last executing test programs: 7m31.058115245s ago: executing program 1 (id=97): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x680}, {r2, 0x9622}, {r1, 0x200}], 0x3, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005608000002000000a502010007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x20044000) socket$kcm(0x29, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m28.460752833s ago: executing program 1 (id=108): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d0001000000000000"], 0x1c}], 0x1}, 0x310) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x70, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x9, 0x130, 0x9, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "04c8d28cf647"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1191, 0x6, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x0, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0xb0, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x9, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xc0, 0xdc, 0x2, 0x10, 0x48}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40f}}, {0x23, &(0x7f0000000440)=@string={0x23, 0x3, "cd34258d33edc9e92a7edc414d08daf2e4fa59cd774ba9454d1dc56f1df4b894f7"}}, {0xce, &(0x7f0000000480)=@string={0xce, 0x3, "89d7a554c878d7fb0067865a1a43798c9adb60cf098282c8fd6a38e4934bcd2903638fe566727de115abf5f6154136524e038c107d68c2a45caf947220ee4709becceca0c28ed078268cca8815183f0d4d5d5ea5e08526a0eea80244d042086a55006c09732e590ba94cbfce76c6c0ed8b87fa918e2d919398073ede9f42d5b189aaaa35c2a8264bb11251ce904401dee5f1288566da342132629e5a8c2ebba8cd4577a5acb2a0da69d97e316552e409930a6375d7eb1ef95356a800a368424ff47243ba1b45a13b5f852454"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB="24280fad181f94e4e9647ac0f161b058613b4bd4b24211a2e437ec72757f5015d316ecd658968230253b13791657754e31616e63a34643ebd9442ed492b897aed7fa91431448d27cd6fba99b48db4f7fbc2c88d7e5b35d8617eea6aaddbdd255b647bd627663127cb0237c0833c4648847", @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7m28.058080206s ago: executing program 2 (id=112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 7m27.932871169s ago: executing program 0 (id=113): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0) setns(0xffffffffffffffff, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) syz_usb_disconnect(0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x80010, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x100, &(0x7f0000000040)=0x4, 0x0, 0x4) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x8da, 0x9, 0xfb, 0x9, 0x5, 0x4, 0x81, 0x8, 0x9, 0x77, 0x0, 0x316}, {0x81, 0x3, 0x10, 0xfe, 0x2, 0x7, 0x3, 0x9e, 0x7, 0x3b, 0xa6, 0xfe, 0x10000000}, {0x1c38, 0x9, 0x80, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x8, 0x4, 0x0, 0x68d}], 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m27.069914728s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002240)=@newtfilter={0xe94, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe68, 0x2, [@TCA_FW_ACT={0xe64, 0x4, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x5}, {0x0, 0x2, 0x7, 0xff, 0x64, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x7ffd, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0x3, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x6, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x100009, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3, 0x4}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0xffffffff, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb26, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x80, 0x10fff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x204, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x1}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xdffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x81, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x7}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x3, 0x1, 0x5}, {0x7fd, 0xde, 0x9, 0x6, 0x7, 0x4003ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0x7, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x3}, {0x0, 0x573, 0x4, 0x8, 0x5, 0x4}, {0x3, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x40006ed}, {0x79, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22a, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x6, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x9, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x2, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x3fb8}, {0xe4, 0x0, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0x4}, {0x400, 0x5, 0x9, 0x2e, 0xd, 0x3}, {0x7, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x2, 0x80, 0x9, 0xd454}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x2, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1, 0xdcdc}, {0x4, 0xfffffffffffffffd}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x80}, 0x800) 7m26.977694778s ago: executing program 4 (id=119): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f00000004c0)=""/145, 0x91}], 0x4}, 0x2000) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000040)={@empty, @empty}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0xa0}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) 7m26.913454466s ago: executing program 4 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000feb9df25030000005800018044000400200001000a00000000000000000000000000ffffe00000000000002e00000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 7m26.883731926s ago: executing program 2 (id=121): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x65, 0x5, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x20009}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r2 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d", 0x25, r2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x464d7000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) eventfd2(0x8, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) 7m26.760979453s ago: executing program 4 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r3, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r5, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYBLOB="0000d11f64ef99a7ea556fcafc72706fb2aeda896f3cd77f980b72f29ca489237eac69edacff9b52049e67cdd8c79feefd3b660aaaee8f2b24888ed35786ae618b71c8e17242ec859aad1d94ee88fc6dceae6129cfbbeb"], 0x38}}, 0x0) 7m26.646480574s ago: executing program 4 (id=123): r0 = syz_open_dev$video(&(0x7f0000000280), 0xff, 0x40) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000002c0)=0x1000) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) 7m25.498313971s ago: executing program 3 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="380000002100000829b57000ffdbdf250a80200cfd00000510000000080010001100000014000100fc"], 0x38}, 0x1, 0x0, 0x0, 0x400c0d4}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000040)='0', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 7m25.489191119s ago: executing program 2 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x80) 7m25.446499284s ago: executing program 3 (id=128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006c000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe800000000000000000000000000000000002000000000000080000000800000000000000000000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 7m25.37082372s ago: executing program 4 (id=129): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b000101000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000140)=""/217, 0xd9}], 0x2) syz_usb_disconnect(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x1, 0x9, 0x1000008, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}, @remote}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000107d1e2e2c000000000001090224000001030000000921000000010300000000000000000000003e4c066668035b3c689fc23d0d780420427e75f8e76eb504ac458ce97e015b8b7a947161dede77457b2bd7872c297f851fdd277846f86d5c8e28a86ae7f03ad5aa86842c6d282ffb397c0a9926c5128e8978a5f87c4886af44c37447d4a5f38cdc273c24e3ab0ab5bcc04989cfa06857e7ccb8"], 0x0) 7m25.35213226s ago: executing program 1 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x70}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) read$FUSE(r2, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_clone3(&(0x7f00000004c0)={0x800000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2d}, &(0x7f0000000340)=""/190, 0xbe, &(0x7f0000000440)=""/20, &(0x7f0000000480)=[0x0, 0x0], 0x2, {r1}}, 0x58) r5 = getpid() tgkill(r5, r5, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000540)=0x0) r7 = getpgrp(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000580)={0x0, 0x0}) syz_clone3(&(0x7f0000002940)={0x40000, &(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680), {0x9}, &(0x7f00000027c0)=""/80, 0x50, &(0x7f0000002840)=""/138, &(0x7f0000002900)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) fcntl$getownex(r1, 0x10, &(0x7f00000029c0)={0x0, 0x0}) r11 = getpid() syz_pidfd_open(r11, 0x0) syz_clone3(&(0x7f0000002a40)={0x19100000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), {0x3a}, &(0x7f0000000200)=""/69, 0x45, &(0x7f0000000180)=""/45, &(0x7f0000002a00)=[r3, r4, r5, r6, r7, r8, r9, r10, r11], 0x9, {r2}}, 0x58) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 7m25.302774464s ago: executing program 2 (id=131): r0 = socket$inet(0x2, 0x3, 0x33) unshare(0x24020400) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x229002, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = epoll_create(0xff9) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x9000001c}) 7m25.278162779s ago: executing program 3 (id=132): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a010200000000000000000200ffff0800010073797a30000000000900030573797a320000000020000000020a03"], 0xa0}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$kcm(0x11, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x9364e10d1ef1b40d) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000025c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="31cd5284bee7751b705264f48c26fe9e282071f9504db76968961abe098a0e866d26b630894d5999aae79cebe0d368b2cf3a5e5189e1f035c4a5f7b537132405c8e9ce0a0f521c96753e80328ad40ebefba1d458e373460fd0ffdc91528849081fe3e13e1314669800c29caa77e0d44472881b4064ebc5c78000a829511fd45e157a9f99ed0068bc7cc9418c294923933020a870a714fe6fb80b98544534ed5efcdcde41803fac63ab7120a7d47fd7432802f8ca2e000a1c78209654a2de73ae7d6538eef7c9", @ANYBLOB="355d47f658d82d55ecf4345ec9e8389db1027544fd8a60560d648f75f32237b49c2f5d09b0b14d8f33e5756bd8f97d3bd3462d34f81ee0850c2f7ea9433f16ffa79c74a88c671d2e82914d4cdf7af4cce59bf6e4d07c18db6b4bd152e793bee42249bd80525e8a54b8fed1ed27ad49d23ff5808bff83b7793700659a46ec5f250b8b51c31f40aa65fc28289733205e0fa2ef1f1f1d291214e9e1335993a0e490c9a2a300bf6176464221f2a568ac119ee7f1eb54badb9d7eab15535f", @ANYRES64=r3, @ANYRESHEX=r2], 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r5, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x44400, 0x44) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) dup3(r8, r5, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x500, 0x2d0, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socket$alg(0x26, 0x5, 0x0) 7m25.078166273s ago: executing program 1 (id=133): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp6(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0xfffffffc, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f00000000c0), 0x4) readv(r6, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) ioprio_set$uid(0x3, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x64, {"400f01784f04b45c20c8c801000000440f22c0420f01c9f3470f01bbf9000000f00fbb7d88672b3666baf80cb85c5a6c8eef66bafc0cb8412ee608ef460f07b9800000c00f3235001000000f3064450f005006"}}], 0x64}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r8 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r8, 0xf}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"]) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=[@rdmsr={0x32, 0x18, {0x9de}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x636}, @code={0x1, 0x4a, {"b8010000000f01c1c4827d79247bc401f9d5d6d0f366baf80cb8700bf48def66bafc0cb80e000000ef0f0866b819010f00d0c4e1815944b209"}}], 0x92}) 7m24.839944621s ago: executing program 3 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000500)=""/174, 0xae}], 0x1) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) lgetxattr(0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000500)=""/174, 0xae}], 0x1) (async) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) 7m24.764557223s ago: executing program 0 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000f705000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e25, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}}}}, 0x36) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f0000000300)={0xc04, 0x0, 0x1}, 0x18, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m23.41817491s ago: executing program 1 (id=136): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) io_uring_setup(0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=""/231, 0xe7}], 0x1}, 0x2}], 0x1, 0x60, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) r5 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000200001030000000000000000020000000000000000000000140011005d756d6d793000"/48], 0x30}}, 0x0) 7m23.286297472s ago: executing program 0 (id=137): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (fail_nth: 3) 7m23.206662895s ago: executing program 3 (id=138): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x3c, 0x200, 0x70bd26, 0x25dfdbfc, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7m22.77441669s ago: executing program 0 (id=139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cd", 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="29ddb680bbd25e7a", 0x8}], 0x1}}], 0x1, 0x20000040) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x8d, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 7m22.681737487s ago: executing program 3 (id=140): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0xfffffffffffffa58, 0x1) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="a0d1ea2eb2c6e8ead8d4ce885e5f6025dfeb413eae62d72eb650e13cbdb9ee2aa086959c44322caeaeb7cf472d667930d4a7f990181bcda40e2d3264372e5ad3acb6736593490bc3cce3f6e2", 0x4c}, {&(0x7f00000004c0)="1aa658741fc4d80767b2c9ff929cf7e0e674b7e0edb8b6656ce9873b9539ea0aed413f9b2930bc8d8b56284f279c08fe2b53978a8b25207c59b63d863798ef08c1f56a49e8564c8e4fb845439ede788c87ea1222c292ce6dfc7c31f26c0ed6eaaa4ddb106a8702926bf6832758255733b9a7f68f58c7aedcfff106d3108bdd3e545ef0a3cea1bb3fb615952bf21a9288cf2b965d2b4dcd91b3bc1a", 0x9b}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x4008044}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 7m20.376647762s ago: executing program 0 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 7m20.290279181s ago: executing program 2 (id=142): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x10, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}}, 0x20008040) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) r4 = syz_io_uring_setup(0x239, &(0x7f0000000140)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r7, &(0x7f0000000440)=""/36, 0x24, 0x40001302, 0x0, 0x0) 7m19.846965383s ago: executing program 4 (id=143): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) write$FUSE_WRITE(r2, 0x0, 0x0) 7m19.352362656s ago: executing program 1 (id=144): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 7m18.878288643s ago: executing program 0 (id=145): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/181, 0xb5}], 0x2}) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 7m3.848529145s ago: executing program 32 (id=140): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0xfffffffffffffa58, 0x1) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="a0d1ea2eb2c6e8ead8d4ce885e5f6025dfeb413eae62d72eb650e13cbdb9ee2aa086959c44322caeaeb7cf472d667930d4a7f990181bcda40e2d3264372e5ad3acb6736593490bc3cce3f6e2", 0x4c}, {&(0x7f00000004c0)="1aa658741fc4d80767b2c9ff929cf7e0e674b7e0edb8b6656ce9873b9539ea0aed413f9b2930bc8d8b56284f279c08fe2b53978a8b25207c59b63d863798ef08c1f56a49e8564c8e4fb845439ede788c87ea1222c292ce6dfc7c31f26c0ed6eaaa4ddb106a8702926bf6832758255733b9a7f68f58c7aedcfff106d3108bdd3e545ef0a3cea1bb3fb615952bf21a9288cf2b965d2b4dcd91b3bc1a", 0x9b}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x4008044}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 6m51.122044109s ago: executing program 33 (id=145): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/181, 0xb5}], 0x2}) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 6m51.002277651s ago: executing program 34 (id=144): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x118, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) 6m49.33850738s ago: executing program 35 (id=142): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x10, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}}, 0x20008040) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) r4 = syz_io_uring_setup(0x239, &(0x7f0000000140)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r7, &(0x7f0000000440)=""/36, 0x24, 0x40001302, 0x0, 0x0) 6m48.509448485s ago: executing program 36 (id=143): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) write$FUSE_WRITE(r2, 0x0, 0x0) 5.626313014s ago: executing program 7 (id=1604): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2a, 0xa, 0xffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x105) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x0, 0xb, 0x4, 0x100, 0x8, {}, {0x0, 0x1, 0xd, 0xf, 0xe, 0xcc, "7cd4254c"}, 0x6, 0x4, {}, 0x0, 0x0, r6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0xa, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.440389801s ago: executing program 9 (id=1608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000fff400000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 5.314144186s ago: executing program 6 (id=1610): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106}}, 0x20) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1d0}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x6000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x44000) (async) socket$vsock_stream(0x28, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2003, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) (async) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2, 0x80805, 0x0) 5.206024368s ago: executing program 9 (id=1611): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000380)={{0x3, 0x6, 0x8, 0x9, 'syz0\x00', 0x4}, 0x3, 0x10, 0x6c, r1, 0x3, 0x2, 'syz1\x00', &(0x7f0000000240)=['*\x00', 'TIPC\x00', '-*@-\x00'], 0xc}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) clock_adjtime(0x0, &(0x7f0000000e00)={0xa627, 0x0, 0x100000000000000, 0xc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x11, r4, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010128bd7000fcdbdf25010000000000000007410000004c001800000000690000000000000000000000910500000000000000000000000000000002000000000000000000000000000000000000000008000000000000000000000000000000000024ccec095315dc354fccda8e9a9e493b41e1a214d621fa9e784c78e6d1c439059da67ba0c65a49e32e6389d8283310dcbf9437b8f520aa031f6e8d18f2c30cb699addb788de14f7c69804e72adbf905fa8e53f313e8f56106318608c11d7a2a39f6f8ba81ab444d939e47232b6722722b39ea706b37bef03a02b42760800000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x9080) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mbind(&(0x7f00001ed000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x7, 0x7fffffffffffffff, 0x5) 5.066215814s ago: executing program 5 (id=1612): sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0xfffffffc, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2, 0x8000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x4040854) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x5, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x6, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x1, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0xc, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xfe, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x7, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfe, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x3, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1000}]}}}]}, 0x3c}}, 0x0) (rerun: 32) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r8 = dup3(r0, r3, 0x80000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000280)={0x1ff, 0x0, 0xeeee8002, 0x1000, &(0x7f0000011000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.023525973s ago: executing program 5 (id=1613): connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005608000002000000a502010007000000b70000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.976656592s ago: executing program 6 (id=1614): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000003e0007012abd7000fcdbdf25047c00000450fa96b4c4a37e8f67d68355f72437a0"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x40850) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x0, 0x0) 4.826437554s ago: executing program 9 (id=1615): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = semget$private(0x0, 0x5, 0x2c6) semop(r1, &(0x7f0000000000)=[{0x1, 0x5, 0xc00}, {0x4, 0x17, 0x1800}, {0x1, 0x7fff, 0x1800}], 0x3) (async) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022ea0021307aac000000"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) 4.796510164s ago: executing program 6 (id=1616): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f00000003c0)={0x1, 0x0, 0x2, 0x4, {0x9, 0x0, 0x3, 0x1097}}) (async) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './control/file0', [{0x20, '# '}]}, 0xfffffcac) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.052920125s ago: executing program 7 (id=1620): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffe) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffe) (async) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) (async) 3.884894752s ago: executing program 5 (id=1622): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x3, @addr=0x101}, 0x8, 0x7, 0x7}) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x2) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="4dd3509a24531082b406b386f34d0bd8", 0x10}], 0x1}}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r5}, 0x38) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x2010008, 0x4, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x130, 0x0, 0x7a4552d7, {0x5, 0x1, 0x0, '\x00', {0x1, 0xdea, 0x10, 0xfff, r8, 0x0, 0x4000, '\x00', 0x80000001, 0x29, 0x5, 0x358, {0x100}, {0x1f96, 0x7fff}, {0x2, 0x7}, {0x7, 0xc}, 0x8, 0x80e16, 0x3, 0x7}}}}) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, r8, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={0x0, &(0x7f0000000140)=""/91, &(0x7f00000000c0), &(0x7f00000000c0), 0x3, r5}, 0x38) 3.741586722s ago: executing program 7 (id=1624): r0 = io_uring_setup(0x3ead, &(0x7f0000000080)={0x0, 0xc95e, 0x2000, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000001140)=@usbdevfs_driver={0xb23, 0x200, &(0x7f0000000140)="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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001500)={0x55, 0x0, &(0x7f0000001480)=[{&(0x7f0000001180)=""/176, 0xb0}, {&(0x7f0000001240)=""/209, 0xd1}, {&(0x7f0000001340)=""/211, 0xd3}, {&(0x7f0000001440)=""/54, 0x36}], &(0x7f00000014c0)=[0x1, 0x401, 0xffffffffffff4046, 0x1, 0xaeec, 0x2, 0x2], 0x4}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001680)=0x9, 0x4) io_setup(0x8, &(0x7f00000017c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001580)={r3, r3, 0x1c, 0x0, @void}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) r6 = syz_open_dev$audion(&(0x7f0000001700), 0x4, 0x400001) io_submit(r2, 0x2, &(0x7f0000001780)=[&(0x7f0000001640)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f00000015c0)="80ff7cc28baf38d1f125c2cada736cc273ec9b7d61e17906ce7a8885d94ab1aa867816b1b77c9e9f666ce8f788f8fbd6cad89bf83c3e541f1d22fc822efd42b3b239360f2fc30ee15a8f", 0x4a, 0x3}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x7, r5, &(0x7f00000016c0)="bdb6b98dd10df0594cde17fb2f34e4e8c42c3d07ac61b19103258b19e32a995a4db1ca63b45b7a763844ae0ec5724035c216093216c28294dcbcfbf6868671d3", 0x40, 0x8, 0x0, 0x2, r1}]) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1) copy_file_range(r0, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x101, 0x0) fcntl$setstatus(r6, 0x4, 0x40000) syz_usb_connect(0xc97a526455be9ac4, 0x52, &(0x7f0000001540)=ANY=[@ANYBLOB="12010000c378441dc500"/29], 0x0) 3.72722742s ago: executing program 6 (id=1625): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg$unix(r2, &(0x7f0000005900)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/222, 0xde}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000016c0)=""/175, 0xaf}], 0x1, &(0x7f0000001780)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001840), 0x6e, &(0x7f0000001d40)=[{&(0x7f00000018c0)=""/151, 0x97}, {&(0x7f0000001980)=""/188, 0xbc}, {&(0x7f0000001a40)=""/242, 0xf2}, {&(0x7f0000001b40)=""/212, 0xd4}, {&(0x7f0000001c40)=""/232, 0xe8}], 0x5, &(0x7f0000001dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/172, 0xac}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)}], 0x5, &(0x7f0000004080)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004100), 0x6e, &(0x7f0000005240)=[{&(0x7f0000004180)=""/154, 0x9a}, {&(0x7f0000004240)=""/4096, 0x1000}], 0x2, &(0x7f0000005280)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000052c0)=@abs, 0x6e, &(0x7f0000005780)=[{&(0x7f0000005340)=""/154, 0x9a}, {&(0x7f0000005400)=""/50, 0x32}, {&(0x7f0000005440)=""/221, 0xdd}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/243, 0xf3}, {&(0x7f0000005740)=""/57, 0x39}], 0x6, &(0x7f0000005800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x6, 0x40000000, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x1f, 0x3, 0x17, 0x1}, 0x50, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) fanotify_init(0x4000, 0x0) unshare(0x2040400) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 3.625645612s ago: executing program 5 (id=1626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x4, 0x0, 0xb, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x4, 0x80, 0x9c, 0x16, @time={0x38, 0x7}, {0xe, 0xe}, {0x2, 0x9}, @connect={{0x6, 0x2}, {0x9, 0x9}}}, {0x0, 0x7, 0x7, 0x8, @time={0x85, 0x2}, {0x1, 0x4}, {0x6, 0xe}, @connect={{0x1, 0x4}, {0xe, 0x8}}}, {0xa, 0xb, 0x7, 0x7c, @time={0x5, 0x6}, {0x6, 0x9b}, {0x4, 0xe9}, @addr={0xfa, 0x7f}}, {0xb, 0x7, 0x9, 0x7, @time={0x81, 0x5}, {0xb, 0x10}, {0x0, 0xc}, @ext={0x0, 0x0}}, {0x9, 0xc1, 0x2, 0x3, @time={0x5, 0x3ff}, {0x60, 0x1}, {0x9, 0x8}, @queue={0x1, {0x6, 0x801}}}], 0x8c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) dup(r2) r5 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0xffff0000, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000d4) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xfb8, 0x1109, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x83, 0xc0, 0xda, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xc55}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7c, 0x2, 0x21}}}}}]}}]}}, 0x0) 3.264566752s ago: executing program 9 (id=1628): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 3.04287239s ago: executing program 7 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000003010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) 3.041815133s ago: executing program 9 (id=1630): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000001c40)=ANY=[@ANYRES32=0x0], 0x3a8}, 0x1, 0x0, 0x0, 0x24008884}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r0, 0x402, 0x8000003b) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x1, 0xb3}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47bf, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffff8}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000001b80)=[{{&(0x7f00000005c0)=@nl=@proc, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/185}]}, 0x3}, {{&(0x7f0000000740)=@in={0x2, 0x0, @private}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/205}]}, 0x401}, {{&(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000980)=""/232}, {&(0x7f0000000a80)=""/16}, {&(0x7f0000000ac0)=""/4096}], 0x0, &(0x7f0000001b00)=""/122}, 0x4}], 0x10154, 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f00000004c0)={0x1, 0x1a}) semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) (async) semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x43b03191c31e554e, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x43b03191c31e554e, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) 2.886386161s ago: executing program 7 (id=1631): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.735034039s ago: executing program 8 (id=1632): connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005608000002000000a502010007000000b70000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000280)=""/103, 0x67}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.727531969s ago: executing program 7 (id=1633): syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = semget(0x2, 0x4, 0x200) semtimedop(r3, &(0x7f00000000c0)=[{0x4, 0x7, 0x800}], 0x1, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg$kcm(r4, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2) r5 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000040)) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000380)=0x580, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000ccc0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2201000000000040050b2218000000000001090224000100000000090400200103000200092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000080)={0x2c, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0}, 0x0) ioperm(0x6a, 0x8a1, 0x5) fchdir(r9) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r11, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.797005089s ago: executing program 8 (id=1634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01c927bd0600000007e7a08370a546e88e495aae216a2fe4000000000008000300", @ANYRES32=r2, @ANYBLOB="0500a2000000000006006d0000f80000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80c0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0xdf688f83eaf560ab, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0xb4, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'ipvlan1\x00'}]}, @IFLA_LINK_NETNSID={0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.706286303s ago: executing program 8 (id=1635): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x40000, &(0x7f0000000080)="63445397a9ea00241ae1282d475e48d55329f4fdb508ba0b39a8e411804d8c58a96c5eeef9b1faadc3f11fbf2f7d", 0x2e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="7962374f50e4ccd8c1a3d7c352a6d3f9b460ce79054041521f30d527162117438d6c6d691cea9e0e14f16a55ad384de4a75b76d08fe80b9cdd910cd9ce964d89f71d7ac05d19ffe0fcfe640cb73207c66f8a9621ac6aeb41166aa19bf202709c2aa973e62171e2d7374a659f68f6661be2c63969fdfa7620484c9c95c7b3e35e0a33431d4f6dcb7e1f34bce32c4099e302d37c77cd78b80bcc16a5f0bd43601c03ed6bcefdcacaa0cba750b1f3cc690cef") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/131, 0x83}, {&(0x7f0000001400)=""/168, 0xa8}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/192, 0xc0}, {&(0x7f00000015c0)=""/92, 0x5c}], 0x7, &(0x7f00000018c0)=[{&(0x7f00000016c0)=""/254, 0xfe}, {&(0x7f00000017c0)=""/251, 0xfb}], 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000904000001020d0000052406000105200000000d240f010012000000000000000624ab"], 0x0) 1.575725838s ago: executing program 8 (id=1636): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084"], 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x7, 0x8, 0x0, 0x10, 0x0, 0x7fffffff, 0x0, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x9, 0x8}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r1}, 0x38) quotactl_fd$Q_GETFMT(r1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={0x0, &(0x7f0000000140)=""/91, &(0x7f00000000c0), &(0x7f00000000c0), 0x3, r1}, 0x38) 1.476257013s ago: executing program 8 (id=1637): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x30000, 0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) r1 = socket$key(0xf, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f0000240012800b00010067726574617000001400028006000e000100000008000700e000000108000a00", @ANYRES32=r5, @ANYBLOB="c6d4f406aa732db429d0b8b96ba05400000000b7d4e4040c1c5508f8063b6b829d35801f9b"], 0x4c}}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f40000003e000701feff06ff00000000017c0000040042800c00018006000600800a0000d0000280cc001780c8000180c40011"], 0xf4}}, 0x2000c000) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r10, 0x1, &(0x7f0000000280)={{r11, r12+60000000}, {0x0, 0x989680}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r13 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r13, r1, &(0x7f00000000c0)=0x33e, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x18}}, 0x84) 442.46556ms ago: executing program 8 (id=1638): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000520001fe05bd70000400000002"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 429.472428ms ago: executing program 5 (id=1639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x2, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x40, 0x7fff}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x2404c100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x9fc}, &(0x7f0000000280)=0x8) 366.451707ms ago: executing program 6 (id=1640): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 272.89601ms ago: executing program 6 (id=1641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x20}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x3000001, 0x810, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000280)=0x3, 0x0, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000f3000040"]) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='$@\x00') close_range(r5, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 154.142704ms ago: executing program 5 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff0a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) accept4(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x1ff, 0x2000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x80605414, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESDEC=r5], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES8=r8], 0x54}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getdents(r9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000029c0)=ANY=[], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 0s ago: executing program 9 (id=1643): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): driver f81534 failed with error -71 [ 477.357054][ T9] usb 8-1: USB disconnect, device number 63 [ 477.565606][ T5946] aquacomputer_d5next 0003:0C70:F003.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.9-1/input0 [ 477.762753][ T5946] usb 10-1: USB disconnect, device number 67 [ 477.913995][ T24] hid-generic 0002:0003:000F.000D: item fetching failed at offset 7/51 [ 477.921786][T11053] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1260'. [ 477.930302][ T24] hid-generic 0002:0003:000F.000D: probe with driver hid-generic failed with error -22 [ 477.956214][T11053] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1260'. [ 478.348589][T11056] FAULT_INJECTION: forcing a failure. [ 478.348589][T11056] name failslab, interval 1, probability 0, space 0, times 0 [ 478.361445][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.7.1261 Not tainted syzkaller #0 PREEMPT(full) [ 478.361480][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.361487][T11056] Call Trace: [ 478.361493][T11056] [ 478.361498][T11056] dump_stack_lvl+0x189/0x250 [ 478.361516][T11056] ? __pfx____ratelimit+0x10/0x10 [ 478.361528][T11056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.361540][T11056] ? __pfx__printk+0x10/0x10 [ 478.361557][T11056] ? __pfx___might_resched+0x10/0x10 [ 478.361569][T11056] should_fail_ex+0x414/0x560 [ 478.361587][T11056] should_failslab+0xa8/0x100 [ 478.361603][T11056] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 478.361617][T11056] ? __get_vm_area_node+0x13f/0x300 [ 478.361633][T11056] __get_vm_area_node+0x13f/0x300 [ 478.361649][T11056] __vmalloc_node_range_noprof+0x301/0x12f0 [ 478.361664][T11056] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.361678][T11056] ? __lock_acquire+0xab9/0xd20 [ 478.361706][T11056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.361719][T11056] ? __might_fault+0xb0/0x130 [ 478.361733][T11056] ? _parse_integer_limit+0x1ae/0x1f0 [ 478.361746][T11056] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.361759][T11056] __vmalloc_noprof+0xb1/0xf0 [ 478.361773][T11056] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.361788][T11056] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.361803][T11056] bpf_prog_alloc+0x3c/0x1a0 [ 478.361818][T11056] bpf_prog_load+0x735/0x1930 [ 478.361838][T11056] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.361862][T11056] ? bpf_lsm_bpf+0x9/0x20 [ 478.361874][T11056] ? security_bpf+0x7e/0x300 [ 478.361889][T11056] __sys_bpf+0x528/0x870 [ 478.361903][T11056] ? __pfx___sys_bpf+0x10/0x10 [ 478.361922][T11056] ? ksys_write+0x22a/0x250 [ 478.361936][T11056] ? __pfx_ksys_write+0x10/0x10 [ 478.361948][T11056] ? rcu_is_watching+0x15/0xb0 [ 478.361962][T11056] __x64_sys_bpf+0x7c/0x90 [ 478.361974][T11056] do_syscall_64+0xfa/0x3b0 [ 478.361985][T11056] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.361997][T11056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.362007][T11056] ? clear_bhb_loop+0x60/0xb0 [ 478.362018][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.362028][T11056] RIP: 0033:0x7f01dfd8eec9 [ 478.362038][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.362046][T11056] RSP: 002b:00007f01e0ccb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.362058][T11056] RAX: ffffffffffffffda RBX: 00007f01dffe5fa0 RCX: 00007f01dfd8eec9 [ 478.362065][T11056] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 478.362072][T11056] RBP: 00007f01e0ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.362078][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.362084][T11056] R13: 00007f01dffe6038 R14: 00007f01dffe5fa0 R15: 00007f01e010fa28 [ 478.362098][T11056] [ 478.362265][T11056] syz.7.1261: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 478.722822][T11056] CPU: 0 UID: 0 PID: 11056 Comm: syz.7.1261 Not tainted syzkaller #0 PREEMPT(full) [ 478.722845][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 478.722856][T11056] Call Trace: [ 478.722863][T11056] [ 478.722871][T11056] dump_stack_lvl+0x189/0x250 [ 478.722895][T11056] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 478.722919][T11056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.722938][T11056] ? __pfx__printk+0x10/0x10 [ 478.722959][T11056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 478.722978][T11056] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 478.723004][T11056] warn_alloc+0x214/0x310 [ 478.723032][T11056] ? __pfx_warn_alloc+0x10/0x10 [ 478.723056][T11056] ? __get_vm_area_node+0x13f/0x300 [ 478.723081][T11056] ? __get_vm_area_node+0x2b5/0x300 [ 478.723107][T11056] __vmalloc_node_range_noprof+0x326/0x12f0 [ 478.723128][T11056] ? __lock_acquire+0xab9/0xd20 [ 478.723174][T11056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 478.723194][T11056] ? __might_fault+0xb0/0x130 [ 478.723223][T11056] ? _parse_integer_limit+0x1ae/0x1f0 [ 478.723246][T11056] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.723267][T11056] __vmalloc_noprof+0xb1/0xf0 [ 478.723287][T11056] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.723310][T11056] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 478.723335][T11056] bpf_prog_alloc+0x3c/0x1a0 [ 478.723358][T11056] bpf_prog_load+0x735/0x1930 [ 478.723390][T11056] ? __pfx_bpf_prog_load+0x10/0x10 [ 478.723431][T11056] ? bpf_lsm_bpf+0x9/0x20 [ 478.723447][T11056] ? security_bpf+0x7e/0x300 [ 478.723472][T11056] __sys_bpf+0x528/0x870 [ 478.723495][T11056] ? __pfx___sys_bpf+0x10/0x10 [ 478.723528][T11056] ? ksys_write+0x22a/0x250 [ 478.723552][T11056] ? __pfx_ksys_write+0x10/0x10 [ 478.723570][T11056] ? rcu_is_watching+0x15/0xb0 [ 478.723593][T11056] __x64_sys_bpf+0x7c/0x90 [ 478.723614][T11056] do_syscall_64+0xfa/0x3b0 [ 478.723633][T11056] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.723650][T11056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.723667][T11056] ? clear_bhb_loop+0x60/0xb0 [ 478.723687][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.723703][T11056] RIP: 0033:0x7f01dfd8eec9 [ 478.723719][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.723733][T11056] RSP: 002b:00007f01e0ccb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.723752][T11056] RAX: ffffffffffffffda RBX: 00007f01dffe5fa0 RCX: 00007f01dfd8eec9 [ 478.723765][T11056] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 478.723776][T11056] RBP: 00007f01e0ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.723787][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.723797][T11056] R13: 00007f01dffe6038 R14: 00007f01dffe5fa0 R15: 00007f01e010fa28 [ 478.723825][T11056] [ 478.724495][T11056] Mem-Info: [ 479.149261][T11059] netlink: 'syz.5.1262': attribute type 12 has an invalid length. [ 479.172391][T11059] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.1262'. [ 479.190801][T11056] active_anon:8303 inactive_anon:0 isolated_anon:0 [ 479.190801][T11056] active_file:16624 inactive_file:40080 isolated_file:0 [ 479.190801][T11056] unevictable:792 dirty:136 writeback:0 [ 479.190801][T11056] slab_reclaimable:11692 slab_unreclaimable:105576 [ 479.190801][T11056] mapped:30640 shmem:1381 pagetables:1895 [ 479.190801][T11056] sec_pagetables:0 bounce:0 [ 479.190801][T11056] kernel_misc_reclaimable:0 [ 479.190801][T11056] free:1292274 free_pcp:17557 free_cma:0 [ 479.236222][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.280955][T11056] Node 0 active_anon:33312kB inactive_anon:0kB active_file:66444kB inactive_file:160116kB unevictable:1632kB isolated(anon):0kB isolated(file):0kB mapped:122628kB dirty:540kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13764kB pagetables:7436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.324218][T11056] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 479.367254][T11056] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.457883][T11071] loop6: detected capacity change from 0 to 524288000 [ 479.468410][T11056] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 479.474191][T11056] Node 0 DMA32 free:1263324kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34264kB inactive_anon:0kB active_file:66444kB inactive_file:158540kB unevictable:1632kB writepending:540kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:47768kB local_pcp:31256kB free_cma:0kB [ 479.556179][T11056] lowmem_reserve[]: 0 0 1 1 1 [ 479.562417][T11056] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 479.592026][T11073] support for the xor transformation has been removed. [ 479.803702][T11056] lowmem_reserve[]: 0 0 0 0 0 [ 479.808637][T11056] Node 1 Normal free:3892936kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20940kB local_pcp:7484kB free_cma:0kB [ 479.839842][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.891320][T11056] lowmem_reserve[]: 0 0 0 0 0 [ 479.907302][T11056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 479.931783][T11078] loop2: detected capacity change from 0 to 7 [ 479.976473][ T43] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 479.977104][T11078] Dev loop2: unable to read RDB block 7 [ 480.026969][T11056] Node 0 DMA32: 1329*4kB (UME) 819*8kB (UME) 2248*16kB (UME) 534*32kB (UM) 524*64kB (UME) 293*128kB (UM) 140*256kB (UM) 47*512kB (UM) 14*1024kB (UM) 8*2048kB (UM) 253*4096kB (UM) = 1262876kB [ 480.067975][T11078] loop2: unable to read partition table [ 480.093612][T11056] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 480.116585][T11056] Node 1 Normal: 187*4kB (UME) 36*8kB (UE) 47*16kB (UME) 172*32kB (UME) 50*64kB (UME) 10*128kB (UME) 3*256kB (M) 5*512kB (UME) 1*1024kB (U) 3*2048kB (UME) 945*4096kB (M) = 3892988kB [ 480.122962][T11078] loop2: partition table beyond EOD, [ 480.145578][ T43] usb 10-1: config 0 has an invalid interface number: 29 but max is 0 [ 480.253642][T11078] truncated [ 480.257238][T11078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.355370][ T43] usb 10-1: config 0 has no interface number 0 [ 480.394359][ T43] usb 10-1: config 0 interface 29 has no altsetting 0 [ 480.412624][T11056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.439181][ T43] usb 10-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 480.455137][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.470595][ T43] usb 10-1: Product: syz [ 480.477281][ T43] usb 10-1: Manufacturer: syz [ 480.482448][ T43] usb 10-1: SerialNumber: syz [ 480.526942][ T43] usb 10-1: config 0 descriptor?? [ 480.617414][T11056] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.752140][T11056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.754083][ T43] peak_usb 10-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 480.874868][T11056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 481.000578][T11056] 58343 total pagecache pages [ 481.012245][T11056] 0 pages in swap cache [ 481.017245][T11056] Free swap = 124996kB [ 481.022060][T11056] Total swap = 124996kB [ 481.028489][T11056] 2097051 pages RAM [ 481.032552][T11056] 0 pages HighMem/MovableOnly [ 481.042815][T11056] 425673 pages reserved [ 481.050489][T11056] 0 pages cma reserved [ 481.411064][T11087] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 481.417615][T11087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 481.430829][T11087] vhci_hcd vhci_hcd.0: Device attached [ 481.675309][ T24] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 482.362764][T11088] vhci_hcd: connection reset by peer [ 482.368472][ T12] vhci_hcd: stop threads [ 482.377485][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1270'. [ 482.465300][ T12] vhci_hcd: release socket [ 482.469907][ T12] vhci_hcd: disconnect device [ 482.793716][ T43] peak_usb 10-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 482.871137][ T43] peak_usb 10-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 482.996267][ T43] peak_usb 10-1:0.29: probe with driver peak_usb failed with error -71 [ 483.041333][ T43] usb 10-1: USB disconnect, device number 68 [ 483.185969][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1273'. [ 483.254119][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1273'. [ 483.298987][T11109] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1273'. [ 483.388338][T11107] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1273'. [ 483.466468][T11107] 0ªî{X¹¦: renamed from gretap0 [ 483.497560][T11107] 0ªî{X¹¦: left promiscuous mode [ 483.502679][T11107] 0ªî{X¹¦: entered allmulticast mode [ 483.511118][T11107] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 483.792959][T11117] netlink: 'syz.5.1276': attribute type 1 has an invalid length. [ 484.198684][ T5946] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 484.310432][T11134] tipc: Enabled bearer , priority 0 [ 484.321046][T11134] syzkaller0: entered promiscuous mode [ 484.327334][T11134] syzkaller0: entered allmulticast mode [ 484.337791][T11134] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 484.359233][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 484.369032][ T5946] usb 6-1: config 38 has an invalid interface number: 193 but max is 1 [ 484.377508][ T5946] usb 6-1: config 38 contains an unexpected descriptor of type 0x2, skipping [ 484.386451][ T9] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 484.399346][ T5946] usb 6-1: config 38 has an invalid interface number: 140 but max is 1 [ 484.408389][ T5946] usb 6-1: config 38 has an invalid descriptor of length 0, skipping remainder of the config [ 484.423078][ T5946] usb 6-1: config 38 has no interface number 0 [ 484.438324][ T5946] usb 6-1: config 38 has no interface number 1 [ 484.446345][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 484.458860][ T5946] usb 6-1: config 38 interface 193 altsetting 3 endpoint 0x85 has invalid maxpacket 8597, setting to 1024 [ 484.471495][ T5946] usb 6-1: config 38 interface 193 altsetting 3 bulk endpoint 0x85 has invalid maxpacket 1024 [ 484.482980][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 484.494414][ T5946] usb 6-1: config 38 interface 193 altsetting 3 endpoint 0x8 has invalid maxpacket 1495, setting to 1024 [ 484.506257][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 484.521123][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 484.532905][ T5946] usb 6-1: config 38 interface 193 altsetting 3 bulk endpoint 0x5 has invalid maxpacket 1023 [ 484.549721][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 484.567779][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 484.578920][ T9] usb 9-1: config 0 has an invalid interface number: 237 but max is 0 [ 484.587969][ T9] usb 9-1: config 0 has no interface number 0 [ 484.594041][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 484.623381][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 484.672011][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.721513][ T5946] usb 6-1: config 38 interface 193 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 484.733081][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 484.753061][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 484.764104][ T9] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 484.785050][ T5946] usb 6-1: config 38 interface 193 altsetting 3 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 484.806411][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 484.824391][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.861276][ T5946] usb 6-1: config 38 interface 140 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 484.874868][ T9] usb 9-1: Product: syz [ 484.889456][ T9] usb 9-1: Manufacturer: syz [ 484.894082][ T9] usb 9-1: SerialNumber: syz [ 484.919441][ T5946] usb 6-1: config 38 interface 193 has no altsetting 0 [ 484.967795][ T9] usb 9-1: config 0 descriptor?? [ 484.975315][ T5946] usb 6-1: config 38 interface 140 has no altsetting 0 [ 484.987429][ T9] xpad 9-1:0.237: probe with driver xpad failed with error -5 [ 485.015602][ T5946] usb 6-1: New USB device found, idVendor=0db0, idProduct=870a, bcdDevice=44.dc [ 485.040028][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.056556][ T5946] usb 6-1: Product: syz [ 485.076558][ T5946] usb 6-1: Manufacturer: syz [ 485.091252][ T5946] usb 6-1: SerialNumber: syz [ 485.112490][T11122] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 485.134122][T11122] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 485.145430][T11133] tipc: Resetting bearer [ 485.161973][T11122] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 485.239532][T11133] tipc: Disabling bearer [ 485.491165][ T5946] usb 6-1: USB disconnect, device number 68 [ 485.984056][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1282'. [ 486.619442][ T5955] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 486.765552][ T5955] usb 8-1: device descriptor read/64, error -71 [ 486.864083][ T24] vhci_hcd: vhci_device speed not set [ 487.025130][ T5955] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 487.137873][T11164] vivid-007: ================= START STATUS ================= [ 487.146371][T11164] vivid-007: Enable Output Cropping: true [ 487.158132][T11164] vivid-007: Enable Output Composing: true [ 487.164159][T11164] vivid-007: Enable Output Scaler: true [ 487.169932][T11164] vivid-007: Tx RGB Quantization Range: Automatic [ 487.176774][T11164] vivid-007: Transmit Mode: HDMI [ 487.181742][T11164] vivid-007: Hotplug Present: 0x00000000 [ 487.187844][T11164] vivid-007: RxSense Present: 0x00000000 [ 487.193515][T11164] vivid-007: EDID Present: 0x00000000 [ 487.199523][T11164] vivid-007: ================== END STATUS ================== [ 487.295197][ T5955] usb 8-1: device descriptor read/64, error -71 [ 487.447634][ T5955] usb usb8-port1: attempt power cycle [ 487.462701][ T43] usb 9-1: USB disconnect, device number 71 [ 487.795380][ T5955] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 487.816663][ T5955] usb 8-1: device descriptor read/8, error -71 [ 487.891593][T11180] input: syz1 as /devices/virtual/input/input22 [ 488.005732][ T43] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 488.057148][ T5955] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 488.095732][ T5955] usb 8-1: device descriptor read/8, error -71 [ 488.155616][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 488.162156][ T43] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 488.176852][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.192115][ T43] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 488.195135][ T5946] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 488.201384][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.217592][ T5955] usb usb8-port1: unable to enumerate USB device [ 488.224459][ T43] usb 10-1: Product: syz [ 488.229356][ T43] usb 10-1: Manufacturer: syz [ 488.234039][ T43] usb 10-1: SerialNumber: syz [ 488.241521][ T43] usb 10-1: config 0 descriptor?? [ 488.252630][ T43] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 488.261960][ T43] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 488.335149][ T5946] usb 6-1: device descriptor read/64, error -71 [ 488.355059][ T24] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 488.515190][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 488.523020][ T24] usb 9-1: config 0 has an invalid interface number: 223 but max is 0 [ 488.531353][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.541670][ T24] usb 9-1: config 0 has no interface number 0 [ 488.547810][ T24] usb 9-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 488.558822][ T24] usb 9-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 488.568833][ T24] usb 9-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.581859][ T24] usb 9-1: config 0 interface 223 has no altsetting 0 [ 488.585098][ T5946] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 488.591667][ T24] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 488.605369][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.613363][ T24] usb 9-1: Product: syz [ 488.617620][ T24] usb 9-1: Manufacturer: syz [ 488.622230][ T24] usb 9-1: SerialNumber: syz [ 488.635853][ T24] usb 9-1: config 0 descriptor?? [ 488.658143][T11174] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 488.666481][T11174] CPU: 1 UID: 0 PID: 11174 Comm: syz.9.1292 Not tainted syzkaller #0 PREEMPT(full) [ 488.666504][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.666516][T11174] Call Trace: [ 488.666524][T11174] [ 488.666536][T11174] dump_stack_lvl+0x189/0x250 [ 488.666567][T11174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.666589][T11174] ? __pfx__printk+0x10/0x10 [ 488.666618][T11174] ? kernfs_path_from_node+0x2f/0x290 [ 488.666638][T11174] ? kernfs_path_from_node+0x250/0x290 [ 488.666655][T11174] ? kernfs_path_from_node+0x2f/0x290 [ 488.666679][T11174] sysfs_warn_dup+0x8e/0xa0 [ 488.666698][T11174] sysfs_do_create_link_sd+0xc0/0x110 [ 488.666720][T11174] device_add_class_symlinks+0x1cf/0x240 [ 488.666746][T11174] device_add+0x475/0xb50 [ 488.666772][T11174] wiphy_register+0x1ba6/0x28d0 [ 488.666810][T11174] ? __pfx_wiphy_register+0x10/0x10 [ 488.666829][T11174] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 488.666861][T11174] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 488.666891][T11174] ieee80211_register_hw+0x3484/0x4100 [ 488.666931][T11174] ? ieee80211_register_hw+0x1471/0x4100 [ 488.666964][T11174] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 488.666991][T11174] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 488.667018][T11174] ? __hrtimer_setup+0x187/0x210 [ 488.667035][T11174] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 488.667058][T11174] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 488.667116][T11174] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 488.667139][T11174] ? trace_kmalloc+0x1f/0xd0 [ 488.667159][T11174] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 488.667181][T11174] ? kstrndup+0xbf/0x160 [ 488.667211][T11174] hwsim_new_radio_nl+0xea4/0x1b10 [ 488.667243][T11174] ? __pfx___nla_validate_parse+0x10/0x10 [ 488.667279][T11174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.667319][T11174] ? __nla_parse+0x40/0x60 [ 488.667343][T11174] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 488.667376][T11174] genl_family_rcv_msg_doit+0x215/0x300 [ 488.667407][T11174] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.667445][T11174] ? bpf_lsm_capable+0x9/0x20 [ 488.667466][T11174] ? security_capable+0x7e/0x2e0 [ 488.667497][T11174] genl_rcv_msg+0x60e/0x790 [ 488.667527][T11174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.667548][T11174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.667574][T11174] ? __asan_memcpy+0x40/0x70 [ 488.667593][T11174] ? __pfx_ref_tracker_free+0x10/0x10 [ 488.667620][T11174] netlink_rcv_skb+0x205/0x470 [ 488.667636][T11174] ? __lock_acquire+0xab9/0xd20 [ 488.667661][T11174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.667685][T11174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.667725][T11174] ? down_read+0x1ad/0x2e0 [ 488.667749][T11174] genl_rcv+0x28/0x40 [ 488.667768][T11174] netlink_unicast+0x82f/0x9e0 [ 488.667804][T11174] ? __pfx_netlink_unicast+0x10/0x10 [ 488.667831][T11174] ? netlink_sendmsg+0x642/0xb30 [ 488.667848][T11174] ? skb_put+0x11b/0x210 [ 488.667872][T11174] netlink_sendmsg+0x805/0xb30 [ 488.667902][T11174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.667925][T11174] ? aa_sock_msg_perm+0xf1/0x1d0 [ 488.667945][T11174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.667964][T11174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.667984][T11174] __sock_sendmsg+0x219/0x270 [ 488.668013][T11174] ____sys_sendmsg+0x505/0x830 [ 488.668041][T11174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.668073][T11174] ? import_iovec+0x74/0xa0 [ 488.668099][T11174] ___sys_sendmsg+0x21f/0x2a0 [ 488.668124][T11174] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.668186][T11174] ? __fget_files+0x2a/0x420 [ 488.668201][T11174] ? __fget_files+0x3a0/0x420 [ 488.668230][T11174] __x64_sys_sendmsg+0x19b/0x260 [ 488.668260][T11174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.668303][T11174] ? do_syscall_64+0xbe/0x3b0 [ 488.668328][T11174] do_syscall_64+0xfa/0x3b0 [ 488.668345][T11174] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.668364][T11174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.668382][T11174] ? clear_bhb_loop+0x60/0xb0 [ 488.668403][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.668421][T11174] RIP: 0033:0x7fe1d758eec9 [ 488.668438][T11174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.668454][T11174] RSP: 002b:00007fe1d8476038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.668474][T11174] RAX: ffffffffffffffda RBX: 00007fe1d77e5fa0 RCX: 00007fe1d758eec9 [ 488.668486][T11174] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 488.668496][T11174] RBP: 00007fe1d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 488.668508][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.668519][T11174] R13: 00007fe1d77e6038 R14: 00007fe1d77e5fa0 R15: 00007fe1d790fa28 [ 488.668552][T11174] [ 488.735748][ T5946] usb 6-1: device descriptor read/64, error -71 [ 488.964071][ T43] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 489.069864][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1295'. [ 489.088080][ T43] em28xx 10-1:0.0: Config register raw data: 0x41 [ 489.097132][ T5946] usb usb6-port1: attempt power cycle [ 489.163701][ T43] usb 9-1: USB disconnect, device number 72 [ 489.505471][ T5946] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 489.537965][ T5946] usb 6-1: device descriptor read/8, error -71 [ 489.581208][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1299'. [ 489.590316][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1299'. [ 489.599279][T11195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.779581][ T5946] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 489.815755][ T5946] usb 6-1: device descriptor read/8, error -71 [ 489.830668][T11199] FAULT_INJECTION: forcing a failure. [ 489.830668][T11199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.844516][T11199] CPU: 0 UID: 0 PID: 11199 Comm: syz.6.1301 Not tainted syzkaller #0 PREEMPT(full) [ 489.844538][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.844548][T11199] Call Trace: [ 489.844555][T11199] [ 489.844562][T11199] dump_stack_lvl+0x189/0x250 [ 489.844581][T11199] ? __pfx____ratelimit+0x10/0x10 [ 489.844596][T11199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.844612][T11199] ? __pfx__printk+0x10/0x10 [ 489.844635][T11199] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.844660][T11199] should_fail_ex+0x414/0x560 [ 489.844687][T11199] _copy_to_user+0x31/0xb0 [ 489.844710][T11199] __htab_map_lookup_and_delete_batch+0xfe4/0x13a0 [ 489.844766][T11199] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 489.844797][T11199] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 489.844819][T11199] bpf_map_do_batch+0x415/0x5f0 [ 489.844846][T11199] __sys_bpf+0x793/0x870 [ 489.844868][T11199] ? __pfx___sys_bpf+0x10/0x10 [ 489.844898][T11199] ? ksys_write+0x22a/0x250 [ 489.844921][T11199] ? __pfx_ksys_write+0x10/0x10 [ 489.844937][T11199] ? rcu_is_watching+0x15/0xb0 [ 489.844959][T11199] __x64_sys_bpf+0x7c/0x90 [ 489.844979][T11199] do_syscall_64+0xfa/0x3b0 [ 489.845002][T11199] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.845018][T11199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.845034][T11199] ? clear_bhb_loop+0x60/0xb0 [ 489.845054][T11199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.845069][T11199] RIP: 0033:0x7fc7cf38eec9 [ 489.845085][T11199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.845099][T11199] RSP: 002b:00007fc7d01b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.845118][T11199] RAX: ffffffffffffffda RBX: 00007fc7cf5e5fa0 RCX: 00007fc7cf38eec9 [ 489.845131][T11199] RDX: 0000000000000038 RSI: 0000200000001300 RDI: 0000000000000019 [ 489.845142][T11199] RBP: 00007fc7d01b3090 R08: 0000000000000000 R09: 0000000000000000 [ 489.845153][T11199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.845162][T11199] R13: 00007fc7cf5e6038 R14: 00007fc7cf5e5fa0 R15: 00007fc7cf70fa28 [ 489.845199][T11199] [ 489.905226][ T43] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 489.947971][ T5946] usb usb6-port1: unable to enumerate USB device [ 490.109768][ T43] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 490.133170][ T43] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 490.141680][ T43] usb 8-1: Product: syz [ 490.146170][ T43] usb 8-1: SerialNumber: syz [ 490.163980][ T43] usb 8-1: config 0 descriptor?? [ 490.164451][T11207] veth0_to_bond: left allmulticast mode [ 490.183920][T11207] veth0_to_bond: left promiscuous mode [ 490.190769][T11207] bridge4: port 1(veth0_to_bond) entered disabled state [ 490.203624][T11207] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.381660][ T43] hso 8-1:0.0: Failed to find BULK IN ep [ 490.776272][ T43] usb 10-1: USB disconnect, device number 69 [ 490.795968][ T43] em28xx 10-1:0.0: Disconnecting em28xx [ 490.823302][ T43] em28xx 10-1:0.0: Freeing device [ 490.942300][T11227] gre1: entered promiscuous mode [ 490.947775][T11227] gre1: entered allmulticast mode [ 490.965669][T11226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.365638][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1307'. [ 492.327585][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1312'. [ 492.363523][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1312'. [ 492.590025][T11253] FAULT_INJECTION: forcing a failure. [ 492.590025][T11253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.594141][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1314'. [ 492.603264][T11253] CPU: 0 UID: 0 PID: 11253 Comm: syz.8.1313 Not tainted syzkaller #0 PREEMPT(full) [ 492.603287][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.603298][T11253] Call Trace: [ 492.603305][T11253] [ 492.603313][T11253] dump_stack_lvl+0x189/0x250 [ 492.603338][T11253] ? __pfx____ratelimit+0x10/0x10 [ 492.603354][T11253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.603369][T11253] ? __pfx__printk+0x10/0x10 [ 492.603393][T11253] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.603419][T11253] should_fail_ex+0x414/0x560 [ 492.603445][T11253] _copy_to_user+0x31/0xb0 [ 492.603463][T11253] __htab_map_lookup_and_delete_batch+0x103d/0x13a0 [ 492.603508][T11253] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 492.603533][T11253] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 492.603552][T11253] bpf_map_do_batch+0x415/0x5f0 [ 492.603574][T11253] __sys_bpf+0x793/0x870 [ 492.603593][T11253] ? __pfx___sys_bpf+0x10/0x10 [ 492.603618][T11253] ? ksys_write+0x22a/0x250 [ 492.603636][T11253] ? __pfx_ksys_write+0x10/0x10 [ 492.603650][T11253] ? rcu_is_watching+0x15/0xb0 [ 492.603669][T11253] __x64_sys_bpf+0x7c/0x90 [ 492.603685][T11253] do_syscall_64+0xfa/0x3b0 [ 492.603700][T11253] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.603713][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.603727][T11253] ? clear_bhb_loop+0x60/0xb0 [ 492.603743][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.603757][T11253] RIP: 0033:0x7f062e58eec9 [ 492.603770][T11253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.603780][T11253] RSP: 002b:00007f062f500038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.603795][T11253] RAX: ffffffffffffffda RBX: 00007f062e7e5fa0 RCX: 00007f062e58eec9 [ 492.603804][T11253] RDX: 0000000000000038 RSI: 0000200000001300 RDI: 0000000000000019 [ 492.603813][T11253] RBP: 00007f062f500090 R08: 0000000000000000 R09: 0000000000000000 [ 492.603821][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.603828][T11253] R13: 00007f062e7e6038 R14: 00007f062e7e5fa0 R15: 00007f062e90fa28 [ 492.603850][T11253] [ 492.711656][T11256] bridge2: port 1(veth0_to_bond) entered disabled state [ 492.844807][T11256] veth0_to_bond: left allmulticast mode [ 492.850557][T11256] veth0_to_bond: left promiscuous mode [ 492.854444][ T43] usb 8-1: USB disconnect, device number 68 [ 492.856305][T11256] bridge2: port 1(veth0_to_bond) entered disabled state [ 493.004598][T11261] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 493.013947][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1316'. [ 494.110763][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1322'. [ 494.135560][T11283] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1322'. [ 494.998199][T11298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1324'. [ 495.151254][T11305] FAULT_INJECTION: forcing a failure. [ 495.151254][T11305] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 495.248299][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.6.1328 Not tainted syzkaller #0 PREEMPT(full) [ 495.248324][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.248335][T11305] Call Trace: [ 495.248343][T11305] [ 495.248351][T11305] dump_stack_lvl+0x189/0x250 [ 495.248376][T11305] ? __pfx____ratelimit+0x10/0x10 [ 495.248396][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.248416][T11305] ? __pfx__printk+0x10/0x10 [ 495.248440][T11305] ? fs_reclaim_acquire+0x7d/0x100 [ 495.248466][T11305] should_fail_ex+0x414/0x560 [ 495.248495][T11305] prepare_alloc_pages+0x213/0x610 [ 495.248521][T11305] __alloc_frozen_pages_noprof+0x123/0x370 [ 495.248539][T11305] ? unwind_get_return_address+0x4d/0x90 [ 495.248562][T11305] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.248590][T11305] ? policy_nodemask+0x27c/0x720 [ 495.248613][T11305] ? __lock_acquire+0xab9/0xd20 [ 495.248638][T11305] alloc_pages_mpol+0x232/0x4a0 [ 495.248665][T11305] vma_alloc_folio_noprof+0xe4/0x200 [ 495.248690][T11305] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 495.248732][T11305] folio_prealloc+0x30/0x180 [ 495.248756][T11305] do_wp_page+0x1231/0x5800 [ 495.248799][T11305] ? __pfx_do_wp_page+0x10/0x10 [ 495.248817][T11305] ? do_raw_spin_lock+0x121/0x290 [ 495.248840][T11305] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.248871][T11305] __handle_mm_fault+0x1033/0x5440 [ 495.248909][T11305] ? __pfx___handle_mm_fault+0x10/0x10 [ 495.248943][T11305] ? find_vma+0xe7/0x160 [ 495.248961][T11305] ? __pfx_find_vma+0x10/0x10 [ 495.248983][T11305] handle_mm_fault+0x40a/0x8e0 [ 495.249013][T11305] do_user_addr_fault+0x764/0x1390 [ 495.249048][T11305] exc_page_fault+0x76/0xf0 [ 495.249067][T11305] asm_exc_page_fault+0x26/0x30 [ 495.249083][T11305] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 495.249105][T11305] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 495.249119][T11305] RSP: 0018:ffffc900041afaa8 EFLAGS: 00050206 [ 495.249136][T11305] RAX: ffffffff84c89401 RBX: 0000000000002800 RCX: 00000000000008c0 [ 495.249147][T11305] RDX: 0000000000000000 RSI: ffff888029391f40 RDI: 0000200000002000 [ 495.249158][T11305] RBP: ffffc900041afce0 R08: ffff8880293927ff R09: 1ffff110052724ff [ 495.249171][T11305] R10: dffffc0000000000 R11: ffffed1005272500 R12: 00002000000028c0 [ 495.249184][T11305] R13: 00007ffffffff000 R14: ffff888029390000 R15: 00002000000000c0 [ 495.249204][T11305] ? _copy_to_user+0x61/0xb0 [ 495.249231][T11305] _copy_to_user+0x8a/0xb0 [ 495.249254][T11305] __htab_map_lookup_and_delete_batch+0x103d/0x13a0 [ 495.249304][T11305] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 495.249334][T11305] ? __pfx_htab_percpu_map_lookup_and_delete_batch+0x10/0x10 [ 495.249355][T11305] bpf_map_do_batch+0x415/0x5f0 [ 495.249382][T11305] __sys_bpf+0x793/0x870 [ 495.249403][T11305] ? __pfx___sys_bpf+0x10/0x10 [ 495.249432][T11305] ? ksys_write+0x22a/0x250 [ 495.249455][T11305] ? __pfx_ksys_write+0x10/0x10 [ 495.249472][T11305] ? rcu_is_watching+0x15/0xb0 [ 495.249496][T11305] __x64_sys_bpf+0x7c/0x90 [ 495.249516][T11305] do_syscall_64+0xfa/0x3b0 [ 495.249533][T11305] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.249551][T11305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.249566][T11305] ? clear_bhb_loop+0x60/0xb0 [ 495.249586][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.249601][T11305] RIP: 0033:0x7fc7cf38eec9 [ 495.249615][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.249628][T11305] RSP: 002b:00007fc7d01b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.249646][T11305] RAX: ffffffffffffffda RBX: 00007fc7cf5e5fa0 RCX: 00007fc7cf38eec9 [ 495.249657][T11305] RDX: 0000000000000038 RSI: 0000200000001300 RDI: 0000000000000019 [ 495.249668][T11305] RBP: 00007fc7d01b3090 R08: 0000000000000000 R09: 0000000000000000 [ 495.249679][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.249689][T11305] R13: 00007fc7cf5e6038 R14: 00007fc7cf5e5fa0 R15: 00007fc7cf70fa28 [ 495.249725][T11305] [ 495.745204][ T5919] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 495.937441][ T5919] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.947663][ T5919] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 495.956717][ T5919] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.972184][ T5919] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.981244][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.989914][ T5919] usb 9-1: Product: syz [ 495.994084][ T5919] usb 9-1: Manufacturer: syz [ 495.999089][ T5919] usb 9-1: SerialNumber: syz [ 496.019734][ T5919] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 496.026555][ T5919] cdc_ncm 9-1:1.0: bind() failure [ 496.220177][ T24] usb 9-1: USB disconnect, device number 73 [ 496.823449][T11318] netlink: 'syz.7.1332': attribute type 30 has an invalid length. [ 497.189929][T11329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.422361][T11336] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1339'. [ 497.732644][T11344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1341'. [ 498.211328][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1344'. [ 498.408639][T11357] netlink: 'syz.5.1346': attribute type 30 has an invalid length. [ 498.811198][T11372] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1351'. [ 499.373535][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1359'. [ 499.463078][T11405] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1362'. [ 499.915558][ T43] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 500.096255][ T43] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.109918][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.118416][ T43] usb 9-1: Product: syz [ 500.123420][ T43] usb 9-1: Manufacturer: syz [ 500.129581][ T43] usb 9-1: SerialNumber: syz [ 500.144876][ T43] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.159876][ T24] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.014237][ T30] audit: type=1326 audit(1758948911.772:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.054719][ T30] audit: type=1326 audit(1758948911.772:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.078613][ T30] audit: type=1326 audit(1758948911.802:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.104387][ T30] audit: type=1326 audit(1758948911.812:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.198126][ T24] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 501.235846][ T24] ath9k_htc: Failed to initialize the device [ 501.243737][ T30] audit: type=1326 audit(1758948911.812:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.271490][ T30] audit: type=1326 audit(1758948911.812:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.277672][ T5919] usb 9-1: USB disconnect, device number 74 [ 501.293742][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.365247][ T30] audit: type=1326 audit(1758948911.812:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.410696][ T5919] usb 9-1: ath9k_htc: USB layer deinitialized [ 501.433253][ T30] audit: type=1326 audit(1758948911.812:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.478598][T11442] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 501.500069][ T30] audit: type=1326 audit(1758948911.822:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.540504][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.549101][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.560404][ T30] audit: type=1326 audit(1758948911.822:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d758eec9 code=0x7ffc0000 [ 501.680523][T11451] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1374'. [ 501.835289][T11455] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1374'. [ 502.025127][ T5919] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 502.567995][ T5919] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 502.645149][ T5919] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 502.664410][ T5919] usb 9-1: config 220 interface 0 has no altsetting 0 [ 502.687400][ T5919] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 502.697408][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.715094][ T5919] usb 9-1: Product: syz [ 502.733684][T11468] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1377'. [ 502.777335][ T5919] usb 9-1: Manufacturer: syz [ 502.783270][ T5919] usb 9-1: SerialNumber: syz [ 503.009814][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.042673][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.798765][T11488] tipc: Enabling of bearer rejected, failed to enable media [ 503.975545][ T9] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 504.218036][ T9] usb 10-1: config 6 has an invalid interface number: 14 but max is 0 [ 504.242107][ T9] usb 10-1: config 6 has no interface number 0 [ 504.249767][ T9] usb 10-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 504.305520][ T9] usb 10-1: config 6 interface 14 has no altsetting 0 [ 504.340680][ T9] usb 10-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 504.390983][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.428684][ T9] usb 10-1: Product: syz [ 504.432992][ T9] usb 10-1: Manufacturer: syz [ 504.488659][ T9] usb 10-1: SerialNumber: syz [ 504.748928][ T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 504.764872][ T9] command write [95] error -8 [ 504.802981][ T9] usb 10-1: USB disconnect, device number 70 [ 504.938294][ T5919] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 504.954870][ T5919] usb 9-1: No valid video chain found. [ 504.989620][ T5919] usb 9-1: USB disconnect, device number 75 [ 505.132332][T11517] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1391'. [ 505.445215][ T24] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 505.502369][T11535] loop4: detected capacity change from 0 to 7 [ 505.509878][T11535] Dev loop4: unable to read RDB block 7 [ 505.516058][T11535] loop4: AHDI p1 p2 [ 505.519974][T11535] loop4: partition table partially beyond EOD, truncated [ 505.527600][T11535] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 505.604147][ T6744] udevd[6744]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 505.615161][ T24] usb 9-1: too many configurations: 140, using maximum allowed: 8 [ 505.631221][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.642961][ T24] usb 9-1: config 1 has no interfaces? [ 505.650650][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.662950][ T24] usb 9-1: config 1 has no interfaces? [ 505.670913][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.681277][ T24] usb 9-1: config 1 has no interfaces? [ 505.687872][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.698920][ T24] usb 9-1: config 1 has no interfaces? [ 505.708131][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.718545][ T24] usb 9-1: config 1 has no interfaces? [ 505.724752][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.736000][ T24] usb 9-1: config 1 has no interfaces? [ 505.742316][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.752481][ T24] usb 9-1: config 1 has no interfaces? [ 505.759270][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.771158][ T24] usb 9-1: config 1 has no interfaces? [ 505.779591][ T24] usb 9-1: New USB device found, idVendor=28de, idProduct=ecd0, bcdDevice=cd.14 [ 505.788963][ T24] usb 9-1: New USB device strings: Mfr=45, Product=69, SerialNumber=28 [ 505.797343][ T24] usb 9-1: Product: syz [ 505.801494][ T24] usb 9-1: Manufacturer: syz [ 505.806839][ T24] usb 9-1: SerialNumber: syz [ 505.875261][ T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 506.026693][T11519] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1392'. [ 506.035148][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 506.040984][T11519] netlink: zone id is out of range [ 506.048408][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 506.049243][T11519] netlink: zone id is out of range [ 506.058633][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.074683][T11519] netlink: zone id is out of range [ 506.075917][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 506.089672][T11519] netlink: zone id is out of range [ 506.095290][T11519] netlink: zone id is out of range [ 506.095394][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.110458][T11519] netlink: zone id is out of range [ 506.111921][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.115908][T11519] netlink: zone id is out of range [ 506.124333][ T9] usb 6-1: Product: syz [ 506.133391][T11519] netlink: zone id is out of range [ 506.133717][ T9] usb 6-1: Manufacturer: syz [ 506.139207][ T9] usb 6-1: SerialNumber: syz [ 506.143452][T11519] netlink: zone id is out of range [ 506.184014][ T24] usb 9-1: USB disconnect, device number 76 [ 506.421418][ T9] usb 6-1: USB disconnect, device number 73 [ 506.755099][ T24] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 506.908992][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.943973][T11552] netlink: 'syz.8.1403': attribute type 9 has an invalid length. [ 506.952805][T11552] netlink: 'syz.8.1403': attribute type 6 has an invalid length. [ 506.960766][T11552] netlink: 'syz.8.1403': attribute type 7 has an invalid length. [ 506.969297][T11552] netlink: 'syz.8.1403': attribute type 8 has an invalid length. [ 507.068001][T11552] sctp: [Deprecated]: syz.8.1403 (pid 11552) Use of int in max_burst socket option. [ 507.068001][T11552] Use struct sctp_assoc_value instead [ 507.098949][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.117636][T11546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.147031][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 507.184937][ T24] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 507.242610][ T24] usb 10-1: can't read configurations, error -71 [ 507.385219][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 507.550748][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 507.561831][ T43] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 507.605017][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.613044][ T43] usb 6-1: Product: syz [ 507.619713][ T43] usb 6-1: Manufacturer: syz [ 507.624526][ T43] usb 6-1: SerialNumber: syz [ 507.634416][ T43] usb 6-1: config 0 descriptor?? [ 507.746955][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 507.843222][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1407'. [ 508.360110][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1410'. [ 508.625645][T11573] veth0_to_bond: left allmulticast mode [ 508.631242][T11573] veth0_to_bond: left promiscuous mode [ 508.643457][T11573] bridge5: port 1(veth0_to_bond) entered disabled state [ 508.711731][T11573] bridge8: port 1(veth0_to_bond) entered blocking state [ 508.719452][T11573] bridge8: port 1(veth0_to_bond) entered disabled state [ 508.727203][T11573] veth0_to_bond: entered allmulticast mode [ 508.746064][T11573] veth0_to_bond: entered promiscuous mode [ 508.914412][T11578] binder: 11577:11578 ioctl 4018620d 0 returned -22 [ 508.933751][T11579] binder: 11577:11579 ioctl c018620c 0 returned -14 [ 508.951004][T11579] binder: 11577:11579 ioctl c0306201 0 returned -14 [ 509.049333][T11585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.144011][T11585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.325185][ T24] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 509.540351][T11590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.823573][ T43] gspca_ov534_9: sccb_read failed 1 [ 510.575370][ T43] gspca_ov534_9: reg_r err -110 [ 510.795532][ T43] gspca_ov534_9: Unknown sensor 0000 [ 510.795645][ T43] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 510.825391][ T5919] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 511.017172][ T5919] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.035440][ T5919] usb 9-1: config 0 has no interface number 0 [ 511.051700][ T5919] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 511.075128][ T43] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 511.075158][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.121237][ T5919] usb 9-1: Product: syz [ 511.127438][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.141972][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.149734][ T5919] usb 9-1: Manufacturer: syz [ 511.154340][ T5919] usb 9-1: SerialNumber: syz [ 511.167156][ T5919] usb 9-1: config 0 descriptor?? [ 511.245085][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 511.251753][ T43] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 511.263485][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.297172][ T43] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 511.315498][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.323654][ T43] usb 10-1: Product: syz [ 511.336328][ T43] usb 10-1: Manufacturer: syz [ 511.341087][ T43] usb 10-1: SerialNumber: syz [ 511.363698][ T43] usb 10-1: config 0 descriptor?? [ 511.377525][ T43] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 511.387648][ T43] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 511.397849][ T5919] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 511.409405][ T5919] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.421219][ T5919] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 511.431526][ T5919] usb 9-1: media controller created [ 511.473065][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.724588][T11620] tipc: Enabling of bearer rejected, failed to enable media [ 511.796373][T11606] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 511.803975][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.9.1421 Not tainted syzkaller #0 PREEMPT(full) [ 511.803998][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.804009][T11606] Call Trace: [ 511.804017][T11606] [ 511.804026][T11606] dump_stack_lvl+0x189/0x250 [ 511.804056][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.804083][T11606] ? __pfx__printk+0x10/0x10 [ 511.804111][T11606] ? kernfs_path_from_node+0x2f/0x290 [ 511.804131][T11606] ? kernfs_path_from_node+0x250/0x290 [ 511.804150][T11606] ? kernfs_path_from_node+0x2f/0x290 [ 511.804173][T11606] sysfs_warn_dup+0x8e/0xa0 [ 511.804192][T11606] sysfs_do_create_link_sd+0xc0/0x110 [ 511.804215][T11606] device_add_class_symlinks+0x1cf/0x240 [ 511.804241][T11606] device_add+0x475/0xb50 [ 511.804267][T11606] wiphy_register+0x1ba6/0x28d0 [ 511.804306][T11606] ? __pfx_wiphy_register+0x10/0x10 [ 511.804325][T11606] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 511.804357][T11606] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 511.804385][T11606] ieee80211_register_hw+0x3484/0x4100 [ 511.804424][T11606] ? ieee80211_register_hw+0x1471/0x4100 [ 511.804457][T11606] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 511.804484][T11606] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.804520][T11606] ? __hrtimer_setup+0x187/0x210 [ 511.804537][T11606] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 511.804558][T11606] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 511.804613][T11606] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 511.804637][T11606] ? trace_kmalloc+0x1f/0xd0 [ 511.804656][T11606] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 511.804678][T11606] ? kstrndup+0xbf/0x160 [ 511.804709][T11606] hwsim_new_radio_nl+0xea4/0x1b10 [ 511.804736][T11606] ? __pfx___nla_validate_parse+0x10/0x10 [ 511.804773][T11606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.804813][T11606] ? __nla_parse+0x40/0x60 [ 511.804837][T11606] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 511.804869][T11606] genl_family_rcv_msg_doit+0x215/0x300 [ 511.804902][T11606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.804939][T11606] ? bpf_lsm_capable+0x9/0x20 [ 511.804961][T11606] ? security_capable+0x7e/0x2e0 [ 511.804992][T11606] genl_rcv_msg+0x60e/0x790 [ 511.805020][T11606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.805042][T11606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.805067][T11606] ? __asan_memcpy+0x40/0x70 [ 511.805086][T11606] ? __pfx_ref_tracker_free+0x10/0x10 [ 511.805113][T11606] netlink_rcv_skb+0x205/0x470 [ 511.805129][T11606] ? __lock_acquire+0xab9/0xd20 [ 511.805151][T11606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.805175][T11606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.805216][T11606] ? down_read+0x1ad/0x2e0 [ 511.805242][T11606] genl_rcv+0x28/0x40 [ 511.805262][T11606] netlink_unicast+0x82f/0x9e0 [ 511.805298][T11606] ? __pfx_netlink_unicast+0x10/0x10 [ 511.805324][T11606] ? netlink_sendmsg+0x642/0xb30 [ 511.805339][T11606] ? skb_put+0x11b/0x210 [ 511.805361][T11606] netlink_sendmsg+0x805/0xb30 [ 511.805390][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.805412][T11606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.805432][T11606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.805451][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.805472][T11606] __sock_sendmsg+0x219/0x270 [ 511.805510][T11606] ____sys_sendmsg+0x505/0x830 [ 511.805538][T11606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.805569][T11606] ? import_iovec+0x74/0xa0 [ 511.805596][T11606] ___sys_sendmsg+0x21f/0x2a0 [ 511.805621][T11606] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.805682][T11606] ? __fget_files+0x2a/0x420 [ 511.805697][T11606] ? __fget_files+0x3a0/0x420 [ 511.805725][T11606] __x64_sys_sendmsg+0x19b/0x260 [ 511.805749][T11606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.805780][T11606] ? rcu_is_watching+0x15/0xb0 [ 511.805801][T11606] ? do_syscall_64+0xbe/0x3b0 [ 511.805825][T11606] do_syscall_64+0xfa/0x3b0 [ 511.805847][T11606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.805865][T11606] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.805882][T11606] ? clear_bhb_loop+0x60/0xb0 [ 511.805902][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.805919][T11606] RIP: 0033:0x7fe1d758eec9 [ 511.805936][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.805950][T11606] RSP: 002b:00007fe1d8476038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.805969][T11606] RAX: ffffffffffffffda RBX: 00007fe1d77e5fa0 RCX: 00007fe1d758eec9 [ 511.805982][T11606] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 511.805992][T11606] RBP: 00007fe1d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.806004][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.806016][T11606] R13: 00007fe1d77e6038 R14: 00007fe1d77e5fa0 R15: 00007fe1d790fa28 [ 511.806048][T11606] [ 512.625251][ T5919] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 512.658521][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.666459][ T43] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 512.686294][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.708370][T11625] bond1: left promiscuous mode [ 512.716092][T11625] geneve2: left promiscuous mode [ 512.721773][T11625] gre1: left promiscuous mode [ 512.736736][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 512.736750][ T30] audit: type=1326 audit(1758948923.502:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159358eec9 code=0x7ffc0000 [ 512.736877][ T43] em28xx 10-1:0.0: Config register raw data: 0x41 [ 512.742902][ T30] audit: type=1326 audit(1758948923.502:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159358eec9 code=0x7ffc0000 [ 512.795931][ T30] audit: type=1326 audit(1758948923.502:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f159358eec9 code=0x7ffc0000 [ 512.882610][ T30] audit: type=1326 audit(1758948923.502:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f159358eec9 code=0x7ffc0000 [ 512.944141][ T30] audit: type=1326 audit(1758948923.502:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.5.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f159358eec9 code=0x7ffc0000 [ 513.213098][ T5919] usb 9-1: USB disconnect, device number 78 [ 513.737781][T11656] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.1435'. [ 514.058252][ T24] usb 10-1: USB disconnect, device number 73 [ 514.065888][ T24] em28xx 10-1:0.0: Disconnecting em28xx [ 514.089472][ T24] em28xx 10-1:0.0: Freeing device [ 514.099439][T11661] tipc: Enabling of bearer rejected, failed to enable media [ 514.187491][T11664] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1438'. [ 514.885656][ T5919] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 515.199142][ T5919] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.279415][ T5919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.302731][ T5919] usb 10-1: Product: syz [ 515.311581][ T5919] usb 10-1: Manufacturer: syz [ 515.327206][ T5919] usb 10-1: SerialNumber: syz [ 515.382452][ T5919] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.448926][ T5926] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 515.687608][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.885120][ T9] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 516.110387][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 516.153971][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 516.169667][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.183541][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.193234][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.221291][ T9] usb 9-1: Product: syz [ 516.256085][ T9] usb 9-1: Manufacturer: syz [ 516.285606][ T43] usb 10-1: USB disconnect, device number 74 [ 516.301800][ T9] usb 9-1: SerialNumber: syz [ 516.335900][ T9] usb 9-1: config 0 descriptor?? [ 516.361307][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.423393][ T9] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 516.475204][ T5926] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 516.485231][ T5926] ath9k_htc: Failed to initialize the device [ 516.502966][ T43] usb 10-1: ath9k_htc: USB layer deinitialized [ 516.512588][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 516.771024][T11677] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 516.785138][T11677] CPU: 1 UID: 0 PID: 11677 Comm: syz.8.1442 Not tainted syzkaller #0 PREEMPT(full) [ 516.785165][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.785176][T11677] Call Trace: [ 516.785185][T11677] [ 516.785193][T11677] dump_stack_lvl+0x189/0x250 [ 516.785221][T11677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.785243][T11677] ? __pfx__printk+0x10/0x10 [ 516.785274][T11677] ? kernfs_path_from_node+0x2f/0x290 [ 516.785294][T11677] ? kernfs_path_from_node+0x250/0x290 [ 516.785309][T11677] ? kernfs_path_from_node+0x2f/0x290 [ 516.785322][T11677] sysfs_warn_dup+0x8e/0xa0 [ 516.785332][T11677] sysfs_do_create_link_sd+0xc0/0x110 [ 516.785344][T11677] device_add_class_symlinks+0x1cf/0x240 [ 516.785359][T11677] device_add+0x475/0xb50 [ 516.785382][T11677] wiphy_register+0x1ba6/0x28d0 [ 516.785421][T11677] ? __pfx_wiphy_register+0x10/0x10 [ 516.785439][T11677] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 516.785463][T11677] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 516.785479][T11677] ieee80211_register_hw+0x3484/0x4100 [ 516.785503][T11677] ? ieee80211_register_hw+0x1471/0x4100 [ 516.785526][T11677] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 516.785554][T11677] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 516.785582][T11677] ? __hrtimer_setup+0x187/0x210 [ 516.785599][T11677] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 516.785614][T11677] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 516.785646][T11677] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 516.785659][T11677] ? trace_kmalloc+0x1f/0xd0 [ 516.785676][T11677] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 516.785701][T11677] ? kstrndup+0xbf/0x160 [ 516.785731][T11677] hwsim_new_radio_nl+0xea4/0x1b10 [ 516.785756][T11677] ? __pfx___nla_validate_parse+0x10/0x10 [ 516.785775][T11677] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.785796][T11677] ? __nla_parse+0x40/0x60 [ 516.785808][T11677] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 516.785840][T11677] genl_family_rcv_msg_doit+0x215/0x300 [ 516.785872][T11677] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.785906][T11677] ? bpf_lsm_capable+0x9/0x20 [ 516.785919][T11677] ? security_capable+0x7e/0x2e0 [ 516.785937][T11677] genl_rcv_msg+0x60e/0x790 [ 516.785953][T11677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.785969][T11677] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.786010][T11677] netlink_rcv_skb+0x205/0x470 [ 516.786027][T11677] ? __lock_acquire+0xab9/0xd20 [ 516.786051][T11677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.786064][T11677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.786085][T11677] ? down_read+0x1ad/0x2e0 [ 516.786098][T11677] genl_rcv+0x28/0x40 [ 516.786111][T11677] netlink_unicast+0x82f/0x9e0 [ 516.786156][T11677] ? __pfx_netlink_unicast+0x10/0x10 [ 516.786185][T11677] ? netlink_sendmsg+0x642/0xb30 [ 516.786200][T11677] ? skb_put+0x11b/0x210 [ 516.786213][T11677] netlink_sendmsg+0x805/0xb30 [ 516.786229][T11677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.786241][T11677] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.786253][T11677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.786268][T11677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.786289][T11677] __sock_sendmsg+0x219/0x270 [ 516.786319][T11677] ____sys_sendmsg+0x505/0x830 [ 516.786346][T11677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.786363][T11677] ? import_iovec+0x74/0xa0 [ 516.786380][T11677] ___sys_sendmsg+0x21f/0x2a0 [ 516.786394][T11677] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.786448][T11677] ? __fget_files+0x2a/0x420 [ 516.786465][T11677] ? __fget_files+0x3a0/0x420 [ 516.786492][T11677] __x64_sys_sendmsg+0x19b/0x260 [ 516.786507][T11677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.786525][T11677] ? rcu_is_watching+0x15/0xb0 [ 516.786538][T11677] ? do_syscall_64+0xbe/0x3b0 [ 516.786552][T11677] do_syscall_64+0xfa/0x3b0 [ 516.786572][T11677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.786590][T11677] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.786607][T11677] ? clear_bhb_loop+0x60/0xb0 [ 516.786630][T11677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.786644][T11677] RIP: 0033:0x7f062e58eec9 [ 516.786655][T11677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.786664][T11677] RSP: 002b:00007f062f500038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.786676][T11677] RAX: ffffffffffffffda RBX: 00007f062e7e5fa0 RCX: 00007f062e58eec9 [ 516.786683][T11677] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 516.786689][T11677] RBP: 00007f062e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.786695][T11677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.786702][T11677] R13: 00007f062e7e6038 R14: 00007f062e7e5fa0 R15: 00007f062e90fa28 [ 516.786735][T11677] [ 517.248210][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.498245][T11692] ÿÿÿÿÿÿÇ(¯J: entered promiscuous mode [ 517.504362][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 517.552726][ T9] em28xx 9-1:0.0: Config register raw data: 0x41 [ 517.564428][T11692] tunl0: entered promiscuous mode [ 517.570236][T11692] gre0: entered promiscuous mode [ 517.588031][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.614047][T11692] gretap0: entered promiscuous mode [ 517.629312][T11692] ip_vti0: entered promiscuous mode [ 517.637420][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.663973][T11692] ip6_vti0: entered promiscuous mode [ 517.701937][T11692] sit0: entered promiscuous mode [ 517.709759][T11692] ip6tnl0: entered promiscuous mode [ 517.722312][T11692] ip6gre0: entered promiscuous mode [ 517.730899][T11692] syz_tun: entered promiscuous mode [ 517.736919][T11692] ip6gretap0: entered promiscuous mode [ 517.751514][T11692] vcan0: entered promiscuous mode [ 517.765499][T11692] bond0: entered promiscuous mode [ 517.782476][T11692] bond_slave_0: entered promiscuous mode [ 517.807012][T11692] bond_slave_1: entered promiscuous mode [ 517.813549][T11692] team0: entered promiscuous mode [ 517.820988][T11692] team_slave_0: entered promiscuous mode [ 517.830725][T11692] team_slave_1: entered promiscuous mode [ 517.839901][T11692] dummy0: entered promiscuous mode [ 517.846267][T11692] nlmon0: entered promiscuous mode [ 517.852130][T11692] caif0: entered promiscuous mode [ 517.859159][T11692] net_ratelimit: 18 callbacks suppressed [ 517.859169][T11692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.880782][T11706] C: renamed from team_slave_0 (while UP) [ 517.889156][T11706] netlink: 'syz.9.1451': attribute type 4 has an invalid length. [ 517.896953][T11706] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1451'. [ 517.906602][T11706] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 518.225131][ T43] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 518.271072][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.280198][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.385326][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 518.394466][ T43] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.407846][ T43] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 518.417116][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.429910][ T43] usb 10-1: config 0 descriptor?? [ 518.438395][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 518.859097][ T43] gspca_vc032x: reg_w err -71 [ 518.864044][ T43] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 518.878888][ T43] usb 10-1: USB disconnect, device number 75 [ 519.021836][ T5926] usb 9-1: USB disconnect, device number 79 [ 519.034915][ T5926] em28xx 9-1:0.0: Disconnecting em28xx [ 519.046773][ T5926] em28xx 9-1:0.0: Freeing device [ 519.073539][T11728] netlink: 'syz.8.1458': attribute type 5 has an invalid length. [ 519.215091][ T43] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 519.365983][ T43] usb 10-1: too many configurations: 140, using maximum allowed: 8 [ 519.375510][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.386639][ T43] usb 10-1: config 1 has no interfaces? [ 519.393322][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.404025][ T43] usb 10-1: config 1 has no interfaces? [ 519.410945][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.421378][ T43] usb 10-1: config 1 has no interfaces? [ 519.430247][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.531558][ T43] usb 10-1: config 1 has no interfaces? [ 519.540140][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.550419][ T43] usb 10-1: config 1 has no interfaces? [ 519.570082][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.586886][ T43] usb 10-1: config 1 has no interfaces? [ 519.593417][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.595130][ T5926] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 519.604911][ T43] usb 10-1: config 1 has no interfaces? [ 519.622339][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.640013][ T43] usb 10-1: config 1 has no interfaces? [ 519.650655][ T43] usb 10-1: New USB device found, idVendor=28de, idProduct=ecd0, bcdDevice=cd.14 [ 519.665377][ T43] usb 10-1: New USB device strings: Mfr=45, Product=69, SerialNumber=28 [ 519.673819][ T43] usb 10-1: Product: syz [ 519.679121][ T43] usb 10-1: Manufacturer: syz [ 519.683805][ T43] usb 10-1: SerialNumber: syz [ 519.765131][ T5926] usb 9-1: device descriptor read/64, error -71 [ 519.978409][T11740] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1457'. [ 519.988333][T11740] netlink: zone id is out of range [ 519.993476][T11740] netlink: zone id is out of range [ 519.998794][T11740] netlink: zone id is out of range [ 520.004925][T11740] netlink: zone id is out of range [ 520.013822][T11740] netlink: zone id is out of range [ 520.019086][ T5926] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 520.026682][T11740] netlink: zone id is out of range [ 520.031783][T11740] netlink: zone id is out of range [ 520.037057][T11740] netlink: zone id is out of range [ 520.165214][ T5926] usb 9-1: device descriptor read/64, error -71 [ 520.275780][ T5926] usb usb9-port1: attempt power cycle [ 520.645542][ T5926] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 520.676212][ T5926] usb 9-1: device descriptor read/8, error -71 [ 520.918228][ T5926] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 520.956225][ T5926] usb 9-1: device descriptor read/8, error -71 [ 521.068653][ T5926] usb usb9-port1: unable to enumerate USB device [ 521.585553][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1467'. [ 521.938506][ T43] usb 10-1: USB disconnect, device number 76 [ 522.275616][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 522.305921][ T43] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 522.465209][ T43] usb 10-1: Using ep0 maxpacket: 16 [ 522.477145][ T43] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.492638][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.510355][ T43] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.519835][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.532013][ T43] usb 10-1: Product: syz [ 522.536978][ T43] usb 10-1: Manufacturer: syz [ 522.541818][ T43] usb 10-1: SerialNumber: syz [ 522.555263][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.572472][ T43] usb 10-1: config 0 descriptor?? [ 522.586420][ T43] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 522.597904][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.605908][ T43] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 522.975110][ T5946] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 523.010897][T11761] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 523.020592][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.9.1469 Not tainted syzkaller #0 PREEMPT(full) [ 523.020616][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.020628][T11761] Call Trace: [ 523.020640][T11761] [ 523.020648][T11761] dump_stack_lvl+0x189/0x250 [ 523.020679][T11761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.020702][T11761] ? __pfx__printk+0x10/0x10 [ 523.020733][T11761] ? kernfs_path_from_node+0x2f/0x290 [ 523.020753][T11761] ? kernfs_path_from_node+0x250/0x290 [ 523.020771][T11761] ? kernfs_path_from_node+0x2f/0x290 [ 523.020794][T11761] sysfs_warn_dup+0x8e/0xa0 [ 523.020813][T11761] sysfs_do_create_link_sd+0xc0/0x110 [ 523.020836][T11761] device_add_class_symlinks+0x1cf/0x240 [ 523.020863][T11761] device_add+0x475/0xb50 [ 523.020889][T11761] wiphy_register+0x1ba6/0x28d0 [ 523.020935][T11761] ? __pfx_wiphy_register+0x10/0x10 [ 523.020955][T11761] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 523.020988][T11761] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 523.021017][T11761] ieee80211_register_hw+0x3484/0x4100 [ 523.021057][T11761] ? ieee80211_register_hw+0x1471/0x4100 [ 523.021091][T11761] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 523.021119][T11761] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 523.021147][T11761] ? __hrtimer_setup+0x187/0x210 [ 523.021164][T11761] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 523.021187][T11761] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 523.021246][T11761] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 523.021270][T11761] ? trace_kmalloc+0x1f/0xd0 [ 523.021290][T11761] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 523.021313][T11761] ? kstrndup+0xbf/0x160 [ 523.021343][T11761] hwsim_new_radio_nl+0xea4/0x1b10 [ 523.021371][T11761] ? __pfx___nla_validate_parse+0x10/0x10 [ 523.021407][T11761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 523.021446][T11761] ? __nla_parse+0x40/0x60 [ 523.021469][T11761] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 523.021500][T11761] genl_family_rcv_msg_doit+0x215/0x300 [ 523.021530][T11761] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.021570][T11761] ? bpf_lsm_capable+0x9/0x20 [ 523.021592][T11761] ? security_capable+0x7e/0x2e0 [ 523.021624][T11761] genl_rcv_msg+0x60e/0x790 [ 523.021670][T11761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.021693][T11761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 523.021720][T11761] ? __asan_memcpy+0x40/0x70 [ 523.021741][T11761] ? __pfx_ref_tracker_free+0x10/0x10 [ 523.021768][T11761] netlink_rcv_skb+0x205/0x470 [ 523.021786][T11761] ? __lock_acquire+0xab9/0xd20 [ 523.021810][T11761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.021835][T11761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.021876][T11761] ? down_read+0x1ad/0x2e0 [ 523.021901][T11761] genl_rcv+0x28/0x40 [ 523.021927][T11761] netlink_unicast+0x82f/0x9e0 [ 523.021963][T11761] ? __pfx_netlink_unicast+0x10/0x10 [ 523.021991][T11761] ? netlink_sendmsg+0x642/0xb30 [ 523.022009][T11761] ? skb_put+0x11b/0x210 [ 523.022034][T11761] netlink_sendmsg+0x805/0xb30 [ 523.022065][T11761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.022089][T11761] ? aa_sock_msg_perm+0xf1/0x1d0 [ 523.022110][T11761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.022129][T11761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.022150][T11761] __sock_sendmsg+0x219/0x270 [ 523.022185][T11761] ____sys_sendmsg+0x505/0x830 [ 523.022213][T11761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.022246][T11761] ? import_iovec+0x74/0xa0 [ 523.022272][T11761] ___sys_sendmsg+0x21f/0x2a0 [ 523.022297][T11761] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.022362][T11761] ? __fget_files+0x2a/0x420 [ 523.022378][T11761] ? __fget_files+0x3a0/0x420 [ 523.022408][T11761] __x64_sys_sendmsg+0x19b/0x260 [ 523.022433][T11761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.022477][T11761] ? do_syscall_64+0xbe/0x3b0 [ 523.022502][T11761] do_syscall_64+0xfa/0x3b0 [ 523.022520][T11761] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.022539][T11761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.022558][T11761] ? clear_bhb_loop+0x60/0xb0 [ 523.022579][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.022596][T11761] RIP: 0033:0x7fe1d758eec9 [ 523.022613][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.022628][T11761] RSP: 002b:00007fe1d8476038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.022649][T11761] RAX: ffffffffffffffda RBX: 00007fe1d77e5fa0 RCX: 00007fe1d758eec9 [ 523.022662][T11761] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 523.022675][T11761] RBP: 00007fe1d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 523.022687][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.022698][T11761] R13: 00007fe1d77e6038 R14: 00007fe1d77e5fa0 R15: 00007fe1d790fa28 [ 523.022731][T11761] [ 523.515259][ T5946] usb 9-1: Using ep0 maxpacket: 16 [ 523.522977][ T5946] usb 9-1: config 125 has an invalid interface number: 38 but max is 2 [ 523.531546][ T5946] usb 9-1: config 125 has an invalid interface number: 219 but max is 2 [ 523.540539][ T5946] usb 9-1: config 125 contains an unexpected descriptor of type 0x2, skipping [ 523.548677][ T43] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 523.550538][ T5946] usb 9-1: config 125 contains an unexpected descriptor of type 0x1, skipping [ 523.564528][ T5946] usb 9-1: config 125 has an invalid interface number: 69 but max is 2 [ 523.564662][ T43] em28xx 10-1:0.0: Config register raw data: 0x41 [ 523.572880][ T5946] usb 9-1: config 125 has no interface number 0 [ 523.572899][ T5946] usb 9-1: config 125 has no interface number 1 [ 523.572914][ T5946] usb 9-1: config 125 has no interface number 2 [ 523.572983][ T5946] usb 9-1: config 125 interface 38 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 523.573010][ T5946] usb 9-1: config 125 interface 38 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 523.573030][ T5946] usb 9-1: config 125 interface 38 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 523.637508][ T5946] usb 9-1: config 125 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 523.649744][ T5946] usb 9-1: config 125 interface 38 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 523.662401][ T5946] usb 9-1: config 125 interface 219 altsetting 5 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 523.673811][ T5946] usb 9-1: config 125 interface 219 altsetting 5 endpoint 0xD has invalid maxpacket 959, setting to 64 [ 523.685223][ T5946] usb 9-1: config 125 interface 219 altsetting 5 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.698059][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 523.709176][ T5946] usb 9-1: config 125 interface 219 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 523.720286][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 523.731180][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has an endpoint descriptor with address 0xED, changing to 0x8D [ 523.743564][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x8D, skipping [ 523.754691][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 523.767555][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 523.784136][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 523.797148][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 523.808275][ T5946] usb 9-1: config 125 interface 219 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 523.819630][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 523.830661][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has an endpoint descriptor with address 0x98, changing to 0x88 [ 523.846915][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has a duplicate endpoint with address 0x88, skipping [ 523.858053][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 523.869050][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 523.880218][ T5946] usb 9-1: config 125 interface 69 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 523.891553][ T5946] usb 9-1: config 125 interface 38 has no altsetting 0 [ 523.898517][ T5946] usb 9-1: config 125 interface 219 has no altsetting 0 [ 523.905580][ T5946] usb 9-1: config 125 interface 69 has no altsetting 0 [ 523.914044][ T5946] usb 9-1: New USB device found, idVendor=0586, idProduct=341a, bcdDevice=7a.85 [ 523.924796][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.932923][ T5946] usb 9-1: Product: ш [ 523.937127][ T5946] usb 9-1: SerialNumber: syz [ 524.174854][ T5946] usb 9-1: USB disconnect, device number 84 [ 524.739597][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1477'. [ 524.827465][T11787] loop4: detected capacity change from 0 to 7 [ 524.834821][T11787] Dev loop4: unable to read RDB block 7 [ 524.840737][T11787] loop4: AHDI p1 p2 [ 524.844664][T11787] loop4: partition table partially beyond EOD, truncated [ 524.852908][T11787] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 524.909000][T11789] FAULT_INJECTION: forcing a failure. [ 524.909000][T11789] name failslab, interval 1, probability 0, space 0, times 0 [ 524.923874][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.6.1480 Not tainted syzkaller #0 PREEMPT(full) [ 524.923897][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.923907][T11789] Call Trace: [ 524.923915][T11789] [ 524.923923][T11789] dump_stack_lvl+0x189/0x250 [ 524.923948][T11789] ? __pfx____ratelimit+0x10/0x10 [ 524.923966][T11789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.923985][T11789] ? __pfx__printk+0x10/0x10 [ 524.924012][T11789] ? __pfx___might_resched+0x10/0x10 [ 524.924033][T11789] should_fail_ex+0x414/0x560 [ 524.924062][T11789] should_failslab+0xa8/0x100 [ 524.924086][T11789] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 524.924108][T11789] ? __alloc_skb+0x112/0x2d0 [ 524.924131][T11789] __alloc_skb+0x112/0x2d0 [ 524.924153][T11789] netlink_sendmsg+0x5c6/0xb30 [ 524.924180][T11789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.924202][T11789] ? aa_sock_msg_perm+0xf1/0x1d0 [ 524.924220][T11789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.924237][T11789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.924257][T11789] __sock_sendmsg+0x219/0x270 [ 524.924283][T11789] ____sys_sendmsg+0x52d/0x830 [ 524.924309][T11789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.924339][T11789] ? import_iovec+0x74/0xa0 [ 524.924363][T11789] ___sys_sendmsg+0x21f/0x2a0 [ 524.924386][T11789] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.924439][T11789] ? __fget_files+0x2a/0x420 [ 524.924454][T11789] ? __fget_files+0x3a0/0x420 [ 524.924478][T11789] __sys_sendmmsg+0x227/0x430 [ 524.924503][T11789] ? __pfx___sys_sendmmsg+0x10/0x10 [ 524.924521][T11789] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 524.924567][T11789] ? ksys_write+0x22a/0x250 [ 524.924589][T11789] ? __pfx_ksys_write+0x10/0x10 [ 524.924608][T11789] ? rcu_is_watching+0x15/0xb0 [ 524.924631][T11789] __x64_sys_sendmmsg+0xa0/0xc0 [ 524.924654][T11789] do_syscall_64+0xfa/0x3b0 [ 524.924671][T11789] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.924688][T11789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.924702][T11789] ? clear_bhb_loop+0x60/0xb0 [ 524.924722][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.924745][T11789] RIP: 0033:0x7fc7cf38eec9 [ 524.924759][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.924773][T11789] RSP: 002b:00007fc7d01b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 524.924792][T11789] RAX: ffffffffffffffda RBX: 00007fc7cf5e5fa0 RCX: 00007fc7cf38eec9 [ 524.924805][T11789] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 524.924814][T11789] RBP: 00007fc7d01b3090 R08: 0000000000000000 R09: 0000000000000000 [ 524.924829][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.924840][T11789] R13: 00007fc7cf5e6038 R14: 00007fc7cf5e5fa0 R15: 00007fc7cf70fa28 [ 524.924869][T11789] [ 525.212345][ T6744] udevd[6744]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 525.246724][ T43] usb 10-1: USB disconnect, device number 77 [ 525.254228][ T43] em28xx 10-1:0.0: Disconnecting em28xx [ 525.265200][ T9] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 525.280624][ T43] em28xx 10-1:0.0: Freeing device [ 525.353189][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 525.427023][T11793] tipc: Enabling of bearer rejected, failed to enable media [ 525.436044][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 525.469208][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 525.483930][ T9] usb 9-1: config 50 has an invalid interface number: 75 but max is 0 [ 525.504387][ T9] usb 9-1: config 50 has no interface number 0 [ 525.531285][ T9] usb 9-1: config 50 interface 75 altsetting 42 endpoint 0x3 has invalid maxpacket 592, setting to 64 [ 525.550069][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1484'. [ 525.600043][ T9] usb 9-1: config 50 interface 75 altsetting 42 bulk endpoint 0x2 has invalid maxpacket 32 [ 525.617209][T11797] net_ratelimit: 19 callbacks suppressed [ 525.617224][T11797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.651178][ T9] usb 9-1: config 50 interface 75 has no altsetting 0 [ 525.683103][ T9] usb 9-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 525.694445][T11803] netlink: 'syz.5.1486': attribute type 3 has an invalid length. [ 525.702515][T11803] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1486'. [ 525.720794][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.721490][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.729740][ T9] usb 9-1: Product: syz [ 525.745661][ T9] usb 9-1: Manufacturer: syz [ 525.750278][ T9] usb 9-1: SerialNumber: syz [ 525.762589][T11785] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 525.771242][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.265177][T11825] usb usb7-port1: device 7-1 not suspended yet [ 526.710197][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.719038][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.873309][ T9] radioshark 9-1:50.75: Invalid radioSHARK device [ 526.880015][ T9] radioshark 9-1:50.75: probe with driver radioshark failed with error -22 [ 526.906104][ T9] usbhid 9-1:50.75: couldn't find an input interrupt endpoint [ 526.990266][ T9] usb 9-1: USB disconnect, device number 85 [ 527.492107][T11840] block device autoloading is deprecated and will be removed. [ 528.043654][T11850] tipc: Enabled bearer , priority 0 [ 528.058946][T11850] syzkaller0: entered promiscuous mode [ 528.064518][T11850] syzkaller0: entered allmulticast mode [ 528.079109][T11851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.185364][ T9] tipc: Node number set to 50331694 [ 529.623042][T11854] usb usb7-port1: device 7-1 not suspended yet [ 530.987450][ T919] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 531.155204][ T919] usb 10-1: device descriptor read/64, error -71 [ 531.395229][ T919] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 531.537533][ T919] usb 10-1: device descriptor read/64, error -71 [ 531.550534][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.603915][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.616998][T11895] usb usb7-port1: device 7-1 not suspended yet [ 531.675542][ T919] usb usb10-port1: attempt power cycle [ 531.809217][T11902] tipc: Enabling of bearer rejected, failed to enable media [ 532.025127][ T919] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 532.045495][ T919] usb 10-1: device descriptor read/8, error -71 [ 532.295201][ T919] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 532.321162][ T919] usb 10-1: device descriptor read/8, error -71 [ 532.438164][ T919] usb usb10-port1: unable to enumerate USB device [ 533.248597][T11924] fuse: Bad value for 'fd' [ 533.506238][ T9] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 533.655061][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 533.662343][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.672274][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.682091][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.692092][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.706448][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.715602][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.834662][T11927] FAULT_INJECTION: forcing a failure. [ 533.834662][T11927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.848089][T11927] CPU: 1 UID: 0 PID: 11927 Comm: syz.9.1525 Not tainted syzkaller #0 PREEMPT(full) [ 533.848112][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.848129][T11927] Call Trace: [ 533.848137][T11927] [ 533.848146][T11927] dump_stack_lvl+0x189/0x250 [ 533.848167][T11927] ? __pfx____ratelimit+0x10/0x10 [ 533.848185][T11927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.848205][T11927] ? __pfx__printk+0x10/0x10 [ 533.848227][T11927] ? __might_fault+0xb0/0x130 [ 533.848260][T11927] should_fail_ex+0x414/0x560 [ 533.848280][T11927] _copy_from_user+0x2d/0xb0 [ 533.848294][T11927] ___sys_sendmsg+0x158/0x2a0 [ 533.848309][T11927] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.848353][T11927] ? __fget_files+0x2a/0x420 [ 533.848369][T11927] ? __fget_files+0x3a0/0x420 [ 533.848395][T11927] __x64_sys_sendmsg+0x19b/0x260 [ 533.848416][T11927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.848433][T11927] ? __pfx_ksys_write+0x10/0x10 [ 533.848449][T11927] ? do_syscall_64+0xbe/0x3b0 [ 533.848463][T11927] do_syscall_64+0xfa/0x3b0 [ 533.848476][T11927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.848491][T11927] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.848508][T11927] ? clear_bhb_loop+0x60/0xb0 [ 533.848529][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.848546][T11927] RIP: 0033:0x7fe1d758eec9 [ 533.848561][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.848571][T11927] RSP: 002b:00007fe1d8455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.848582][T11927] RAX: ffffffffffffffda RBX: 00007fe1d77e6090 RCX: 00007fe1d758eec9 [ 533.848590][T11927] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 533.848596][T11927] RBP: 00007fe1d8455090 R08: 0000000000000000 R09: 0000000000000000 [ 533.848602][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.848608][T11927] R13: 00007fe1d77e6128 R14: 00007fe1d77e6090 R15: 00007fe1d790fa28 [ 533.848624][T11927] [ 534.055114][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.070519][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 534.076091][ T9] usbtmc 9-1:16.0: can't read capabilities [ 534.669197][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1527'. [ 534.682338][T11931] usb usb7-port1: device 7-1 not suspended yet [ 534.820960][T11936] tipc: Enabling of bearer rejected, failed to enable media [ 534.975130][ T919] usb 10-1: new full-speed USB device number 82 using dummy_hcd [ 535.136410][ T919] usb 10-1: too many configurations: 140, using maximum allowed: 8 [ 535.148015][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.159035][ T919] usb 10-1: config 1 has no interfaces? [ 535.168638][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.180315][ T919] usb 10-1: config 1 has no interfaces? [ 535.188220][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.198779][ T919] usb 10-1: config 1 has no interfaces? [ 535.205750][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.216162][ T919] usb 10-1: config 1 has no interfaces? [ 535.222495][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.232774][ T919] usb 10-1: config 1 has no interfaces? [ 535.239420][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.250858][ T919] usb 10-1: config 1 has no interfaces? [ 535.257604][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.268413][ T919] usb 10-1: config 1 has no interfaces? [ 535.278545][ T919] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.289975][ T919] usb 10-1: config 1 has no interfaces? [ 535.301182][ T919] usb 10-1: New USB device found, idVendor=28de, idProduct=ecd0, bcdDevice=cd.14 [ 535.310711][ T919] usb 10-1: New USB device strings: Mfr=45, Product=69, SerialNumber=28 [ 535.319250][ T919] usb 10-1: Product: syz [ 535.323832][ T919] usb 10-1: Manufacturer: syz [ 535.328582][ T919] usb 10-1: SerialNumber: syz [ 535.605465][T11950] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1528'. [ 535.614693][T11950] netlink: zone id is out of range [ 535.621380][T11950] netlink: zone id is out of range [ 535.629059][T11950] netlink: zone id is out of range [ 535.634215][T11950] netlink: zone id is out of range [ 535.640439][T11950] netlink: zone id is out of range [ 535.647197][T11950] netlink: zone id is out of range [ 535.652498][T11950] netlink: zone id is out of range [ 535.658632][T11950] netlink: zone id is out of range [ 535.663950][T11950] netlink: zone id is out of range [ 535.670505][T11950] netlink: zone id is out of range [ 535.678702][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1536'. [ 535.806375][T11957] FAULT_INJECTION: forcing a failure. [ 535.806375][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 535.820919][T11957] CPU: 1 UID: 0 PID: 11957 Comm: syz.5.1537 Not tainted syzkaller #0 PREEMPT(full) [ 535.820934][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.820940][T11957] Call Trace: [ 535.820945][T11957] [ 535.820958][T11957] dump_stack_lvl+0x189/0x250 [ 535.820975][T11957] ? __pfx____ratelimit+0x10/0x10 [ 535.820987][T11957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.820998][T11957] ? __pfx__printk+0x10/0x10 [ 535.821015][T11957] ? __pfx___might_resched+0x10/0x10 [ 535.821027][T11957] should_fail_ex+0x414/0x560 [ 535.821044][T11957] should_failslab+0xa8/0x100 [ 535.821060][T11957] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 535.821074][T11957] ? __alloc_skb+0x112/0x2d0 [ 535.821087][T11957] __alloc_skb+0x112/0x2d0 [ 535.821100][T11957] netlink_sendmsg+0x5c6/0xb30 [ 535.821116][T11957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.821133][T11957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 535.821145][T11957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 535.821155][T11957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.821167][T11957] __sock_sendmsg+0x219/0x270 [ 535.821183][T11957] ____sys_sendmsg+0x505/0x830 [ 535.821198][T11957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.821215][T11957] ? import_iovec+0x74/0xa0 [ 535.821230][T11957] ___sys_sendmsg+0x21f/0x2a0 [ 535.821243][T11957] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.821273][T11957] ? __fget_files+0x2a/0x420 [ 535.821281][T11957] ? __fget_files+0x3a0/0x420 [ 535.821294][T11957] __x64_sys_sendmsg+0x19b/0x260 [ 535.821309][T11957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.821336][T11957] ? __pfx_ksys_write+0x10/0x10 [ 535.821355][T11957] ? rcu_is_watching+0x15/0xb0 [ 535.821376][T11957] ? do_syscall_64+0xbe/0x3b0 [ 535.821389][T11957] do_syscall_64+0xfa/0x3b0 [ 535.821400][T11957] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.821410][T11957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.821419][T11957] ? clear_bhb_loop+0x60/0xb0 [ 535.821431][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.821440][T11957] RIP: 0033:0x7f159358eec9 [ 535.821450][T11957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.821459][T11957] RSP: 002b:00007f15944b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.821470][T11957] RAX: ffffffffffffffda RBX: 00007f15937e6090 RCX: 00007f159358eec9 [ 535.821477][T11957] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 535.821483][T11957] RBP: 00007f15944b5090 R08: 0000000000000000 R09: 0000000000000000 [ 535.821490][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.821495][T11957] R13: 00007f15937e6128 R14: 00007f15937e6090 R15: 00007f159390fa28 [ 535.821510][T11957] [ 535.823341][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1538'. [ 536.157427][T11955] usb usb7-port1: device 7-1 not suspended yet [ 536.236185][ T9] usb 9-1: USB disconnect, device number 86 [ 536.645234][ T9] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 536.825307][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 536.834393][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 536.849368][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.874599][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 536.888525][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.900299][ T9] usb 9-1: Product: syz [ 536.910617][ T9] usb 9-1: Manufacturer: syz [ 536.917950][ T9] usb 9-1: SerialNumber: syz [ 537.125528][ T9] usb 9-1: config 0 descriptor?? [ 537.141868][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.151660][ T9] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 537.544076][T11965] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 537.552024][T11965] CPU: 1 UID: 0 PID: 11965 Comm: syz.8.1541 Not tainted syzkaller #0 PREEMPT(full) [ 537.552046][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.552057][T11965] Call Trace: [ 537.552066][T11965] [ 537.552073][T11965] dump_stack_lvl+0x189/0x250 [ 537.552107][T11965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.552129][T11965] ? __pfx__printk+0x10/0x10 [ 537.552159][T11965] ? kernfs_path_from_node+0x2f/0x290 [ 537.552178][T11965] ? kernfs_path_from_node+0x250/0x290 [ 537.552196][T11965] ? kernfs_path_from_node+0x2f/0x290 [ 537.552221][T11965] sysfs_warn_dup+0x8e/0xa0 [ 537.552241][T11965] sysfs_do_create_link_sd+0xc0/0x110 [ 537.552264][T11965] device_add_class_symlinks+0x1cf/0x240 [ 537.552290][T11965] device_add+0x475/0xb50 [ 537.552316][T11965] wiphy_register+0x1ba6/0x28d0 [ 537.552354][T11965] ? __pfx_wiphy_register+0x10/0x10 [ 537.552372][T11965] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 537.552403][T11965] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 537.552430][T11965] ieee80211_register_hw+0x3484/0x4100 [ 537.552468][T11965] ? ieee80211_register_hw+0x1471/0x4100 [ 537.552501][T11965] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.552539][T11965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.552574][T11965] ? __hrtimer_setup+0x187/0x210 [ 537.552592][T11965] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.552615][T11965] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 537.552670][T11965] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.552693][T11965] ? trace_kmalloc+0x1f/0xd0 [ 537.552713][T11965] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 537.552736][T11965] ? kstrndup+0xbf/0x160 [ 537.552764][T11965] hwsim_new_radio_nl+0xea4/0x1b10 [ 537.552790][T11965] ? __pfx___nla_validate_parse+0x10/0x10 [ 537.552825][T11965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.552864][T11965] ? __nla_parse+0x40/0x60 [ 537.552886][T11965] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.552919][T11965] genl_family_rcv_msg_doit+0x215/0x300 [ 537.552950][T11965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.552988][T11965] ? bpf_lsm_capable+0x9/0x20 [ 537.553009][T11965] ? security_capable+0x7e/0x2e0 [ 537.553040][T11965] genl_rcv_msg+0x60e/0x790 [ 537.553070][T11965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.553091][T11965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.553130][T11965] netlink_rcv_skb+0x205/0x470 [ 537.553147][T11965] ? __lock_acquire+0xab9/0xd20 [ 537.553182][T11965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.553208][T11965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.553246][T11965] ? down_read+0x1ad/0x2e0 [ 537.553271][T11965] genl_rcv+0x28/0x40 [ 537.553290][T11965] netlink_unicast+0x82f/0x9e0 [ 537.553326][T11965] ? __pfx_netlink_unicast+0x10/0x10 [ 537.553355][T11965] ? netlink_sendmsg+0x642/0xb30 [ 537.553371][T11965] ? skb_put+0x11b/0x210 [ 537.553396][T11965] netlink_sendmsg+0x805/0xb30 [ 537.553425][T11965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.553448][T11965] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.553469][T11965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.553487][T11965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.553507][T11965] __sock_sendmsg+0x219/0x270 [ 537.553535][T11965] ____sys_sendmsg+0x505/0x830 [ 537.553570][T11965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.553603][T11965] ? import_iovec+0x74/0xa0 [ 537.553630][T11965] ___sys_sendmsg+0x21f/0x2a0 [ 537.553655][T11965] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.553716][T11965] ? __fget_files+0x2a/0x420 [ 537.553733][T11965] ? __fget_files+0x3a0/0x420 [ 537.553760][T11965] __x64_sys_sendmsg+0x19b/0x260 [ 537.553784][T11965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.553824][T11965] ? do_syscall_64+0xbe/0x3b0 [ 537.553850][T11965] do_syscall_64+0xfa/0x3b0 [ 537.553871][T11965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.553887][T11965] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.553905][T11965] ? clear_bhb_loop+0x60/0xb0 [ 537.553926][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.553942][T11965] RIP: 0033:0x7f062e58eec9 [ 537.553959][T11965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.553974][T11965] RSP: 002b:00007f062f500038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.553993][T11965] RAX: ffffffffffffffda RBX: 00007f062e7e5fa0 RCX: 00007f062e58eec9 [ 537.554008][T11965] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000004 [ 537.554020][T11965] RBP: 00007f062e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.554030][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.554041][T11965] R13: 00007f062e7e6038 R14: 00007f062e7e5fa0 R15: 00007f062e90fa28 [ 537.554072][T11965] [ 538.004502][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.036859][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 538.046538][ T9] em28xx 9-1:0.0: Config register raw data: 0x41 [ 538.112390][ T919] usb 10-1: USB disconnect, device number 82 [ 538.672429][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1550'. [ 538.683633][T11998] usb usb7-port1: device 7-1 not suspended yet [ 539.434402][ T9] usb 9-1: USB disconnect, device number 87 [ 539.460747][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 539.487779][T12010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.500006][T12010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.510821][ T9] em28xx 9-1:0.0: Freeing device [ 540.143319][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.177269][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.270871][T12035] usb usb7-port1: device 7-1 not suspended yet [ 541.025092][ T9] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 541.051871][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.071606][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.155178][ T9] usb 10-1: device descriptor read/64, error -71 [ 541.395425][ T9] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 541.493147][T12065] FAULT_INJECTION: forcing a failure. [ 541.493147][T12065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.507345][T12065] CPU: 0 UID: 0 PID: 12065 Comm: syz.8.1571 Not tainted syzkaller #0 PREEMPT(full) [ 541.507368][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.507380][T12065] Call Trace: [ 541.507388][T12065] [ 541.507396][T12065] dump_stack_lvl+0x189/0x250 [ 541.507420][T12065] ? __pfx____ratelimit+0x10/0x10 [ 541.507440][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.507460][T12065] ? __pfx__printk+0x10/0x10 [ 541.507494][T12065] should_fail_ex+0x414/0x560 [ 541.507522][T12065] _copy_to_user+0x31/0xb0 [ 541.507547][T12065] simple_read_from_buffer+0xe1/0x170 [ 541.507575][T12065] proc_fail_nth_read+0x1b3/0x220 [ 541.507598][T12065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.507620][T12065] ? rw_verify_area+0x2a6/0x4d0 [ 541.507640][T12065] ? __lock_acquire+0xab9/0xd20 [ 541.507661][T12065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.507681][T12065] vfs_read+0x1fd/0xa30 [ 541.507700][T12065] ? fdget_pos+0x247/0x320 [ 541.507720][T12065] ? __pfx___mutex_lock+0x10/0x10 [ 541.507741][T12065] ? __pfx_vfs_read+0x10/0x10 [ 541.507763][T12065] ? __fget_files+0x2a/0x420 [ 541.507783][T12065] ? __fget_files+0x3a0/0x420 [ 541.507797][T12065] ? __fget_files+0x2a/0x420 [ 541.507821][T12065] ksys_read+0x145/0x250 [ 541.507845][T12065] ? __pfx_ksys_read+0x10/0x10 [ 541.507863][T12065] ? rcu_is_watching+0x15/0xb0 [ 541.507886][T12065] ? do_syscall_64+0xbe/0x3b0 [ 541.507909][T12065] do_syscall_64+0xfa/0x3b0 [ 541.507927][T12065] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.507944][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.507961][T12065] ? clear_bhb_loop+0x60/0xb0 [ 541.507982][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.507998][T12065] RIP: 0033:0x7f062e58d8dc [ 541.508015][T12065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 541.508030][T12065] RSP: 002b:00007f062f500030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 541.508049][T12065] RAX: ffffffffffffffda RBX: 00007f062e7e5fa0 RCX: 00007f062e58d8dc [ 541.508061][T12065] RDX: 000000000000000f RSI: 00007f062f5000a0 RDI: 0000000000000005 [ 541.508072][T12065] RBP: 00007f062f500090 R08: 0000000000000000 R09: 0000000000000000 [ 541.508083][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.508094][T12065] R13: 00007f062e7e6038 R14: 00007f062e7e5fa0 R15: 00007f062e90fa28 [ 541.508123][T12065] [ 541.802660][ T9] usb 10-1: device descriptor read/64, error -71 [ 541.829350][T12066] usb usb7-port1: device 7-1 not suspended yet [ 541.915560][ T9] usb usb10-port1: attempt power cycle [ 542.070948][T12073] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1575'. [ 542.219279][ T919] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 542.255207][ T9] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 542.291302][ T9] usb 10-1: device descriptor read/8, error -71 [ 542.375172][ T919] usb 9-1: Using ep0 maxpacket: 32 [ 542.387092][ T919] usb 9-1: config 0 has an invalid interface number: 37 but max is 0 [ 542.401093][ T919] usb 9-1: config 0 has no interface number 0 [ 542.415179][ T919] usb 9-1: config 0 interface 37 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 542.427678][ T919] usb 9-1: config 0 interface 37 has no altsetting 0 [ 542.437091][ T919] usb 9-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 542.449932][ T919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.470287][ T919] usb 9-1: Product: syz [ 542.474564][ T919] usb 9-1: Manufacturer: syz [ 542.480408][ T919] usb 9-1: SerialNumber: syz [ 542.491457][ T919] usb 9-1: config 0 descriptor?? [ 542.506874][ T919] rtl8150 9-1:0.37: couldn't find required endpoints [ 542.514263][ T919] rtl8150 9-1:0.37: probe with driver rtl8150 failed with error -5 [ 542.559831][ T9] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 542.586011][ T9] usb 10-1: device descriptor read/8, error -71 [ 542.696364][ T9] usb usb10-port1: unable to enumerate USB device [ 542.706711][ T919] usb 9-1: USB disconnect, device number 88 [ 544.163082][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1586'. [ 544.575476][T12117] sctp: [Deprecated]: syz.5.1591 (pid 12117) Use of int in max_burst socket option. [ 544.575476][T12117] Use struct sctp_assoc_value instead [ 544.597169][T12118] fuse: Bad value for 'fd' [ 544.602839][T12122] IPVS: length: 202 != 24 [ 544.612658][T12117] sctp: [Deprecated]: syz.5.1591 (pid 12117) Use of int in max_burst socket option. [ 544.612658][T12117] Use struct sctp_assoc_value instead [ 544.652021][T12117] sctp: [Deprecated]: syz.5.1591 (pid 12117) Use of int in max_burst socket option. [ 544.652021][T12117] Use struct sctp_assoc_value instead [ 544.693887][T12117] sctp: [Deprecated]: syz.5.1591 (pid 12117) Use of int in max_burst socket option. [ 544.693887][T12117] Use struct sctp_assoc_value instead [ 545.115675][T12135] Invalid logical block size (7) [ 545.139286][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1597'. [ 545.499238][T12150] random: crng reseeded on system resumption [ 545.584896][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1598'. [ 546.907333][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1601'. [ 546.982245][T12155] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1601'. [ 547.650311][T12182] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1608'. [ 547.671825][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.727955][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.034306][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1614'. [ 548.055130][T12206] net_ratelimit: 17 callbacks suppressed [ 548.055148][T12206] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 548.435134][ T5946] usb 10-1: new full-speed USB device number 87 using dummy_hcd [ 548.586662][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 548.600375][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.626412][ T5946] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 548.659349][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.705398][ T5946] usb 10-1: config 0 descriptor?? [ 548.718826][T12216] tipc: Enabling of bearer rejected, failed to enable media [ 549.065792][T12224] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1621'. [ 549.158853][ T5946] usbhid 10-1:0.0: can't add hid device: -71 [ 549.176571][ T5946] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 549.205772][ T5946] usb 10-1: USB disconnect, device number 87 [ 549.286002][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.325918][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.495097][ T9] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 549.645153][T12241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.739847][T12247] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1628'. [ 550.185303][ T24] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 550.315152][ T24] usb 10-1: device descriptor read/64, error -71 [ 550.555246][ T24] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 550.685102][ T24] usb 10-1: device descriptor read/64, error -71 [ 550.803530][ T24] usb usb10-port1: attempt power cycle [ 551.165162][ T24] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 551.195782][ T24] usb 10-1: device descriptor read/8, error -71 [ 551.419947][ T30] audit: type=1326 audit(1758948962.182:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.472642][ T24] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 551.491640][ T30] audit: type=1326 audit(1758948962.202:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.514003][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.531450][ T24] usb 10-1: device descriptor read/8, error -71 [ 551.538190][ T30] audit: type=1326 audit(1758948962.202:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.561367][ T30] audit: type=1326 audit(1758948962.202:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.583684][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.592614][T12271] netlink: 'syz.8.1637': attribute type 1 has an invalid length. [ 551.615756][ T30] audit: type=1326 audit(1758948962.202:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.645660][ T24] usb usb10-port1: unable to enumerate USB device [ 551.653353][ T30] audit: type=1326 audit(1758948962.212:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.679976][ T30] audit: type=1326 audit(1758948962.212:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.694737][T12273] gretap1: entered allmulticast mode [ 551.709690][ T30] audit: type=1326 audit(1758948962.212:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.733954][T12271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.736319][ T30] audit: type=1326 audit(1758948962.212:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.759715][T12273] bond3: (slave gretap1): making interface the new active one [ 551.766175][ T30] audit: type=1326 audit(1758948962.212:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.8.1636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062e58eec9 code=0x7ffc0000 [ 551.803021][T12273] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 552.619396][T12277] usb usb1: check_ctrlrecip: process 12277 (syz.5.1639) requesting ep 01 but needs 81 [ 552.648041][T12277] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 552.659095][T12277] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 552.807394][ T24] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 552.844685][T12285] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1642'. [ 552.925482][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.925873][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.997578][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 553.009727][ T24] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 553.009754][ T24] usb 9-1: config 0 has no interface number 0 [ 553.009793][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 553.009815][ T24] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 553.011254][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 553.011280][ T24] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 553.011298][ T24] usb 9-1: Product: syz [ 553.011312][ T24] usb 9-1: SerialNumber: syz [ 553.014090][ T24] usb 9-1: config 0 descriptor?? [ 553.020909][ T24] cm109 9-1:0.8: invalid payload size 1024, expected 4 [ 553.034711][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input25 [ 553.039141][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.039980][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.040354][ T24] ------------[ cut here ]------------ [ 553.040457][ T24] URB ffff888024f3e700 submitted while active [ 553.041122][ T24] WARNING: CPU: 1 PID: 24 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 553.041164][ T24] Modules linked in: [ 553.041219][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 553.041271][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.041286][ T24] Workqueue: usb_hub_wq hub_event [ 553.041313][ T24] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 553.041336][ T24] Code: 44 89 f2 e8 61 35 00 fa e9 13 fc ff ff e8 87 49 93 fa c6 05 ab 3b 61 08 01 90 48 c7 c7 e0 06 35 8c 48 89 de e8 80 e9 56 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 61 49 93 fa eb 11 e8 5a 49 93 fa bd [ 553.041354][ T24] RSP: 0018:ffffc900001e6b40 EFLAGS: 00010246 [ 553.041374][ T24] RAX: a6feb4655a61f500 RBX: ffff888024f3e700 RCX: 0000000000100000 [ 553.041411][ T24] RDX: ffffc90019573000 RSI: 0000000000015942 RDI: 0000000000015943 [ 553.041433][ T24] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 553.041449][ T24] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 553.041466][ T24] R13: ffff88807df30848 R14: ffff888024f3e708 R15: 0000000000000cc0 [ 553.041482][ T24] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 553.041500][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.041515][ T24] CR2: 0000555575b1a588 CR3: 0000000065e64000 CR4: 00000000003526f0 [ 553.041554][ T24] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 553.041567][ T24] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 553.041582][ T24] Call Trace: [ 553.041591][ T24] [ 553.041608][ T24] ? __pm_runtime_resume+0x129/0x180 [ 553.041641][ T24] cm109_input_open+0x1fe/0x4b0 [ 553.041688][ T24] input_open_device+0x1d0/0x390 [ 553.041724][ T24] kbd_connect+0xed/0x140 [ 553.041751][ T24] input_register_device+0xcfd/0x1140 [ 553.041789][ T24] cm109_usb_probe+0x118c/0x1690 [ 553.041857][ T24] usb_probe_interface+0x668/0xc30 [ 553.041889][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 553.041908][ T24] really_probe+0x26d/0x9e0 [ 553.041940][ T24] __driver_probe_device+0x18c/0x2f0 [ 553.041993][ T24] driver_probe_device+0x4f/0x430 [ 553.042024][ T24] __device_attach_driver+0x2ce/0x530 [ 553.042055][ T24] bus_for_each_drv+0x24e/0x2e0 [ 553.042076][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 553.042121][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.042156][ T24] __device_attach+0x2b8/0x400 [ 553.042183][ T24] ? __pfx___device_attach+0x10/0x10 [ 553.042211][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 553.042262][ T24] bus_probe_device+0x185/0x260 [ 553.042288][ T24] device_add+0x7b6/0xb50 [ 553.042317][ T24] usb_set_configuration+0x1a87/0x20e0 [ 553.042374][ T24] usb_generic_driver_probe+0x8d/0x150 [ 553.042433][ T24] usb_probe_device+0x1c4/0x390 [ 553.042465][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 553.042491][ T24] really_probe+0x26d/0x9e0 [ 553.042525][ T24] __driver_probe_device+0x18c/0x2f0 [ 553.042583][ T24] driver_probe_device+0x4f/0x430 [ 553.042612][ T24] __device_attach_driver+0x2ce/0x530 [ 553.042643][ T24] bus_for_each_drv+0x24e/0x2e0 [ 553.042665][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 553.042711][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.042744][ T24] __device_attach+0x2b8/0x400 [ 553.042772][ T24] ? __pfx___device_attach+0x10/0x10 [ 553.042801][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 553.042850][ T24] bus_probe_device+0x185/0x260 [ 553.042874][ T24] device_add+0x7b6/0xb50 [ 553.042901][ T24] usb_new_device+0xa39/0x16f0 [ 553.042942][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 553.042990][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.043011][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.043038][ T24] hub_event+0x2958/0x4a20 [ 553.043147][ T24] ? __pfx_hub_event+0x10/0x10 [ 553.043174][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.043201][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.043220][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.043240][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.043285][ T24] process_scheduled_works+0xae1/0x17b0 [ 553.043342][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.043382][ T24] worker_thread+0x8a0/0xda0 [ 553.043466][ T24] kthread+0x70e/0x8a0 [ 553.043496][ T24] ? __pfx_worker_thread+0x10/0x10 [ 553.043517][ T24] ? __pfx_kthread+0x10/0x10 [ 553.043565][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.043586][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.043606][ T24] ? __pfx_kthread+0x10/0x10 [ 553.043631][ T24] ret_from_fork+0x439/0x7d0 [ 553.043657][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 553.043704][ T24] ? __switch_to_asm+0x39/0x70 [ 553.043728][ T24] ? __switch_to_asm+0x33/0x70 [ 553.043750][ T24] ? __pfx_kthread+0x10/0x10 [ 553.043776][ T24] ret_from_fork_asm+0x1a/0x30 [ 553.043840][ T24] [ 553.043852][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 553.043866][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 553.043887][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.043901][ T24] Workqueue: usb_hub_wq hub_event [ 553.043925][ T24] Call Trace: [ 553.043935][ T24] [ 553.043944][ T24] dump_stack_lvl+0x99/0x250 [ 553.043969][ T24] ? __asan_memcpy+0x40/0x70 [ 553.043991][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.044014][ T24] ? __pfx__printk+0x10/0x10 [ 553.044056][ T24] vpanic+0x281/0x750 [ 553.044077][ T24] ? __pfx__printk+0x10/0x10 [ 553.044100][ T24] ? __pfx_vpanic+0x10/0x10 [ 553.044122][ T24] ? is_bpf_text_address+0x26/0x2b0 [ 553.044161][ T24] panic+0xb9/0xc0 [ 553.044182][ T24] ? __pfx_panic+0x10/0x10 [ 553.044222][ T24] __warn+0x31b/0x4b0 [ 553.044242][ T24] ? usb_submit_urb+0xfc1/0x1830 [ 553.044267][ T24] ? usb_submit_urb+0xfc1/0x1830 [ 553.044288][ T24] report_bug+0x2be/0x4f0 [ 553.044307][ T24] ? usb_submit_urb+0xfc1/0x1830 [ 553.044330][ T24] ? usb_submit_urb+0xfc1/0x1830 [ 553.044352][ T24] ? usb_submit_urb+0xfc3/0x1830 [ 553.044373][ T24] handle_bug+0x84/0x160 [ 553.044396][ T24] exc_invalid_op+0x1a/0x50 [ 553.044418][ T24] asm_exc_invalid_op+0x1a/0x20 [ 553.044443][ T24] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 553.044465][ T24] Code: 44 89 f2 e8 61 35 00 fa e9 13 fc ff ff e8 87 49 93 fa c6 05 ab 3b 61 08 01 90 48 c7 c7 e0 06 35 8c 48 89 de e8 80 e9 56 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 61 49 93 fa eb 11 e8 5a 49 93 fa bd [ 553.044482][ T24] RSP: 0018:ffffc900001e6b40 EFLAGS: 00010246 [ 553.044499][ T24] RAX: a6feb4655a61f500 RBX: ffff888024f3e700 RCX: 0000000000100000 [ 553.044514][ T24] RDX: ffffc90019573000 RSI: 0000000000015942 RDI: 0000000000015943 [ 553.044529][ T24] RBP: 000000000000000f R08: ffff8880b8724253 R09: 1ffff110170e484a [ 553.044543][ T24] R10: dffffc0000000000 R11: ffffed10170e484b R12: dffffc0000000000 [ 553.044557][ T24] R13: ffff88807df30848 R14: ffff888024f3e708 R15: 0000000000000cc0 [ 553.044598][ T24] ? __pm_runtime_resume+0x129/0x180 [ 553.044628][ T24] cm109_input_open+0x1fe/0x4b0 [ 553.044654][ T24] input_open_device+0x1d0/0x390 [ 553.044686][ T24] kbd_connect+0xed/0x140 [ 553.044711][ T24] input_register_device+0xcfd/0x1140 [ 553.044749][ T24] cm109_usb_probe+0x118c/0x1690 [ 553.044795][ T24] usb_probe_interface+0x668/0xc30 [ 553.044827][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 553.044844][ T24] really_probe+0x26d/0x9e0 [ 553.044876][ T24] __driver_probe_device+0x18c/0x2f0 [ 553.044904][ T24] driver_probe_device+0x4f/0x430 [ 553.044932][ T24] __device_attach_driver+0x2ce/0x530 [ 553.044961][ T24] bus_for_each_drv+0x24e/0x2e0 [ 553.044980][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 553.045002][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.045031][ T24] __device_attach+0x2b8/0x400 [ 553.045058][ T24] ? __pfx___device_attach+0x10/0x10 [ 553.045083][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 553.045112][ T24] bus_probe_device+0x185/0x260 [ 553.045136][ T24] device_add+0x7b6/0xb50 [ 553.045161][ T24] usb_set_configuration+0x1a87/0x20e0 [ 553.045221][ T24] usb_generic_driver_probe+0x8d/0x150 [ 553.045250][ T24] usb_probe_device+0x1c4/0x390 [ 553.045281][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 553.045305][ T24] really_probe+0x26d/0x9e0 [ 553.045337][ T24] __driver_probe_device+0x18c/0x2f0 [ 553.045365][ T24] driver_probe_device+0x4f/0x430 [ 553.045393][ T24] __device_attach_driver+0x2ce/0x530 [ 553.045428][ T24] bus_for_each_drv+0x24e/0x2e0 [ 553.045450][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 553.045474][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.045508][ T24] __device_attach+0x2b8/0x400 [ 553.045534][ T24] ? __pfx___device_attach+0x10/0x10 [ 553.045564][ T24] ? do_raw_spin_unlock+0x122/0x240 [ 553.045592][ T24] bus_probe_device+0x185/0x260 [ 553.045616][ T24] device_add+0x7b6/0xb50 [ 553.045643][ T24] usb_new_device+0xa39/0x16f0 [ 553.045680][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 553.045705][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.045723][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.045747][ T24] hub_event+0x2958/0x4a20 [ 553.045833][ T24] ? __pfx_hub_event+0x10/0x10 [ 553.045858][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.045886][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.045904][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.045922][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 553.045944][ T24] process_scheduled_works+0xae1/0x17b0 [ 553.045999][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.046040][ T24] worker_thread+0x8a0/0xda0 [ 553.046085][ T24] kthread+0x70e/0x8a0 [ 553.046112][ T24] ? __pfx_worker_thread+0x10/0x10 [ 553.046131][ T24] ? __pfx_kthread+0x10/0x10 [ 553.046156][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.046174][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.046193][ T24] ? __pfx_kthread+0x10/0x10 [ 553.046217][ T24] ret_from_fork+0x439/0x7d0 [ 553.046241][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 553.046268][ T24] ? __switch_to_asm+0x39/0x70 [ 553.046290][ T24] ? __switch_to_asm+0x33/0x70 [ 553.046311][ T24] ? __pfx_kthread+0x10/0x10 [ 553.046335][ T24] ret_from_fork_asm+0x1a/0x30 [ 553.046378][ T24] [ 553.046650][ T24] Kernel Offset: disabled