last executing test programs: 17m47.418014255s ago: executing program 4 (id=403): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400440, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000280)={0x28, 0xde7ebbbf73460a19, r8, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r10, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r10}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000380)={0x28, 0x1, r8, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000000900000f8000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000000d7ddfebb57aa0ee9273fcf4260e37f697d8eebf6a617aecebe91857b19e0ab3008089a5257aa295cd9933be0", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x4c}}, 0x0) 17m46.433091463s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1", 0x2}], 0x1}}], 0x1, 0x10081) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) syz_usb_control_io$lan78xx(r11, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x0, 0xf, 0x1, 'V'}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x81}, 0x0, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x3}, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r8, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4405) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5674040080100c7b1400350069703667726530000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 17m44.679976417s ago: executing program 3 (id=414): fsopen(&(0x7f0000000040)='incremental-fs\x00', 0x1) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) (async) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x403, 0x4, 0x300a, 0x8, 0x5, 0x7, 0x0, 0x5}}) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1411, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040018}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 17m44.537136284s ago: executing program 3 (id=415): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0xfffffffe, 0x0, r1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRESOCT=0x0], 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) r7 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e28, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @remote}}}], 0x20}, 0x0) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r10, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="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", 0xff2}, {&(0x7f0000000000)="c8e3f8cf798bf0915a031573e0530c", 0xf}], 0x2, 0x0, 0x0, 0x81}], 0x1, 0x44804) recvmsg(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}, 0x20012101) r11 = socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="b7671c780298b6f17f32061361e7ff5fe453dd1face9d09609ab721e75ad452c251f7261883d8ebba80684fc2d6c1b4afc9a4ba5c15875a6fae9083ffe95578d0576444794e9c430a9f9dcb2d8832ae778198ef432d58a5093adb300000000b203", @ANYRES16=r12, @ANYBLOB="013700000000fddbdf250700000008000300", @ANYRES32=r1, @ANYBLOB="0c0099070000780000001400040073797a6b616c6c65653000000000000008000500070000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf250a00000008000300", @ANYRES32=r13, @ANYBLOB="08003700000000000400508004002800080009ff2afb902c567ce7b8c40ab44789f9290001ac0f0011000700d9b0a6f9d1a7195af7f6460ff7000000"], 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x40000) 17m42.802550379s ago: executing program 4 (id=422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000001c0)) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x20000800}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={r7, 0x3, 0x10}, 0xc) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x200009}, 0x28) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB=',rootmode=000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id='], 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x8901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 17m41.107478661s ago: executing program 3 (id=428): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8080, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x0, 0x0, 0x80003ff}}, 0x20) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x3a, 0x23b) (async) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000080)={0x6, 0x742, 0x1, 0x6, 0x70000, 0xc, "d77f90456943411997a9a467d0761378", 0x4, 0xb9, 0x2, 0x4, 0x1, 0x9}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, 0x0) 17m40.781516199s ago: executing program 4 (id=429): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4e7, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x86, 0xc0, 0x8, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x0, 0x81, {0x9, 0x21, 0x800, 0x6, 0x1, {0x22, 0xf1f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x80, 0x9, 0x4, 0x20, 0x5}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc0a}}, {0x7f, &(0x7f0000000180)=@string={0x7f, 0x3, "508010a20fc0726e551367d7ab1e6a0156c3a5d305f0c2ecc4d4eaed1607f486bed09d4ff0d232a5e817f03408f8d45524c727ca5d3ef9c8dd085714c08f6e496e2b3ef1e04a25e3aa7ff01e46dbfdca77ac1880bde9cb580c3d930060db44518e2262eff23eaaa5f64a57a3bf2b89bb5122b4e10c3ada5374c18bcd03"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x843}}, {0x1f, &(0x7f0000000280)=@string={0x1f, 0x3, "6af2dd4a753b43639e9f1a7bcb514df58ecbfc6c869a375c18093208d8"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44f}}]}) 17m40.778020307s ago: executing program 3 (id=430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=0x0, @ANYBLOB="49dee7805b0e74459a01adfcaf3b6fd9f831d95ff012efc504e7da5cd76bd11b09cb5e559eb5a6b7930c1f50fa60143495c1f68138e9f835fe48ca7e5212e5b181e159dc866e11a3326f27903d2dc4cefbb02d9654a8f11dfbdadb79be9ef1188fc01b08610274c87525511b0a901c62c9", @ANYRES32=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="981669eedb6f62676fe3a734e3170d2e21765163e30e8628eef6c704ce7ce707fbd3b3101546bd883ee81f963bf70724560fd5b90b660153145fac26fcae0fb15f066207a23370d3d60c0cf62c17d6926ef997509e5a1953ba4ba8e588dc87daec5eff0a23284afa061373c299b9af5c06af2f15822b9ba55d80451da7a951dd70443ca959ccae81f67c0618016deb7d64f814245ef33655f29523", @ANYRESDEC=r1], 0x24}}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000004540)='./file0\x00') syz_usb_connect(0x0, 0xc06, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000862c6b203b0904a10100010203010902f40b03000010000904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1440, &(0x7f0000000280)={0x0, 0xbaeb, 0x800, 0x2, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000140)={{}, {r3, r4/1000+10000}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x80000001, 0x0, 0x9, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x624182) writev(r7, &(0x7f00000007c0)=[{&(0x7f0000000540)="cf51b978a5b162b00f0f78dbe865536edc75e223c0b92df1d1e51e515cbcbb4775ba", 0x22}, {&(0x7f0000000300)="ce2ee8d040ff086218144ee1e3648f778a755f46230711f3cd7b727316c52d001babd19e28cd8f08ddb797948f1288cff202b93631f4167756474cf02747526868c9d6f79339e0a3f4ccea08", 0x4c}, {&(0x7f0000000440)="c749d1034f3d06ab028387cf1b204573a8ec7bf564b78866e755a5e7918f6276328fcf82c6607dc0ad73258ccd1ca0014d3da7e2f83014dee5e080a2bb26f20571be19c51c34cdeb883ebc95dea8088b6f400000000000000074d0dea8251cafc05a143a469b6c3f0f699a50272cafaf091ca78d47b8a1eb8ad76c85a37182f7d2bafc0d001f4a634f2c96d5d85f4b226914d14865a7407ba55c7495c25aa711467027d8203cdc1c515ba2e7986d31504550b8ed9f3a97fc9e8f9d0d8593f143f0affbab7066ed0a40b27632b654271bf4ed0350fc6232a2fd9ea7da54ca6426033a", 0xe2}, {&(0x7f0000000580)="85e5df62f670967127f030173a5a81fbe5b540ba131ccd1c5be3ae6af0bbae9c60961577a3bdf53f08538eb1c25f84de4172982200cc45ad2855be8defff198f144686b7bf9ca7f81931c48a2fdd8a8c38456e846ce8ff499808b372eb9ba1be9a6f48f209cb455fd04bea9fa363a7b67e6e433bee26c94d41c15715ec7867fd8e39d81a7b8f85211ea9b68003f5a18fa5cf821c83b581ca0afbcfa729d1979154dc0380a066a42f3d72cf3ff9", 0xad}, {&(0x7f00000001c0)="800eb5edfceff512d918d4b3f0fcd5ea123e68fbdef60cdcea02c85d14b56313fe68f79250a4faf8686f58805b9b529a35cd270976440a4993b642eb9fba", 0x3e}, {&(0x7f0000000840)="25dd6a0dc545ece347bb09bb5d662e469a6f4e516ee78f2082220ff68cdd60b6b2848620ef91fa542f04844c532c01a5af89f8b5e520e4f146c89b5a34188a43577913b51d79678176d00565b46822db55dbf96e3cdc5131ee71b540a818cfc7549c9c89dfd26fe41d5b6675865234b77aea2bfc61002f36479125aa4025d8fc2c8eb2315135da361c3951a9b8133658fbfb0d95cb9548338a9fc101784dbbee11b588a923f15f57d89a7f00c44636685c50cd450639246484328a6491374d17fe0b414fccd6bb704b68f1454858dc6660056ded58ff68", 0xd7}, {&(0x7f0000000740)="eae24dac08bf", 0x6}, {&(0x7f0000000780)="d130d0bbd6e946537c7cc54ee65b478ff569873b95ceb45983c690c0f012aad1ce81ec77a25ecc592a4915b3e1f327", 0x2f}], 0x8) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 17m40.560416849s ago: executing program 1 (id=432): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000dbdf255d00000008000300", @ANYRES32, @ANYBLOB="0c009900020000001f0000002800a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000800a500000000001c00a6800a000600ffffffffffff00000a00060008021100000000000400a6800800a500000000003400a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000800a500000000006400a6800a00060008021100000100000a000600ffffffffffff"], 0x120}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000000000000000000000fe0100", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 17m40.221699653s ago: executing program 1 (id=435): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040065b8b16384ec3059c802cd7d19e26ebf2cf3903ea46e6b6bc988d798bf2f17c32a44992ee803b78d338a6e98345fcb"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$tun(r4, &(0x7f00000022c0)={@void, @val={0x1, 0x80, 0xc000, 0x100, 0xcd, 0xcbd4}, @ipv6=@udp={0xd, 0x6, "ca9faa", 0x64, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, @dev={0xfe, 0x80, '\x00', 0x41}, {[], {0x4e21, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "0aca5a8b6ce6805e2848bf26b9657d77a266557dce8fcae03b4dd327bc02459e", "36d0fd0900a988961d18822c7c5452a2", {"5229046c915cf9c95e8bb5582ed83a80", "eb5517bfaa056855e7fbd7ccb5972062"}}}}}}, 0x96) read$snddsp(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x0, 0x0, 0x25) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x4000, 0xd5, 0x6, 0xffff, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x7}, {0x2, 0x4, 0xa, '\x00', 0x3}, {0x0, 0x2, 0x3, '\x00', 0x6}, {0x2, 0x3d, 0x1, '\x00', 0x1}, {0x9, 0xe, 0x0, '\x00', 0x80}, {0x4, 0x81, 0xa0, '\x00', 0x5}, {0x9, 0x8, 0x1b, '\x00', 0x5}, {0x7, 0x4, 0xfa, '\x00', 0xf}, {0xae, 0x0, 0x9, '\x00', 0x4}, {0xfc, 0x9, 0xa, '\x00', 0xd9}, {0x69, 0x72, 0xfa, '\x00', 0x7}, {0x0, 0x37, 0x51, '\x00', 0x4}, {0x35, 0x1, 0x3, '\x00', 0x8}, {0x5, 0x6f, 0xc, '\x00', 0x6}, {0x81, 0xff, 0x75, '\x00', 0xb6}, {0x1, 0xac, 0x6, '\x00', 0x93}, {0x2, 0xe0, 0x6, '\x00', 0x10}, {0x9, 0x7, 0x5, '\x00', 0x10}, {0x4, 0xcc, 0x42, '\x00', 0x41}, {0x0, 0x4, 0x8, '\x00', 0x5}, {0x7, 0xc6, 0x5, '\x00', 0xf5}, {0x2, 0x0, 0x7, '\x00', 0xf}, {0x31, 0xf, 0x2, '\x00', 0x9b}, {0x2, 0x7d, 0x9, '\x00', 0x2}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040065b8b16384ec3059c802cd7d19e26ebf2cf3903ea46e6b6bc988d798bf2f17c32a44992ee803b78d338a6e98345fcb"], 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) (async) write$tun(r4, &(0x7f00000022c0)={@void, @val={0x1, 0x80, 0xc000, 0x100, 0xcd, 0xcbd4}, @ipv6=@udp={0xd, 0x6, "ca9faa", 0x64, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, @dev={0xfe, 0x80, '\x00', 0x41}, {[], {0x4e21, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "0aca5a8b6ce6805e2848bf26b9657d77a266557dce8fcae03b4dd327bc02459e", "36d0fd0900a988961d18822c7c5452a2", {"5229046c915cf9c95e8bb5582ed83a80", "eb5517bfaa056855e7fbd7ccb5972062"}}}}}}, 0x96) (async) read$snddsp(r4, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f848b880180000000000000f23c00f21f83500000d000f23f80f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x7b}], 0x1, 0x0, 0x0, 0x25) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x4000, 0xd5, 0x6, 0xffff, 0x0, [{0x0, 0x3, 0x7, '\x00', 0x7}, {0x2, 0x4, 0xa, '\x00', 0x3}, {0x0, 0x2, 0x3, '\x00', 0x6}, {0x2, 0x3d, 0x1, '\x00', 0x1}, {0x9, 0xe, 0x0, '\x00', 0x80}, {0x4, 0x81, 0xa0, '\x00', 0x5}, {0x9, 0x8, 0x1b, '\x00', 0x5}, {0x7, 0x4, 0xfa, '\x00', 0xf}, {0xae, 0x0, 0x9, '\x00', 0x4}, {0xfc, 0x9, 0xa, '\x00', 0xd9}, {0x69, 0x72, 0xfa, '\x00', 0x7}, {0x0, 0x37, 0x51, '\x00', 0x4}, {0x35, 0x1, 0x3, '\x00', 0x8}, {0x5, 0x6f, 0xc, '\x00', 0x6}, {0x81, 0xff, 0x75, '\x00', 0xb6}, {0x1, 0xac, 0x6, '\x00', 0x93}, {0x2, 0xe0, 0x6, '\x00', 0x10}, {0x9, 0x7, 0x5, '\x00', 0x10}, {0x4, 0xcc, 0x42, '\x00', 0x41}, {0x0, 0x4, 0x8, '\x00', 0x5}, {0x7, 0xc6, 0x5, '\x00', 0xf5}, {0x2, 0x0, 0x7, '\x00', 0xf}, {0x31, 0xf, 0x2, '\x00', 0x9b}, {0x2, 0x7d, 0x9, '\x00', 0x2}]}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 17m39.680239338s ago: executing program 1 (id=437): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x81, 0x8100) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7f, 0x3a, 0x4}, {0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x1, 0xf3}, {0x9, 0x5, 0x8, 0x3, 0x3ff, 0x4, 0xe, 0x6}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x31, 0x6b, {0x6b, 0x23, "e4af7acb1b2dde342557be09abee7157e177109499cdaa5029d32d1188c35661cedce3da1abae4266dc61b00793216654c8150580989c7c604d936fffc5006a0de475203ac040db42b1035f20fa24e24488315fc1946e63d4662cfc61cf60557fe36d613d993347a6d"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000300)={0x40, 0x31, 0x38, "5a98711ba1f4325bf32494df2f7002b0fdafbed530fb52885d20a057d61dd4f126a3ebb50684c832a97429b86f68492485750e3faab4f65d"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000380)={0x21, 0x0, 0x4, "e2387899"}}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x2, [{}, {}]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9a000000000000000000"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 17m37.722312743s ago: executing program 4 (id=444): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x4000) close(r2) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 17m37.533166159s ago: executing program 4 (id=446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./mnt\x00', r2}, 0x5) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x9, 0x1000, 0x2, 0xffffffffffffffff, 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) unshare(0x42000080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) wait4(r3, &(0x7f0000000040), 0x2, &(0x7f0000000380)) 17m37.010773662s ago: executing program 3 (id=448): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) (async) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x10005, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) (async) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x97, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_TCP_SRC]}}]}, 0x6c}}, 0x24000000) (async) r10 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1586dd6000021037403a037f56fffe8000000000000000000000000000bbff02000000000000000000000000000103019078300000006d5d296b08002bffff01000000000000000000000000000120010000000000050009000800000000"], 0x0) (async) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="c851bdb4bb5e9f7bc33502edd120f5fce2c621f77621aeb601a45b0a46aa372f707d13087dec83ff3cfa51c65e92bf893ed6015e8e21e854", 0x38}, {&(0x7f0000000540)="beeeeb7975e2095dc0290104ad84fb8168eac9cdcae4ddd1fd46854257207e1ae0c96ec7bd665283901a8fe4cd6dc5431a73346c147870d09711120ac53505e1eb2b20bad6384b49a425413d47ef6b7fa366d50998c2cc821ef1231057188a716b2c82a4a54b7dc41a783bbd5009dd343141396b71610739c5eaa211ca67b2b151399ab9c1965129e35d064d5b3533b1aa956f035c5f2adb20ed9b5b2b6246c95e7773b95c7895d87e4ee39f28f65278a2e7915af216ca4e15a553a807c0fb3abc847a6a3f5dbd3f06d685b620eb84eca4135cb59d30fd3f2d5dd012d97f976378cab8", 0xe3}, {&(0x7f0000000640)="cc123e78d3c4812e5515680f4aadf06c45d4c309fee26c87220a4772bf9dd258cc79ff856c54f1c6f3067a6e6bfe73f1bb1ffd94355d66d3e3228519d37a1ac65c13f683c4e81898fde2d1f942acb2d96c2a6261974d23f5b4b4c7438e30b9c9a338", 0x62}, {&(0x7f00000004c0)="c7d6f5ce5bb11bb9744ac6d8f18fdb4d8d00332cd6017e8f0070eadba0fa", 0x1e}, {&(0x7f00000006c0)="ea6517c2", 0x4}], 0x5, 0x0, 0x0, 0x1000}], 0x1, 0x44) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m36.841598336s ago: executing program 1 (id=449): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x400000, 0x0, 0x4, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', 'C*FA', 'r\x0e\xa4V\n\x81\x81\xfds\x10\xde\x18b\xde\x9d\x17'], 0xfffffffffffffe57}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200970225bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000040005"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 17m34.007482854s ago: executing program 1 (id=451): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) unshare(0x8040600) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) tee(r1, r1, 0x9, 0xb) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) (async) read(r3, &(0x7f0000000080)=""/1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000a00000010000018110000", @ANYRES32, @ANYBLOB="0000020000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1820000000000000000a00000010000018110000", @ANYRES32, @ANYBLOB="0000020000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) timer_create(0x7, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @mcast1, 0x3}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @mcast1, 0x3}, 0x1c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r7, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r7, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x519000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r7, 0x0, &(0x7f00004fb000/0x4000)=nil, 0x4000, 0x4}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r7, r7, 0x3, 0xfffffffffffffffa, 0x3fff}) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) (async) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) (async) fcntl$setlease(r8, 0x400, 0x1) syz_emit_ethernet(0x1a, &(0x7f0000000440)={@local, @remote, @void, {@llc={0x4, {@llc={0xaa, 0xd4, 's', "1839b3fd4aabb47e7a"}}}}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xad5f, 0x0, 0x1, 0x200000}, &(0x7f0000000380), &(0x7f00000000c0)) 17m32.856647203s ago: executing program 1 (id=454): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0xfffffffffffffcdc, 0x5, {0x20, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008808}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 17m26.133573955s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000200), 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0xffffffff, {{0xa, 0x4e20, 0x3, @private1, 0x6}}}, 0x88) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x1, 0xfe, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x85d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x4, 0x8, 0xe, 0xff, 0x8}, 0xa7, &(0x7f0000000400)={0x5, 0xf, 0xa7, 0x5, [@generic={0x60, 0x10, 0xa, "6227c1fbab1f91563ce5870395b8bbf02eb536a9603cc59f912180da289aa2b73d4e670bdd1d03c083b2809aa1047342ab5a357a230be89513971a89a62654f70025caa133e3a6825dec1fdd5b13512cf0cd9af73458f2e05bb0a0724b"}, @ss_container_id={0x14, 0x10, 0x4, 0x97, "c9efe9c328a68fe363d5d2dc1588856c"}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0xb3f, 0xf000, 0x4, [0xc030, 0x0, 0x1f80, 0xff3f30, 0x3ff0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x7, 0x5, 0x4, 0x36}]}, 0x4, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "8dc0edbdc30025502705adae9ea6ded43afa9fafd6c2403ecd27f74cefde771809ea5b476bc2"}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "0549072d41214f168be68bce533a09991ad5761d458edf80f98bd54d23d6b40a1524ada16ab0ce59998383285b806d3316c6c9c644ce832b45411f01ced02136967df8b58f7d1eb51b1636ede933096af3181c7bb2fc2a292c9add250742ec2184e166663b618ab0f217cd04fb74b407524890dbf4f0446a7e19cc7f47c9ed76c398adad1d989a600796ee69615b63cee1e0031b7b2c3ce044dafbfc3ff4d979db299d04e500799e9191558ea490e642b019061b10f46d253dac84f95798fffa26b8a398e98cf97686"}}, {0x46, &(0x7f00000005c0)=@string={0x46, 0x3, "82ed1da7f15463efc004a6340c11588346c2042ea5806b222c44e5e5ac7ef1c2e422bcf40a97c90d40c269767f7bce57e92b5e3ee9b5e426ac1d75561cd5c5704966688a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2fa39, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xb, 0x11, 0x5}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044041}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x401}}, './file0\x00'}) 17m21.868027514s ago: executing program 32 (id=446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000340)='./mnt\x00', r2}, 0x5) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000280)={0x9, 0x1000, 0x2, 0xffffffffffffffff, 0x4}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) unshare(0x42000080) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) wait4(r3, &(0x7f0000000040), 0x2, &(0x7f0000000380)) 17m17.424617683s ago: executing program 33 (id=454): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0xfffffffffffffcdc, 0x5, {0x20, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008808}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 17m10.668884852s ago: executing program 34 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000000200), 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000006c0)={0xffffffff, {{0xa, 0x4e20, 0x3, @private1, 0x6}}}, 0x88) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x1, 0xfe, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x85d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x81, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x4, 0x7}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x4, 0x8, 0xe, 0xff, 0x8}, 0xa7, &(0x7f0000000400)={0x5, 0xf, 0xa7, 0x5, [@generic={0x60, 0x10, 0xa, "6227c1fbab1f91563ce5870395b8bbf02eb536a9603cc59f912180da289aa2b73d4e670bdd1d03c083b2809aa1047342ab5a357a230be89513971a89a62654f70025caa133e3a6825dec1fdd5b13512cf0cd9af73458f2e05bb0a0724b"}, @ss_container_id={0x14, 0x10, 0x4, 0x97, "c9efe9c328a68fe363d5d2dc1588856c"}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0xb3f, 0xf000, 0x4, [0xc030, 0x0, 0x1f80, 0xff3f30, 0x3ff0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x7, 0x5, 0x4, 0x36}]}, 0x4, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "8dc0edbdc30025502705adae9ea6ded43afa9fafd6c2403ecd27f74cefde771809ea5b476bc2"}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "0549072d41214f168be68bce533a09991ad5761d458edf80f98bd54d23d6b40a1524ada16ab0ce59998383285b806d3316c6c9c644ce832b45411f01ced02136967df8b58f7d1eb51b1636ede933096af3181c7bb2fc2a292c9add250742ec2184e166663b618ab0f217cd04fb74b407524890dbf4f0446a7e19cc7f47c9ed76c398adad1d989a600796ee69615b63cee1e0031b7b2c3ce044dafbfc3ff4d979db299d04e500799e9191558ea490e642b019061b10f46d253dac84f95798fffa26b8a398e98cf97686"}}, {0x46, &(0x7f00000005c0)=@string={0x46, 0x3, "82ed1da7f15463efc004a6340c11588346c2042ea5806b222c44e5e5ac7ef1c2e422bcf40a97c90d40c269767f7bce57e92b5e3ee9b5e426ac1d75561cd5c5704966688a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2fa39, 0x9894}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xb, 0x11, 0x5}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044041}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x401}}, './file0\x00'}) 6m5.607037394s ago: executing program 0 (id=1871): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x2, 0x6, 0x1, r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x467b, @dev={0xac, 0x14, 0x14, 0x16}}}, [0x7, 0xfffffffffffffffe, 0x9, 0x8, 0x5, 0x1, 0x6, 0x7c, 0x1, 0x5, 0x8000, 0x80000001, 0xffffffffffffffff, 0x7, 0x145]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r4, 0x9b, "eafbed5fa267d2ff68b2bb42cbf8edd4cbd6890a2323b4156da39455ae1b3f73759838af2ad92977496e58052eaacb21624ef32a5b4e29c7b495f65cad916f66dfd3a113d921447618a392a6aabf16e9c18de79d3c832f05cdabe9802c85fa6b7767ad353ac6fbab4bd0908a73f7a7f209a2cd67e9c64ac54cc0ce38c7374bfc2391c02e2213e5e49aeb3bbc60623a14a3119a36a2e9ada2f406f4"}, &(0x7f0000000480)=0xa3) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={r3, 0x2, 0x7, 0x7f, 0x2, 0x9, 0x6, 0x8, {r5, @in6={{0xa, 0x4e20, 0xa2, @local, 0xffffffff}}, 0x100, 0x2, 0x6, 0x7, 0x3}}, &(0x7f0000000580)=0xb0) setsockopt(r0, 0x4, 0x3, &(0x7f00000005c0)="804db07dd34dfed249c40dc27f20ef87da414f71efdf7acb933c21105455d12402235703a0bdce8a5ab6741b40819afa5374d01576a477a69e0c7a693a299f7aed8ae9b031b7e053cd3fc2111a450c52c85f12064f1fe05218858d0444c78ec734025192a9566036c5dd8b15f02dbc25b0ce53ecbe682d16243ffb21a2677ba5764d8726e1b34c875c667f3ca3c59ce9649a18d53fd399", 0x97) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000680)={r3, 0xd3, 0x2}, &(0x7f00000006c0)=0x8) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a93541ffcdf9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="69fbd51e4e37"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004891) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a00)={0x80, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x1, 0x17}}, &(0x7f0000000900)={0x0, 0x18, 0x38}}, 0x400}, @increfs, @request_death, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x2}, @enter_looper, @increfs], 0x6, 0x0, &(0x7f00000009c0)="e924dab1ad1f"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vxcan0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) r9 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) mount$fuse(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x7, &(0x7f0000000c00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', r10}}, {@smackfsroot={'smackfsroot', 0x3d, 'vxcan0\x00'}}]}}) ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0) read$FUSE(r1, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000002dc0)={0xa0, 0x0, r11, {{0x0, 0x0, 0x9, 0x284, 0x1000, 0x41d, {0x4, 0x8000000000000001, 0x4, 0x2, 0x1, 0x8, 0x200, 0x8, 0x0, 0x2000, 0x0, r7, r8, 0x6}}, {0x0, 0x2}}}, 0xa0) flock(0xffffffffffffffff, 0xa) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) write$FUSE_WRITE(r12, &(0x7f0000002ec0)={0x18, 0x0, 0x0, {0x8}}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000002f80)={0x0, r6}, 0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x3) sendto$inet6(r1, &(0x7f0000002fc0)="19d225d2c925e9e5426bc4d8ac9b6cd822bd29c287ebf0db1a9f58f621af54f0ea375ac1a8ab35aec21f586610b0732aa765d20448779577cbcfe429b036cf8c4a159b4fa7cdd9354abf1473ca62e394815e7154098b6b47f0c521a62087160f8ebaa02c424fba6742dcb02c368632d983e5dda120e2a3499f18b92c0340c9443d3939be171204b3b8b41c27bc4f6fb91251ca9ea29cb1cdf80012ce9ccee519241b0cc5543b3312e669c6fc8c9083cb26560ae9751184d1d30300cedfafc8ac7e47dff79ea840cc156386919c", 0xcd, 0x1, &(0x7f00000030c0)={0xa, 0x4e22, 0xfffffff7, @mcast2, 0x4}, 0x1c) write$apparmor_current(r1, &(0x7f0000003100)=@profile={'permprofile ', ':$\x00'}, 0xf) 6m5.357455191s ago: executing program 0 (id=1872): syz_open_dev$vbi(&(0x7f00000017c0), 0x0, 0x2) syz_emit_ethernet(0x3b6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) clock_gettime(0x1, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x5f, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000001901feffffff00000000017c00000c00428008000a008f3492280c00018006000600800a00000400028000"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xb9, 0x0, 0xdd, 0x9, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000040000009e"]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_AUTHENTICATE(r5, 0x0, 0x4000005) 6m4.401147274s ago: executing program 0 (id=1876): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_usb_connect(0x5, 0x24, &(0x7f0000001c00)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16, @ANYBLOB="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"], 0x0) (async, rerun: 32) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400e1300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="00060400000027179bda000000f38d4f6dffffffffff0096252e23"], 0x38) (async, rerun: 64) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000b80)) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async, rerun: 64) preadv2(r2, &(0x7f0000000300), 0x0, 0x7, 0x10008000, 0x5) (rerun: 64) inotify_init() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) (async, rerun: 64) syz_usb_connect(0x1, 0x15, 0x0, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ea}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x5, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) 6m4.113478223s ago: executing program 0 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @loopback, 0x4, 0x0, 0x6, 0x500, 0x4000000000000009, 0x10240}) 6m4.082192563s ago: executing program 0 (id=1881): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_print_times', 0x1a1081, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f00000001c0)=0x1) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000340)={0x5, 0x0, [{0x80000000, 0x0, 0x3, 0x1, 0x8}, {0x7, 0x8, 0x401, 0x2119, 0xffffff7f}, {0x2, 0x1, 0x3, 0x7, 0x10}, {0x80000008, 0x1, 0xb, 0x7f, 0x1000}, {0x7, 0x9, 0x3, 0x4, 0x1}]}) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000600)="ba4cde0dd7df1d5efc3b8804989b5ca5609b69b53f54a0af8bb11bdc037dff2cbfef639049bd6578b274ba93363957dde48a61b90d51be17eff070fd5552661c70ef966be9e70b1ab89611876aa563ea8a60fe5912b74399ef07de1415b373d2afe899a3002c024ef67c724d9671fb4d15949b55d929e97823d2d4ca0c729303ce9a9c8f8b629d5cbf85b326ea50d856788ed044c663b15b68ddfcb8f451a74d14a8b10aa9faf7fe8a236ca5d7584a084fd6c79a9d47296a4372052d4be30575c17e2e684f836c2dc0cb5bc403714f411f00e984cc8ed4dff8379ea38a676285068f2e3ea4eebfa6c299b90c29ebc72a6823cf01063ac38c450a6866582d96e4745dd9f99731e49ba8b6cd03969c278ae343b90e92", 0x115}, {&(0x7f0000000240)="e65a3e217236f72ef8a11463e8c4ba0fecff36cbd92cc9c80bd6a282d55f99b88fa26e3161c96cbcfcc1a0cf7e6288ba8e7a34dab6fdca984de8449380ea5ca6f8f25af4d4d382de7f489fc86ea94d0851faaee975282680229570ce76384f916b1fd4cb7e84e6505ac5477c0be9c21cb6e00c7df487d4514dc0472f24eeb64b8c688435582020bab8594373939b4f59639383e62299034c36841326919826743bd33f042e9e9dd75dcdebf112f842f141b29f8c5f82b11a48d0e921f8e54c7136a36d2ba4add32ae892e67f0e5c0090", 0xd0}, {&(0x7f0000000540)="d735ba0cf03053d2fcba63b2bc8891af1a85a3ce4c4c6d2e165ce9eed5fbd4a5fbbe8509ea981bb37dc395c9c1a35f25784a76bf609aa2b46052ff20d5d521e819242443c6b1b40b42ece76dd66879d7f4a76a74162e4ad04063acc768e8", 0x5e}, {&(0x7f00000007c0)="2cf588fb4233cb93c4126b045d01689b214aa1862359dccf20e8347fea322f0964e6083d7eb07d68f5765e8e03e15f79366c68e047f9db25ede7f859d9c3fe289bf9300a2f14cfa23a9e88e8922162f07f34d769a3ce2b", 0x57}, {&(0x7f0000000840)="314a7c61571d714c752095123c9681b919270413c1bbbe7c7a3d0d6a5ee373a5d1f164c8ac864a5eb51481cc1be2407488e4844aae28969b61813a91c86a424a40187a39", 0x44}, {&(0x7f0000000a00)="c132b4d1d67b281a00eab4eeaa8280ab41afcdd7e3a3c48fece868f1758721c638c317c0eebe7462740fe6273b4048b1193e1fa3a601f948952fa38319d6f12bad3601391f0f7b5b5a09506fb8f6ef27aae8a243cc5cdd33d6643f48170b8f24d2410318f30776c1a00bb74513742f3f8c7a53a79ac05f2950dad6f6ae6146e7af9f1b5727a9c0c3b1c416155ecedb6431ff63269f3d04dad2d61d209b9a8ab09e03d55d56c32ae88b64c054ec794754af591b1ecb793fd409969176f58c8b2e7eb42fa0cfc7738e60e2e10a7c1d564f17cba092a977ab451e7bd450c4aef7d37b83e606173b7e3633f859", 0xeb}, {&(0x7f0000000040)="69d9bce7d67af545fbb0a579e930e3354b7fd7e695f1a423a1ca7ef029c748aa70aa855dc1403473d7e8a0b3119f3e82d8f83912f4943b94ff2d6de9a05d431dd4366ee9cec1bae6bcfe86e0b5bd7f85489787e1d8bcebd06c3cbb9b5dee671f4bb2aadc9e51bd8c3d3c27b6cd54e107370e28946c6ed2a13cd56b7407cab0799196b4017fa806b2ad395b5a18e131db9e98635b7c5ae25e4ca533b8412f244545ba458999b3880c45697a7ec8acb18558ee3153e3a6e0aecfa26866e1e7c3d8fff54b3d1fe72caeef1f7086a7f3", 0xce}, {&(0x7f0000000f40)="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", 0xb6a}], 0x8, 0x1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='s'], 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='s'], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004814}, 0x400c810) 6m1.675839185s ago: executing program 0 (id=1891): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x4f) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x100) r4 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x1, 0x400001, 0x1e, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x5, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)) syz_usb_disconnect(r6) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "0000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c3800"}}) 6m0.547625345s ago: executing program 35 (id=1891): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r2, 0x0, 0x4f) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x100) r4 = syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x1, 0x400001, 0x1e, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x5, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a80)) syz_usb_disconnect(r6) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "0000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c3800"}}) 14.431585347s ago: executing program 7 (id=2874): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x2, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x400fff, 0x62e98893, 0x2, 0xfffffbff, 0x2}}, {0x7, 0x2, 0x0, 0x0, @adapter={0x9, 0xe327, 0x4, 0x2, 0xc13f}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2}, 0x0) getgroups(0x27, &(0x7f0000002540)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x4, 0x2, 0x6, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000600)={{r5}, {@void, @max}}) 14.193392479s ago: executing program 7 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400022c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000001240)=0x7) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_uring_enter(r4, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x2e36, 0x10000}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00"/160], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) 12.847458991s ago: executing program 7 (id=2882): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000000a8d4c288127997f56f1389c0e9f1ed660000ec31238e8098d43a3105096a2a3a94a350d95b017f751575e8b5d3a713af7349f2bd65f2e353ef2f98ac75acec55498fe8bd33288ae46a2dca0c8529c61f6fbf0fc381878eaf6814b953720d8e86e3db18588defa9b84c5abf0b82a4bd437030a25a59d217dc", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYRES16], 0x74}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000000a8d4c288127997f56f1389c0e9f1ed660000ec31238e8098d43a3105096a2a3a94a350d95b017f751575e8b5d3a713af7349f2bd65f2e353ef2f98ac75acec55498fe8bd33288ae46a2dca0c8529c61f6fbf0fc381878eaf6814b953720d8e86e3db18588defa9b84c5abf0b82a4bd437030a25a59d217dc", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYRES16], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xa, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 9.565189262s ago: executing program 7 (id=2896): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRESOCT], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) getgroups(0xfffffffffffffdc5, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/15, 0xf}, {0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x5, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x39) unshare(0x40000080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="597df0fca613b887688d88841a55794c2954af5d70d162f4f9b6d8febd26b3c3926a5205fe24af09437e94e65e4118fa47b8e5342bcfb7ff03c30020d67387a6a9c77ee0682d8d7ab7c6"], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000002080)=ANY=[@ANYBLOB="00000000000001000000000000007f000000000000b7ab4dcc9d78000000000000000000"], 0x28) syz_fuse_handle_req(r5, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000002300)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x9f53, 0x0, 0x691a, 0x48e, 0x1001000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 9.324701627s ago: executing program 2 (id=2898): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd000020062726964"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/15, 0xf}, {0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x5, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x200000000002, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x208402, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="597df0fca613b887688d88841a55794c2954af5d70d162f4f9b6d8febd26b3c3926a5205fe24af09437e94e65e4118fa47b8e5342bcfb7ff03c30020d67387a6a9c77ee0682d8d7ab7c6"], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000002080)={0x28, 0x4, 0x0, {0x1, 0x7f}}, 0x28) syz_fuse_handle_req(r4, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f0000002300)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x9f53, 0x0, 0x691a, 0x48e, 0x1001000, 0x7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002240)={0x30, 0x5, 0x0, {0x0, 0x1, 0x2, 0x101}}, 0x30) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 8.897374091s ago: executing program 6 (id=2899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfff7f034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092144000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x40, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}]}, 0x3c}}, 0x0) ioctl$HIDIOCSREPORT(r7, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2, 0x0, 0x932}}}}}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) 5.422569433s ago: executing program 6 (id=2902): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) getgroups(0x27, &(0x7f0000002540)) (fail_nth: 6) 4.794027994s ago: executing program 6 (id=2905): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dfba7e109911a3687bd20102030109021200010000000009040b", @ANYRES64], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001005c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/11, 0xb}, {&(0x7f0000000540)=""/51, 0x33}], 0x2}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.544913202s ago: executing program 8 (id=2906): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0xffffffea, 0x7}}, './file1/file0\x00'}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000000307010108000240fffffffc080001400000000508000540000000022400078008000140000000080800024000000007080001400000000008000240000000080c000640000000000000083308000540000000000c00064000000000000000040c0006400000000000000002"], 0x80}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000000307010108000240fffffffc080001400000000508000540000000022400078008000140000000080800024000000007080001400000000008000240000000080c000640000000000000083308000540000000000c00064000000000000000040c0006400000000000000002"], 0x80}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRESDEC=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x5, 0xf, 0x180, 0x4, 0x0, 0xb3a6, 0x50, 0x0, 0x5, 0x0, 0x29, 0x2, 0x7, 0x4, 0x3db], 0x5000, 0x53900}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000040)='net/sockstat\x00') fchdir(r8) (async) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./file1\x00', 0x42, 0x1ff) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000700)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f00000000c0)={r11, 0x1, r9, 0x5, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000540)={r11, 0x0, r2, 0xa7}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) r12 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x1, 0x2, 0x1, 0x80, 0x7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, 0x800, 0x1, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) 4.438476315s ago: executing program 7 (id=2907): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = socket$inet6(0xa, 0x2, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x24fc, &(0x7f0000000400)={0x0, 0x80000, 0x10100, 0xfffffffe, 0xe6}, 0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000180)='X', 0x1}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000004c0)={0x3, {0x3, 0x69c21468, 0x9, 0x4, 0x5, 0xdfd5}}) shutdown(r7, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x2000000000000198, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100010000001300000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x5) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r7 = dup(r6) copy_file_range(r7, 0x0, r7, 0x0, 0x9, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r8 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x10100, 0x0, 0x229}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r8, 0x2ded, 0x4004, 0x0, 0x0, 0x0) (async) unshare(0x48010380) 4.122546518s ago: executing program 5 (id=2909): r0 = syz_open_procfs(0x0, &(0x7f0000019140)='net/snmp\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000019080)=0x6e) bind$unix(r1, &(0x7f00000190c0)=@file={0x0, './file0\x00'}, 0x6e) 4.051682144s ago: executing program 2 (id=2910): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_EXP={0x18, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @NFQA_EXP={0x48, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x97}, @NFQA_EXP={0xc8, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xff}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x14c}}, 0x4004080) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_discard_blocks\x00', r0, 0x0, 0x2}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7, 0x8af}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) (async) r4 = syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x2111808, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@dont_hash}, {@subj_type={'subj_type', 0x3d, '$'}}, {@smackfsdef={'smackfsdef', 0x3d, '[}'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x62, 0x39, 0x62, 0x38, 0x62, 0x33], 0x2d, [0x34, 0x35, 0x63, 0x30], 0x2d, [0x37, 0x65, 0x4, 0x66], 0x2d, [0x63, 0x36, 0x33, 0x44], 0x2d, [0x54, 0x38, 0x35, 0x32, 0x33, 0x66, 0x33, 0x33]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x39, 0x37, 0x30, 0x31, 0x64, 0x36, 0x61], 0x2d, [0x34, 0x36, 0x33, 0x30], 0x2d, [0x37, 0x64, 0x35, 0xb8b67de0ea2d69c2], 0x2d, [0x36, 0x32, 0x62, 0x34], 0x2d, [0x65, 0x37, 0x32, 0x35, 0x34, 0x30, 0x32, 0x35]}}}, {@seclabel}]}}, 0x1, 0x0, &(0x7f0000000540)="4397d7bb2f8916789e318444a670c43479d1da66b6a1d5319d9337789a93b01f7fb2beb17f30c54b5677d30c9e04ec3fda3b8fa4ed0d049e4da26bb3bc634c8a822db08933c21842421a485400d8c049ce017e6513e6ab18597054db3908a42f19ef65a54da572a89ca2a0f9263f308093a4f2538c33b46d33a55bd19709f523da0be112457edb095d4c768e8ab783dbdc086061a9f1e07b30af807c9bd2284566d04ec01901d7767ea8179b2e3af3a9bbc8ec6a9e2096050cb60541de1ef21d7ea179f810") r5 = openat$incfs(r4, &(0x7f0000000640)='.pending_reads\x00', 0x101800, 0xa) (async) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0), 0x1, 0x2) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000700)={0x28, 0x2, 0x0, {0x0, 0x6, 0x80}}, 0x28) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48000) (async) r6 = syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x5, 0xe0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x6, 'q\''}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x93, 0x6, "f2", "2d5ef4"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x101, 0x3, 0x58, "b6b9b8e18b889cda4a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x38, 0x2, 0xf, 0x81, {0x7, 0x25, 0x1, 0x86, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x0, "d494", "12b4"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x20, 0x3, 0xdc, "a48e191918142a1e72"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x4, 0x0, 0x0, "4d1502"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x9, "f4", "d5637b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x8, 0x2, "b13944"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb, 0x81, 0x2, {0x7, 0x25, 0x1, 0x80, 0x1, 0xe}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x101, 0x3f, 0x5, 0x1, 0x40, 0x2}, 0xc, &(0x7f00000009c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x4, 0x5}]}, 0x7, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x421}}, {0x58, &(0x7f0000000a40)=@string={0x58, 0x3, "d821a002d92b895b636fa3f2acd675984c82da36e682afeb6953d3cbcc9f126b27b8421b9087a3b6bf25472318e17dcb6230cb97c0ba5f48a1fde16210e720b675f8e24dd9add2eca7c19a272fa974ebdf8a6929f3f7"}}, {0x5a, &(0x7f0000000ac0)=@string={0x5a, 0x3, "8ff0fc4f7167bc1454b903a044754d400c0bae3acf1497a087f75146b624d645194b2de772d19d3b9ef88cd47b493543cdb2a48d0d6e00d6c62ec6d07b6eea1511e7d767a3237dc692510c14236f22f84017e26b4acc0723"}}, {0x74, &(0x7f0000000b40)=@string={0x74, 0x3, "134f3dfd49645d5772b8f2e2c1554a115923188694f5b32b81557c4368d67378ca79110c846acf21cfd69aa37ddb7274e9be2462c80946e94ccb02c4fffa64661ac3fa84b623dbb0afd941212493fa8538b03ffd724e1d14c5597b0fb1c14e27500a0b71210675613a855772b177d4958bef"}}, {0xb6, &(0x7f0000000bc0)=@string={0xb6, 0x3, "a21fa099e03d961024db81ea1ed1f726983c58163b13adbeaba87edb1e68b1ad4d6c9912f478122a1bdfe5920bf7db8da0d0d3e26648511547b5cc13e96ea4a2a55cf356aa59280a6fb794545f52461084c51cf6c2c10f879cdf60cf3deb7038be7fe78f2ce28ceaf2baf06789bb8e7d422b7c6e5e8f4c8e89b1f78bbb00187314d0b84155b88ed919487ddc29734019ef0e24d3cb2df2fb9c444d0886a57d1ec8d94da9ac5df43649a04bd56eeb2d67644cdf25"}}, {0x2c, &(0x7f0000000c80)=@string={0x2c, 0x3, "1a5496ab2b4a50ad546e7c27937950624ecd75b315c8bec87186733ed2fc127059aebc2cdceebba49253"}}, {0xbf, &(0x7f0000000cc0)=@string={0xbf, 0x3, "e8937bc8edf37da72b30aa367d3664833095619adaf56fea04926f709961cd4007bf6a655bf9886ac4b7363d9e94d093f3d554c38c8b7ac09e50f315c6c083ed82ab5a819dcc3189646c01f4b97233957beb55a43b4902afea876315682065417f3897f7a13667bd3a7141b7c71a0eec75b891126d547aa6755ef201917e268d59cf41fc2702cd1e4e811fde365d870f2f6698c4a6972824e2be27b7175cf8c7b83f8608ba28a94bf015c285377556a97191795ebdca1c357fee54bf23"}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000f80)={0x14, &(0x7f0000000e00)={0x40, 0x6, 0x1c, {0x1c, 0x5, "0bc5e981193b9dd2f471bae0fc33c839e196c381c13d312714f8"}}, &(0x7f0000000e40)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "5c76713d98ab55dfa034bb527b6202f75fbc6cfef92a255318fb040b97948c5232a5d5eb057a129cdf5b2c8cfa79cd59a40d2c14ec02f354d4b33e4733054b1c7a345424805c51740aa08209a158d08e583c6e87871030e47a00a2ee07e2a8807c309232dcc9a3d78180c64d3481e457ca12a5af46ba24b55fe99e9bbf9216b854cd23e71a32a597dc91e151a757a5fd9a9413fc8c2571cc0d9a4a18cc91d44b0478c0d7456a7ecc9beeb9f12ad699394b457d56b28f03b1838efb9a7da44adc00f5531ca4964ded9671b5dce1cf7eb3e0480eb31c1c624603b470b5e57e83dac123a222a60fbfd8b02aeecbd7cd7135483bfb2c723ca8b9e0fe"}}}, &(0x7f0000001240)={0x44, &(0x7f0000000fc0)={0x40, 0x31, 0x97, "b046f8cd39e7b27bfee5a5f34d660ceb6ecfaf598e1ea954fd94a40975849fa8441cf249aeb8f589c29cd2f1aa59f1a879002b3b51fa93ecde74f9a4d7403652a1a9433065daad55ae6a47a90739481a1ae59014c1db9d6b40e707f89b6475cbd476cda554b905ca3bfc451e85af83f5d382b8fefcb2b8b27ab865ed9b1e30bfb625d08200690099d623ba291d7084f75dcd192f75223b"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000001100)={0x20, 0x81, 0x3, "137fa5"}, &(0x7f0000001140)={0x20, 0x82, 0x1, "cf"}, &(0x7f0000001180)={0x20, 0x83, 0x1, "a8"}, &(0x7f00000011c0)={0x20, 0x84, 0x3, "858fef"}, &(0x7f0000001200)={0x20, 0x85, 0x3, "7a8b15"}}) setsockopt$inet6_group_source_req(r5, 0x29, 0x16, &(0x7f00000012c0)={0x9, {{0xa, 0x4e22, 0x0, @loopback, 0x4}}, {{0xa, 0x4e23, 0x0, @empty, 0xc401}}}, 0x108) (async) r7 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) fchown(r4, r7, r9) (async) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001440), 0xc6e199257f18ca2d, 0x0) fcntl$getflags(r10, 0xb) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000001480)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000014c0)={0x48, 0x1, r11, 0x0, 0x3}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001540), 0x2, 0xa}}, 0x20) (async) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001600), r5) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r12, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48049) (async) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000001700)) (async) write$P9_RSYMLINK(r8, &(0x7f0000001740)={0x14, 0x11, 0x2, {0x8, 0x4, 0x2}}, 0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000001780), 0x4) (async) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000017c0), 0x301400, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r13, 0x8002f515, &(0x7f0000001800)) (async) lgetxattr(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)=@random={'trusted.', '@\xce\x1a+\xf4\x00'}, &(0x7f00000018c0)=""/21, 0x15) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r13, 0x50009418, &(0x7f0000001a80)={{r4}, 0x0, 0x10, @inherit={0x68, &(0x7f0000001a00)={0x1, 0x4, 0x10000, 0x3, {0x12, 0x7, 0x5, 0xffffffff}, [0xff, 0x8, 0xf44, 0x9]}}, @name="4fbc957f7cd6568a464020a422a992e6864d6ce8881f910c545439796a6bcfacc41cf1db0d8763dff732a81b4f2a7f76a133dc03052e05afa220d4e75f4c22e6a4a012c7b6610806f3bd289420afd84d610710a6b50db5fc5f6dd07bd59da0c1acba52d45bf81312232e112eb58515e95054b3e416c3dd2294a60fc08c21b3d6267dfc0724e09c19d2c04a062fc2f466b489b0649009e5d863933a0d77581271a4a548ca0ff8c800c3e125a21629f7f6782025ab3411e2e84f71c2d20de89eb2e6a3d1ea48a647e49697660c91f3a5506ca6627e49f95105bb803b0d71c80b3a231f519ddd99d47ffe3213be25c2cb25b3d87b920432fe9639b25f696a06f3cbf552b9c098cafd19336e11ab643f5260e851c1cd14c2a0e3b8f5ad6f149c89e5e611e35c9698b8be48fcc76928ddefaa6aa0ebf03864a08ccb46d0a513bad3af78daabb72c7533d03a348ea2cc36664b78d7131bbc85348591096564b4211ad88ced6a6f2c053b71b8705d84a9ad376ab31015b45ab6ad922b15c2ec0d489726e8be8fe695c073386cb2218b6898886aa295367c3efab05a81470cca30372b85f649e83534138fb49559d56d4a214ec70f5bec356543727d50f895ac67dda87db7939331c971fed94fdebf2223d0a62d6bb337014eaa87b081f676be6c1acb82f7b91ad32e819663c2b11d1f6badb4036c75b6f8cefeacfa7aa89beba57c5bc4ba932ec11cfc3ee8ba7c1fec84feda16eb21bf942ae6d08412ad07d59f341fd7d645519ed4b6eafdc67dc3809e1c2b3611c6c500959e4d53b84e18290ba480b516b8a0c668d91e7820522148659af791e2ece1bbd23df3665ee8584fbb0aa9b5080d568ff2120f7ac6b1ae880d4608a025f9d5f38ebe128fc6f1e9c8ef795afc86a5eb223cbd96a4c4d43111178dbf3959c4c294149b701659419981d78a7e2c0bb55deddd4700a318aadc2c7908858d8d07ef9e43e910ef2266d5aa0bebe2fb81622f482d785595ab61264a317dc7f9d26b77aaf5a69492805e9f4b44d6a7cdaa68ba5be2ebc45a70ccfda58060807f0ba71dabdd1359faf7fcbe95777d1f58a8b440c5f097ff6fdba04ab1149c72d3e5e03f63d3ffe48e5a7d4f2cd522b1c0b9bc0b073b71ca661b79ba98c945858c7e38c39b9725bba67d028b3448aa574e556263a29a6a1d4c85cb0c3debd7c9338d914ba4f96770582a80bc8b4e5965ede49cad7a86cf5726d47093bc8f0e6b9207c9db6a5292f6c86f7320c324962beeb208556c8c477d5a8c8d5b11a6de24c49c71952487dd4a62eb947944ccea3c3713057bef0a486baa4be8e366b73ed6f6031ed1197212cc92ad7d0e904e94e0117af8761ca37e5ac85f7feb7e574355950b96178affda0a81ab6d4e3493c8a3afb861510c6a68de0145a2e907e3cc414a62e1e4f855924545a27c962dddace677c8f4dd51bf6dc8ef54cc6a09b6c6452fb494e9a60962144f68704cb28fbd1a2a66791208d4d1d9336c199f72fd7c501c73f0bd59b2c2224c5d923727b394c77c45990cf11c2e897e579b22f6e2fdadc4c40b5b31a0466498f420b7b2b9479b83c7bc5368a1384f2bd54a6d418a286f510ea331d86056546ad4db4533f1afe541d75967af203d90bd4633f3bfe050cc3cb47709eb0ada9a35a8a5b767b526943a7c3c38fefda6556bb40cdddfdfc37b1f24f5c14e2cfdafca93a3389f7060f4de045aaec32b828c92435b061bd65634060a50ec05dbb50e21ba4947daf8b13fdc3af7b95348957fcf55dc7f65c15201fd747af666a8db7f3842de23c19162f84cffc0cec24056365def7ea90f356239747eb892213bcf5dea56297776f499c1c691e4dc171e5ff8bfb18ebb7e2f56b6ec95de2307ae686459920c64e349a449fb842e4ca044761d93185a37b7873313d3246245e9057628817b163099740255557805d14bc8a0b640383ed2cb4e2c1a8163061f266785c6aaa8247643643be9280e19ab6c4a2bbd70e38e740e78763b647a9af4ffd4dce30ebfd1683b6a379e229f181aa35528262000b5e3a33e7f5922ccc7e131656efe7feb71982c3844b060bcd16f471e8324833a2760c7addbf2fba7dfc50156214afc06641f2ab10144e70e60bc784d58109aaf155aedb91c76dc4ed01b403093f86a63cf214b50fe8a1502f06a00af1486ca202545da006859fc6bd1d940d40ce8e3dbfd0ef7a31674b46df5d536a09697bc6a41a8cfba4a2ecd5da86fdbf229e1a42dffc34f47d2066f4de7ea8e708d6aa9fb7c1348b08aeeacdc6927a2328abbbf10af8714646eabdcc802b40457ce667c4de61fe75fb9310aea62abdbaeddef1eb185f16189695681fa750ff4f840b933c3489774bfb4585d18cc725d2e6d781a021ab627a240f381fd878b112e5e5b3aa9e1c84b3817fb632efa4abbeabac11a41b7689ceada0221de2030826ab599d3ca58b22355a896bf04edaad09d72edf95f805b5177931dca540f8ee53ee6de912ff924ff7a7e3ef95f184bc752e88db940667c10144e56f21987cf19e786feac7741af000fcc1eae0bc33e96fe5ede1a6e58c5b53bf4465d561a9405c3609f2c3fe218e44ed81c7f0559fbb0ecaeb75106b21ca081fa2769c417fcb87171f93680ad6584a149cf7aea434e9369efc5ac881e3ea5aba9d7ee6cab2b67f868e8ab3dbabebd769de32a955a23efd3b4b8bca6c55d14802180c3efc679ca3aa79ca1ad6d0320b84055ec5f1d7dbe5d5d9a4c3f282ce01808afdd8b646cb7d44b0091743ad23e5bb61418e34271918757dfd750da7b3c4d8e6d74680046125ba1fbf9591383b6c9055b6628fd469708305f42f8409b165f3ed0a4d8af59f4fc5be3d188d38fd3c8b2f89864490f63c221f49e6298358e3619a1de1279bba1ef78088e6e230abb8f6e7023bafab93588e506ea1e106de745c02cda807a0a5c1a23e21941ce2073912ef0ed3d1b1beb260e5da6915e0ccae692c02bdfc2d14908fc496667609fd6bcf7d6763ae0582d4b69dc5d06a1f9b5832c5ed26a5444fea7f0bae6d1cdf93e0d04a543bf45ecff74e14cc4a84bb262d3eb5250206a91c4856a7123fd4e94175fafeede6b5ea26bf41b4bcaa071bc4bf3beafa3d34aaced4cc70695c85271dc6b07b58c46b2069e428f0b1140fc4e36ac0793dc1a9846c85fedd42dbd70c1daf67f9957d614dbf5ef4bbfac7f4a750d201f8655dc37f23fd8c163238a90b55bcbb79be9704b0d88617575e6eb3efb3214bb33f51ff05a3ec11e5c9e7f2ae36ea6327dcfd95c34a65bb0934946d7c0f495928f4e43ea7d23eb21b9d043d033c28fdb7f30c82a4ba8cf081c41999c1f9706aef845fdcb0159d2059f8da0b55d8749258c1f432b89243196b589cce370b32413e9effd0afa3fb34a16539eb5a10981a1da6996a9ea425c850a283e968334325362fc5d544aaf60130e8ba6c130003bf06a57a91b1b7d723cbc77d51aef15118619b3f5681614dded52cb7805f55d94c2399ae722dd16dc12738fb406f81c8542f521377219ff072a3b48cbffb9c5d48f3128373e871a7d18aa7af31b8541fc7742881e50de159c8cec6d19836b2e4e750be67359f64f9c720da34bb771cd647a95274edd02e1d46207ea20bd7c57e828d417389081e195a1f5ac79fb6731fd13a7e6cf1f6e904757aaec5dca8e89f9f0f8b74c8a8285544a64b211dfe79301608057e0211f4704b3d9a4152870e84afe465c8e0d2fc47bc7a40125d54394a1ea039e99ffcd799d392524acd69e00219437a4eab73f8225b93434630c9de6c9ae7c5be4a10605653e9e4cf65e09146222419f18784071bdbeba9feab38c1793fb1b4a1a7b64237abba223d875f0ab0de7fc53934d95617db94a586d71bb7989f395a4ee2b20850696f8455cad4505212b85b56723728ee153efe3947e628db026e05192c8020d84ee3ba7c98732e4f0eb55aee7c1bcd231e8578dded6ce5eedfe18df301f464216a308d6f6bd93dcd41907dbd9547b4571df7348e66ff4295e7b04efaf7f58e0cf69cfb31d3ad55eb0966b7dfaab155edb06032a37d3d7aea88046d5ef3eca5a47b86eee43c63ab24b9d49f1a3eeaa81bd7a99c4e2115a84a47ef4664de84bf1e3d765242c0944eac71fbadcfacda5292a30836bfb6ccb3492b1e37a8e68da2aa4de89770597ce2dc248de44863049d50d828038e916f510c25a673f6b1ad212775c4b5a54483bd53c1f1b5e76a49f95ba30456f07482914bef6d7fa5e8d8d48ac940ce80e0f7a3c1a645d2b4dd96e7c0a11bf36dcdfe278598428e309b2d3d2a2efde95a5c57e9e7d1a7e896dad46754a406610c2b89d446a0a9e4b16fdd599bf83b4cf93d4346321269800010e3623548932bdddeed9191fca3a3e4ef3548270ac283f48a034c8b890a43b2d3799d5f97ae4c2cea27cd2d5f31f89ced8c1b2ebc7741dada2012523b367ba2ee58d66cd545bbaa5b4949e2de0c497cea6cf7ee3c464ba825f6843ad78952cf6cecae092d984de1f943a41fd6e0589fc695eec80d51de13689f6c5258a68300510ee2e7508919b57ed2ad08d42a0bf65a5774e89e62695615aff400f09b7f64c9bdf4ed91c5e713098dcddc040beb45e431e3ccfdf55f246a6494ba8f69ac1b19d10b202e0c970f4acf544ea96c042cc53ded4bba95db695e6f4449a9a24405c492390905c8ec94931dc119998649904d1d1c131ed643e85b263aa2b675d3199ac5f53520adc21414e4dbe56b6ca862b21933cba4dce8f6b22f4fb44a580a262c08135d65f90bcbdaa2de5ef99e2360430441dc43422ae4901866dbd2aa2064b8aaaf29a435453f37c00ef233c9397d97528a40ad62a5177399169b734bc9eec4aeb415e570c4b297688c7bfb16745ab4faf9a4a618ca119f5f2ebd868ecff3512c839f384ff54b40e379e466b5f576ecf6b35e6e4f7d461919f756dd73443ad102735c823ab09a6bbdfa3be046f05de978cc2253f408b7a7482a4fc7a1db982036c486d534b515f11dadbfc8c7129298cc8b4918c58ce07c3d9b88cc9da46721629ec563be247cc8bf6b79f02da905b2e5c9beddcb6e31184061931b5f7db3da4678cf1765c6b87aec622a10361bbbf26f50be75ff3eb30bc8b6822b3e1185f999e9e4d7984aa6f4d9a4d7f6c88895436922424b4f535813c49aaff6e224fe44aa58e5e2a45e466e745f1775b76b90320236a754e13e82827df2116bc3c94a60f997d2d3c94083f5152b033f2730a9241cd5bed869755ec5e3f415763ed957d4425a9142f245b4495c7c7def7f2bad7f6c4b40168a1adf7b6345b52ad258e3dfc36398a429e9c88f530cd56326e02e97d8e0af92ddd2e680fff8c1b543066d3a9781f9ba91e5f1fb5b6801201041a22e0efed1e8b3482da55d7ff6664bc763917ba3dbc2227b0bb329467fb2d8940ece964b2d37dd143a1cbcb06c057f8262b3b7c36b74c4de67bed61c659ef69551e5be1376c4669a311d0fa6f193cc51259cfd8f7ecb0cfe797260075fee3f5ae6b3e6d5a48ab2f1990639235e8a4ade4d377c72380b37e3e665e4de34364072721b50bd77cc269cb96ca927158d58d0f65637376745270543675e535d8e14268b6394c53cafcccff2a334c9756b394d5ca1477a3ba7e4354ff19432eda3a9af1c6c262e9dd36dd6d5dcb0385f280fd3d4582e85ff756bb9529f7a65898e545ff0365a1400fb59315"}) 4.014647442s ago: executing program 5 (id=2911): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd18dc54380539784745369c5e0c80047bd4ebe944bf2cdb103866ec73a264c", 0xf0}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471ca422935c42f77b319e7d595558b74e1b014", 0x48}, {&(0x7f0000000180)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a5831156a1ab7b6dfe6ef3c81fd2975cabfd8923d3156e4a3a6c3de6e", 0xac}], 0x3}}, {{0x0, 0x0, &(0x7f0000001740)=[{0x0}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f436e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6df", 0x6b}, {&(0x7f00000005c0)="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", 0x10b}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f00000000c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d0d4ba1cf8c4fdde03e83abbdf7d3cc5f165346a78d8d45aaed874a4f6328bca29d3a1df87952d1e19dfb2f00bb046dfdae07b9bf4d577a711c1ebb896b22cfbbcfd3c837ab2eddad43812c65cc64e74ee88f6f4640f74b83c1861ef5000dd6ab8f25af7c71e9d1ce7fb85a53262e93f10799cfd732e45d3c19932e0b2a765a451cd4", 0x9d}, {&(0x7f0000000c00)="7b46e46eb2c6ae4d7dd8c492d688b3033c53c84cbe501602594847e03766de6e7b9bb07e843b7f0c1598b481b797bf9f77622efce832da2d9aa2774ea7d10089c47a", 0x42}], 0x6}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 3.884513722s ago: executing program 5 (id=2912): symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x60, 0x32, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000003000000000000000000000009700c0ffffffffff95"], 0x0, 0xf}, 0x94) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r6, 0x0}) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r9, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0x0, 0x3]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, r8, 0x9, 0x7, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) socket(0x10, 0x2, 0x0) 2.985563893s ago: executing program 8 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x10001, 0xffff, 0x0, 0x4, 0x0, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x935, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1000, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffefff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x250, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x3, 0xc92, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x4, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x6db, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0x3, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0xfffffffc, 0x6, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x7fffffff, 0x0, {0x1, 0x2, 0xfc63, 0x2, 0x80}, 0x100}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r3, &(0x7f0000000240)={0x1}, 0x8, 0x0) msgsnd(r3, &(0x7f0000000080)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/87}, 0x5f, 0x2, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01092abd7000ffdbdf2510000000050035000700000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.555004827s ago: executing program 5 (id=2914): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000180), &(0x7f0000001300)=""/4098, 0x1002}) 2.502258595s ago: executing program 8 (id=2915): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000dbdf255d00000008000300", @ANYRES32, @ANYBLOB="0c009900020000001f0000002800a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000800a500000000001c00a6800a000600ffffffffffff00000a00060008021100000000000400a6800800a500000000003400a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000800a500000000006400a6800a00060008021100000100000a000600ffffffffffff"], 0x120}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000000000000000faffffff00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 2.32148361s ago: executing program 8 (id=2916): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x4a7c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='pimreg\x00'}) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x99d, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r7, 0x7af, &(0x7f0000000200)={@my=0x0, 0xe}) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.709531044s ago: executing program 6 (id=2917): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c087}, 0x4004104) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'geneve1\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0xc5) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x7c, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0xbd, 0x1, {0x22, 0xa1b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x7, 0x7}}}}}]}}]}}, 0x0) 1.445636535s ago: executing program 8 (id=2918): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000001080)={{0x0, 0x3938700}}, &(0x7f0000001100)) socket$unix(0x1, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$unix(0x1, 0x2, 0x0) 1.285391638s ago: executing program 8 (id=2919): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x1ff, 0x2000000000009, 0xfffffe0000000001, 0xfa11}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r5, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x3) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000900020073797a32000000120704e2b487caf3a543f10005e50300000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014080ffffff05000700840000000500"], 0x68}}, 0x0) r7 = inotify_init() r8 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 1.255749578s ago: executing program 7 (id=2920): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x12, 0x60a, 0xd0, 0x202, 0x1a0, 0x2e8, 0x2e8, 0x1a0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfc}, {0xffffffffffffffff, 0xf9, 0x6}}}}, {{@ipv6={@private2, @local, [], [], 'vxcan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r1, &(0x7f0000003f40)=[{{&(0x7f0000000480)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000100)="88d4377e0ea69337253349a880cae54638ddcf7040ae05957b4d1a62cfb3bb1608224078d99497a9d9aed10eb8fd2be7de3d50cd31229f6cedb728c2fee6", 0x3e}], 0x1, &(0x7f0000002940)=ANY=[@ANYBLOB="100000000000000001e6ffff00000000"], 0x10}}], 0x2, 0x40002) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000002140)=ANY=[@ANYBLOB='@#\f\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) setns(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x1, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000003c0)='illinois', 0x8) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) bind$rds(r6, &(0x7f0000000340)={0x2, 0x3, @multicast2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0xb, 0x0) 923.290845ms ago: executing program 2 (id=2921): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10005}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) shutdown(r0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000608000100000000440003000000000008000500", @ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x88852}, 0x0) r4 = socket(0x5, 0x3, 0x3) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) 439.264872ms ago: executing program 5 (id=2923): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 64) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) (async, rerun: 32) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) (async, rerun: 32) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 64) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @mcast2, 0x5}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="2b34d0e4769933dbf9b587e8033f162c775180043fd5de89ee0d974562e807552ebb224911e0889c88e9f6d5d08e3ce149522f7521d0737164217410db1ae2ca2f1ca319c5304e4ccb656e834b50826a1cb591deb05e3389c1554c3d4d4548518252e4c59382cb237519f9e7b0411ad7", 0x70}], 0x1}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@gettaction={0x50, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x35}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x50}}, 0x24040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0x6, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4809c}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 288.295781ms ago: executing program 5 (id=2924): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x3}) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) socketpair(0x8, 0x800, 0x80000001, &(0x7f0000000140)={0xffffffffffffffff}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000002280)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582", @ANYBLOB="d7e1687a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x81) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x7f, 0x2) sendmmsg(r1, &(0x7f0000005f00)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 176.936936ms ago: executing program 6 (id=2925): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6f}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 66.5733ms ago: executing program 2 (id=2926): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r5, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4040811) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000066001fff2903700000000000000010003266c4e4e90b22ae54d6917e49541c3fc18682e7a138a9705e090ad37725ba6c5b3515c3ab51b66386d94817231773", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 0s ago: executing program 6 (id=2927): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x3f1200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0xe5a, 0x1) r5 = eventfd2(0x29f9d3b8, 0x800) r6 = eventfd2(0x10000, 0x801) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x5, r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r4, 0x0, 0x2, r6}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r4, 0xba, 0x3, r5}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000, 0xfffffffffffffffe, 0x6}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r7, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f04ebbeee, 0x10010, r9, 0x15b77000) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000200)=0x6) kernel console output (not intermixed with test programs): Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.190013][T16530] Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.201486][T16530] Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.211112][ T9] usb 3-1: no configurations [ 1169.213434][T16530] Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.227989][T16530] ldm_validate_partition_table(): Disk read failed. [ 1169.234949][ T9] usb 3-1: can't read configurations, error -22 [ 1169.247023][T16530] Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.256932][ T9] usb usb3-port1: attempt power cycle [ 1169.258542][T16530] Buffer I/O error on dev loop6, logical block 0, async page read [ 1169.275191][T16530] Dev loop6: unable to read RDB block 0 [ 1169.282129][T16530] loop6: unable to read partition table [ 1169.288805][T16530] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1169.616615][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1169.644018][T16533] binder: 16532:16533 ioctl c0306201 200000000080 returned -14 [ 1169.647026][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1169.672287][ T9] usb 3-1: no configurations [ 1169.677649][ T9] usb 3-1: can't read configurations, error -22 [ 1169.826263][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1169.860858][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1169.874624][ T9] usb 3-1: no configurations [ 1169.880404][ T9] usb 3-1: can't read configurations, error -22 [ 1169.889959][ T9] usb usb3-port1: unable to enumerate USB device [ 1170.403386][T16545] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2570'. [ 1170.428409][T16545] netlink: 'syz.8.2570': attribute type 7 has an invalid length. [ 1170.453255][T16545] netlink: 'syz.8.2570': attribute type 8 has an invalid length. [ 1170.476661][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2570'. [ 1170.524150][T16545] gretap0: entered promiscuous mode [ 1170.708712][T16545] gretap0: left promiscuous mode [ 1171.424851][ T5206] ldm_validate_partition_table(): Disk read failed. [ 1171.454043][ T5206] Dev loop6: unable to read RDB block 0 [ 1171.485790][ T5206] loop6: unable to read partition table [ 1172.156642][T16560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1173.697959][T14769] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1173.875931][T14769] usb 9-1: Using ep0 maxpacket: 16 [ 1173.918077][T14769] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 1173.951802][T14769] usb 9-1: config 4 has no interface number 0 [ 1173.997349][T14769] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1174.023682][T14769] usb 9-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1174.065254][T14769] usb 9-1: config 4 interface 51 has no altsetting 0 [ 1174.150644][T14769] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1174.191355][T14769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.269755][T14769] usb 9-1: Product: syz [ 1174.285064][T14769] usb 9-1: Manufacturer: syz [ 1174.317957][T14769] usb 9-1: SerialNumber: syz [ 1174.354983][T16573] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1174.394697][T16573] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1174.772916][T16573] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1174.854005][T16573] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1174.973467][T16591] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1174.980040][T16591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1175.083581][T16591] vhci_hcd vhci_hcd.0: Device attached [ 1175.173697][T14769] cdc_eem 9-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.8-1, CDC EEM Device, c2:00:ed:08:f4:27 [ 1175.271964][T13941] vhci_hcd: vhci_device speed not set [ 1175.297433][T14769] usb 9-1: USB disconnect, device number 42 [ 1175.352063][T14769] cdc_eem 9-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.8-1, CDC EEM Device [ 1175.368565][T13941] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1176.132427][T16614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.541547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.548466][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.563284][T16629] FAULT_INJECTION: forcing a failure. [ 1177.563284][T16629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.584171][T16630] : renamed from bridge_slave_0 (while UP) [ 1177.598780][T16629] CPU: 0 UID: 0 PID: 16629 Comm: syz.2.2592 Not tainted syzkaller #0 PREEMPT(full) [ 1177.598802][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1177.598811][T16629] Call Trace: [ 1177.598817][T16629] [ 1177.598823][T16629] dump_stack_lvl+0x189/0x250 [ 1177.598843][T16629] ? __pfx____ratelimit+0x10/0x10 [ 1177.598862][T16629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1177.598875][T16629] ? __pfx__printk+0x10/0x10 [ 1177.598891][T16629] ? __might_fault+0xb0/0x130 [ 1177.598919][T16629] should_fail_ex+0x414/0x560 [ 1177.598938][T16629] _copy_from_user+0x2d/0xb0 [ 1177.598952][T16629] ___sys_sendmsg+0x158/0x2a0 [ 1177.598972][T16629] ? __pfx____sys_sendmsg+0x10/0x10 [ 1177.598993][T16629] ? rcu_read_lock_any_held+0xb3/0x120 [ 1177.599023][T16629] ? __fget_files+0x2a/0x420 [ 1177.599036][T16629] ? __fget_files+0x3a0/0x420 [ 1177.599056][T16629] __x64_sys_sendmsg+0x19b/0x260 [ 1177.599075][T16629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1177.599098][T16629] ? __pfx_ksys_write+0x10/0x10 [ 1177.599118][T16629] ? do_syscall_64+0xbe/0xf80 [ 1177.599131][T16629] do_syscall_64+0xfa/0xf80 [ 1177.599141][T16629] ? lockdep_hardirqs_on+0x98/0x140 [ 1177.599159][T16629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.599172][T16629] ? clear_bhb_loop+0x60/0xb0 [ 1177.599187][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.599199][T16629] RIP: 0033:0x7f02d2b8f749 [ 1177.599211][T16629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.599222][T16629] RSP: 002b:00007f02d3993038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1177.599237][T16629] RAX: ffffffffffffffda RBX: 00007f02d2de5fa0 RCX: 00007f02d2b8f749 [ 1177.599247][T16629] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1177.599255][T16629] RBP: 00007f02d3993090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.599263][T16629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.599270][T16629] R13: 00007f02d2de6038 R14: 00007f02d2de5fa0 R15: 00007f02d2f0fa28 [ 1177.599290][T16629] [ 1177.993130][T16592] vhci_hcd: connection reset by peer [ 1178.000273][ T3739] vhci_hcd: stop threads [ 1178.005984][ T3739] vhci_hcd: release socket [ 1178.020783][ T3739] vhci_hcd: disconnect device [ 1178.193832][T16637] sctp: [Deprecated]: syz.5.2594 (pid 16637) Use of int in maxseg socket option. [ 1178.193832][T16637] Use struct sctp_assoc_value instead [ 1178.295599][T15772] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1178.352919][T16637] sctp: [Deprecated]: syz.5.2594 (pid 16637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1178.352919][T16637] Use struct sctp_sack_info instead [ 1178.496988][T15772] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1178.519499][T15772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.558340][T15772] usb 3-1: Product: syz [ 1178.575500][T15772] usb 3-1: Manufacturer: syz [ 1178.610757][T15772] usb 3-1: SerialNumber: syz [ 1178.707556][T15772] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1178.758190][ T2156] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1178.897728][T16641] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1178.938689][ T30] audit: type=1326 audit(1764724932.463:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1178.969308][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.059586][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.072097][ T30] audit: type=1326 audit(1764724932.493:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.137278][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.172362][ T30] audit: type=1326 audit(1764724932.493:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.202167][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.244979][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.279937][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.297535][ T30] audit: type=1326 audit(1764724932.493:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.353470][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.373676][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.397453][ T30] audit: type=1326 audit(1764724932.493:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.421187][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.447902][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.483173][ T30] audit: type=1326 audit(1764724932.493:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.554247][ T30] audit: type=1326 audit(1764724932.493:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.580253][T16651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1179.657367][ T30] audit: type=1326 audit(1764724932.493:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.741567][ T30] audit: type=1326 audit(1764724932.493:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.785240][T15423] usb 3-1: USB disconnect, device number 94 [ 1179.831583][ T30] audit: type=1326 audit(1764724932.493:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.8.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1179.934796][T16659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.110846][T16666] FAULT_INJECTION: forcing a failure. [ 1180.110846][T16666] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.141429][T16666] CPU: 1 UID: 0 PID: 16666 Comm: syz.2.2603 Not tainted syzkaller #0 PREEMPT(full) [ 1180.141455][T16666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1180.141463][T16666] Call Trace: [ 1180.141469][T16666] [ 1180.141475][T16666] dump_stack_lvl+0x189/0x250 [ 1180.141494][T16666] ? __pfx____ratelimit+0x10/0x10 [ 1180.141513][T16666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.141526][T16666] ? __pfx__printk+0x10/0x10 [ 1180.141545][T16666] ? __pfx___might_resched+0x10/0x10 [ 1180.141557][T16666] ? fs_reclaim_acquire+0x7d/0x100 [ 1180.141572][T16666] should_fail_ex+0x414/0x560 [ 1180.141591][T16666] should_failslab+0xa8/0x100 [ 1180.141605][T16666] kmem_cache_alloc_node_noprof+0x77/0x700 [ 1180.141622][T16666] ? __alloc_skb+0x112/0x2d0 [ 1180.141637][T16666] ? netlink_autobind+0xdb/0x300 [ 1180.141652][T16666] __alloc_skb+0x112/0x2d0 [ 1180.141670][T16666] netlink_sendmsg+0x5c6/0xb30 [ 1180.141693][T16666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.141721][T16666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1180.141737][T16666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1180.141751][T16666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.141769][T16666] __sock_sendmsg+0x21c/0x270 [ 1180.141786][T16666] ____sys_sendmsg+0x505/0x820 [ 1180.141807][T16666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.141830][T16666] ? import_iovec+0x74/0xa0 [ 1180.141851][T16666] ___sys_sendmsg+0x21f/0x2a0 [ 1180.141870][T16666] ? __pfx____sys_sendmsg+0x10/0x10 [ 1180.141891][T16666] ? rcu_read_lock_any_held+0xb3/0x120 [ 1180.141921][T16666] ? __fget_files+0x2a/0x420 [ 1180.141934][T16666] ? __fget_files+0x3a0/0x420 [ 1180.141953][T16666] __x64_sys_sendmsg+0x19b/0x260 [ 1180.141973][T16666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1180.141995][T16666] ? __pfx_ksys_write+0x10/0x10 [ 1180.142015][T16666] ? do_syscall_64+0xbe/0xf80 [ 1180.142029][T16666] do_syscall_64+0xfa/0xf80 [ 1180.142039][T16666] ? lockdep_hardirqs_on+0x98/0x140 [ 1180.142056][T16666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.142068][T16666] ? clear_bhb_loop+0x60/0xb0 [ 1180.142083][T16666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.142096][T16666] RIP: 0033:0x7f02d2b8f749 [ 1180.142114][T16666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.142125][T16666] RSP: 002b:00007f02d3993038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.142141][T16666] RAX: ffffffffffffffda RBX: 00007f02d2de5fa0 RCX: 00007f02d2b8f749 [ 1180.142150][T16666] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1180.142159][T16666] RBP: 00007f02d3993090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.142166][T16666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.142174][T16666] R13: 00007f02d2de6038 R14: 00007f02d2de5fa0 R15: 00007f02d2f0fa28 [ 1180.142194][T16666] [ 1180.420885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1180.505735][T13941] vhci_hcd: vhci_device speed not set [ 1180.576470][ T2156] usb 3-1: Service connection timeout for: 256 [ 1180.582840][ T2156] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1180.592420][ T2156] ath9k_htc: Failed to initialize the device [ 1180.599399][T15423] usb 3-1: ath9k_htc: USB layer deinitialized [ 1180.742594][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2607'. [ 1180.806387][T16677] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 1180.817759][T16679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.829915][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2607'. [ 1181.208273][ T9] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 1181.346666][ T9] usb 9-1: device descriptor read/64, error -71 [ 1181.402500][T16704] loop9: detected capacity change from 0 to 7 [ 1181.618917][T16704] Dev loop9: unable to read RDB block 7 [ 1181.630402][ T9] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 1181.662705][T16704] loop9: unable to read partition table [ 1181.690239][T16704] loop9: partition table beyond EOD, truncated [ 1181.714655][T16704] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1181.806361][ T9] usb 9-1: device descriptor read/64, error -71 [ 1181.919904][ T9] usb usb9-port1: attempt power cycle [ 1181.999145][T16720] netlink: 'syz.2.2617': attribute type 4 has an invalid length. [ 1182.296960][ T9] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1182.338544][ T9] usb 9-1: device descriptor read/8, error -71 [ 1182.615928][ T9] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1182.645643][T16735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.686948][ T9] usb 9-1: device descriptor read/8, error -71 [ 1182.811043][ T9] usb usb9-port1: unable to enumerate USB device [ 1183.284794][T16748] FAULT_INJECTION: forcing a failure. [ 1183.284794][T16748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.330876][T16748] CPU: 1 UID: 0 PID: 16748 Comm: syz.6.2625 Not tainted syzkaller #0 PREEMPT(full) [ 1183.330908][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.330916][T16748] Call Trace: [ 1183.330923][T16748] [ 1183.330929][T16748] dump_stack_lvl+0x189/0x250 [ 1183.330948][T16748] ? __pfx____ratelimit+0x10/0x10 [ 1183.330967][T16748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.330980][T16748] ? __pfx__printk+0x10/0x10 [ 1183.330996][T16748] ? __might_fault+0xb0/0x130 [ 1183.331023][T16748] should_fail_ex+0x414/0x560 [ 1183.331043][T16748] _copy_from_iter+0x1de/0x1790 [ 1183.331064][T16748] ? rcu_is_watching+0x15/0xb0 [ 1183.331081][T16748] ? __pfx__copy_from_iter+0x10/0x10 [ 1183.331099][T16748] ? __build_skb_around+0x22d/0x3c0 [ 1183.331118][T16748] ? netlink_sendmsg+0x642/0xb30 [ 1183.331135][T16748] ? skb_put+0x11b/0x210 [ 1183.331153][T16748] netlink_sendmsg+0x6b2/0xb30 [ 1183.331175][T16748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.331195][T16748] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1183.331211][T16748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1183.331223][T16748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.331241][T16748] __sock_sendmsg+0x21c/0x270 [ 1183.331257][T16748] ____sys_sendmsg+0x505/0x820 [ 1183.331279][T16748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.331301][T16748] ? import_iovec+0x74/0xa0 [ 1183.331316][T16748] ___sys_sendmsg+0x21f/0x2a0 [ 1183.331335][T16748] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.331356][T16748] ? rcu_read_lock_any_held+0xb3/0x120 [ 1183.331385][T16748] ? __fget_files+0x2a/0x420 [ 1183.331399][T16748] ? __fget_files+0x3a0/0x420 [ 1183.331418][T16748] __x64_sys_sendmsg+0x19b/0x260 [ 1183.331438][T16748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1183.331461][T16748] ? __pfx_ksys_write+0x10/0x10 [ 1183.331480][T16748] ? do_syscall_64+0xbe/0xf80 [ 1183.331494][T16748] do_syscall_64+0xfa/0xf80 [ 1183.331504][T16748] ? lockdep_hardirqs_on+0x98/0x140 [ 1183.331521][T16748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.331533][T16748] ? clear_bhb_loop+0x60/0xb0 [ 1183.331548][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.331560][T16748] RIP: 0033:0x7f9656d8f749 [ 1183.331580][T16748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.331591][T16748] RSP: 002b:00007f9657cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1183.331606][T16748] RAX: ffffffffffffffda RBX: 00007f9656fe5fa0 RCX: 00007f9656d8f749 [ 1183.331616][T16748] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1183.331624][T16748] RBP: 00007f9657cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.331631][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.331639][T16748] R13: 00007f9656fe6038 R14: 00007f9656fe5fa0 R15: 00007f965710fa28 [ 1183.331659][T16748] [ 1183.616541][T16742] netlink: 'syz.5.2623': attribute type 16 has an invalid length. [ 1183.624477][T16742] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2623'. [ 1183.961433][T16757] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1184.034103][T16757] team0: Device ipvlan2 is already an upper device of the team interface [ 1184.394896][T16772] pim6reg: entered allmulticast mode [ 1185.346950][T16788] 8021q: VLANs not supported on gre0 [ 1185.515912][T16793] FAULT_INJECTION: forcing a failure. [ 1185.515912][T16793] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.560855][T16793] CPU: 1 UID: 0 PID: 16793 Comm: syz.6.2637 Not tainted syzkaller #0 PREEMPT(full) [ 1185.560886][T16793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1185.560900][T16793] Call Trace: [ 1185.560908][T16793] [ 1185.560918][T16793] dump_stack_lvl+0x189/0x250 [ 1185.560950][T16793] ? __pfx____ratelimit+0x10/0x10 [ 1185.560980][T16793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.561004][T16793] ? __pfx__printk+0x10/0x10 [ 1185.561031][T16793] ? __lock_acquire+0x6b6/0x2cf0 [ 1185.561076][T16793] should_fail_ex+0x414/0x560 [ 1185.561109][T16793] should_failslab+0xa8/0x100 [ 1185.561133][T16793] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1185.561163][T16793] ? skb_clone+0x212/0x3a0 [ 1185.561191][T16793] skb_clone+0x212/0x3a0 [ 1185.561215][T16793] __netlink_deliver_tap+0x404/0x850 [ 1185.561257][T16793] ? netlink_deliver_tap+0x2e/0x1b0 [ 1185.561287][T16793] netlink_deliver_tap+0x19c/0x1b0 [ 1185.561317][T16793] netlink_unicast+0x7fa/0x9e0 [ 1185.561352][T16793] ? __pfx_netlink_unicast+0x10/0x10 [ 1185.561381][T16793] ? netlink_sendmsg+0x642/0xb30 [ 1185.561406][T16793] ? skb_put+0x11b/0x210 [ 1185.561437][T16793] netlink_sendmsg+0x805/0xb30 [ 1185.561478][T16793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.561510][T16793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1185.561536][T16793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1185.561556][T16793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.561584][T16793] __sock_sendmsg+0x21c/0x270 [ 1185.561611][T16793] ____sys_sendmsg+0x505/0x820 [ 1185.561647][T16793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.561688][T16793] ? import_iovec+0x74/0xa0 [ 1185.561712][T16793] ___sys_sendmsg+0x21f/0x2a0 [ 1185.561745][T16793] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.561783][T16793] ? rcu_read_lock_any_held+0xb3/0x120 [ 1185.561844][T16793] ? __fget_files+0x2a/0x420 [ 1185.561866][T16793] ? __fget_files+0x3a0/0x420 [ 1185.561901][T16793] __x64_sys_sendmsg+0x19b/0x260 [ 1185.561934][T16793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1185.561974][T16793] ? __pfx_ksys_write+0x10/0x10 [ 1185.562007][T16793] ? do_syscall_64+0xbe/0xf80 [ 1185.562028][T16793] do_syscall_64+0xfa/0xf80 [ 1185.562045][T16793] ? lockdep_hardirqs_on+0x98/0x140 [ 1185.562073][T16793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.562093][T16793] ? clear_bhb_loop+0x60/0xb0 [ 1185.562118][T16793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.562137][T16793] RIP: 0033:0x7f9656d8f749 [ 1185.562157][T16793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.562176][T16793] RSP: 002b:00007f9657cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.562200][T16793] RAX: ffffffffffffffda RBX: 00007f9656fe5fa0 RCX: 00007f9656d8f749 [ 1185.562216][T16793] RDX: 0000000000000000 RSI: 00002000000047c0 RDI: 0000000000000003 [ 1185.562229][T16793] RBP: 00007f9657cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.562267][T16793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.562280][T16793] R13: 00007f9656fe6038 R14: 00007f9656fe5fa0 R15: 00007f965710fa28 [ 1185.562315][T16793] [ 1185.920105][T16797] netlink: 'syz.2.2639': attribute type 3 has an invalid length. [ 1185.962274][T16797] netlink: 'syz.2.2639': attribute type 1 has an invalid length. [ 1185.984419][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'. [ 1186.009199][T16797] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2639'. [ 1186.346143][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1186.486012][ T9] usb 3-1: device descriptor read/64, error -71 [ 1186.586462][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1186.586478][ T30] audit: type=1326 audit(1764724940.113:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.650853][ T30] audit: type=1326 audit(1764724940.143:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.695635][ T30] audit: type=1326 audit(1764724940.143:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.718617][ T30] audit: type=1326 audit(1764724940.143:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.741461][ T30] audit: type=1326 audit(1764724940.143:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.756196][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1186.765925][ T30] audit: type=1326 audit(1764724940.143:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.824842][ T30] audit: type=1326 audit(1764724940.143:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.880803][ T30] audit: type=1326 audit(1764724940.143:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.909057][ T30] audit: type=1326 audit(1764724940.143:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1186.947602][ T9] usb 3-1: device descriptor read/64, error -71 [ 1187.018059][ T30] audit: type=1326 audit(1764724940.523:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.6.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9656d8f749 code=0x7ffc0000 [ 1187.076892][ T9] usb usb3-port1: attempt power cycle [ 1187.214928][T16824] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2647'. [ 1187.336321][T14769] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1187.436030][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1187.485875][T14769] usb 7-1: Using ep0 maxpacket: 16 [ 1187.493028][ T9] usb 3-1: device descriptor read/8, error -71 [ 1187.501512][T14769] usb 7-1: config 1 interface 0 altsetting 220 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1187.518556][T14769] usb 7-1: config 1 interface 0 altsetting 220 bulk endpoint 0x1 has invalid maxpacket 0 [ 1187.534142][T14769] usb 7-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.549400][T14769] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1187.564079][T14769] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1187.574220][T14769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.586185][T14769] usb 7-1: Product: syz [ 1187.590365][T14769] usb 7-1: Manufacturer: syz [ 1187.595070][T14769] usb 7-1: SerialNumber: syz [ 1187.736110][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1187.758152][ T9] usb 3-1: device descriptor read/8, error -71 [ 1187.810109][T14769] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 220 proto 1 vid 0x0525 pid 0xA4A8 [ 1187.866925][ T9] usb usb3-port1: unable to enumerate USB device [ 1188.462031][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2651'. [ 1189.182219][T16857] input: syz1 as /devices/virtual/input/input67 [ 1189.835957][ T2156] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1190.006762][ T2156] usb 3-1: Using ep0 maxpacket: 16 [ 1190.040803][ T2156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.056210][ T2156] usb 3-1: config 0 has no interfaces? [ 1190.073252][ T2156] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 1190.083480][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.092137][ T2156] usb 3-1: Product: syz [ 1190.097515][ T2156] usb 3-1: Manufacturer: syz [ 1190.102201][ T2156] usb 3-1: SerialNumber: syz [ 1190.115831][ T2156] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1190.124363][ T2156] r8152-cfgselector 3-1: config 0 descriptor?? [ 1191.771924][T16877] loop3: detected capacity change from 0 to 7 [ 1191.787361][T16877] Dev loop3: unable to read RDB block 7 [ 1191.799156][T16877] loop3: unable to read partition table [ 1191.813578][T16877] loop3: partition table beyond EOD, truncated [ 1191.829465][T16877] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1192.549588][T13941] r8152-cfgselector 3-1: USB disconnect, device number 99 [ 1193.063091][T16820] usblp0:failed reading printer status (-110) [ 1193.360815][T13941] usb 7-1: USB disconnect, device number 27 [ 1193.463031][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1193.496177][T13941] usblp0: removed [ 1193.671556][T16897] netlink: 'syz.6.2668': attribute type 8 has an invalid length. [ 1193.775462][ T2156] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1193.955893][ T2156] usb 3-1: Using ep0 maxpacket: 32 [ 1193.983802][ T2156] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 1194.112666][ T2156] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1194.156490][ T2156] usb 3-1: can't read configurations, error -61 [ 1194.325799][ T2156] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1194.546419][ T2156] usb 3-1: Using ep0 maxpacket: 32 [ 1194.574828][ T2156] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 1194.626384][ T2156] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1194.647269][ T2156] usb 3-1: can't read configurations, error -61 [ 1194.673923][ T2156] usb usb3-port1: attempt power cycle [ 1195.047223][ T2156] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1195.122158][ T2156] usb 3-1: Using ep0 maxpacket: 32 [ 1195.154740][ T2156] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 1195.208642][ T2156] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1195.246066][ T2156] usb 3-1: can't read configurations, error -61 [ 1195.416101][ T2156] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1195.473148][ T2156] usb 3-1: Using ep0 maxpacket: 32 [ 1195.493180][T16913] netlink: 'syz.7.2673': attribute type 1 has an invalid length. [ 1195.501135][ T2156] usb 3-1: too many configurations: 116, using maximum allowed: 8 [ 1195.548632][ T2156] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1195.610586][ T2156] usb 3-1: can't read configurations, error -61 [ 1195.706702][T16916] loop2: detected capacity change from 0 to 7 [ 1195.729162][T16913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1195.737372][T14577] Dev loop2: unable to read RDB block 7 [ 1195.744696][T14577] loop2: unable to read partition table [ 1195.792426][ T2156] usb usb3-port1: unable to enumerate USB device [ 1195.814831][T14577] loop2: partition table beyond EOD, truncated [ 1195.856035][T16916] Dev loop2: unable to read RDB block 7 [ 1195.861626][T16916] loop2: unable to read partition table [ 1195.888520][T16916] loop2: partition table beyond EOD, truncated [ 1195.902665][T16916] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1195.944651][T16913] ip6gretap0: left allmulticast mode [ 1196.004386][T16913] ip6gretap0: left promiscuous mode [ 1196.132036][ T9248] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.143573][ T9248] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.153277][ T9248] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.182139][ T9248] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.182922][ T5206] Dev loop2: unable to read RDB block 7 [ 1196.217840][ T5206] loop2: unable to read partition table [ 1196.223845][ T5206] loop2: partition table beyond EOD, truncated [ 1196.449053][T16930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1196.600904][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1196.600925][ T30] audit: type=1400 audit(1764724950.123:1025): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=16936 comm="syz.7.2679" [ 1196.699345][T16940] syzkaller1: entered promiscuous mode [ 1196.713721][T16940] syzkaller1: entered allmulticast mode [ 1197.824825][T16963] x_tables: duplicate underflow at hook 3 [ 1198.266091][T14769] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1198.436316][T14769] usb 9-1: Using ep0 maxpacket: 16 [ 1198.448437][T14769] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1198.455239][T14769] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1198.470727][T14769] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.484210][T14769] usb 9-1: config 0 descriptor?? [ 1198.705075][T16967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.741904][T16967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.803951][T16976] x_tables: unsorted underflow at hook 3 [ 1199.065463][T15772] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1199.127733][T16980] input: syz0 as /devices/virtual/input/input68 [ 1199.143717][T16969] syz.6.2685 (16969): drop_caches: 2 [ 1199.247508][T15772] usb 3-1: Using ep0 maxpacket: 32 [ 1199.286607][T15772] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1199.294751][T15772] usb 3-1: config 0 has no interface number 0 [ 1199.346665][T15772] usb 3-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1199.368978][T15772] usb 3-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1199.420940][T15772] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be [ 1199.446295][T15772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.485495][T15772] usb 3-1: Product: syz [ 1199.489727][T15772] usb 3-1: Manufacturer: syz [ 1199.494353][T15772] usb 3-1: SerialNumber: syz [ 1199.538966][T15772] usb 3-1: config 0 descriptor?? [ 1199.566814][T16976] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1199.637061][T15772] kvaser_usb 3-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 1199.816463][ T9] usb 3-1: USB disconnect, device number 104 [ 1199.866086][T14769] usbhid 9-1:0.0: can't add hid device: -71 [ 1199.884979][T14769] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1199.909073][T14769] usb 9-1: USB disconnect, device number 47 [ 1200.612777][ T30] audit: type=1326 audit(1764724954.133:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.658366][ T30] audit: type=1326 audit(1764724954.163:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.690160][ T30] audit: type=1326 audit(1764724954.163:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.736056][ T30] audit: type=1326 audit(1764724954.163:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.775596][T15772] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1200.786685][ T30] audit: type=1326 audit(1764724954.163:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.838312][ T30] audit: type=1326 audit(1764724954.163:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.861451][T13941] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1200.879178][ T30] audit: type=1326 audit(1764724954.163:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.901657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.913698][ T30] audit: type=1326 audit(1764724954.163:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.939723][ T30] audit: type=1326 audit(1764724954.163:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.2.2697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d2b8f749 code=0x7ffc0000 [ 1200.985813][T15772] usb 7-1: Using ep0 maxpacket: 8 [ 1200.997666][T15772] usb 7-1: config 127 has an invalid interface number: 171 but max is 1 [ 1201.010420][T15772] usb 7-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.035948][T15772] usb 7-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1201.056000][T15772] usb 7-1: config 127 has no interface number 0 [ 1201.062325][T15772] usb 7-1: config 127 interface 171 has no altsetting 0 [ 1201.071795][T13941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.092690][T17009] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1201.092953][T13941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.145172][T15772] usb 7-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1201.160685][T15772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.169394][T13941] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1201.183111][T15772] usb 7-1: Product: syz [ 1201.190673][T15772] usb 7-1: Manufacturer: syz [ 1201.195512][T13941] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.205971][T15772] usb 7-1: SerialNumber: syz [ 1201.214006][T13941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.247843][T13941] usb 9-1: config 0 descriptor?? [ 1201.681661][T13941] plantronics 0003:047F:FFFF.0023: item fetching failed at offset 14/15 [ 1201.699902][T13941] plantronics 0003:047F:FFFF.0023: parse failed [ 1201.715905][T13941] plantronics 0003:047F:FFFF.0023: probe with driver plantronics failed with error -22 [ 1201.801598][T15772] usb 7-1: USB disconnect, device number 28 [ 1202.113314][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2703'. [ 1202.127233][T15772] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1202.141159][T17020] bond0: entered promiscuous mode [ 1202.147189][T17020] bond_slave_0: entered promiscuous mode [ 1202.153522][T17020] bond_slave_1: entered promiscuous mode [ 1202.161381][T17020] geneve0: entered promiscuous mode [ 1202.169018][T17020] hsr1: entered promiscuous mode [ 1202.405180][T15772] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1202.440990][T15772] usb 7-1: can't read configurations, error -71 [ 1202.486599][T17027] macsec1: entered promiscuous mode [ 1202.509119][T17027] bridge0: entered promiscuous mode [ 1202.542360][T17027] bridge0: port 1(macsec1) entered blocking state [ 1202.554423][T17027] bridge0: port 1(macsec1) entered disabled state [ 1202.566041][T17027] macsec1: entered allmulticast mode [ 1202.571980][T17027] bridge0: entered allmulticast mode [ 1202.591116][T17027] macsec1: left allmulticast mode [ 1202.598166][ T5923] usb 9-1: USB disconnect, device number 48 [ 1202.629976][T17027] bridge0: left allmulticast mode [ 1202.663297][T17027] bridge0: left promiscuous mode [ 1203.075971][ T5923] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1203.297401][ T5923] usb 9-1: Using ep0 maxpacket: 32 [ 1203.328441][ T5923] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.364238][ T5923] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1203.422401][ T5923] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1203.504607][ T5923] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1203.546801][ T5923] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1203.581061][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.626867][ T5923] usb 9-1: config 0 descriptor?? [ 1203.658280][T15772] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1203.896170][T15772] usb 7-1: Using ep0 maxpacket: 8 [ 1203.945863][T15772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.959623][T15772] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 1203.973490][T15772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.001571][T15772] usb 7-1: config 0 descriptor?? [ 1204.110261][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1204.129118][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1204.140059][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1204.149255][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1204.159709][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1204.193801][ T5923] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1204.235008][ T5923] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1204.251591][ T5923] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1204.291758][ T5923] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1204.311949][ T5923] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1204.346802][ T5923] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1204.401249][ T5923] hid-thrustmaster 0003:044F:B65D.0024: Unexpected non-int endpoint [ 1204.420858][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1204.432669][ C1] hid-thrustmaster 0003:044F:B65D.0024: URB to get model id failed with error -71 [ 1204.463850][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1204.483959][ T5923] usb 9-1: USB disconnect, device number 49 [ 1204.664708][T17042] fido_id[17042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1204.804353][T17046] netdevsim0: mtu less than device minimum [ 1205.107891][T17052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.186211][T17052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.304423][ T12] vlan2: left promiscuous mode [ 1205.327763][ T12] veth0_to_bond: left promiscuous mode [ 1205.348315][ T12] bridge3: port 3(vlan2) entered disabled state [ 1205.371112][ T12] veth1: left promiscuous mode [ 1205.387906][ T12] bridge3: port 1(veth1) entered disabled state [ 1205.879018][T17065] netlink: 'syz.7.2713': attribute type 27 has an invalid length. [ 1206.281074][ T5156] Bluetooth: hci1: command tx timeout [ 1206.739101][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1206.931654][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2715'. [ 1207.007778][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1207.007799][ T30] audit: type=1326 audit(1764724960.523:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.165667][ T30] audit: type=1326 audit(1764724960.523:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.207326][ T30] audit: type=1326 audit(1764724960.523:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.277933][ T30] audit: type=1326 audit(1764724960.523:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.336476][ T30] audit: type=1326 audit(1764724960.523:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.360631][ T30] audit: type=1326 audit(1764724960.563:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.385222][ T30] audit: type=1326 audit(1764724960.573:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.409057][ T30] audit: type=1326 audit(1764724960.583:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.433118][ T30] audit: type=1326 audit(1764724960.583:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7e98f749 code=0x7ffc0000 [ 1207.456663][ T30] audit: type=1326 audit(1764724960.583:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17084 comm="syz.5.2716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b7e98df90 code=0x7ffc0000 [ 1207.521287][ T12] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1207.561589][T15772] usbhid 7-1:0.0: can't add hid device: -71 [ 1207.567908][T15772] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1207.578991][T15772] usb 7-1: USB disconnect, device number 31 [ 1207.988425][ T12] bond0 (unregistering): Released all slaves [ 1208.101072][T17097] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1208.348094][ T5156] Bluetooth: hci1: command tx timeout [ 1208.460155][ T12] bond1 (unregistering): Released all slaves [ 1208.490836][ T12] bond2 (unregistering): Released all slaves [ 1208.500422][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2720'. [ 1208.747255][ T12] bond3 (unregistering): Released all slaves [ 1208.965059][ T12] bond4 (unregistering): Released all slaves [ 1208.981237][ T12] bond5 (unregistering): Released all slaves [ 1208.995179][ T12] bond6 (unregistering): Released all slaves [ 1209.011916][ T12] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 1209.024958][ T12] vcan1: left allmulticast mode [ 1209.033808][ T12] bond7 (unregistering): Released all slaves [ 1209.071513][T17083] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1209.188084][ T12] tipc: Left network mode [ 1209.345534][ T2156] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1209.409301][T17041] chnl_net:caif_netlink_parms(): no params data found [ 1209.546026][ T2156] usb 7-1: Using ep0 maxpacket: 8 [ 1209.556957][ T2156] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1209.586953][ T2156] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.648972][ T2156] usb 7-1: Product: syz [ 1209.688761][ T2156] usb 7-1: Manufacturer: syz [ 1209.701057][ T2156] usb 7-1: SerialNumber: syz [ 1209.726258][ T2156] usb 7-1: config 0 descriptor?? [ 1209.811025][ T12] hsr_slave_0: left promiscuous mode [ 1209.832466][ T12] hsr_slave_1: left promiscuous mode [ 1209.859090][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1210.088938][ T12] team0 (unregistering): Port device batadv1 removed [ 1210.416578][ T5156] Bluetooth: hci1: command tx timeout [ 1210.477656][T17129] IPVS: length: 528 != 736 [ 1210.847282][ T2156] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -110 [ 1210.854736][ T2156] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1211.704306][ T2156] usb 7-1: USB disconnect, device number 32 [ 1212.209393][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1212.209423][ T30] audit: type=1326 audit(1764724965.733:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.285041][ T30] audit: type=1326 audit(1764724965.763:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.321326][ T30] audit: type=1326 audit(1764724965.803:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.398870][ T30] audit: type=1326 audit(1764724965.803:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.436413][T17158] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2729'. [ 1212.483004][ T30] audit: type=1326 audit(1764724965.803:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.496071][ T5156] Bluetooth: hci1: command tx timeout [ 1212.583562][ T30] audit: type=1326 audit(1764724965.803:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.631960][ T30] audit: type=1326 audit(1764724965.803:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.663643][ T30] audit: type=1326 audit(1764724965.803:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.702739][ T30] audit: type=1326 audit(1764724965.803:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1212.725894][ T30] audit: type=1326 audit(1764724965.803:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17152 comm="syz.8.2729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f20b8f749 code=0x7ffc0000 [ 1213.170791][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.179514][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.188440][T17041] bridge_slave_0: entered allmulticast mode [ 1213.209451][T17041] bridge_slave_0: entered promiscuous mode [ 1213.237161][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.244685][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.254995][T17041] bridge_slave_1: entered allmulticast mode [ 1213.263425][T17041] bridge_slave_1: entered promiscuous mode [ 1213.333806][T15423] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1213.413791][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.478663][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.499116][T15423] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1213.553030][T15423] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1213.606442][T15423] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1213.636909][T15423] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.695088][T17165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1213.725209][T17041] team0: Port device team_slave_0 added [ 1213.728154][T15423] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1213.823466][ T12] IPVS: stop unused estimator thread 0... [ 1213.845268][T17041] team0: Port device team_slave_1 added [ 1214.312088][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.331272][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.364298][T14769] usb 7-1: USB disconnect, device number 33 [ 1214.431963][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.507945][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.547449][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.611004][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.821476][T17041] hsr_slave_0: entered promiscuous mode [ 1214.863638][T17041] hsr_slave_1: entered promiscuous mode [ 1214.889337][T17041] debugfs: 'hsr0' already exists in 'hsr' [ 1214.920943][T17041] Cannot create hsr debugfs directory [ 1215.355928][T13941] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1215.536473][T13941] usb 7-1: device descriptor read/64, error -71 [ 1215.806240][T13941] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1215.965443][T13941] usb 7-1: device descriptor read/64, error -71 [ 1216.098190][T13941] usb usb7-port1: attempt power cycle [ 1216.256268][ T2156] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1216.498253][T13941] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1216.510337][ T2156] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1216.551007][ T2156] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1216.566575][T13941] usb 7-1: device descriptor read/8, error -71 [ 1216.600447][ T2156] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1216.651279][ T2156] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1216.693049][ T2156] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1216.745518][ T2156] usb 9-1: Product: syz [ 1216.768631][ T2156] usb 9-1: Manufacturer: syz [ 1216.783734][ T2156] usb 9-1: SerialNumber: syz [ 1216.808803][T17041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1216.818376][ T2156] usb 9-1: config 0 descriptor?? [ 1216.825824][T13941] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1216.856535][T13941] usb 7-1: device descriptor read/8, error -71 [ 1216.873216][ T2156] usb 9-1: selecting invalid altsetting 0 [ 1216.880023][T17041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1216.916579][T17041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1216.978549][T17041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1216.996051][T13941] usb usb7-port1: unable to enumerate USB device [ 1217.069912][T17204] dlm: non-version read from control device 36 [ 1217.131584][T17204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.166662][T17204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.210993][T15423] usb 9-1: USB disconnect, device number 50 [ 1217.436565][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.504055][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.542843][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.550115][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.603405][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.610611][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.841452][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.972929][T17041] veth0_vlan: entered promiscuous mode [ 1218.016260][T17041] veth1_vlan: entered promiscuous mode [ 1218.107976][T17041] veth0_macvtap: entered promiscuous mode [ 1218.170707][T17041] veth1_macvtap: entered promiscuous mode [ 1218.260663][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.324963][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.374771][T14899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.432580][T14899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.471663][T14899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.510974][T14899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.688465][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.711951][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.736381][T15423] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1218.764274][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.783930][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.915984][T15423] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1218.934251][T15423] usb 7-1: config 129 has an invalid interface number: 202 but max is 0 [ 1218.957452][T15423] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 1218.974494][T15423] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1218.990975][T15423] usb 7-1: config 129 has no interface number 0 [ 1219.014613][T15423] usb 7-1: config 129 has no interface number 1 [ 1219.023193][T15423] usb 7-1: config 129 interface 202 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1219.037838][T15423] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1219.083708][T15423] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1219.182441][T15423] usb 7-1: config 129 interface 202 has no altsetting 0 [ 1219.223750][T15423] usb 7-1: config 129 interface 5 has no altsetting 0 [ 1219.244753][T15423] usb 7-1: New USB device found, idVendor=041e, idProduct=4061, bcdDevice=1e.ee [ 1219.264066][T15423] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.278116][T15423] usb 7-1: Product: syz [ 1219.282318][T15423] usb 7-1: Manufacturer: syz [ 1219.295077][T15423] usb 7-1: SerialNumber: syz [ 1219.406919][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055226400: rx timeout, send abort [ 1219.571707][T17258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.631680][T17258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.706916][T15423] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1219.733530][T15423] usb 7-1: MIDIStreaming interface descriptor not found [ 1219.859062][T15423] usb 7-1: USB disconnect, device number 38 [ 1219.907484][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055225000: rx timeout, send abort [ 1219.916937][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055226400: abort rx timeout. Force session deactivation [ 1219.978232][T14554] udevd[14554]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.398837][T17280] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2749'. [ 1220.415918][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055225000: abort rx timeout. Force session deactivation [ 1220.459258][T17280] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2749'. [ 1220.475410][T17280] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2749'. [ 1220.739856][T15772] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1220.915638][T15772] usb 7-1: Using ep0 maxpacket: 8 [ 1220.919694][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1220.964914][T15772] usb 7-1: config 2 has an invalid interface number: 67 but max is 2 [ 1220.977194][T15772] usb 7-1: config 2 has an invalid interface number: 18 but max is 2 [ 1221.002756][T15772] usb 7-1: config 2 has an invalid interface number: 190 but max is 2 [ 1221.029629][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1221.084294][T15772] usb 7-1: config 2 has no interface number 0 [ 1221.106235][T15772] usb 7-1: config 2 has no interface number 1 [ 1221.138234][T15772] usb 7-1: config 2 has no interface number 2 [ 1221.147801][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1221.171287][T15772] usb 7-1: config 2 interface 67 altsetting 6 bulk endpoint 0xB has invalid maxpacket 64 [ 1221.277218][T15772] usb 7-1: config 2 interface 67 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1221.302688][T15772] usb 7-1: config 2 interface 67 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1221.476069][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1221.527933][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1221.584952][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1221.646214][T15772] usb 7-1: config 2 interface 18 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1221.669697][T17317] netlink: 'syz.5.2755': attribute type 8 has an invalid length. [ 1221.728091][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1221.799953][T15772] usb 7-1: config 2 interface 18 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1221.841825][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 1221.894268][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1221.928509][T15772] usb 7-1: config 2 interface 18 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1221.974097][T15772] usb 7-1: config 2 interface 190 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 1222.010206][T15772] usb 7-1: config 2 interface 190 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1222.033442][T17327] program syz.8.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1222.053394][T17325] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2756'. [ 1222.077431][T15772] usb 7-1: config 2 interface 67 has no altsetting 0 [ 1222.093206][T15772] usb 7-1: config 2 interface 18 has no altsetting 0 [ 1222.110935][T15772] usb 7-1: config 2 interface 190 has no altsetting 0 [ 1222.135051][T15772] usb 7-1: Dual-Role OTG device on HNP port [ 1222.147103][T15772] usb 7-1: New USB device found, idVendor=19d2, idProduct=ffa5, bcdDevice=af.35 [ 1222.170871][T15772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.195705][T15772] usb 7-1: Product: 楗휄瑋饜㥜ဵ啙༫皤閴졷≑㼉⬆팳贯쩃㣯娾㵴浼伫홶紼節餍ﺨ♬藪蟵袭葊댰ᇘ੖ᄸ͢節诀២鏳㙛偬卆鿦〳ꔪ [ 1222.216890][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2756'. [ 1222.248037][T15772] usb 7-1: Manufacturer: [ 1222.252609][T15772] usb 7-1: SerialNumber: Ь [ 1222.297386][T17297] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1222.335926][T13941] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 1222.522054][T13941] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1222.548830][T13941] usb 9-1: config 0 has no interface number 0 [ 1222.563033][T13941] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1222.622158][T13941] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1222.640082][T13941] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1222.661373][T13941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.681009][T17297] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1222.715693][T13941] usb 9-1: config 0 descriptor?? [ 1222.743716][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1222.811528][T17346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.826634][T13941] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1222.864457][T17346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.994135][T17327] iowarrior 9-1:0.1: Error -90 while submitting URB [ 1223.112995][T13941] usb 9-1: USB disconnect, device number 51 [ 1224.036040][T15772] option 7-1:2.67: GSM modem (1-port) converter detected [ 1224.103571][T15772] usb 7-1: USB disconnect, device number 39 [ 1224.112296][T15772] option 7-1:2.67: device disconnected [ 1224.571186][T17365] loop3: detected capacity change from 0 to 7 [ 1224.596240][T17365] Dev loop3: unable to read RDB block 7 [ 1224.616034][T17365] loop3: unable to read partition table [ 1224.629601][T17365] loop3: partition table beyond EOD, truncated [ 1224.644226][T17365] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1224.840434][T17370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2767'. [ 1225.038741][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1225.054711][T17377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.214842][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.257337][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.297303][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1225.332962][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1225.377389][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.414558][ T9] usb 7-1: config 0 descriptor?? [ 1225.928484][ T9] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1225.966383][T14217] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1226.066175][T14769] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1226.155595][T14217] usb 3-1: Using ep0 maxpacket: 32 [ 1226.158023][ T9] usb 7-1: USB disconnect, device number 40 [ 1226.196249][T14217] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1226.224115][T14217] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1226.236819][T14769] usb 9-1: Using ep0 maxpacket: 16 [ 1226.258158][T14217] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1226.271147][T14769] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.298607][T14217] usb 3-1: config 1 has no interface number 0 [ 1226.313552][T14217] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.334701][T14769] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.370566][T14217] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1226.384443][T14769] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.405890][T14217] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1226.435019][T14217] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1226.444608][T14769] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.460252][T14217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.490040][T14769] usb 9-1: config 0 descriptor?? [ 1226.514119][T14217] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1226.555237][T14769] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1226.710685][T14217] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 1226.748885][T14217] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1226.779666][T14217] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 1227.420697][T17402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1227.428095][T17402] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.756699][T17406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.873352][T14769] usb 3-1: USB disconnect, device number 105 [ 1229.160496][T17413] fuse: Unknown parameter 'use00000000000000000000' [ 1229.356114][T14769] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1229.545767][T14769] usb 3-1: Using ep0 maxpacket: 8 [ 1229.587899][T14769] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1229.607885][T14769] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1229.617993][T14769] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1229.636033][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1229.646790][T14769] usb 3-1: Product: syz [ 1229.660406][T14769] usb 3-1: Manufacturer: syz [ 1229.675185][T14769] usb 3-1: SerialNumber: syz [ 1229.690689][T14217] usb 9-1: USB disconnect, device number 52 [ 1229.798423][ T9] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1229.840926][ T9] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.889375][ T9] usb 7-1: config 255 has no interfaces? [ 1229.904780][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1229.955259][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.001314][T14769] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 1230.045850][T14769] visor 3-1:1.0: probe with driver visor failed with error -71 [ 1230.086419][T14769] usb 3-1: USB disconnect, device number 106 [ 1230.156721][T17427] fuse: Bad value for 'fd' [ 1230.238008][T17427] fuse: Bad value for 'user_id' [ 1230.242916][T17427] fuse: Bad value for 'user_id' [ 1230.647353][T17434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1230.654734][T17434] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.662166][T17434] IPv6: NLM_F_CREATE should be set when creating new route [ 1230.674579][T17435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1230.706121][T14217] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1230.855704][T14217] usb 9-1: device descriptor read/64, error -71 [ 1231.116642][T14217] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1231.305625][T14217] usb 9-1: device descriptor read/64, error -71 [ 1231.392354][T17447] Cannot find set identified by id 1 to match [ 1231.442523][T14217] usb usb9-port1: attempt power cycle [ 1231.741639][T17459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.815737][T14217] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1231.862972][T14217] usb 9-1: device descriptor read/8, error -71 [ 1232.140030][T14217] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 1232.233975][T14217] usb 9-1: device descriptor read/8, error -71 [ 1232.369503][T14769] usb 7-1: USB disconnect, device number 41 [ 1232.374419][T14217] usb usb9-port1: unable to enumerate USB device [ 1232.577640][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1232.585220][T17463] hub 2-0:1.0: USB hub found [ 1232.631172][T17463] hub 2-0:1.0: 1 port detected [ 1232.812786][T17460] loop6: detected capacity change from 0 to 524287487 [ 1232.839529][T14613] buffer_io_error: 24 callbacks suppressed [ 1232.839544][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.871367][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.916147][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.934387][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.956104][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.974858][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.003120][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.022017][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.056625][T14613] ldm_validate_partition_table(): Disk read failed. [ 1233.058650][T17472] fuse: Unknown parameter 'use00000000000000000000' [ 1233.083668][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.110891][T14613] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.146109][T14613] Dev loop6: unable to read RDB block 0 [ 1233.153168][T14613] loop6: unable to read partition table [ 1233.168147][T15772] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1233.354915][T17476] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2793'. [ 1233.375699][T15772] usb 3-1: Using ep0 maxpacket: 8 [ 1233.385488][T15772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1233.414231][T15772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1233.438196][T15772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1233.469263][T15772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1233.523825][T15772] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.571463][T15772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1233.614085][T15772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.854882][T15772] usb 3-1: GET_CAPABILITIES returned 0 [ 1233.869320][T15772] usbtmc 3-1:16.0: can't read capabilities [ 1234.027337][T14769] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1234.041886][T17490] veth0_to_hsr: entered promiscuous mode [ 1234.054405][T17490] veth0_to_hsr: entered allmulticast mode [ 1234.078215][ T9] usb 3-1: USB disconnect, device number 107 [ 1234.092662][T17490] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 1234.188655][T14769] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1234.199161][T14769] usb 9-1: config 0 has an invalid interface number: 2 but max is -1 [ 1234.209611][T14769] usb 9-1: config 0 has an invalid interface number: 2 but max is -1 [ 1234.221686][T14769] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.236945][T14769] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1234.248748][T14769] usb 9-1: config 0 has no interface number 0 [ 1234.258447][T14769] usb 9-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.294454][T14769] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1234.317164][T14769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.337081][T14769] usb 9-1: Product: syz [ 1234.347014][T14769] usb 9-1: Manufacturer: syz [ 1234.358527][T14769] usb 9-1: SerialNumber: syz [ 1234.365773][T15772] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1234.382511][T14769] usb 9-1: config 0 descriptor?? [ 1234.525458][T15772] usb 7-1: Using ep0 maxpacket: 32 [ 1234.533160][T15772] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1234.546122][T15772] usb 7-1: config 0 has no interface number 0 [ 1234.555612][T15772] usb 7-1: config 0 interface 132 has no altsetting 0 [ 1234.574843][T15772] usb 7-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1234.590203][T15772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.598672][T15772] usb 7-1: Product: syz [ 1234.605843][T15772] usb 7-1: Manufacturer: syz [ 1234.623554][T15772] usb 7-1: SerialNumber: syz [ 1234.626671][T14769] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1234.652744][T15772] usb 7-1: config 0 descriptor?? [ 1234.656394][T14769] usb 9-1: MIDIStreaming interface descriptor not found [ 1234.767823][T14769] usb 9-1: USB disconnect, device number 57 [ 1234.860245][T14554] udevd[14554]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.905977][T15772] cdc_subset 7-1:0.132: probe with driver cdc_subset failed with error -71 [ 1234.973035][T15772] usb 7-1: USB disconnect, device number 42 [ 1235.061893][T17495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1235.575540][ T2156] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1235.737999][ T2156] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1235.749834][ T2156] usb 9-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1235.763833][ T2156] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1235.792642][ T2156] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 1235.798940][T17508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1235.822731][ T2156] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.831209][ T2156] usb 9-1: Product: 侤羶Ĭ襨雜났䫵툋姨禮菳얽␈ᨦ曁퉃渥䥫㘦딼ࡼḨ꠻땀꫻ᣗ쒎ഗꠀ囁樞삕趇庨癐㇖줹⑀龨ꢋ넌쏧蓧 [ 1235.849190][ T2156] usb 9-1: Manufacturer: Ї [ 1235.864644][ T2156] usb 9-1: SerialNumber: ⹅杰쏉ꨝ䄖쀭턠邫钭崽㙢俍泎昖뻓ぜ䚬Ⳛ煑殂瘜 [ 1235.908119][T17502] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1235.973119][T17509] kvm: kvm [17505]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x808 [ 1237.125794][T17526] loop6: detected capacity change from 0 to 524287487 [ 1237.137328][T14577] ldm_validate_partition_table(): Disk read failed. [ 1237.158809][T14577] Dev loop6: unable to read RDB block 0 [ 1237.170164][T14577] loop6: unable to read partition table [ 1237.194693][T17529] fuse: Unknown parameter 'user_i00000000000000000000' [ 1237.196309][T15423] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1237.219800][T17526] ldm_validate_partition_table(): Disk read failed. [ 1237.230956][T15772] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1237.240940][T17526] Dev loop6: unable to read RDB block 0 [ 1237.249885][T17526] loop6: unable to read partition table [ 1237.257530][T17526] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1237.395428][T15772] usb 3-1: Using ep0 maxpacket: 16 [ 1237.402454][T15772] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.418761][T15772] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.426866][T15423] usb 7-1: Using ep0 maxpacket: 8 [ 1237.451642][T15772] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1237.472508][T15772] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1237.474627][T15423] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1237.514317][T15772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.514575][T15423] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1237.532141][T15423] usb 7-1: can't read configurations, error -71 [ 1237.544320][T15772] usb 3-1: config 0 descriptor?? [ 1238.028364][T15772] cougar 0003:060B:500A.0026: unexpected long global item [ 1238.067218][T15772] cougar 0003:060B:500A.0026: parse failed [ 1238.074495][T15772] cougar 0003:060B:500A.0026: probe with driver cougar failed with error -22 [ 1238.204201][T17521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.255310][T17521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.307746][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 1238.362258][T17521] netlink: 'syz.2.2805': attribute type 18 has an invalid length. [ 1238.386895][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2805'. [ 1238.417390][ T2156] usbhid 9-1:1.0: can't add hid device: -71 [ 1238.433517][ T2156] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1238.468502][ T2156] usb 9-1: USB disconnect, device number 58 [ 1238.492977][T15423] usb 3-1: USB disconnect, device number 108 [ 1238.619133][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2811'. [ 1238.630922][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2811'. [ 1238.660533][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2812'. [ 1238.980164][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.987519][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.012090][T17558] tipc: Started in network mode [ 1239.047111][T17558] tipc: Node identity aaaaaaaaaa18, cluster identity 4711 [ 1239.099224][T17558] tipc: Enabled bearer , priority 0 [ 1239.142083][T17560] veth0: entered promiscuous mode [ 1239.160076][T17560] veth0: entered allmulticast mode [ 1239.394923][T17565] tipc: Resetting bearer [ 1239.460865][T17558] tipc: Enabled bearer , priority 10 [ 1239.596345][ T2156] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1239.755667][ T2156] usb 3-1: Using ep0 maxpacket: 16 [ 1239.763825][ T2156] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 1239.772937][ T2156] usb 3-1: config 0 has no interface number 0 [ 1239.780423][ T2156] usb 3-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1239.793492][ T2156] usb 3-1: config 0 interface 28 has no altsetting 0 [ 1239.812516][ T2156] usb 3-1: Dual-Role OTG device on HNP port [ 1239.819960][ T2156] usb 3-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 1239.834223][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.852456][ T2156] usb 3-1: Product: syz [ 1239.861554][ T2156] usb 3-1: Manufacturer: syz [ 1239.875099][ T2156] usb 3-1: SerialNumber: syz [ 1239.892977][ T2156] usb 3-1: config 0 descriptor?? [ 1239.918738][ T2156] hub 3-1:0.28: bad descriptor, ignoring hub [ 1239.933643][ T2156] hub 3-1:0.28: probe with driver hub failed with error -5 [ 1239.966720][ T2156] option 3-1:0.28: GSM modem (1-port) converter detected [ 1240.105295][T17579] fuse: Unknown parameter 'user_i00000000000000000000' [ 1240.147361][T17562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.163977][T17562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.216565][T17586] syzkaller1: entered promiscuous mode [ 1240.222082][T17586] syzkaller1: entered allmulticast mode [ 1240.546191][ T9] tipc: Node number set to 11709098 [ 1241.325879][T14217] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1241.517559][T14217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.517599][T14217] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.517636][T14217] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1241.517651][T14217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.519783][T14217] usb 9-1: config 0 descriptor?? [ 1241.873454][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2824'. [ 1241.896395][T17601] netlink: 'syz.6.2824': attribute type 6 has an invalid length. [ 1241.904207][T17601] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2824'. [ 1241.943196][T14217] samsung 0003:0419:0600.0027: unknown global tag 0xc [ 1241.951951][T14217] samsung 0003:0419:0600.0027: item 0 2 1 12 parsing failed [ 1241.963222][T14217] samsung 0003:0419:0600.0027: parse failed [ 1241.969647][T14217] samsung 0003:0419:0600.0027: probe with driver samsung failed with error -22 [ 1242.152629][T17595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.173153][T17595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.197971][T14217] usb 9-1: USB disconnect, device number 59 [ 1242.418246][T17607] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2826'. [ 1242.446565][ T2156] usb 3-1: USB disconnect, device number 109 [ 1242.458414][ T2156] option 3-1:0.28: device disconnected [ 1243.633366][T17605] netlink: 'syz.6.2825': attribute type 16 has an invalid length. [ 1243.644029][T17605] netlink: 'syz.6.2825': attribute type 17 has an invalid length. [ 1243.659633][T17605] netlink: 'syz.6.2825': attribute type 27 has an invalid length. [ 1243.716255][T15423] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1243.865964][T14769] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1243.885914][T15423] usb 3-1: Using ep0 maxpacket: 32 [ 1243.898718][T15423] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1243.941478][T15423] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1243.965928][T15423] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1243.994420][T15423] usb 3-1: Product: syz [ 1244.003066][T15423] usb 3-1: Manufacturer: syz [ 1244.010083][T15423] usb 3-1: SerialNumber: syz [ 1244.031828][T14769] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 1244.042646][T15423] usb 3-1: config 0 descriptor?? [ 1244.049731][T14769] usb 9-1: config 0 has no interface number 0 [ 1244.063983][T14769] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1244.076551][T17620] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1244.085867][T14769] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1244.099380][T15423] hub 3-1:0.0: bad descriptor, ignoring hub [ 1244.113550][T15423] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1244.159209][T14769] usb 9-1: config 0 interface 113 has no altsetting 0 [ 1244.213484][T14769] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1244.232924][T14769] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.262043][T14769] usb 9-1: Product: syz [ 1244.282370][T14769] usb 9-1: Manufacturer: syz [ 1244.306575][T14769] usb 9-1: SerialNumber: syz [ 1244.356459][T14769] usb 9-1: config 0 descriptor?? [ 1244.387140][T14769] pn533_usb 9-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1244.446211][ T2156] usb 3-1: USB disconnect, device number 110 [ 1244.589061][T14769] usb 9-1: USB disconnect, device number 60 [ 1244.761644][T17638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2835'. [ 1245.987049][T14217] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1246.014839][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2840'. [ 1246.076559][T17656] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2840'. [ 1246.127252][T14217] usb 3-1: device descriptor read/64, error -71 [ 1246.355604][T17668] loop9: detected capacity change from 0 to 7 [ 1246.366017][T14217] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1246.521222][T14613] Dev loop9: unable to read RDB block 7 [ 1246.527228][T14217] usb 3-1: device descriptor read/64, error -71 [ 1246.541881][T14613] loop9: AHDI p1 p2 [ 1246.564193][T14613] loop9: partition table partially beyond EOD, truncated [ 1246.578572][T14613] loop9: p1 start 1853095936 is beyond EOD, truncated [ 1246.647463][T14217] usb usb3-port1: attempt power cycle [ 1246.674160][T17668] Dev loop9: unable to read RDB block 7 [ 1246.724313][T17668] loop9: AHDI p1 p2 [ 1246.736416][T17668] loop9: partition table partially beyond EOD, truncated [ 1246.758744][T17668] loop9: p1 start 1853095936 is beyond EOD, truncated [ 1246.991592][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1246.991678][ T30] audit: type=1326 audit(1764725000.513:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.020719][T14217] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1247.046297][T14217] usb 3-1: device descriptor read/8, error -71 [ 1247.109189][ T30] audit: type=1326 audit(1764725000.513:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.155601][T15772] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1247.285203][ T30] audit: type=1326 audit(1764725000.513:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.312635][T14217] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1247.325988][T15772] usb 7-1: device descriptor read/64, error -71 [ 1247.344333][T17684] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2849'. [ 1247.357388][T14217] usb 3-1: device descriptor read/8, error -71 [ 1247.456423][ T30] audit: type=1326 audit(1764725000.513:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.498452][T14217] usb usb3-port1: unable to enumerate USB device [ 1247.600804][ T30] audit: type=1326 audit(1764725000.513:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.624150][T15772] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1247.665519][ T30] audit: type=1326 audit(1764725000.513:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.689311][ T30] audit: type=1326 audit(1764725000.513:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.745509][ T30] audit: type=1326 audit(1764725000.513:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.786434][T15772] usb 7-1: device descriptor read/64, error -71 [ 1247.829287][ T30] audit: type=1326 audit(1764725000.513:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1247.906993][T15772] usb usb7-port1: attempt power cycle [ 1247.948416][ T30] audit: type=1326 audit(1764725000.513:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17679 comm="syz.7.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f100db8f749 code=0x7ffc0000 [ 1248.166253][ T9] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1248.266416][T15772] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1248.298206][T15772] usb 7-1: device descriptor read/8, error -71 [ 1248.343991][ T9] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 1248.381306][ T9] usb 9-1: config 0 has no interface number 0 [ 1248.411547][ T9] usb 9-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1248.472278][ T9] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.548067][ T9] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1248.577466][T15772] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1248.593026][ T9] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1248.617531][T15772] usb 7-1: device descriptor read/8, error -71 [ 1248.644764][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.686318][ T9] usb 9-1: config 0 descriptor?? [ 1248.740444][T15772] usb usb7-port1: unable to enumerate USB device [ 1248.763421][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input70 [ 1248.938091][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.988740][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.261257][T17699] FAULT_INJECTION: forcing a failure. [ 1249.261257][T17699] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1249.276930][T17699] CPU: 1 UID: 0 PID: 17699 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 1249.276962][T17699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.276975][T17699] Call Trace: [ 1249.276985][T17699] [ 1249.276995][T17699] dump_stack_lvl+0x189/0x250 [ 1249.277023][T17699] ? __pfx____ratelimit+0x10/0x10 [ 1249.277054][T17699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1249.277076][T17699] ? __pfx__printk+0x10/0x10 [ 1249.277106][T17699] ? fs_reclaim_acquire+0x7d/0x100 [ 1249.277137][T17699] should_fail_ex+0x414/0x560 [ 1249.277170][T17699] prepare_alloc_pages+0x213/0x610 [ 1249.277200][T17699] __alloc_frozen_pages_noprof+0x123/0x370 [ 1249.277226][T17699] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1249.277266][T17699] alloc_pages_mpol+0x232/0x4a0 [ 1249.277294][T17699] alloc_pages_noprof+0xa9/0x190 [ 1249.277319][T17699] __pmd_alloc+0x3a/0x540 [ 1249.277352][T17699] __handle_mm_fault+0x9ad/0x53a0 [ 1249.277398][T17699] ? __pfx___handle_mm_fault+0x10/0x10 [ 1249.277446][T17699] ? find_vma+0xe7/0x160 [ 1249.277474][T17699] ? __pfx_find_vma+0x10/0x10 [ 1249.277515][T17699] handle_mm_fault+0x40a/0x8e0 [ 1249.277555][T17699] do_user_addr_fault+0x764/0x1380 [ 1249.277604][T17699] exc_page_fault+0x82/0x100 [ 1249.277630][T17699] ? __might_fault+0xb0/0x130 [ 1249.277660][T17699] asm_exc_page_fault+0x26/0x30 [ 1249.277680][T17699] RIP: 0010:__put_user_4+0xd/0x20 [ 1249.277709][T17699] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1249.277727][T17699] RSP: 0018:ffffc9000b487e80 EFLAGS: 00050202 [ 1249.277747][T17699] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002540 [ 1249.277761][T17699] RDX: 0000000000000000 RSI: ffffffff8d9489f3 RDI: ffffffff8bbfa900 [ 1249.277775][T17699] RBP: 0000000000000000 R08: ffffffff820e2bb0 R09: ffff888077924260 [ 1249.277790][T17699] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000001 [ 1249.277804][T17699] R13: ffff88801d2b9768 R14: 00000000ffffffff R15: 0000000000000000 [ 1249.277827][T17699] ? __might_fault+0xb0/0x130 [ 1249.277864][T17699] __se_sys_getgroups+0x1ea/0x2a0 [ 1249.277896][T17699] do_syscall_64+0xfa/0xf80 [ 1249.277913][T17699] ? lockdep_hardirqs_on+0x98/0x140 [ 1249.277941][T17699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.277961][T17699] ? clear_bhb_loop+0x60/0xb0 [ 1249.277987][T17699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.278007][T17699] RIP: 0033:0x7fa62678f749 [ 1249.278026][T17699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.278042][T17699] RSP: 002b:00007fa627708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 1249.278063][T17699] RAX: ffffffffffffffda RBX: 00007fa6269e5fa0 RCX: 00007fa62678f749 [ 1249.278078][T17699] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000027 [ 1249.278091][T17699] RBP: 00007fa627708090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.278104][T17699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.278117][T17699] R13: 00007fa6269e6038 R14: 00007fa6269e5fa0 R15: 00007fa626b0fa28 [ 1249.278153][T17699] [ 1249.917954][ T9] usb 9-1: USB disconnect, device number 61 [ 1250.183510][T17717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.253248][T17719] fuse: Bad value for 'group_id' [ 1250.260443][T17719] fuse: Bad value for 'group_id' [ 1250.346133][T14769] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1250.421738][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2864'. [ 1250.432318][T17723] netlink: 'syz.7.2864': attribute type 30 has an invalid length. [ 1250.454879][ T8693] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.464642][ T8693] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.484474][ T8693] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.496740][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1250.502806][ T8693] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1250.518902][T14769] usb 7-1: Using ep0 maxpacket: 16 [ 1250.539062][T14769] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1250.551020][T14769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.574389][T14769] usb 7-1: Product: syz [ 1250.581130][T14769] usb 7-1: Manufacturer: syz [ 1250.588067][T14769] usb 7-1: SerialNumber: syz [ 1250.593982][T17725] loop3: detected capacity change from 0 to 7 [ 1250.605076][T14613] Dev loop3: unable to read RDB block 7 [ 1250.605249][T14769] usb 7-1: config 0 descriptor?? [ 1250.618542][T14613] loop3: unable to read partition table [ 1250.621089][T14769] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1250.636943][T14613] loop3: partition table beyond EOD, truncated [ 1250.640309][T14769] usb 7-1: Detected FT-X [ 1250.649466][T17725] Dev loop3: unable to read RDB block 7 [ 1250.660795][T17725] loop3: unable to read partition table [ 1250.667515][T17725] loop3: partition table beyond EOD, truncated [ 1250.677128][T17725] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1250.906217][T17730] FAULT_INJECTION: forcing a failure. [ 1250.906217][T17730] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.923249][T17730] CPU: 0 UID: 0 PID: 17730 Comm: syz.7.2866 Not tainted syzkaller #0 PREEMPT(full) [ 1250.923284][T17730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.923298][T17730] Call Trace: [ 1250.923307][T17730] [ 1250.923317][T17730] dump_stack_lvl+0x189/0x250 [ 1250.923345][T17730] ? __pfx____ratelimit+0x10/0x10 [ 1250.923375][T17730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.923406][T17730] ? __pfx__printk+0x10/0x10 [ 1250.923438][T17730] ? __pfx___might_resched+0x10/0x10 [ 1250.923464][T17730] should_fail_ex+0x414/0x560 [ 1250.923496][T17730] should_failslab+0xa8/0x100 [ 1250.923520][T17730] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1250.923550][T17730] ? __pmd_alloc+0xc2/0x540 [ 1250.923583][T17730] __pmd_alloc+0xc2/0x540 [ 1250.923618][T17730] __handle_mm_fault+0x9ad/0x53a0 [ 1250.923665][T17730] ? __pfx___handle_mm_fault+0x10/0x10 [ 1250.923732][T17730] ? find_vma+0xe7/0x160 [ 1250.923760][T17730] ? __pfx_find_vma+0x10/0x10 [ 1250.923792][T17730] handle_mm_fault+0x40a/0x8e0 [ 1250.923832][T17730] do_user_addr_fault+0x764/0x1380 [ 1250.923880][T17730] exc_page_fault+0x82/0x100 [ 1250.923908][T17730] ? __might_fault+0xb0/0x130 [ 1250.923939][T17730] asm_exc_page_fault+0x26/0x30 [ 1250.923959][T17730] RIP: 0010:__put_user_4+0xd/0x20 [ 1250.923989][T17730] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1250.924007][T17730] RSP: 0018:ffffc9000b967e80 EFLAGS: 00050202 [ 1250.924027][T17730] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002540 [ 1250.924041][T17730] RDX: 0000000000000000 RSI: ffffffff8d9489f3 RDI: ffffffff8bbfa900 [ 1250.924056][T17730] RBP: 0000000000000000 R08: ffffffff820e2bb0 R09: ffff88807825a220 [ 1250.924070][T17730] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000001 [ 1250.924085][T17730] R13: ffff88801d2b9768 R14: 00000000ffffffff R15: 0000000000000000 [ 1250.924109][T17730] ? __might_fault+0xb0/0x130 [ 1250.924145][T17730] __se_sys_getgroups+0x1ea/0x2a0 [ 1250.924177][T17730] do_syscall_64+0xfa/0xf80 [ 1250.924195][T17730] ? lockdep_hardirqs_on+0x98/0x140 [ 1250.924225][T17730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.924246][T17730] ? clear_bhb_loop+0x60/0xb0 [ 1250.924272][T17730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.924292][T17730] RIP: 0033:0x7f100db8f749 [ 1250.924310][T17730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.924328][T17730] RSP: 002b:00007f100eab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 1250.924349][T17730] RAX: ffffffffffffffda RBX: 00007f100dde5fa0 RCX: 00007f100db8f749 [ 1250.924364][T17730] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000027 [ 1250.924377][T17730] RBP: 00007f100eab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.924391][T17730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.924412][T17730] R13: 00007f100dde6038 R14: 00007f100dde5fa0 R15: 00007f100df0fa28 [ 1250.924449][T17730] [ 1251.224521][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.309816][T14769] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1251.315397][ T2156] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1251.518391][ T2156] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1251.530701][ T2156] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1251.565702][ T2156] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1251.603222][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.631759][T17727] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1251.653956][T17727] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1251.684343][ T2156] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1251.795035][T14769] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1251.971681][T17740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.008248][T17740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.358757][T17754] fuse: Unknown parameter 'user_id00000000000000000000' [ 1252.612206][ T2156] usb 3-1: USB disconnect, device number 115 [ 1253.186738][T14217] usb 7-1: USB disconnect, device number 49 [ 1253.296294][T14217] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1253.319035][T17772] FAULT_INJECTION: forcing a failure. [ 1253.319035][T17772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1253.337458][T14217] ftdi_sio 7-1:0.0: device disconnected [ 1253.370369][T17772] CPU: 1 UID: 0 PID: 17772 Comm: syz.5.2879 Not tainted syzkaller #0 PREEMPT(full) [ 1253.370400][T17772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.370414][T17772] Call Trace: [ 1253.370423][T17772] [ 1253.370433][T17772] dump_stack_lvl+0x189/0x250 [ 1253.370462][T17772] ? __pfx____ratelimit+0x10/0x10 [ 1253.370494][T17772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.370517][T17772] ? __pfx__printk+0x10/0x10 [ 1253.370545][T17772] ? fs_reclaim_acquire+0x7d/0x100 [ 1253.370578][T17772] should_fail_ex+0x414/0x560 [ 1253.370610][T17772] prepare_alloc_pages+0x213/0x610 [ 1253.370640][T17772] __alloc_frozen_pages_noprof+0x123/0x370 [ 1253.370668][T17772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1253.370711][T17772] alloc_pages_mpol+0x232/0x4a0 [ 1253.370741][T17772] alloc_pages_noprof+0xa9/0x190 [ 1253.370766][T17772] pte_alloc_one+0x23/0x310 [ 1253.370793][T17772] __do_fault+0xd1/0x390 [ 1253.370817][T17772] __handle_mm_fault+0x19a9/0x53a0 [ 1253.370865][T17772] ? __pfx___handle_mm_fault+0x10/0x10 [ 1253.370913][T17772] ? find_vma+0xe7/0x160 [ 1253.370939][T17772] ? __pfx_find_vma+0x10/0x10 [ 1253.370971][T17772] handle_mm_fault+0x40a/0x8e0 [ 1253.371012][T17772] do_user_addr_fault+0x764/0x1380 [ 1253.371061][T17772] exc_page_fault+0x82/0x100 [ 1253.371089][T17772] ? __might_fault+0xb0/0x130 [ 1253.371120][T17772] asm_exc_page_fault+0x26/0x30 [ 1253.371141][T17772] RIP: 0010:__put_user_4+0xd/0x20 [ 1253.371171][T17772] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1253.371197][T17772] RSP: 0018:ffffc9000b477e80 EFLAGS: 00050202 [ 1253.371219][T17772] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002540 [ 1253.371234][T17772] RDX: 0000000000000000 RSI: ffffffff8d9489f3 RDI: ffffffff8bbfa900 [ 1253.371249][T17772] RBP: 0000000000000000 R08: ffffffff820e2bb0 R09: ffff88807efb1760 [ 1253.371264][T17772] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000001 [ 1253.371278][T17772] R13: ffff88801d2b9768 R14: 00000000ffffffff R15: 0000000000000000 [ 1253.371301][T17772] ? __might_fault+0xb0/0x130 [ 1253.371338][T17772] __se_sys_getgroups+0x1ea/0x2a0 [ 1253.371371][T17772] do_syscall_64+0xfa/0xf80 [ 1253.371394][T17772] ? lockdep_hardirqs_on+0x98/0x140 [ 1253.371423][T17772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.371443][T17772] ? clear_bhb_loop+0x60/0xb0 [ 1253.371468][T17772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.371487][T17772] RIP: 0033:0x7f1b7e98f749 [ 1253.371506][T17772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.371523][T17772] RSP: 002b:00007f1b7f8c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 1253.371544][T17772] RAX: ffffffffffffffda RBX: 00007f1b7ebe5fa0 RCX: 00007f1b7e98f749 [ 1253.371559][T17772] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000027 [ 1253.371572][T17772] RBP: 00007f1b7f8c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.371586][T17772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.371599][T17772] R13: 00007f1b7ebe6038 R14: 00007f1b7ebe5fa0 R15: 00007f1b7ed0fa28 [ 1253.371636][T17772] [ 1253.712313][T17770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1253.794460][T17775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.120525][T14217] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1254.338802][T14217] usb 7-1: config 0 has no interfaces? [ 1254.344498][T14217] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1254.446210][T14217] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.502114][T14217] usb 7-1: config 0 descriptor?? [ 1254.946138][T17775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1347440720 (2694881440 ns) > initial count (1075296 ns). Using initial count to start timer. [ 1255.068568][T17775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.093286][T17775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.107903][T15423] usb 7-1: USB disconnect, device number 50 [ 1255.556337][T14769] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1255.678947][T17814] fuse: Bad value for 'fd' [ 1255.706156][T14769] usb 7-1: Using ep0 maxpacket: 8 [ 1255.712843][T14769] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 1255.723575][T14769] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1255.740562][T14769] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1255.751563][T14769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.761855][T14769] usb 7-1: Product: syz [ 1255.766534][T14769] usb 7-1: Manufacturer: syz [ 1255.771190][T14769] usb 7-1: SerialNumber: syz [ 1255.915457][T15772] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1256.065532][T15772] usb 9-1: Using ep0 maxpacket: 8 [ 1256.083517][T15772] usb 9-1: config 6 has an invalid interface number: 113 but max is 0 [ 1256.093631][T15772] usb 9-1: config 6 has no interface number 0 [ 1256.102134][T15772] usb 9-1: config 6 interface 113 has no altsetting 0 [ 1256.112841][T15772] usb 9-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 1256.122460][T15772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.130981][T15772] usb 9-1: Product: syz [ 1256.135146][T15772] usb 9-1: Manufacturer: syz [ 1256.140314][T15772] usb 9-1: SerialNumber: syz [ 1256.148739][T14769] usb 7-1: USB disconnect, device number 51 [ 1256.360652][T15772] usb-storage 9-1:6.113: USB Mass Storage device detected [ 1256.371329][T15772] usb-storage 9-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 1256.441416][T15772] usb 9-1: USB disconnect, device number 62 [ 1256.494110][T17819] FAULT_INJECTION: forcing a failure. [ 1256.494110][T17819] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.507533][T17819] CPU: 1 UID: 0 PID: 17819 Comm: syz.2.2891 Not tainted syzkaller #0 PREEMPT(full) [ 1256.507554][T17819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.507562][T17819] Call Trace: [ 1256.507568][T17819] [ 1256.507574][T17819] dump_stack_lvl+0x189/0x250 [ 1256.507602][T17819] ? __pfx____ratelimit+0x10/0x10 [ 1256.507621][T17819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.507634][T17819] ? __pfx__printk+0x10/0x10 [ 1256.507654][T17819] ? __pfx___might_resched+0x10/0x10 [ 1256.507665][T17819] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.507680][T17819] should_fail_ex+0x414/0x560 [ 1256.507699][T17819] should_failslab+0xa8/0x100 [ 1256.507714][T17819] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1256.507731][T17819] ? ptlock_alloc+0x20/0x70 [ 1256.507746][T17819] ? set_page_refcounted+0xa0/0x1e0 [ 1256.507761][T17819] ptlock_alloc+0x20/0x70 [ 1256.507777][T17819] pte_alloc_one+0x7a/0x310 [ 1256.507792][T17819] __do_fault+0xd1/0x390 [ 1256.507805][T17819] __handle_mm_fault+0x19a9/0x53a0 [ 1256.507831][T17819] ? __pfx___handle_mm_fault+0x10/0x10 [ 1256.507858][T17819] ? find_vma+0xe7/0x160 [ 1256.507874][T17819] ? __pfx_find_vma+0x10/0x10 [ 1256.507892][T17819] handle_mm_fault+0x40a/0x8e0 [ 1256.507915][T17819] do_user_addr_fault+0x764/0x1380 [ 1256.507942][T17819] exc_page_fault+0x82/0x100 [ 1256.507958][T17819] ? __might_fault+0xb0/0x130 [ 1256.507976][T17819] asm_exc_page_fault+0x26/0x30 [ 1256.507988][T17819] RIP: 0010:__put_user_4+0xd/0x20 [ 1256.508026][T17819] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1256.508039][T17819] RSP: 0018:ffffc9000de57e80 EFLAGS: 00050202 [ 1256.508059][T17819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002540 [ 1256.508074][T17819] RDX: 0000000000000000 RSI: ffffffff8d9489f3 RDI: ffffffff8bbfa900 [ 1256.508088][T17819] RBP: 0000000000000000 R08: ffffffff820e2bb0 R09: ffff888026e137a0 [ 1256.508101][T17819] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000001 [ 1256.508124][T17819] R13: ffff88801d2b9768 R14: 00000000ffffffff R15: 0000000000000000 [ 1256.508147][T17819] ? __might_fault+0xb0/0x130 [ 1256.508171][T17819] __se_sys_getgroups+0x1ea/0x2a0 [ 1256.508196][T17819] do_syscall_64+0xfa/0xf80 [ 1256.508206][T17819] ? lockdep_hardirqs_on+0x98/0x140 [ 1256.508224][T17819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.508236][T17819] ? clear_bhb_loop+0x60/0xb0 [ 1256.508251][T17819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.508262][T17819] RIP: 0033:0x7fa62678f749 [ 1256.508274][T17819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.508284][T17819] RSP: 002b:00007fa627708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 1256.508296][T17819] RAX: ffffffffffffffda RBX: 00007fa6269e5fa0 RCX: 00007fa62678f749 [ 1256.508306][T17819] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000027 [ 1256.508313][T17819] RBP: 00007fa627708090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.508321][T17819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.508329][T17819] R13: 00007fa6269e6038 R14: 00007fa6269e5fa0 R15: 00007fa626b0fa28 [ 1256.508349][T17819] [ 1257.485844][T15423] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1257.556285][T17846] netlink: 'syz.5.2894': attribute type 2 has an invalid length. [ 1257.566955][T17845] fuse: Bad value for 'group_id' [ 1257.572192][T17845] fuse: Bad value for 'group_id' [ 1257.678365][T15423] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1257.700824][T15423] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1257.743293][T17847] fuse: Bad value for 'group_id' [ 1257.751699][T15423] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1257.771150][T17847] fuse: Bad value for 'group_id' [ 1257.798851][T15423] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.931979][T17833] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1258.116892][T15772] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1258.299348][T15423] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1258.311695][T14769] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1258.359859][T15772] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1258.429504][T15772] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.527067][T15772] usb 3-1: config 0 has no interfaces? [ 1258.528601][T14769] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.624341][T15772] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1258.653845][T15772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.666341][T14769] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.718164][T14769] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1258.748644][T15772] usb 3-1: config 0 descriptor?? [ 1258.915823][T14769] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.928420][T14769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.969152][T14769] usb 7-1: config 0 descriptor?? [ 1259.839904][T14769] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.44 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1259.980306][T17851] usb 7-1: string descriptor 0 read error: -71 [ 1260.046505][T14769] usb 7-1: USB disconnect, device number 52 [ 1260.401736][T17859] fido_id[17859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1261.271274][T15772] usb 9-1: USB disconnect, device number 63 [ 1261.320028][T17866] FAULT_INJECTION: forcing a failure. [ 1261.320028][T17866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1261.335116][T17866] CPU: 0 UID: 0 PID: 17866 Comm: syz.6.2902 Not tainted syzkaller #0 PREEMPT(full) [ 1261.335146][T17866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1261.335159][T17866] Call Trace: [ 1261.335168][T17866] [ 1261.335177][T17866] dump_stack_lvl+0x189/0x250 [ 1261.335213][T17866] ? __pfx____ratelimit+0x10/0x10 [ 1261.335243][T17866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.335265][T17866] ? __pfx__printk+0x10/0x10 [ 1261.335300][T17866] ? fs_reclaim_acquire+0x7d/0x100 [ 1261.335330][T17866] should_fail_ex+0x414/0x560 [ 1261.335362][T17866] prepare_alloc_pages+0x213/0x610 [ 1261.335390][T17866] __alloc_frozen_pages_noprof+0x123/0x370 [ 1261.335417][T17866] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1261.335448][T17866] ? policy_nodemask+0x27c/0x720 [ 1261.335474][T17866] alloc_pages_mpol+0x232/0x4a0 [ 1261.335500][T17866] folio_alloc_mpol_noprof+0x39/0x70 [ 1261.335522][T17866] shmem_alloc_and_add_folio+0x423/0xf40 [ 1261.335555][T17866] ? filemap_get_entry+0xad/0x2f0 [ 1261.335572][T17866] ? filemap_get_entry+0xad/0x2f0 [ 1261.335596][T17866] ? shmem_huge_global_enabled+0x296/0x320 [ 1261.335622][T17866] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1261.335654][T17866] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 1261.335688][T17866] shmem_get_folio_gfp+0x59d/0x1660 [ 1261.335738][T17866] shmem_fault+0x179/0x390 [ 1261.335777][T17866] __do_fault+0x138/0x390 [ 1261.335799][T17866] __handle_mm_fault+0x19a9/0x53a0 [ 1261.335843][T17866] ? __pfx___handle_mm_fault+0x10/0x10 [ 1261.335891][T17866] ? find_vma+0xe7/0x160 [ 1261.335917][T17866] ? __pfx_find_vma+0x10/0x10 [ 1261.335949][T17866] handle_mm_fault+0x40a/0x8e0 [ 1261.335990][T17866] do_user_addr_fault+0x764/0x1380 [ 1261.336037][T17866] exc_page_fault+0x82/0x100 [ 1261.336065][T17866] ? __might_fault+0xb0/0x130 [ 1261.336095][T17866] asm_exc_page_fault+0x26/0x30 [ 1261.336115][T17866] RIP: 0010:__put_user_4+0xd/0x20 [ 1261.336145][T17866] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1261.336163][T17866] RSP: 0018:ffffc9000e137e80 EFLAGS: 00050202 [ 1261.336184][T17866] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002540 [ 1261.336199][T17866] RDX: 0000000000000000 RSI: ffffffff8d9489f3 RDI: ffffffff8bbfa900 [ 1261.336223][T17866] RBP: 0000000000000000 R08: ffffffff820e2bb0 R09: ffff8880782581e0 [ 1261.336238][T17866] R10: dffffc0000000000 R11: fffffbfff1f0026f R12: 0000000000000001 [ 1261.336252][T17866] R13: ffff88801d2b9768 R14: 00000000ffffffff R15: 0000000000000000 [ 1261.336276][T17866] ? __might_fault+0xb0/0x130 [ 1261.336312][T17866] __se_sys_getgroups+0x1ea/0x2a0 [ 1261.336345][T17866] do_syscall_64+0xfa/0xf80 [ 1261.336363][T17866] ? lockdep_hardirqs_on+0x98/0x140 [ 1261.336394][T17866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.336414][T17866] ? clear_bhb_loop+0x60/0xb0 [ 1261.336440][T17866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.336460][T17866] RIP: 0033:0x7f9656d8f749 [ 1261.336479][T17866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.336497][T17866] RSP: 002b:00007f9657cac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 1261.336517][T17866] RAX: ffffffffffffffda RBX: 00007f9656fe5fa0 RCX: 00007f9656d8f749 [ 1261.336532][T17866] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000027 [ 1261.336545][T17866] RBP: 00007f9657cac090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.336558][T17866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.336571][T17866] R13: 00007f9656fe6038 R14: 00007f9656fe5fa0 R15: 00007f965710fa28 [ 1261.336607][T17866] [ 1261.696835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.930135][T17873] vivid-001: ================= START STATUS ================= [ 1261.938194][T17873] vivid-001: ================== END STATUS ================== [ 1262.096646][ T5923] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1262.132916][T17876] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2906'. [ 1262.227692][T15772] usb 3-1: USB disconnect, device number 116 [ 1262.256317][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 1262.274675][ T5923] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 1262.292102][ T5923] usb 7-1: config 0 has no interface number 0 [ 1262.312716][ T5923] usb 7-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 1262.346691][ T5923] usb 7-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1262.406789][ T5923] usb 7-1: config 0 interface 11 has no altsetting 0 [ 1262.448173][ T5923] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 1262.476210][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.513997][ T5923] usb 7-1: Product: syz [ 1262.539282][ T5923] usb 7-1: Manufacturer: syz [ 1262.562389][ T5923] usb 7-1: SerialNumber: syz [ 1262.584925][ T5923] usb 7-1: config 0 descriptor?? [ 1262.805055][T17871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.836232][T17871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.905673][T13941] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1263.055779][T13941] usb 3-1: device descriptor read/64, error -71 [ 1263.456034][T13941] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1263.625922][T13941] usb 3-1: device descriptor read/64, error -71 [ 1263.756016][T13941] usb usb3-port1: attempt power cycle [ 1264.115448][T13941] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1264.135600][T17915] loop3: detected capacity change from 0 to 7 [ 1264.143903][T17915] Dev loop3: unable to read RDB block 7 [ 1264.151921][T17915] loop3: unable to read partition table [ 1264.159526][T13941] usb 3-1: device descriptor read/8, error -71 [ 1264.170812][T17915] loop3: partition table beyond EOD, truncated [ 1264.177741][T17915] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1264.415787][T13941] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1264.446470][T13941] usb 3-1: device descriptor read/8, error -71 [ 1264.566650][T13941] usb usb3-port1: unable to enumerate USB device [ 1264.890162][ T5923] usb 7-1: Expected 3 endpoints, found: 0 [ 1264.925972][ T5923] usb 7-1: USB disconnect, device number 53 [ 1265.196432][T17924] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2918'. [ 1265.240474][T17924] veth0: left promiscuous mode [ 1265.245275][T17924] veth0: left allmulticast mode [ 1265.308673][ T5923] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1265.382448][T17929] SET target dimension over the limit! [ 1265.478037][ T5923] usb 7-1: config 1 interface 0 altsetting 124 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1265.489680][ T5923] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1265.504854][ T5923] usb 7-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 1265.526442][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.541186][ T5923] usb 7-1: Product: syz [ 1265.548997][ T5923] usb 7-1: Manufacturer: syz [ 1265.556812][ T5923] usb 7-1: SerialNumber: syz [ 1265.569474][T17922] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1265.762669][T17932] loop7: detected capacity change from 0 to 16384 [ 1265.813001][ T5923] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input72 [ 1265.852707][ T5191] bcm5974 7-1:1.0: could not read from device [ 1265.883287][ T5923] usb 7-1: USB disconnect, device number 54 [ 1266.006958][T17933] loop7: detected capacity change from 16384 to 0 [ 1266.009693][ C0] I/O error, dev loop7, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1266.027098][ C0] I/O error, dev loop7, sector 4640 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 1266.207878][T17936] netlink: 'syz.2.2922': attribute type 9 has an invalid length. [ 1266.232834][T17936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1266.279185][T17936] hsr0: entered promiscuous mode [ 1266.305896][T17936] macvlan3: entered promiscuous mode [ 1266.328966][T17936] macvlan3: entered allmulticast mode [ 1266.360520][T17936] hsr0: entered allmulticast mode [ 1266.392518][T17936] hsr_slave_0: entered allmulticast mode [ 1266.423418][T17936] hsr_slave_1: entered allmulticast mode [ 1266.502531][T17949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1266.800118][T17951] kvm: kvm [17950]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x300000000 [ 1266.815905][T17951] kvm: kvm [17950]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1266.904969][T17958] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1266.916926][T17958] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1266.925441][T17958] CPU: 1 UID: 0 PID: 17958 Comm: syz.6.2927 Not tainted syzkaller #0 PREEMPT(full) [ 1266.934826][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1266.944892][T17958] RIP: 0010:fd_install+0x57/0x3d0 [ 1266.949935][T17958] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1266.969552][T17958] RSP: 0018:ffffc9000bf7fca0 EFLAGS: 00010202 [ 1266.975644][T17958] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1266.983713][T17958] RDX: ffffc90012ab1000 RSI: 0000000000000131 RDI: 0000000000000132 [ 1266.991697][T17958] RBP: dffffc0000000000 R08: ffff888079330df3 R09: 1ffff1100f2661be [ 1266.999671][T17958] R10: dffffc0000000000 R11: ffffed100f2661bf R12: 000000000000000c [ 1267.007645][T17958] R13: 000000000000000c R14: 0000000000000001 R15: ffff888032fd83c0 [ 1267.015621][T17958] FS: 00007f9657c496c0(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 1267.024562][T17958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1267.031244][T17958] CR2: 00007f9657c48f98 CR3: 0000000043514000 CR4: 00000000003526f0 [ 1267.039227][T17958] Call Trace: [ 1267.042512][T17958] [ 1267.045455][T17958] ? do_mq_open+0x595/0x770 [ 1267.049984][T17958] do_mq_open+0x5a0/0x770 [ 1267.054325][T17958] ? __pfx_do_mq_open+0x10/0x10 [ 1267.059189][T17958] ? __pfx_do_futex+0x10/0x10 [ 1267.063957][T17958] ? __pfx___might_resched+0x10/0x10 [ 1267.069247][T17958] __x64_sys_mq_open+0x16a/0x1c0 [ 1267.074206][T17958] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1267.079675][T17958] ? do_syscall_64+0xbe/0xf80 [ 1267.084363][T17958] do_syscall_64+0xfa/0xf80 [ 1267.088898][T17958] ? lockdep_hardirqs_on+0x98/0x140 [ 1267.094105][T17958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.100178][T17958] ? clear_bhb_loop+0x60/0xb0 [ 1267.104863][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.110763][T17958] RIP: 0033:0x7f9656d8f749 [ 1267.115182][T17958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1267.134789][T17958] RSP: 002b:00007f9657c49038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1267.143210][T17958] RAX: ffffffffffffffda RBX: 00007f9656fe6270 RCX: 00007f9656d8f749 [ 1267.151192][T17958] RDX: 0000000000000080 RSI: 0000000000000041 RDI: 0000200000000180 [ 1267.159212][T17958] RBP: 00007f9656e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1267.167197][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.175188][T17958] R13: 00007f9656fe6308 R14: 00007f9656fe6270 R15: 00007f965710fa28 [ 1267.183173][T17958] [ 1267.186249][T17958] Modules linked in: [ 1267.190861][T17958] ---[ end trace 0000000000000000 ]--- [ 1267.200772][T17958] RIP: 0010:fd_install+0x57/0x3d0 [ 1267.223118][T17958] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 c7 4c e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 1267.252835][T17958] RSP: 0018:ffffc9000bf7fca0 EFLAGS: 00010202 [ 1267.259600][T17958] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 1267.273587][T17958] RDX: ffffc90012ab1000 RSI: 0000000000000131 RDI: 0000000000000132 [ 1267.291386][T17958] RBP: dffffc0000000000 R08: ffff888079330df3 R09: 1ffff1100f2661be [ 1267.316495][T17958] R10: dffffc0000000000 R11: ffffed100f2661bf R12: 000000000000000c [ 1267.324705][T17958] R13: 000000000000000c R14: 0000000000000001 R15: ffff888032fd83c0 [ 1267.334828][T17958] FS: 00007f9657c496c0(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 1267.350401][T17958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1267.359839][T17958] CR2: 00007fa6269b6ad8 CR3: 0000000043514000 CR4: 00000000003526f0 [ 1267.368662][T17958] Kernel panic - not syncing: Fatal exception [ 1267.375151][T17958] Kernel Offset: disabled [ 1267.379500][T17958] Rebooting in 86400 seconds..