device_a, @device_a, @random="8146587910d0", {0xd, 0xa}}, 0x8000, @default, 0x1390, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x6, 0x1, 0x4, 0x7}}, @val={0x6, 0x2, 0xfffd}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0xf7, 0x0, 0x3}}, @val={0x2d, 0x1a, {0x300, 0x0, 0x5, 0x0, {0x100, 0x5, 0x0, 0x1}, 0x6, 0x7, 0x65}}, @void, @void, @void, [{0xdd, 0x6, "5db0ea87dc4d"}, {0xdd, 0x8c, "72c22dc2bdbd5c19536f60fc2589c5532146319ff97087a7e4186195492bb68ce9a177dd7569dfe17ecc78a05177d53fdd1bd3d76651fbd514f7150c3f0e0fe423fa40dd5032be85623464d4d4d70ada561e149c8cde3d1238d1342e63526faa2aede6ded1fef9dd4e3cfede16e7e79b9520d1b6393eb4bc32d9c1be86f10b0bbcc48027f8b113dc9ca451a2"}, {0xdd, 0x27, "4a432a8c12a9baf6ecfceb7fc6c2a7954d0570504240e59757389ac0bcaddaad276cae3dacdc04"}, {0xdd, 0x1c, "e2bae0685f8b6bd512782e0f3636574180a4f73304e64b60fc2d6c12"}, {0xdd, 0x7a, "d03ca2053c3a8db3db17929e06178deb9670e662d4d99407455b0aa826ea5c015adead7ca6b1ea9462a4ae77bc2dc52f515aee199c86271647804c043a1c9c422738a30359dddcf9c6a8aec54db6955c117aca7fbd157107d1cd6280351a3c3d56ee2668d3c4267ad3c6675b8632391ee1796d737a41ee26a5b4"}, {0xdd, 0x6, "ab2b53d5fd40"}, {0xdd, 0x6, "a5d88ea626c1"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x54, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "0b4ce330a8fbaa6ea2bef6c6dd1193863940b655c145d29643df0d102845c2ceb9d350b5e4f7d06fce7781a5c4199696d2c8a547a6b31e3773e93d4af9a0e3b12257f6dcd727ee4492b4"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5a8}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000002) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f000001fa00)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ccdf9995f59cdf054a4fd547875e9e9f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c04a46748498839db501123c5769ea0"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8842}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xc, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0xd7, 0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 3.200785181s ago: executing program 4 (id=4924): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="0900dc7e00b8"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x2) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000001c0)=[0xfffffff9, 0x9]) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 2.367751601s ago: executing program 6 (id=4927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x5}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x10}, @fda={0x66646185, 0x0, 0x1, 0x800000000000000}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.366573334s ago: executing program 0 (id=4928): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x40, 0xf, 0x6f, {0x6f, 0x2, "822c1a715426b9868da2c2ab9e2cdcd6ea2347c58b90c5a3eaffd46fa1477a4e070d2991985c854c6d5aa8cf48dba0986eff079e18e77a52eebe62c30f08b268fbdaa3f5cfe4118102ece1b2e5360d9f0b7684f52cc6c22d310f62f22523bcc0cefda210be297c06c21c21a0a5"}}, &(0x7f0000000540)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "b9e23d4c1f64f6a09174e2d3a5dd240d9d7e5c5d0c4da6dac6add90778ecc6b427e250099e0c598dab2963033f655847dcfb681f2cb4f6e4c0688d3cda0f4de9f2946041c3fed357e3aed7020b1a4ea6dbfc23003a5015edfc31f9012068640c787f54920a9e4c71e2cde7cc38fbd2cddb1c946941bb712f1c9145232c554781fa659c254dba20e9"}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000680)={0x0, 0x1d, 0xd3, "4e9cf9be6622b1dd7d9d331000b9721389c68ef35ec5577582a4359ae317f219f940de95149e815014b9e742a7133c9d8dc3dea251dd7320071f4cad9a636ae23a071cbe934f971b543b38997a13138961718b63c3f7f7a55882fb541f0e4873719e4e887ddd67b4ca8056671533a91a75ace06e3d3af35fcf6a06a3a35647183f3e8cec1ebf222ab6c9cbf3574e5aabaa44839fcd81613b86a88567a91a3ddec65fe4f6b76d76e03cd36e94a37489aec760da69d27e1d5621c27831faf4171102b8d5c0d5ff7087f7fa6a21a7af14ee9fb0e4"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000bc0)}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x15, &(0x7f0000000000)={0x20, 0x16, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.334491757s ago: executing program 9 (id=4929): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0070000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x9}) 2.189491128s ago: executing program 9 (id=4930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x24000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 2.188803247s ago: executing program 6 (id=4931): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000ffefffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000b6bfe5227cdf962900", [0x7, 0x4002000000000001]}}) 2.159865775s ago: executing program 9 (id=4932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xf4ff}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.118293468s ago: executing program 6 (id=4933): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x40, 0xf, 0x6f, {0x6f, 0x2, "822c1a715426b9868da2c2ab9e2cdcd6ea2347c58b90c5a3eaffd46fa1477a4e070d2991985c854c6d5aa8cf48dba0986eff079e18e77a52eebe62c30f08b268fbdaa3f5cfe4118102ece1b2e5360d9f0b7684f52cc6c22d310f62f22523bcc0cefda210be297c06c21c21a0a5"}}, &(0x7f0000000540)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "b9e23d4c1f64f6a09174e2d3a5dd240d9d7e5c5d0c4da6dac6add90778ecc6b427e250099e0c598dab2963033f655847dcfb681f2cb4f6e4c0688d3cda0f4de9f2946041c3fed357e3aed7020b1a4ea6dbfc23003a5015edfc31f9012068640c787f54920a9e4c71e2cde7cc38fbd2cddb1c946941bb712f1c9145232c554781fa659c254dba20e9"}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000680)={0x0, 0x1d, 0xd3, "4e9cf9be6622b1dd7d9d331000b9721389c68ef35ec5577582a4359ae317f219f940de95149e815014b9e742a7133c9d8dc3dea251dd7320071f4cad9a636ae23a071cbe934f971b543b38997a13138961718b63c3f7f7a55882fb541f0e4873719e4e887ddd67b4ca8056671533a91a75ace06e3d3af35fcf6a06a3a35647183f3e8cec1ebf222ab6c9cbf3574e5aabaa44839fcd81613b86a88567a91a3ddec65fe4f6b76d76e03cd36e94a37489aec760da69d27e1d5621c27831faf4171102b8d5c0d5ff7087f7fa6a21a7af14ee9fb0e4"}, &(0x7f0000000780)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000bc0)}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.049310031s ago: executing program 9 (id=4934): r0 = socket(0x1d, 0x800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000519000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0x3) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0xb}, {&(0x7f0000000540)=""/88, 0x60}, {&(0x7f0000000300)=""/88, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) 1.872562721s ago: executing program 9 (id=4935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c0009aaa19d9330bb233f67178fb4e8f3963ca0000", @ANYRES16=r8, @ANYBLOB="20002bbd7000fcdbdf25440000000c009900ff0300001d0000000400cc009c005a809800018005000400160000000e0001003612050b036c026c4805000014000300c5c13000000803002d4904000100060005000700020000001400050008000400fbff01007f0001009d0a000005000400000000001400050005000800050085060800f7ff05000700050004000200000014000300040030d600009d0002008b4f0100f300140005000e000900090003000300ff0108000010"], 0xc0}}, 0x4) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc30309050803200006020409050302"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 883.155964ms ago: executing program 4 (id=4936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={0x5a8, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe, 0x2, "b61965c846c154afa8fa"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "dd"}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x8a, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x7e, 0x0, @device_a, 0x7, @value=@device_b, 0x0, 0x9, @device_a, 0x5}}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0x21, {0x5, 0x6, 0x1, "eec7b7420ca5ef91148667e42e37272bfeb1c819ed9ceafae43953c316ff"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x7, @val=0x7fff, @val=0x29, @val="b7edd1ec4472bd48176a439546b25294"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x3, @val=0x86, @val=0x30, @val="823825365a230fcaa541c8281e4d45c6"}}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@cf={0x4, 0x6, {0x7, 0x7, 0x14, 0x18}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x2, 0x29}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x79}, @fast_bss_trans={0x37, 0x9d, {0x7, 0x7, "cb640c1bab007a73f0dc79587b922fc7", "3408a44aa44ea6651bfe5c8a9e378c86e74e2a169aac812d1433ff6787e934cc", "5c2e03ad22e2a9d001335142221432d00c5c6be27215e6b968a8ecaf2974e1a7", [{0x1, 0x3, "d2be4d"}, {0x2, 0x3, "a389f7"}, {0x1, 0x13, "f69f84df9c53d247be475a6991cf7d7c5b1c5c"}, {0x4, 0x1, '\v'}, {0x3}, {0x1, 0xa, "1f73752d6bbfeb3d1880"}, {0x1, 0x19, "5d1e5489a737dbb3ae4661e35756fbf9f5bd58ecd1e3c0e5a0"}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1aa, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @random="997afe9bf17b", {0x6, 0x7}}, 0xfffffffffffffffe, @default, 0x4000, @void, @void, @val={0x3, 0x1, 0x88}, @val={0x4, 0x6, {0x6, 0xe, 0x7ff}}, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x0, 0x95, 0x6}}, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1}}, @val={0x76, 0x6, {0xe, 0x67, 0x2c, 0xb}}, [{0xdd, 0xba, "99260dfbf11a9d55ceeb4d88840d0a11ec908979c4cb054182658cb5cf36ec0d95edbd8589463e1999fd7861cb7779cd66d5803dd180ad2f395205d7a4922d7316415855460c49ce52f4c0c0bb9a786d499705e573ea5bdd18971b3c715437b0c2e83d5fae7340555b2e6dc2d92b633e5befe6725acdd3569a673180476045a93e1dcfb8709f9c6c3fe4aaad104cc6421fc84ee24fed0168dc07d78fe5e7f18dca4e4ec3c996fac491679b54613c969c976f54b2fc900071b62f"}, {0xdd, 0x7f, "1276dda957e041c14074914f60c346b8761e893d99b2b86e43214d421476dcff43a6c3423e7e197ca359b33c1a690157d0c930bb8798b0a8cd2ca8ee5adeac8d25e6ca24805cdafcdb32042c591b39f1c02988776697ab4711e63485b1d78a936ba32e497f2e1c6de579c1996a184cd1adbd0863ebebeefad2946b7aea003e"}, {0xdd, 0x1e, "12624eee4abbe43048579837e74fac0a8165babb2d1ac63806b4eb23a956"}]}}, @NL80211_ATTR_BEACON_HEAD={0x1cf, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x32ce}, @device_a, @device_a, @random="8146587910d0", {0xd, 0xa}}, 0x8000, @default, 0x1390, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x6, 0x1, 0x4, 0x7}}, @val={0x6, 0x2, 0xfffd}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0xf7, 0x0, 0x3}}, @val={0x2d, 0x1a, {0x300, 0x0, 0x5, 0x0, {0x100, 0x5, 0x0, 0x1}, 0x6, 0x7, 0x65}}, @void, @void, @void, [{0xdd, 0x6, "5db0ea87dc4d"}, {0xdd, 0x8c, "72c22dc2bdbd5c19536f60fc2589c5532146319ff97087a7e4186195492bb68ce9a177dd7569dfe17ecc78a05177d53fdd1bd3d76651fbd514f7150c3f0e0fe423fa40dd5032be85623464d4d4d70ada561e149c8cde3d1238d1342e63526faa2aede6ded1fef9dd4e3cfede16e7e79b9520d1b6393eb4bc32d9c1be86f10b0bbcc48027f8b113dc9ca451a2"}, {0xdd, 0x27, "4a432a8c12a9baf6ecfceb7fc6c2a7954d0570504240e59757389ac0bcaddaad276cae3dacdc04"}, {0xdd, 0x1c, "e2bae0685f8b6bd512782e0f3636574180a4f73304e64b60fc2d6c12"}, {0xdd, 0x7a, "d03ca2053c3a8db3db17929e06178deb9670e662d4d99407455b0aa826ea5c015adead7ca6b1ea9462a4ae77bc2dc52f515aee199c86271647804c043a1c9c422738a30359dddcf9c6a8aec54db6955c117aca7fbd157107d1cd6280351a3c3d56ee2668d3c4267ad3c6675b8632391ee1796d737a41ee26a5b4"}, {0xdd, 0x6, "ab2b53d5fd40"}, {0xdd, 0x6, "a5d88ea626c1"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x54, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "0b4ce330a8fbaa6ea2bef6c6dd1193863940b655c145d29643df0d102845c2ceb9d350b5e4f7d06fce7781a5c4199696d2c8a547a6b31e3773e93d4af9a0e3b12257f6dcd727ee4492b4"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5a8}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000002) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1abf0737765c88b0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f000001fa00)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ccdf9995f59cdf054a4fd547875e9e9f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "7c04a46748498839db501123c5769ea0"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8842}, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xc, 0x50, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xff, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x3, 0x2, {0x7, 0x25, 0x1, 0x80, 0xd7, 0x7}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 0s ago: executing program 9 (id=4937): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x2, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 22) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81) kernel console output (not intermixed with test programs): nfig 4 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1115, setting to 1024 [ 1029.462069][ T5868] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1029.472325][ T5868] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 1029.487871][ T5868] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1029.497246][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.505433][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1029.514358][ T9] usb 5-1: can't read configurations, error -61 [ 1029.525796][T26939] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1029.656153][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1029.699582][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1029.706138][ T9] usb 5-1: too many configurations: 30, using maximum allowed: 8 [ 1029.719308][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1029.727891][ T9] usb 5-1: can't read configurations, error -61 [ 1029.736134][ T9] usb usb5-port1: unable to enumerate USB device [ 1030.037778][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.048921][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.059898][ T1001] bond0 (unregistering): Released all slaves [ 1030.082488][ T5868] ath6kl: Failed to submit usb control message: -71 [ 1030.092938][ T5868] ath6kl: unable to send the bmi data to the device: -71 [ 1030.103035][ T5868] ath6kl: Unable to send get target info: -71 [ 1030.112024][T26946] lo speed is unknown, defaulting to 1000 [ 1030.122116][ T5868] ath6kl: Failed to init ath6kl core: -71 [ 1030.189664][ T1001] tipc: Disabling bearer [ 1030.195636][ T1001] tipc: Left network mode [ 1030.401732][ T5868] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1030.433050][ T5868] usb 7-1: USB disconnect, device number 85 [ 1030.522870][ T1001] hsr_slave_0: left promiscuous mode [ 1030.529463][ T1001] hsr_slave_1: left promiscuous mode [ 1030.537775][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.545882][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.016247][ T43] usb 7-1: new full-speed USB device number 86 using dummy_hcd [ 1031.178579][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1031.186647][ T43] usb 7-1: can't read configurations, error -61 [ 1031.297626][T26971] FAULT_INJECTION: forcing a failure. [ 1031.297626][T26971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.322192][ T43] usb 7-1: new full-speed USB device number 87 using dummy_hcd [ 1031.331590][T26971] CPU: 1 UID: 0 PID: 26971 Comm: syz.4.4769 Not tainted syzkaller #0 PREEMPT(full) [ 1031.331622][T26971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1031.331634][T26971] Call Trace: [ 1031.331643][T26971] [ 1031.331652][T26971] dump_stack_lvl+0x189/0x250 [ 1031.331687][T26971] ? __pfx____ratelimit+0x10/0x10 [ 1031.331712][T26971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1031.331752][T26971] ? __pfx__printk+0x10/0x10 [ 1031.331793][T26971] should_fail_ex+0x414/0x560 [ 1031.331830][T26971] __kvm_read_guest_page+0x18d/0x240 [ 1031.331854][T26971] kvm_fetch_guest_virt+0x12b/0x170 [ 1031.331885][T26971] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1031.331912][T26971] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1031.331941][T26971] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1031.331967][T26971] ? x86_decode_insn+0x11f5/0x5470 [ 1031.331991][T26971] x86_decode_insn+0x31d/0x5470 [ 1031.332040][T26971] ? __pfx_x86_decode_insn+0x10/0x10 [ 1031.332068][T26971] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 1031.332101][T26971] ? __asan_memset+0x22/0x50 [ 1031.332128][T26971] ? init_decode_cache+0x78/0x90 [ 1031.332151][T26971] ? init_emulate_ctxt+0x4d6/0x660 [ 1031.332182][T26971] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1031.332217][T26971] ? trace_rcu_utilization+0x47/0x1d0 [ 1031.332249][T26971] x86_emulate_instruction+0x61b/0x1f90 [ 1031.332298][T26971] ? _raw_read_unlock+0x28/0x50 [ 1031.332322][T26971] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1031.332351][T26971] ? __get_current_cr3_fast+0x90/0x150 [ 1031.332373][T26971] ? clear_bhb_loop+0x60/0xb0 [ 1031.332394][T26971] ? clear_bhb_loop+0x60/0xb0 [ 1031.332416][T26971] ? vmx_vcpu_run+0xe92/0x2b70 [ 1031.332441][T26971] ? __vmx_complete_interrupts+0xe7/0x690 [ 1031.332479][T26971] handle_ud+0x142/0x590 [ 1031.332511][T26971] ? __pfx_handle_ud+0x10/0x10 [ 1031.332536][T26971] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1031.332561][T26971] ? __pfx_current_save_fsgs+0x10/0x10 [ 1031.332587][T26971] ? __lock_acquire+0xab9/0xd20 [ 1031.332614][T26971] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1031.332643][T26971] vmx_handle_exit+0x10a4/0x18c0 [ 1031.332669][T26971] ? vcpu_run+0x361b/0x7040 [ 1031.332705][T26971] vcpu_run+0x43aa/0x7040 [ 1031.332746][T26971] ? vcpu_run+0x361b/0x7040 [ 1031.332823][T26971] ? __pfx_vcpu_run+0x10/0x10 [ 1031.332852][T26971] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1031.332882][T26971] ? rcu_is_watching+0x15/0xb0 [ 1031.332913][T26971] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1031.332939][T26971] ? __mutex_trylock_common+0x153/0x260 [ 1031.332971][T26971] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1031.332994][T26971] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1031.333019][T26971] ? rcu_is_watching+0x15/0xb0 [ 1031.333045][T26971] ? trace_contention_end+0x39/0x120 [ 1031.333074][T26971] ? __mutex_lock+0x335/0x1350 [ 1031.333108][T26971] ? kasan_quarantine_put+0xdd/0x220 [ 1031.333136][T26971] ? lockdep_hardirqs_on+0x9c/0x150 [ 1031.333160][T26971] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1031.333183][T26971] ? __pfx___mutex_lock+0x10/0x10 [ 1031.333208][T26971] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1031.333234][T26971] ? do_vfs_ioctl+0xbe8/0x1430 [ 1031.333251][T26971] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1031.333273][T26971] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1031.333296][T26971] kvm_vcpu_ioctl+0x95c/0xe90 [ 1031.333322][T26971] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1031.333364][T26971] ? __fget_files+0x2a/0x420 [ 1031.333393][T26971] ? __fget_files+0x3a0/0x420 [ 1031.333415][T26971] ? __fget_files+0x2a/0x420 [ 1031.333442][T26971] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1031.333465][T26971] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1031.333485][T26971] __se_sys_ioctl+0xfc/0x170 [ 1031.333518][T26971] do_syscall_64+0xfa/0xfa0 [ 1031.333542][T26971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.333561][T26971] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1031.333581][T26971] ? clear_bhb_loop+0x60/0xb0 [ 1031.333605][T26971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.333625][T26971] RIP: 0033:0x7fc3b118eec9 [ 1031.333643][T26971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.333660][T26971] RSP: 002b:00007fc3b2113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1031.333682][T26971] RAX: ffffffffffffffda RBX: 00007fc3b13e5fa0 RCX: 00007fc3b118eec9 [ 1031.333698][T26971] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1031.333711][T26971] RBP: 00007fc3b2113090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.333724][T26971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.333742][T26971] R13: 00007fc3b13e6038 R14: 00007fc3b13e5fa0 R15: 00007ffd3cbbac78 [ 1031.333777][T26971] [ 1031.878292][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1031.885998][ T43] usb 7-1: can't read configurations, error -61 [ 1031.892664][ T43] usb usb7-port1: attempt power cycle [ 1032.022731][ T1001] team0 (unregistering): Port device team_slave_1 removed [ 1032.093006][ T1001] team0 (unregistering): Port device team_slave_0 removed [ 1032.236218][ T43] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1032.266744][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1032.274948][ T43] usb 7-1: can't read configurations, error -61 [ 1032.406026][ T43] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1032.429033][ T43] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1032.437369][ T43] usb 7-1: can't read configurations, error -61 [ 1032.444293][ T43] usb usb7-port1: unable to enumerate USB device [ 1032.746073][ T43] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1032.840514][T26982] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4773'. [ 1032.913118][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 1032.942749][ T43] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1032.965118][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.994330][ T43] usb 10-1: config 0 descriptor?? [ 1033.203321][ T1001] IPVS: stop unused estimator thread 0... [ 1033.221612][ T43] usb 10-1: string descriptor 0 read error: -71 [ 1033.249767][ T43] uvcvideo 10-1:0.0: Found UVC 0.00 device (2833:0201) [ 1033.261520][ T43] uvcvideo 10-1:0.0: No valid video chain found. [ 1033.285667][ T43] usb 10-1: USB disconnect, device number 80 [ 1033.306074][ T5924] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1033.457721][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1033.465834][ T5924] usb 1-1: not running at top speed; connect to a high speed hub [ 1033.474958][ T5924] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 1033.484543][ T5924] usb 1-1: config 0 has no interface number 0 [ 1033.490959][ T5924] usb 1-1: config 0 interface 202 has no altsetting 0 [ 1033.500075][ T5924] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c2.6c [ 1033.510141][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.518423][ T5924] usb 1-1: Product: syz [ 1033.522597][ T5924] usb 1-1: Manufacturer: syz [ 1033.527263][ T5924] usb 1-1: SerialNumber: syz [ 1033.533900][ T5924] usb 1-1: config 0 descriptor?? [ 1033.596027][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1033.747266][ T5924] ttusb_dec_send_command: command bulk message failed: error -22 [ 1033.757461][ T5924] ttusb-dec 1-1:0.202: probe with driver ttusb-dec failed with error -22 [ 1033.766044][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1033.773457][ T9] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1033.785111][ T5924] usb 1-1: USB disconnect, device number 21 [ 1033.791984][ T9] usb 5-1: config 0 has no interface number 0 [ 1033.801140][ T9] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1033.816890][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1033.826828][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.835332][ T9] usb 5-1: Product: syz [ 1033.840916][ T9] usb 5-1: Manufacturer: syz [ 1033.845537][ T9] usb 5-1: SerialNumber: syz [ 1033.862563][ T9] usb 5-1: config 0 descriptor?? [ 1033.879763][ T9] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1033.903599][T27001] FAULT_INJECTION: forcing a failure. [ 1033.903599][T27001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.927623][T27001] CPU: 0 UID: 0 PID: 27001 Comm: syz.6.4781 Not tainted syzkaller #0 PREEMPT(full) [ 1033.927650][T27001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1033.927663][T27001] Call Trace: [ 1033.927672][T27001] [ 1033.927681][T27001] dump_stack_lvl+0x189/0x250 [ 1033.927715][T27001] ? __pfx____ratelimit+0x10/0x10 [ 1033.927738][T27001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.927765][T27001] ? __pfx__printk+0x10/0x10 [ 1033.927803][T27001] should_fail_ex+0x414/0x560 [ 1033.927837][T27001] __kvm_read_guest_page+0x18d/0x240 [ 1033.927862][T27001] kvm_fetch_guest_virt+0x12b/0x170 [ 1033.927889][T27001] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1033.927915][T27001] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1033.927941][T27001] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1033.927969][T27001] ? x86_decode_insn+0x11f5/0x5470 [ 1033.927994][T27001] x86_decode_insn+0x31d/0x5470 [ 1033.928045][T27001] ? __pfx_x86_decode_insn+0x10/0x10 [ 1033.928072][T27001] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 1033.928102][T27001] ? __asan_memset+0x22/0x50 [ 1033.928130][T27001] ? init_decode_cache+0x78/0x90 [ 1033.928151][T27001] ? init_emulate_ctxt+0x4d6/0x660 [ 1033.928183][T27001] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1033.928216][T27001] ? trace_rcu_utilization+0x47/0x1d0 [ 1033.928246][T27001] x86_emulate_instruction+0x61b/0x1f90 [ 1033.928294][T27001] ? _raw_read_unlock+0x28/0x50 [ 1033.928316][T27001] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1033.928344][T27001] ? __get_current_cr3_fast+0x90/0x150 [ 1033.928364][T27001] ? clear_bhb_loop+0x60/0xb0 [ 1033.928384][T27001] ? clear_bhb_loop+0x60/0xb0 [ 1033.928405][T27001] ? vmx_vcpu_run+0xe92/0x2b70 [ 1033.928429][T27001] ? __vmx_complete_interrupts+0xe7/0x690 [ 1033.928466][T27001] handle_ud+0x142/0x590 [ 1033.928497][T27001] ? __pfx_handle_ud+0x10/0x10 [ 1033.928521][T27001] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1033.928561][T27001] ? __lock_acquire+0xab9/0xd20 [ 1033.928589][T27001] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1033.928617][T27001] vmx_handle_exit+0x10a4/0x18c0 [ 1033.928643][T27001] ? vcpu_run+0x361b/0x7040 [ 1033.928678][T27001] vcpu_run+0x43aa/0x7040 [ 1033.928713][T27001] ? vcpu_run+0x361b/0x7040 [ 1033.928788][T27001] ? __pfx_vcpu_run+0x10/0x10 [ 1033.928816][T27001] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1033.928844][T27001] ? rcu_is_watching+0x15/0xb0 [ 1033.928872][T27001] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1033.928899][T27001] ? __mutex_trylock_common+0x153/0x260 [ 1033.928928][T27001] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1033.928950][T27001] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1033.928973][T27001] ? rcu_is_watching+0x15/0xb0 [ 1033.928998][T27001] ? trace_contention_end+0x39/0x120 [ 1033.929026][T27001] ? __mutex_lock+0x335/0x1350 [ 1033.929054][T27001] ? kasan_quarantine_put+0xdd/0x220 [ 1033.929082][T27001] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.929103][T27001] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1033.929125][T27001] ? __pfx___mutex_lock+0x10/0x10 [ 1033.929149][T27001] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1033.929174][T27001] ? do_vfs_ioctl+0xbe8/0x1430 [ 1033.929191][T27001] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1033.929213][T27001] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1033.929236][T27001] kvm_vcpu_ioctl+0x95c/0xe90 [ 1033.929259][T27001] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1033.929297][T27001] ? __fget_files+0x2a/0x420 [ 1033.929324][T27001] ? __fget_files+0x3a0/0x420 [ 1033.929346][T27001] ? __fget_files+0x2a/0x420 [ 1033.929373][T27001] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1033.929396][T27001] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1033.929415][T27001] __se_sys_ioctl+0xfc/0x170 [ 1033.929447][T27001] do_syscall_64+0xfa/0xfa0 [ 1033.929469][T27001] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.929491][T27001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.929510][T27001] ? clear_bhb_loop+0x60/0xb0 [ 1033.929538][T27001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.929557][T27001] RIP: 0033:0x7f9d9258eec9 [ 1033.929576][T27001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.929591][T27001] RSP: 002b:00007f9d93465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.929612][T27001] RAX: ffffffffffffffda RBX: 00007f9d927e5fa0 RCX: 00007f9d9258eec9 [ 1033.929627][T27001] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1033.929640][T27001] RBP: 00007f9d93465090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.929653][T27001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.929664][T27001] R13: 00007f9d927e6038 R14: 00007f9d927e5fa0 R15: 00007ffdbc7e9f48 [ 1033.929698][T27001] [ 1034.376152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1034.384182][ T9] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1034.728533][T27013] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1034.737765][T27014] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1034.806457][ T5931] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1034.823374][ T9] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1034.929250][ T9541] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1034.956012][ T5931] usb 7-1: Using ep0 maxpacket: 32 [ 1034.964754][ T5931] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1034.973003][ T5931] usb 7-1: config 0 has no interface number 0 [ 1034.979220][ T5931] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1034.992174][ T5931] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1035.001439][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.010814][ T5931] usb 7-1: Product: syz [ 1035.019330][ T5931] usb 7-1: Manufacturer: syz [ 1035.026366][ T5931] usb 7-1: SerialNumber: syz [ 1035.033779][ T5931] usb 7-1: config 0 descriptor?? [ 1035.044824][ T5931] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1035.055337][ T5931] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1035.086010][ T9541] usb 10-1: Using ep0 maxpacket: 32 [ 1035.092932][ T9541] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1035.101745][ T9541] usb 10-1: config 0 has no interface number 0 [ 1035.108301][ T9541] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1035.118537][ T9541] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1035.128083][ T9541] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.136619][ T9541] usb 10-1: Product: syz [ 1035.141350][ T9541] usb 10-1: Manufacturer: syz [ 1035.146712][ T9541] usb 10-1: SerialNumber: syz [ 1035.155634][ T9541] usb 10-1: config 0 descriptor?? [ 1035.170910][ T9541] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1035.182852][ T9541] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1035.253833][ T9] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1035.268873][ T9] em28xx 5-1:0.89: board has no eeprom [ 1035.336200][ T9] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1035.343457][ T9] em28xx 5-1:0.89: analog set to bulk mode. [ 1035.351809][ T5924] em28xx 5-1:0.89: Registering V4L2 extension [ 1035.363709][ T9] usb 5-1: USB disconnect, device number 100 [ 1035.381505][ T9] em28xx 5-1:0.89: Disconnecting em28xx [ 1035.425617][ T5924] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1035.450983][ T5924] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1035.456468][T27007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.460882][ T5924] em28xx 5-1:0.89: No AC97 audio processor [ 1035.475617][ T5924] usb 5-1: Decoder not found [ 1035.477069][T27007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.485536][ T5924] em28xx 5-1:0.89: failed to create media graph [ 1035.494572][ T5924] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1035.510116][ T5924] em28xx 5-1:0.89: Registering snapshot button... [ 1035.519608][ T5924] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input184 [ 1035.534379][ T5924] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1035.543338][ T9] em28xx 5-1:0.89: Closing input extension [ 1035.551064][ T9] em28xx 5-1:0.89: Deregistering snapshot button [ 1035.577665][ T9] em28xx 5-1:0.89: Freeing device [ 1035.727997][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1035.784028][ T5931] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1035.791105][ T9541] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1035.872467][T27033] FAULT_INJECTION: forcing a failure. [ 1035.872467][T27033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.885779][T27033] CPU: 1 UID: 0 PID: 27033 Comm: syz.4.4793 Not tainted syzkaller #0 PREEMPT(full) [ 1035.885809][T27033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1035.885820][T27033] Call Trace: [ 1035.885826][T27033] [ 1035.885832][T27033] dump_stack_lvl+0x189/0x250 [ 1035.885852][T27033] ? __pfx____ratelimit+0x10/0x10 [ 1035.885865][T27033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1035.885881][T27033] ? __pfx__printk+0x10/0x10 [ 1035.885907][T27033] should_fail_ex+0x414/0x560 [ 1035.885940][T27033] __kvm_read_guest_page+0x18d/0x240 [ 1035.885961][T27033] kvm_fetch_guest_virt+0x12b/0x170 [ 1035.885988][T27033] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1035.886014][T27033] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1035.886040][T27033] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1035.886067][T27033] ? x86_decode_insn+0x11f5/0x5470 [ 1035.886092][T27033] x86_decode_insn+0x31d/0x5470 [ 1035.886144][T27033] ? __pfx_x86_decode_insn+0x10/0x10 [ 1035.886172][T27033] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 1035.886203][T27033] ? __asan_memset+0x22/0x50 [ 1035.886231][T27033] ? init_decode_cache+0x78/0x90 [ 1035.886252][T27033] ? init_emulate_ctxt+0x4d6/0x660 [ 1035.886284][T27033] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1035.886317][T27033] ? trace_rcu_utilization+0x47/0x1d0 [ 1035.886348][T27033] x86_emulate_instruction+0x61b/0x1f90 [ 1035.886395][T27033] ? _raw_read_unlock+0x28/0x50 [ 1035.886417][T27033] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1035.886445][T27033] ? __get_current_cr3_fast+0x90/0x150 [ 1035.886466][T27033] ? clear_bhb_loop+0x60/0xb0 [ 1035.886485][T27033] ? clear_bhb_loop+0x60/0xb0 [ 1035.886506][T27033] ? vmx_vcpu_run+0xe92/0x2b70 [ 1035.886530][T27033] ? __vmx_complete_interrupts+0xe7/0x690 [ 1035.886576][T27033] handle_ud+0x142/0x590 [ 1035.886607][T27033] ? __pfx_handle_ud+0x10/0x10 [ 1035.886632][T27033] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1035.886656][T27033] ? __pfx_current_save_fsgs+0x10/0x10 [ 1035.886682][T27033] ? __lock_acquire+0xab9/0xd20 [ 1035.886708][T27033] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1035.886737][T27033] vmx_handle_exit+0x10a4/0x18c0 [ 1035.886763][T27033] ? vcpu_run+0x361b/0x7040 [ 1035.886799][T27033] vcpu_run+0x43aa/0x7040 [ 1035.886833][T27033] ? vcpu_run+0x361b/0x7040 [ 1035.886910][T27033] ? __pfx_vcpu_run+0x10/0x10 [ 1035.886938][T27033] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1035.886967][T27033] ? rcu_is_watching+0x15/0xb0 [ 1035.886997][T27033] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1035.887024][T27033] ? __mutex_trylock_common+0x153/0x260 [ 1035.887053][T27033] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1035.887075][T27033] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1035.887098][T27033] ? rcu_is_watching+0x15/0xb0 [ 1035.887124][T27033] ? trace_contention_end+0x39/0x120 [ 1035.887151][T27033] ? __mutex_lock+0x335/0x1350 [ 1035.887184][T27033] ? kasan_quarantine_put+0xdd/0x220 [ 1035.887212][T27033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.887235][T27033] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1035.887257][T27033] ? __pfx___mutex_lock+0x10/0x10 [ 1035.887279][T27033] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1035.887305][T27033] ? do_vfs_ioctl+0xbe8/0x1430 [ 1035.887322][T27033] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1035.887342][T27033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1035.887363][T27033] kvm_vcpu_ioctl+0x95c/0xe90 [ 1035.887388][T27033] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1035.887430][T27033] ? __fget_files+0x2a/0x420 [ 1035.887459][T27033] ? __fget_files+0x3a0/0x420 [ 1035.887480][T27033] ? __fget_files+0x2a/0x420 [ 1035.887507][T27033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1035.887531][T27033] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1035.887549][T27033] __se_sys_ioctl+0xfc/0x170 [ 1035.887586][T27033] do_syscall_64+0xfa/0xfa0 [ 1035.887608][T27033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1035.887630][T27033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.887650][T27033] ? clear_bhb_loop+0x60/0xb0 [ 1035.887673][T27033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.887693][T27033] RIP: 0033:0x7fc3b118eec9 [ 1035.887711][T27033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.887728][T27033] RSP: 002b:00007fc3b2113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.887750][T27033] RAX: ffffffffffffffda RBX: 00007fc3b13e5fa0 RCX: 00007fc3b118eec9 [ 1035.887765][T27033] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1035.887777][T27033] RBP: 00007fc3b2113090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.887797][T27033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.887808][T27033] R13: 00007fc3b13e6038 R14: 00007fc3b13e5fa0 R15: 00007ffd3cbbac78 [ 1035.887842][T27033] [ 1036.001557][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.086398][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1036.463415][T27037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1036.516443][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1036.524250][ T43] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 1036.533126][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.543325][ T43] usb 1-1: config 0 has no interface number 0 [ 1036.551756][ T43] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1036.560996][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.571033][ T5931] em28xx 7-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=13) [ 1036.581278][ T5931] em28xx 7-1:0.89: board has no eeprom [ 1036.587143][ T43] usb 1-1: Product: syz [ 1036.591558][ T9541] em28xx 10-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1036.601674][ T9541] em28xx 10-1:0.89: board has no eeprom [ 1036.607501][ T43] usb 1-1: Manufacturer: syz [ 1036.612449][ T43] usb 1-1: SerialNumber: syz [ 1036.622101][ T43] usb 1-1: config 0 descriptor?? [ 1036.640565][ T43] redrat3 1-1:0.83: Couldn't find all endpoints [ 1036.675996][ T9541] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1036.683725][ T9541] em28xx 10-1:0.89: analog set to bulk mode. [ 1036.691673][ T43] em28xx 10-1:0.89: Registering V4L2 extension [ 1036.710543][ T9541] usb 10-1: USB disconnect, device number 81 [ 1036.736073][ T9541] em28xx 10-1:0.89: Disconnecting em28xx [ 1036.766532][ T43] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1036.780290][ T43] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1036.790152][ T43] em28xx 10-1:0.89: No AC97 audio processor [ 1036.797929][ T43] usb 10-1: Decoder not found [ 1036.802636][ T43] em28xx 10-1:0.89: failed to create media graph [ 1036.810422][ T43] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1036.819236][ T43] em28xx 10-1:0.89: Registering snapshot button... [ 1036.828221][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input185 [ 1036.839201][ T5931] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1036.848692][ T43] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1036.857743][ T5931] em28xx 7-1:0.89: analog set to bulk mode. [ 1036.860208][ T9] usb 1-1: USB disconnect, device number 22 [ 1036.869325][ T24] em28xx 7-1:0.89: Registering V4L2 extension [ 1036.878863][ T5931] usb 7-1: USB disconnect, device number 90 [ 1036.897249][ T5931] em28xx 7-1:0.89: Disconnecting em28xx [ 1036.942793][ T24] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1036.950701][ T24] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1036.959605][ T24] em28xx 7-1:0.89: No AC97 audio processor [ 1036.975814][ T24] usb 7-1: Decoder not found [ 1036.980540][ T24] em28xx 7-1:0.89: failed to create media graph [ 1036.988054][ T24] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1036.996734][ T24] em28xx 7-1:0.89: Registering snapshot button... [ 1037.005159][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input186 [ 1037.019429][ T24] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1037.030095][ T9541] em28xx 10-1:0.89: Closing input extension [ 1037.037795][ T9541] em28xx 10-1:0.89: Deregistering snapshot button [ 1037.053540][ T5931] em28xx 7-1:0.89: Closing input extension [ 1037.063310][ T9541] em28xx 10-1:0.89: Freeing device [ 1037.070592][ T5931] em28xx 7-1:0.89: Deregistering snapshot button [ 1037.128416][ T5931] em28xx 7-1:0.89: Freeing device [ 1037.179869][T27051] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 1037.219573][T27051] kvm: kvm [27050]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1037.229104][T27051] kvm: kvm [27050]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1037.538941][T27061] FAULT_INJECTION: forcing a failure. [ 1037.538941][T27061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.566105][T27061] CPU: 1 UID: 0 PID: 27061 Comm: syz.4.4802 Not tainted syzkaller #0 PREEMPT(full) [ 1037.566132][T27061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1037.566144][T27061] Call Trace: [ 1037.566153][T27061] [ 1037.566161][T27061] dump_stack_lvl+0x189/0x250 [ 1037.566193][T27061] ? __pfx____ratelimit+0x10/0x10 [ 1037.566216][T27061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.566243][T27061] ? __pfx__printk+0x10/0x10 [ 1037.566294][T27061] should_fail_ex+0x414/0x560 [ 1037.566329][T27061] __kvm_read_guest_page+0x18d/0x240 [ 1037.566353][T27061] kvm_fetch_guest_virt+0x12b/0x170 [ 1037.566383][T27061] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1037.566409][T27061] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1037.566437][T27061] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1037.566464][T27061] ? x86_decode_insn+0x11f5/0x5470 [ 1037.566490][T27061] x86_decode_insn+0x31d/0x5470 [ 1037.566543][T27061] ? __pfx_x86_decode_insn+0x10/0x10 [ 1037.566570][T27061] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 1037.566601][T27061] ? __asan_memset+0x22/0x50 [ 1037.566628][T27061] ? init_decode_cache+0x78/0x90 [ 1037.566650][T27061] ? init_emulate_ctxt+0x4d6/0x660 [ 1037.566681][T27061] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1037.566715][T27061] ? trace_rcu_utilization+0x47/0x1d0 [ 1037.566746][T27061] x86_emulate_instruction+0x61b/0x1f90 [ 1037.566795][T27061] ? _raw_read_unlock+0x28/0x50 [ 1037.566817][T27061] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1037.566845][T27061] ? __get_current_cr3_fast+0x90/0x150 [ 1037.566865][T27061] ? clear_bhb_loop+0x60/0xb0 [ 1037.566885][T27061] ? clear_bhb_loop+0x60/0xb0 [ 1037.566906][T27061] ? vmx_vcpu_run+0xe92/0x2b70 [ 1037.566929][T27061] ? __vmx_complete_interrupts+0xe7/0x690 [ 1037.566967][T27061] handle_ud+0x142/0x590 [ 1037.566997][T27061] ? __pfx_handle_ud+0x10/0x10 [ 1037.567020][T27061] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1037.567045][T27061] ? __pfx_current_save_fsgs+0x10/0x10 [ 1037.567071][T27061] ? __lock_acquire+0xab9/0xd20 [ 1037.567097][T27061] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1037.567124][T27061] vmx_handle_exit+0x10a4/0x18c0 [ 1037.567150][T27061] ? vcpu_run+0x361b/0x7040 [ 1037.567185][T27061] vcpu_run+0x43aa/0x7040 [ 1037.567219][T27061] ? vcpu_run+0x361b/0x7040 [ 1037.567301][T27061] ? __pfx_vcpu_run+0x10/0x10 [ 1037.567328][T27061] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1037.567357][T27061] ? rcu_is_watching+0x15/0xb0 [ 1037.567385][T27061] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1037.567408][T27061] ? __mutex_trylock_common+0x153/0x260 [ 1037.567437][T27061] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1037.567456][T27061] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1037.567479][T27061] ? rcu_is_watching+0x15/0xb0 [ 1037.567502][T27061] ? trace_contention_end+0x39/0x120 [ 1037.567528][T27061] ? __mutex_lock+0x335/0x1350 [ 1037.567559][T27061] ? kasan_quarantine_put+0xdd/0x220 [ 1037.567585][T27061] ? lockdep_hardirqs_on+0x9c/0x150 [ 1037.567604][T27061] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1037.567625][T27061] ? __pfx___mutex_lock+0x10/0x10 [ 1037.567647][T27061] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1037.567670][T27061] ? do_vfs_ioctl+0xbe8/0x1430 [ 1037.567686][T27061] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1037.567704][T27061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1037.567724][T27061] kvm_vcpu_ioctl+0x95c/0xe90 [ 1037.567749][T27061] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1037.567785][T27061] ? __fget_files+0x2a/0x420 [ 1037.567817][T27061] ? __fget_files+0x3a0/0x420 [ 1037.567839][T27061] ? __fget_files+0x2a/0x420 [ 1037.567865][T27061] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1037.567888][T27061] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1037.567906][T27061] __se_sys_ioctl+0xfc/0x170 [ 1037.567937][T27061] do_syscall_64+0xfa/0xfa0 [ 1037.567958][T27061] ? lockdep_hardirqs_on+0x9c/0x150 [ 1037.567977][T27061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.567994][T27061] ? clear_bhb_loop+0x60/0xb0 [ 1037.568015][T27061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.568032][T27061] RIP: 0033:0x7fc3b118eec9 [ 1037.568049][T27061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.568065][T27061] RSP: 002b:00007fc3b2113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.568086][T27061] RAX: ffffffffffffffda RBX: 00007fc3b13e5fa0 RCX: 00007fc3b118eec9 [ 1037.568099][T27061] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1037.568110][T27061] RBP: 00007fc3b2113090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.568122][T27061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.568134][T27061] R13: 00007fc3b13e6038 R14: 00007fc3b13e5fa0 R15: 00007ffd3cbbac78 [ 1037.568166][T27061] [ 1038.096028][ T5931] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1038.166043][ T5868] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1038.246262][ T5931] usb 7-1: Using ep0 maxpacket: 32 [ 1038.253594][ T5931] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1038.263369][ T5931] usb 7-1: config 0 has no interface number 0 [ 1038.269549][ T5931] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1038.278474][ T5931] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1038.287616][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.297493][ T5931] usb 7-1: Product: syz [ 1038.301683][ T5931] usb 7-1: Manufacturer: syz [ 1038.306480][ T5931] usb 7-1: SerialNumber: syz [ 1038.314362][ T5931] usb 7-1: config 0 descriptor?? [ 1038.327950][ T5868] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1038.330505][ T5931] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1038.345979][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.347115][ T5931] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1038.366357][ T5924] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1038.382366][ T5868] usb 1-1: config 0 descriptor?? [ 1038.417296][ T5868] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1038.571784][ T5924] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.581914][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1038.592546][ T5924] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1038.614482][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.628866][ T5924] usb 5-1: config 0 descriptor?? [ 1038.836104][ T5868] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1038.933042][ T5931] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1039.060619][ T5924] apple 0003:05AC:027A.0039: ignoring exceeding usage max [ 1039.074202][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1039.097392][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1039.109424][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1039.131500][ T5924] apple 0003:05AC:027A.0039: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 1039.137324][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1039.152913][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.241785][ T5868] gspca_cpia1: usb_control_msg 02, error -71 [ 1039.251237][ T5868] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1039.267279][ T9541] usb 5-1: USB disconnect, device number 101 [ 1039.274530][ T5868] usb 1-1: USB disconnect, device number 23 [ 1039.371423][ T5931] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1039.380224][ T5931] em28xx 7-1:0.89: board has no eeprom [ 1039.446033][ T5931] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1039.447444][T27078] chnl_net:caif_netlink_parms(): no params data found [ 1039.453274][ T5931] em28xx 7-1:0.89: analog set to bulk mode. [ 1039.466081][ T43] em28xx 7-1:0.89: Registering V4L2 extension [ 1039.473995][ T5931] usb 7-1: USB disconnect, device number 91 [ 1039.484938][ T5931] em28xx 7-1:0.89: Disconnecting em28xx [ 1039.539760][ T43] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1039.547096][ T43] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1039.554162][ T43] em28xx 7-1:0.89: No AC97 audio processor [ 1039.561689][ T43] usb 7-1: Decoder not found [ 1039.566525][ T43] em28xx 7-1:0.89: failed to create media graph [ 1039.572799][ T43] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1039.581095][ T43] em28xx 7-1:0.89: Registering snapshot button... [ 1039.602354][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input187 [ 1039.623431][ T43] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1039.632124][ T5931] em28xx 7-1:0.89: Closing input extension [ 1039.638337][ T5931] em28xx 7-1:0.89: Deregistering snapshot button [ 1039.653470][T27078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.655088][ T5931] em28xx 7-1:0.89: Freeing device [ 1039.660836][T27078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.673867][T27078] bridge_slave_0: entered allmulticast mode [ 1039.699181][T27078] bridge_slave_0: entered promiscuous mode [ 1039.714018][T27078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.721856][T27078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.737597][T27078] bridge_slave_1: entered allmulticast mode [ 1039.762529][T27078] bridge_slave_1: entered promiscuous mode [ 1039.832635][T27078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.848385][T27078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.894066][T27078] team0: Port device team_slave_0 added [ 1039.907638][T27078] team0: Port device team_slave_1 added [ 1039.980327][T27078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.992515][T27078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.019325][T27078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.032461][T27078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.039480][T27078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.046188][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1040.065877][T27078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.116513][T27078] hsr_slave_0: entered promiscuous mode [ 1040.122892][T27078] hsr_slave_1: entered promiscuous mode [ 1040.129414][T27078] debugfs: 'hsr0' already exists in 'hsr' [ 1040.135388][T27078] Cannot create hsr debugfs directory [ 1040.206685][ T5924] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1040.228322][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1040.233559][ T9] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 1040.245472][ T5868] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1040.253692][ T5868] usb 1-1: config 0 has no interface number 0 [ 1040.262622][ T5868] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1040.272391][ T5868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1040.282336][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.291033][ T5868] usb 1-1: Product: syz [ 1040.295223][ T5868] usb 1-1: Manufacturer: syz [ 1040.299935][ T5868] usb 1-1: SerialNumber: syz [ 1040.307147][ T5868] usb 1-1: config 0 descriptor?? [ 1040.319670][ T5868] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1040.329849][ T5868] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1040.348233][T27078] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.376369][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 1040.382852][ T5924] usb 5-1: config 0 has an invalid interface number: 181 but max is 2 [ 1040.391347][ T5924] usb 5-1: config 0 has an invalid interface number: 60 but max is 2 [ 1040.400745][ T5924] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1040.409615][ T5924] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1040.418544][ T5924] usb 5-1: config 0 has an invalid interface number: 215 but max is 2 [ 1040.427700][ T5924] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1040.436825][ T5924] usb 5-1: config 0 has an invalid descriptor of length 176, skipping remainder of the config [ 1040.448742][ T9] usb 7-1: config 5 has an invalid interface number: 216 but max is 0 [ 1040.457067][ T9] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1040.462674][T27078] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.466316][ T5924] usb 5-1: config 0 has no interface number 0 [ 1040.483046][ T9] usb 7-1: config 5 has no interface number 0 [ 1040.489590][ T5924] usb 5-1: config 0 has no interface number 1 [ 1040.495689][ T5924] usb 5-1: config 0 has no interface number 2 [ 1040.501877][ T9] usb 7-1: config 5 interface 216 altsetting 255 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1040.513166][ T5924] usb 5-1: config 0 interface 60 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1040.526825][ T9] usb 7-1: config 5 interface 216 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1040.538117][ T5924] usb 5-1: config 0 interface 60 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1040.550101][ T9] usb 7-1: config 5 interface 216 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1040.561822][ T5924] usb 5-1: config 0 interface 60 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1040.573620][ T9] usb 7-1: config 5 interface 216 altsetting 255 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1040.584772][ T5924] usb 5-1: config 0 interface 60 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1040.589151][T27078] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.595656][ T9] usb 7-1: config 5 interface 216 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 1040.617249][ T5924] usb 5-1: config 0 interface 60 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1040.628028][ T5924] usb 5-1: config 0 interface 60 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 8 [ 1040.637870][ T9] usb 7-1: config 5 interface 216 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1040.649951][ T5924] usb 5-1: config 0 interface 60 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1040.660773][ T9] usb 7-1: config 5 interface 216 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1040.672722][ T5924] usb 5-1: config 0 interface 60 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1040.683720][ T9] usb 7-1: config 5 interface 216 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 1040.694772][ T5924] usb 5-1: config 0 interface 215 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1040.708028][ T9] usb 7-1: config 5 interface 216 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 1040.719057][ T5924] usb 5-1: config 0 interface 181 has no altsetting 0 [ 1040.725879][ T5924] usb 5-1: config 0 interface 60 has no altsetting 0 [ 1040.726115][ T9] usb 7-1: config 5 interface 216 altsetting 255 endpoint 0x9 has invalid maxpacket 72, setting to 64 [ 1040.743925][ T5924] usb 5-1: config 0 interface 215 has no altsetting 0 [ 1040.748244][T27078] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.752097][ T9] usb 7-1: config 5 interface 216 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 1040.773622][ T9] usb 7-1: config 5 interface 216 has no altsetting 0 [ 1040.782055][ T5924] usb 5-1: New USB device found, idVendor=0733, idProduct=3281, bcdDevice=fc.74 [ 1040.791373][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.799478][ T5924] usb 5-1: Product: syz [ 1040.803869][ T5924] usb 5-1: Manufacturer: syz [ 1040.808739][ T5924] usb 5-1: SerialNumber: syz [ 1040.815545][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=82f2, bcdDevice=76.69 [ 1040.824706][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.834645][ T5924] usb 5-1: config 0 descriptor?? [ 1040.846864][ T9] usb 7-1: Product: syz [ 1040.864295][ T9] usb 7-1: Manufacturer: syz [ 1040.869344][ T9] usb 7-1: SerialNumber: syz [ 1040.939601][T27078] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1040.949852][ T5868] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1040.962635][T27078] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1040.973585][T27078] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1040.984787][T27078] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1041.080719][T27078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.107884][T27078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.125772][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.133027][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.148791][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.156044][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.186215][ T5864] Bluetooth: hci2: command tx timeout [ 1041.215730][ T9] cp210x 7-1:5.216: cp210x converter detected [ 1041.228279][ T9] cp210x 7-1:5.216: failed to get vendor val 0x370b size 1: -71 [ 1041.238698][ T9] cp210x 7-1:5.216: querying part number failed [ 1041.250684][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1041.281804][ T9] usb 7-1: USB disconnect, device number 92 [ 1041.337937][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1041.363952][ T9] cp210x 7-1:5.216: device disconnected [ 1041.460172][T27078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.594635][ T5868] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1041.621978][ T5868] em28xx 1-1:0.89: board has no eeprom [ 1041.696952][ T5868] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1041.709868][ T5868] em28xx 1-1:0.89: analog set to bulk mode. [ 1041.720548][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 1041.732381][T27078] veth0_vlan: entered promiscuous mode [ 1041.739975][ T5868] usb 1-1: USB disconnect, device number 24 [ 1041.765741][T27078] veth1_vlan: entered promiscuous mode [ 1041.766437][ T5868] em28xx 1-1:0.89: Disconnecting em28xx [ 1041.819955][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1041.833887][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1041.853150][T27078] veth0_macvtap: entered promiscuous mode [ 1041.860324][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 1041.884457][ T9] usb 1-1: Decoder not found [ 1041.886500][T27078] veth1_macvtap: entered promiscuous mode [ 1041.892656][ T9] em28xx 1-1:0.89: failed to create media graph [ 1041.904778][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1041.921605][T27078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.925314][ T9] em28xx 1-1:0.89: Registering snapshot button... [ 1041.934455][T27078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.951071][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input188 [ 1041.979866][ T9] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1041.989614][ T5868] em28xx 1-1:0.89: Closing input extension [ 1041.996134][ T5868] em28xx 1-1:0.89: Deregistering snapshot button [ 1042.005667][ T1001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.019513][ T1001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.030983][ T1001] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.046969][ T1001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.052703][ T5868] em28xx 1-1:0.89: Freeing device [ 1042.195305][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.216442][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.302894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.326642][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.510840][T27134] FAULT_INJECTION: forcing a failure. [ 1042.510840][T27134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.524533][ T43] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1042.532911][T27134] CPU: 1 UID: 0 PID: 27134 Comm: syz.9.4817 Not tainted syzkaller #0 PREEMPT(full) [ 1042.532942][T27134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1042.532955][T27134] Call Trace: [ 1042.532963][T27134] [ 1042.532972][T27134] dump_stack_lvl+0x189/0x250 [ 1042.533006][T27134] ? __pfx____ratelimit+0x10/0x10 [ 1042.533028][T27134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.533057][T27134] ? __pfx__printk+0x10/0x10 [ 1042.533097][T27134] should_fail_ex+0x414/0x560 [ 1042.533133][T27134] __kvm_read_guest_page+0x18d/0x240 [ 1042.533165][T27134] kvm_fetch_guest_virt+0x12b/0x170 [ 1042.533195][T27134] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1042.533221][T27134] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1042.533250][T27134] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1042.533277][T27134] ? x86_decode_insn+0x11f5/0x5470 [ 1042.533303][T27134] x86_decode_insn+0x31d/0x5470 [ 1042.533356][T27134] ? __pfx_x86_decode_insn+0x10/0x10 [ 1042.533375][T27134] ? xfd_validate_state+0x6d/0x150 [ 1042.533397][T27134] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 1042.533427][T27134] ? rcu_is_watching+0x15/0xb0 [ 1042.533462][T27134] ? __asan_memset+0x22/0x50 [ 1042.533490][T27134] ? init_decode_cache+0x78/0x90 [ 1042.533512][T27134] ? init_emulate_ctxt+0x4d6/0x660 [ 1042.533544][T27134] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1042.533577][T27134] ? trace_rcu_utilization+0x47/0x1d0 [ 1042.533607][T27134] x86_emulate_instruction+0x61b/0x1f90 [ 1042.533646][T27134] ? trace_sched_exit_tp+0x36/0x110 [ 1042.533675][T27134] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1042.533702][T27134] ? __get_current_cr3_fast+0x90/0x150 [ 1042.533721][T27134] ? clear_bhb_loop+0x60/0xb0 [ 1042.533737][T27134] ? clear_bhb_loop+0x60/0xb0 [ 1042.533757][T27134] ? vmx_vcpu_run+0xe92/0x2b70 [ 1042.533780][T27134] ? __vmx_complete_interrupts+0xe7/0x690 [ 1042.533817][T27134] handle_ud+0x142/0x590 [ 1042.533847][T27134] ? __pfx_handle_ud+0x10/0x10 [ 1042.533877][T27134] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1042.533904][T27134] ? __pfx_current_save_fsgs+0x10/0x10 [ 1042.533929][T27134] ? __lock_acquire+0xab9/0xd20 [ 1042.533955][T27134] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1042.533984][T27134] vmx_handle_exit+0x10a4/0x18c0 [ 1042.534010][T27134] ? vcpu_run+0x361b/0x7040 [ 1042.534045][T27134] vcpu_run+0x43aa/0x7040 [ 1042.534080][T27134] ? vcpu_run+0x361b/0x7040 [ 1042.534161][T27134] ? __pfx_vcpu_run+0x10/0x10 [ 1042.534189][T27134] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1042.534218][T27134] ? rcu_is_watching+0x15/0xb0 [ 1042.534248][T27134] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1042.534275][T27134] ? __mutex_trylock_common+0x153/0x260 [ 1042.534306][T27134] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1042.534328][T27134] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1042.534352][T27134] ? rcu_is_watching+0x15/0xb0 [ 1042.534377][T27134] ? trace_contention_end+0x39/0x120 [ 1042.534405][T27134] ? __mutex_lock+0x335/0x1350 [ 1042.534438][T27134] ? kasan_quarantine_put+0xdd/0x220 [ 1042.534466][T27134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.534488][T27134] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1042.534511][T27134] ? __pfx___mutex_lock+0x10/0x10 [ 1042.534536][T27134] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1042.534561][T27134] ? do_vfs_ioctl+0xbe8/0x1430 [ 1042.534579][T27134] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1042.534600][T27134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1042.534622][T27134] kvm_vcpu_ioctl+0x95c/0xe90 [ 1042.534648][T27134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1042.534690][T27134] ? __fget_files+0x2a/0x420 [ 1042.534719][T27134] ? __fget_files+0x3a0/0x420 [ 1042.534741][T27134] ? __fget_files+0x2a/0x420 [ 1042.534767][T27134] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1042.534791][T27134] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1042.534810][T27134] __se_sys_ioctl+0xfc/0x170 [ 1042.534843][T27134] do_syscall_64+0xfa/0xfa0 [ 1042.534865][T27134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.534888][T27134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.534907][T27134] ? clear_bhb_loop+0x60/0xb0 [ 1042.534931][T27134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.534950][T27134] RIP: 0033:0x7f63d1b8eec9 [ 1042.534969][T27134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.534987][T27134] RSP: 002b:00007f63d2a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.535009][T27134] RAX: ffffffffffffffda RBX: 00007f63d1de5fa0 RCX: 00007f63d1b8eec9 [ 1042.535025][T27134] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1042.535037][T27134] RBP: 00007f63d2a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.535049][T27134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.535061][T27134] R13: 00007f63d1de6038 R14: 00007f63d1de5fa0 R15: 00007ffe7988d458 [ 1042.535094][T27134] [ 1042.992528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1043.148332][ T43] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 1043.156673][ T43] usb 1-1: config 0 has no interface number 0 [ 1043.165138][ T43] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1043.169164][ T5924] usb 5-1: USB disconnect, device number 102 [ 1043.174322][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.188991][ T43] usb 1-1: Product: syz [ 1043.193180][ T43] usb 1-1: Manufacturer: syz [ 1043.197880][ T43] usb 1-1: SerialNumber: syz [ 1043.214180][ T43] usb 1-1: config 0 descriptor?? [ 1043.267862][ T5864] Bluetooth: hci2: command tx timeout [ 1043.430105][T27126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.440684][T27126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.496099][ T24] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1043.626057][T24031] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1043.647610][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.658637][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1043.672075][ T43] usb 1-1: Firmware version (0.0) predates our first public release. [ 1043.677573][ T5924] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1043.680441][ T43] usb 1-1: Please update to version 0.2 or newer [ 1043.696481][ T24] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1043.706065][ T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.714592][ T24] usb 10-1: Manufacturer: syz [ 1043.728768][ T24] usb 10-1: config 0 descriptor?? [ 1043.778440][T24031] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1043.787802][T24031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.799506][T24031] usb 7-1: config 0 descriptor?? [ 1043.807906][T24031] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1043.856150][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 1043.863352][ T5924] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1043.871644][ T5924] usb 5-1: config 0 has no interface number 0 [ 1043.878949][ T5924] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1043.888703][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1043.897988][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.907003][ T5924] usb 5-1: Product: syz [ 1043.911228][ T5924] usb 5-1: Manufacturer: syz [ 1043.916933][ T5924] usb 5-1: SerialNumber: syz [ 1043.927548][ T5924] usb 5-1: config 0 descriptor?? [ 1043.941804][ T5924] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1043.946213][ T43] usb 1-1: USB disconnect, device number 25 [ 1043.953412][ T5924] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1044.209496][T24031] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 1044.341104][T27144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.350426][T27144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.614334][ T5924] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1044.621774][T24031] gspca_cpia1: usb_control_msg 02, error -71 [ 1044.627992][T24031] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1044.644042][T24031] usb 7-1: USB disconnect, device number 93 [ 1044.766019][ T9541] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1044.916316][ T9541] usb 1-1: Using ep0 maxpacket: 32 [ 1044.923108][ T9541] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1044.931405][ T9541] usb 1-1: config 0 has no interface number 0 [ 1044.937687][ T9541] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1044.947608][ T9541] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1044.956878][ T9541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.964878][ T9541] usb 1-1: Product: syz [ 1044.969144][ T9541] usb 1-1: Manufacturer: syz [ 1044.974141][ T9541] usb 1-1: SerialNumber: syz [ 1044.981531][ T9541] usb 1-1: config 0 descriptor?? [ 1044.991234][ T9541] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1045.000930][ T9541] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1045.221394][T27158] kvm: pic: non byte read [ 1045.243620][ T5924] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=13) [ 1045.256046][ T5924] em28xx 5-1:0.89: board has no eeprom [ 1045.346483][ T5864] Bluetooth: hci2: command tx timeout [ 1045.411447][T27163] tmpfs: Bad value for 'mpol' [ 1045.497256][ T5924] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1045.504650][ T5924] em28xx 5-1:0.89: analog set to bulk mode. [ 1045.511346][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 1045.538916][ T5924] usb 5-1: USB disconnect, device number 103 [ 1045.566759][ T5924] em28xx 5-1:0.89: Disconnecting em28xx [ 1045.572481][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1045.580957][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1045.589604][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 1045.598463][ T9541] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1045.598690][ T9] usb 5-1: Decoder not found [ 1045.610684][ T9] em28xx 5-1:0.89: failed to create media graph [ 1045.617043][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1045.624791][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 1045.632581][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input189 [ 1045.644783][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1045.654400][ T5924] em28xx 5-1:0.89: Closing input extension [ 1045.661335][ T5924] em28xx 5-1:0.89: Deregistering snapshot button [ 1045.676897][ T5924] em28xx 5-1:0.89: Freeing device [ 1045.726054][ T5931] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1045.856033][ T5931] usb 7-1: device descriptor read/64, error -71 [ 1046.096379][ T5931] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1046.213467][ T9541] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1046.223122][ T9541] em28xx 1-1:0.89: board has no eeprom [ 1046.229417][ T5931] usb 7-1: device descriptor read/64, error -71 [ 1046.280996][ T43] usb 10-1: USB disconnect, device number 82 [ 1046.296122][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1046.304059][ T9541] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1046.317761][ T9541] em28xx 1-1:0.89: analog set to bulk mode. [ 1046.323881][ T8654] em28xx 1-1:0.89: Registering V4L2 extension [ 1046.344070][ T5931] usb usb7-port1: attempt power cycle [ 1046.353951][ T9541] usb 1-1: USB disconnect, device number 26 [ 1046.376362][ T9541] em28xx 1-1:0.89: Disconnecting em28xx [ 1046.399465][ T8654] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1046.407663][ T8654] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1046.414733][ T8654] em28xx 1-1:0.89: No AC97 audio processor [ 1046.422993][ T8654] usb 1-1: Decoder not found [ 1046.429035][ T8654] em28xx 1-1:0.89: failed to create media graph [ 1046.435447][ T8654] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1046.447565][ T24] usb 5-1: device descriptor read/64, error -71 [ 1046.455292][ T8654] em28xx 1-1:0.89: Registering snapshot button... [ 1046.462910][ T8654] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input190 [ 1046.474772][ T8654] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1046.483966][ T9541] em28xx 1-1:0.89: Closing input extension [ 1046.490387][ T9541] em28xx 1-1:0.89: Deregistering snapshot button [ 1046.503199][ T9541] em28xx 1-1:0.89: Freeing device [ 1046.686327][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1046.696610][ T5931] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1046.718682][ T5931] usb 7-1: device descriptor read/8, error -71 [ 1046.756034][ T43] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1046.816099][ T24] usb 5-1: device descriptor read/64, error -71 [ 1046.916111][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 1046.923020][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.934382][ T24] usb usb5-port1: attempt power cycle [ 1046.939953][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.951037][ T43] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1046.960364][ T5931] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1046.968347][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.978600][ T43] usb 10-1: config 0 descriptor?? [ 1046.986633][ T43] hub 10-1:0.0: USB hub found [ 1046.998117][ T5931] usb 7-1: device descriptor read/8, error -71 [ 1047.076063][ T5924] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1047.108691][ T5931] usb usb7-port1: unable to enumerate USB device [ 1047.191286][ T43] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1047.229061][ T5924] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1047.238235][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.248626][ T5924] usb 1-1: config 0 descriptor?? [ 1047.257497][ T5924] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1047.286286][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1047.307196][ T24] usb 5-1: device descriptor read/8, error -71 [ 1047.426600][ T5864] Bluetooth: hci2: command tx timeout [ 1047.539182][T27176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.547876][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1047.555823][T27176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.569550][ T43] hid-generic 0003:046D:C31C.003A: item fetching failed at offset 0/1 [ 1047.581022][ T24] usb 5-1: device descriptor read/8, error -71 [ 1047.588111][ T43] hid-generic 0003:046D:C31C.003A: probe with driver hid-generic failed with error -22 [ 1047.662610][ T5924] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1047.706234][ T24] usb usb5-port1: unable to enumerate USB device [ 1048.075739][ T5924] gspca_cpia1: usb_control_msg 02, error -71 [ 1048.082961][ T5924] gspca_cpia1: usb_control_msg 05, error -71 [ 1048.089040][ T5924] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1048.097691][ T5924] usb 1-1: USB disconnect, device number 27 [ 1048.936091][ T24] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1048.936185][T24031] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1049.094880][T27195] FAULT_INJECTION: forcing a failure. [ 1049.094880][T27195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1049.110484][T27195] CPU: 0 UID: 0 PID: 27195 Comm: syz.4.4839 Not tainted syzkaller #0 PREEMPT(full) [ 1049.110512][T27195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1049.110524][T27195] Call Trace: [ 1049.110533][T27195] [ 1049.110541][T27195] dump_stack_lvl+0x189/0x250 [ 1049.110575][T27195] ? __pfx____ratelimit+0x10/0x10 [ 1049.110599][T27195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.110628][T27195] ? __pfx__printk+0x10/0x10 [ 1049.110663][T27195] ? fs_reclaim_acquire+0x7d/0x100 [ 1049.110692][T27195] should_fail_ex+0x414/0x560 [ 1049.110726][T27195] prepare_alloc_pages+0x213/0x610 [ 1049.110755][T27195] __alloc_frozen_pages_noprof+0x123/0x370 [ 1049.110781][T27195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1049.110806][T27195] ? __lock_acquire+0xab9/0xd20 [ 1049.110832][T27195] ? policy_nodemask+0x27c/0x720 [ 1049.110850][T27195] ? __lock_acquire+0xab9/0xd20 [ 1049.110876][T27195] alloc_pages_mpol+0x232/0x4a0 [ 1049.110903][T27195] vma_alloc_folio_noprof+0xe4/0x200 [ 1049.110928][T27195] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1049.110962][T27195] folio_prealloc+0x30/0x180 [ 1049.110994][T27195] do_wp_page+0x1231/0x5800 [ 1049.111040][T27195] ? __pfx_do_wp_page+0x10/0x10 [ 1049.111061][T27195] ? do_raw_spin_lock+0x121/0x290 [ 1049.111092][T27195] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1049.111128][T27195] __handle_mm_fault+0x1033/0x5400 [ 1049.111170][T27195] ? __pfx___handle_mm_fault+0x10/0x10 [ 1049.111217][T27195] ? follow_page_pte+0xd03/0x13e0 [ 1049.111255][T27195] handle_mm_fault+0x40a/0x8e0 [ 1049.111290][T27195] __get_user_pages+0x165c/0x2a00 [ 1049.111330][T27195] get_user_pages_unlocked+0x1e3/0x720 [ 1049.111366][T27195] hva_to_pfn+0x313/0xc90 [ 1049.111401][T27195] ? __pfx_hva_to_pfn+0x10/0x10 [ 1049.111439][T27195] ? xas_start+0x390/0x770 [ 1049.111459][T27195] ? xa_load+0x60/0x210 [ 1049.111490][T27195] ? kvm_follow_pfn+0x21a/0x3c0 [ 1049.111520][T27195] __kvm_faultin_pfn+0xaa/0x100 [ 1049.111557][T27195] kvm_mmu_faultin_pfn+0x73c/0x1590 [ 1049.111596][T27195] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1049.111633][T27195] kvm_tdp_page_fault+0x273/0x370 [ 1049.111665][T27195] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1049.111687][T27195] ? vmx_vcpu_run+0xe92/0x2b70 [ 1049.111715][T27195] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1049.111753][T27195] ? vmx_handle_exit_irqoff+0x2a3/0x940 [ 1049.111777][T27195] ? __pfx_current_save_fsgs+0x10/0x10 [ 1049.111799][T27195] kvm_mmu_page_fault+0x22f/0xb70 [ 1049.111832][T27195] ? __pfx_handle_ept_violation+0x10/0x10 [ 1049.111859][T27195] vmx_handle_exit+0x10a4/0x18c0 [ 1049.111886][T27195] ? vcpu_run+0x361b/0x7040 [ 1049.111921][T27195] vcpu_run+0x43aa/0x7040 [ 1049.111956][T27195] ? vcpu_run+0x361b/0x7040 [ 1049.112034][T27195] ? __pfx_vcpu_run+0x10/0x10 [ 1049.112061][T27195] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1049.112090][T27195] ? rcu_is_watching+0x15/0xb0 [ 1049.112121][T27195] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1049.112147][T27195] ? __mutex_trylock_common+0x153/0x260 [ 1049.112178][T27195] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1049.112202][T27195] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1049.112224][T27195] ? rcu_is_watching+0x15/0xb0 [ 1049.112250][T27195] ? trace_contention_end+0x39/0x120 [ 1049.112277][T27195] ? __mutex_lock+0x335/0x1350 [ 1049.112309][T27195] ? kasan_quarantine_put+0xdd/0x220 [ 1049.112350][T27195] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.112376][T27195] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1049.112403][T27195] ? __pfx___mutex_lock+0x10/0x10 [ 1049.112428][T27195] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1049.112452][T27195] ? do_vfs_ioctl+0xbe8/0x1430 [ 1049.112470][T27195] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1049.112491][T27195] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1049.112513][T27195] kvm_vcpu_ioctl+0x95c/0xe90 [ 1049.112539][T27195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1049.112581][T27195] ? __fget_files+0x2a/0x420 [ 1049.112610][T27195] ? __fget_files+0x3a0/0x420 [ 1049.112633][T27195] ? __fget_files+0x2a/0x420 [ 1049.112666][T27195] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1049.112690][T27195] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1049.112709][T27195] __se_sys_ioctl+0xfc/0x170 [ 1049.112741][T27195] do_syscall_64+0xfa/0xfa0 [ 1049.112762][T27195] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.112765][ T24] usb 7-1: config 0 has an invalid interface number: 222 but max is 0 [ 1049.112785][T27195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.112804][T27195] ? clear_bhb_loop+0x60/0xb0 [ 1049.112822][T27195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.112838][T27195] RIP: 0033:0x7fc3b118eec9 [ 1049.112857][T27195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.112874][T27195] RSP: 002b:00007fc3b2113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.112895][T27195] RAX: ffffffffffffffda RBX: 00007fc3b13e5fa0 RCX: 00007fc3b118eec9 [ 1049.112909][T27195] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1049.112922][T27195] RBP: 00007fc3b2113090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.112935][T27195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1049.112945][T27195] R13: 00007fc3b13e6038 R14: 00007fc3b13e5fa0 R15: 00007ffd3cbbac78 [ 1049.112978][T27195] [ 1049.116567][T24031] usb 1-1: Using ep0 maxpacket: 32 [ 1049.130663][ T24] usb 7-1: config 0 has no interface number 0 [ 1049.183589][T24031] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1049.189325][ T24] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 1049.199351][T24031] usb 1-1: config 0 has no interface number 0 [ 1049.201770][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.207013][T24031] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1049.211852][ T24] usb 7-1: Product: syz [ 1049.243857][T24031] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1049.252733][ T24] usb 7-1: Manufacturer: syz [ 1049.256496][T24031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.259235][ T24] usb 7-1: SerialNumber: syz [ 1049.263914][T24031] usb 1-1: Product: syz [ 1049.316173][ T24] usb 7-1: config 0 descriptor?? [ 1049.531093][ T5931] usb 7-1: USB disconnect, device number 98 [ 1049.535532][T24031] usb 1-1: Manufacturer: syz [ 1049.696921][ T9541] usb 10-1: USB disconnect, device number 83 [ 1049.702235][T24031] usb 1-1: SerialNumber: syz [ 1049.719608][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1049.778948][T24031] usb 1-1: config 0 descriptor?? [ 1049.791898][T24031] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1049.808669][T24031] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1049.929395][T27210] Invalid ELF header type: 2 != 1 [ 1049.932053][T27212] Invalid ELF header type: 3 != 1 [ 1049.935124][T27211] Invalid ELF header type: 3 != 1 [ 1049.946233][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1049.953661][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1049.962385][ T24] usb 5-1: config 0 has no interface number 0 [ 1049.970729][ T24] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1049.980613][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1049.991792][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.001275][ T24] usb 5-1: Product: syz [ 1050.005530][ T24] usb 5-1: Manufacturer: syz [ 1050.010255][ T24] usb 5-1: SerialNumber: syz [ 1050.026726][ T24] usb 5-1: config 0 descriptor?? [ 1050.036711][ T24] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1050.046346][ T24] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1050.199460][T27192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.208895][T27192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.316152][ T9] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1050.348398][ T9541] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1050.477813][T24031] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1050.484185][ T9] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1050.493504][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.504620][ T9] usb 10-1: config 0 descriptor?? [ 1050.513316][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1050.518812][ T9541] usb 7-1: config index 0 descriptor too short (expected 1024, got 18) [ 1050.527858][ T9541] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.540254][ T9541] usb 7-1: config 0 has no interfaces? [ 1050.545816][ T9541] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1050.555952][ T9541] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.570963][ T9541] usb 7-1: config 0 descriptor?? [ 1050.640718][ T24] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1050.915038][ T9] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1051.111989][T24031] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=13) [ 1051.122604][T24031] em28xx 1-1:0.89: board has no eeprom [ 1051.255841][ T24] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1051.265888][ T24] em28xx 5-1:0.89: board has no eeprom [ 1051.326063][ T24] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1051.333516][ T24] em28xx 5-1:0.89: analog set to bulk mode. [ 1051.341313][ T9541] em28xx 5-1:0.89: Registering V4L2 extension [ 1051.353227][ T24] usb 5-1: USB disconnect, device number 108 [ 1051.367897][ T24] em28xx 5-1:0.89: Disconnecting em28xx [ 1051.376945][T24031] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1051.394543][T24031] em28xx 1-1:0.89: analog set to bulk mode. [ 1051.408991][ T9541] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1051.418697][ T9541] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1051.428703][T24031] usb 1-1: USB disconnect, device number 28 [ 1051.433423][ T9541] em28xx 5-1:0.89: No AC97 audio processor [ 1051.448759][T24031] em28xx 1-1:0.89: Disconnecting em28xx [ 1051.455432][ T9541] usb 5-1: Decoder not found [ 1051.460315][ T9541] em28xx 5-1:0.89: failed to create media graph [ 1051.466996][ T9541] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1051.475674][ T9541] em28xx 5-1:0.89: Registering snapshot button... [ 1051.485203][ T9541] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input191 [ 1051.498596][ T9541] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1051.510296][ T8657] em28xx 1-1:0.89: Registering V4L2 extension [ 1051.535120][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 1051.544749][ T9] cpia1 10-1:0.0: unexpected systemstate: 00 [ 1051.559641][ T8657] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1051.568058][ T9] usb 10-1: USB disconnect, device number 84 [ 1051.575802][ T8657] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1051.585101][ T8657] em28xx 1-1:0.89: No AC97 audio processor [ 1051.592799][ T8657] usb 1-1: Decoder not found [ 1051.599073][ T8657] em28xx 1-1:0.89: failed to create media graph [ 1051.606370][ T8657] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1051.614126][ T8657] em28xx 1-1:0.89: Registering snapshot button... [ 1051.622469][ T8657] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input192 [ 1051.635510][ T8657] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1051.646019][T24031] em28xx 1-1:0.89: Closing input extension [ 1051.651869][T24031] em28xx 1-1:0.89: Deregistering snapshot button [ 1051.661244][ T24] em28xx 5-1:0.89: Closing input extension [ 1051.664154][T24031] em28xx 1-1:0.89: Freeing device [ 1051.672132][ T24] em28xx 5-1:0.89: Deregistering snapshot button [ 1051.698172][ T24] em28xx 5-1:0.89: Freeing device [ 1052.166059][ T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1052.226791][T27237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.249746][T27237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.320940][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1052.332295][ T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1837, bcdDevice= 0.00 [ 1052.349363][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.370869][ T24] usb 5-1: config 0 descriptor?? [ 1052.795515][ T24] asus 0003:0B05:1837.003B: reserved main item tag 0xd [ 1052.811217][ T24] asus 0003:0B05:1837.003B: item fetching failed at offset 4/5 [ 1052.828721][ T24] asus 0003:0B05:1837.003B: Asus hid parse failed: -22 [ 1052.844293][ T24] asus 0003:0B05:1837.003B: probe with driver asus failed with error -22 [ 1052.992846][ T24] usb 5-1: USB disconnect, device number 109 [ 1053.284257][ T24] usb 7-1: USB disconnect, device number 99 [ 1053.366714][ T8657] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1053.528632][ T8657] usb 10-1: Using ep0 maxpacket: 32 [ 1053.546532][ T8657] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1053.568081][ T8657] usb 10-1: config 0 has no interface number 0 [ 1053.583690][ T8657] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1053.602462][ T8657] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1053.611944][ T8657] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.623057][ T8657] usb 10-1: Product: syz [ 1053.629815][ T8657] usb 10-1: Manufacturer: syz [ 1053.634664][ T8657] usb 10-1: SerialNumber: syz [ 1053.636731][ T24] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1053.651364][ T8657] usb 10-1: config 0 descriptor?? [ 1053.672135][ T8657] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1053.683791][ T8657] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1053.796010][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1053.808269][ T24] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1053.818067][ T24] usb 7-1: config 0 has no interface number 0 [ 1053.824223][ T24] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1053.838416][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1053.847725][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.857452][ T24] usb 7-1: Product: syz [ 1053.861641][ T24] usb 7-1: Manufacturer: syz [ 1053.866789][ T24] usb 7-1: SerialNumber: syz [ 1053.876319][ T9] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1053.882280][ T24] usb 7-1: config 0 descriptor?? [ 1053.895560][ T24] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1053.914241][ T24] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1054.039071][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1054.048183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.061233][ T9] usb 5-1: config 0 descriptor?? [ 1054.070867][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1054.246165][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1054.298956][T27256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.308261][T27256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.318570][ T8657] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1054.392336][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.402079][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.402412][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1054.416094][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1054.427948][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1054.442159][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1054.451351][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.459448][ T43] usb 1-1: Product: syz [ 1054.463837][ T43] usb 1-1: Manufacturer: syz [ 1054.471335][ T43] usb 1-1: SerialNumber: syz [ 1054.471969][ T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1054.483664][ T43] usb 1-1: config 0 descriptor?? [ 1054.495729][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1054.505072][ T43] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1054.587546][ T24] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1054.876176][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 1054.886392][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 1054.892431][ T9] cpia1 5-1:0.0: unexpected systemstate: 00 [ 1054.901259][ T9] usb 5-1: USB disconnect, device number 110 [ 1054.933026][ T8657] em28xx 10-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1054.944217][ T8657] em28xx 10-1:0.89: board has no eeprom [ 1055.006008][ T8657] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1055.013406][ T8657] em28xx 10-1:0.89: analog set to bulk mode. [ 1055.019582][ T5868] em28xx 10-1:0.89: Registering V4L2 extension [ 1055.036333][ T8657] usb 10-1: USB disconnect, device number 85 [ 1055.043736][ T8657] em28xx 10-1:0.89: Disconnecting em28xx [ 1055.084944][ T5868] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1055.093666][ T5868] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1055.102968][ T5868] em28xx 10-1:0.89: No AC97 audio processor [ 1055.103691][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1055.112943][ T5868] usb 10-1: Decoder not found [ 1055.120263][ T43] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1055.121663][ T5868] em28xx 10-1:0.89: failed to create media graph [ 1055.137582][ T5868] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1055.145586][ T5868] em28xx 10-1:0.89: Registering snapshot button... [ 1055.153438][ T5868] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input193 [ 1055.165463][ T5868] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1055.174199][ T8657] em28xx 10-1:0.89: Closing input extension [ 1055.180854][ T8657] em28xx 10-1:0.89: Deregistering snapshot button [ 1055.195239][ T8657] em28xx 10-1:0.89: Freeing device [ 1055.201731][ T24] em28xx 7-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=13) [ 1055.214667][ T24] em28xx 7-1:0.89: board has no eeprom [ 1055.335678][ T43] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1055.344441][ T43] em28xx 1-1:0.0: No AC97 audio processor [ 1055.356554][ T43] usb 1-1: USB disconnect, device number 29 [ 1055.364633][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 1055.374719][ T43] em28xx 1-1:0.0: Freeing device [ 1055.449689][T27266] fuse: Bad value for 'fd' [ 1055.466224][ T24] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1055.483936][ T24] em28xx 7-1:0.89: analog set to bulk mode. [ 1055.491863][ T9541] em28xx 7-1:0.89: Registering V4L2 extension [ 1055.515084][ T24] usb 7-1: USB disconnect, device number 100 [ 1055.541389][ T24] em28xx 7-1:0.89: Disconnecting em28xx [ 1055.591248][ T9541] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1055.600858][ T9541] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1055.607996][ T9541] em28xx 7-1:0.89: No AC97 audio processor [ 1055.615330][ T9541] usb 7-1: Decoder not found [ 1055.630804][ T9541] em28xx 7-1:0.89: failed to create media graph [ 1055.646001][ T9541] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1055.658490][ T9541] em28xx 7-1:0.89: Registering snapshot button... [ 1055.675023][ T9541] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input194 [ 1055.689493][ T9541] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1055.699557][ T24] em28xx 7-1:0.89: Closing input extension [ 1055.705441][ T24] em28xx 7-1:0.89: Deregistering snapshot button [ 1055.735302][ T24] em28xx 7-1:0.89: Freeing device [ 1056.056064][ T9541] usb 10-1: new low-speed USB device number 86 using dummy_hcd [ 1056.174584][T27294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.203798][ T9541] usb 10-1: device descriptor read/64, error -71 [ 1056.207279][T27294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.406563][ T8657] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1056.446026][ T9541] usb 10-1: new low-speed USB device number 87 using dummy_hcd [ 1056.565987][ T8657] usb 1-1: Using ep0 maxpacket: 32 [ 1056.573259][ T8657] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.586000][ T9541] usb 10-1: device descriptor read/64, error -71 [ 1056.586913][ T8657] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1056.605059][ T8657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.614202][ T8657] usb 1-1: Product: syz [ 1056.620043][ T5868] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1056.629693][ T8657] usb 1-1: Manufacturer: syz [ 1056.634456][ T8657] usb 1-1: SerialNumber: syz [ 1056.650416][ T8657] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1056.662129][ T8657] imon 1-1:155.0: unable to initialize intf0, err -19 [ 1056.670179][ T8657] imon:imon_probe: failed to initialize context! [ 1056.677175][ T8657] imon 1-1:155.0: unable to register, err -19 [ 1056.696329][ T9541] usb usb10-port1: attempt power cycle [ 1056.776029][ T5868] usb 7-1: Using ep0 maxpacket: 32 [ 1056.788830][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.800738][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.811298][ T5868] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1056.829420][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.843357][ T5868] usb 7-1: config 0 descriptor?? [ 1056.858345][ T8657] usb 1-1: USB disconnect, device number 30 [ 1057.046065][ T9541] usb 10-1: new low-speed USB device number 88 using dummy_hcd [ 1057.066806][ T9541] usb 10-1: device descriptor read/8, error -71 [ 1057.306342][ T9541] usb 10-1: new low-speed USB device number 89 using dummy_hcd [ 1057.327001][ T9541] usb 10-1: device descriptor read/8, error -71 [ 1057.436286][ T9541] usb usb10-port1: unable to enumerate USB device [ 1057.440943][T27314] program syz.0.4880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1057.456286][ T8654] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1057.486421][T27306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.501202][T27306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.506504][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.523234][ T5868] usbhid 7-1:0.0: can't add hid device: -71 [ 1057.538447][ T5868] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1057.560351][ T5868] usb 7-1: USB disconnect, device number 101 [ 1057.606040][ T8654] usb 5-1: Using ep0 maxpacket: 32 [ 1057.613667][ T8654] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1057.622450][ T8654] usb 5-1: config 0 has no interface number 0 [ 1057.628960][ T8654] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1057.640241][ T8654] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1057.650568][ T8654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.658724][ T8654] usb 5-1: Product: syz [ 1057.663382][ T8654] usb 5-1: Manufacturer: syz [ 1057.669269][ T8654] usb 5-1: SerialNumber: syz [ 1057.679859][ T8654] usb 5-1: config 0 descriptor?? [ 1057.692426][ T8654] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1057.702436][ T8654] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1058.081138][T27325] FAULT_INJECTION: forcing a failure. [ 1058.081138][T27325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1058.094524][T27310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.094934][T27310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.114556][T27325] CPU: 0 UID: 0 PID: 27325 Comm: syz.6.4885 Not tainted syzkaller #0 PREEMPT(full) [ 1058.114585][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1058.114598][T27325] Call Trace: [ 1058.114606][T27325] [ 1058.114615][T27325] dump_stack_lvl+0x189/0x250 [ 1058.114651][T27325] ? __pfx____ratelimit+0x10/0x10 [ 1058.114674][T27325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.114702][T27325] ? __pfx__printk+0x10/0x10 [ 1058.114729][T27325] ? fs_reclaim_acquire+0x7d/0x100 [ 1058.114759][T27325] should_fail_ex+0x414/0x560 [ 1058.114795][T27325] prepare_alloc_pages+0x213/0x610 [ 1058.114822][T27325] __alloc_frozen_pages_noprof+0x123/0x370 [ 1058.114848][T27325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1058.114878][T27325] ? policy_nodemask+0x27c/0x720 [ 1058.114905][T27325] alloc_pages_mpol+0x232/0x4a0 [ 1058.114943][T27325] vma_alloc_folio_noprof+0xe4/0x200 [ 1058.114967][T27325] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1058.115001][T27325] folio_prealloc+0x30/0x180 [ 1058.115032][T27325] do_wp_page+0x1231/0x5800 [ 1058.115082][T27325] ? __pfx_do_wp_page+0x10/0x10 [ 1058.115106][T27325] ? do_raw_spin_lock+0x121/0x290 [ 1058.115139][T27325] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1058.115180][T27325] __handle_mm_fault+0x1033/0x5400 [ 1058.115225][T27325] ? __pfx___handle_mm_fault+0x10/0x10 [ 1058.115266][T27325] ? follow_page_pte+0xd03/0x13e0 [ 1058.115304][T27325] handle_mm_fault+0x40a/0x8e0 [ 1058.115338][T27325] __get_user_pages+0x165c/0x2a00 [ 1058.115395][T27325] get_user_pages_unlocked+0x1e3/0x720 [ 1058.115433][T27325] hva_to_pfn+0x313/0xc90 [ 1058.115470][T27325] ? __pfx_hva_to_pfn+0x10/0x10 [ 1058.115504][T27325] ? xas_start+0x390/0x770 [ 1058.115525][T27325] ? xa_load+0x60/0x210 [ 1058.115557][T27325] ? kvm_follow_pfn+0x21a/0x3c0 [ 1058.115590][T27325] __kvm_faultin_pfn+0xaa/0x100 [ 1058.115616][T27325] kvm_mmu_faultin_pfn+0x73c/0x1590 [ 1058.115638][T27325] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1058.115657][T27325] kvm_tdp_page_fault+0x273/0x370 [ 1058.115674][T27325] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1058.115690][T27325] ? vmx_vcpu_run+0xe92/0x2b70 [ 1058.115706][T27325] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1058.115728][T27325] ? vmx_handle_exit_irqoff+0x2a3/0x940 [ 1058.115741][T27325] ? __pfx_current_save_fsgs+0x10/0x10 [ 1058.115753][T27325] kvm_mmu_page_fault+0x22f/0xb70 [ 1058.115772][T27325] ? __pfx_handle_ept_violation+0x10/0x10 [ 1058.115788][T27325] vmx_handle_exit+0x10a4/0x18c0 [ 1058.115802][T27325] ? vcpu_run+0x361b/0x7040 [ 1058.115821][T27325] vcpu_run+0x43aa/0x7040 [ 1058.115839][T27325] ? vcpu_run+0x361b/0x7040 [ 1058.115879][T27325] ? __pfx_vcpu_run+0x10/0x10 [ 1058.115898][T27325] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1058.115924][T27325] ? rcu_is_watching+0x15/0xb0 [ 1058.115958][T27325] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1058.115981][T27325] ? __mutex_trylock_common+0x153/0x260 [ 1058.116010][T27325] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1058.116032][T27325] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1058.116055][T27325] ? rcu_is_watching+0x15/0xb0 [ 1058.116080][T27325] ? trace_contention_end+0x39/0x120 [ 1058.116106][T27325] ? __mutex_lock+0x335/0x1350 [ 1058.116139][T27325] ? kasan_quarantine_put+0xdd/0x220 [ 1058.116168][T27325] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.116188][T27325] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1058.116211][T27325] ? __pfx___mutex_lock+0x10/0x10 [ 1058.116236][T27325] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1058.116259][T27325] ? do_vfs_ioctl+0xbe8/0x1430 [ 1058.116276][T27325] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1058.116295][T27325] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1058.116317][T27325] kvm_vcpu_ioctl+0x95c/0xe90 [ 1058.116341][T27325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1058.116384][T27325] ? __fget_files+0x2a/0x420 [ 1058.116413][T27325] ? __fget_files+0x3a0/0x420 [ 1058.116435][T27325] ? __fget_files+0x2a/0x420 [ 1058.116461][T27325] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1058.116485][T27325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1058.116504][T27325] __se_sys_ioctl+0xfc/0x170 [ 1058.116536][T27325] do_syscall_64+0xfa/0xfa0 [ 1058.116559][T27325] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.116581][T27325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.116599][T27325] ? clear_bhb_loop+0x60/0xb0 [ 1058.116624][T27325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.116643][T27325] RIP: 0033:0x7f9d9258eec9 [ 1058.116662][T27325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.116680][T27325] RSP: 002b:00007f9d93465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.116701][T27325] RAX: ffffffffffffffda RBX: 00007f9d927e5fa0 RCX: 00007f9d9258eec9 [ 1058.116716][T27325] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1058.116729][T27325] RBP: 00007f9d93465090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.116742][T27325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1058.116754][T27325] R13: 00007f9d927e6038 R14: 00007f9d927e5fa0 R15: 00007ffdbc7e9f48 [ 1058.116789][T27325] [ 1058.597385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1058.691242][ T8654] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1058.920826][T27342] sctp: [Deprecated]: syz.0.4890 (pid 27342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1058.920826][T27342] Use struct sctp_sack_info instead [ 1059.017375][ T8657] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1059.139712][ T8654] em28xx 5-1:0.89: AC97 command still being executed: not handled properly! [ 1059.176077][ T8657] usb 7-1: Using ep0 maxpacket: 32 [ 1059.200753][ T8657] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1059.210533][ T8657] usb 7-1: config 0 has no interface number 0 [ 1059.219441][ T8657] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1059.233990][ T8657] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1059.243366][ T8657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.251486][ T8657] usb 7-1: Product: syz [ 1059.256045][ T8657] usb 7-1: Manufacturer: syz [ 1059.262529][ T8657] usb 7-1: SerialNumber: syz [ 1059.276944][ T8657] usb 7-1: config 0 descriptor?? [ 1059.293485][ T8657] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1059.304976][ T8657] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1059.456087][ T5924] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1059.522243][ T8654] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1059.533644][ T8654] em28xx 5-1:0.89: board has no eeprom [ 1059.596754][ T8654] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1059.604033][ T8654] em28xx 5-1:0.89: analog set to bulk mode. [ 1059.613649][ T9541] em28xx 5-1:0.89: Registering V4L2 extension [ 1059.616109][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 1059.634373][ T8654] usb 5-1: USB disconnect, device number 111 [ 1059.641169][ T5924] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.659920][ T8654] em28xx 5-1:0.89: Disconnecting em28xx [ 1059.666429][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1059.700458][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1059.720700][ T5924] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1059.724755][ T9541] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1059.740858][ T9541] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1059.741035][ T5924] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.748890][ T9541] em28xx 5-1:0.89: No AC97 audio processor [ 1059.786041][ T9541] usb 5-1: Decoder not found [ 1059.791920][ T9541] em28xx 5-1:0.89: failed to create media graph [ 1059.800576][ T9541] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1059.813738][ T9541] em28xx 5-1:0.89: Registering snapshot button... [ 1059.828431][ T9541] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input195 [ 1059.844607][ T9541] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1059.849532][ T5924] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1059.860451][ T8654] em28xx 5-1:0.89: Closing input extension [ 1059.865762][ T5924] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1059.869166][ T8654] em28xx 5-1:0.89: Deregistering snapshot button [ 1059.896834][ T8654] em28xx 5-1:0.89: Freeing device [ 1059.897542][ T5924] usb 10-1: Manufacturer: syz [ 1059.907056][ T8657] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1059.930187][ T5924] usb 10-1: config 0 descriptor?? [ 1060.261752][ T5924] rc_core: IR keymap rc-hauppauge not found [ 1060.268183][ T5924] Registered IR keymap rc-empty [ 1060.273177][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.296107][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.319508][T27364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.320505][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1060.334778][T27364] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1060.348047][ T8657] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1060.351692][T27364] overlayfs: missing 'lowerdir' [ 1060.371453][ T8657] em28xx 7-1:0.89: board has no eeprom [ 1060.382891][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input196 [ 1060.387645][T27364] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1060.409421][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.436077][ T8657] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1060.443485][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.450982][ T8657] em28xx 7-1:0.89: analog set to bulk mode. [ 1060.458114][ T9] em28xx 7-1:0.89: Registering V4L2 extension [ 1060.474750][ T8657] usb 7-1: USB disconnect, device number 102 [ 1060.481143][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.509579][ T8657] em28xx 7-1:0.89: Disconnecting em28xx [ 1060.537547][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.552473][ T9] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1060.559779][ T9] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1060.567309][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.574607][ T9] em28xx 7-1:0.89: No AC97 audio processor [ 1060.582495][ T9] usb 7-1: Decoder not found [ 1060.589679][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.597115][ T9] em28xx 7-1:0.89: failed to create media graph [ 1060.603413][ T9] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1060.616966][ T9] em28xx 7-1:0.89: Registering snapshot button... [ 1060.626255][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.636055][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input197 [ 1060.648071][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.658474][ T9] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1060.669087][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.676539][ T8657] em28xx 7-1:0.89: Closing input extension [ 1060.682569][ T8657] em28xx 7-1:0.89: Deregistering snapshot button [ 1060.695707][ T8657] em28xx 7-1:0.89: Freeing device [ 1060.708160][ T5924] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1060.749854][ T5924] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1060.763870][ T5924] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1060.779947][ T5924] usb 10-1: USB disconnect, device number 90 [ 1061.087892][T27384] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4905'. [ 1061.271925][T27373] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1061.278174][T27373] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1061.292527][T27373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1061.299125][T27373] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1061.313728][T27373] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1061.320435][T27373] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1061.330723][T27373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1061.336814][T27373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1061.345047][T27373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1061.523479][T27397] loop5: detected capacity change from 0 to 7 [ 1061.548319][T27397] Dev loop5: unable to read RDB block 7 [ 1061.554161][T27397] loop5: unable to read partition table [ 1061.560750][T27397] loop5: partition table beyond EOD, truncated [ 1061.568311][T27397] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 1061.686028][ T5924] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1061.852192][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 1061.868938][ T5924] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1061.886241][ T5924] usb 5-1: config 0 has no interface number 0 [ 1061.896323][ T5924] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1061.915689][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1061.925391][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.945393][ T5924] usb 5-1: Product: syz [ 1061.950370][ T5924] usb 5-1: Manufacturer: syz [ 1061.954993][ T5924] usb 5-1: SerialNumber: syz [ 1061.998639][ T5924] usb 5-1: config 0 descriptor?? [ 1062.021660][ T5924] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1062.046992][ T5924] em28xx 5-1:0.89: Video interface 89 found: bulk [ 1062.144423][T27410] FAULT_INJECTION: forcing a failure. [ 1062.144423][T27410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1062.161251][T27410] CPU: 0 UID: 0 PID: 27410 Comm: syz.0.4914 Not tainted syzkaller #0 PREEMPT(full) [ 1062.161278][T27410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.161290][T27410] Call Trace: [ 1062.161300][T27410] [ 1062.161309][T27410] dump_stack_lvl+0x189/0x250 [ 1062.161347][T27410] ? __pfx____ratelimit+0x10/0x10 [ 1062.161370][T27410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.161397][T27410] ? __pfx__printk+0x10/0x10 [ 1062.161427][T27410] ? fs_reclaim_acquire+0x7d/0x100 [ 1062.161460][T27410] should_fail_ex+0x414/0x560 [ 1062.161496][T27410] prepare_alloc_pages+0x213/0x610 [ 1062.161528][T27410] __alloc_frozen_pages_noprof+0x123/0x370 [ 1062.161556][T27410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1062.161583][T27410] ? __lock_acquire+0xab9/0xd20 [ 1062.161615][T27410] ? policy_nodemask+0x27c/0x720 [ 1062.161633][T27410] ? __lock_acquire+0xab9/0xd20 [ 1062.161661][T27410] alloc_pages_mpol+0x232/0x4a0 [ 1062.161691][T27410] vma_alloc_folio_noprof+0xe4/0x200 [ 1062.161716][T27410] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1062.161754][T27410] folio_prealloc+0x30/0x180 [ 1062.161786][T27410] do_wp_page+0x1231/0x5800 [ 1062.161843][T27410] ? __pfx_do_wp_page+0x10/0x10 [ 1062.161865][T27410] ? do_raw_spin_lock+0x121/0x290 [ 1062.161896][T27410] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1062.161945][T27410] __handle_mm_fault+0x1033/0x5400 [ 1062.161990][T27410] ? __pfx___handle_mm_fault+0x10/0x10 [ 1062.162028][T27410] ? follow_page_pte+0xd03/0x13e0 [ 1062.162064][T27410] handle_mm_fault+0x40a/0x8e0 [ 1062.162106][T27410] __get_user_pages+0x165c/0x2a00 [ 1062.162180][T27410] get_user_pages_unlocked+0x1e3/0x720 [ 1062.162222][T27410] hva_to_pfn+0x313/0xc90 [ 1062.162263][T27410] ? __pfx_hva_to_pfn+0x10/0x10 [ 1062.162302][T27410] ? xas_start+0x390/0x770 [ 1062.162324][T27410] ? xa_load+0x60/0x210 [ 1062.162356][T27410] ? kvm_follow_pfn+0x21a/0x3c0 [ 1062.162388][T27410] __kvm_faultin_pfn+0xaa/0x100 [ 1062.162427][T27410] kvm_mmu_faultin_pfn+0x73c/0x1590 [ 1062.162473][T27410] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1062.162513][T27410] kvm_tdp_page_fault+0x273/0x370 [ 1062.162543][T27410] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1062.162567][T27410] ? vmx_vcpu_run+0xe92/0x2b70 [ 1062.162597][T27410] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1062.162760][T27410] ? vmx_handle_exit_irqoff+0x2a3/0x940 [ 1062.162784][T27410] ? __pfx_current_save_fsgs+0x10/0x10 [ 1062.162808][T27410] kvm_mmu_page_fault+0x22f/0xb70 [ 1062.162845][T27410] ? __pfx_handle_ept_violation+0x10/0x10 [ 1062.162873][T27410] vmx_handle_exit+0x10a4/0x18c0 [ 1062.162900][T27410] ? vcpu_run+0x361b/0x7040 [ 1062.162941][T27410] vcpu_run+0x43aa/0x7040 [ 1062.162981][T27410] ? vcpu_run+0x361b/0x7040 [ 1062.163080][T27410] ? __pfx_vcpu_run+0x10/0x10 [ 1062.163106][T27410] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1062.163132][T27410] ? rcu_is_watching+0x15/0xb0 [ 1062.163160][T27410] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1062.163184][T27410] ? __mutex_trylock_common+0x153/0x260 [ 1062.163213][T27410] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1062.163234][T27410] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1062.163257][T27410] ? rcu_is_watching+0x15/0xb0 [ 1062.163282][T27410] ? trace_contention_end+0x39/0x120 [ 1062.163310][T27410] ? __mutex_lock+0x335/0x1350 [ 1062.163346][T27410] ? kasan_quarantine_put+0xdd/0x220 [ 1062.163374][T27410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1062.163396][T27410] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1062.163418][T27410] ? __pfx___mutex_lock+0x10/0x10 [ 1062.163440][T27410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1062.163466][T27410] ? do_vfs_ioctl+0xbe8/0x1430 [ 1062.163485][T27410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1062.163507][T27410] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1062.163532][T27410] kvm_vcpu_ioctl+0x95c/0xe90 [ 1062.163562][T27410] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1062.163615][T27410] ? __fget_files+0x2a/0x420 [ 1062.163646][T27410] ? __fget_files+0x3a0/0x420 [ 1062.163676][T27410] ? __fget_files+0x2a/0x420 [ 1062.163704][T27410] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1062.163727][T27410] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1062.163747][T27410] __se_sys_ioctl+0xfc/0x170 [ 1062.163780][T27410] do_syscall_64+0xfa/0xfa0 [ 1062.163806][T27410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.163824][T27410] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1062.163842][T27410] ? clear_bhb_loop+0x60/0xb0 [ 1062.163867][T27410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.163886][T27410] RIP: 0033:0x7fb67138eec9 [ 1062.163905][T27410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.163921][T27410] RSP: 002b:00007fb6722e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.163943][T27410] RAX: ffffffffffffffda RBX: 00007fb6715e5fa0 RCX: 00007fb67138eec9 [ 1062.163958][T27410] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1062.163970][T27410] RBP: 00007fb6722e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.163981][T27410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1062.163993][T27410] R13: 00007fb6715e6038 R14: 00007fb6715e5fa0 R15: 00007ffdf9a8b3d8 [ 1062.164034][T27410] [ 1062.656289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.671412][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 1062.796044][ T9] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1062.914410][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4916'. [ 1062.958307][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.971913][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1062.982687][ T9] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1062.992966][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1063.001217][ T9] usb 10-1: SerialNumber: syz [ 1063.079588][ T5924] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1063.216105][ T9] usb 10-1: 0:2 : does not exist [ 1063.223447][ T9] usb 10-1: unit 5: unexpected type 0x03 [ 1063.241996][ T9] usb 10-1: USB disconnect, device number 91 [ 1063.268289][T19758] udevd[19758]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.336325][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1063.346186][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 1063.352640][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 1063.353488][T19918] Bluetooth: hci0: command 0x0406 tx timeout [ 1063.386021][ T8657] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1063.485982][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1063.493782][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.496638][ T5924] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1063.509276][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.516402][ T5924] em28xx 5-1:0.89: board has no eeprom [ 1063.524343][ T24] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1063.538577][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.549624][ T24] usb 1-1: config 0 descriptor?? [ 1063.557150][ T8657] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1063.568797][ T8657] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1063.579796][ T8657] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.590447][ T5924] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1063.598195][ T5924] em28xx 5-1:0.89: analog set to bulk mode. [ 1063.604669][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 1063.613583][ T8657] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1063.623688][ T8657] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.634830][ T8657] usb 7-1: Product: syz [ 1063.641429][ T5924] usb 5-1: USB disconnect, device number 112 [ 1063.648953][ T8657] usb 7-1: Manufacturer: syz [ 1063.656464][ T5924] em28xx 5-1:0.89: Disconnecting em28xx [ 1063.662124][ T8657] usb 7-1: SerialNumber: syz [ 1063.667482][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1063.674471][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1063.691291][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 1063.706432][ T9] usb 5-1: Decoder not found [ 1063.712282][ T9] em28xx 5-1:0.89: failed to create media graph [ 1063.720227][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1063.731223][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 1063.740380][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input198 [ 1063.753763][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1063.764787][ T5924] em28xx 5-1:0.89: Closing input extension [ 1063.771808][ T5924] em28xx 5-1:0.89: Deregistering snapshot button [ 1063.800680][ T5924] em28xx 5-1:0.89: Freeing device [ 1063.918764][ T8657] usb 7-1: 0:2 : does not exist [ 1063.970422][ T8657] usb 7-1: USB disconnect, device number 103 [ 1063.975713][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1063.989392][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1064.000696][T19718] udevd[19718]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.036109][ T24] usb 1-1: USB disconnect, device number 31 [ 1064.122937][T27445] binder: 27444:27445 ioctl c0306201 0 returned -14 [ 1064.281662][T27450] FAULT_INJECTION: forcing a failure. [ 1064.281662][T27450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.294995][T27450] CPU: 0 UID: 0 PID: 27450 Comm: syz.9.4926 Not tainted syzkaller #0 PREEMPT(full) [ 1064.295021][T27450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1064.295033][T27450] Call Trace: [ 1064.295041][T27450] [ 1064.295049][T27450] dump_stack_lvl+0x189/0x250 [ 1064.295087][T27450] ? __pfx____ratelimit+0x10/0x10 [ 1064.295107][T27450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1064.295133][T27450] ? __pfx__printk+0x10/0x10 [ 1064.295173][T27450] should_fail_ex+0x414/0x560 [ 1064.295205][T27450] __kvm_read_guest_page+0x18d/0x240 [ 1064.295235][T27450] kvm_fetch_guest_virt+0x12b/0x170 [ 1064.295261][T27450] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1064.295284][T27450] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 1064.295299][T27450] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1064.295318][T27450] x86_decode_insn+0x31d/0x5470 [ 1064.295331][T27450] ? kvm_is_mmio_pfn+0x169/0x730 [ 1064.295353][T27450] ? rcu_is_watching+0x15/0xb0 [ 1064.295369][T27450] ? handle_changed_spte+0x1cd/0x10a0 [ 1064.295387][T27450] ? handle_changed_spte+0x3f5/0x10a0 [ 1064.295407][T27450] ? __pfx_x86_decode_insn+0x10/0x10 [ 1064.295434][T27450] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 1064.295462][T27450] ? __asan_memset+0x22/0x50 [ 1064.295488][T27450] ? init_decode_cache+0x78/0x90 [ 1064.295510][T27450] ? init_emulate_ctxt+0x4d6/0x660 [ 1064.295541][T27450] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1064.295574][T27450] ? trace_rcu_utilization+0x47/0x1d0 [ 1064.295603][T27450] x86_emulate_instruction+0x61b/0x1f90 [ 1064.295633][T27450] ? _raw_read_unlock+0x28/0x50 [ 1064.295645][T27450] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1064.295659][T27450] ? __get_current_cr3_fast+0x90/0x150 [ 1064.295670][T27450] ? clear_bhb_loop+0x60/0xb0 [ 1064.295681][T27450] ? clear_bhb_loop+0x60/0xb0 [ 1064.295692][T27450] ? vmx_vcpu_run+0xe92/0x2b70 [ 1064.295704][T27450] ? __vmx_complete_interrupts+0xe7/0x690 [ 1064.295729][T27450] handle_ud+0x142/0x590 [ 1064.295745][T27450] ? __pfx_handle_ud+0x10/0x10 [ 1064.295758][T27450] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 1064.295771][T27450] ? __pfx_current_save_fsgs+0x10/0x10 [ 1064.295785][T27450] ? __lock_acquire+0xab9/0xd20 [ 1064.295799][T27450] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1064.295814][T27450] vmx_handle_exit+0x10a4/0x18c0 [ 1064.295829][T27450] ? vcpu_run+0x361b/0x7040 [ 1064.295847][T27450] vcpu_run+0x43aa/0x7040 [ 1064.295865][T27450] ? vcpu_run+0x361b/0x7040 [ 1064.295915][T27450] ? __pfx_vcpu_run+0x10/0x10 [ 1064.295939][T27450] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1064.295967][T27450] ? rcu_is_watching+0x15/0xb0 [ 1064.295983][T27450] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1064.295996][T27450] ? __mutex_trylock_common+0x153/0x260 [ 1064.296013][T27450] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1064.296024][T27450] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1064.296037][T27450] ? rcu_is_watching+0x15/0xb0 [ 1064.296050][T27450] ? trace_contention_end+0x39/0x120 [ 1064.296064][T27450] ? __mutex_lock+0x335/0x1350 [ 1064.296082][T27450] ? kasan_quarantine_put+0xdd/0x220 [ 1064.296097][T27450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.296110][T27450] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1064.296121][T27450] ? __pfx___mutex_lock+0x10/0x10 [ 1064.296134][T27450] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1064.296148][T27450] ? do_vfs_ioctl+0xbe8/0x1430 [ 1064.296157][T27450] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1064.296168][T27450] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1064.296180][T27450] kvm_vcpu_ioctl+0x95c/0xe90 [ 1064.296192][T27450] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1064.296220][T27450] ? __fget_files+0x2a/0x420 [ 1064.296236][T27450] ? __fget_files+0x3a0/0x420 [ 1064.296247][T27450] ? __fget_files+0x2a/0x420 [ 1064.296261][T27450] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1064.296274][T27450] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1064.296284][T27450] __se_sys_ioctl+0xfc/0x170 [ 1064.296301][T27450] do_syscall_64+0xfa/0xfa0 [ 1064.296313][T27450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.296325][T27450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.296335][T27450] ? clear_bhb_loop+0x60/0xb0 [ 1064.296347][T27450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.296357][T27450] RIP: 0033:0x7f63d1b8eec9 [ 1064.296369][T27450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.296378][T27450] RSP: 002b:00007f63d2a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.296390][T27450] RAX: ffffffffffffffda RBX: 00007f63d1de5fa0 RCX: 00007f63d1b8eec9 [ 1064.296398][T27450] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1064.296405][T27450] RBP: 00007f63d2a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.296412][T27450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1064.296418][T27450] R13: 00007f63d1de6038 R14: 00007f63d1de5fa0 R15: 00007ffe7988d458 [ 1064.296435][T27450] [ 1064.757011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.768152][T19918] Bluetooth: hci4: command 0x0406 tx timeout [ 1064.774462][ T5924] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1064.962881][T27454] binder: BINDER_SET_CONTEXT_MGR already set [ 1064.969137][T27454] binder: 27453:27454 ioctl 4018620d 200000000040 returned -16 [ 1064.971174][ T5924] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1064.989782][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.001295][ T5924] usb 5-1: config 0 descriptor?? [ 1065.026124][ T5924] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1065.268982][T27468] can: request_module (can-proto-0) failed. [ 1065.406040][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1065.426642][T27432] Bluetooth: hci0: command 0x0406 tx timeout [ 1065.432788][T19918] Bluetooth: hci2: command 0x0405 tx timeout [ 1065.438946][T19918] Bluetooth: hci1: command 0x0406 tx timeout [ 1065.445185][ T5924] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1065.460382][ T9] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1065.566057][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1065.572730][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1065.580966][ T24] usb 1-1: config 0 has no interface number 0 [ 1065.588130][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1065.598876][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1065.608484][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.616858][ T24] usb 1-1: Product: syz [ 1065.621043][ T24] usb 1-1: Manufacturer: syz [ 1065.625633][ T24] usb 1-1: SerialNumber: syz [ 1065.626034][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1065.638141][ T24] usb 1-1: config 0 descriptor?? [ 1065.639836][ T9] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1065.646947][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1065.660789][ T9] usb 7-1: config 0 has no interface number 0 [ 1065.660843][ T9] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1065.663429][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1065.667859][ T24] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1065.675089][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.690802][ T8654] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1065.698094][ T9] usb 7-1: Product: syz [ 1065.710010][ T9] usb 7-1: Manufacturer: syz [ 1065.714646][ T9] usb 7-1: SerialNumber: syz [ 1065.723930][ T9] usb 7-1: config 0 descriptor?? [ 1065.735508][ T9] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1065.745337][ T9] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1065.862262][ T5924] gspca_cpia1: usb_control_msg 02, error -71 [ 1065.870542][ T5924] gspca_cpia1: usb_control_msg 05, error -71 [ 1065.871450][ T8654] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1065.876712][ T5924] cpia1 5-1:0.0: unexpected systemstate: 00 [ 1065.889174][ T8654] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.904969][ T5924] usb 5-1: USB disconnect, device number 113 [ 1065.906977][ T8654] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.922037][ T8654] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1065.941655][ T8654] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.952634][ T8654] usb 10-1: config 0 descriptor?? [ 1066.251895][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1066.344300][ T9] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1066.564680][T27472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.573719][T27472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.587152][ T8654] usbhid 10-1:0.0: can't add hid device: -71 [ 1066.594818][ T8654] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1066.613653][ T8654] usb 10-1: USB disconnect, device number 92 [ 1066.667981][ T43] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1066.761559][ T9] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1066.769762][ T9] em28xx 7-1:0.89: board has no eeprom [ 1066.828711][ T43] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1066.837941][ T43] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1066.846097][ T9] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1066.848724][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.867891][ T9] em28xx 7-1:0.89: analog set to bulk mode. [ 1066.868509][ T24] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1066.873908][ T8657] em28xx 7-1:0.89: Registering V4L2 extension [ 1066.891421][ T24] em28xx 1-1:0.89: board has no eeprom [ 1066.901337][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1066.904479][ T9] usb 7-1: USB disconnect, device number 104 [ 1066.929768][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.937586][ T9] em28xx 7-1:0.89: Disconnecting em28xx [ 1066.939465][ T43] usb 5-1: Product: syz [ 1066.952183][ T8657] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1066.954965][ T43] usb 5-1: Manufacturer: syz [ 1066.965238][ T8657] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1066.969200][ T43] usb 5-1: SerialNumber: syz [ 1066.991518][ T8657] em28xx 7-1:0.89: No AC97 audio processor [ 1066.999833][ T8657] usb 7-1: Decoder not found [ 1067.004437][ T8657] em28xx 7-1:0.89: failed to create media graph [ 1067.007215][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1067.010877][ T8657] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1067.019223][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 1067.029773][ T8657] em28xx 7-1:0.89: Registering snapshot button... [ 1067.040692][ T8657] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input199 [ 1067.052378][ T24] usb 1-1: USB disconnect, device number 32 [ 1067.067770][ T8657] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1067.074446][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 1067.089509][ T9] em28xx 7-1:0.89: Closing input extension [ 1067.095484][ T9] em28xx 7-1:0.89: Deregistering snapshot button [ 1067.111546][ T8654] em28xx 1-1:0.89: Registering V4L2 extension [ 1067.117391][ T9] em28xx 7-1:0.89: Freeing device [ 1067.179639][ T8654] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1067.202551][ T8654] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1067.215520][ T43] usb 5-1: 0:2 : does not exist [ 1067.225760][ T8654] em28xx 1-1:0.89: No AC97 audio processor [ 1067.247918][ T8654] usb 1-1: Decoder not found [ 1067.252560][ T8654] em28xx 1-1:0.89: failed to create media graph [ 1067.268694][ T43] usb 5-1: USB disconnect, device number 114 [ 1067.275879][ T8654] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1067.301085][ T8654] em28xx 1-1:0.89: Registering snapshot button... [ 1067.310562][T27477] ================================================================== [ 1067.318648][T27477] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1067.321579][T19686] udevd[19686]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.326044][T27477] Read of size 8 at addr ffff88804ccf4740 by task v4l_id/27477 [ 1067.326062][T27477] [ 1067.326073][T27477] CPU: 0 UID: 0 PID: 27477 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1067.326092][T27477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1067.326103][T27477] Call Trace: [ 1067.326111][T27477] [ 1067.326118][T27477] dump_stack_lvl+0x189/0x250 [ 1067.326147][T27477] ? __virt_addr_valid+0x1c8/0x5c0 [ 1067.326174][T27477] ? rcu_is_watching+0x15/0xb0 [ 1067.326198][T27477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.326223][T27477] ? rcu_is_watching+0x15/0xb0 [ 1067.326243][T27477] ? lock_release+0x4b/0x3e0 [ 1067.326262][T27477] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1067.326284][T27477] ? __virt_addr_valid+0x1c8/0x5c0 [ 1067.326313][T27477] ? __virt_addr_valid+0x4a5/0x5c0 [ 1067.326342][T27477] print_report+0xca/0x240 [ 1067.326358][T27477] ? v4l2_fh_open+0xac/0x420 [ 1067.326378][T27477] kasan_report+0x118/0x150 [ 1067.326399][T27477] ? v4l2_fh_open+0xac/0x420 [ 1067.326425][T27477] v4l2_fh_open+0xac/0x420 [ 1067.326447][T27477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1067.326472][T27477] em28xx_v4l2_open+0x157/0x9a0 [ 1067.326498][T27477] v4l2_open+0x1bf/0x3a0 [ 1067.326524][T27477] chrdev_open+0x4cc/0x5e0 [ 1067.326548][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 1067.326571][T27477] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1067.326598][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 1067.326618][T27477] do_dentry_open+0x953/0x13f0 [ 1067.326650][T27477] vfs_open+0x3b/0x340 [ 1067.326672][T27477] ? path_openat+0x2ecd/0x3830 [ 1067.326689][T27477] path_openat+0x2ee5/0x3830 [ 1067.326720][T27477] ? __pfx_path_openat+0x10/0x10 [ 1067.326744][T27477] do_filp_open+0x1fa/0x410 [ 1067.326760][T27477] ? __lock_acquire+0xab9/0xd20 [ 1067.326781][T27477] ? __pfx_do_filp_open+0x10/0x10 [ 1067.326807][T27477] ? _raw_spin_unlock+0x28/0x50 [ 1067.326825][T27477] ? alloc_fd+0x64c/0x6c0 [ 1067.326851][T27477] do_sys_openat2+0x121/0x1c0 [ 1067.326881][T27477] ? __pfx_do_sys_openat2+0x10/0x10 [ 1067.326907][T27477] ? exc_page_fault+0x82/0x100 [ 1067.326930][T27477] ? do_user_addr_fault+0xc85/0x1380 [ 1067.326952][T27477] __x64_sys_openat+0x138/0x170 [ 1067.326979][T27477] do_syscall_64+0xfa/0xfa0 [ 1067.327001][T27477] ? lockdep_hardirqs_on+0x9c/0x150 [ 1067.327028][T27477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.327047][T27477] ? clear_bhb_loop+0x60/0xb0 [ 1067.327068][T27477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.327085][T27477] RIP: 0033:0x7fb21baa7407 [ 1067.327103][T27477] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1067.327120][T27477] RSP: 002b:00007ffddc99df40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1067.327140][T27477] RAX: ffffffffffffffda RBX: 00007fb21c154880 RCX: 00007fb21baa7407 [ 1067.327155][T27477] RDX: 0000000000000000 RSI: 00007ffddc99ff1b RDI: ffffffffffffff9c [ 1067.327169][T27477] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1067.327180][T27477] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1067.327192][T27477] R13: 00007ffddc99e190 R14: 00007fb21c259000 R15: 000055b93d35d4d8 [ 1067.327214][T27477] [ 1067.327221][T27477] [ 1067.346447][ T8654] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input200 [ 1067.349525][T27477] Allocated by task 8654: [ 1067.668878][T27477] kasan_save_track+0x3e/0x80 [ 1067.673556][T27477] __kasan_kmalloc+0x93/0xb0 [ 1067.678135][T27477] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1067.683503][T27477] em28xx_v4l2_init+0x10b/0x2e70 [ 1067.688426][T27477] em28xx_init_extension+0x120/0x1c0 [ 1067.693705][T27477] process_scheduled_works+0xae1/0x17b0 [ 1067.699242][T27477] worker_thread+0x8a0/0xda0 [ 1067.703821][T27477] kthread+0x711/0x8a0 [ 1067.707884][T27477] ret_from_fork+0x4bc/0x870 [ 1067.712468][T27477] ret_from_fork_asm+0x1a/0x30 [ 1067.717220][T27477] [ 1067.719530][T27477] Freed by task 8654: [ 1067.723491][T27477] kasan_save_track+0x3e/0x80 [ 1067.728163][T27477] __kasan_save_free_info+0x46/0x50 [ 1067.733353][T27477] __kasan_slab_free+0x5c/0x80 [ 1067.738098][T27477] kfree+0x19a/0x6d0 [ 1067.741992][T27477] em28xx_v4l2_init+0x1683/0x2e70 [ 1067.747005][T27477] em28xx_init_extension+0x120/0x1c0 [ 1067.752296][T27477] process_scheduled_works+0xae1/0x17b0 [ 1067.757851][T27477] worker_thread+0x8a0/0xda0 [ 1067.762439][T27477] kthread+0x711/0x8a0 [ 1067.766507][T27477] ret_from_fork+0x4bc/0x870 [ 1067.771089][T27477] ret_from_fork_asm+0x1a/0x30 [ 1067.775839][T27477] [ 1067.778147][T27477] The buggy address belongs to the object at ffff88804ccf4000 [ 1067.778147][T27477] which belongs to the cache kmalloc-8k of size 8192 [ 1067.792189][T27477] The buggy address is located 1856 bytes inside of [ 1067.792189][T27477] freed 8192-byte region [ffff88804ccf4000, ffff88804ccf6000) [ 1067.806152][T27477] [ 1067.808467][T27477] The buggy address belongs to the physical page: [ 1067.814873][T27477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ccf0 [ 1067.823618][T27477] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1067.832106][T27477] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1067.839639][T27477] page_type: f5(slab) [ 1067.843614][T27477] raw: 00fff00000000040 ffff88813fe27280 ffffea0000ccf200 0000000000000006 [ 1067.852184][T27477] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1067.860757][T27477] head: 00fff00000000040 ffff88813fe27280 ffffea0000ccf200 0000000000000006 [ 1067.869415][T27477] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 1067.878071][T27477] head: 00fff00000000003 ffffea0001333c01 00000000ffffffff 00000000ffffffff [ 1067.886729][T27477] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1067.895382][T27477] page dumped because: kasan: bad access detected [ 1067.901792][T27477] page_owner tracks the page as allocated [ 1067.907493][T27477] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25544, tgid 25542 (syz.0.4281), ts 931732688391, free_ts 930811347051 [ 1067.928852][T27477] post_alloc_hook+0x240/0x2a0 [ 1067.933621][T27477] get_page_from_freelist+0x2365/0x2440 [ 1067.939159][T27477] __alloc_frozen_pages_noprof+0x181/0x370 [ 1067.944952][T27477] alloc_pages_mpol+0x232/0x4a0 [ 1067.949786][T27477] allocate_slab+0x96/0x3a0 [ 1067.954280][T27477] ___slab_alloc+0xe94/0x1920 [ 1067.958948][T27477] __slab_alloc+0x65/0x100 [ 1067.963355][T27477] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 1067.969766][T27477] kmalloc_reserve+0x136/0x290 [ 1067.974521][T27477] __alloc_skb+0x142/0x2d0 [ 1067.978925][T27477] netlink_dump+0x167/0xe90 [ 1067.983412][T27477] netlink_recvmsg+0x676/0xa30 [ 1067.988167][T27477] sock_recvmsg_nosec+0x186/0x1c0 [ 1067.993193][T27477] ____sys_recvmsg+0x3aa/0x460 [ 1067.997951][T27477] ___sys_recvmsg+0x1b5/0x510 [ 1068.002618][T27477] do_recvmmsg+0x307/0x770 [ 1068.007035][T27477] page last free pid 25523 tgid 25522 stack trace: [ 1068.013534][T27477] __free_frozen_pages+0xbc4/0xd30 [ 1068.018658][T27477] __put_partials+0x146/0x170 [ 1068.023338][T27477] put_cpu_partial+0x1f2/0x2e0 [ 1068.028105][T27477] __slab_free+0x2b9/0x390 [ 1068.032524][T27477] qlist_free_all+0x97/0x140 [ 1068.037113][T27477] kasan_quarantine_reduce+0x148/0x160 [ 1068.042569][T27477] __kasan_slab_alloc+0x22/0x80 [ 1068.047409][T27477] __kmalloc_noprof+0x3c3/0x7f0 [ 1068.052254][T27477] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1068.057791][T27477] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1068.063240][T27477] security_file_ioctl+0xcb/0x2d0 [ 1068.068264][T27477] __se_sys_ioctl+0x47/0x170 [ 1068.072850][T27477] do_syscall_64+0xfa/0xfa0 [ 1068.077346][T27477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.083226][T27477] [ 1068.085536][T27477] Memory state around the buggy address: [ 1068.091153][T27477] ffff88804ccf4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1068.099207][T27477] ffff88804ccf4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1068.107258][T27477] >ffff88804ccf4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1068.115340][T27477] ^ [ 1068.121477][T27477] ffff88804ccf4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1068.129528][T27477] ffff88804ccf4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1068.137571][T27477] ================================================================== [ 1068.145700][ C0] vkms_vblank_simulate: vblank timer overrun [ 1068.153390][ T8654] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1068.168892][ T24] em28xx 1-1:0.89: Closing input extension [ 1068.174817][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 1068.177790][T27432] Bluetooth: hci2: command 0x0405 tx timeout [ 1068.207896][T27479] FAULT_INJECTION: forcing a failure. [ 1068.207896][T27479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1068.218209][T27477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1068.218232][T27477] CPU: 0 UID: 0 PID: 27477 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1068.218256][T27477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1068.218269][T27477] Call Trace: [ 1068.218278][T27477] [ 1068.218287][T27477] dump_stack_lvl+0x99/0x250 [ 1068.218319][T27477] ? __asan_memcpy+0x40/0x70 [ 1068.218347][T27477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.218375][T27477] ? __pfx__printk+0x10/0x10 [ 1068.218405][T27477] vpanic+0x237/0x6d0 [ 1068.218426][T27477] ? __pfx_vpanic+0x10/0x10 [ 1068.218446][T27477] ? preempt_schedule+0xae/0xc0 [ 1068.218468][T27477] ? __pfx_preempt_schedule+0x10/0x10 [ 1068.218491][T27477] panic+0xb9/0xc0 [ 1068.218512][T27477] ? __pfx_panic+0x10/0x10 [ 1068.218533][T27477] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1068.218556][T27477] ? is_module_address+0x17/0xf0 [ 1068.218574][T27477] ? v4l2_fh_open+0xac/0x420 [ 1068.218597][T27477] check_panic_on_warn+0x89/0xb0 [ 1068.218615][T27477] ? v4l2_fh_open+0xac/0x420 [ 1068.218637][T27477] end_report+0x78/0x160 [ 1068.218655][T27477] kasan_report+0x129/0x150 [ 1068.218675][T27477] ? v4l2_fh_open+0xac/0x420 [ 1068.218701][T27477] v4l2_fh_open+0xac/0x420 [ 1068.218723][T27477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1068.218749][T27477] em28xx_v4l2_open+0x157/0x9a0 [ 1068.218775][T27477] v4l2_open+0x1bf/0x3a0 [ 1068.218819][T27477] chrdev_open+0x4cc/0x5e0 [ 1068.218843][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 1068.218866][T27477] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1068.218894][T27477] ? __pfx_chrdev_open+0x10/0x10 [ 1068.218915][T27477] do_dentry_open+0x953/0x13f0 [ 1068.218947][T27477] vfs_open+0x3b/0x340 [ 1068.218970][T27477] ? path_openat+0x2ecd/0x3830 [ 1068.218988][T27477] path_openat+0x2ee5/0x3830 [ 1068.219021][T27477] ? __pfx_path_openat+0x10/0x10 [ 1068.219046][T27477] do_filp_open+0x1fa/0x410 [ 1068.219062][T27477] ? __lock_acquire+0xab9/0xd20 [ 1068.219085][T27477] ? __pfx_do_filp_open+0x10/0x10 [ 1068.219111][T27477] ? _raw_spin_unlock+0x28/0x50 [ 1068.219130][T27477] ? alloc_fd+0x64c/0x6c0 [ 1068.219156][T27477] do_sys_openat2+0x121/0x1c0 [ 1068.219189][T27477] ? __pfx_do_sys_openat2+0x10/0x10 [ 1068.219215][T27477] ? exc_page_fault+0x82/0x100 [ 1068.219238][T27477] ? do_user_addr_fault+0xc85/0x1380 [ 1068.219262][T27477] __x64_sys_openat+0x138/0x170 [ 1068.219290][T27477] do_syscall_64+0xfa/0xfa0 [ 1068.219311][T27477] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.219333][T27477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.219352][T27477] ? clear_bhb_loop+0x60/0xb0 [ 1068.219374][T27477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.219393][T27477] RIP: 0033:0x7fb21baa7407 [ 1068.219411][T27477] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1068.219429][T27477] RSP: 002b:00007ffddc99df40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1068.219451][T27477] RAX: ffffffffffffffda RBX: 00007fb21c154880 RCX: 00007fb21baa7407 [ 1068.219466][T27477] RDX: 0000000000000000 RSI: 00007ffddc99ff1b RDI: ffffffffffffff9c [ 1068.219480][T27477] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1068.219492][T27477] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1068.219505][T27477] R13: 00007ffddc99e190 R14: 00007fb21c259000 R15: 000055b93d35d4d8 [ 1068.219527][T27477] [ 1068.221450][T27477] Kernel Offset: disabled