last executing test programs: 7m20.359778397s ago: executing program 1 (id=707): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x1, 0x4, 0x8, 0x2010}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 7m18.511947802s ago: executing program 1 (id=715): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@getchain={0x54, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x7, 0x4}, {0x10, 0xd}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d5}, 0x240400c0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0xfffffff8, 0x0, 0x0, 0x5a, 0x0, &(0x7f0000000500)="2ca60700cdbb4beb400730fca1dcf9caa1fb4ae1f6e61f1040d351e35c9499eacd423d6351314809b215b0415d69f4c66893772f325d679fbf017742287f319658b582d93e5e95557f7e3bfebbe12a511cdea982000000000000"}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r8, 0x541a, &(0x7f0000005480)) pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000780)="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", 0x208}], 0x3, 0x10000, 0x4) 7m15.368714211s ago: executing program 1 (id=727): socket$inet_sctp(0x2, 0x1, 0x84) openat$mice(0xffffffffffffff9c, 0x0, 0x101) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x110) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000180)={0x40000000, 0x8, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$binfmt_register(r8, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7ff, 0x3a, ',@2&', 0x3a, 'syz3', 0x3a, './file0'}, 0x2f) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) 7m13.834315547s ago: executing program 1 (id=735): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x57eeb83c9526c7ac) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) read$char_usb(r1, &(0x7f00000000c0)=""/30, 0x1e) r2 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000500)={0xfffffffd, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x126) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 7m12.387028177s ago: executing program 1 (id=743): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60ea000002060108000000000000000005000008050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008001340000003fd080012400000ffff"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') renameat2(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x26ba6b90b1af2499) 7m12.138091841s ago: executing program 1 (id=744): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x6, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0xeeee8000, 0x10000, 0x7, 0x10, 0x6}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x5, 0xe51, 0x2, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7b00, 0x1, 0x40000000009, 0x5, 0x6a], 0xeeee0000, 0x808d6}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, [0x79a, 0xab2, 0x445, 0xf2e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) 7m11.703152862s ago: executing program 32 (id=744): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x6, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0xeeee8000, 0x10000, 0x7, 0x10, 0x6}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x5, 0xe51, 0x2, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7b00, 0x1, 0x40000000009, 0x5, 0x6a], 0xeeee0000, 0x808d6}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, [0x79a, 0xab2, 0x445, 0xf2e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000280)={0x0, 0x2009, 0x20, 0xaf9}, &(0x7f00000000c0)=0x18) 6m13.44423572s ago: executing program 0 (id=1015): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x500, &(0x7f00008b5000/0x1000)=nil) 6m13.443801213s ago: executing program 0 (id=1016): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1/../file0', [{0x20, '\xce/d&6\xfa\x17o\x8e\xb1\xb3\xf7\xec\x1dev\x1e?kvm'}], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00"/62}, 0x68) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x637d5014, 0x0, 0x0, 0x9, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) connect$can_bcm(r0, &(0x7f0000000040), 0x10) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f00000004c0)={0x0, &(0x7f0000000440)="945f873408e76d592e38f0524ee8dd4be7f81349f22b6d23f6c9081066cb9dcfceeeafb9a63f5f694feb97db5d80070d428813d30ea16917a7816fb95f3a52fe85325075589e5f91a9dde3dad143c7e9d377fc5ba8fe147d64f698c16c349ac09c46a71d90966ce1edf7a6565d4d8e8e597d31d2f410", 0x76}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000001100)={0x0, @bt={0x500, 0x2d0, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x722, 0x13, 0x7, 0x7f, 0x37, 0xb763599953cb093c, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002500090123bd7008fddbdf251c00000014000300000000bb"], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000002d) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x2, r6}) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000003c0)="6102713243bcb7dd1702c333921056c4165370db0600000000000000142b76c0e7b10fb74fbeee13555606dada9a9263f65134ced9a96e96cffaae5d0619ebd28ea7876cbc2e13c2a8c14923b8f750533540dfe19523165f1fd6ded2a8bcc497dbceeed44e", 0x65}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x0) 6m13.377257316s ago: executing program 0 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0xd) r3 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)}}, 0xee) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) socket$netlink(0x10, 0x3, 0x0) 6m12.026687672s ago: executing program 0 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0x3}]}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) r5 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$inet(r6, 0x0, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0xb4, 0xc, 0x0, 0x1}, 0x0) (async) syz_open_dev$dri(0x0, 0x1, 0x0) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x28, 0x8, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7f, @loopback, 0x2}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6m10.667930474s ago: executing program 0 (id=1026): unshare(0x2c020400) (async) r0 = msgget$private(0x0, 0x722) (async) msgsnd(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="03"], 0x401, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000040"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@multiplanar_mmap={0x5, 0x8, 0x4, 0x0, 0x800, {}, {0x3, 0x0, 0x0, 0x81, 0x4d, 0x8, ',TlC'}, 0xe, 0x1, {0x0}, 0x1}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdc02, {0x5}, [@nested={0x4, 0x147}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f0000000600)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="161aaf545f257ac49fb9a606f99e541eaffa1034035786f5df59294ea954375b0d5b6db43153acb1f60b017b7c29a11327eeed15abf59cadb6988dbfc530173503f119756142a5acca5b2554d2d510", 0x4f}, {&(0x7f0000000200)="a3075fe6220c41a54e0b51aa7b1cc7ad9ca2b6272a7425628b3b51570c64d3d0a8ab1aee1fd914103698d52d83204ba2cbbb89d16e236812cfcfca8e8dc414f786d65e488b9a8aa3d7065fc0b29f32915164d11929efcaa34b5eaf3e14c8c5edc092c58c7c9a3f7c8c935a3f487b4d850161fa6e2b7e8fcfa9592af11d3462f5fe8ce11a78d67b193e8ff4826dc1e1747280904bf6642c2545a8bc66a8466f2c4aef098c05052ae5746378064f2cf79790f689b02ac2aa9caef4af97414e5b6896fb7212c0553f05330f14420ce86429818e47fc18c04f13f108334a978864f5d268f59f3e5d2a14ba0fda21", 0xec}, {&(0x7f0000000340)="fdd6d42902975bddd617ce7cc25456677119a9308e6c6e6f55f9d436676b4c418b674a0587239f6781a5ae6a266fbe3d4a34e37e63886e69b7949fdd55c165790e068a46c23ecb9abe4b4603aa10a899e68a0cc0e7456ff7e0586d07da839dd9", 0x60}, {&(0x7f00000003c0)="440b327df5781f2adf04d89c45f2782a6d05dd14c4601c6b68043784a9e8e97de7d9d89c76b17c92d30ab4c901bfeb7c5a67584de3af64fbd4f5ce9314172b5ad778fddd356812f3e5", 0x49}, {&(0x7f0000000440)="3216eba5b92609660a5274f79241cf26871a2410cfe8217fe84b82d227f68289459e9b0350d46079013923919af514b0e21ee51a9110db9a213b622c4ea47d6e96a3be3ed0d8675cb1f4219e7ed98c8f98744f35163b1e21eb320adeed89dc755f243671b03232dfd1d648ca9239116b7017c579cfab530c27155bf3738a861b4751bf6aa28b7c02f990d04f03a2817c1aaafe66372b157e796a3311c87f69e9546624b280e36ff463277e10761ae0139ab25cec4e65940fcb1c352b42174b1d8a7dac7e", 0xc4}], 0x5, &(0x7f00000005c0)}, 0x805) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x34, r6, 0x3d615333c845b981, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x44040) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) mremap(&(0x7f00001b0000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00001b6000/0x2000)=nil) 6m10.38262436s ago: executing program 0 (id=1029): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r0, 0x3}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xf9b2a590385c826e, 0x5, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') fchmod(r5, 0x98) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r8, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x4000009}}}}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r9, &(0x7f0000000480)=""/177, 0xb1, 0x21) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20020000", @ANYRES16=r10, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1000000058e, 0xffffffffffffffff}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r0}) 6m9.961834585s ago: executing program 33 (id=1029): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r0, 0x3}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xf9b2a590385c826e, 0x5, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') fchmod(r5, 0x98) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r6, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r6, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb888defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63ddb2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede5f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0fdeed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d803be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4a96b47d4c8e3124f53bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589a05484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r8, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x4000009}}}}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r9, &(0x7f0000000480)=""/177, 0xb1, 0x21) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="20020000", @ANYRES16=r10, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$FUSE_INIT(r6, &(0x7f0000001200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000000)={0x18, r0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1000000058e, 0xffffffffffffffff}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r0}) 11.555972799s ago: executing program 2 (id=2440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x200, 0x70bd2d, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x2004c800) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) bind$rds(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) close(r0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x22, 0x0, 0x7f}, 0x2c) r9 = dup(r7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@empty, @rand_addr=0x64010102, 0xa, 0x16}}) 10.756138826s ago: executing program 6 (id=2443): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 10.264632165s ago: executing program 2 (id=2444): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r5], 0x18}, 0x2000c8d0) 8.416580902s ago: executing program 2 (id=2447): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) chdir(&(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)={0x70, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}, @TIPC_NLA_PROP_MTU={0x4, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) shutdown(r0, 0x1) 8.256183453s ago: executing program 6 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968680d010203010902350101000000000904"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec472000000000001"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe8}}}}}]}}]}}, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_usb_control_io(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfa, {}, [@IFLA_IFNAME={0x14}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000002) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000f8d000/0x4000)=nil, &(0x7f00008ae000/0x1000)=nil, 0x4000}) syz_usb_connect$cdc_ecm(0x2, 0xd3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x1, 0x1, 0xf7, 0xe0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "699443a24a"}, {0x5, 0x24, 0x0, 0x8b}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x5}, [@mdlm_detail={0x59, 0x24, 0x13, 0x5, "3d1e0e992f691acbebbd819c2f16051f25387a441f5c149c85f5890cc7511e1727911be752415ce9977591937559e80b2ca60b532d5a582b8cf86dd73dcb403fa8694cff63f72a49db93b7fa91124ffa8fdc09dc3a"}, @acm={0x4, 0x24, 0x2, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x64, 0x1, 0x36}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3df, 0x1, 0x0, 0x2}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0x7f, 0xf, 0x40, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x413}}, {0x8b, &(0x7f0000000200)=@string={0x8b, 0x3, "16f1f4fe87c27e80d42020b59999d7d5a2760630dbab66e7b77b891483e3772f9c3c8c15f791b6cd35d7a9b00aed016004466a552a4826392c9e3f66562e099b00176e633fd38bfa3c2238686c235c69bfba15f3fcdc60a04e8fb5c7339ecd866a72209f4ba7d002e2434c7c8750652189faa109e67bd92bc85f15f6ea524ec9ab12f473376d23bdb2"}}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000540)={0x40, 0x5, 0x2, "5603"}, 0x0, 0x0, 0x0, 0x0}) 8.047940903s ago: executing program 3 (id=2449): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r5 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x9, 0x5, 0x2, 0x7fff}, {0x8, 0x3, 0x77, 0x5}, {0x0, 0x8, 0x21, 0xfffffff8}, {0x8, 0x1}, {0x7, 0x97, 0x73, 0x7}, {0x8, 0x0, 0x40, 0x4}, {0xf000, 0x6, 0x3, 0x8}]}) pivot_root(0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffff3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff5dc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)) 7.952884437s ago: executing program 2 (id=2450): r0 = socket(0x2, 0x80805, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/7, 0x7) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 7.837673008s ago: executing program 2 (id=2451): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ppoll(&(0x7f0000000080)=[{r0, 0x12}], 0x1, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, r1, {{0x6, 0x2, 0x4000000003, 0xffffffff80000001, 0x1, 0x1, {0x5, 0x11e, 0x1, 0x7, 0x3, 0x0, 0x100, 0x2, 0x1, 0x8000, 0x2, r2, r3, 0x9, 0x8}}, {0x0, 0x3}}}, 0xa0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) r5 = io_uring_setup(0x74f8, &(0x7f00000005c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff990908", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYBLOB="1414000021200000240012800c0001006d6163766c616e00140002800800017de39453d9e9ccb9c849c31e0010000000080003000100000008000500"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f0000008280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0x1, 0x4, 0x80000001ffff, 0x16, 0x8, {0x4, 0x5, 0x200000a, 0x2fb, 0x3, 0xb, 0x6, 0x1, 0x4, 0xc000, 0x6, r9, r10, 0xc8, 0x1a4d06bf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 7.106063789s ago: executing program 3 (id=2455): r0 = socket(0x2b, 0x80805, 0x6) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) 6.756807897s ago: executing program 3 (id=2456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x6}]}) 6.735265441s ago: executing program 5 (id=2457): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16], 0x18}, 0x2000c8d0) 6.588912766s ago: executing program 3 (id=2458): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 6.133995545s ago: executing program 2 (id=2460): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000001440)="6d49c6", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x4, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)=' -', 0x3fffff}]) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0x329) io_uring_enter(r1, 0x2219, 0x1c58, 0x37, 0x0, 0x0) 5.874495341s ago: executing program 4 (id=2462): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000185}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 5.282501836s ago: executing program 3 (id=2463): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x80005}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x18, 0x2, 0x1) sendmsg$FOU_CMD_GET(r2, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4028081) socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x32300, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000400)) close_range(r5, r7, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a2fe8679400000000000000001400350062726964676530000000000000000000bc66c49f9e7547c646934d62e832b927d0bbba785ba7f7b1b20c9603c6995be54e12d05d0b6612f67a5472027e62697931d5068a6edc8aab74fe1a720d25973937dfef6fb99c689aee1b38ff585c3cc59ee088701d1974b29f2f2a02531e7a7e76cde2917d01ae085104e0175149c7cbaa"], 0x50}, 0x1, 0xc3, 0x0, 0x20000000}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000200)={@mcast1}, 0x14) 5.200664465s ago: executing program 5 (id=2464): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_trace_dev_match', 0x2, 0x1a9) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd03, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYBLOB="ae892034691695d31a96aa919e2c621d6ca5fcc0baa12a4909cd448143b34351623224d8511261143f0167a6c185bd25bdd9e3181e8147f4bb4ba40a0a85b39dfeccd48f533a1ebd2dfdc5c9a2a01633aad284c2512e006cfeb8ee2f1e6077f8035a74d7e0360909f7f01c24d98414c3cdc511a3bda8b0464b43b7d8595e1899fbd46e27f86dd43ee38c0b28095caa257bb783960dca29c4ceaa84264938706522aa3a77a51d795931439ee7b3945cd1f782cc0f41c26d8ce6cda10a934b98f04b2fed46ea0f42821ebfb4138b6452576e11a0d2954accc08d51", @ANYRES8=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES8=r0], 0x188}}], 0x1, 0x20004010) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_procfs(0x0, 0x0) getdents64(r6, &(0x7f0000000100)=""/83, 0x53) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) pwritev(r1, &(0x7f0000003ac0)=[{&(0x7f0000000a00)="e563b5b24cdba0a1a79e744444636724d12c649e9d24d4b8cb1751176693908dfe6aac3d2cf5ded55f9985309c11b4e0b3b92edbe2044b9a69b32bf572cebcfed2562e52e02e6ee8e47ef03974eb0905c3dce8dbcb2af5126e5a58ec28ff5730ab7b975e70cc6f3a2a4793fd88148b5d688d4a59e1c3f79b2015d6648d1bc3e225b54f1d7e27db3c43be4f4cfbc6c01656f0576d6e6c49a9c47a21e0b4e35d8ed715cfaf86e6051f9e3c15432c70355d3debfb89528497498d12ebdf7f4bbcf0e270a0fb292df97519311dd5b95581b3d5f6730f5ed008a600bb06c39a80820aa56994", 0xe3}, {&(0x7f0000003b40)="3cef3d9bd5bd70ba6b19ce17b17fe414645c80451a560a71b764a27e6b999b80b1afc0bee1d11b4b20a40698906ec85e15d22f517003477663dd30be66a1374af3e2d7152518c60619719a147c0123fb8997e9c253ad9a80eaa1510af5b21e7d698945de42df442882beda35641dbd259d5db192935aad2e4089a305e69718aabef984119126354cf23c393ebf6c9550ded5f37bd6bee477369faf25d2b77c8e9b12e2c3276c1753979e144d012e9c6aeba0dc189713f468b1c85ace7569ba368ee68e944e11c2ee140fe2fc0083de9f232074bc72ee5e1437232969196a3241bc75b7ebf8794ed1927356b8a00d65d215ca325c052c12107db3608c827cc0a63c7c87bc84bd1c661af6fb98b4e6059ea9529eedc8b899a06b3ef700e9ff9dc604a2c943b81225790bd8019ae547d7f0fd49e1a39bda5f2a40fa9d466c19f4c796b19a4aa2562807ff527f976e130cd66edc4ab709c03da5873818128c8f8d68fca96f8ae0a8caef1c53f2905ce953f10fa15bfe90d9c7a40b68228fe8b1f85dc745fb26d6d8bd145212b507a483bced628a11d629f7bac5daf0a6e67bec6274263d6f79ab72d09858e959de01b4bcc72805c60eb8993ad35269f4429fe15d0b53d01fcc520bfffe6e75a543aa4194b048fc40e6817710191ec08a795a714f4dda4d6708b9fb02ea71a0b173c2fb2d29dddd8b8d4f859412b3b728a6d61f34400f588982a801f3d327d4a3b7faf0e8095001f7a89d38a179f5f20cca473acd0bbe478eb330f428cffda829f2893b83351092b5b423385de169ed48a2960f75d066167bff795430e1dd15f11156caeafd6d976da00e3cd7aa12a5bc14e6422d49c5ac781f75797ba8bf564fca9270a3f1c47cee89e1ea1a8253bfd15e2af86a04a0cf5f3dcfac24e8491201b3feb10f0d30f6976c291d4e20f283d11ba9dbcdafcf39a037efeffed437740523e79ee7ec0b1000c32645f2ba39aaf34e911f3125506ee309eefcc1bd922c9f595f5d07fb690462b227ff393f87117a8bdbc2eb52aacd0ed10db7c4035658fe4ae5efc22e23cdc93dc69d73398a21c6832a3f89c93bc0a0b2fa66d92bb0c7052ad5738a20e1eb7120959d69a59c81a31921b52676efde9646b95f27b589d7ee0d4e26daf02b320401a28f0860f22712435cbc7c40aac77dad2d7109ef54c0a6e9affbe18a9b9873802c8c65ae943da2738d1771267af453f25e2aa3f1a10d3e70faece1d69b649940d80e19e6e6b75738c92f37a8948dc0a79c0664265a5559b7a501e9684e8273fb182fd664e2e6586dccf279a6bfca4139c351254e73711a3f2eb5b23c8c1af0a9f72d95860c4f8791b37407e3957a9ae06bf0350f0e2b3b5038e41140c7ac6d74e2b6a1cd26b5bc880a58bacf40652a398ae4148c523c191e0e97af4dddbba437c9c77d9ef3fd3f79374863e86c924674b09635cb22e3ffc738e606b2ce02ce594b343a2c95a50aa40b337fddf001b8c32c949bd71a42c44d5bb5666e7330c417bdca7946751350487e9d73b43e933abdfca5797a00a39ad53f8ae55a1d3555cd33c284bca77d677c08e43cf0e3241b1c811f5f8c8338f59c637521c127719df02bffa399e3add886abc7f79f1e2a18c93501dd178f10a9e1744d65473a4942e3dff9e8ce13a3f7efc61ad24f7ec981ec504910b379d4f7af37b6f0e63d2c6b4f769bfb37f4308601825cff78e80439652272d554dd5b1a19025765cb6083047bcb867288cfe0896548a3e8b11027ea3d20069eeadf2768ba391a66ebc5d7d25457d90506102358c2fadc477f877df29326c89cb413f82026181e346ff96c556cbaa3516f76163290e76a0c5720b20bbd560df1cd5834ff6a01132ee8e253b4dfc366d422e995cd9f104608103c8101d1cf82cdd09f735e363840cb978107d1015b70de049cc727c514c853211abee74f340ded3484aca73cf092051ddc5545b0b9eac4fc0e265216518aec11a0beb7565052b42c70d2bb26ac85b823d2222bba593e62cf3ea254069df18e0f0fb8f77055e8e93d8eb98ca7eba8a56de8f149ad78b5f7a5f11b4784c6a8dd6adb911ec9791a8c9d4532a080ee63339adc824412743c59bc0b3494e34939fffa59202aa0822facccde29972f67310b37348322026cf66b81d1379435adb2c025b5071196a57c2879782b638778ac19d3997827eac1bb4ea8049a8ad49a1f02c9ea934cc15defb35f9bb1666a75f8aad4038d26ee73f7da188315bd09c2bce26f4e0d8c3fc4d8f2275f02b3dc37c094e5cce0b8cb994c20c1cddeed957e9c293829c87c8198913c00e79c8e5fac1b7b2124e91733836f3983da8e50b3706f70f61e9419724555c2de3ed374adcbb8f95f4165d67520ca982a40c01a39c4203af7b60ce02860d3b86373d9779391834bac4564862b32d9a590baf636958c27988992030ecbccd8427adde7b8abfae76a05dc788249c81db3704b1db84c48e60252c4f44b79145153e9cdb5160931ae813a439c04099a6afdbf6fd6185e4a39818a00b570724b7caae555c8e7ccec9e99fe5220578831a1b41ca9fe2de5e4772401d7d3de4a5d96102c041eb48c2b00eb634dee0f1747cf78823f241711595daabbfbedcb46f412e2b93fecd0f62428a7a8472061e318c9df024bb7c4aeb97f3f1b63bf74df93350034baee0406b4b20b22a47e353625ea00b217192d75c9b9729bd32fa66d40753d92b7d9f852c79e575249d274dcd81978ab740c7384f3d3c935e14337a5f7ed9a379e9ef7537a90b7bbfe870e3b983ed7552a9a9f8b5be4a4656a2cb4bb38200d293d62332628914575ded7b4c7b591d450a12ffe0a35e6f80ac394cfd29c7d4a2342064465d10009d474f0afa5b77620928b21bcb3fac0be91f33b0c59f284a78c79fc7d0306efa6697c4a62e82843229c019d4dad74c909758f71ead1a2be3ef94f4a7f1b48171200831ce65286b7531c609802fdc62bfb4483778f9247f49c56abd7537ee01995de3f1ef0373d6094b3f1d3217da9e54e5db058b607604142572eae3f3d5ad252d9938aaa359be2de04cf44c29f25b77cf6b6f1409225d8499b647d84a26e748d7629fa1d1a651b8dc0a774e3ba0fa90da55fd51138b4ca41d7ae27e8aa4488b99515990ed0f118af67158c3475f0a3c8e1847b09a6cdd43fbef1b9f94ba6d606c84e8260372a71a3e8b88e16a39598876309f749f91d7870122315dccac22e46396f9909f09d34a88ae45d3f08850cf7c0e154180f7870da936b02b44d36466c03f579663e3298156283af91092b9f78396d8a152fc16abeff84b9484795dfcee5ee11bbb3ee562e89170896c7014b69d7f5cf96fba3daa120d176a233ab47663ee087812afc45b40c2cc4359db761a39593af903cb4e845e97bd89f0e1b42e3a07e07e1e8a8145eec565b9423b47ed42aad72d407cbab0ee22383d0eea0101ac9e4c60887619e5b89c07b2c9200182f8964f441122c47d4ccac776b07e3b75255c6c1b82a0294cd8c8f72d6a22984a31c558979a106f24d69551a92e828fcc66c5fb9b12f90cd8756d81e2fc2051972daf8f5efa1ad67035bc1b1e0dd42edebd0367ed321139524e41f9699d09e8b64277ca63f01de386b4629dbb1ba983dc8f648f090b04e4fc5042d0b8e1032dbabd730aa349e5e40c252c4b6d6ba9a701456102252cbc195bb5f2f82c47e2e8de9927abde45730397a718f5b6d68c70b20dec7a5744d71c46c2c418e2a9cf369d8597aede074aea4d12d08aac83c8d5ecb1fdff698b980d6854687c88614d725b8721168d884a6e60ead36d576dd3ac67f584694c45bbf1fc86f7a258096199b559e407458507cfdf4076114fa0dab95f76fa7542c7e73c0fbc6a0cef514ec311402ad7dc8186c45ebfc3aceb030747c5d37a7ffbe1484e5f71cad18bab79fa4f27d5da04bd708da69ebd45cc09d36938f9cd4160f54bc3a27abd0a46cf08650924ba648b688ec546dd20c0741dd5857217ac18b77311a8d9f81d25d51a15e601e4c7152975d848e0eb6be275635e739a4fa5990e15f1002287ae0da596b5222d41e4e5a1b6f4331a8df740c4c86ad74c7592c84ad818cd8c45ececf64f274bfcb0233dfb4edbe4c58d82ff6dc61e2606dced3e02b130cc30655dd9ab3f3db069739a9f52659243ed60900cf101bf3a60aa684cd1bc7dad47026b6cc9d7728a49e7427dd8f673560409ae51d582cde7fda3626c29f5595300a21cb96b2b26f4e2a8a1e3891e067b8aa769e3fdc1157d0d1920a8f65702dca314257cff164ae48a70ba97c078abf92c71a9f7e065ac8ba6dd7436627ac7663642a6700eec0b6661cf39115293c9c9007d4223bac4fa7d9a5590c5e73b91cbae1fc45e2aa6b61fc7476033a2d7e2367f6f59c6446799e24cd7e052381272b0ce5e6d5ede95c4e5a149def49318fc6145de92bc1b79c583df20a9d227c2f046716c7760dddeb12119c44006b858bb9f81fed3a7f89fc303cb513f2c490033c845186e3be060f3d8e379d78087f8a53cf15cb0bb3544e64f05da85bfbc0e7efdf9d068cc44d3ea8dd38856368244c015445ff8123346483498365199c2a012ca18c822810b94c96b7d9542307374ef9675e12cb94d33f103a6e0a81b7f112b7edff313f2454b3360f43e3fbe3130b573b786718ceac2c2b2ea0ee9f6ed7c6aa8701423f201520f61d58ae4c9bb7a4aa6a6bc53e610d9a56add5c348bd949cfd9756a8a217509881bcdb52d6d477dffe08b61bcbf5121ee8bf341c76c24eb1631a84a40e561ce61e90a12b1e50fb890294f7b943958a20efddf6e8b3ff9eeecaeebf2d8e98b13eeceb89985353aa6984723a22cfb8ea3643348b5ecf789ca0185979f14b8c21e75d4e882766892115914a3a0fad3af3ed48e188912e5a67908c7b4af6a5651ea770380fab03776b041998bf1112d94bfab37037640911eab024c5b314cee616a9234e4bb645ce89e94d847abc7805719cac0385ac354e1a4411ffbc3bad7f88af46a87417ffa71015508df70001503f475a41b5c7b116abede0c7612e33b545d4d1caa2c8cb2ed50c26ea21e75f974cf3a0d0547e71ebf04cd4b58c375cf0137ce88038f4fbda9efc54a70ef5e87e28a869524ee6e23b45a5aa2f4b0deabd5ac1678fcade987d4d0e432b34232214b0e5a08b68e59246fd71ec67be5eba325641870bd087fedd3b3a7fd2c2e1693ae75918914495f7c70dc723656f7f0479234c32b7ab8f98fcf7bf070f4f15569205bf0c2bcc8e4ae7b14d21763110fc979641485d7f78da60ea2ea4ea6576b75d0177e56343accd80a6706c2f60351ff0c45e0c4fb437d08e9ca4a943b3ed9458e246e5d9623d7ad5d2c66d9e0a5e7a7f14ae2be3a0feb5b5d96d1327cac7ef02cdec9fa351d013bf8e00f5ee9383c54e8ee82592c61930d562ac4225c7e3526819c91e542fbc65f63001aeb36c4af719e3e2aa79257785a839eab432c758629f3e19cb2f3024b7568bb9abedec55e954d94e1a3c325fb8ac3649c9f5479de0239763db97e986ef087e6a4c7043f796446d73443735a702f93ab48149eaa8dc582cfdbfc7ccacef5ccf1945937938d2d67a65f9bad36815f4e41b6a6fa60bd0d9813a7417980c0b67d42152e7ad5bda8cb35d6c72782450ae56eadf4670b4e1183074a587b7861e3e453377784eb41d6318f30e699ced626efb960078e92ae2a6512fed0a26079297ad84b06c2fb5fe2235fe7ab54040946e00c8c79ceb6410a8aeb7986d6d5d90b475ce591c4566e95d1e702d0ea93e24af4e55", 0x1004}, {&(0x7f0000003740)="a898b4ffa65d114941585cf7cf2a1a868771f53a96c968113d176a0b758beedf7d862970e54f68b590e530265bc6a0ec4be9706e75d753de77cd2c6e8a61bc023ce3e054da9e59848ca06e73e76074e327644252cb18216cbb5092d14999227c6ae2b82ccc0b902ad5775677ab9f7195be5d688f88eed344b42d2750cbf3e490cee0e1cb62e322633cbbe5a4c98889c9e71a1be76cf7ced9ff9bd6466c9f9ff6f1860fb0d5721c5718b0b893e830ddb75d1ba077eaa7fcc93e91efc64410b2b3cd86e0", 0xc3}, {&(0x7f0000003840)="c3b47ea703f35d0d400c90512556a9115659bf3d274680a72c36c44d388b917f754c6b61fc4bb078e90cda42b8aa4f2fafb5ba0f2c4f2f434bea514fd3d6ce2e858fa1685b1cd5eeef30d7f8ea1f96226f55900d94c75ec7be2fcb24e3ceeeacaff7177aa8864b5db44c1c9087ea646417e074862fdc109f0eff73b4385e77a5407e1a1efc824af0bcf72a77641a292c42a91e6687a3bdc320254d2c26a43332ea8a107f4e363fc9242b1e4f0323e5ef73d54f9dcefd53d95c49f125c05ab81ff7fc0bb9e1fcb8df397922b92fe59e15811be8f2aea3bb9e4df475d37ec203e154c808194092dce2978c36f383f40da7c35a11ea6c", 0xf5}, {&(0x7f0000003940)="8593b5479e37b173a9b89b61080cd889eb86a300453f3c015ed8", 0x1a}, {&(0x7f0000000b40)="6e62041910e6118c9a6d42e51b59532c0041030207f55e5afb4648bdba455356884bc378aba4fe09a4c6fbc14bdc91202ccb250bb75d3207b6cef30042a3c87df8684e6943e13f6a1ce8fd9dff5c947f1904d62828d829bd2a02ed3e9144348d7cbd52547e8eaa7cb900235d842eed436617436f2336c1c5f4d703000000000000005588f95606f85d912465684642b9380700fe19231f8816736c21e3642d697344010e9855ac2a1ec12b736e9b061635b2be444a921a87c2f00d457002f41bf5d9251e47aa548e", 0xc8}], 0x6, 0x7, 0xfffffff9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000"], 0xd4}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000740)="baf80c66b81ae6188366efbafc0cb80000ef0fc76c0067660f211b3e0f01c465650f0766b97c09000066b80d00000066ba000000000f300fef34b800008ec8f20f015e1cb8b0038ee8", 0x49}], 0x1, 0x19, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000002030101000000000000000000000000080004400000001008000100010055500800010001000070d500054000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6}, 0x38, {0x2, 0x4e22, @empty}}) socket$pppl2tp(0x18, 0x1, 0x1) 5.15644781s ago: executing program 6 (id=2465): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x6, 0x80b}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r5 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x9, 0x5, 0x2, 0x7fff}, {0x8, 0x3, 0x77, 0x5}, {0x0, 0x8, 0x21, 0xfffffff8}, {0x8, 0x1}, {0x7, 0x97, 0x73, 0x7}, {0x8, 0x0, 0x40, 0x4}, {0xf000, 0x6, 0x3, 0x8}]}) pivot_root(0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffff3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff5dc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)) 5.028651797s ago: executing program 4 (id=2466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x109000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050001000000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="14002d80040000590a479fdcc633d783fe"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 4.744154004s ago: executing program 4 (id=2467): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x100000}, 0x1009}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x5, 0xc}, 0x1, 0x6, 0x10, {0x4, 0x7}, 0x1, 0xc3a4}) getpid() (async) r1 = getpid() capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) (async) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000280)={{0x40, 0x7}, 0x0, 0x2, 0x6, {0x81, 0x5}, 0x7, 0xff}) madvise(&(0x7f0000171000/0x4000)=nil, 0x4000, 0x11) 4.742574814s ago: executing program 5 (id=2468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x400000f3, 0x0, 0x6}]}) 4.512710235s ago: executing program 4 (id=2469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r3], 0x18}, 0x2000c8d0) 4.491418206s ago: executing program 5 (id=2470): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.949470485s ago: executing program 6 (id=2471): set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000003f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_io_uring_setup(0xec7, 0x0, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) 3.675290589s ago: executing program 6 (id=2472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x2800, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x2d, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) semget$private(0x0, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x4) io_setup(0x4, &(0x7f0000000140)) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201003f1b767f2051045251b9c00102030309022400010000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 2.855129329s ago: executing program 4 (id=2473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x5ffc0001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f00000000c0)=':)}.(,]!(\x00', 0x200400, &(0x7f0000000140)={@align=0x8, {0x200, 0x8, 0x80000000, 0x2}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000300)=0xc}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x8080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x5, 0x7fff, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x20, 0x7800, 0x488, 0x7120}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000003b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1f0, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x26}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r13 = syz_open_dev$audion(&(0x7f0000000040), 0x9, 0x80000) ioctl$USBDEVFS_SETCONFIGURATION(r13, 0x80045505, &(0x7f0000000080)=0x9) 2.117498345s ago: executing program 5 (id=2474): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r5}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r8], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r9, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.663927087s ago: executing program 3 (id=2475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16], 0x18}, 0x2000c8d0) 424.139845ms ago: executing program 5 (id=2476): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000185}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 149.018675ms ago: executing program 4 (id=2477): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}, 0x132}], 0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0xfffffffffffffefe}, 0x1, 0x0, 0x0, 0x40d4}, 0x2402c0c5) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 0s ago: executing program 6 (id=2478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47", 0x2f}, {&(0x7f0000000400)="6c23fe5e77b828dcd600126a9a4b5ef3ae578c4751f2456ea314b6d95e238e7d4733c114f56680e6905a48b50920a132c32365698bad56173e669d4b9b5bee30cc0285481b820174ec37cd79c02361701b0bc2550749b4fd1ca6ef7a66c704f71b977eb0dd0289c6c0fb9283712acd80db2b9918292e5775fa2417279dee25ff29d002de", 0x84}, {&(0x7f0000002180)="e6be4ec5575ba8d85f4ffd54c59862779f806dd415df1d236951a63658d188994ba4db15c1b39b3338b997016654450184cf68dcfa9cbd5ee2bdd6eeae5467f3ede852e1c0506ed1599a5863269462081570685406234650d9d40b5913a81f33365325cba308bdbe5b8ecff3525930577f77f12cd00077d0f048710fe01051655bb2682b3b10e3caca104a24451900989c3d7101f0281d6dbacaf43f2d06550dd7c32e562c8408668dc1952d4d6807a3de412432b1ae9fbba513544c20429d0141ed93c44b8c2ec36d9c3540afb97a093b259fd28857a327c32b80bb0b3385cf24df40a6e7183e2664b12387d5780ea8dc235a1e0f5e9d40a6781626d7771d23c14be00d1c570cbc68b47f7c88e6e293661ff0c490ee9569b9963452eb6ca7ed3e28120ddb5a61f380542f1e664363ef146ba53de46e5526b9a6c9e46c9410bce4077a9a964b58d308c72a52b75aab455e077b822e3faaaa467ffe56d0b4016821019d90098383ad0e0f015127912d8d3da5f7fe55db74027b37706f67f47c048799b85aad39f82c4a0b261fa2e0a0fec3f4f37c57d0004e6cfeef5094398ecdfd64d8f8045f4671bfc61370ab7ebc93e682ef0ba5b5922ed7bd02be4d6992a8d81892c9082d1a7554603033e7e4b3d77c6daea7604a552201a9434c69f7244c979285ab8eeaa04b631689f19a8d12c28b311b8192c351852f6ecfeb1ee55507d29ef04a9b46baccad79446acdaac3071cf40bdcf0fbd535431ac78278ba29485d1a50a4e8c8e785a223e6c1a24662063ddffe95f0184f6b078e272d03c7b750f15f6903c865f5c53d33c90fd0219c9c00d1acf1e1c1652f365472da1e8b729104acccd2ded71709fa44d3c3ee322ba1e88ed6b26f27a6ecfeb4465a23b02a783119bab8b1f10facbb1238d7c3acf601d3f076b2f66b98daea20fad47309d38de615d5b4cdc6a259e9c56215e4f741a33e66b8de1b4ab02046ca202719cbb2f3e70c4e92136373eebca7b055177dc11220ca4563ca7ffd0bbdc5701144394a0e8ae499e9b7441420334ccd89666a8fc18a089375d3ac585a155755b6f7ef9ae986b98847059a2adf46c49b1c5426893349f7d1a1f83b0260e001c665ac6aac04f5b0b957691fbe42d1785a763cf2c4646dfcedd8fc8cf0abb123def2f4271587e57d86e6ad2f3eb31c2b15fca5116f93734b7d796165a69b3d5359a187ed455ee7e0dec849ed7dcde3b5d1fac0011ed9b1f5715cc17341d1a02f96be30962069c9fa9bb10dd01a26402dd2ac9e87a03ee3d7569f270717c85385f6a56bd369da084e8b0cfd4e3ea0a21573b12f1e4f3295629704f37771e8d9e81b33c9e65f62a5dbf6c2619ff8be2f481c48b84658f098df0aa36e8765ee252d16174a948249abd824f29dc2ac4716e4e412f1e5370d037d61f0b9b893811f229c62c2f4378d25620197d51a1e182129c80135b483816b75c42efc98c9029c4982e986e7ce624cdcc0d9ce13b056c01035ad4a5f422872a35719a2bf42bfeb15c5c46e613f5bf7f3a87cc39cd853c13b15787f06e9a0b901ff18a9feb46d21ec1733e2fb194232649519c01c32541582bd264b4af56152f3bdcfc31e22c1e8ab3849b5ea497cf3019a5a25a9f9e3f486f03805929d5d49c88f8cca5c3b21b5685bd67355d7919e4dda1e051dcc54fb1d94c6c7087069acb53f6ccd637d74f514ef923ca1b054df613576db0b806b2dacac0a66f48747f07b8e65ea078cf77375a240f9e3be8a095397bb947d3421015e04d9c440955539218a1a5d359d966810b8581cc5731e22d9312eb65b127c4781378059039875f3de411ce2853a64e34250e1cce7a86a8db908d891708686a94c9e996747f9ee2c913f8a59cb1f6e1c31227ae6946ecc0d0b8c0f5db6df750bb99e2b2efe22ca638b687b281bf7edab16f10d681af0705a414804b3d4ddfb32bd096b596c2f623903058e55c27c1256dce86a91f74eea120c4a26ee8261f43a4222753c794eb779e0da96e71654aa07d279e4601b1a82dbcfae3dbb0810584dca6501e7e3e94add1cc63b84abb90aa854be1bb40c66574a8b7e88594b31612ac60fb0935b7b624950bef6e91ddc219bc46bdca1865e51428c2c9c36042ecd25452141c79921a26160f2bfc3ac4688a6f80370ad2e1b9ea3c42d88699bd63facdbc2e8776cf70880bade25a62844eb6462b50167b9653d51eaa1a3bcdb446aacff8a082725d74149975d7660f65facb3bf64e92de991a4c75084dd4d05133552014414601ea1714a6efc46c7f138ff97a71c6120668b482c64233e9546331917731827c1eb9b5ce61e70459d7cd67a44b4a68f5228ce7b3ef9ddd4a206193d238b8932cad320c18d6a25ece630414d0aff0790d67cd446aa215c9e33c06a15e51c4bf9eb4abcd384dae7583b6f76314564fe47fc01251cae72358657b7ffcf8c657b0a65a96eb94a085a41a77c0d190c6310c49adcd76e63e3abe49fe300d0a88bfc706f3ee3a719d218f7f97126e335811b95969e2bc0ef3c7ff7dd8f0142a53bbfcb781d97c753e231fbebe710cc549b6eff8927c1d66ab630ba3027937298116d1cf6ef0056b8e0508baa48d3b7df4f4084ebe5b0e195e153f2f39417600ab899292ac33ecac5526be213ea9c7b460b5960d9d33cc44b7b9db2a2da6d7f80cf287664b8dc7f276e8105c4cfaa165b6755e40e6a562916eef601b5230280c7e34e0ed74b17fb0d7e84369fc174366e450670c6389f2dcc197983a3c5a64d07a82b358ff94637d1139c85b92bae162cd729b314dcba1615ccde9a2c186ba8ef4ecf57b42b635f20b4018b49d4c955ab75cf0c01b49380c5952f49c40970475c2fd84d3ee994504f3e7a93fbf38d07a221705c8c89c1bf76c80fd4ff09ca73ae9a82037880e908dcb57703a39699a997645773d8de75e252d16b8a471d493a93634b015b04890a2729ac1ad70c482f3604ed0ea2554043e3e57c868fd916f8fd0190081d0d88114187a1169e3a1dbe580e2846574562e18ff3dad57ee929495709f3d0cdd1dcbd7f29a144dae7c5d2e236d0902fcaf62d6ac8113de1083a5716e66f7c0ae6aca0c0736456f814cfb6402bcc7cf768f0de4b925bd13cb3f7c637b259668e68aae99cc8604174dcc53df5230a4b9b1a41739cf45131cced44c58a44feeb9fb038a03485117c170393af5d96dd228083a7a259fd88a3916311ede135a799df217521ebeb82157a05577a4763bfaeca122f3e71acdcad5365097324ee1a5ca7485c45995e204a44763b0fd7ace27f059e9c987b123ccfbaa365260f126ebd1c4698bfeaad1313075436569ea328e6de3273edeed30d4cfdd7ddf0ba33755c4d86fc5a15fcdc75f8b6bd4b79199727a748cd774dc07f7ea5a07cc3f917d9a163ef0db5c4c1eec6bd8eb67ee4c5087df88ea84673afe3d16b6e595ee35052c77f3021af0eba53bc86b4c019a6576a5b62bac84182136558eb1075da6fd954f6403533b531b7746fbbd92e3dd29013333acb2df5653a7b021be25b460c1d996e04789a69e11dfa16017703a02cdf290d56f6d94e8e2b86c79f1a835a93aca4b56e977eb520dd34286506997f32e8a56ed27f4f423b646f26db20535e2373994ea8104a01520e3196d8017b354b4da12f38615e711178f94c63af1f2a5da70497aa68febd4d7d9d86a384f9119bdf1f7071b0c75e5519f6d71c779b938576f166cf7283c22c696709408bdf80112a9001e60e45732224d0dc7fc22a6ce6fc1d10a89151aa2dc5c423153f491327508bb17fd8d15f87304b36e306c949e230c764818299d06f20cabadeb39e8f62d15ff51cbf7305948a40e3969cacbe1b375f8869eacc09c82429049208cecee8971fab3ca217c3a90b8df259e5228647c561e0041688ac1e067e56e9e1b53e7cddadc839fba50431f25bdb1f3bce1a879b5b34f4029799c1f3817fdc6fd0c3855f289b1e5e76ca477caf71db5ccdd1328c4f34d77c69eb0b9ba6e402a05d48812dbe3569ea84e6f6a43ffd831dc6057a4a3941df700292f723f4104ff65e7dc13bca841a520a57bad5212fe9b571da464379ff92e7d1b249d82f70dd73f2e3f64525bb79ffb1f56f0817ba6e4aff036e2c8737494353ded2436f1453bad20219c97b22af4529ccbc69957fc67b665825950da8f81898bc0c9b43538a1a5c67ed0a17a696f56f88a37d6dc891bca458c2d82eac7b181a88017100389953e826d7b25e06d136621aca48a3cfa40ecbc7e6c239839a4958dc8498d24a810f64074c5042596fad5dfb5b01d8e9c54340988ecfa42df85aaab4bf84afe28fdf557571f2f7beeebc431aad274b6d8f5149409cda5669d15114a781bceb6b4b0a9a9f6245bf89ff0471ce25879ec1c75ee66a651b9cc3ad04536604f1ba417587bdf2e5a4588f38b8be90be7eeb932bd350f12965f1391c98082b35effe86358334a4c3ecb24b7ee1290c17b9fe0a9130d216569094cdccc3000303a09ff0bcea7f4b51105bbf98a7b56556cb8fd3c472e530a91d60268aad02774959f03903bf8d023744067f58bf76eed6037360ca26ade2dede71e6181ab89cf10a86ad53713cb68352d914bac18c3dacd24d7ffbc3c0ce22f4c3079822e08fdf8f6bb90fed22f3177173b85c6ca9df0dd0ceb6504a58463813b4c4db087dcc1c26bbb79c63d3a26aedc4c0ed6b603e3fff67457f3c9e71acd07a60a8bac60c3ed62bde755d1f32d7bc85920be915beb30eaf44516d91e164c326c4a088b090d5a3dd87a37c9c624713e3d5be530984585fccd97c43a1458e41d84c91cf5280833ffdc703fb97d65152010f98936250a7e460dae302546631122189c7e7cd35a8bd9e01aaee78534315c5feb750aaf7a8439e220d83f0fa958a523b2f9a3aac894adcdfca22f0a66c74a27a799504bd4c6a89d9ee759ad345b04398662a72c0c6057450d3bd09a427039aeae6ca1027a408c5f5f75375aae20a8a23570ea05e801ce7a139cec5d9979e17724cc1ef9df9750e31347546478925196cd1f429b57b502358d0adb245504fb94bb94b90214a89ee4d7341bc957b989a40d907f461b03f380199676375240bd74c970bd49155e2a6d0ed412406f4113f20dc63c69a5686583053b575dd32a71c9571fd840c91ad8da3cae3152b32ec40dc306807c80908425cb9d2b9123786ffc609d5eaffa7cfad8c194d3b33b0a8bbd361ac3ae30c9350abe57ea1b7acf09c218d39b6f2bc467e655f9159de6ee0d872020ab6aee8628413a9cb76d59eed198af3ed2bf82a74de07b31b14190c5dadbf1281c139ac4bf1be5d231a5dc0f8fcc27a90378979c4100581a5d35f34bbd166aee7ce14c843f881e0779ec6bb3ec922ca0d73f72a10efab131efe6ff6f7c4a21f4e3939f7e9ae12f1c1777e8c8fa4722c47e3ffb9eeb1ee7e7e8f9024c236d26572e7822bd13742bfaff73fe854ac55016644a134fdbe33c55936866ae713706e789ab420c09bb5be0f343c7768c99b8d8543d46b253ca97bacfbaef1e66bf89defcaa0324d642a079d867f19f6ad2d4890a746c7714dc199574366e3b2e6a881d0e128d5d3ad23e9398013f0363bc7bd776beef2bbd7a1197660067ad2b53ca93ec98b969ace22e1fcf4a0f252b597c60c8f0f0eb53b01574a100417773aab5a466eaf38273ce2034af1666c0d6d455274d2681e0d26d5c0b2894b6fe181c4a947c5df4717c5bbf4faf91774faba89b758de765767660604d07233510d79f9bd05b9fd4106f0b9ce04c56be399723d38230c85", 0x1000}, {&(0x7f0000003180)="9d888b95bd2fd0270b9d9e07a9052d3f85ab8822b794bead1c9c75998c8af1c72f95345ad94a72770463a1c5c5bd1b9ef8018b32ce2481595f315e1594292ff2d02a0457bd6291d49a90b63bbe248f7d0d572df14cfdab3125432e10152a219bd86bc3330117b33687353cf257860072e628fdcd6772bbfe7eb35662370b7ca39a640e3f74242f57172a8411c1744bec2b568f5492ad976726392d4b5b38233d9905f727268d332fe600cdd598185011f4d3115d478b163d43804445157fe5b3552f3f", 0xc3}, {&(0x7f0000003280)="27e1cef28d58defc6eb90b536169363c0b020ffe603a8226c67d254c4dd968f74d6cbd936e07c6d8dc7b0fd17aa611206b976de7e8fee471200da3d4e21dd1c8915884bff95db9d1953e20c0a2e856b52b93a19bd428816e1532c02b7fe7577366255b036a8961d08373a7a733fb161814954211d798efd5adc7b21700fa29c6e92378ae6a970c7dd841e392a183e34d060401e273b6f4acd67dfc8be7be160e347d96972bb03ce662635a8862031c55c40837ed7add26554533383f5f83374e852b6df64e0b83f7a63162aa994bb7ddeecbe59c6e587ce6b1f567d8523d45781990051504ce7ea99d4d44368b76401c3a607777a8149d096511ab4c167741fa72bfbf14626d1be92c089d8eaf536ed949ef9f455d7c4b9ad310d382b367e408f148ac4ec7ebd11cf4e85e2240eecbbaace432c9237e157b14ddd25ae17fbd885a16f2b35598360bae0311edc6488ade36d6abf991627cc7f76afed24aee583736f03ce961b46f9934d027bb24965c512defddb4e2e1e1c93689777719674c23910d5247cbd4daf5c56695b6dc6bdec338265b9cbaf03b8c4076c96e285eb2b47411a1a0e91dbb22eb5b2984ae9e53d4bb511a0c31b73b2dae91f88fe33c4d8fcdc96cd9b33f9b42f43d35c3722da8b9a7e45dcb0be235b2ea775b670157ad48b2895b9bd72d7d0b64be4c95ca9e3bf0a93ed4332619f89f4476b8086a8c8ef452c296b46aff9a9d7c4c3aa8197de9fdf8f07315769978978dc76dacce24789e30601923571ef09687ff6762d646157c6f1781d9992324f4598ded5549667bfeea93e4009ebb96668d09b1e4b8290bd3c69e9736f86b171cbf0332506c6857b2c004c93951705eeb8003be603b802a633a46ee9d23e3db3516591d74948d8da9beea824bbba9b9be44465af21e2b87b8bbfff43b46af46fb03683b78d4ad34701bbce655fa73c2d1ca61366c577e13de4716ad76c86a8bd155ac86a96c0512b9fa175585969288bfa055382c8af954612510db4372a2144809a75536be9cf391dd2092c86318600df3cd09fdeae4a4b44cb36bcf52ccd9538961493454e0ad6f6e40d6ffe462ff5b029efe1b0b87e253fc8ab010929155dfd0b48b992c50cc6e2865e6c121f9911ec8ef7106f88502676916fd887bd405a28beed8b99f1bbe2e0c742d85a817ccc2429ec478cc8a83b65f610b8d143bc5fc783955c85bfa237d9386b2faa3145444245d92e2a3da42a0a15f4a26b59c0b32fb548572c820881bace794b588f4ffcf1d747b5d6260483a8ef1b4a6cad125cd9c17a13c72dbb3e2cfadb249d37cbbf4fe145601c05e8c6a47c7b677b7763aba3cc933815aafb64ace84000e2a3803bfa27c67aa3fc8573fa8d7cb3766785cbf4818cd5293d71de66f7858a6184d97daaf9f5e31a29c5f2cb839bc4cb99fa4a083bd3c315b9d9918c6ee5355ec0eeec5aeb3e5f8d2a7b469c0884d07b71f8faeecfb2de1575917af1c6964634f2dd34a1d0678fec7d40a74528631f2a456ac7b962456725da6cdb4f1c5b1d4b5f9df6a60d883a258da0c686de0a7549fa1b61038fba62f055b7fd678f515758cafd84248b2e26e4544f71c6d069c29941babe10b910960071c797200bb82a145a633923162b65cb8dd9cf7332dc12dd9ace9595d0bcac5c4de5f32ce73f253626137b3d74dfb5a667daf7a8166e4abb5eb987af83164c36a17104c6f100007e71561bbbdfa2a6f018413f190bc2124f2056e1a19bff0fc38cc72152a2b2386e01f36a005a30beb7d1a8fd8e563b39e555f499a43eb1732dfd70c7ae89e8eb6bf7c706f01ba2993b06f7ce12f73641cc077df4372345c51fee461ae80150de39a3fde30032527b8dbabbb3cbff7acd7056476ddf1723c369abb66e794e54f940a0464a0499f214057015a1a685d9504a18f4c69cbaa0cd782064a7aa944e08bb69ffcb9af3616b2b7e7ae7c612805a706e28ea9f6d44c0ebf12b31f8254c7bd23253a74d17d9801e60983e389fe43fe754b48bf800a1c5678770ca86c61b36945a56e2cf8218397504894be93d900068f275dafec2c15565489fb4200346188bf092fbdd78b14089eacb8b2acba37b5a4f2475d0f436cf28f8aa0bfd82472a918f1d58c8e951d535c80070007dfd1ed5705edd2b7a7e07ec631fd5e8697ad871a105448af99edd8916c4254429e16452dfa36ac39353b834366b94a6530818e55c43782bfdadf9b1a552409864b4d735cf6fe2749d178ba8ff8912ab4179dc5259d3e267c4fa4dfd2f9e71e2151310833afa5e75d86d17cdef11a2008bbb281128f54fb1cb0a2df7f376f0b02f64b97ab464de9b4dd186d0bce97cae5c58b55d5da2cabb06ed214e2c98605a6b3476b13cfa1d09827f0f6a7b4be74a83bd2f8f855b5a89804ac753184df798914b5530afbb6a6279f5188f2cf1e0cb4a94e8db6686aa562ce9a5b9b4ba569499c5df5a36aeb3a4fe1ec1b25171fb96d2e5c7c5bd88579c0c59f25d02c82d3ed99524c56024b3297595be231bcb2d574f932344e8eb9c520b30146fc76ab7fc56a426272b38b4c79145d58f0a2b8b16442a6fe5b8fb5f4a763a53d0856574a0787547494c3de5041afd617688c6b4e35a9d12d93929704ca54bcf5d51fd0778e68b6f3246e378112948283b6df74d0bdaf08f185a41ea7a2871a81ec5ad24a946cd873f9f1d2c7307802a0c4e0e6ef2010d9e6d78977510edb95f319c70b57c1919d90b94cb71e1deca56ccf48b11aebf5485170776fea70b96848f702ce26d13d3f738744be8052a5dc2e7b7bff88bd699f6cf207b566dd3e510870a04b7f35ba50546f44116179aedd5a6e4e6b27be1059811adedebcb8e7e3d225a8faa8b7b02dd2c7a3980583dc1c179cdcd5ee35a10297f1c52e43541bf0ab2ac57b45ae7400c15bac3ea5f1360956d0f7b8abb326f2016ca27063d88e1dfb04a854656b9bf74bf1a2ecc437135534c7a815306e7a306c656a506de65f023397708d722d0797293381654eacabd28326d37e570e3bf0d00478b6e71bff6c14f0f833b66fd3f535ecbb5058dcdd0b5de8a5a5377a16fb2d37317492a10f141df6e8ea6c3a6d8435ddd6b0c022879625ebabf1bf6f5f57c22df872346dc2cc7766b767d26c1dfe7c01155fcd71423646391223d7e284bf5103dc40db31f5845c66ea86027f09014bb23ff06943f6ac5dd6076a3045c10f262e9cf0c1d04bc2bf23f45411db057c6c50bbaf76e3a8dd8b86e31da3e38aa925277d4c300a2f514d9c7c565e02eaf40d93a86b56e3a5a4e37a48d22feffd01b629c651a0748c92a5a175600247111b966c57dcc045c4aa42122461c193c7185324761cac8ad7392561497c03c9c1c6876fb19ce7c7414134f04a45016c603be5b8ec468602aef1cefad25243c2519e638490c530fb78575cb6a9aa98f816d151c4a1aff8bb811b13b43ff0adbece8a90f11681b64278277caa62371f150c9b17c874da7b14df7c6b45bc227f2825527b30657984c8f0468257da872482740e832120bc01548bc322a10c5cb744baf7b943d6a470533495483d4cd9a71258efd8d52a90ff45d9e9c524e15e2cc2e251c972e6ba0eae75b89208d50f3f072457ece4c0a620304cf1d58e5409eee022fe316ae6fd9fd5e75ecdc99b0513c8a257e614480e499534ad1483c6c808ea405171fb3b27ca4e51e600f30c9d1e12a19236754b1495a72896cfea0ccd1972c199dff7bc7c9f89a6eed5023637b1a4cc58b84c9ef5f103b8ec6cf96b90f4766c219792f69237bc0c04c1c6b27d056ab5530a05f4f39dbe18735c050b0e1533f061c3f4b165e70b11b6e2bcca705e27ef3bf0fa4183681545acbfec37d46526ac35cf992ec38726e762a33ec31431bb18f657f4e64d95843404367b8a91f6f878aafa3e727898df5fe9acc84643d7cd40e82feab768467f67528c3127b81415968eccaf86eab286dcfed57016a1cd8b19a57fc1e41a27d07aec1f4970a87b5c05a15801438d176266922ae7b12cec72a074010eaac12f945943c4b7509d841dc9ed0a2505b2513f4192841beef70dc9fa66800debfdf71611110af4481e79248f0de3f225c2f83e85b41cb307afb0a31be7c15c43ec87cfdbf48a5258943a9c98daeb61b8f5d896a89b67b4cc9a7ff177224b5de39606c44eb1a53727b5c517864bbf62e2b53862685a868067cda2dd4b448539105df0be4536172b38cd391fee76aaa196294aa957799c09323940c56292edbcdfb4c53518b65d769107d6825a7c7ae7b917480edb91badf25238a0ccac96f9cee6a331afa739decb8f302a557d0d9456c6daabea7e4fcee6847ce21b1ae57408901ff92034843929395caf2de95d6e53b69e21716fd44fad1942bf06b88c278be44e2a326893336446871a76a59b7d7b21a15632aa2801091f8afdd0da2c334b604f82b2906b7667a1ab9f01bc3d866c7f9ab6ccfa41ae00487259d7b7cf1a49845f2442f5b4271bdf690d3a14d51a85ae3c16e2ea8bd26576c5ddcf37eee346f018a0d44bc1f2e7cd485bf43e91d8684aee558aa4ea5b2d546c766aabcc10b76775c61f83845934d804063772b3b41b5b0e796ad1a394d63ea710678a6c34997872d0296c373079926afade7f924e44e1770d139d97c0ff397718bd565816fda57d561823796c6ed3b567b6e8dbd2002d67645d0dd2f675c171af2e048ca1bc9d483ef6b66d034c3cd6e7b57804785041128e6f5a68707a6c451e2e83589bc32d1ed171c4c78cf8bc88ca39a66c734f05624418cd2517a7a1b36b18f99436e3ff89a7cb5b6d3a8c9a60d466cd951491e698ad429fe77cd0747a6d3969a85bd81efc92659efee8a8880e42b3ed37e3532b0a859d65a43f39da9693047a25bfc6989771bb2f2600ec3dc8926cafda3f4e6c141cba0c8d80d258a9e7f25c3f608847bc5f769b543edd14e6a57748daee6cd6fb6e21515eb4d43fe235c4a39887f2e3c80c28a386c91e29d8609e064077b3e6f1ed59efe783fa2181727cf3356087a55dbbe82df11a4c5b9aef7d795c7632413ba3dbb08b8fe938f19a2bff4c6ce7ef295bb7be8086834953709698be96144147dda68076f036d0393d00d453d2739c946409c521d180e7c46ab5f621c43d37bdfc9a8d62b9ef216d5576d0a02b69e24711fb429bf0a6d7dc18e8169dfafdceab74161b2a43bef97c7bef4c41adb4a1dfb8d1c6d900a63d13a84696c80c0276307df249de9bf1eb37050b3004c3c7a1453cfe20a91885c0f50d38aff7a0d167feda1bd3203f10673b996c98d3259f8deec6ad2572e5328df7bb942fe2abe022fe8949b83954774f7ece5d46632472cbfb3e53e5886a843d3d2c4a99ce1e262efabae6b485ec4fd3f7a7a87ce98777dc87d6291bd2cf51427d85b10edbadbb660ae860d2791e6ea8c2058b498a13edb8174b275019b067ed3f390cdfa357c7f658943d5b5366b52a69bafaf2cd580e97116149edb0f09291db07ac932298c3eaa9b7f1a196211af80081c10e0d2f79ba9dc61003f9c19d9489143e42b2a048c146941fce4911b228870a2d64c84a8835fd922a832e668095d121e3f3b491eec7304f034a37436cfb4b422baf329b291147b232c9d6c7587ab570bb67a343c939e55e0a234840ca393c0e06ccd6eb906b1fca35890dacc9714b926701ad750c383b316694924369aceb21153c7bcacaecb5641848a0d1dc759222ab9539b64f8d5198a40814b2451ac041a6704984b6cda0b5da1cb5722a0876645782bc37e38be931d2b6aca5180b2a7", 0x1000}, {&(0x7f0000004280)="f63e567c57183c", 0x7}, {&(0x7f00000042c0)="3554e495e6627f6eae91648ac8604ede04a22f3eca557a63b9ff28147b42461909d9af7c13b7a813f00846b512171bb221414480ad203ba4e11a691d5e2cbd27ca5d78dfb2d844f60b56e7986ab93d30a8f2ea5037aaf9a9f721cfe52a054cc6b15991", 0x63}, {&(0x7f00000001c0)="aec9bc013a42291735546c9c2d20637c6283e832b4a14252bb83b315601385d637fd2e71dd23fa583b5f8b5c02c415b930d36104be0a09613ff289652142494b7d4aa4bdf35d56fdccca645fd2adea8bf5216ebe11d083f9548707d5521c7dd488e310b5ab7bde6d492cd138a9d52b058f16784ba4fb95d109a833a27f8f19e112afca597cc88fa5bc5d955a1e2fd3aa85bb5d252966745abdf330fb6be9fc49c5f86d3e11f39bd1988a5a213ab9fb18a9ac2e6177a2e24e0992b2d766d8daab", 0xc0}, {&(0x7f0000004400)="64ae935cda0744598354374bab2e25dc6e6ad8723e0d2fd9f99c556d68fbf10490a17645f012a7b4ebb62c775317207780085c9906bfbc039c83b84b6d27780e8065a59a60709f6c4d0941060341983ad316d9", 0x53}], 0xa, 0x0, 0x0, 0x800}], 0x1, 0x6ff276a159238aa5) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f637920ac053f02d8e000000001090212000110000000090400000003d602"], 0x0) kernel console output (not intermixed with test programs): -speed USB device number 55 using dummy_hcd [ 603.075484][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2060'. [ 603.259917][ T5939] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.294144][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.344822][ T5939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.405601][ T5939] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.446126][ T5939] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 603.472898][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 603.502242][T13355] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2064'. [ 603.520067][ T5939] usb 6-1: Product: syz [ 603.524297][ T5939] usb 6-1: Manufacturer: syz [ 603.529608][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'. [ 603.556913][ T5939] cdc_wdm 6-1:1.0: skipping garbage [ 603.576111][ T5939] cdc_wdm 6-1:1.0: skipping garbage [ 603.589106][T13362] FAULT_INJECTION: forcing a failure. [ 603.589106][T13362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.603810][ T5939] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 603.619120][ T5939] cdc_wdm 6-1:1.0: Unknown control protocol [ 603.635574][T13362] CPU: 0 UID: 0 PID: 13362 Comm: syz.2.2066 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.635595][T13362] Tainted: [L]=SOFTLOCKUP [ 603.635599][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 603.635607][T13362] Call Trace: [ 603.635613][T13362] [ 603.635618][T13362] dump_stack_lvl+0xe8/0x150 [ 603.635639][T13362] should_fail_ex+0x412/0x560 [ 603.635660][T13362] _copy_to_user+0x31/0xb0 [ 603.635676][T13362] simple_read_from_buffer+0xe1/0x170 [ 603.635697][T13362] proc_fail_nth_read+0x1bb/0x230 [ 603.635716][T13362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.635735][T13362] ? rw_verify_area+0x2a6/0x4d0 [ 603.635748][T13362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.635772][T13362] vfs_read+0x20c/0xa70 [ 603.635784][T13362] ? fdget_pos+0x246/0x320 [ 603.635798][T13362] ? __pfx___mutex_lock+0x10/0x10 [ 603.635815][T13362] ? __pfx_vfs_read+0x10/0x10 [ 603.635829][T13362] ? __fget_files+0x2a/0x420 [ 603.635842][T13362] ? __fget_files+0x3a0/0x420 [ 603.635852][T13362] ? __fget_files+0x2a/0x420 [ 603.635867][T13362] ksys_read+0x150/0x270 [ 603.635881][T13362] ? __pfx_ksys_read+0x10/0x10 [ 603.635894][T13362] ? __pfx_v4l2_ioctl+0x10/0x10 [ 603.635918][T13362] do_syscall_64+0x14d/0xf80 [ 603.635932][T13362] ? trace_irq_disable+0x3b/0x150 [ 603.635943][T13362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.635954][T13362] ? clear_bhb_loop+0x40/0x90 [ 603.635969][T13362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.635981][T13362] RIP: 0033:0x7fbd1335d04e [ 603.635992][T13362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 603.636003][T13362] RSP: 002b:00007fbd14238fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.636019][T13362] RAX: ffffffffffffffda RBX: 00007fbd142396c0 RCX: 00007fbd1335d04e [ 603.636028][T13362] RDX: 000000000000000f RSI: 00007fbd142390a0 RDI: 0000000000000004 [ 603.636036][T13362] RBP: 00007fbd14239090 R08: 0000000000000000 R09: 0000000000000000 [ 603.636043][T13362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.636050][T13362] R13: 00007fbd13616038 R14: 00007fbd13615fa0 R15: 00007fbd1373fa48 [ 603.636069][T13362] [ 603.890623][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 603.934498][T13359] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 604.002250][T13343] : renamed from vlan0 (while UP) [ 604.027678][ T9] usb 6-1: USB disconnect, device number 55 [ 604.037554][T13366] FAULT_INJECTION: forcing a failure. [ 604.037554][T13366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.120126][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.6.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.120149][T13366] Tainted: [L]=SOFTLOCKUP [ 604.120154][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 604.120161][T13366] Call Trace: [ 604.120167][T13366] [ 604.120173][T13366] dump_stack_lvl+0xe8/0x150 [ 604.120195][T13366] should_fail_ex+0x412/0x560 [ 604.120217][T13366] _copy_from_iter+0x1d3/0x1670 [ 604.120232][T13366] ? rcu_is_watching+0x15/0xb0 [ 604.120252][T13366] ? __pfx__copy_from_iter+0x10/0x10 [ 604.120269][T13366] ? netlink_sendmsg+0x650/0xb40 [ 604.120281][T13366] ? skb_put+0x11b/0x210 [ 604.120297][T13366] netlink_sendmsg+0x6c0/0xb40 [ 604.120314][T13366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.120329][T13366] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.120348][T13366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.120363][T13366] ____sys_sendmsg+0x972/0x9f0 [ 604.120383][T13366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.120403][T13366] ? import_iovec+0x73/0xa0 [ 604.120419][T13366] ___sys_sendmsg+0x2a5/0x360 [ 604.120436][T13366] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.120469][T13366] ? __fget_files+0x2a/0x420 [ 604.120480][T13366] ? __fget_files+0x3a0/0x420 [ 604.120496][T13366] __x64_sys_sendmsg+0x1bd/0x2a0 [ 604.120513][T13366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.120533][T13366] ? __pfx_ksys_write+0x10/0x10 [ 604.120553][T13366] do_syscall_64+0x14d/0xf80 [ 604.120568][T13366] ? trace_irq_disable+0x3b/0x150 [ 604.120578][T13366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.120590][T13366] ? clear_bhb_loop+0x40/0x90 [ 604.120605][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.120616][T13366] RIP: 0033:0x7ff956b9c819 [ 604.120629][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.120640][T13366] RSP: 002b:00007ff9579a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.120654][T13366] RAX: ffffffffffffffda RBX: 00007ff956e15fa0 RCX: 00007ff956b9c819 [ 604.120663][T13366] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 604.120670][T13366] RBP: 00007ff9579a0090 R08: 0000000000000000 R09: 0000000000000000 [ 604.120677][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.120685][T13366] R13: 00007ff956e16038 R14: 00007ff956e15fa0 R15: 00007ff956f3fa48 [ 604.120702][T13366] [ 604.626743][T13379] netlink: 'syz.6.2071': attribute type 29 has an invalid length. [ 604.705535][T13379] netlink: 'syz.6.2071': attribute type 29 has an invalid length. [ 604.792202][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2072'. [ 605.052365][ T36] wlan0: Trigger new scan to find an IBSS to join [ 605.784081][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 606.209899][ T9076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.230833][ T29] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 606.368124][ T5939] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 606.528114][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 606.543325][ T29] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 606.557728][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.571554][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 606.594208][ T29] usb 4-1: Product: syz [ 606.594351][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 606.621504][ T29] usb 4-1: Manufacturer: syz [ 606.626146][ T29] usb 4-1: SerialNumber: syz [ 606.639118][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 606.658994][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 606.675963][ T29] usb 4-1: config 0 descriptor?? [ 606.683664][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 606.698319][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 606.722204][ T29] gspca_main: sq930x-2.14.0 probing 2770:930c [ 606.740398][ T5939] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 606.753278][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.778308][ T5939] usb 3-1: Product: syz [ 606.792886][ T5939] usb 3-1: Manufacturer: syz [ 606.802966][ T5939] usb 3-1: SerialNumber: syz [ 606.819852][ T5939] usb 3-1: config 0 descriptor?? [ 606.832430][ T5939] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 606.845958][ T5939] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 607.182619][T13418] netlink: 'syz.5.2082': attribute type 61 has an invalid length. [ 607.708089][ T29] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 607.714182][ T29] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 607.780155][T13433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2085'. [ 607.809949][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'. [ 607.877098][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2088'. [ 609.621963][ T5939] usb 3-1: USB disconnect, device number 93 [ 610.114803][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 610.321673][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2092'. [ 611.158108][ T29] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 611.305249][T13463] FAULT_INJECTION: forcing a failure. [ 611.305249][T13463] name failslab, interval 1, probability 0, space 0, times 0 [ 611.318088][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 611.335826][ T29] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 611.343944][ T29] usb 6-1: config 0 has no interface number 0 [ 611.357781][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 611.374246][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.392018][T13463] CPU: 1 UID: 0 PID: 13463 Comm: syz.4.2097 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.392051][T13463] Tainted: [L]=SOFTLOCKUP [ 611.392059][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 611.392069][T13463] Call Trace: [ 611.392075][T13463] [ 611.392081][T13463] dump_stack_lvl+0xe8/0x150 [ 611.392103][T13463] should_fail_ex+0x412/0x560 [ 611.392125][T13463] should_failslab+0xa8/0x100 [ 611.392142][T13463] __kmalloc_noprof+0xe8/0x760 [ 611.392156][T13463] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 611.392177][T13463] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 611.392197][T13463] genl_family_rcv_msg_doit+0xd9/0x330 [ 611.392217][T13463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.392238][T13463] ? apparmor_capable+0x126/0x170 [ 611.392253][T13463] ? bpf_lsm_capable+0x9/0x20 [ 611.392269][T13463] ? security_capable+0x7e/0x2c0 [ 611.392290][T13463] genl_rcv_msg+0x61c/0x7a0 [ 611.392309][T13463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.392324][T13463] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 611.392339][T13463] ? __pfx_nl80211_set_mpath+0x10/0x10 [ 611.392350][T13463] ? __pfx_nl80211_post_doit+0x10/0x10 [ 611.392366][T13463] ? __lock_acquire+0x6b5/0x2cf0 [ 611.392387][T13463] netlink_rcv_skb+0x232/0x4b0 [ 611.392401][T13463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.392417][T13463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.392439][T13463] ? down_read+0x272/0x2e0 [ 611.392459][T13463] ? genl_rcv+0xd/0x40 [ 611.392474][T13463] genl_rcv+0x28/0x40 [ 611.392488][T13463] netlink_unicast+0x80f/0x9b0 [ 611.392510][T13463] ? __pfx_netlink_unicast+0x10/0x10 [ 611.392528][T13463] ? netlink_sendmsg+0x650/0xb40 [ 611.392539][T13463] ? skb_put+0x11b/0x210 [ 611.392555][T13463] netlink_sendmsg+0x813/0xb40 [ 611.392574][T13463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.392588][T13463] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.392606][T13463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.392621][T13463] ____sys_sendmsg+0x972/0x9f0 [ 611.392642][T13463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.392662][T13463] ? import_iovec+0x73/0xa0 [ 611.392679][T13463] ___sys_sendmsg+0x2a5/0x360 [ 611.392697][T13463] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.392732][T13463] ? __fget_files+0x2a/0x420 [ 611.392743][T13463] ? __fget_files+0x3a0/0x420 [ 611.392760][T13463] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.392784][T13463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.392804][T13463] ? __pfx_ksys_write+0x10/0x10 [ 611.392825][T13463] do_syscall_64+0x14d/0xf80 [ 611.392839][T13463] ? trace_irq_disable+0x3b/0x150 [ 611.392850][T13463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.392862][T13463] ? clear_bhb_loop+0x40/0x90 [ 611.392876][T13463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.392888][T13463] RIP: 0033:0x7f1f56f9c819 [ 611.392901][T13463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.392910][T13463] RSP: 002b:00007f1f57e96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.392924][T13463] RAX: ffffffffffffffda RBX: 00007f1f57215fa0 RCX: 00007f1f56f9c819 [ 611.392933][T13463] RDX: 0000000000004800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 611.392941][T13463] RBP: 00007f1f57e96090 R08: 0000000000000000 R09: 0000000000000000 [ 611.392949][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.392956][T13463] R13: 00007f1f57216038 R14: 00007f1f57215fa0 R15: 00007f1f5733fa48 [ 611.392978][T13463] [ 612.094134][ T29] usb 6-1: Product: syz [ 612.119483][ T29] usb 6-1: Manufacturer: syz [ 612.124137][ T29] usb 6-1: SerialNumber: syz [ 612.248395][ T29] usb 6-1: config 0 descriptor?? [ 612.258586][ T29] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 612.267409][ T29] usb 6-1: selecting invalid altsetting 1 [ 612.273551][ T29] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 612.284943][ T29] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 612.296906][ T29] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 612.305498][ T29] usb 6-1: media controller created [ 612.344102][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.592205][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.602006][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.686762][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.840050][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'. [ 612.878459][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2102'. [ 612.901692][T13480] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 613.168119][ T5826] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 613.322179][ T5826] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 613.336012][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.378813][ T5826] usb 3-1: Product: syz [ 613.392743][ T5826] usb 3-1: Manufacturer: syz [ 613.603691][ T29] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 613.614773][T13457] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 613.626850][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 613.656705][ T29] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 613.665359][ T5826] usb 3-1: SerialNumber: syz [ 613.688553][ T5826] usb 3-1: config 0 descriptor?? [ 613.716438][ T5826] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 613.785463][ T29] usb 6-1: USB disconnect, device number 56 [ 613.987410][ T5914] usb 3-1: USB disconnect, device number 94 [ 613.994138][ T5914] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 614.403435][T13407] Set syz1 is full, maxelem 65536 reached [ 614.496561][ T29] usb 4-1: USB disconnect, device number 97 [ 614.623213][T13495] FAULT_INJECTION: forcing a failure. [ 614.623213][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 614.636080][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.5.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.636107][T13495] Tainted: [L]=SOFTLOCKUP [ 614.636111][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 614.636118][T13495] Call Trace: [ 614.636125][T13495] [ 614.636132][T13495] dump_stack_lvl+0xe8/0x150 [ 614.636154][T13495] should_fail_ex+0x412/0x560 [ 614.636175][T13495] should_failslab+0xa8/0x100 [ 614.636192][T13495] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 614.636206][T13495] ? do_raw_spin_lock+0x12b/0x2f0 [ 614.636219][T13495] ? dup_task_struct+0x52/0x9a0 [ 614.636237][T13495] dup_task_struct+0x52/0x9a0 [ 614.636252][T13495] ? _raw_spin_unlock_irq+0x23/0x50 [ 614.636269][T13495] copy_process+0x508/0x3cd0 [ 614.636285][T13495] ? stack_depot_save_flags+0x33/0x810 [ 614.636306][T13495] ? kasan_save_track+0x4f/0x80 [ 614.636318][T13495] ? kasan_save_track+0x3e/0x80 [ 614.636330][T13495] ? __kasan_kmalloc+0x93/0xb0 [ 614.636343][T13495] ? create_io_worker+0xab/0x5c0 [ 614.636358][T13495] ? io_wq_enqueue+0x675/0x8a0 [ 614.636370][T13495] ? io_handle_tw_list+0x3db/0x540 [ 614.636384][T13495] ? tctx_task_work_run+0x55/0x330 [ 614.636397][T13495] ? tctx_task_work+0x3f/0x90 [ 614.636411][T13495] ? task_work_run+0x1d9/0x270 [ 614.636423][T13495] ? get_signal+0x11eb/0x1330 [ 614.636435][T13495] ? arch_do_signal_or_restart+0xbc/0x830 [ 614.636448][T13495] ? exit_to_user_mode_loop+0x86/0x480 [ 614.636462][T13495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.636477][T13495] ? __pfx_copy_process+0x10/0x10 [ 614.636496][T13495] ? __pfx_io_wq_worker+0x10/0x10 [ 614.636510][T13495] ? __pfx_io_wq_worker+0x10/0x10 [ 614.636525][T13495] create_io_thread+0xfc/0x170 [ 614.636543][T13495] ? __pfx_create_io_thread+0x10/0x10 [ 614.636563][T13495] ? __pfx_io_wq_worker+0x10/0x10 [ 614.636581][T13495] ? __raw_spin_lock_init+0x45/0x100 [ 614.636594][T13495] ? __init_swait_queue_head+0xa9/0x150 [ 614.636607][T13495] ? create_io_worker+0x27/0x5c0 [ 614.636622][T13495] create_io_worker+0x181/0x5c0 [ 614.636638][T13495] io_wq_enqueue+0x675/0x8a0 [ 614.636654][T13495] ? io_wq_enqueue+0x332/0x8a0 [ 614.636672][T13495] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 614.636697][T13495] ? __pfx_io_req_task_submit+0x10/0x10 [ 614.636718][T13495] io_handle_tw_list+0x3db/0x540 [ 614.636750][T13495] tctx_task_work_run+0x55/0x330 [ 614.636771][T13495] tctx_task_work+0x3f/0x90 [ 614.636788][T13495] task_work_run+0x1d9/0x270 [ 614.636811][T13495] ? __pfx_task_work_run+0x10/0x10 [ 614.636833][T13495] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 614.636866][T13495] get_signal+0x11eb/0x1330 [ 614.636893][T13495] ? fput+0xa0/0xd0 [ 614.636922][T13495] arch_do_signal_or_restart+0xbc/0x830 [ 614.636936][T13495] ? __fget_files+0x3a0/0x420 [ 614.636947][T13495] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 614.636965][T13495] ? ksys_write+0x242/0x270 [ 614.636984][T13495] exit_to_user_mode_loop+0x86/0x480 [ 614.636997][T13495] ? rcu_is_watching+0x15/0xb0 [ 614.637016][T13495] do_syscall_64+0x32d/0xf80 [ 614.637031][T13495] ? trace_irq_disable+0x3b/0x150 [ 614.637041][T13495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.637053][T13495] ? clear_bhb_loop+0x40/0x90 [ 614.637068][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.637079][T13495] RIP: 0033:0x7feed179c819 [ 614.637092][T13495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.637102][T13495] RSP: 002b:00007feecf9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 614.637116][T13495] RAX: 0000000000000001 RBX: 00007feed1a16090 RCX: 00007feed179c819 [ 614.637125][T13495] RDX: 00000000000077ae RSI: 000000000000742f RDI: 0000000000000006 [ 614.637133][T13495] RBP: 00007feecf9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 614.637140][T13495] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 614.637147][T13495] R13: 00007feed1a16128 R14: 00007feed1a16090 R15: 00007feed1b3fa48 [ 614.637166][T13495] [ 615.158184][ T29] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 615.318132][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 615.325404][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 615.334813][ T29] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 615.388837][ T29] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 615.427237][ T29] usb 4-1: config 0 interface 0 has no altsetting 1 [ 615.460431][ T29] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 615.475559][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 615.499860][ T29] usb 4-1: SerialNumber: syz [ 615.520673][ T29] usb 4-1: config 0 descriptor?? [ 615.526480][T13503] SET target dimension over the limit! [ 615.537630][ T29] usb-storage 4-1:0.0: USB Mass Storage device detected [ 615.550094][ T29] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 615.587625][T13503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.610210][T13507] FAULT_INJECTION: forcing a failure. [ 615.610210][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 615.653969][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.2.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.654006][T13507] Tainted: [L]=SOFTLOCKUP [ 615.654014][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 615.654026][T13507] Call Trace: [ 615.654035][T13507] [ 615.654045][T13507] dump_stack_lvl+0xe8/0x150 [ 615.654080][T13507] should_fail_ex+0x412/0x560 [ 615.654117][T13507] should_failslab+0xa8/0x100 [ 615.654144][T13507] ? skb_clone+0x212/0x3a0 [ 615.654171][T13507] kmem_cache_alloc_noprof+0x87/0x650 [ 615.654193][T13507] ? __netlink_lookup+0xc6/0x8b0 [ 615.654224][T13507] skb_clone+0x212/0x3a0 [ 615.654255][T13507] __netlink_deliver_tap+0x404/0x850 [ 615.654292][T13507] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.654315][T13507] netlink_deliver_tap+0x19c/0x1b0 [ 615.654339][T13507] netlink_unicast+0x7e3/0x9b0 [ 615.654378][T13507] ? __pfx_netlink_unicast+0x10/0x10 [ 615.654411][T13507] ? netlink_sendmsg+0x650/0xb40 [ 615.654430][T13507] ? skb_put+0x11b/0x210 [ 615.654459][T13507] netlink_sendmsg+0x813/0xb40 [ 615.654491][T13507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.654517][T13507] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.654550][T13507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.654577][T13507] ____sys_sendmsg+0x972/0x9f0 [ 615.654615][T13507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.654667][T13507] ? import_iovec+0x73/0xa0 [ 615.654695][T13507] ___sys_sendmsg+0x2a5/0x360 [ 615.654729][T13507] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.654793][T13507] ? __fget_files+0x2a/0x420 [ 615.654812][T13507] ? __fget_files+0x3a0/0x420 [ 615.654843][T13507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 615.654872][T13507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.654917][T13507] ? __pfx_ksys_write+0x10/0x10 [ 615.654953][T13507] do_syscall_64+0x14d/0xf80 [ 615.654979][T13507] ? trace_irq_disable+0x3b/0x150 [ 615.654997][T13507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.655016][T13507] ? clear_bhb_loop+0x40/0x90 [ 615.655041][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.655060][T13507] RIP: 0033:0x7fbd1339c819 [ 615.655080][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.655097][T13507] RSP: 002b:00007fbd14239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.655119][T13507] RAX: ffffffffffffffda RBX: 00007fbd13615fa0 RCX: 00007fbd1339c819 [ 615.655134][T13507] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 615.655147][T13507] RBP: 00007fbd14239090 R08: 0000000000000000 R09: 0000000000000000 [ 615.655160][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.655171][T13507] R13: 00007fbd13616038 R14: 00007fbd13615fa0 R15: 00007fbd1373fa48 [ 615.655205][T13507] [ 615.965035][ T29] usb 4-1: USB disconnect, device number 98 [ 616.958127][ T5939] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 617.172091][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 617.189612][ T5939] usb 4-1: config 0 has no interfaces? [ 617.199632][ T5939] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 617.218108][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.290307][ T5939] usb 4-1: Product: syz [ 617.294536][ T5939] usb 4-1: Manufacturer: syz [ 617.378986][ T5939] usb 4-1: SerialNumber: syz [ 617.391927][ T5939] usb 4-1: config 0 descriptor?? [ 617.438154][ T5914] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 617.607286][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2122'. [ 617.623857][ T5914] usb 6-1: device descriptor read/64, error -71 [ 617.639262][ T922] usb 4-1: USB disconnect, device number 99 [ 617.684803][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2122'. [ 617.702271][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 617.888106][ T5914] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 617.941291][T13543] netlink: 'syz.4.2125': attribute type 10 has an invalid length. [ 617.964114][T13543] team0: Port device dummy0 added [ 617.989291][T13543] netlink: 'syz.4.2125': attribute type 10 has an invalid length. [ 618.018942][ T5914] usb 6-1: device descriptor read/64, error -71 [ 618.037755][T13543] team0: Port device dummy0 removed [ 618.062636][T13543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.153703][ T5914] usb usb6-port1: attempt power cycle [ 618.361040][T13552] FAULT_INJECTION: forcing a failure. [ 618.361040][T13552] name failslab, interval 1, probability 0, space 0, times 0 [ 618.392088][T13552] CPU: 0 UID: 0 PID: 13552 Comm: syz.3.2129 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.392112][T13552] Tainted: [L]=SOFTLOCKUP [ 618.392117][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 618.392124][T13552] Call Trace: [ 618.392129][T13552] [ 618.392135][T13552] dump_stack_lvl+0xe8/0x150 [ 618.392157][T13552] should_fail_ex+0x412/0x560 [ 618.392178][T13552] should_failslab+0xa8/0x100 [ 618.392194][T13552] ? skb_clone+0x212/0x3a0 [ 618.392209][T13552] kmem_cache_alloc_noprof+0x87/0x650 [ 618.392222][T13552] ? __netlink_lookup+0xc6/0x8b0 [ 618.392239][T13552] skb_clone+0x212/0x3a0 [ 618.392256][T13552] __netlink_deliver_tap+0x404/0x850 [ 618.392283][T13552] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.392296][T13552] netlink_deliver_tap+0x19c/0x1b0 [ 618.392309][T13552] netlink_unicast+0x7e3/0x9b0 [ 618.392331][T13552] ? __pfx_netlink_unicast+0x10/0x10 [ 618.392349][T13552] ? netlink_sendmsg+0x650/0xb40 [ 618.392361][T13552] ? skb_put+0x11b/0x210 [ 618.392376][T13552] netlink_sendmsg+0x813/0xb40 [ 618.392393][T13552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.392408][T13552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.392427][T13552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.392443][T13552] ____sys_sendmsg+0x972/0x9f0 [ 618.392463][T13552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.392483][T13552] ? import_iovec+0x73/0xa0 [ 618.392500][T13552] ___sys_sendmsg+0x2a5/0x360 [ 618.392522][T13552] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.392556][T13552] ? __fget_files+0x2a/0x420 [ 618.392567][T13552] ? __fget_files+0x3a0/0x420 [ 618.392583][T13552] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.392599][T13552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.392619][T13552] ? __pfx_ksys_write+0x10/0x10 [ 618.392645][T13552] do_syscall_64+0x14d/0xf80 [ 618.392661][T13552] ? trace_irq_disable+0x3b/0x150 [ 618.392672][T13552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.392684][T13552] ? clear_bhb_loop+0x40/0x90 [ 618.392698][T13552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.392710][T13552] RIP: 0033:0x7f48e4d9c819 [ 618.392724][T13552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.392735][T13552] RSP: 002b:00007f48e5c68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.392749][T13552] RAX: ffffffffffffffda RBX: 00007f48e5015fa0 RCX: 00007f48e4d9c819 [ 618.392758][T13552] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 618.392765][T13552] RBP: 00007f48e5c68090 R08: 0000000000000000 R09: 0000000000000000 [ 618.392772][T13552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.392779][T13552] R13: 00007f48e5016038 R14: 00007f48e5015fa0 R15: 00007f48e513fa48 [ 618.392797][T13552] [ 618.728101][ T5914] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 618.762135][ T5914] usb 6-1: device descriptor read/8, error -71 [ 619.258113][ T5914] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 619.308067][ T5914] usb 6-1: device descriptor read/8, error -71 [ 619.368318][ T922] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 619.438535][ T5914] usb usb6-port1: unable to enumerate USB device [ 619.518095][ T922] usb 4-1: Using ep0 maxpacket: 32 [ 619.540085][ T922] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 619.549167][ T922] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 619.583417][ T922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 619.708351][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 619.750228][ T922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 620.006988][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 620.094225][ T922] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 620.129558][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.170912][ T922] usb 4-1: config 0 descriptor?? [ 620.465232][ T922] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 620.492877][ T922] usb 4-1: USB disconnect, device number 100 [ 620.596869][ T922] usblp0: removed [ 620.771736][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2139'. [ 620.791143][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2139'. [ 620.818378][ T9078] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.837686][ T9078] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.862938][ T9078] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.893319][ T9078] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.999818][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 621.018220][ T922] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 621.181428][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 621.198887][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 621.208083][ T922] usb 4-1: Using ep0 maxpacket: 32 [ 621.215724][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 621.238191][T11978] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 621.329023][T13593] fuse: Bad value for 'fd' [ 621.395745][ T922] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 621.438824][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 621.456455][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.466997][ T9] usb 6-1: Product: syz [ 621.468125][T11978] usb 5-1: Using ep0 maxpacket: 8 [ 621.476707][ T9] usb 6-1: Manufacturer: syz [ 621.483627][ T9] usb 6-1: SerialNumber: syz [ 621.488419][ T922] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 621.505916][ T9] usb 6-1: config 0 descriptor?? [ 621.530887][T11978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.541141][T11978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 621.558600][T13579] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 621.567712][ T922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 621.582375][T11978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 621.600967][ T922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.612545][T11978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.627304][ T922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 621.639935][T11978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.649698][ T922] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 621.663029][T11978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.671762][ T922] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 621.683905][ T922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.713746][ T922] usb 4-1: config 0 descriptor?? [ 621.848680][ T922] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 101 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 621.874144][T13579] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 621.903333][T11978] usb 5-1: GET_CAPABILITIES returned 0 [ 621.918071][T11978] usbtmc 5-1:16.0: can't read capabilities [ 622.094169][ T922] usb 4-1: USB disconnect, device number 101 [ 622.222074][ T922] usblp0: removed [ 622.333629][T13607] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 622.768772][ T922] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 622.918062][ T922] usb 4-1: Using ep0 maxpacket: 8 [ 622.925402][ T922] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 622.933264][ T922] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 622.945989][ T922] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 622.964783][ T922] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 622.972606][ T922] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 622.988310][ T922] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.024257][ T922] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 623.032027][ T922] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 623.048208][ T922] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.085085][ T922] usb 4-1: string descriptor 0 read error: -22 [ 623.092175][ T922] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 623.101649][ T922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.138705][ T922] adutux 4-1:168.0: interrupt endpoints not found [ 623.340187][ T5914] usb 4-1: USB disconnect, device number 102 [ 623.370508][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 623.382638][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 623.562916][ T5914] usb 6-1: USB disconnect, device number 61 [ 623.988173][ T5914] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 624.113470][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 624.125367][ T29] usb 5-1: USB disconnect, device number 95 [ 624.151724][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 624.173865][ T5914] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 624.187323][ T5914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 624.201103][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 624.213854][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 624.240146][ T5914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.276031][ T5914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 624.287717][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.405098][T13630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.420482][T13630] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2157'. [ 624.507358][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.513897][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.519890][ T5914] usb 6-1: usb_control_msg returned -32 [ 624.525978][ T5914] usbtmc 6-1:16.0: can't read capabilities [ 624.625732][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2159'. [ 624.642979][ T30] audit: type=1326 audit(1775478081.941:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13634 comm="syz.2.2160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd1339c819 code=0x0 [ 624.854584][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.864845][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.875926][T13656] FAULT_INJECTION: forcing a failure. [ 624.875926][T13656] name failslab, interval 1, probability 0, space 0, times 0 [ 624.888811][T13656] CPU: 1 UID: 0 PID: 13656 Comm: syz.5.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.888847][T13656] Tainted: [L]=SOFTLOCKUP [ 624.888856][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.888867][T13656] Call Trace: [ 624.888877][T13656] [ 624.888887][T13656] dump_stack_lvl+0xe8/0x150 [ 624.888923][T13656] should_fail_ex+0x412/0x560 [ 624.888960][T13656] should_failslab+0xa8/0x100 [ 624.888990][T13656] __kmalloc_cache_noprof+0x88/0x660 [ 624.889015][T13656] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 624.889043][T13656] ? usbtmc_ioctl_clear+0xe1/0x9b0 [ 624.889078][T13656] usbtmc_ioctl_clear+0xe1/0x9b0 [ 624.889106][T13656] ? __pfx___mutex_lock+0x10/0x10 [ 624.889139][T13656] ? __pfx_usbtmc_ioctl_clear+0x10/0x10 [ 624.889171][T13656] ? __fget_files+0x2a/0x420 [ 624.889190][T13656] ? __fget_files+0x3a0/0x420 [ 624.889212][T13656] usbtmc_ioctl+0x50c/0x720 [ 624.889241][T13656] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 624.889267][T13656] __se_sys_ioctl+0xfc/0x170 [ 624.889295][T13656] do_syscall_64+0x14d/0xf80 [ 624.889320][T13656] ? trace_irq_disable+0x3b/0x150 [ 624.889338][T13656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.889359][T13656] ? clear_bhb_loop+0x40/0x90 [ 624.889385][T13656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.889406][T13656] RIP: 0033:0x7feed179c819 [ 624.889427][T13656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.889444][T13656] RSP: 002b:00007feecf9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.889467][T13656] RAX: ffffffffffffffda RBX: 00007feed1a16090 RCX: 00007feed179c819 [ 624.889483][T13656] RDX: 0000000000000000 RSI: 0000000000005b02 RDI: 0000000000000004 [ 624.889496][T13656] RBP: 00007feecf9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 624.889509][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.889521][T13656] R13: 00007feed1a16128 R14: 00007feed1a16090 R15: 00007feed1b3fa48 [ 624.889555][T13656] [ 625.330143][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 625.346819][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2166'. [ 625.430607][T13660] bond_slave_0: entered promiscuous mode [ 625.436381][T13660] bond_slave_1: entered promiscuous mode [ 625.447440][T13660] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 625.460074][T13660] bond_slave_0: left promiscuous mode [ 625.465559][T13660] bond_slave_1: left promiscuous mode [ 626.618094][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 626.670341][T13674] fuse: Bad value for 'fd' [ 626.696302][ T5914] usb 6-1: USB disconnect, device number 62 [ 626.878159][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 626.941482][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 626.997215][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.087091][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.152254][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.203486][ T5914] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 627.230663][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.262127][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.368208][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 627.380743][ T5914] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 627.424124][ T5914] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 627.448524][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.469230][ T5914] usb 6-1: Product: syz [ 627.479300][ T5914] usb 6-1: Manufacturer: syz [ 627.490944][ T5914] usb 6-1: SerialNumber: syz [ 627.522463][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 627.536970][ T9] usbtmc 3-1:16.0: can't read capabilities [ 627.736778][ T5914] usb 6-1: USB disconnect, device number 63 [ 628.000341][T13687] FAULT_INJECTION: forcing a failure. [ 628.000341][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 628.037585][T13687] CPU: 0 UID: 0 PID: 13687 Comm: syz.3.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.037618][T13687] Tainted: [L]=SOFTLOCKUP [ 628.037626][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 628.037637][T13687] Call Trace: [ 628.037645][T13687] [ 628.037654][T13687] dump_stack_lvl+0xe8/0x150 [ 628.037681][T13687] should_fail_ex+0x412/0x560 [ 628.037703][T13687] should_failslab+0xa8/0x100 [ 628.037719][T13687] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 628.037735][T13687] ? alloc_vfsmnt+0xe6/0x420 [ 628.037753][T13687] kstrdup+0x42/0x100 [ 628.037778][T13687] alloc_vfsmnt+0xe6/0x420 [ 628.037804][T13687] clone_mnt+0x4b/0x9a0 [ 628.037833][T13687] copy_tree+0xde/0x930 [ 628.037857][T13687] ? __pfx_down_write+0x10/0x10 [ 628.037895][T13687] ? __do_loopback+0x2a9/0x460 [ 628.037916][T13687] ? alloc_mnt_ns+0x217/0x2c0 [ 628.037938][T13687] open_detached_copy+0x23e/0x5a0 [ 628.037951][T13687] ? do_getname+0x151/0x250 [ 628.037978][T13687] vfs_open_tree+0x484/0xfc0 [ 628.038005][T13687] ? do_raw_spin_unlock+0xf5/0x210 [ 628.038025][T13687] ? __pfx_vfs_open_tree+0x10/0x10 [ 628.038046][T13687] ? _raw_spin_unlock+0x28/0x50 [ 628.038067][T13687] ? alloc_fd+0x64b/0x6c0 [ 628.038102][T13687] __x64_sys_open_tree+0x96/0x110 [ 628.038131][T13687] do_syscall_64+0x14d/0xf80 [ 628.038156][T13687] ? trace_irq_disable+0x3b/0x150 [ 628.038173][T13687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.038192][T13687] ? clear_bhb_loop+0x40/0x90 [ 628.038214][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.038229][T13687] RIP: 0033:0x7f48e4d9c819 [ 628.038246][T13687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.038259][T13687] RSP: 002b:00007f48e5c47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 628.038277][T13687] RAX: ffffffffffffffda RBX: 00007f48e5016090 RCX: 00007f48e4d9c819 [ 628.038288][T13687] RDX: 0000000000089101 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 628.038298][T13687] RBP: 00007f48e5c47090 R08: 0000000000000000 R09: 0000000000000000 [ 628.038308][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.038317][T13687] R13: 00007f48e5016128 R14: 00007f48e5016090 R15: 00007f48e513fa48 [ 628.038343][T13687] [ 628.778057][ T29] usb 3-1: USB disconnect, device number 95 [ 628.934067][ T30] audit: type=1326 audit(1775478086.231:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.2177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f56f9c819 code=0x0 [ 628.960745][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2179'. [ 628.979045][T13706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2179'. [ 629.470074][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2180'. [ 629.648368][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 629.970288][T13717] bond_slave_0: entered promiscuous mode [ 629.976050][T13717] bond_slave_1: entered promiscuous mode [ 629.992739][T13717] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 630.460440][T13731] netlink: 'syz.5.2184': attribute type 1 has an invalid length. [ 630.607503][T13717] bond_slave_0: left promiscuous mode [ 630.613014][T13717] bond_slave_1: left promiscuous mode [ 631.075168][T13733] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 631.126917][T13733] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 631.243537][T13734] bond0: (slave gretap1): making interface the new active one [ 631.260310][T13734] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 631.922846][T13757] ip6gre1: entered promiscuous mode [ 631.928282][T13757] ip6gre1: entered allmulticast mode [ 632.328767][T13763] fuse: Bad value for 'fd' [ 632.428120][ T29] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 632.598070][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 632.605960][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 632.647445][ T29] usb 5-1: config 4 interface 0 has no altsetting 0 [ 632.687003][ T29] usb 5-1: string descriptor 0 read error: -22 [ 632.693443][ T29] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 632.764469][ T29] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 632.788079][T11978] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 632.828959][ T29] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 632.875871][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 632.931142][ T29] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 632.953522][ T29] usb 5-1: media controller created [ 632.998433][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.026370][T11978] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.097203][T11978] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 633.145817][T11978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.175934][T11978] usb 3-1: Product: syz [ 633.195904][T11978] usb 3-1: Manufacturer: syz [ 633.235343][T11978] usb 3-1: SerialNumber: syz [ 633.259994][T11978] usb 3-1: config 0 descriptor?? [ 633.301827][ T29] zl10353_read_register: readreg error (reg=127, ret==0) [ 633.404492][ T29] usb 5-1: USB disconnect, device number 96 [ 633.836972][T13774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.848761][T13774] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 634.214605][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 634.763045][T13791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2199'. [ 634.801613][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 634.923852][T13791] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 636.372629][ T5914] usb 3-1: USB disconnect, device number 96 [ 636.842395][T13817] fuse: Bad value for 'fd' [ 637.112611][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 637.408372][ T29] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 637.690543][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.717304][ T29] usb 3-1: config 0 has no interfaces? [ 637.738319][ T29] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 637.834104][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.865513][ T29] usb 3-1: Product: syz [ 637.873383][ T29] usb 3-1: Manufacturer: syz [ 637.888967][ T29] usb 3-1: SerialNumber: syz [ 637.929132][ T29] usb 3-1: config 0 descriptor?? [ 637.969578][T13831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.595410][T13837] FAULT_INJECTION: forcing a failure. [ 638.595410][T13837] name failslab, interval 1, probability 0, space 0, times 0 [ 638.673184][T13837] CPU: 1 UID: 0 PID: 13837 Comm: syz.6.2214 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.673221][T13837] Tainted: [L]=SOFTLOCKUP [ 638.673229][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 638.673241][T13837] Call Trace: [ 638.673250][T13837] [ 638.673260][T13837] dump_stack_lvl+0xe8/0x150 [ 638.673296][T13837] should_fail_ex+0x412/0x560 [ 638.673347][T13837] should_failslab+0xa8/0x100 [ 638.673376][T13837] __kmalloc_cache_noprof+0x88/0x660 [ 638.673400][T13837] ? __hw_addr_add_ex+0x1dc/0x650 [ 638.673434][T13837] __hw_addr_add_ex+0x1dc/0x650 [ 638.673469][T13837] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 638.673503][T13837] dev_addr_init+0x15e/0x240 [ 638.673534][T13837] ? __pfx_dev_addr_init+0x10/0x10 [ 638.673564][T13837] ? alloc_netdev_mqs+0xa6/0x11b0 [ 638.673602][T13837] alloc_netdev_mqs+0x2b1/0x11b0 [ 638.673628][T13837] ? __pfx_vlan_setup+0x10/0x10 [ 638.673659][T13837] rtnl_create_link+0x31f/0xd70 [ 638.673695][T13837] rtnl_newlink_create+0x277/0xb70 [ 638.673719][T13837] ? __pfx___nla_validate_parse+0x10/0x10 [ 638.673753][T13837] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 638.673782][T13837] ? __pfx___mutex_lock+0x10/0x10 [ 638.673818][T13837] ? full_name_hash+0x89/0xe0 [ 638.673844][T13837] ? __dev_get_by_name+0x36/0x140 [ 638.673876][T13837] rtnl_newlink+0x1666/0x1be0 [ 638.673930][T13837] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.673950][T13837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.674011][T13837] ? kasan_quarantine_put+0xbb/0x1f0 [ 638.674033][T13837] ? lockdep_hardirqs_on+0x7a/0x110 [ 638.674063][T13837] ? kmem_cache_free+0x187/0x630 [ 638.674086][T13837] ? nlmon_xmit+0xb0/0x100 [ 638.674124][T13837] ? __lock_acquire+0x6b5/0x2cf0 [ 638.674157][T13837] ? __local_bh_enable_ip+0xd0/0x130 [ 638.674183][T13837] ? lockdep_hardirqs_on+0x7a/0x110 [ 638.674206][T13837] ? __dev_queue_xmit+0x277/0x3890 [ 638.674232][T13837] ? __local_bh_enable_ip+0xd0/0x130 [ 638.674256][T13837] ? __dev_queue_xmit+0x277/0x3890 [ 638.674310][T13837] ? __pfx_rtnl_newlink+0x10/0x10 [ 638.674331][T13837] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 638.674357][T13837] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 638.674378][T13837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.674398][T13837] ? ref_tracker_free+0x693/0x840 [ 638.674416][T13837] ? __copy_skb_header+0xa3/0x4a0 [ 638.674445][T13837] ? __pfx_ref_tracker_free+0x10/0x10 [ 638.674486][T13837] ? __skb_clone+0x63/0x7a0 [ 638.674522][T13837] netlink_rcv_skb+0x232/0x4b0 [ 638.674546][T13837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.674578][T13837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.674612][T13837] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.674642][T13837] netlink_unicast+0x80f/0x9b0 [ 638.674681][T13837] ? __pfx_netlink_unicast+0x10/0x10 [ 638.674713][T13837] ? netlink_sendmsg+0x650/0xb40 [ 638.674731][T13837] ? skb_put+0x11b/0x210 [ 638.674758][T13837] netlink_sendmsg+0x813/0xb40 [ 638.674791][T13837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.674817][T13837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.674850][T13837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.674876][T13837] ____sys_sendmsg+0x972/0x9f0 [ 638.674912][T13837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.674948][T13837] ? import_iovec+0x73/0xa0 [ 638.674975][T13837] ___sys_sendmsg+0x2a5/0x360 [ 638.675008][T13837] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.675072][T13837] ? __fget_files+0x2a/0x420 [ 638.675090][T13837] ? __fget_files+0x3a0/0x420 [ 638.675120][T13837] __x64_sys_sendmsg+0x1bd/0x2a0 [ 638.675149][T13837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.675185][T13837] ? __pfx_ksys_write+0x10/0x10 [ 638.675231][T13837] do_syscall_64+0x14d/0xf80 [ 638.675257][T13837] ? trace_irq_disable+0x3b/0x150 [ 638.675275][T13837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.675294][T13837] ? clear_bhb_loop+0x40/0x90 [ 638.675319][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.675340][T13837] RIP: 0033:0x7ff956b9c819 [ 638.675360][T13837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.675378][T13837] RSP: 002b:00007ff9579a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.675402][T13837] RAX: ffffffffffffffda RBX: 00007ff956e15fa0 RCX: 00007ff956b9c819 [ 638.675417][T13837] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000003 [ 638.675430][T13837] RBP: 00007ff9579a0090 R08: 0000000000000000 R09: 0000000000000000 [ 638.675442][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 638.675454][T13837] R13: 00007ff956e16038 R14: 00007ff956e15fa0 R15: 00007ff956f3fa48 [ 638.675496][T13837] [ 639.335761][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 639.702643][T13846] fuse: Bad value for 'fd' [ 640.653640][ T5914] usb 3-1: USB disconnect, device number 97 [ 640.912472][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 640.983970][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 641.598064][T11978] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 641.637817][T13872] binder: 13870:13872 ioctl c038586c 200000000340 returned -22 [ 641.761492][T11978] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 641.793912][T11978] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 641.854011][T11978] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 641.892275][T11978] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 641.942194][T11978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.989957][T13866] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 642.365934][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2228'. [ 642.377421][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2228'. [ 643.668981][T11978] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 643.771895][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 643.868188][T11978] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input50 [ 644.005185][T11978] usb 3-1: USB disconnect, device number 98 [ 644.011225][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 645.070996][ T10] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 645.686586][ T36] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 646.018184][ T9078] wlan0: Trigger new scan to find an IBSS to join [ 646.173245][ T36] bond1 (unregistering): Released all slaves [ 646.214199][ T36] bond2 (unregistering): Released all slaves [ 646.241208][ T36] bond0 (unregistering): Released all slaves [ 646.741920][ T36] : left promiscuous mode [ 646.818021][ T36] tipc: Left network mode [ 647.743319][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 647.775045][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.812666][ T10] usb 4-1: config 0 descriptor?? [ 647.848296][ T10] usb 4-1: can't set config #0, error -71 [ 647.856445][ T10] usb 4-1: USB disconnect, device number 103 [ 648.020894][ T36] hsr_slave_0: left promiscuous mode [ 648.042565][ T36] hsr_slave_1: left promiscuous mode [ 648.095191][ T36] veth1_macvtap: left promiscuous mode [ 648.191867][ T36] veth0_macvtap: left promiscuous mode [ 648.298528][ T36] veth1_vlan: left promiscuous mode [ 648.458344][ T36] veth0_vlan: left promiscuous mode [ 648.751946][T13966] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2249'. [ 648.902834][ T36] pim6reg (unregistering): left allmulticast mode [ 649.462196][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 649.582923][T13981] FAULT_INJECTION: forcing a failure. [ 649.582923][T13981] name failslab, interval 1, probability 0, space 0, times 0 [ 649.648419][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 649.668910][T13981] CPU: 1 UID: 0 PID: 13981 Comm: syz.6.2253 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.668947][T13981] Tainted: [L]=SOFTLOCKUP [ 649.668955][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 649.668966][T13981] Call Trace: [ 649.668975][T13981] [ 649.668984][T13981] dump_stack_lvl+0xe8/0x150 [ 649.669016][T13981] should_fail_ex+0x412/0x560 [ 649.669050][T13981] should_failslab+0xa8/0x100 [ 649.669077][T13981] __kmalloc_cache_noprof+0x88/0x660 [ 649.669098][T13981] ? __pfx_stack_trace_save+0x10/0x10 [ 649.669119][T13981] ? rtnl_newlink+0x136/0x1be0 [ 649.669144][T13981] rtnl_newlink+0x136/0x1be0 [ 649.669164][T13981] ? kasan_save_track+0x4f/0x80 [ 649.669184][T13981] ? kasan_save_track+0x3e/0x80 [ 649.669201][T13981] ? kasan_save_free_info+0x46/0x50 [ 649.669226][T13981] ? __kasan_slab_free+0x5c/0x80 [ 649.669245][T13981] ? kmem_cache_free+0x187/0x630 [ 649.669260][T13981] ? __dev_queue_xmit+0x16d1/0x3890 [ 649.669275][T13981] ? __netlink_deliver_tap+0x5ad/0x850 [ 649.669288][T13981] ? netlink_deliver_tap+0x19c/0x1b0 [ 649.669299][T13981] ? netlink_unicast+0x7e3/0x9b0 [ 649.669314][T13981] ? netlink_sendmsg+0x813/0xb40 [ 649.669327][T13981] ? __pfx_rtnl_newlink+0x10/0x10 [ 649.669339][T13981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.669370][T13981] ? kasan_quarantine_put+0xbb/0x1f0 [ 649.669383][T13981] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.669401][T13981] ? kmem_cache_free+0x187/0x630 [ 649.669414][T13981] ? nlmon_xmit+0xb0/0x100 [ 649.669435][T13981] ? __lock_acquire+0x6b5/0x2cf0 [ 649.669461][T13981] ? __local_bh_enable_ip+0xd0/0x130 [ 649.669477][T13981] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.669490][T13981] ? __dev_queue_xmit+0x277/0x3890 [ 649.669505][T13981] ? __local_bh_enable_ip+0xd0/0x130 [ 649.669518][T13981] ? __dev_queue_xmit+0x277/0x3890 [ 649.669546][T13981] ? __pfx_rtnl_newlink+0x10/0x10 [ 649.669559][T13981] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 649.669574][T13981] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 649.669586][T13981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.669598][T13981] ? ref_tracker_free+0x693/0x840 [ 649.669609][T13981] ? __copy_skb_header+0xa3/0x4a0 [ 649.669625][T13981] ? __pfx_ref_tracker_free+0x10/0x10 [ 649.669636][T13981] ? __skb_clone+0x63/0x7a0 [ 649.669655][T13981] netlink_rcv_skb+0x232/0x4b0 [ 649.669669][T13981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.669682][T13981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.669704][T13981] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.669721][T13981] netlink_unicast+0x80f/0x9b0 [ 649.669742][T13981] ? __pfx_netlink_unicast+0x10/0x10 [ 649.669761][T13981] ? netlink_sendmsg+0x650/0xb40 [ 649.669772][T13981] ? skb_put+0x11b/0x210 [ 649.669787][T13981] netlink_sendmsg+0x813/0xb40 [ 649.669805][T13981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.669819][T13981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 649.669838][T13981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 649.669853][T13981] ____sys_sendmsg+0x972/0x9f0 [ 649.669874][T13981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.669893][T13981] ? import_iovec+0x73/0xa0 [ 649.669909][T13981] ___sys_sendmsg+0x2a5/0x360 [ 649.669927][T13981] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.669965][T13981] ? __fget_files+0x2a/0x420 [ 649.669976][T13981] ? __fget_files+0x3a0/0x420 [ 649.669992][T13981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 649.670009][T13981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.670029][T13981] ? __pfx_ksys_write+0x10/0x10 [ 649.670049][T13981] do_syscall_64+0x14d/0xf80 [ 649.670064][T13981] ? trace_irq_disable+0x3b/0x150 [ 649.670074][T13981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.670085][T13981] ? clear_bhb_loop+0x40/0x90 [ 649.670099][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.670111][T13981] RIP: 0033:0x7ff956b9c819 [ 649.670124][T13981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.670135][T13981] RSP: 002b:00007ff9579a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.670149][T13981] RAX: ffffffffffffffda RBX: 00007ff956e15fa0 RCX: 00007ff956b9c819 [ 649.670158][T13981] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 649.670165][T13981] RBP: 00007ff9579a0090 R08: 0000000000000000 R09: 0000000000000000 [ 649.670172][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.670180][T13981] R13: 00007ff956e16038 R14: 00007ff956e15fa0 R15: 00007ff956f3fa48 [ 649.670197][T13981] [ 650.111214][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.121084][ T10] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 650.131064][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 650.216788][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 650.240221][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.403027][ T30] audit: type=1800 audit(1775478107.691:1116): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2252" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 650.446858][ T10] usb 4-1: Product: syz [ 650.474259][ T10] usb 4-1: Manufacturer: syz [ 650.532159][ T10] usb 4-1: SerialNumber: syz [ 650.565548][ T10] usb 4-1: config 0 descriptor?? [ 650.758874][T13992] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2258'. [ 650.773434][T13992] openvswitch: netlink: nsh attr 194 is out of range max 3 [ 651.058092][ T87] wlan0: Trigger new scan to find an IBSS to join [ 651.115963][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 651.278831][ T9] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 651.440818][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 651.465404][ T9] usb 5-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 651.482460][ T9] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 67 [ 651.503335][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 651.518120][ T10] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 651.531015][ T10] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 651.539024][ T5914] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 651.548320][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 651.569548][ T9] usb 5-1: config 1 interface 2 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.592391][ T9] usb 5-1: string descriptor 0 read error: -22 [ 651.600013][ T9] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 651.609702][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.633078][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.640451][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 651.688769][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 651.695792][ T5914] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 651.710188][ T5914] usb 6-1: config 0 has no interface number 0 [ 651.722140][ T5914] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 651.755283][ T5914] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 651.769722][T13972] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 651.787305][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.794097][T14003] fuse: Unknown parameter 'user_i00000000000000000000' [ 651.818480][ T9] usb 4-1: USB disconnect, device number 104 [ 651.827757][ T5914] usb 6-1: Product: syz [ 651.837938][ T5914] usb 6-1: Manufacturer: syz [ 651.844334][ T5914] usb 6-1: SerialNumber: syz [ 651.879489][ T5914] usb 6-1: config 0 descriptor?? [ 651.886708][T13997] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 652.048425][ T5826] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 652.068287][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.101923][T13997] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 652.240252][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 652.249497][ T5826] usb 3-1: config 3 has an invalid interface number: 4 but max is 0 [ 652.272183][ T5826] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 652.309653][ T5826] usb 3-1: config 3 has no interface number 0 [ 652.323833][ T5826] usb 3-1: config 3 interface 4 altsetting 184 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 652.360335][ T5826] usb 3-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.371817][ T5826] usb 3-1: config 3 interface 4 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 652.386384][ T5826] usb 3-1: config 3 interface 4 has no altsetting 0 [ 652.402303][ T5914] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 652.441061][ T29] usb 5-1: USB disconnect, device number 97 [ 652.538327][ T5826] usb 3-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 652.548744][ T5914] asix 6-1:0.188: probe with driver asix failed with error -71 [ 652.557597][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.562137][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2263'. [ 652.606878][ T5826] usb 3-1: Product: syz [ 652.613335][ T5914] usb 6-1: USB disconnect, device number 64 [ 652.615946][ T5826] usb 3-1: Manufacturer: syz [ 652.630042][ T5826] usb 3-1: SerialNumber: syz [ 652.984874][ T5826] radio-si470x 3-1:3.4: could not find interrupt in endpoint [ 652.992777][ T5826] radio-si470x 3-1:3.4: probe with driver radio-si470x failed with error -5 [ 653.002767][ T29] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 653.013072][ T5826] usbhid 3-1:3.4: couldn't find an input interrupt endpoint [ 653.025836][ T5826] usb 3-1: USB disconnect, device number 99 [ 653.053160][ T5914] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 653.180353][ T29] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 653.188865][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 653.208118][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 653.208480][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 653.216985][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 653.248792][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 653.249118][ T5914] usb 6-1: config 11 has an invalid interface number: 9 but max is 0 [ 653.278140][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 653.279077][ T5914] usb 6-1: config 11 has no interface number 0 [ 653.291917][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 653.299354][ T5914] usb 6-1: config 11 interface 9 has no altsetting 0 [ 653.317238][ T5914] usb 6-1: New USB device found, idVendor=4d03, idProduct=3a39, bcdDevice=ef.de [ 653.326920][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.335168][ T5914] usb 6-1: Product: syz [ 653.339758][ T5914] usb 6-1: Manufacturer: syz [ 653.344441][ T5914] usb 6-1: SerialNumber: syz [ 653.352490][T14024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2269'. [ 653.370948][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 653.410745][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.435672][ T29] usb 5-1: config 0 descriptor?? [ 653.461999][T14024] bond_slave_0: entered promiscuous mode [ 653.464870][T14014] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 653.467752][T14024] bond_slave_1: entered promiscuous mode [ 653.492648][T14024] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 653.504212][T14024] bond_slave_0: left promiscuous mode [ 653.509732][T14024] bond_slave_1: left promiscuous mode [ 653.970635][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 653.976878][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 653.990664][ T29] usb 5-1: USB disconnect, device number 98 [ 654.226626][ T5914] cdc_eem 6-1:11.9: probe with driver cdc_eem failed with error -22 [ 654.304647][ T5914] usb 6-1: USB disconnect, device number 65 [ 654.748135][ T30] audit: type=1326 audit(1775478111.931:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 654.856707][ T30] audit: type=1326 audit(1775478111.931:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 654.915925][ T30] audit: type=1326 audit(1775478111.931:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 654.975123][ T30] audit: type=1326 audit(1775478111.931:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.040627][ T30] audit: type=1326 audit(1775478111.931:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.258643][ T30] audit: type=1326 audit(1775478111.931:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.281718][ T30] audit: type=1326 audit(1775478111.931:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.348331][ T29] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 655.377220][ T30] audit: type=1326 audit(1775478111.931:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.466184][ T30] audit: type=1326 audit(1775478112.001:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.530857][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.542792][ T29] usb 5-1: config 0 has no interfaces? [ 655.559813][ T29] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 655.578030][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.604266][ T29] usb 5-1: Product: syz [ 655.615820][ T29] usb 5-1: Manufacturer: syz [ 655.641555][ T30] audit: type=1326 audit(1775478112.001:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.714890][ T30] audit: type=1326 audit(1775478112.001:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.833706][ T30] audit: type=1326 audit(1775478112.001:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 655.885712][ T29] usb 5-1: SerialNumber: syz [ 655.934890][ T29] usb 5-1: config 0 descriptor?? [ 655.944921][ T30] audit: type=1326 audit(1775478112.001:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 656.048255][ T30] audit: type=1326 audit(1775478112.001:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 656.127158][ T30] audit: type=1326 audit(1775478112.001:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 656.224712][ T29] usb 5-1: USB disconnect, device number 99 [ 656.597412][ T30] audit: type=1326 audit(1775478112.001:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 656.715529][ T30] audit: type=1326 audit(1775478112.001:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 656.830944][ T30] audit: type=1326 audit(1775478112.001:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14039 comm="syz.5.2274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feed179c819 code=0x7ffc0000 [ 657.041340][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 657.198508][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 657.206416][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 657.221472][ T10] usb 4-1: config 4 interface 0 has no altsetting 0 [ 657.236509][ T10] usb 4-1: string descriptor 0 read error: -22 [ 657.286468][ T10] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 657.298767][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 657.458410][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 657.489947][ T10] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 657.622092][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 657.682807][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 657.727090][ T10] usb 4-1: media controller created [ 657.803513][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 657.934547][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 658.185265][ T10] usb 4-1: USB disconnect, device number 105 [ 658.246592][T14090] input: syz1 as /devices/virtual/input/input51 [ 658.682509][T14094] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 658.691286][T14094] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 659.014035][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 659.113941][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 659.168083][ T5826] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 659.206328][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 659.227053][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 659.235542][ T10] usb 6-1: config 179 has no interface number 0 [ 659.242083][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 659.253908][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 659.265451][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 659.289731][ T10] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 659.308400][ T10] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 659.327274][ T10] usb 6-1: config 179 interface 65 has no altsetting 0 [ 659.328268][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 659.339879][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 659.342147][ T5826] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 659.349148][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.372392][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 659.384370][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 659.395005][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 659.406735][ T5826] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 659.417697][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.455104][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input52 [ 659.482328][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2300'. [ 659.504058][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.529658][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.713302][T12018] input input52: unable to receive magic message: -110 [ 659.767494][ T5176] input input52: unable to receive magic message: -32 [ 659.787348][ T5176] input input52: unable to receive magic message: -32 [ 659.908565][ T5826] usb 4-1: usb_control_msg returned -32 [ 659.914275][ T5826] usbtmc 4-1:16.0: can't read capabilities [ 659.931594][ T10] usb 6-1: USB disconnect, device number 66 [ 659.937569][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 661.273649][T14154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2311'. [ 661.303942][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 661.395904][T14154] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 662.137234][ T5914] usb 4-1: USB disconnect, device number 106 [ 664.657550][T14176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 664.778257][ T5914] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 664.848095][ T29] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 664.936459][ T5914] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 664.946818][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.960199][ T5914] usb 6-1: Product: syz [ 664.964427][ T5914] usb 6-1: Manufacturer: syz [ 664.981560][ T5914] usb 6-1: SerialNumber: syz [ 665.015062][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 665.029706][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 665.051472][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.068232][ T36] wlan0: Trigger new scan to find an IBSS to join [ 665.093573][ T29] usb 4-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40 [ 665.103441][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.112324][ T29] usb 4-1: Product: 빾橺ﳰ峌ᇢ鄙哈ꀿ誻뀊 [ 665.123884][ T29] usb 4-1: Manufacturer: О [ 665.128713][ T29] usb 4-1: SerialNumber: syz [ 665.266716][T14194] fuse: Bad value for 'fd' [ 665.441483][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 665.554785][ T29] usb 4-1: unit 2 not found! [ 665.562413][ T29] usb 4-1: unit 0 not found! [ 665.703427][ T29] usb 4-1: USB disconnect, device number 107 [ 665.718167][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 665.831746][T14172] netlink: 'syz.5.2316': attribute type 27 has an invalid length. [ 665.865477][T12018] udevd[12018]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.013752][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 666.025592][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.082810][ T9] usb 5-1: Product: syz [ 666.087064][ T9] usb 5-1: Manufacturer: syz [ 666.111967][ T9] usb 5-1: SerialNumber: syz [ 666.134711][ T9] usb 5-1: config 0 descriptor?? [ 666.171316][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 666.177292][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 666.526968][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.559989][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 666.560207][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.783148][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 666.957619][ T9] dib0700: firmware download failed at 7 with -22 [ 667.068577][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 667.154924][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 667.215668][ T5914] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 667.237151][ T5914] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 667.410240][T11978] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 667.611555][T11978] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.638250][T11978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 667.647759][T11978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 667.656417][T11978] usb 3-1: Product: syz [ 667.671956][T11978] usb 3-1: Manufacturer: syz [ 667.686530][T11978] usb 3-1: SerialNumber: syz [ 668.101222][T11978] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 668.333291][T14212] FAULT_INJECTION: forcing a failure. [ 668.333291][T14212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.346627][T14212] CPU: 1 UID: 0 PID: 14212 Comm: syz.2.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.346649][T14212] Tainted: [L]=SOFTLOCKUP [ 668.346653][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 668.346661][T14212] Call Trace: [ 668.346667][T14212] [ 668.346673][T14212] dump_stack_lvl+0xe8/0x150 [ 668.346701][T14212] should_fail_ex+0x412/0x560 [ 668.346722][T14212] _copy_to_user+0x31/0xb0 [ 668.346738][T14212] simple_read_from_buffer+0xe1/0x170 [ 668.346757][T14212] proc_fail_nth_read+0x1bb/0x230 [ 668.346776][T14212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.346794][T14212] ? rw_verify_area+0x2a6/0x4d0 [ 668.346807][T14212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 668.346825][T14212] vfs_read+0x20c/0xa70 [ 668.346837][T14212] ? fdget_pos+0x246/0x320 [ 668.346851][T14212] ? __pfx___mutex_lock+0x10/0x10 [ 668.346868][T14212] ? __pfx_vfs_read+0x10/0x10 [ 668.346881][T14212] ? __fget_files+0x2a/0x420 [ 668.346895][T14212] ? __fget_files+0x3a0/0x420 [ 668.346904][T14212] ? __fget_files+0x2a/0x420 [ 668.346920][T14212] ksys_read+0x150/0x270 [ 668.346935][T14212] ? __pfx_ksys_read+0x10/0x10 [ 668.346954][T14212] do_syscall_64+0x14d/0xf80 [ 668.346969][T14212] ? trace_irq_disable+0x3b/0x150 [ 668.346979][T14212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.346991][T14212] ? clear_bhb_loop+0x40/0x90 [ 668.347011][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.347030][T14212] RIP: 0033:0x7fbd1335d04e [ 668.347049][T14212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 668.347065][T14212] RSP: 002b:00007fbd14217fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 668.347086][T14212] RAX: ffffffffffffffda RBX: 00007fbd142186c0 RCX: 00007fbd1335d04e [ 668.347095][T14212] RDX: 000000000000000f RSI: 00007fbd142180a0 RDI: 0000000000000005 [ 668.347102][T14212] RBP: 00007fbd14218090 R08: 0000000000000000 R09: 0000000000000000 [ 668.347109][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.347116][T14212] R13: 00007fbd13616128 R14: 00007fbd13616090 R15: 00007fbd1373fa48 [ 668.347135][T14212] [ 668.620491][ T29] usb 6-1: USB disconnect, device number 67 [ 668.680101][T11978] usb 3-1: USB disconnect, device number 100 [ 668.689158][T11978] usblp0: removed [ 668.804566][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 668.853097][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 668.888255][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 668.928147][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.055404][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.133717][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.148384][ T9] usb 5-1: USB disconnect, device number 100 [ 669.162822][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.223153][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.270297][T14217] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 669.334446][ T9078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.349206][ T9078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.459052][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 669.553720][T14242] ipip1: entered promiscuous mode [ 669.565276][T14242] ipip1: entered allmulticast mode [ 669.979472][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 669.987834][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 670.001201][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 670.016696][ T9] usb 4-1: config 220 has no interface number 2 [ 670.023224][ T1095] wlan0: Trigger new scan to find an IBSS to join [ 670.023599][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 670.048138][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 670.054985][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 670.063593][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 670.230656][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 670.263527][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.303097][ T9] usb 4-1: Product: syz [ 670.327740][ T9] usb 4-1: Manufacturer: syz [ 670.395844][ T9] usb 4-1: SerialNumber: syz [ 670.653381][T14251] syzkaller0: entered promiscuous mode [ 670.661271][T14251] syzkaller0: entered allmulticast mode [ 670.675033][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.687799][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.831927][ T9] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 670.852438][ T9] uvcvideo 4-1:220.0: No valid video chain found. [ 670.861448][ T9] usb 4-1: selecting invalid altsetting 0 [ 670.875255][ T9] usb 4-1: selecting invalid altsetting 0 [ 670.912993][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 670.945887][ T9] usb 4-1: USB disconnect, device number 108 [ 670.990671][T14261] fuse: Bad value for 'fd' [ 671.099328][ T9078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.222402][ T1095] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 671.308809][ T5939] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 671.498809][ T5939] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 671.549722][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.557808][ T5939] usb 6-1: Product: syz [ 671.585687][ T5939] usb 6-1: Manufacturer: syz [ 671.592185][ T5939] usb 6-1: SerialNumber: syz [ 671.664340][ T5939] usb 6-1: config 0 descriptor?? [ 671.688875][ T5939] hub 6-1:0.0: bad descriptor, ignoring hub [ 671.705076][ T5939] hub 6-1:0.0: probe with driver hub failed with error -5 [ 671.891844][ T5939] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 671.905069][ T5939] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 671.913303][ T5939] dib0700: firmware download failed at 7 with -22 [ 671.938200][ T29] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 672.100272][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 672.112504][ T29] usb 3-1: config 0 has no interfaces? [ 672.136422][ T29] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 672.278189][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.303665][ T29] usb 3-1: config 0 descriptor?? [ 672.531523][T14274] FAULT_INJECTION: forcing a failure. [ 672.531523][T14274] name failslab, interval 1, probability 0, space 0, times 0 [ 672.544431][T14274] CPU: 1 UID: 0 PID: 14274 Comm: syz.2.2351 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.544453][T14274] Tainted: [L]=SOFTLOCKUP [ 672.544457][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 672.544465][T14274] Call Trace: [ 672.544470][T14274] [ 672.544476][T14274] dump_stack_lvl+0xe8/0x150 [ 672.544501][T14274] should_fail_ex+0x412/0x560 [ 672.544522][T14274] should_failslab+0xa8/0x100 [ 672.544538][T14274] __kmalloc_cache_noprof+0x88/0x660 [ 672.544551][T14274] ? __pfx_stack_trace_save+0x10/0x10 [ 672.544564][T14274] ? rtnl_newlink+0x136/0x1be0 [ 672.544580][T14274] rtnl_newlink+0x136/0x1be0 [ 672.544592][T14274] ? kasan_save_track+0x4f/0x80 [ 672.544604][T14274] ? kasan_save_track+0x3e/0x80 [ 672.544616][T14274] ? kasan_save_free_info+0x46/0x50 [ 672.544632][T14274] ? __kasan_slab_free+0x5c/0x80 [ 672.544644][T14274] ? kmem_cache_free+0x187/0x630 [ 672.544657][T14274] ? __dev_queue_xmit+0x16d1/0x3890 [ 672.544672][T14274] ? __netlink_deliver_tap+0x5ad/0x850 [ 672.544684][T14274] ? netlink_deliver_tap+0x19c/0x1b0 [ 672.544695][T14274] ? netlink_unicast+0x7e3/0x9b0 [ 672.544710][T14274] ? netlink_sendmsg+0x813/0xb40 [ 672.544723][T14274] ? __pfx_rtnl_newlink+0x10/0x10 [ 672.544734][T14274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.544764][T14274] ? kasan_quarantine_put+0xbb/0x1f0 [ 672.544776][T14274] ? lockdep_hardirqs_on+0x7a/0x110 [ 672.544794][T14274] ? kmem_cache_free+0x187/0x630 [ 672.544806][T14274] ? nlmon_xmit+0xb0/0x100 [ 672.544827][T14274] ? __lock_acquire+0x6b5/0x2cf0 [ 672.544846][T14274] ? __local_bh_enable_ip+0xd0/0x130 [ 672.544861][T14274] ? lockdep_hardirqs_on+0x7a/0x110 [ 672.544875][T14274] ? __dev_queue_xmit+0x277/0x3890 [ 672.544890][T14274] ? __local_bh_enable_ip+0xd0/0x130 [ 672.544903][T14274] ? __dev_queue_xmit+0x277/0x3890 [ 672.544931][T14274] ? __pfx_rtnl_newlink+0x10/0x10 [ 672.544943][T14274] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 672.544958][T14274] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 672.544970][T14274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.544982][T14274] ? ref_tracker_free+0x693/0x840 [ 672.544993][T14274] ? __copy_skb_header+0xa3/0x4a0 [ 672.545009][T14274] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.545020][T14274] ? __skb_clone+0x63/0x7a0 [ 672.545040][T14274] netlink_rcv_skb+0x232/0x4b0 [ 672.545052][T14274] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.545066][T14274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.545084][T14274] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.545100][T14274] netlink_unicast+0x80f/0x9b0 [ 672.545122][T14274] ? __pfx_netlink_unicast+0x10/0x10 [ 672.545140][T14274] ? netlink_sendmsg+0x650/0xb40 [ 672.545151][T14274] ? skb_put+0x11b/0x210 [ 672.545166][T14274] netlink_sendmsg+0x813/0xb40 [ 672.545183][T14274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.545197][T14274] ? aa_sock_msg_perm+0xf1/0x1b0 [ 672.545216][T14274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.545239][T14274] ____sys_sendmsg+0x972/0x9f0 [ 672.545258][T14274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.545278][T14274] ? import_iovec+0x73/0xa0 [ 672.545293][T14274] ___sys_sendmsg+0x2a5/0x360 [ 672.545312][T14274] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.545369][T14274] ? __fget_files+0x2a/0x420 [ 672.545388][T14274] ? __fget_files+0x3a0/0x420 [ 672.545417][T14274] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.545439][T14274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.545460][T14274] ? __pfx_ksys_write+0x10/0x10 [ 672.545481][T14274] do_syscall_64+0x14d/0xf80 [ 672.545497][T14274] ? trace_irq_disable+0x3b/0x150 [ 672.545507][T14274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.545519][T14274] ? clear_bhb_loop+0x40/0x90 [ 672.545533][T14274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.545545][T14274] RIP: 0033:0x7fbd1339c819 [ 672.545558][T14274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.545568][T14274] RSP: 002b:00007fbd14239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.545582][T14274] RAX: ffffffffffffffda RBX: 00007fbd13615fa0 RCX: 00007fbd1339c819 [ 672.545590][T14274] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 672.545598][T14274] RBP: 00007fbd14239090 R08: 0000000000000000 R09: 0000000000000000 [ 672.545605][T14274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.545612][T14274] R13: 00007fbd13616038 R14: 00007fbd13615fa0 R15: 00007fbd1373fa48 [ 672.545630][T14274] [ 672.978475][ T29] usb 3-1: USB disconnect, device number 101 [ 673.736345][T14285] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 673.759663][T14285] team0: Port device macvlan3 added [ 674.094148][T14297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.112258][T14297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.125617][T14297] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2358'. [ 674.542925][ T5914] usb 6-1: USB disconnect, device number 68 [ 674.811876][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2361'. [ 674.846845][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 674.899144][T14308] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 675.034393][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 675.034418][ T30] audit: type=1400 audit(1775478132.321:1161): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1775478132.331:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14312 comm="syz.6.2364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff956b9c819 code=0x0 [ 675.339894][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2363'. [ 675.386402][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2363'. [ 675.709237][T14325] validate_nla: 44 callbacks suppressed [ 675.709260][T14325] netlink: 'syz.3.2366': attribute type 10 has an invalid length. [ 675.754377][T14325] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2366'. [ 675.811850][T14321] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 675.957552][T14325] team0: Port device virt_wifi0 added [ 676.178137][ T5914] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 676.368671][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 676.402637][ T5914] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 676.417119][ T5914] usb 4-1: config 0 has no interface number 0 [ 676.427119][ T5914] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 676.494110][ T5914] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 676.503965][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.513921][ T5914] usb 4-1: Product: syz [ 676.521057][ T5914] usb 4-1: Manufacturer: syz [ 676.534286][ T5914] usb 4-1: SerialNumber: syz [ 676.546071][ T5914] usb 4-1: config 0 descriptor?? [ 676.563318][T14326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 676.703936][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2367'. [ 676.740476][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2367'. [ 676.758445][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2367'. [ 676.772516][T14333] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2367'. [ 676.782607][T14325] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 676.968320][ T5939] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 677.123147][ T5939] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 677.132691][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.141848][ T5939] usb 3-1: Product: syz [ 677.146392][ T5939] usb 3-1: Manufacturer: syz [ 677.151578][ T5939] usb 3-1: SerialNumber: syz [ 677.193061][ T5914] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 677.394143][ T5914] asix 4-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 126 [ 677.987046][T14339] netlink: 'syz.5.2370': attribute type 4 has an invalid length. [ 678.028183][T14335] netlink: 'syz.2.2369': attribute type 27 has an invalid length. [ 678.352295][ T5826] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 678.521488][ T5826] usb 5-1: config 201 has an invalid interface number: 249 but max is 0 [ 678.619942][ T5826] usb 5-1: config 201 has no interface number 0 [ 678.626308][ T5826] usb 5-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 678.641935][ T5826] usb 5-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 678.684718][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.704626][ T29] usb 4-1: USB disconnect, device number 109 [ 678.722791][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.737382][ T5826] usb 5-1: config 201 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 678.752448][ T5826] usb 5-1: config 201 interface 249 has no altsetting 0 [ 678.913381][ T5826] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 678.923368][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.932172][ T5826] usb 5-1: Product: syz [ 678.939986][ T5826] usb 5-1: Manufacturer: syz [ 678.944630][ T5826] usb 5-1: SerialNumber: syz [ 678.997783][T14345] netlink: 'syz.3.2372': attribute type 1 has an invalid length. [ 679.041213][T14345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.165533][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 679.177557][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 679.188788][ T5826] ath6kl: Failed to submit usb control message: -71 [ 679.203404][ T5826] ath6kl: unable to send the bmi data to the device: -71 [ 679.238100][ T5826] ath6kl: Unable to send get target info: -71 [ 679.245182][ T5826] ath6kl: Failed to init ath6kl core: -71 [ 679.253326][ T5826] ath6kl_usb 5-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 679.268074][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 679.272808][ T5826] usb 5-1: USB disconnect, device number 101 [ 679.278863][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 679.549128][ T5939] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 679.690415][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 679.987903][ T30] audit: type=1326 audit(1775478137.281:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.6.2375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff956b9c819 code=0x0 [ 679.999000][ T9] usb 6-1: config 0 has no interfaces? [ 680.016021][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 680.027575][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.058715][ T9] usb 6-1: config 0 descriptor?? [ 680.127709][T14362] program syz.4.2376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.240591][T14364] __nla_validate_parse: 1 callbacks suppressed [ 680.240606][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 680.482459][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 680.586230][T14348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.599667][ T9] usb 3-1: USB disconnect, device number 102 [ 680.634841][T14348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.714449][T14348] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2373'. [ 680.954758][ T30] audit: type=1800 audit(1775478138.241:1164): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2381" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 681.088071][ T5826] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 681.268595][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 681.285480][ T5826] usb 4-1: unable to get BOS descriptor or descriptor too short [ 681.299371][ T5826] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 681.311571][ T5826] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 681.369770][ T5826] usb 4-1: config 17 has no interface number 0 [ 681.382013][ T5826] usb 4-1: config 17 interface 8 altsetting 6 has an endpoint descriptor with address 0x6C, changing to 0xC [ 681.416192][ T5826] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0xC has invalid maxpacket 43460, setting to 1024 [ 681.446387][ T5826] usb 4-1: config 17 interface 8 altsetting 6 bulk endpoint 0xC has invalid maxpacket 1024 [ 681.460351][ T9] usb 6-1: USB disconnect, device number 69 [ 681.485712][ T5826] usb 4-1: config 17 interface 8 has no altsetting 0 [ 681.508342][ T5826] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 681.524276][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.553601][ T5826] usb 4-1: Product: 憜䪮䤐䩿尀古㚦䧀ዠ㐩㟤닒꺣ﮧ쟑衞ᙣ覯욡῰닦쵻ⵯᡮᲗໟ㿰ᶛ꟩皳䩚㻲ᚩ肏㗈檸됢躌揲̅誶듚叚ࢨբ剧梲ꐁ䎨漏賗麉﫮甸瑎슖ᐫꑝ⨥ꅼั쁑銌雈준䜷ꖜ氋煭ዛ주唹သ넺क़ⷀ㾥牷鋿୊潸麓戹ᚙ㺰췿䎮╩셤푤낌銝⟈䲶Ʃ㯄꺑ῖ瑬峄ᦘ퍚駑쌸 [ 681.628335][ T5826] usb 4-1: Manufacturer: я [ 681.641805][ T5826] usb 4-1: SerialNumber: 个⊼福燁밡좺虥籵脖펼䑴 [ 681.657633][T14368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 681.884142][ T5826] usb 4-1: selecting invalid altsetting 0 [ 681.966903][ T5826] usb 4-1: USB disconnect, device number 110 [ 682.368060][ T29] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 682.524750][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 682.535870][ T29] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 682.554642][ T29] usb 3-1: config 0 has no interface number 0 [ 682.564550][ T29] usb 3-1: config 0 interface 12 has no altsetting 0 [ 682.596150][ T29] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 682.616301][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.687175][ T29] usb 3-1: Product: syz [ 682.726857][ T29] usb 3-1: Manufacturer: syz [ 682.738451][ T29] usb 3-1: SerialNumber: syz [ 682.764373][ T29] usb 3-1: config 0 descriptor?? [ 684.308616][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 684.788120][ T922] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 684.953062][ T922] usb 5-1: Using ep0 maxpacket: 8 [ 684.967130][ T922] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.976018][ T922] usb 5-1: config 0 has no interface number 0 [ 684.982500][ T922] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.993969][ T922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.019236][ T922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.035605][ T922] usb 5-1: config 0 descriptor?? [ 685.055770][ T922] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 685.250421][ T922] usb 5-1: USB disconnect, device number 102 [ 685.511349][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2392'. [ 685.520411][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 685.622444][T14425] tc_dump_action: action bad kind [ 685.692073][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 685.702777][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.856601][ T9] usb 6-1: Product: syz [ 685.865448][ T9] usb 6-1: Manufacturer: syz [ 685.943164][ T9] usb 6-1: SerialNumber: syz [ 685.946508][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.954369][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.055635][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.070777][T14388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.098231][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.123619][T14388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.147660][ T29] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 686.172337][ T29] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 686.199173][ T29] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 686.413078][ T29] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 686.537611][ T29] usb 3-1: USB disconnect, device number 103 [ 686.558076][ T5939] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 686.712150][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.830934][T14416] netlink: 'syz.5.2391': attribute type 27 has an invalid length. [ 686.875800][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 686.895341][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 686.947090][ T5939] usb 5-1: Product: syz [ 686.956953][ T5939] usb 5-1: Manufacturer: syz [ 687.060864][ T5939] usb 5-1: SerialNumber: syz [ 687.344141][ T5939] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 687.455590][T14416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.483824][T14416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.688178][ T922] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 687.843102][ T922] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 687.852054][ T922] usb 4-1: config 201 has no interface number 0 [ 687.858641][ T922] usb 4-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 687.871924][ T922] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 687.908990][ T922] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.928360][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 687.937468][ T922] usb 4-1: config 201 interface 249 has no altsetting 0 [ 687.948064][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 687.951200][ T922] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 687.972283][ T922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.972475][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 688.007621][ T922] usb 4-1: Product: syz [ 688.018426][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 688.028757][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 688.031207][ T922] usb 4-1: Manufacturer: syz [ 688.048052][ T922] usb 4-1: SerialNumber: syz [ 688.390576][ T922] ath6kl: Failed to submit usb control message: -71 [ 688.411188][ T922] ath6kl: unable to send the bmi data to the device: -71 [ 688.443843][ T922] ath6kl: Unable to send get target info: -71 [ 688.496001][ T922] ath6kl: Failed to init ath6kl core: -71 [ 688.528056][ T922] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 688.582744][ T922] usb 4-1: USB disconnect, device number 111 [ 689.017133][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 689.033940][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 689.098044][ T922] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 689.115867][T14459] netlink: 1096 bytes leftover after parsing attributes in process `syz.3.2404'. [ 689.438043][ T922] usb 3-1: Using ep0 maxpacket: 8 [ 689.498556][ T922] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 689.509341][ T922] usb 3-1: config 0 has no interface number 0 [ 689.513344][ T9] usb 6-1: USB disconnect, device number 70 [ 689.615491][ T922] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.799081][ T922] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 689.829917][ T922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.878746][ T5826] usb 5-1: USB disconnect, device number 103 [ 689.894954][ T5826] usblp0: removed [ 689.920367][ T922] usb 3-1: config 0 descriptor?? [ 689.995596][ T922] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 690.127730][T14453] FAULT_INJECTION: forcing a failure. [ 690.127730][T14453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.141911][T14453] CPU: 1 UID: 0 PID: 14453 Comm: syz.2.2402 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.141943][T14453] Tainted: [L]=SOFTLOCKUP [ 690.141956][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 690.141968][T14453] Call Trace: [ 690.141976][T14453] [ 690.141986][T14453] dump_stack_lvl+0xe8/0x150 [ 690.142019][T14453] should_fail_ex+0x412/0x560 [ 690.142055][T14453] _copy_to_user+0x31/0xb0 [ 690.142082][T14453] simple_read_from_buffer+0xe1/0x170 [ 690.142116][T14453] proc_fail_nth_read+0x1bb/0x230 [ 690.142146][T14453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.142179][T14453] ? rw_verify_area+0x2a6/0x4d0 [ 690.142201][T14453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.142231][T14453] vfs_read+0x20c/0xa70 [ 690.142251][T14453] ? fdget_pos+0x246/0x320 [ 690.142276][T14453] ? __pfx___mutex_lock+0x10/0x10 [ 690.142304][T14453] ? __pfx_vfs_read+0x10/0x10 [ 690.142327][T14453] ? __fget_files+0x2a/0x420 [ 690.142351][T14453] ? __fget_files+0x3a0/0x420 [ 690.142367][T14453] ? __fget_files+0x2a/0x420 [ 690.142405][T14453] ksys_read+0x150/0x270 [ 690.142431][T14453] ? __pfx_ksys_read+0x10/0x10 [ 690.142465][T14453] do_syscall_64+0x14d/0xf80 [ 690.142489][T14453] ? trace_irq_disable+0x3b/0x150 [ 690.142507][T14453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.142528][T14453] ? clear_bhb_loop+0x40/0x90 [ 690.142553][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.142574][T14453] RIP: 0033:0x7fbd1335d04e [ 690.142593][T14453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 690.142610][T14453] RSP: 002b:00007fbd14238fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.142633][T14453] RAX: ffffffffffffffda RBX: 00007fbd142396c0 RCX: 00007fbd1335d04e [ 690.142648][T14453] RDX: 000000000000000f RSI: 00007fbd142390a0 RDI: 0000000000000006 [ 690.142662][T14453] RBP: 00007fbd14239090 R08: 0000000000000000 R09: 0000000000000000 [ 690.142674][T14453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.142687][T14453] R13: 00007fbd13616038 R14: 00007fbd13615fa0 R15: 00007fbd1373fa48 [ 690.142720][T14453] [ 690.374611][ T797] usb 3-1: USB disconnect, device number 104 [ 690.481028][T14474] trusted_key: encrypted_key: insufficient parameters specified [ 690.939023][T14480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 691.971983][T14501] sch_tbf: burst 0 is lower than device wg0 mtu (1420) ! [ 692.210776][T14501] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 692.210776][T14501] The task syz.6.2414 (14501) triggered the difference, watch for misbehavior. [ 692.983053][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 693.055194][ T30] audit: type=1326 audit(1775478150.351:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14513 comm="syz.5.2419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feed179c819 code=0x0 [ 694.798402][ T5826] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 694.885763][ T30] audit: type=1326 audit(1775478152.181:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 694.964109][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 694.977481][ T5826] usb 5-1: config 0 has no interfaces? [ 694.984790][ T5826] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 695.002095][ T30] audit: type=1326 audit(1775478152.211:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.029357][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.058537][ T5826] usb 5-1: config 0 descriptor?? [ 695.081475][ T30] audit: type=1326 audit(1775478152.211:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.170484][ T30] audit: type=1326 audit(1775478152.211:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.194576][ T30] audit: type=1326 audit(1775478152.211:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.237792][ T30] audit: type=1326 audit(1775478152.211:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.295233][ T30] audit: type=1326 audit(1775478152.211:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.330386][T14538] kvm: kvm [14537]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 695.339931][T14538] kvm: kvm [14537]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 695.348946][ T30] audit: type=1326 audit(1775478152.211:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.381653][ T30] audit: type=1326 audit(1775478152.211:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14542 comm="syz.6.2426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7ff956b9c819 code=0x7ffc0000 [ 695.427655][ T5826] usb 5-1: USB disconnect, device number 104 [ 696.139131][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 696.451257][T14568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2432'. [ 697.578905][T14578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2435'. [ 697.612658][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 697.667444][T14584] kAFS: unable to lookup cell '' [ 697.680111][T14578] bond_slave_0: entered promiscuous mode [ 697.685878][T14578] bond_slave_1: entered promiscuous mode [ 697.879509][T14578] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 697.928445][T14578] bond_slave_0: left promiscuous mode [ 697.933939][T14578] bond_slave_1: left promiscuous mode [ 698.149131][T14590] netlink: 'syz.2.2439': attribute type 1 has an invalid length. [ 698.189602][T14590] vxlan0: entered promiscuous mode [ 699.019367][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2442'. [ 699.088202][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 699.244634][T14592] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 699.255961][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 699.265185][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.296068][ T9] usb 6-1: Product: syz [ 699.321940][ T9] usb 6-1: Manufacturer: syz [ 699.360016][ T9] usb 6-1: SerialNumber: syz [ 699.360354][T14600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 700.540106][T14594] netlink: 'syz.5.2441': attribute type 27 has an invalid length. [ 701.271966][T14594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.282328][T14594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.709255][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 701.728109][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 701.748989][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 701.776108][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 701.858230][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 701.858250][ T30] audit: type=1326 audit(1775478159.161:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.3.2449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48e4d9c819 code=0x0 [ 702.217375][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 702.388246][ T5914] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 702.558162][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 702.568231][ T5914] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 702.575735][ T5914] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 702.609841][ T5914] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.625891][ T5914] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 702.633706][ T5914] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 702.646051][ T5914] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.660708][ T5914] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 702.676000][ T5914] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 702.687646][ T5914] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.737555][ T5914] usb 3-1: string descriptor 0 read error: -22 [ 702.754514][ T5914] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 702.772122][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.794937][ T5914] adutux 3-1:168.0: interrupt endpoints not found [ 702.995089][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 703.049978][ T5914] usb 3-1: USB disconnect, device number 105 [ 703.134013][ T9] usb 6-1: USB disconnect, device number 71 [ 703.220794][ T87] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 703.231923][ T9076] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.762260][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2464'. [ 705.027406][ T30] audit: type=1326 audit(1775478162.161:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff956b9c819 code=0x0 [ 705.219200][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 705.415622][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 705.481292][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.587338][ T9] usb 4-1: config 0 descriptor?? [ 705.610691][ T9] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 706.494820][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2463'. [ 706.738151][ T9] gspca_sunplus: reg_w_riv err -110 [ 706.743504][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 707.119866][ T30] audit: type=1326 audit(1775478164.421:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14699 comm="syz.4.2473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f56f9c819 code=0x5ffc0000 [ 708.095156][ T9] usb 4-1: USB disconnect, device number 112 [ 710.044387][T14714] ================================================================== [ 710.052525][T14714] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 710.060293][T14714] Read of size 8 at addr ffff888076625f60 by task syz.6.2478/14714 [ 710.068213][T14714] [ 710.070562][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.6.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.070591][T14714] Tainted: [L]=SOFTLOCKUP [ 710.070600][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.070613][T14714] Call Trace: [ 710.070621][T14714] [ 710.070631][T14714] dump_stack_lvl+0xe8/0x150 [ 710.070663][T14714] print_report+0xba/0x230 [ 710.070688][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.070719][T14714] kasan_report+0x117/0x150 [ 710.070746][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.070780][T14714] af_alg_pull_tsgl+0x1c6/0x740 [ 710.070817][T14714] skcipher_recvmsg+0x5df/0x1140 [ 710.070849][T14714] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 710.070872][T14714] ? aa_sock_msg_perm+0xf1/0x1b0 [ 710.070903][T14714] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 710.070924][T14714] ? security_socket_recvmsg+0x7e/0x2c0 [ 710.070948][T14714] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 710.070970][T14714] sock_recvmsg+0x172/0x1b0 [ 710.070992][T14714] ____sys_recvmsg+0x1e6/0x4a0 [ 710.071023][T14714] ? __pfx_____sys_recvmsg+0x10/0x10 [ 710.071057][T14714] ? import_iovec+0x73/0xa0 [ 710.071083][T14714] ___sys_recvmsg+0x215/0x590 [ 710.071109][T14714] ? futex_private_hash_put+0x13b/0x170 [ 710.071135][T14714] ? __pfx____sys_recvmsg+0x10/0x10 [ 710.071181][T14714] ? __fget_files+0x3a0/0x420 [ 710.071204][T14714] __x64_sys_recvmsg+0x1ba/0x2a0 [ 710.071232][T14714] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 710.071263][T14714] ? rcu_is_watching+0x15/0xb0 [ 710.071296][T14714] do_syscall_64+0x14d/0xf80 [ 710.071323][T14714] ? trace_irq_disable+0x3b/0x150 [ 710.071342][T14714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.071363][T14714] ? clear_bhb_loop+0x40/0x90 [ 710.071386][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.071406][T14714] RIP: 0033:0x7ff956b9c819 [ 710.071426][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.071445][T14714] RSP: 002b:00007ff9579a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 710.071469][T14714] RAX: ffffffffffffffda RBX: 00007ff956e15fa0 RCX: 00007ff956b9c819 [ 710.071484][T14714] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 710.071498][T14714] RBP: 00007ff956c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 710.071512][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.071525][T14714] R13: 00007ff956e16038 R14: 00007ff956e15fa0 R15: 00007ff956f3fa48 [ 710.071548][T14714] [ 710.071556][T14714] [ 710.321194][T14714] Allocated by task 14714: [ 710.325627][T14714] kasan_save_track+0x3e/0x80 [ 710.330337][T14714] __kasan_kmalloc+0x93/0xb0 [ 710.334953][T14714] __kmalloc_noprof+0x35c/0x760 [ 710.339824][T14714] sock_kmalloc+0xd6/0x160 [ 710.344268][T14714] skcipher_recvmsg+0x54d/0x1140 [ 710.349232][T14714] sock_recvmsg+0x172/0x1b0 [ 710.353763][T14714] ____sys_recvmsg+0x1e6/0x4a0 [ 710.358562][T14714] ___sys_recvmsg+0x215/0x590 [ 710.363273][T14714] __x64_sys_recvmsg+0x1ba/0x2a0 [ 710.368244][T14714] do_syscall_64+0x14d/0xf80 [ 710.372867][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.378790][T14714] [ 710.381133][T14714] The buggy address belongs to the object at ffff888076625f40 [ 710.381133][T14714] which belongs to the cache kmalloc-32 of size 32 [ 710.395097][T14714] The buggy address is located 0 bytes to the right of [ 710.395097][T14714] allocated 32-byte region [ffff888076625f40, ffff888076625f60) [ 710.409535][T14714] [ 710.411883][T14714] The buggy address belongs to the physical page: [ 710.418308][T14714] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76625 [ 710.427110][T14714] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 710.434243][T14714] page_type: f5(slab) [ 710.438252][T14714] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 710.446858][T14714] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 710.455462][T14714] page dumped because: kasan: bad access detected [ 710.461889][T14714] page_owner tracks the page as allocated [ 710.467619][T14714] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x1d2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14657, tgid 14656 (syz.2.2460), ts 710037310169, free_ts 658522516632 [ 710.488835][T14714] post_alloc_hook+0x231/0x280 [ 710.493639][T14714] get_page_from_freelist+0x24dc/0x2580 [ 710.499224][T14714] __alloc_frozen_pages_noprof+0x18d/0x380 [ 710.505089][T14714] allocate_slab+0x77/0x660 [ 710.509631][T14714] refill_objects+0x331/0x3c0 [ 710.514343][T14714] __pcs_replace_empty_main+0x2e6/0x730 [ 710.519916][T14714] __kmalloc_cache_noprof+0x392/0x660 [ 710.525312][T14714] kmem_cache_free+0x15b/0x630 [ 710.530098][T14714] __io_req_caches_free+0x1c1/0x270 [ 710.535340][T14714] io_queue_deferred+0x81/0x3e0 [ 710.540225][T14714] io_drain_req+0x395/0x590 [ 710.544764][T14714] io_submit_sqes+0x15b2/0x24e0 [ 710.549645][T14714] __se_sys_io_uring_enter+0x2c6/0x1960 [ 710.555224][T14714] do_syscall_64+0x14d/0xf80 [ 710.559853][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.565770][T14714] page last free pid 10 tgid 10 stack trace: [ 710.571763][T14714] __free_frozen_pages+0xc2b/0xdb0 [ 710.576881][T14714] pcpu_depopulate_chunk+0x45f/0x500 [ 710.582185][T14714] pcpu_balance_workfn+0x379/0x1010 [ 710.587390][T14714] process_scheduled_works+0xb6e/0x18c0 [ 710.592937][T14714] worker_thread+0xa53/0xfc0 [ 710.597530][T14714] kthread+0x388/0x470 [ 710.601595][T14714] ret_from_fork+0x51e/0xb90 [ 710.606192][T14714] ret_from_fork_asm+0x1a/0x30 [ 710.610967][T14714] [ 710.613291][T14714] Memory state around the buggy address: [ 710.618941][T14714] ffff888076625e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 710.627012][T14714] ffff888076625e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 710.635074][T14714] >ffff888076625f00: fc fc fc fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 710.643132][T14714] ^ [ 710.650326][T14714] ffff888076625f80: 00 00 00 00 fc fc fc fc 00 00 00 fc fc fc fc fc [ 710.658385][T14714] ffff888076626000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 710.666441][T14714] ================================================================== [ 710.743466][T14714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 710.750732][T14714] CPU: 1 UID: 0 PID: 14714 Comm: syz.6.2478 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.761697][T14714] Tainted: [L]=SOFTLOCKUP [ 710.766042][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.776114][T14714] Call Trace: [ 710.779418][T14714] [ 710.782368][T14714] vpanic+0x56c/0xa60 [ 710.786389][T14714] ? __pfx_vpanic+0x10/0x10 [ 710.790927][T14714] ? __pfx___schedule+0x10/0x10 [ 710.795808][T14714] panic+0xc5/0xd0 [ 710.799560][T14714] ? __pfx_panic+0x10/0x10 [ 710.804008][T14714] ? preempt_schedule_common+0x82/0xd0 [ 710.809500][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.814583][T14714] check_panic_on_warn+0x89/0xb0 [ 710.819550][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.824614][T14714] end_report+0x73/0x180 [ 710.828891][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.833959][T14714] kasan_report+0x128/0x150 [ 710.838495][T14714] ? af_alg_pull_tsgl+0x1c6/0x740 [ 710.843555][T14714] af_alg_pull_tsgl+0x1c6/0x740 [ 710.848451][T14714] skcipher_recvmsg+0x5df/0x1140 [ 710.853423][T14714] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 710.858824][T14714] ? aa_sock_msg_perm+0xf1/0x1b0 [ 710.863798][T14714] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 710.869113][T14714] ? security_socket_recvmsg+0x7e/0x2c0 [ 710.874688][T14714] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 710.880082][T14714] sock_recvmsg+0x172/0x1b0 [ 710.884610][T14714] ____sys_recvmsg+0x1e6/0x4a0 [ 710.889404][T14714] ? __pfx_____sys_recvmsg+0x10/0x10 [ 710.894726][T14714] ? import_iovec+0x73/0xa0 [ 710.899251][T14714] ___sys_recvmsg+0x215/0x590 [ 710.903929][T14714] ? futex_private_hash_put+0x13b/0x170 [ 710.909469][T14714] ? __pfx____sys_recvmsg+0x10/0x10 [ 710.914671][T14714] ? __fget_files+0x3a0/0x420 [ 710.919341][T14714] __x64_sys_recvmsg+0x1ba/0x2a0 [ 710.924270][T14714] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 710.929724][T14714] ? rcu_is_watching+0x15/0xb0 [ 710.934487][T14714] do_syscall_64+0x14d/0xf80 [ 710.939076][T14714] ? trace_irq_disable+0x3b/0x150 [ 710.944089][T14714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.950144][T14714] ? clear_bhb_loop+0x40/0x90 [ 710.954812][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.960694][T14714] RIP: 0033:0x7ff956b9c819 [ 710.965111][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.984725][T14714] RSP: 002b:00007ff9579a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 710.993133][T14714] RAX: ffffffffffffffda RBX: 00007ff956e15fa0 RCX: 00007ff956b9c819 [ 711.001109][T14714] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 711.009082][T14714] RBP: 00007ff956c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 711.017053][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.025022][T14714] R13: 00007ff956e16038 R14: 00007ff956e15fa0 R15: 00007ff956f3fa48 [ 711.033017][T14714] [ 711.036390][T14714] Kernel Offset: disabled [ 711.040711][T14714] Rebooting in 86400 seconds..