last executing test programs: 8m11.608458624s ago: executing program 0 (id=1671): socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/156, 0x9c, 0x100, &(0x7f00000000c0)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) memfd_secret(0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) (async, rerun: 32) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) (rerun: 32) 8m11.280939383s ago: executing program 0 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = fsopen(&(0x7f0000000000)='autofs\x00', 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab3a3a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000203010400000000020000000500"/32], 0x20}, 0x1, 0x0, 0x0, 0x1800}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r4, 0x1, 0x64f4, 0x8}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)={0x4, [0x6, 0x56e, 0x91, 0x9]}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x400000) (async, rerun: 32) syz_usb_connect(0x5, 0x2d, &(0x7f00000008c0)=ANY=[], 0x0) 8m11.134613277s ago: executing program 0 (id=1674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x800000001, 0x1000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x8001, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m9.178555752s ago: executing program 0 (id=1685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @local, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) mlock(&(0x7f0000670000/0xb000)=nil, 0xb000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1}}], 0x2, 0x404c851) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}) r8 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_control_io$cdc_ncm(r8, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r8]) 8m6.138118911s ago: executing program 0 (id=1696): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1}) 8m5.760887112s ago: executing program 0 (id=1700): socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) 8m5.436027219s ago: executing program 32 (id=1700): socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, 0x1fe, 0x12) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4733, 0x10100, 0x0, 0x24d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1200}, 0x1}) 2m30.038885594s ago: executing program 2 (id=3304): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a020480) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 2m30.000731284s ago: executing program 2 (id=3305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32, @ANYBLOB="080002"], 0x2c}}, 0x0) (fail_nth: 9) 2m29.518391656s ago: executing program 2 (id=3307): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808000, 0x0, 0x0, 0x8fc0, 0x65f40}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$describe(0x6, r4, &(0x7f00000001c0)=""/191, 0xbf) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 2m29.298931729s ago: executing program 2 (id=3308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045519, &(0x7f0000000040)=0x1) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2m29.031780694s ago: executing program 2 (id=3313): add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0xffffffdf, 0x4645639d, 0x7, 0x100}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40011) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680), 0x0, 0x4000050) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000191c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000192c0)={&(0x7f0000019180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000019280)={&(0x7f0000019200)={0x44, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x80c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x884}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1343}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 2m28.949297276s ago: executing program 2 (id=3314): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x8003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xffffffffffffff01, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x2, @sliced={0x5, [0xd, 0x7ff, 0x1, 0xfffd, 0x8, 0xb, 0x7, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x9, 0x2, 0x200, 0x7a22, 0xc, 0xa, 0xbe, 0x9, 0x2, 0xa, 0x400, 0x6, 0x3, 0x2, 0xf0, 0x5, 0xc0de, 0x671e, 0xcf8, 0x4, 0x5, 0x5, 0x10b, 0x7, 0x2, 0x2, 0x9, 0x0, 0x400, 0x800, 0xfffb, 0x0, 0xfff, 0x3, 0x31, 0x8], 0xf0a}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1, &(0x7f0000000540)=""/78, 0x4e}, 0x1}, {{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000000840)=""/105, 0x69}], 0x5, &(0x7f0000000940)=""/92, 0x5c}, 0x7090}, {{&(0x7f0000001500)=@tipc=@name, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/213, 0xd5}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)=""/145, 0x91}], 0x4}, 0x80000001}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/156, 0x9c}, {&(0x7f0000000e80)=""/149, 0x95}], 0x2, &(0x7f0000000f80)=""/48, 0x30}, 0xfa9}, {{&(0x7f0000000fc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001300)=""/182, 0xb6}, {&(0x7f00000013c0)=""/174, 0xae}], 0x4, &(0x7f0000001280)=""/25, 0x19}, 0x5d4}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000001480)=""/28, 0x1c}, {&(0x7f00000009c0)=""/56, 0x38}], 0x3}, 0x9}], 0x6, 0x40000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x640100ff}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0xdddd1000, 0xf5, &(0x7f0000004780)=""/245}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m13.858357752s ago: executing program 33 (id=3314): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x8003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xffffffffffffff01, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x2, @sliced={0x5, [0xd, 0x7ff, 0x1, 0xfffd, 0x8, 0xb, 0x7, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x9, 0x2, 0x200, 0x7a22, 0xc, 0xa, 0xbe, 0x9, 0x2, 0xa, 0x400, 0x6, 0x3, 0x2, 0xf0, 0x5, 0xc0de, 0x671e, 0xcf8, 0x4, 0x5, 0x5, 0x10b, 0x7, 0x2, 0x2, 0x9, 0x0, 0x400, 0x800, 0xfffb, 0x0, 0xfff, 0x3, 0x31, 0x8], 0xf0a}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1, &(0x7f0000000540)=""/78, 0x4e}, 0x1}, {{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000000840)=""/105, 0x69}], 0x5, &(0x7f0000000940)=""/92, 0x5c}, 0x7090}, {{&(0x7f0000001500)=@tipc=@name, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/213, 0xd5}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)=""/145, 0x91}], 0x4}, 0x80000001}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/156, 0x9c}, {&(0x7f0000000e80)=""/149, 0x95}], 0x2, &(0x7f0000000f80)=""/48, 0x30}, 0xfa9}, {{&(0x7f0000000fc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001040)=""/227, 0xe3}, {&(0x7f0000001140)=""/205, 0xcd}, {&(0x7f0000001300)=""/182, 0xb6}, {&(0x7f00000013c0)=""/174, 0xae}], 0x4, &(0x7f0000001280)=""/25, 0x19}, 0x5d4}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000001480)=""/28, 0x1c}, {&(0x7f00000009c0)=""/56, 0x38}], 0x3}, 0x9}], 0x6, 0x40000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e20, @rand_addr=0x640100ff}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0xdddd1000, 0xf5, &(0x7f0000004780)=""/245}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.42159288s ago: executing program 3 (id=4004): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xa080) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000006c0)={{0x1, 0x3, 0x201, 0x3}, 0x9, 0x100000200, 0x32}) io_setup(0x6, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) r4 = socket(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f00000000c0)={0x27e2, 0x10001}) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000004a00010000000000000000000a00800047", @ANYRES32=0x0, @ANYRESHEX=r5], 0x30}, 0x1, 0x0, 0x0, 0x2000008a}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffc}, 0x10}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) recvfrom$inet6(r4, 0x0, 0x1a000, 0x2100, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='Fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x3}}, 0x50) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f000000a300)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7801000000000000f9ffffffffffffff05000000000000000200000000000000060000000000000002000000000000000500000008000000030000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES64=r5, @ANYBLOB="0e7f9b18584e62e09575923eb477fdfd1f6efec6101b88feede8b503c10fd9b3542c70252c58e5a49cd737b5878993726a868be49a02125097de5ce6e63d61e7cf521ad95eb3d07559947759375e64d996c7f7ee8f6f7711c3832e985f7ac90586641a44200640ad14f5f746fd69cdef40f38dfd324e7ef8a6d3855c3848d240a6d8d7a33eee1a20c0c3274c8f6aa33ff987", @ANYRES32=r8, @ANYBLOB="0800000006000000000000000400000000000000070000000000000002000000000000002e25000000000000"], 0x0, 0x0, 0x0}) getdents64(r10, &(0x7f0000000100)=""/134, 0x86) getdents64(r10, 0x0, 0xc0) syz_open_procfs$userns(r9, &(0x7f0000000400)) getdents64(r10, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000000000000000000000000000bac5a10437cfd5a2e559a2585cc1a1c951be6a30353109b0e2fdbd6d23823bfa6deacce2b473e2d0dcf6e6b144b859da237ac07e59bb978dbdedf0d1a57c47af8da205b9eafa049883c1d05933a16b0f8f9f1cd5a217698636c1812c73d8b65b7e7c08e4e0eab51c0133db51fdbd1c393f3df24d455d998222d8c0996fc22e9d2c8a52558c3d840bf55594c37156220cbd64e7ba2757e32c2d963acfa92c6409ce934915e476cd81ccab60afde9b599b5a9c6fa51fd32fa54c1b248489d0"], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001"], 0x148}}, 0x0) 9.358636149s ago: executing program 3 (id=4009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10000, 0x141002) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xec9, 0x3, 0x2, "1fa5b3b69d65b3388298d2d957c9fcc90fa7ec71e2745727f31751a40ceac25a", 0x34363248}) (async) sendto(r1, 0x0, 0x0, 0x20004090, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 9.183679824s ago: executing program 3 (id=4010): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9c8) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8.070608854s ago: executing program 3 (id=4012): mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x93031, 0xffffffffffffffff, 0x10000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) read$FUSE(r1, &(0x7f00000083c0)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) socket(0x400000000010, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r2 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=0x0, &(0x7f00000015c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020}, 0x2020) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_ep_write(r5, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 7.718565344s ago: executing program 4 (id=4015): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000040)={0x3fe, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40}}, {{0xa, 0x4e24, 0x20000000, @mcast1, 0xfffff801}}}, 0x108) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="982e6837", 0x4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r3, 0x401) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000303a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001120fe8000000000000000000000000000aa000000000000000000000000000000009695e4681a6bf61089ea072095199ee444a126ec3f261d97605b7a25e1f527f0f7b4806ab2851f1f3d76f56d7bbda9d863177df2a968e0fef78a14abd988ae4f7c5733354b2c78c8c26b3ef5152a7c"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000303a00fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000006009000000001120fe8000000000000000000000000000aa000000000000000000000000000000009695e4681a6bf61089ea072095199ee444a126ec3f261d97605b7a25e1f527f0f7b4806ab2851f1f3d76f56d7bbda9d863177df2a968e0fef78a14abd988ae4f7c5733354b2c78c8c26b3ef5152a7c"], 0x0) r4 = epoll_create1(0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x0, 0x1, 0x600, 0xffff}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x0, 0x1, 0x600, 0xffff}, 0x20) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000380)=0x38, 0x4) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000380)=0x38, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x8, 0x0, [0x0, 0x5, 0x4, 0x9, 0x3, 0x8, 0xa, 0x80000000, 0x2, 0x2, 0x7bb, 0x7f, 0x11560, 0x7, 0xffffffff, 0x9]}], r8, 0x1, 0x1, 0x48}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e20, 0x10000, @mcast2, 0xa31}, r8}}, 0x38) r9 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000000)={0x10000001}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "66e2606b04db695338e0edbe94d9f99b0488d7a4f8a3acb15eedca0491c85be5", "9bdd3396f9fbc7c0c27d9bd6afc9163dd0ff0fffb457010099bc302b03af7ea3", "d2758a8b768d13e058bed362ee20ac74f175bfc17ec8a203a26a81c7f9693291", "a01290842c7b3aab6bcd405ad4b2a3dc57b0ab58a95baee4c96dfc4963855c17", "df8268b274907600000000006ac95ff3191adfa146d17e5806d94c8ab5ff1959", "da278b1c0bb88eb261165c33", 0x6, 0x8, 0x101, 0x8000, 0x566}}) 6.787983534s ago: executing program 6 (id=4020): r0 = fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) listen(0xffffffffffffffff, 0x3) memfd_create(0x0, 0x6) set_mempolicy(0x2, &(0x7f0000000100)=0x4, 0x3) r4 = memfd_create(&(0x7f0000000380)='\xa3\xac\xce\xe1\x88\x9d[\x10\x00\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9\x95\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd184]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xf3\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000001c0)={0x0, @empty, 0x4e22, 0x2, 'sed\x00', 0x14, 0x586, 0x53}, 0x2c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x4000005, 0x6cc800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0x1ff, 0x32314d54, 0x80004001, 0x0, 0x3, @discrete={0x3fc, 0x73b}}) 6.374866995s ago: executing program 4 (id=4021): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x60202, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xdc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0xd6d1}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xaa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x33424752, 0x2, @stepwise={0xfffffff8, 0x1, 0x5, 0x7, 0x6, 0x80000000}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) restart_syscall() sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000406e050d010000000000010902240001000040b10904000201030000000921370b090122050009058103ff030c000047b30ddec78074153e744a11e45c9e85c347bfc8c67b893fcfb924eeb8644e0dbf2de25a66f730cca40dc3c4b9d92405744eb2000000000000cea7ed6f4ca4d09100"/129], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x5, {0x5, 0x9, "46ff44"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x19) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000440)="e3e92c5fa28d64b8c7b6e9fea7277e5410bbc759a82eeff9d04a76f050226a344580f9c8b76cbcc74400de90b351b77558a11f80ce20e8230939a90bd1e9743b63850d64a5414d09325d1ee821d0e657649e53b0da105450e86729b87bb4b0180bf25cb0fcd6ef8d63b15348ebdc69955b55f6fa5df01f8ca2eaf8386a99cb3248cbd7bf111dca8a8e213f6dc7a6a964b674ac02353506c543a3e813fa67e16a444f0c85178e742e85b6d5f593817581f672fc138c2e02393391fa64496980aaa76d7f923f4fbf51a1aab8612a0dcacf37eb44ac724ff42d5146c67d7269434f819d84d344a1e74175fdff4c3ed5bc", 0xef}, {&(0x7f0000000540)="73a371354f527876cff58d8d58241a76bd36f352e1b12b208ae27dd90a8130823ae3428ec5c2ff3e5d2f534e3760d3d8f4283865a709a003f60cc6283750d8f11fb68cfbe823ffd1cea9638fbca9d89e20640e690834b5e60fbdb4c36eb10846375165b6eeb15df471c93c7639a0d3d8063a84a7ff2e14bea356e0b0c8c548dbb3ebe5e1506381a9dd6c4c034f9bf58770785ef683a16e5f604c12ecb73ad09502a09affb599e53245c9ba2baa8470a2d55b77c8978826af7377f0236d5a5a", 0xbf}, {&(0x7f0000000780)="cc1ad35b7e93ef5c49ce1daff1222c5804c6524f5b2543d99668b2522f255eb82b6af82af727dedadd90648ded978d5b59c3362bd6941d6689deec298775bb85d537faabdcf0abe6adc8c9a464e793a0e580fd63fcdcdee18310b6995341d2fd4708f4a0f9e22128dbe59dad360089a49622db46a155a8d3cbe2bd300a7c9961ec1bbf2feebe75c0ed808bb24caf1586bd418c7a07eff5c93764ff7f9a128520b53111956d8a46c4dfebb3529b35a5d9deca6eb56846f218f1bbca495b9b31ae6873a1cf788baef3784be50d4641a36a58a1a99464603990be0379a83d14073f99461a8dda186b313686271bbfddf9a8e1e809e7f7031a6799a1830e22c353af6bcb197ff05067ee2ba03b794db687603dbca8360dd2dcdb38b3647904e71d89492353f43a545dad73629bfb1e06e46fd5f5f4874c3694a68187f51b02999ac391608879cfbfa718ce6b48317894fbd21449667f61b2e53f67224abf1761fb1fcee8b931f4f740274b04bb5d07d2d3124c0759964ab1444b35a5b5d5987badfbf38b4f2d8d67d31b3d0e313fcd8f4fdd03d45d352ded0ab396a9723571bf5386bb0d9405f0d7e5825690891af65849787296e33cb5f86cc49eea6ce3d5d618e868a38d6ef3c5754567291c9d214fc369140f7d41d36f97751cb09bbdff66f82f6640c5a966320a9d1f7aad52465d7916a8a27bcf73ead51ff5a5383062f62f5f5ed09a66db68cc57ded34156e729fed7576afa2e3d93a7489ff466835500a26d418d1f2adfea3e28de884f5a0075607c80cdc4c2549aa0709a2a9c6b9021a67f6f8a8fd9b992ff4fd12b0b65bdd7f4118c28e8af294237983b3cc6a208ddfac7ede7a5e413500f2f0e85d23be243ba00e52138145638d0d78ffe56ea83658aff7c453250be298b22dc9a33a26c26d706bf2ab626c1abce5df92938b9b589142515fe7f3a26d8d3b77b604ed71d04603806b97091e1ceb868920d2add5bc85590806736dc1fd72047a93b97a3e35e7aaf0b43ea2ec49c99412824592619bbb1af85d43f6bff483085f5a863e76d14ecb671f2bacc985bfb42021ffa4764cc7d2e48b937e959b9afb50aa8f7d46507cf0e29cd8602acce81bd12a81d9df119d7674af83a73b9ec8720948401acc5f86bfa0eeb22838a197bfc2c57308c6e07b4fac39b5a9fdabfccd7f7c1465c498ac98867797186ddd4f999f0553a2e2910865fdda5a8d8ff9130633976b613598f3d3883951db2b7ef2b47e372fed723ffcd032339157269b4e6433a2bfa75f167d560f571cc7e8653cf0ca9d1b6353b06e9686648a485e668c39dc9425bb14eb05b296f7b7de1ec0c183bdac61f653818242f21c0eb658822f6036c4e6b32b02fdba298dafe818e632356ed5e11301e905a6e3a5a70789698b8d750596427b56999b584e30a6c580afbc72f68ddd5a7c09ba8c306f8aba47ddd52d38b39f0a0ae45f0c52bf6ede1c57e4d9f778ccdaa7df037b2b63c79c82214e8e62e463fedb583ec76c7390de25161a4d12f420112bd28d13ad49488b695b79b76d9a977eae81e5d9c3e6bcd8aafdfc27c30f1a85278ea285902df4defaa2bd76c32ac215728e8ddcad7d3e66ca7dad0579ffa0b14fbfc7fc5a3bffd9df5180ad032ccfe4c847b4ed1e8fb690d0a24806ed7968a9798e644ea844b861086a2a138b537730d301875904ff8cec71d00fed98fe4638e4978491014609131fc3c26c0ac0101a8f2180a5059d5429e59fa8602c338ee973b2e57e7ca2bbcaa1985fff021017e56f6971a98f181312364f5b201881319b0ca8faeb4031e30452cc277277d3ffbda07f9a2623497d97a5ce6705ffe6895b9f53fc658fc0816c4010d2789371b6f2c242dfb7b9de5001662633c0d40545ffa9f6508c0b633395513d7574c3417af16ff7399c4f4a12ce4b1d8b9bb70210e4468166616d427c5873964ea6b730457b0228713f6df058c1c70683d808ad09e3a2f8f32d6044a8dd2f4c76e54594cc0047ff50b6ae8264a1618f2456101bf3b06017f3ee92b88d529dae11c42b533df1560204ebd5c0b285b0a1f92f672e361849490f51a3928f85ff88039758fa33df3cc81fcdf2dc717805d431f99bf83250176f63c4365cc3ef6859d34b1fc3929556d9b23c8b448b21079262fd1a6573d85405efe633d76679ae602bff45c3961ca0cf3fe2a31e40b3c5e689c3d47e27814fe361a624d991ffc706053beca3018c49497d7a0567d9679e757fa869b673a0086936756ec157b99ce39b49671680ac99455e9ecca23", 0x653}], 0x3) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x0, 0xfffffffffffffff7}}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x7f}}, 0xe8) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000200)={r2}) 5.9107046s ago: executing program 5 (id=4022): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @loopback, 0x9}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) (fail_nth: 31) 5.683157801s ago: executing program 5 (id=4023): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9c8) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5.330279129s ago: executing program 6 (id=4025): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001e00)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@bloom_filter={0x1e, 0x47, 0x5, 0x8000, 0x40, r0, 0x5, '\x00', r3, r0, 0x1, 0x0, 0x5, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000300), 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$setperm(0x5, 0x0, 0x2040403) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000003a80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000002000)=[@hoplimit_2292={{0x14}}], 0x18}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x2}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000000440)="50205604ed7e9a106133f20c5d8789a233b763170f0623f34f4aa85a07d93f438cbb3dc5e5a31cebca6916a393580cb01793823d58b2058f3973b37ff7993ac1f0ada94bff6924cbdb833a", 0x4b}, {&(0x7f0000000880)="93a05a821872d44c2e2dffd14054d016e2910def8087ab65012a77ca0fdfd23cdd12a5ed18a643704bd99b9d3495bff0b636a62e855fab5c10f5886ecff1329993b51ca5e0ea075380f764511ad9779280bd348448afed6e2a4d97205f0976afc7ce", 0x62}, {&(0x7f0000000900)="63860cc98a6b336a", 0x8}, {&(0x7f0000000c40)="b5659cb92fe489f100cab7743fb7ef1358847fcd7392477ea6f396a53cfdb4a9d39cfd4d1ee6ef924efcea3bbe4f3d9462f28bb016c7985635840e06be6c56b2bec73d502d49dc5dbf98670d5dd4faf760a4dccfddf5385ff045cd13863caa0a179777b287f502c16847dfd17b2949edd1dcfa5d6af406f94e6c7329a445745b979535d0f60f69173d0d96b734003b8acc3b859c1b1e662f885c3c5a6f7072a0957cab5ad15d14040acc6a338ecea53a30727e3f54d3bc16846110ea89d09d1843f9b6942c77440abdf81afee5e1415113c903fea5a6e7921ff39f69af4adfe70fe9f13a47bfe40351670cc15d0d863ceeaddd59a4259ba23b8ebfc3154b0b61f03a34066f5371d7a3e157869909c97ba16a03b6bc3be49e696f779c561349eabbf92dc3c7779ae1bae5d990d60518442bff6fe9c2691c89dbac66492b4821b42f38586f0962c13924ef495c7a5f22ff6f8bb3b1f4233022d1295ab9f2062a2d5943c3cbc3d503c70f5c453a092902d14a0fefe953996bface5806048a436c4963058a664264210be99149f6426d021b4216abb61013971abcadd6c3817862b8d51d5cdba1089d003fea902e66ccf7fb43c8330f71e06437f75917138d96a7e47ebc2ebc043976d9024fca268e1d29a9c95b8d39d284294a9af76bce7edd7a7c130376ad49a5100b5dfa76dafff3ad72886a6c09ad1b0c133150394d152d2468cefc9c5de04f8a9ccdb259cfa2e787e97395284dadb2c3bcb03f7f8b1b59fa80b2489889956897f494f1de478e88acdda0d89f0eadcecb1ad81e37f36a4d9798016083b798b0d746d772cdc552a1f7e882605960d38f6e8bc49022b401999cd8640b45e3967d1431ec889d9a71e11a83b2d911375e0a53aabba6028238bdd3d56e475c0ed0422bb9f7b893c553c7d7cf3ceeb5a12edaba578ff7970863981fc1e28067d8ffed7157b323ba33977b70c35db2ec3ad1da678e460dfd166b11d60f93ba7bbb0574a2cc7fd72b923cd68379c1781a98b00b32c54575786f6c0278c13fff2c83483c9c675830aea0ceba6746b898a092cbafd498689954e64b719442ef34c43d67c21f17e09b84c81bba6854db4d3cf0309d660ffedd9de29f4000cbe32a2a54c4f2bd81b5cb3e646c5caa0e49b6463d307dfab6e8345b8d926d70bcc69113e6ce92d21c81e5df9401f18a8645dfb928dd345312d59635e2115e02e723b767c9b44467126d1b16bcbeca153e4368c2011e7a1c7ea16325f4aebbccd57cdf9cd8aef8ec0e909437d8875002ffd5dd311f78eccc07665d01bf0d757b0707955ebe04f014df46d854126886978f4c96325bfb2f0f42800eddad3ac2a9ca06207eb00fd4a177ea8c4806406ee2211e83a4cf54706e702586dbb6d6a920e77e4cdf5cfcd2161c568e6bbbdc6e1dbbd8eab53c97e05658142ef4301931733d641474429a69b01482f9c8bbb2426dd70b2344361eccfa1770f7ae115ec39fe6100909412aa776685fc8042bffc9eaca277063fcd9ee3d57782199bc42e6d8be12c06390e3408957b15f0f5a803fe0f927329bc101dba5036dbb32f5c225595982e23c997868d120c52e65d8ca9847767c4b04157c77011752eca73215b84ac886dbf15769b66fb1707faab37c5b986cae1bed4aa67912c52dc788a1251fe9045f5995cad04f33a37a33235460055dfe6861f6314e727cd870698d55ab045efc9a9179c8d91060fbcb1ea84e8e54455ba31857dcba637f5d1eec0f81c4144451697b92751180296528b84b2f7dae785cd533ed0e36b729a613ee97cf53fc30ff3b3fc2b4290837097cce628bac89f4d0f0514e451c02f8f6227f1033cc8952019287de4aaac09979ef9c8aebe8e23c605f2ba2ba4c5d6cbbddd838702d788a29c954f3ab387655958827c16877a92d9156b3522f40b8d8f2f106455acc1582cf2eec70028321f2859ff1834eb02a7935a6bed26d37de77cffe62110519cb642aa0a7a0c9073af8b6e39051138fbfc7947fcd1922d5646c57e6cb0d3c20ed185efec101bbdc799694ab0c5c8993b0a62ee3188172fe23620839b01634b363ec81b6cf2aaa76b585e9f486254b1fc143a1645c929742f68e025ff013560a5b2ac13a40f006d4a7710ff155c596d1c714192e9a9b0a61dd8890c32a7859a5f9b680f133f2f1fe4b966f7f6700ff55eb8b7c956d9bbee4394bb817597b9c4d5554fbf16e015e1abd7ae2836b8651a2afab7184365633ba1830beffcb52619408c9baac3e879e8c6379c34a499315df4b3462137e918a8c8fcf69c37c57da9aeae691a5cbf5ed99f1cd5aebbac1f89d3aec8df372228ecf7d39637d4e03e2114f118a3eb000fc14ad46d698028e11ce03958c9a03a47ab7449271d77d4d93fa687ed955e25efc625ebb1eb7f5258e7c00e63f9199820396827c044fdd021eaeec0928101fb2f9dbd04428379f88e0cdfbd969ccbbe5a72177cdd7d69bb93a046a8ac97d55b4fc4db1a8ff810aa490b2a2c8d8dc288a9780e76c9ed77af7ebb6bacb7372c4656c59958102c3e67ed85e03f81ee1e86541647a2306d90cbdac03b4e7260d0f3574ce453516d7c0a80af093b1f713484abcc2991a98cf92ec4b65e60014ec16ab68b4e47e59774bfad0100c659fee9a4cbe55b6098db1e118e7110f4a6fa1d633bb93c3994b38250804648ebad7e3f41011f091e7efdafbed8e82ef3b7e15d2bccc4e68f628ff0839ebc44daf70b5e06a4c59816824afd073bb8a582c5ee08eafddf00cd91a9899e5c43d28f9d48da8129eb43b51ad25fc50f2a3fed0142c019c052588071bf5d32cb2492822b0e7e38dead7529f428b49a4a2ab31267a116d84ece11a2eb16827af48facbfe099796788a60ba098eca8e47c57dca01c69adee46710177b17ab34038a9b5ce9ae8cf337638fbc9dbbb3d91a323b4b84aeee0c92dbf7ea64178dfe57dc6d47554b83a0a6786b5d479507ea17b2661b54ec38034f1e6334a90ced9529be1279ff2faf88200d453d754283efa4a0cac68c57d3e18c4b09ec2688f4b1e06ed29d8be0dd3c9417f4de7bb0a5b4c15659b88aab45e4532acf6a746b5b604c903e2d60c0b56b0577e57f26f6f35269cdf48e085baf3d7ff7afd344b36e42e55206bebb3fdd71193c6cbf769d97f07380af24ba9ea08296ab8f82963c67e7f5ee2c8f8cc4874f906b835eec856af9b53d015bb26060e7e0a2971e293745195b73a540bdc17eb5e73b31738b052eb5bba9b078a554ecf593dbe91cd9c084f01cc3c6630a92601ce27ae98d1bcbf5ae52b277a585face3fed1233d4e4d55a3cbae82d15b45169d3b3b353c5c13bb347385b47f810d3a1389df429135cc99fab7ac9552ef33114c29bd006cfd28186e480df78dded72f314f47aa3c640382802c702a3c2e46e3f3823f0c62df3ff94b25de422bac499ef13b1635c2af452714dbfb2e90bb09df48fa015c4ea0244fd47acb2763f424dd761d3ba5c64d89d41ee2279da5a2ef7f6fbfbd5adb860f5948729f762512e5c16102cacff050bafc2a0f4d80e6afb9d93b093863d77727038557577dd670ea196441cdfd47986eb8da3e5798bb0cc6841cb343a230043d807b8d4e5ccd19f9e4f2e92d8480a8e249e1479f8d2a94d32fcfe9348163acafebdd5e2c0c296783794fc220703f0a9119e21609cda99556dde5b29c565d3176f1effde651a538fc5beeec095ce82762a62628f33274601a8691ac2feae33a12758e771f79456f58d10f829abe782e77eb58a6f1b3c628b79662a7884374081f3124334034d2771d27ad2141adb2a4480fdec8fcb2b7806473a968b1cc1a4bffc3d880025ce3ef7e8a144ae03496ef6f0d92705be2c756ef2d6f86f19f7d1a65b8ce58eed4067b201d9824605c1d34155a774f5fc95ee320c99aa27218a7bb6b06484f74e9098164081e6db63f0b1e2cdd185e5b4a43e28c30d9cbb025efa70793df771d908940c7ba5c1c2e30d67b3b21bec0bdba487117c10686aff98bfa726151294291c8c48edb592aa23caac7731e5b2c30e4f4e5bff862468a665ef76130a545f62f78dfab554befdc0e48e0a5c88797283a6d8140d7aa629f1085a88a4df1e0b40abcd9aed9dfdf5ab1b88f3261775aa375b9ee955aaf2731238034ddc2c083ce6c0c15c5ab8533cac581c16dc2fcc2b62190279dba62e8568df9d65f7c73647d6c43c4ba87fd88ab52f1e6d5ea8b7515554c16f0bab3c14b4d31cef7dd559067e9b19e76207ca7212e0370acf5d54e831b024d5f23afc730c32b4d2d507055917b75988221f4b0e844b7fce28fe2337e15941360bcf21fc9f4df3f5e0157d385bf3e78cff24e15618663697b16760714c34368b0376a197709c6d5d473945e46e2dd2e4278c3d146905a36e6ac609eaa2931729db9d4818e79b3c1db0875b29a1765df0f143a2033c1febdb03b7efcdea13c3f53c8189f821c1276712155d5f3f554576643b0d7e72fc977e27b85916deeaf8ff96ec31450be6e586b0fbf9356ccdd3d57e52cdf97703e114ecfe8da5167f152e3bb5e218a17f6f8b34db0d3145b5a9c837c966c353ea55c7c85a57696f1cc5e4b4c242d639e8d145c54519aee5ac4a4f8003d4e7fc36bb9ba508447443e027934e8d804eaa53622a1c129258365922f750c44e164e377735d0c196d1848fbea1c2b9ab67cf280a7b0bb0fe49051f5029d74f7d25450e44e3ce071b3b64d162d962f793fb4eea0d922497f64eb1b4e7386585bda65844dec304bc2e42795c60de7ed2b45e9fe5bc54d2efbe577b3ba958abc278ac09987d09ef356c10cedf9e21fd8dffa462378f6519fb29c9d67e203e9bfd446d068874d983ff213903c667c186cca60c1731a4bd93394c82336a32e5b529965510b85d166b62be0884bb28d35ca3bb735e6679f51f405def9ca47acb83f9b3a2fd308acc14ae4e91d81ec9b743ddf357ccad72f9a6e76697143cb6b381b2b7edf1c1dcf75c3af0500a84959ffa7277e720ff8497c7ad442a35043d814ca1ca2ca7c6693f5ae93ef47239d2fd9d7e4ab6f6eb9d6ffd06096d95c0da66219b446196ed966923c301549ec78f5bd4136432f962fdc2b8280e99d77eb9c5e02c6aa5db85f5ddf0798028fed689d97261f8cad90d17b3ca0a1546f9d2e583fec9e038aa1eb4e453f6269fb0bc71b427cdbe18f9fc8e5e1f6c6dc803b56b9d45dfe4180b99cf41cd7a6c75fe0d0a23b53c94b40a74e5bc13c8e38f67d6ab8f4ec3e11012baa00e849d24ef154b940e83fe417ef04cd50d9ec78c5f7ee2ab1a17fea6f8934a427dac0e0e48026099b64c0df2d46424989ce1720e8ee61d942df3505c6553632c99b2fffe44810d3c4d9fb3f7c3d4d7488cf255705d1edd5a13f2c76ceeeb0213709654525baa4b3378372eba6cac17529e1b671b84aa1b010ac703429ea14cb266c9547079895ba48f2863717e4a67335baf3d71e700e8170f5fa9fa6068b4fda3cafc9d517afe120752607b14f93eb012ef82d1b78120cdda9ec07846015043e77561db99d6b774a73caa30af61b49abf94523f2bbf01e64904a5f304263ddf5d653aa8d299668ecd94d9da3203192bf3d8c3c81e29e5456fa872e2edf9e837ea79410b5cecc7b42961022281f5ce0f72fd42f4a02bbfa340d1fcaa4a166e56c5430ad75a3f1d03a9a716a3092f23b05b78d5d8e5c7229f34b4907af85dd9fe1c9c03ac11554ddf1bfa995d7396f721c0d3ff8231afb4f3f1763608077b31eeb4efb05ef41946b1b6b6ad3bcb5564f733b1f444efff2517b772", 0x1000}, {&(0x7f0000001c40)="9d37e3664d69f9f3a274d244e8ba5b0e4b1445594d2fec84b5400f2641e051633f265f8f969f8d7c6c96881182d6901b60ed4cc5510e27d256b8805ea91c8d22da627d0bfb2e7743f0541e6a58e8776e329fc040ee7fce705ab11e9543800bc79df71ebe8296a6ddf34f5cbb5c68d8ec6624ff988574d38051532b6ffafe7fb6b8f8f61b6c58ebc6f4b3beb7d1a13cbbfb109c01f48f88052fd14ab3f2413bcc9fa9b2626924e2a55d9d73cb0d8f14a347a5cc7531b1d3", 0xb7}], 0x5, &(0x7f0000001d80)}}, {{&(0x7f0000002040)={0xa, 0x4e23, 0x9, @local, 0x3}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000002080)="845ad4c06d0d734ea218762bbfe95e962c65f7287aef128f050f324e08a6229edcf50b5125501d806acefd48f0a01228cbf7f5b7cbec9224873d4a70322048336a2ee5fab524f6940e0909d35643c93fc4f098d5af463fd93ac3ca60a5ec37ef5b98544e091c32790861e6edae39957ae672fb67e6fbd3bb9ad9957197b5b71e1220d3db53d333bdcee3cfb1c2b8e9d014a5e402d39a06086294f75b45e26ca9fa4b1a8c37f7", 0xa6}], 0x1, &(0x7f0000002180)=ANY=[@ANYBLOB="a80000000000000029000000370000001211000000000000c910fc000000000000000000000000000001c91000000000000000000000000000000000c95700000000000000000000000000000000c20400000006074800000003109b040003000000000000000900000000000000060000000000000001000000000000000000008000000000f50000000000000000010000000000000f000000000000000001000000000000000014000000000000002900000008000000030000000000000014000000000000002900000043000000b418611400000000"], 0xd8}}, {{&(0x7f0000002280)={0xa, 0x4e23, 0x3ff, @private0, 0x8000}, 0x1c, &(0x7f0000002600)=[{&(0x7f00000022c0)="acad4171075037b23855bb786d9e399e435e93b8c21e707365d022b7d77083730548585341d2d6c59484674239acd0179d0e931079306f8db43f28cbdb73f178484c33d6a89f2596b222e71201ca1ceb7a6f6cbe654040871a4c0af4621bae485cb38c24a4d595a41c310375180fd5d0638f45667fa3d2adb5abf216487909dfd457bd447521b0835df1721d5112fa832870dffcebc87c02d2e28aec8127d62f47f10a887151a4459ca7a351ac864ae8dc59ae834709f0ac290d54251ccd13286889662a9d36743e361097", 0xcb}, {&(0x7f00000023c0)="e8a7d34a7d8a453aa9c0d1db7c52473f9b683253590cd4b97a893f8410a188d9", 0x20}, {&(0x7f0000002400)="853c834ef67f543bba9e1ea65c52e69b1c56149121e9f12dac3b334b4b8ee8", 0x1f}, {&(0x7f0000002440)="2c019bf02f9f16b042bb5fa238e124a780b3210030fc", 0x16}, {&(0x7f0000002480)="8c98dd90e754ea71c96c92c0242ab0cd3a6126bf292d13a242c83916b0531b1ed72c994196c8b702d3f090c5a9daeddf08b895097d9ff6a908d67260d04db739d95cd0d23ff1c1952d782cd86d5cf5f40eeebe1b0f3cca0930df48bfe5a4068b6a968226114d601f2b62d0e919d7d7e518b8f8f656e40ab9915c5f31", 0x7c}, {&(0x7f0000002500)="aabf5c7aaa6205c0ed5722145c2f6cbb4936af59e4eee4bb437ba34ed319d2089f3fa8050af3f548e046e8116dd5d53e879cd84572a58e16eedd0c6a8907c246b01df826645e01aacb9c73454acdfcc79fb52e128f4a86a8d45668d28a3c5782d600997d3c811ce75f88910440077135c340cd9bb11bf9bbd44661825e228072b38f08b0629d7bce320e1248ab84a7772756c5b3c96ed1b5067ea9a13848c1d14a19f317fd2685a457bfb40f541fa21b56d086f745efd739be520aa3c81b65525b7e4257d8681057b9c8794ad731f2058ea95cd0d51b97440268043dc15dd59e2fa0de055c29a24c433aa06dfdfe0d70e2ff5c0f", 0xf4}], 0x6, &(0x7f0000002680)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x78, 0x29, 0x36, {0x16, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0x7f, 0x57, "c66ea5d75def2964c3edc6318d32e2d3580b7fbc73344a3be64d51047e0ce950184988da62b03abd02f76b6f5e47f29099975b6ee2858b02b65a0f3c6b91afc8d8f3276e56688a1c1d40b9e1f1714d7325ff17eee8f90a"}]}}}, @dstopts_2292={{0x1178, 0x29, 0x4, {0xff, 0x22b, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x81de, [0x2, 0x7ff, 0x5, 0x7, 0x6]}}, @generic={0x8, 0xffd, "ff012ec0d24fab5404fdfefeddf3e7e078a66cd9b2197d9a3678a8a63c005ad566a15e6f7ffa05033b59423a42decba70dba207b38fc10910adbc8a947e3866f922687ecb72906090e6efac562eb0ea2d990c69d2f893d458f0b73b61d511a2b470f989ea5922a47f8f94f16a25dfae0f291443f22125c6daa466c32b4c735febeb39641e4c91e8457ddf0c5348d8326f0c217278ff83e3e7b1a2f0c36a9859754e79b6f9927c2d0661fd2e08446362c0b49928db252ed3e1d5e168bc92d603c6f24539d8a731656e23e319de84eacba83227fe405d2a43c85932c1a2fcf9f30bc47aa1db5db0fc88d6ea76aa40f8f2636452a9b19fd1287610d797929177f50efb21a8fcfe461c2251631d36984f734fe2e13bd0a59f77faa6dd0883a3575bee01124a95bcf01dd22c77ce9aeae361e16343d108a79b6da4a9ddca05cc2517f37166a8318b4cb429f1d24742dee5aadc557da505b88df0c88b710320e23bd59bccda8c3c4b52e9405431bc8d6c06c71fcce07de8d7dcce89a039c173107b0555f34e91da7326a153623914463a7cdc4a71a836c5c7c0d21ec5c1ab123092cb2c6cec87451324581781b872d0b44196797b0f666e3df4ccb8eb71854ed85300fdc40ed06f376f45d38ef43900a8e12b702ddca2afb799d7b19cf05622a1a3080128fa23c583a1de023d2e431983bb8f04906d084806515cdcb84d917c9ec0220c0cda1987d9e89143ebb1cb5e5bac74728e3da88e5376e7ddf66d013c4dad26b5afe4501a60363e85df182cc1fcab21463f3d20a6f431686731e96b73a4d47a4033ea8ac0b23fdb7e93abf30dafb950b7262874d390f3d6f2e28b9aca4c2385aaef417aca006dce40a86b5ee25f603350028a65adc414f640daee957c83196d3135b3e87d893800842dc3ddff6fdafbd0f7fb0221ab7c375f1ffcdd827ea175feb2e073b9562851c90e7217d9d31ac05438d6bf7fd8e78d48debd1a57f266f61762f4f9cf90d2644c4decdbab2e76623a1207f0f194fe39ea3a421f7573f8cd06b981eaff31afef4580a953aefae4120432ab73235967898fa52df1bda1ed30cd7e57569ac43367cec9d655e5d00190d69535b54ea6adda6735447e5e345f7366c7b8164fbfc8d51bc1003b8617195568dd9e34bd34b40e87c8a0bb19cbffb6f5c0d1187e67f0ca4f51b893bc7ca747ee92ed9c2aa1eab5ec462b4e948594c84bd8cf256319ad162865ffb22319cf63688c1b2210597868751da0ef0239bb4e34624d10229de1e722b8a979705ff50ac07516bc9008f6dcba51f7d9aa2487ce6d37a03c8d6e5fa63921573fac78197ddb6c57f63c3756e0dd3a01930a05a8a68d2eb502fad2c237d17a8b4a866ec986c307e0edd19c6f6c04761f6ffc2623cc5588a3d274283651ac235e8859e240434eaef047b2c013beb5173bbb8441b6108ef0b9e08657a18f0b38280eb5ff3866abdce4c5948f80ec43305f253e48e0ff54d56594ecadfc71595b6e45174f5fdf91437a57cde9877a720c1732ed391f1a8e630153b86f02b63bb60bba4ed55af44752c9291edfc4cd728cf325228c9ea354b8bc657613433e91ae11899a40fa174689815d88ea018b0c95672bffd04075135cec359256980e379d4a72ebad5af18d6192f414640649190c241d1e54da353eab0fe77edfd465705655057963753ef495bc73dd71355288b4bc218bdffdc46d1cd711f69a0597894898f3e26a48f8a9179462d71fc90312c01007cd9fcbfacc76e05e6709acf389d8440ecfd71204c4508ac57de06f856198f0d0f6fb684ef62f22a9addb21dccd272f058e9f021a4955a039c97dd4ea5dc8528ff12cf55fd9a0c6a46666f3cd2a301c0a43a4bb2b116cd66729eae7e6bb9b7ad3c9101c6699133e69997dc8dd0b2b5fb63dc14b234d29d634bd2fe8926b69b7c95c3c1628629eb953ed4237839748e2d905241d75388a7dfb1c23edba63d61c7fbdf9b460defe9fd10d41cf1d4c1cc0ed430935a942b181996a56552fc6e858643edb5440b26e7a115c052e459ad1afe099b59cb8d81c472a996985c0bb9ba4e98b1e2bc117c3cb1f9d8a876db88866ef3b4b336650883ef77b7f028aa53a279b2dadb87d6af627b700b906ebcbbc399057c29a9c7fd33370575de6574571b1ee3347a58f4c749d1833dd8698a6c8c8ad59107933ab4e255ee0f4cbff16deba391b37459f390e68ab0c8ba5b664e912d8eebaa3b857ba8ea840c5c3084349900820677110b3b53f4a8f603c841a1a23d4c609635b05896ae139bd2c8de436d6e3f7f3d1da14070a5c8c5eaef3da83686db89492c1f547544de37e2e8ab3e67e2121f623625a9e2f6a9918954715d22b33bf1dc945a459565dba94cc4119634fae265223b41c541549f87d0c80d5d292973999cfab937b8798f110c290d28df6c26d2868e1618481bd3ddc98176ecd253f3a7525624a991143f99f0583f31fb466cf7bb056b33cbdd15e138d4a17ffad0348789f35ef0dea4c1b07022ff7ffd957e521f7d9477fbaa2403bc356bd9a873b41b8769a24f8f86a8979301f4d52ea447d46e4e64082602bf8f69c5537bfc2ac93543ffea6cd713fcad59ec87684e0e078bab5603f3808f5a1edb95cd087585fdf426c35713e8abd3afee59e1d0aeb2ac03e58598a282308cc5b99f9a5134c65830a0e2b2fc430d3ca6148fccc3d03698abde46c62cbfbbaa4e73b58bacfe0b1c5ed1134df2105594570ff50e280b5e453cb745268e2c2ffcb8361d76c79297d7f617570dde298c269e11f77ea9d9bfed34fb2323a5cdf74db389459e9b566fbf67aad917bef8fadd12b870bfd8b4cd328eee60460ea7a1e95c8ac5190c40cf76ff525030844d62827b33344226053ebeeacc941a4691f4641494cacf197d0631d8070000000000000060c7ef2527402597d799e5de00885f510d6e8a7a442158fb0ad356e8f89ebaafb71418f6f4ae04a5bd19ae4de8471f8c1b15a74b02538a30347254372a8605398450ede92758ba784c1a8ba0e46be9ac1879c56d5a8343b496203ac0f87140d885aa0c86f4c57acc8993739887f3d5f7027bdd5df15f2143e763c16f1643c8077ef7ea25ac8112936fdc4fa0e7b94b971f5096b06558bfdc72689ebc3d3fcacf801560e436d2161514b9977e84f151108e4e9fb530b54836601a7799e9ac2e309b3584057d698e219ecf83f9b4a18b676629cde18cf0bf0f2348a5db73834b36209c5b4e072235993a931571d8edea524441926c5079d75ae586ccd3bf2005713da1f3ae86a3d9b76734c54774be820a3ed7b4c2791be878edfc4277f3402150a94da085c0b0191300760621c50e7ff283589312c729368e991c098df1aaf790af1b94a5e180a6a9aec8ea50e24f89c16ff029955cdc7342e2ef691a278d027cad0c4ff412a258b102fa28617db700a99dd92508b1befbbdcc74004aac83a02ee38ae32b6bf8eacc9aea5742fe7162a49d4c005fabaa753957c6f0374cbb6839f100214562125ba4620a0b21edc904836f1b6695ab8e02b7f7c6b5da8bc19866a05b1170ebc960267d2747365594faa2e627e182119ac76035ebc2934f48f99a5d7552d83fd22d765549d7d10a703b81539664ede6de194cf048723efdff8cfb4ac2ea6b2b3daed27d082b9aca0cd48fb6db3d4a1e450b83907ff3bd4152d13a7afdaf688faba9d6d8330aea18dd9cac15c359e15537af6b6330fb54844789b326c67e985185140223b3629b8156be8c5a7e3512ac1359c456ad21d5f5220ce9895e1651d681734bdbc8ce6aa286de10ea378793156a9d638559e321003766b7bdb5cf1ab7b563b9d67ac1e992cb10bc448bd5e57ff6291f3fee2281c804aae6f58a3528b86523c254e266d5a3366780b3b66e7bc9a6c7f1c49d8403922da1892e7ba15b5a255b8c4b6b5f3cce60b89ae17eb902d00c0c478a3f965e7a1e9b4c8e03232e363c848ca94c9adf19eaf325b730feae9fdff3061411d540bc96b47a9ac0fdf32d0588c6f6304f0f1a4ae9781a2173740fedf5a21446f83d6fc43ae1bbb3ac67a9531479a75fcdb9386447df3c594fbacd1f7e0f7e6d6413bd48711260038ad1eaff79a2d3416e9acdf4b832ce1228e0f989ef8621bc87c7fc2e4e2dbbb586cac1f81bf59593772d4ac03d208f6cbef961471e3fc2abc4d7885e8bbc48432f7e9eda8c7aa82f8029ea1050c89744ed44fdd5e007b394895bbfd8d930b766259fd7e82a3e04d151c519d71e2092042ca805b1befd8e62a5b2148d02ab801e2158c9ecedfe02ba92d73e625484521956e227004cb50bc06f8f9c24c5a925fbbad9a632e18195cfdcc338c49a30f739795d86fd2dbbd964b5d4d01a0c3987ca8ba211a9ea14f3dd1559afd8fd492628c2b4ebf4bb6351b8c8b6af765b5a63e3819af136342cf8a8409b2497a6bdf2557b0c9c9515a7c8ef586716adb6201e0f86c61016f6501aefa9e56753ac5ff83f1dd6c13272b8a0d3cd6ae490de245d0cc0fb5d02b489512e90177ed86b984b01c0095b40ebd837e764b2a74870a6b03b1694d2955208589f4870ec4bb86c1180f39be2cfd5e0fff0b93350b08ee91a1c58f067b0377c89095216b63e0debddcac0e9f58409ff3327dd3b4f78ed70f613787783cd80289f1540b69d4b1595c0ebbb85dd22cf0eff39214a95f4326e3c087d0fb8a1c23547d7d02cd327faab291b24da1994546349997ac3b8c3fac2e95d5c3bb16863025e0fcc3587878987022e927c66ae2eeea6217f9f882b7958a44b844fff5754f731b27063982d2f5e2a70f0c92430cd93a61744b934f5e434c11684b1492022bef462cf72520ad26e501dbe25a5031d0b61ef30667c1bce461ff5334bdc49f868e9efe2e8b4ce08f946d080cfe853a5c9cf4a6c00dcb9b9274cf7686a5d6fb9933704a19c16ef27ad0000f6e3b451a4d075bcb305b95e5d18709c51dd9b5c71a9216d8b862709e25dfb42fc52795637593810d04e44046cc9a0639581e210799f92aa5428fc8c997dddb40dd9bfa20c42d464ecc81428085dd9f06a595f699d783e7f620b5ae6bdc9b3294c7ae599a976c9d1339004ac58b1124fbafbc243d258349b5f949ad7e38cc7150562ed6f65f26404c1e0c3893209a624865c6953ad30a939f9be02dcb0cc71fa2dab504c0d60b7a0420d885dd75559e54a97fc05b2636283da7d7ecf26db6e3a740aae76dcfb23a936a08c5e445a39dcc0cfcf901811e87749e03e7965f46fe2aa1f3f98ac4a20b2a5925e10296cddc86a71061d7f9d7210e590988276ac7cc704040072178182906bb84acd0f46bc86c606faaaa1bec01fa21a5965bd56588d73120f0d15117cefd86f17062e3f6abc3d5a542ee08887c9284e26b09db7ca616df0c2cee9b087f75dfc706c334ab8f349e06e12aa64e11cd4d914cc951addcc8b4d2834499d68f7b3b2bbe8cfd7e60c1a0100000000000000eacf1198367cd339b07fcb42067f12d7ae0c8847daa03f8d892f6d980507a5bb5f2cd81ff3f561a9637e3862ac69ca838eb2344becd5ef0ae64d1381543888cd1635830901707dbf632b5068fcfcdc46934078920f3acb76257212783a0aefdfbd2716e64688cb59277dfd7ebf336817d10bb8d20940f331aa76938fdefd91153dc08e6f54ddcd918fa2d4b026b5b6ca1a857cb737c300794d2522310ce45202bec31c3b60637aac6b0a18b603aef0851e3627acdc4b8cd84f5c0876fe015fd78c3e1f007410ea8c26aefaf7b0d2f4c90407e0d7eaaf32ccca607b6120"}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x3, 0xfd, "3112e3202195218d3772e505b72faa26a99ade6b0af37ddbbc9e46cb1ae25e940a62764e43506a2def3bdb399911551bc1f96bd5b0d43ad43ba605248fae184d2b3cb06d69f46ecf873536f8e35fbb09cd1cb0a02cccd6de7470fefe162169f07ff7894b266b18d1c38e341c502b7982a7fea99d985b71e16a240559253f2d6495d805dd3fccd0a2475a1f8c6b0f27c27b2a2d27f82c2619adbc8544046d9f81f683f4477f3f9f9e9b98e4c83a27658d94553713a9903348e9ab592672370b28c3011d54b61af28f1c0777753c234a7bfb22299f7bf7d0c3989c1c1bbff6ab18e7095297b0a7f1369c678cdd3c7b5c93442d986ac0b78461877e8c54b1"}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x6, [0x4, 0x9]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1208}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000038c0)="8cf2a59b060117e9aaaaf3cd0ed0aa416ef0be18d98e875fd6a192893ecd829c1d5014c56face43d17b91997df7f92c74447e40b30d5940d952a09670f56e8e35bc4b1ef89dcf94de90529af6f097d69b2fea598b2c95cd22ede0c82fa2bfd7b664e15ee1472a6faddd797f17cbbd84ef9a85a330f53ec9577d82ccf4c55d421a5995446fa8a91defc5133f0f02374c17bbb93f1e95d7d3b3c3c274495d81aa5034eff40954ac77979e15c0792c8dc7b6aa55c0ff0a021ac77e85028c6e4b2c50bbc69abce0afe67f4544d208bd20ade3eb64f552b015dee6d84e136b3", 0xdd}], 0x1, &(0x7f0000003a00)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x2, 0x4, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xff}}], 0x58}}], 0x7, 0x2004000d) r7 = syz_io_uring_setup(0x73ee, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r7, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) shutdown(r6, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x4, 0x0, 0x5, 0x0, 0xf0}) 4.970449907s ago: executing program 3 (id=4028): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000280)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ede000/0x2000)=nil, 0x2000, 0x0, 0x85, 0x4000) socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) syz_io_uring_complete(0x0) sendfile(r7, r7, 0x0, 0x7) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x22, 0x9, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007329c5ad5fdcaa41844dd311efe5696c1af48007f19196a2455c2214c4425908c2e485061828a480", @ANYBLOB="a545a09357c6046babe6a115d08b33e124211c06776efaeafc125c9acbf83de4415c9a1055ce9532d918eeb2625b81e5620e08fb2a4a9a5c54bdf4ba8b3a2db6039859431840d76206c1874720b072b7e4dcd078af53c7b391170cd402df6913746f70a463e9386d76c83589e463f396affa3af13cc0bb6fe35e8ac72d74e4d777cd25213caa07408b43f2dc7bbc0281279131178960b30d1900f05718c57c00111cea5e1b42e6859fee5786f17cd1edd057b972209bc9de50a628892c8061c850319c2746c9df17327adc85e56b35246e765a57f5f1", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000e2ff00000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4.922362956s ago: executing program 6 (id=4029): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904340102d469e7000905", @ANYRES64], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "e706d30bd224010000000000000038c2"}, {0x0, 0x7, "cfa1e7ab1a"}, {0x0, 0xf, "c600"/13}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x10, "73bc2300ad9d19a3000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x7, 0xff, 0x100000000000008, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x2000000000000, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x3, 0xff, 0x8, 0x7, 0x4, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x239, 0x3, 0x2, 0x6c3b, 0x4, 0x8, 0x6, 0xd6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x0, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0xffffffffffffffff, 0xe6, 0x200000000000101, 0x5, 0x9, 0x10000000000066, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xb, 0xd, 0x9, 0x27, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x10, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x90, 0x5, 0x400000000008061d, 0x3, 0x9, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x8, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xffff, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffbfe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000580)="62ea962a0c9751a5c0a06f330a7d4120d42d5be44fd27c99a247", 0x1a}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0xa}, 0x20) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000080)={0x60, 0x10, 0xcc, {0xcc, 0xf, "b66ea5469b0e9e854d543c2da168166e7b2e36ef08b4b2a5d4c22119a102ec29eb634f7651a44c9456562932df270cb4a67057bc9bb8f3ab88f67858436c4f3bf1136d750e9c4b74c5098edaee67e69132b2a5389691d2bedc1a5d9b71c72c951b6be10cbe9b0de5b5cba3883ea8a1aaa20528ae7340388b6ba7bb73c859fcb92ad2a5964d600b4017119a70dc3cf3e585da8cceabde06f26e6feb8d8c697745584f33ecf71a19c534455af4e55171fa28348a02fa9863ac4961e7008549c9ffddf1a6b036a1f26d8a16"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8c, 0x1, {0x22, 0x7ce}}}}, &(0x7f0000000380)={0x9, &(0x7f0000000240)={0x0, 0x13, 0xe, "b2708cf8f208b207ff0e86811ab5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000300)={0x20, 0x1, 0x23, "7f04d5df56d54f55189750cbecff0077756751fdd133841712befe6567dc84fe79fcf8"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, &(0x7f00000001c0)={0x20, 0xf, 0xb, {0xb, 0x7, "e8fb5ac840cb4288f6"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x20, 0x6, 0x9f, "186e579e17f85145566e1e39cd35e093b4ee3c128ef8872020fc16b0b9b4d6bd09c9d26b973e1bbd78f1b8e93b908697caf0140799601b0c51cb25e2a77b3607b016611f71a22a7468c3fd3d45655f2d2a0879d19423ffd85a4bfb738051c3b9dffc97db68bf7bdd656191df9939f0d1d1fea60b997b02ab7506d938b85266aa622468352e394d7df0be9014d25fc2f7a73f523ed2f2db292892f30e40f137"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x86, {0x84, "f781841011cb4c87307e2869ccd864dbbb5aeb7e3e3760ce58412df0c6f2079df0e01b9e87671f65a05fce0063025e7444978b09b23ccf51d4dbf79d9f6df2e390eae85f84c38e6cb284db8435337e4af1d6db5fe1a60b308e1ec7b1974a711277d707d53d304aabf67eed00f0f7aa4f3d2e25b568a8a964682ddf9724966f7f79464771"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x1}}) 4.310865153s ago: executing program 5 (id=4030): openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104200000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x9}) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000006480)) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0xffffffffffffffa1) 3.686799884s ago: executing program 4 (id=4033): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @loopback, 0x9}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) (fail_nth: 32) 3.42719311s ago: executing program 1 (id=4034): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) r2 = syz_open_pts(r1, 0x80000) r3 = dup3(r2, r1, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x5411, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x186, &(0x7f0000000ec0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0x3, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "91f27b"}, {0x5, 0x24, 0x0, 0xeba}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xc, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x40}, [@mdlm={0x15, 0x24, 0x12, 0xfa8e}, @dmm={0x7, 0x24, 0x14, 0x8, 0xe}, @mdlm_detail={0xf2, 0x24, 0x13, 0x2, "1bf408acd7797ecf63c922114c8e859f63247529602481fe26989a21adc519d9acbb72f77598a8365881e322a6b2ea3d795f9bd51b4ed810c57ce87bf531bace1bfb848d5653f58f69342cf909c48d10c8d361bbe15b859eb3f631f4f28f076ecc9f9730dc4bb94060fc63b1b3a46e8d58f3c8ed3407cf7599541f323b1a9da857593a446864f7c04d8e577f8a857237ba846dc6e6d9723a72914adb0d060e3b062663eed926513534effbbebe7c6251a8de894d02859cbef5deb765741bb4038966370b467a356685d1a899306f9d5c3cffde3e427e6f49425d87a90e0c83a12f156707d1a098b12359cb87e986"}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0xcb, 0x7, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7e, 0x2, 0xc4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x18, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x4, 0x1}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xff, 0x7, 0x0, 0xff, 0xf9}, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x85, 0x2, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x1, 0xff0f, 0x7, [0x0, 0xf0, 0x30, 0x3fc0]}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x20, 0x23, 0x85, {0x85, 0xf, "07b6a597fa44db7c63bfc00bf06602f9cba43b3363b6230c286fc9286ec3f17f9a8263aa7a5c2e4cebf383812bf6da24cd06be45173e937d3afbd3f443dc6912be14fee4bbfe6ffd217d1cee3410654a93730b190a1853606bebcfd372e1933e4a1fe00fef785386c1921faa6ad129ec273db70274152784ba02eedbffc85ceff5b872"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001140)={0x44, &(0x7f0000000680)={0x20, 0x0, 0xf1, "e4b2db04a861e5884f5c7158d6e4d98464060dd1a6ec9aa06bdefaea494e829b71dcba8037a578b28c99facd2ffc3882a4a1e76e29ef2a68edffa14e7e68c71a7a53952a4856fed01156abdea01e58b4f98f02cebd58b7c7f67cab39ed6743681db0e07f6d501a0219a9070003764399c41912323a5cf835bf54f98764c87e64093c4155f02293e1d8da750f7acd3a05111e709ae887cba558df6684aac3cfbedc00d2f3bdb9b5f5fa0006225b0c412b9fa757f73b985e04248249a9e882569bef86e324dfd3c5eec25e22b060c029fb3948315b854e470961cf45177915fca8008b83caef0be26700e7f078a95ac99a6f"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0x3, 0x9, 0x1f800000, 0x7fff, 0x2, 0x8000, 0x5, 0xdb7, 0x0, 0x0, 0xfff, 0x7}}, &(0x7f0000000dc0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001080)={0x20, 0x83, 0x2}, &(0x7f00000010c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000001100)={0x20, 0x89, 0x2, 0x1}}) r5 = syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000a00)={0x34, &(0x7f0000000780)={0x20, 0x7, 0xb7, "44dfb541f6972818d1cb5d1134dde0f13ba7fcb9c2d4483041deb1ebe2f08e3dd7ea93f0c516deca8480b2871d942182eed0e9fe4bf95297c9077f08357d35ae922eebbdc565c87b16fa2c342c354a1c04c39b707f95c9834909f697117fddc0ad685c25f122033184b7a0b107e3e08af9669a4741ea4ea0e5717d465f46ae82961edd82b4a534b4b52fe527a52e00e809e210984cc3ff75c61c50ee46b1fe1c20f2d25408453b041ae66fb942ba988c1535ffde6e1826"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x31}, &(0x7f00000008c0)={0x20, 0x0, 0x3e, {0x3c, "18b6c9527328e59f01dc00e812fcd057027cf00920ca3829fb35a16a192243e5a583a8a6728f4eae573bd92bc7cea3d2e7a52438b3d6df547cd2015c"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x40}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0xb}}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) sendmmsg(r6, 0x0, 0x0, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f0000000080), 0x4) (async) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000a80)={0x100000011, @multicast2, 0x4e24, 0x0, 'none\x00', 0x4, 0xb6bc, 0x7}, 0x2c) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$uac1(r8, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "7c9e349ec8cfcd868d633823995129450dc0d855251d2d9a8c7645061bc82f55e13d87852f0ffd9f5d7a953e660bfcb4b9d7a247a05fef3ab4160efd1ae3a9fe089f7f9fb3105db61c89bce5c56786441337e707d72e4d796e048abbe74c9979dfc8e19ae3ba54858ccd22615347f064fd1150f7576fb15ec05f30ec7a5e8abe257befd3021968976d51d8877192335475449a76ac788a4a945e38cf5575893fdfa79487cd00dbadfad502e3b26fe5e0078c162774c2d00bb6d87221e59421557a54de4b9cd1"}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c00)={0x0, 0xf, 0x4e, "a14d4b9ffda5293bfc6d8315ebfe3c648d46fbc736fecc668281240fc2e01020ec769774ea4774a49d2d9a768a15a088d372496495209a8a3a95b790e5f517f3dc6b060a0d0c40e9fc9c48e10eba"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000d00)={0x20, 0x81, 0x3, "00b7eb"}, &(0x7f0000000d40)=ANY=[@ANYBLOB="20820200f25e0000"], &(0x7f0000000d80)={0x20, 0x83, 0x1, "84"}, 0x0, &(0x7f0000000e00)={0x20, 0x85, 0x3, "e0ea15"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x83, &(0x7f00000002c0)={0x40, 0x6, 0x4, "6ee6d2b4e4521874610894283c302fc5be2d0842499f257b381f7f7782077b936241c2e19d0b7b47c79a6a200a6de292dcc258b1c967b8c6a406793ec35e613f95f9c894e467824ce303c9c193d44711652cc2a97766350831c59493094be55ef7cd328b9a0e30a341be60ef2134be30910af2ff3ab2ddd59b14bfdb158774050b844da04bac9fb478d2d9d9c1ae5ad4c2ed4efb08e8260c136efcaa3c0d4a07bf17515c4f654ba1f24053a2a291824b5e7502a811ad8366c277b2296520a8f884a9c12e101ae62ae7ffc7f594f8c29a4fa0d1c3"}, 0x0, 0x0, 0x0, 0x0}) 3.322546989s ago: executing program 4 (id=4035): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4f, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d4a"}, {0x6, 0x11, 0x0, 0x0}], 0x2}) 2.796697251s ago: executing program 5 (id=4036): socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0xdfffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x100a16, 0x18, "5cadf0fa69ebc3b9fb0ac43c5c130700e5d962"}) unshare(0x1c040300) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x7ff7ffffffffffff) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 2.301092261s ago: executing program 1 (id=4037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff0000ffd0b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.162571297s ago: executing program 1 (id=4038): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000240)={0x37, 0x5, 0x4}) prlimit64(r0, 0x7, &(0x7f00000003c0)={0x0, 0x3}, 0x0) timerfd_create(0x7, 0x0) socket$unix(0x1, 0x5, 0x0) 2.162185777s ago: executing program 1 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010000000000080000000a370000", @ANYRES32=0x0, @ANYBLOB="00000000140001f8ff689410910100"/24], 0x30}}, 0x20004004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c000100706025534ca820708e00028008000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000500)={0x0, "5195e9bf56a6779b1080348f1d22d33d"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001500)={0x0, 0x6, 0x93}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001900)={0xe, 0x0, {0x8, @struct={0xfffffff3, 0xebd}, r6, 0x4, 0xfffffffffffffffa, 0xf, 0x1, 0x8, 0x56, @struct={0x8fd, 0xa6}, 0x2, 0x200, [0x7ff, 0xaa, 0x1, 0x3, 0x10000000000]}, {0x6, @struct={0x5, 0x7f}, r7, 0x4, 0x8, 0x9, 0xd, 0x81, 0x0, @usage=0x6, 0x6, 0x6, [0x8000000000000001, 0x8, 0xc, 0x3ff, 0x6, 0x6]}, {0x7, @struct={0x7, 0x6}, 0x0, 0x3, 0xffffffffffffffee, 0x1, 0x0, 0x7f, 0x1c, @usage=0x3, 0x7, 0x4, [0x8, 0x7fff, 0xfffffffffffffff8, 0x200, 0x6, 0x5]}, {0x5, 0x9, 0xfffffffffffffffc}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0303000000000000000006000000040003"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x2, 0x101, 0x6, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={r11, 0x3c, &(0x7f0000000280)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x9, @remote, 0x7a9}]}, &(0x7f0000000240)=0x10) r12 = socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f0000000480)) writev(r12, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040), 0x4) 1.950782574s ago: executing program 1 (id=4040): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x22, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x40, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x20}, {}, {0x0, 0x2000000}, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 1.835197126s ago: executing program 3 (id=4041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = epoll_create(0xffffffff) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x4) sendmsg(r1, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000000240)) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 1.746652942s ago: executing program 4 (id=4042): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) (async, rerun: 32) munlockall() (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async, rerun: 32) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904000002070101"], 0x0) (rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async, rerun: 64) syz_usb_disconnect(r7) (async, rerun: 64) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = syz_open_dev$media(&(0x7f00000001c0), 0x7fc, 0x40cc0) close(r8) 1.705574236s ago: executing program 6 (id=4043): socket$kcm(0x2d, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x42b42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 838.948144ms ago: executing program 6 (id=4044): add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0xffffffdf, 0x4645639d, 0x7, 0x100}) unshare(0x28020480) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0xfffffffd, 0x3}, {0xfffffffd, 0x4, 0x90009, 0x5}], 0x10, 0xffffdff7}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000180)={0x0, 0xfffffffc, 0x20, 0x0, 0x333}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40011) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680), 0x0, 0x4000050) setsockopt(r1, 0x84, 0x7f, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, 0x0, 0x40) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 643.550996ms ago: executing program 6 (id=4045): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000e7000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000003c0)={0x1, 0x29, 0x5, &(0x7f0000000380)={0x12, "a0acac25062cff010000000000000014e1539402bb225c00"}}) 542.777791ms ago: executing program 5 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0xe, r2, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000000000010029bd7004ff08000000010200"], 0x14}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 254.570472ms ago: executing program 1 (id=4047): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a, 0x0, r0}, &(0x7f0000000500), &(0x7f0000ffe000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_eeprom={0x43, 0x1d2, 0x8000, 0xba, "98d38a5e3f3fffee4214ce01ece7578f23fd5022f7209a7e449d8580de439d1a285450817c90576abb4f4b54eb727299efc6e330672a6ebcd352e6266427a70307754c3b2cf55b7358b671f798214cff305550a011fcfee889e602744cf063aee13b9ab477696f4353a30cf9d17335570168d0a96428b802be61807ff0d3b5ee802e0377e8863b5d5d393a744b67161654451f01f042dcfce899a147a743ae88c054072102de04d0869c921381e18a246da45a0c5ddb6fb54431"}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a0000000000000007000000186700000c"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000200)=""/62, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2e, r0, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f00000002c0)=[r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000480)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100633665465100028008000140000000020800024000000016080004400000000c0900010073797a"], 0x74}}, 0x80) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000f5ff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20088844) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 95.275649ms ago: executing program 5 (id=4048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff0000fff3b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 4 (id=4049): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x70, 0x80000, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) (async, rerun: 64) r4 = socket(0x15, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000200)={0xa, 0x0, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x808, 0x2}, 0x20) (async) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) (async) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x802bcf, &(0x7f0000000180)={0x0, 0x3feb, 0x2000, 0x3, 0x1a7, 0x0, r5}, &(0x7f00000000c0), &(0x7f0000000240)) (async, rerun: 64) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x100000000, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x0, "4b9c39f800000000000000080b0de7611ebfeef3cef83f51fdb40f0aeab9e862", 0x33424752}) ppoll(&(0x7f00000002c0)=[{r0, 0x2120}, {r4, 0x404}, {r4, 0x107b}, {r4}, {r5, 0x8000}, {r6, 0x2d}], 0x6, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0xfffffe06) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) (async) sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 32) recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): pat=0 ip=0x7fdfa118ebe9 code=0x7ffc0000 [ 962.713672][ T30] audit: type=1326 audit(1755338942.166:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa118ebe9 code=0x7ffc0000 [ 962.807276][T19295] FAULT_INJECTION: forcing a failure. [ 962.807276][T19295] name failslab, interval 1, probability 0, space 0, times 0 [ 962.836458][ T30] audit: type=1326 audit(1755338942.176:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdfa118ebe9 code=0x7ffc0000 [ 962.960222][T19295] CPU: 1 UID: 0 PID: 19295 Comm: syz.5.3530 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 962.960254][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 962.960266][T19295] Call Trace: [ 962.960275][T19295] [ 962.960284][T19295] dump_stack_lvl+0x189/0x250 [ 962.960312][T19295] ? __pfx____ratelimit+0x10/0x10 [ 962.960336][T19295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.960356][T19295] ? __pfx__printk+0x10/0x10 [ 962.960378][T19295] ? read_seqbegin+0x1ac/0x250 [ 962.960400][T19295] ? __pfx___might_resched+0x10/0x10 [ 962.960418][T19295] ? lock_acquire+0x5f/0x360 [ 962.960444][T19295] should_fail_ex+0x414/0x560 [ 962.960468][T19295] should_failslab+0xa8/0x100 [ 962.960494][T19295] __kmalloc_noprof+0xcb/0x4f0 [ 962.960517][T19295] ? tomoyo_encode+0x28b/0x550 [ 962.960536][T19295] tomoyo_encode+0x28b/0x550 [ 962.960555][T19295] tomoyo_realpath_from_path+0x58d/0x5d0 [ 962.960577][T19295] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 962.960609][T19295] tomoyo_path_number_perm+0x1e8/0x5a0 [ 962.960632][T19295] ? lock_release+0x4b/0x3e0 [ 962.960656][T19295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 962.960681][T19295] ? rcu_is_watching+0x15/0xb0 [ 962.960699][T19295] ? lock_release+0x4b/0x3e0 [ 962.960722][T19295] ? vfs_write+0x956/0xb30 [ 962.960747][T19295] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 962.960779][T19295] ? lock_release+0x4b/0x3e0 [ 962.960804][T19295] ? __fget_files+0x2a/0x420 [ 962.960819][T19295] ? __fget_files+0x3a0/0x420 [ 962.960834][T19295] ? __fget_files+0x2a/0x420 [ 962.960849][T19295] security_file_ioctl+0xcb/0x2d0 [ 962.960872][T19295] __se_sys_ioctl+0x47/0x170 [ 962.960894][T19295] do_syscall_64+0xfa/0x3b0 [ 962.960919][T19295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.960937][T19295] ? clear_bhb_loop+0x60/0xb0 [ 962.960956][T19295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.960974][T19295] RIP: 0033:0x7efd8738ebe9 [ 962.960990][T19295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.961005][T19295] RSP: 002b:00007efd882a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.961027][T19295] RAX: ffffffffffffffda RBX: 00007efd875b5fa0 RCX: 00007efd8738ebe9 [ 962.961041][T19295] RDX: 0000200000000140 RSI: 00000000c01064b5 RDI: 0000000000000003 [ 962.961053][T19295] RBP: 00007efd882a1090 R08: 0000000000000000 R09: 0000000000000000 [ 962.961066][T19295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.961078][T19295] R13: 00007efd875b6038 R14: 00007efd875b5fa0 R15: 00007efd876dfa28 [ 962.961098][T19295] [ 962.961119][T19295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.970844][ T30] audit: type=1326 audit(1755338942.176:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.267623][ T30] audit: type=1326 audit(1755338942.176:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.353908][ T30] audit: type=1326 audit(1755338942.176:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.394899][ T30] audit: type=1326 audit(1755338942.176:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.512546][ T30] audit: type=1326 audit(1755338942.176:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.654876][ T30] audit: type=1326 audit(1755338942.176:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 963.724771][ T30] audit: type=1326 audit(1755338942.176:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19287 comm="syz.4.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdfa112add9 code=0x7ffc0000 [ 964.056044][T19302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 964.062712][T19302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 964.082900][T19302] vhci_hcd vhci_hcd.0: Device attached [ 964.318189][T19316] netlink: 'syz.5.3534': attribute type 4 has an invalid length. [ 964.351910][ T5914] usb 46-1: SetAddress Request (2) to port 0 [ 964.364884][ T5914] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 964.386447][T19311] vhci_hcd: connection closed [ 964.387170][T18264] vhci_hcd: stop threads [ 964.397470][T19316] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3534'. [ 964.420051][T18264] vhci_hcd: release socket [ 964.433418][T18264] vhci_hcd: disconnect device [ 964.945887][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3539'. [ 965.019883][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3539'. [ 965.489445][T19345] FAULT_INJECTION: forcing a failure. [ 965.489445][T19345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 965.574972][T19345] CPU: 0 UID: 0 PID: 19345 Comm: syz.1.3542 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 965.574993][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 965.575000][T19345] Call Trace: [ 965.575005][T19345] [ 965.575011][T19345] dump_stack_lvl+0x189/0x250 [ 965.575034][T19345] ? __pfx____ratelimit+0x10/0x10 [ 965.575057][T19345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.575078][T19345] ? __pfx__printk+0x10/0x10 [ 965.575098][T19345] ? __might_fault+0xb0/0x130 [ 965.575123][T19345] ? __pfx___drm_dev_dbg+0x10/0x10 [ 965.575143][T19345] ? rcu_is_watching+0x15/0xb0 [ 965.575162][T19345] should_fail_ex+0x414/0x560 [ 965.575184][T19345] _copy_from_user+0x2d/0xb0 [ 965.575206][T19345] drm_ioctl+0x58a/0xb10 [ 965.575231][T19345] ? __pfx_drm_mode_getplane_res+0x10/0x10 [ 965.575273][T19345] ? __pfx_drm_ioctl+0x10/0x10 [ 965.575302][T19345] ? __fget_files+0x2a/0x420 [ 965.575321][T19345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 965.575344][T19345] ? __pfx_drm_ioctl+0x10/0x10 [ 965.575369][T19345] __se_sys_ioctl+0xf9/0x170 [ 965.575393][T19345] do_syscall_64+0xfa/0x3b0 [ 965.575421][T19345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.575439][T19345] ? clear_bhb_loop+0x60/0xb0 [ 965.575457][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.575474][T19345] RIP: 0033:0x7fe226d8ebe9 [ 965.575492][T19345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.575519][T19345] RSP: 002b:00007fe227c82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.575541][T19345] RAX: ffffffffffffffda RBX: 00007fe226fb5fa0 RCX: 00007fe226d8ebe9 [ 965.575556][T19345] RDX: 0000200000000140 RSI: 00000000c01064b5 RDI: 0000000000000003 [ 965.575569][T19345] RBP: 00007fe227c82090 R08: 0000000000000000 R09: 0000000000000000 [ 965.575581][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.575593][T19345] R13: 00007fe226fb6038 R14: 00007fe226fb5fa0 R15: 00007fe2270dfa28 [ 965.575613][T19345] [ 965.903045][T19348] netlink: 'syz.1.3545': attribute type 2 has an invalid length. [ 966.451443][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 966.479514][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 966.538964][ T5954] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 966.588683][T19374] FAULT_INJECTION: forcing a failure. [ 966.588683][T19374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.608590][T19374] CPU: 1 UID: 0 PID: 19374 Comm: syz.3.3555 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 966.608619][T19374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 966.608631][T19374] Call Trace: [ 966.608639][T19374] [ 966.608647][T19374] dump_stack_lvl+0x189/0x250 [ 966.608675][T19374] ? __pfx____ratelimit+0x10/0x10 [ 966.608699][T19374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 966.608730][T19374] ? __pfx__printk+0x10/0x10 [ 966.608758][T19374] ? rcu_is_watching+0x15/0xb0 [ 966.608778][T19374] should_fail_ex+0x414/0x560 [ 966.608801][T19374] _copy_to_user+0x31/0xb0 [ 966.608821][T19374] drm_ioctl+0x6a4/0xb10 [ 966.608845][T19374] ? __pfx_drm_mode_getplane_res+0x10/0x10 [ 966.608872][T19374] ? __pfx_drm_ioctl+0x10/0x10 [ 966.608898][T19374] ? __fget_files+0x2a/0x420 [ 966.608916][T19374] ? bpf_lsm_file_ioctl+0x9/0x20 [ 966.608938][T19374] ? __pfx_drm_ioctl+0x10/0x10 [ 966.608966][T19374] __se_sys_ioctl+0xf9/0x170 [ 966.608987][T19374] do_syscall_64+0xfa/0x3b0 [ 966.609014][T19374] ? rcu_is_watching+0x15/0xb0 [ 966.609031][T19374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.609049][T19374] ? clear_bhb_loop+0x60/0xb0 [ 966.609069][T19374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.609086][T19374] RIP: 0033:0x7f926bf8ebe9 [ 966.609102][T19374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.609117][T19374] RSP: 002b:00007f926a1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.609138][T19374] RAX: ffffffffffffffda RBX: 00007f926c1b5fa0 RCX: 00007f926bf8ebe9 [ 966.609151][T19374] RDX: 0000200000000140 RSI: 00000000c01064b5 RDI: 0000000000000003 [ 966.609164][T19374] RBP: 00007f926a1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 966.609176][T19374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.609188][T19374] R13: 00007f926c1b6038 R14: 00007f926c1b5fa0 R15: 00007f926c2dfa28 [ 966.609207][T19374] [ 966.744906][ T5943] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 966.761881][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.197627][ T5954] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 967.233518][ T5954] usb 2-1: config 0 has no interface number 0 [ 967.318894][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3558'. [ 967.354719][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 967.362010][ T5943] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 967.371552][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.381520][ T5943] usb 5-1: config 0 descriptor?? [ 967.392215][ T5943] as10x_usb: device has been detected [ 967.399462][ T5943] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 967.407007][T16691] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 967.421814][ T5954] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 967.430317][ T5943] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 967.447429][ T5943] as10x_usb: error during firmware upload part1 [ 967.505109][ T5943] Registered device nBox DVB-T Dongle [ 967.519967][ T5954] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=fc.88 [ 967.623933][T16691] usb 7-1: config 0 has no interfaces? [ 967.630925][ T5943] usb 5-1: USB disconnect, device number 2 [ 967.639161][T16691] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 967.651202][T16691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.675669][T16691] usb 7-1: Product: syz [ 967.685947][ T5943] Unregistered device nBox DVB-T Dongle [ 967.686586][ T5943] as10x_usb: device has been disconnected [ 967.699294][T16691] usb 7-1: Manufacturer: syz [ 967.704190][T16691] usb 7-1: SerialNumber: syz [ 967.715061][T16691] usb 7-1: config 0 descriptor?? [ 967.784900][ T5954] usb 2-1: New USB device strings: Mfr=255, Product=1, SerialNumber=3 [ 967.803536][ T5954] usb 2-1: Product: syz [ 967.814203][ T5954] usb 2-1: Manufacturer: syz [ 967.830793][T19392] xt_limit: Overflow, try lower: 271964/0 [ 967.839580][ T5954] usb 2-1: SerialNumber: syz [ 967.855854][ T5954] usb 2-1: config 0 descriptor?? [ 968.089104][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3547'. [ 968.113290][T19377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.122568][T19377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.294818][ T5943] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 968.455219][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 968.478051][ T5943] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.618575][ T5943] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.653925][ T5943] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.666258][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.720828][ T5943] usb 4-1: Product: syz [ 968.726636][ T5943] usb 4-1: Manufacturer: syz [ 968.731517][ T5943] usb 4-1: SerialNumber: syz [ 968.944964][T19394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.959545][T19394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.977020][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.986174][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.003346][T19395] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3561'. [ 969.020797][ T5943] usb 4-1: 0:2 : does not exist [ 969.288481][T19409] openvswitch: netlink: Key type 184 is out of range max 32 [ 969.314773][ T5943] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 969.352279][ T5954] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 969.363727][ T5943] usb 4-1: USB disconnect, device number 34 [ 969.481474][ T5954] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 969.506179][ T5914] usb 46-1: device descriptor read/8, error -110 [ 969.620891][ T5954] usb 2-1: USB disconnect, device number 3 [ 969.621316][ T9984] udevd[9984]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 969.672024][T19413] loop6: detected capacity change from 0 to 7 [ 969.693647][T19413] Dev loop6: unable to read RDB block 7 [ 969.700133][T19413] loop6: AHDI p1 p2 [ 969.721178][T19413] loop6: partition table partially beyond EOD, truncated [ 969.742556][T19413] loop6: p1 start 926365495 is beyond EOD, truncated [ 969.829823][T16691] usb 7-1: USB disconnect, device number 4 [ 969.919180][T19417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 969.928503][T19417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3566'. [ 969.939020][ T5914] usb usb46-port1: attempt power cycle [ 969.986552][T19419] FAULT_INJECTION: forcing a failure. [ 969.986552][T19419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.000088][T19419] CPU: 0 UID: 0 PID: 19419 Comm: syz.6.3567 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 970.000125][T19419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 970.000137][T19419] Call Trace: [ 970.000149][T19419] [ 970.000158][T19419] dump_stack_lvl+0x189/0x250 [ 970.000187][T19419] ? __pfx____ratelimit+0x10/0x10 [ 970.000212][T19419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.000232][T19419] ? __pfx__printk+0x10/0x10 [ 970.000257][T19419] ? rcu_is_watching+0x15/0xb0 [ 970.000275][T19419] should_fail_ex+0x414/0x560 [ 970.000299][T19419] _copy_to_user+0x31/0xb0 [ 970.000322][T19419] simple_read_from_buffer+0xe1/0x170 [ 970.000351][T19419] proc_fail_nth_read+0x1b3/0x220 [ 970.000373][T19419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.000394][T19419] ? rw_verify_area+0x2a6/0x4d0 [ 970.000416][T19419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.000437][T19419] vfs_read+0x1fd/0xa30 [ 970.000460][T19419] ? fdget_pos+0x247/0x320 [ 970.000478][T19419] ? __pfx___mutex_lock+0x10/0x10 [ 970.000514][T19419] ? __pfx_vfs_read+0x10/0x10 [ 970.000540][T19419] ? __fget_files+0x3a0/0x420 [ 970.000556][T19419] ? __fget_files+0x2a/0x420 [ 970.000576][T19419] ksys_read+0x145/0x250 [ 970.000600][T19419] ? __pfx_ksys_read+0x10/0x10 [ 970.000623][T19419] ? __pfx_drm_ioctl+0x10/0x10 [ 970.000649][T19419] ? rcu_is_watching+0x15/0xb0 [ 970.000668][T19419] do_syscall_64+0xfa/0x3b0 [ 970.000694][T19419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.000713][T19419] ? clear_bhb_loop+0x60/0xb0 [ 970.000734][T19419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.000750][T19419] RIP: 0033:0x7f6c64d8d5fc [ 970.000767][T19419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 970.000783][T19419] RSP: 002b:00007f6c65bf1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.000806][T19419] RAX: ffffffffffffffda RBX: 00007f6c64fb5fa0 RCX: 00007f6c64d8d5fc [ 970.000821][T19419] RDX: 000000000000000f RSI: 00007f6c65bf10a0 RDI: 0000000000000005 [ 970.000833][T19419] RBP: 00007f6c65bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 970.000846][T19419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.000858][T19419] R13: 00007f6c64fb6038 R14: 00007f6c64fb5fa0 R15: 00007f6c650dfa28 [ 970.000878][T19419] [ 970.349978][ T5232] Dev loop6: unable to read RDB block 7 [ 970.471431][ T5232] loop6: AHDI p1 p2 [ 970.475853][ T5232] loop6: partition table partially beyond EOD, truncated [ 970.483136][ T5232] loop6: p1 start 926365495 is beyond EOD, truncated [ 970.507071][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3569'. [ 970.621911][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 970.815747][ T5914] usb usb46-port1: unable to enumerate USB device [ 971.236625][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 971.389679][ T5943] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 971.517758][ T5914] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 971.527298][ T5914] usb 2-1: config 0 has no interface number 0 [ 971.533448][ T5914] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.568408][ T5914] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.590103][ T5943] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 971.598475][ T5943] usb 5-1: config 0 has no interface number 0 [ 971.634925][ T5914] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 971.646204][ T5943] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 971.664720][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.687568][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.704784][ T5943] usb 5-1: Product: syz [ 971.794900][ T5943] usb 5-1: Manufacturer: syz [ 971.799737][ T5943] usb 5-1: SerialNumber: syz [ 971.817063][ T5914] usb 2-1: config 0 descriptor?? [ 971.837130][ T5943] usb 5-1: config 0 descriptor?? [ 972.047077][ T5943] usb 5-1: Firmware version (0.0) predates our first public release. [ 972.064702][ T5943] usb 5-1: Please update to version 0.2 or newer [ 972.178838][ T5943] usb 5-1: USB disconnect, device number 3 [ 972.199572][T19462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.257513][ T5914] uclogic 0003:28BD:0905.0041: Interface probing failed: -22 [ 972.265509][ T5914] uclogic 0003:28BD:0905.0041: interface is invalid, ignoring [ 972.275170][ T9984] udevd[9984]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 972.287909][T19462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.346964][ T9984] udevd[9984]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 972.478851][T19449] fuse: Bad value for 'group_id' [ 972.484776][T19449] fuse: Bad value for 'group_id' [ 972.974532][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 972.974551][ T30] audit: type=1800 audit(1755338952.556:4106): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.031748][ T30] audit: type=1800 audit(1755338952.566:4107): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.062289][ T30] audit: type=1800 audit(1755338952.566:4108): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.114323][ T30] audit: type=1800 audit(1755338952.566:4109): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.172981][ T30] audit: type=1800 audit(1755338952.566:4110): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.227422][ T30] audit: type=1800 audit(1755338952.566:4111): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.273266][ T30] audit: type=1800 audit(1755338952.566:4112): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.306275][ T30] audit: type=1800 audit(1755338952.566:4113): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.331570][ T30] audit: type=1800 audit(1755338952.576:4114): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.360310][ T30] audit: type=1800 audit(1755338952.576:4115): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3584" name="nullb0" dev="devtmpfs" ino=4301 res=0 errno=0 [ 973.486843][ T5954] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 973.648908][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 973.660305][ T5954] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 973.684306][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.708953][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 973.724437][ T5954] usb 4-1: config 0 descriptor?? [ 973.826010][ T2152] usb 2-1: USB disconnect, device number 4 [ 973.913281][T19490] ptrace attach of "./syz-executor exec"[18787] was attempted by "./syz-executor exec"[19490] [ 974.034738][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 974.041913][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 974.052845][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 974.062613][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.118555][ T24] usb 5-1: Product: syz [ 974.124511][ T24] usb 5-1: Manufacturer: syz [ 974.129341][ T24] usb 5-1: SerialNumber: syz [ 974.139036][ T24] usb 5-1: config 0 descriptor?? [ 974.148040][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 974.157459][ T24] usb 5-1: setting power ON [ 974.162213][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 974.184920][ T2152] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 974.206551][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 974.218545][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 974.227184][ T24] usb 5-1: media controller created [ 974.252456][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.291964][ T24] usb 5-1: selecting invalid altsetting 6 [ 974.298619][ T24] usb 5-1: digital interface selection failed (-22) [ 974.309227][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 974.318629][ T24] usb 5-1: setting power OFF [ 974.324284][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 974.332117][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 974.347017][ T5954] gspca_main: spca508-2.14.0 probing 8086:0110 [ 974.358968][ T5954] gspca_spca508: reg_read err -71 [ 974.364255][ T24] (NULL device *): no alternate interface [ 974.364449][ T5954] gspca_spca508: reg_read err -71 [ 974.365147][ T2152] usb 2-1: Using ep0 maxpacket: 32 [ 974.370910][ T5954] gspca_spca508: reg_read err -71 [ 974.394153][ T5954] gspca_spca508: reg_read err -71 [ 974.406084][ T5954] gspca_spca508: reg_read err -71 [ 974.417693][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.466653][ T5954] gspca_spca508: reg write: error -71 [ 974.480669][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.481306][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 974.505644][ T5954] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 974.532749][ T2152] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 974.556542][ T5954] usb 4-1: USB disconnect, device number 35 [ 974.579760][ T24] usb 5-1: USB disconnect, device number 4 [ 974.701903][ T2152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.717280][ T2152] usb 2-1: config 0 descriptor?? [ 974.726651][ T2152] hub 2-1:0.0: USB hub found [ 974.933957][ T2152] hub 2-1:0.0: 1 port detected [ 975.463372][T19508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.478647][T19508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.536936][T19513] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3595'. [ 975.801062][T16691] usb 2-1: USB disconnect, device number 5 [ 975.807050][ T2152] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 976.025486][T19528] tipc: Started in network mode [ 976.030508][T19528] tipc: Node identity , cluster identity 4711 [ 976.036911][T19528] tipc: Failed to obtain node identity [ 976.042576][T19528] tipc: Enabling of bearer rejected, failed to enable media [ 976.042663][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3596'. [ 976.052712][T19528] syzkaller0: entered promiscuous mode [ 976.066530][T19528] syzkaller0: entered allmulticast mode [ 976.281972][T19536] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3605'. [ 976.306563][T19536] bond0: option min_links: invalid value (18446744072019614533) [ 976.314515][T19536] bond0: option min_links: allowed values 0 - 2147483647 [ 976.431013][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3610'. [ 976.506803][T19550] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 976.516494][T18267] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 976.525892][T18267] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 976.537526][T18267] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 976.547349][T18267] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 976.634896][T16691] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 976.762235][T19562] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 976.965456][T16691] usb 4-1: Using ep0 maxpacket: 16 [ 977.326408][T19562] bond3: entered allmulticast mode [ 977.336014][T19562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 977.502769][T16691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.520871][T16691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.532339][T16691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 977.546096][T16691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 977.557188][T16691] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 977.568285][T16691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.596109][ T5954] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 977.648031][T16691] usb 4-1: config 0 descriptor?? [ 977.756056][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 977.762763][ T5954] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 977.786530][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.820272][ T5954] usb 2-1: config 0 descriptor?? [ 977.898002][T19579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.953254][T19579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.067918][T16691] hid-u2fzero 0003:10C4:8ACF.0042: unknown main item tag 0x0 [ 978.085588][T16691] hid-u2fzero 0003:10C4:8ACF.0042: unknown main item tag 0x0 [ 978.104817][T19590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.116093][T19590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.123522][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.124105][T16691] hid-u2fzero 0003:10C4:8ACF.0042: unknown main item tag 0x0 [ 978.146536][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.164512][T19590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.176231][T16691] hid-u2fzero 0003:10C4:8ACF.0042: unknown main item tag 0x0 [ 978.186035][T19590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.196513][T16691] hid-u2fzero 0003:10C4:8ACF.0042: unknown main item tag 0x0 [ 978.215986][T16691] hid-u2fzero 0003:10C4:8ACF.0042: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 978.239320][T16691] hid-u2fzero 0003:10C4:8ACF.0042: U2F Zero LED initialised [ 978.267829][T16691] hid-u2fzero 0003:10C4:8ACF.0042: U2F Zero RNG initialised [ 978.305020][T16691] usb 4-1: USB disconnect, device number 36 [ 978.343474][T19591] fido_id[19591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 978.364792][T11811] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 978.425352][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 978.545008][T11811] usb 7-1: Using ep0 maxpacket: 8 [ 978.557525][T11811] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 978.569467][T11811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.578748][T11811] usb 7-1: Product: syz [ 978.583334][T11811] usb 7-1: Manufacturer: syz [ 978.591890][T11811] usb 7-1: SerialNumber: syz [ 978.601351][T11811] usb 7-1: config 0 descriptor?? [ 978.613084][T11811] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 978.656520][ T5954] video4linux radio48: keene_cmd_set failed (-71) [ 978.663233][ T5954] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 978.678712][ T5954] usb 2-1: USB disconnect, device number 6 [ 978.900100][T19609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.911863][T19609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.914983][T16691] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 979.779000][T11811] gspca_sonixj: reg_r err -110 [ 979.783960][T11811] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 979.791917][T16691] usb 5-1: Using ep0 maxpacket: 32 [ 979.829447][T16691] usb 5-1: config 0 interface 0 has no altsetting 0 [ 979.836849][T16691] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 979.844256][T19617] fuse: Unknown parameter 'root' [ 979.902720][T16691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.922593][T16691] usb 5-1: config 0 descriptor?? [ 980.141892][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.162662][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.215500][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.265357][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.348826][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.367304][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.590934][T16691] corsair-psu 0003:1B1C:1C09.0043: unknown main item tag 0x0 [ 980.617504][T16691] corsair-psu 0003:1B1C:1C09.0043: unknown main item tag 0x0 [ 980.700596][T16691] corsair-psu 0003:1B1C:1C09.0043: unknown main item tag 0x0 [ 980.714557][T16691] corsair-psu 0003:1B1C:1C09.0043: unknown main item tag 0x0 [ 980.722808][T16691] corsair-psu 0003:1B1C:1C09.0043: unknown main item tag 0x0 [ 980.740607][T16691] corsair-psu 0003:1B1C:1C09.0043: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 981.117391][T16691] corsair-psu 0003:1B1C:1C09.0043: unable to initialize device (-110) [ 981.152266][T16691] corsair-psu 0003:1B1C:1C09.0043: probe with driver corsair-psu failed with error -110 [ 981.262606][T11811] usb 7-1: USB disconnect, device number 5 [ 981.314146][T16691] usb 5-1: USB disconnect, device number 5 [ 981.774919][ T2152] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 981.936598][ T2152] usb 4-1: config 3 has an invalid interface number: 7 but max is 0 [ 981.945964][ T2152] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 982.025724][ T2152] usb 4-1: config 3 has no interface number 0 [ 982.055081][ T2152] usb 4-1: config 3 interface 7 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.068343][ T2152] usb 4-1: config 3 interface 7 has no altsetting 0 [ 982.099241][T16691] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 982.227121][ T2152] usb 4-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 982.246527][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.256741][ T2152] usb 4-1: Product: syz [ 982.262357][ T2152] usb 4-1: Manufacturer: syz [ 982.337172][ T2152] usb 4-1: SerialNumber: syz [ 982.404710][T16691] usb 7-1: Using ep0 maxpacket: 8 [ 982.416848][T16691] usb 7-1: unable to get BOS descriptor or descriptor too short [ 982.427979][T16691] usb 7-1: config 10 has an invalid interface number: 223 but max is 2 [ 982.438068][T16691] usb 7-1: config 10 has an invalid interface number: 79 but max is 2 [ 982.704406][T19644] netlink: 'syz.3.3634': attribute type 1 has an invalid length. [ 982.730067][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.757761][T19644] batadv_slave_1: entered promiscuous mode [ 982.770720][T11811] usb 4-1: USB disconnect, device number 37 [ 982.965669][T16691] usb 7-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 982.976201][T16691] usb 7-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 982.985458][T16691] usb 7-1: config 10 has no interface number 0 [ 983.062701][T16691] usb 7-1: config 10 has no interface number 1 [ 983.106385][T16691] usb 7-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 983.258760][T16691] usb 7-1: config 10 interface 79 altsetting 73 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 983.282499][T16691] usb 7-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 983.336057][T16691] usb 7-1: config 10 interface 223 has no altsetting 0 [ 983.343023][T16691] usb 7-1: config 10 interface 79 has no altsetting 0 [ 983.383866][T16691] usb 7-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 983.393727][T16691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.402546][T16691] usb 7-1: Product: syz [ 983.412460][T16691] usb 7-1: Manufacturer: syz [ 983.422604][T16691] usb 7-1: SerialNumber: syz [ 983.609225][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 983.609246][ T30] audit: type=1326 audit(1755338963.196:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 983.666330][ T2152] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 983.678741][T19656] GUP no longer grows the stack in syz.6.3638 (19656): 200000005000-200000008000 (200000004000) [ 983.723175][ T2152] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 983.744000][T19656] CPU: 1 UID: 0 PID: 19656 Comm: syz.6.3638 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 983.744035][T19656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.744048][T19656] Call Trace: [ 983.744057][T19656] [ 983.744066][T19656] dump_stack_lvl+0x189/0x250 [ 983.744095][T19656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.744119][T19656] ? __pfx__printk+0x10/0x10 [ 983.744146][T19656] ? find_vma+0xe7/0x160 [ 983.744177][T19656] fixup_user_fault+0x661/0x720 [ 983.744203][T19656] fault_in_user_writeable+0x72/0xe0 [ 983.744226][T19656] futex_lock_pi+0x773/0xa90 [ 983.744255][T19656] ? __pfx_futex_lock_pi+0x10/0x10 [ 983.744281][T19656] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 983.744315][T19656] ? __pfx_futex_wake_mark+0x10/0x10 [ 983.744350][T19656] ? __hrtimer_setup+0x187/0x210 [ 983.744369][T19656] do_futex+0x292/0x420 [ 983.744390][T19656] ? __might_fault+0xb0/0x130 [ 983.744417][T19656] ? __pfx_do_futex+0x10/0x10 [ 983.744440][T19656] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 983.744464][T19656] __se_sys_futex+0x36f/0x400 [ 983.744490][T19656] ? __pfx___se_sys_futex+0x10/0x10 [ 983.744513][T19656] ? rcu_is_watching+0x15/0xb0 [ 983.744534][T19656] ? __x64_sys_futex+0x21/0xf0 [ 983.744569][T19656] do_syscall_64+0xfa/0x3b0 [ 983.744597][T19656] ? rcu_is_watching+0x15/0xb0 [ 983.744621][T19656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.744639][T19656] ? clear_bhb_loop+0x60/0xb0 [ 983.744658][T19656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.744676][T19656] RIP: 0033:0x7f6c64d8ebe9 [ 983.744694][T19656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.744711][T19656] RSP: 002b:00007f6c65bf1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 983.744734][T19656] RAX: ffffffffffffffda RBX: 00007f6c64fb5fa0 RCX: 00007f6c64d8ebe9 [ 983.744749][T19656] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 983.744763][T19656] RBP: 00007f6c64e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 983.744775][T19656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.744788][T19656] R13: 00007f6c64fb6038 R14: 00007f6c64fb5fa0 R15: 00007f6c650dfa28 [ 983.744809][T19656] [ 983.969988][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.028462][ T30] audit: type=1326 audit(1755338963.196:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.056508][ T30] audit: type=1326 audit(1755338963.236:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.081808][ T30] audit: type=1326 audit(1755338963.236:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.121932][ T30] audit: type=1326 audit(1755338963.236:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.254315][T16691] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 984.289307][T16691] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 984.308664][T16691] dib0700: firmware download failed at 7 with -22 [ 984.328568][ T30] audit: type=1326 audit(1755338963.236:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.356268][ T30] audit: type=1326 audit(1755338963.236:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.387222][T16691] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 984.397554][T16691] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 984.406783][ T30] audit: type=1326 audit(1755338963.236:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.464966][T16691] dib0700: firmware download failed at 7 with -22 [ 984.499002][T16691] usb 7-1: USB disconnect, device number 6 [ 984.530903][ T30] audit: type=1326 audit(1755338963.236:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.556441][ T30] audit: type=1326 audit(1755338963.236:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19687 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x7ffc0000 [ 984.801611][T19710] FAULT_INJECTION: forcing a failure. [ 984.801611][T19710] name failslab, interval 1, probability 0, space 0, times 0 [ 984.890143][T19710] CPU: 0 UID: 0 PID: 19710 Comm: syz.6.3652 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 984.890163][T19710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.890171][T19710] Call Trace: [ 984.890177][T19710] [ 984.890184][T19710] dump_stack_lvl+0x189/0x250 [ 984.890210][T19710] ? __pfx____ratelimit+0x10/0x10 [ 984.890234][T19710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.890259][T19710] ? __pfx__printk+0x10/0x10 [ 984.890284][T19710] ? __pfx___might_resched+0x10/0x10 [ 984.890312][T19710] ? lock_acquire+0x5f/0x360 [ 984.890337][T19710] should_fail_ex+0x414/0x560 [ 984.890361][T19710] should_failslab+0xa8/0x100 [ 984.890389][T19710] __kmalloc_noprof+0xcb/0x4f0 [ 984.890414][T19710] ? tomoyo_encode2+0x27f/0x530 [ 984.890431][T19710] ? lock_acquire+0x5f/0x360 [ 984.890457][T19710] tomoyo_encode2+0x27f/0x530 [ 984.890478][T19710] tomoyo_check_unix_address+0x3c3/0x7b0 [ 984.890496][T19710] ? lock_release+0x4b/0x3e0 [ 984.890523][T19710] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 984.890541][T19710] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 984.890561][T19710] ? rcu_is_watching+0x15/0xb0 [ 984.890579][T19710] ? __might_fault+0xb0/0x130 [ 984.890600][T19710] ? rcu_is_watching+0x15/0xb0 [ 984.890619][T19710] tomoyo_socket_connect_permission+0x1b2/0x290 [ 984.890642][T19710] security_socket_connect+0xc8/0x2b0 [ 984.890665][T19710] __sys_connect+0x231/0x440 [ 984.890692][T19710] ? __fget_files+0x3a0/0x420 [ 984.890710][T19710] ? __pfx___sys_connect+0x10/0x10 [ 984.890741][T19710] ? __pfx_ksys_write+0x10/0x10 [ 984.890764][T19710] ? rcu_is_watching+0x15/0xb0 [ 984.890784][T19710] __x64_sys_connect+0x7a/0x90 [ 984.890811][T19710] do_syscall_64+0xfa/0x3b0 [ 984.890839][T19710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.890857][T19710] ? clear_bhb_loop+0x60/0xb0 [ 984.890878][T19710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.890897][T19710] RIP: 0033:0x7f6c64d8ebe9 [ 984.890914][T19710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.890930][T19710] RSP: 002b:00007f6c65bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 984.890954][T19710] RAX: ffffffffffffffda RBX: 00007f6c64fb5fa0 RCX: 00007f6c64d8ebe9 [ 984.890968][T19710] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000005 [ 984.890981][T19710] RBP: 00007f6c65bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 984.890994][T19710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.891005][T19710] R13: 00007f6c64fb6038 R14: 00007f6c64fb5fa0 R15: 00007f6c650dfa28 [ 984.891025][T19710] [ 985.421209][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3648'. [ 985.685453][T19719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.695795][T19719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.935850][ T5914] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 986.098329][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.110515][ T5914] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 986.141654][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.225218][ T5914] usb 7-1: config 0 descriptor?? [ 986.787832][ T5914] usb 7-1: string descriptor 0 read error: -71 [ 986.801328][ T5914] usbhid 7-1:0.0: can't add hid device: -71 [ 986.808547][ T5914] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 986.829664][ T5914] usb 7-1: USB disconnect, device number 7 [ 987.805245][T19753] netlink: 'syz.5.3662': attribute type 10 has an invalid length. [ 987.832560][T19753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.877642][T19753] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 988.161437][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 988.333254][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 988.356375][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 988.407520][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 988.431270][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.451550][ T24] usb 7-1: Product: syz [ 988.459865][ T24] usb 7-1: Manufacturer: syz [ 988.469984][ T24] usb 7-1: SerialNumber: syz [ 988.490757][ T24] usb 7-1: config 0 descriptor?? [ 988.927120][ T24] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 989.145220][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3669'. [ 989.405770][T19784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.419737][T19784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.657795][T19792] trusted_key: encrypted_key: key user:syz not found [ 989.740139][T19794] netlink: 'syz.1.3673': attribute type 2 has an invalid length. [ 989.794275][T19794] : entered promiscuous mode [ 989.818297][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 989.838374][T19796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3674'. [ 990.002865][ T5954] IPVS: starting estimator thread 0... [ 990.124938][T19800] IPVS: using max 39 ests per chain, 93600 per kthread [ 990.347993][ T24] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 990.360837][ T24] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 990.372744][ T24] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 990.803155][ T2152] usb 7-1: USB disconnect, device number 8 [ 991.008026][T19819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.019593][T19819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.036961][T19819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.058233][T19819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.115543][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 991.234787][T11811] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 991.420598][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3684'. [ 991.436629][T11811] usb 7-1: Using ep0 maxpacket: 16 [ 991.453962][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.475061][ T24] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 991.486598][T11811] usb 7-1: unable to get BOS descriptor or descriptor too short [ 991.507547][T11811] usb 7-1: config 255 has an invalid interface number: 191 but max is 1 [ 991.534856][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.543914][T11811] usb 7-1: config 255 has an invalid interface number: 182 but max is 1 [ 991.567572][ T24] usb 2-1: config 0 descriptor?? [ 991.572720][T11811] usb 7-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 991.621749][T11811] usb 7-1: config 255 has no interface number 0 [ 991.634683][T11811] usb 7-1: config 255 has no interface number 1 [ 991.641151][T11811] usb 7-1: config 255 interface 182 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 991.664061][T11811] usb 7-1: config 255 interface 182 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 991.684708][T11811] usb 7-1: config 255 interface 191 has no altsetting 0 [ 991.691921][T11811] usb 7-1: config 255 interface 182 has no altsetting 0 [ 991.708671][T11811] usb 7-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=25.4a [ 991.724700][T11811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.749181][T11811] usb 7-1: Product: syz [ 991.753682][T11811] usb 7-1: Manufacturer: syz [ 991.783778][T11811] usb 7-1: SerialNumber: syz [ 992.090722][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 992.090818][T11811] usb 7-1: USB disconnect, device number 9 [ 992.254790][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 992.263372][ T5914] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 992.272114][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 992.285675][ T5914] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 992.295154][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.303395][ T5914] usb 5-1: Product: syz [ 992.310012][ T5914] usb 5-1: Manufacturer: syz [ 992.326741][ T5914] usb 5-1: SerialNumber: syz [ 992.343157][ T5914] usb 5-1: config 0 descriptor?? [ 992.414023][ T5914] hub 5-1:0.0: bad descriptor, ignoring hub [ 992.441584][ T5914] hub 5-1:0.0: probe with driver hub failed with error -5 [ 992.520608][ T5914] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input91 [ 992.615220][T19833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.623956][T19833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.639888][ T5914] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 992.682707][ T5914] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 992.715558][ T5914] usb 5-1: USB disconnect, device number 7 [ 992.940318][ T2152] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 993.177402][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.184311][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.192433][ T2152] usb 7-1: Using ep0 maxpacket: 16 [ 993.203967][ T2152] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 993.257251][ T2152] usb 7-1: config 0 has no interface number 0 [ 993.335244][ T2152] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 993.375604][ T2152] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 993.419731][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 993.431655][ T2152] usb 7-1: Product: syz [ 993.438396][ T2152] usb 7-1: SerialNumber: syz [ 993.452892][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.465979][ T2152] usb 7-1: config 0 descriptor?? [ 993.474268][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.485867][ T2152] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 993.684918][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 993.694585][ T2152] usb 7-1: USB disconnect, device number 10 [ 993.927595][ T2152] usb 2-1: USB disconnect, device number 7 [ 993.987602][ T5954] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 994.210063][ T5954] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 994.223403][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.247399][ T5954] usb 4-1: Product: syz [ 994.264046][ T5954] usb 4-1: Manufacturer: syz [ 994.284944][ T5954] usb 4-1: SerialNumber: syz [ 994.304259][ T5954] usb 4-1: config 0 descriptor?? [ 994.440546][ T5954] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 038 [ 994.719278][ T5954] (null): failure setting delay to 10us [ 994.728831][ T5954] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 994.794953][ T5954] usb 4-1: USB disconnect, device number 38 [ 995.314730][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 995.486449][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 995.518131][ T24] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 995.539812][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.552271][ T24] usb 2-1: config 0 has no interface number 0 [ 995.560799][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 995.570352][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.580027][ T24] usb 2-1: Product: syz [ 995.587049][ T24] usb 2-1: Manufacturer: syz [ 995.592377][ T24] usb 2-1: SerialNumber: syz [ 995.605250][ T24] usb 2-1: config 0 descriptor?? [ 995.615225][ T24] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 995.622646][ T24] usb 2-1: No valid video chain found. [ 995.632608][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3705'. [ 995.652011][T19891] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3705'. [ 995.663534][T19891] VFS: Mount too revealing [ 995.677917][T19891] batadv_slave_1: entered promiscuous mode [ 995.686155][T19891] batman_adv: batadv0: Adding interface: macvtap1 [ 995.692644][T19891] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.733344][T19891] batman_adv: batadv0: Interface activated: macvtap1 [ 995.744383][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3708'. [ 995.753935][T19898] netlink: 'syz.4.3708': attribute type 3 has an invalid length. [ 995.765019][ T2152] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 995.962363][ T2152] usb 4-1: unable to get BOS descriptor or descriptor too short [ 995.976419][ T2152] usb 4-1: not running at top speed; connect to a high speed hub [ 996.017418][T19907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.037519][ T2152] usb 4-1: config 1 has an invalid interface number: 94 but max is 0 [ 996.053899][T19907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.063856][T19903] libceph: resolve '4..' (ret=-3): failed [ 996.077245][ T2152] usb 4-1: config 1 has no interface number 0 [ 996.230007][ T2152] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 996.239514][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.257290][ T2152] usb 4-1: Product: syz [ 996.269615][ T2152] usb 4-1: Manufacturer: syz [ 996.277643][ T2152] usb 4-1: SerialNumber: syz [ 996.561392][T19894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3706'. [ 996.578589][T19894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.578906][T19911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3706'. [ 996.626994][T19894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.714863][ T2152] usb 4-1: Invalid firmware size=18. [ 996.727447][ T2152] usb 4-1: USB disconnect, device number 39 [ 997.194973][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 997.344684][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 997.431704][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 997.454446][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 997.484801][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 997.517298][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 997.560190][ T24] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 997.570664][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.595655][ T24] usb 5-1: Product: syz [ 997.610323][ T24] usb 5-1: Manufacturer: syz [ 997.623919][ T24] usb 5-1: SerialNumber: syz [ 997.662118][ T24] usb 5-1: config 0 descriptor?? [ 997.690560][T19915] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 997.726425][ T24] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 997.757531][ T24] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 997.805052][T19935] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 997.835171][T19935] macsec1: entered promiscuous mode [ 997.851463][T19935] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 997.869108][ T5954] usb 2-1: USB disconnect, device number 8 [ 997.940830][ T24] usb 5-1: USB disconnect, device number 9 [ 998.130843][T19940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.147596][T19940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.257606][T19945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3722'. [ 998.266952][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'. [ 998.298126][ T2152] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 998.395948][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 998.395948][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 998.457088][ T2152] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.488333][ T2152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 998.524328][ T2152] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 998.547399][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.566048][ T2152] usb 4-1: config 0 descriptor?? [ 998.796026][ T2152] corsair-psu 0003:1B1C:1C03.0045: unknown main item tag 0x0 [ 998.818362][ T2152] corsair-psu 0003:1B1C:1C03.0045: unknown main item tag 0x0 [ 998.840568][ T2152] corsair-psu 0003:1B1C:1C03.0045: unknown main item tag 0x0 [ 998.864919][ T2152] corsair-psu 0003:1B1C:1C03.0045: unknown main item tag 0x0 [ 998.879800][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3732'. [ 998.882765][ T2152] corsair-psu 0003:1B1C:1C03.0045: unknown main item tag 0x0 [ 998.889894][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3732'. [ 998.898947][T16691] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 998.928788][ T2152] corsair-psu 0003:1B1C:1C03.0045: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 998.943725][ C0] usb 4-1: input irq status -75 received [ 999.000053][ T2152] corsair-psu 0003:1B1C:1C03.0045: unable to initialize device (-38) [ 999.023888][ T2152] corsair-psu 0003:1B1C:1C03.0045: probe with driver corsair-psu failed with error -38 [ 999.052292][ T2152] usb 4-1: USB disconnect, device number 40 [ 999.076208][T16691] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.105178][T16691] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 999.117620][T16691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 999.129744][T16691] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 999.169941][T16691] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 999.179190][T16691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 999.187945][T16691] usb 7-1: Product: syz [ 999.192160][T16691] usb 7-1: Manufacturer: syz [ 999.322650][T16691] usb 7-1: SerialNumber: syz [ 999.331866][T16691] usb 7-1: config 0 descriptor?? [ 999.345255][T16691] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 999.354214][T16691] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 999.363626][T16691] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 999.375021][T11811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 999.441926][T19991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.456572][T19991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.511132][T19991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.544848][T11811] usb 2-1: Using ep0 maxpacket: 16 [ 999.570853][T11811] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 999.601570][T19991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.622036][T11811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 999.684446][T11811] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 999.713773][T11811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.737871][T11811] usb 2-1: Product: syz [ 999.750204][T11811] usb 2-1: Manufacturer: syz [ 999.759097][T11811] usb 2-1: SerialNumber: syz [ 999.773583][T11811] usb 2-1: config 0 descriptor?? [ 999.791339][T11811] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 999.808558][T11811] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1000.087254][T19998] vivid-000: disconnect [ 1000.380028][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.494020][T19992] vivid-000: reconnect [ 1000.536103][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.565444][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.631494][T11811] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1000.651038][T11811] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1000.829125][T20005] netlink: 'syz.4.3740': attribute type 15 has an invalid length. [ 1000.863741][T20005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1000.911883][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1000.911902][ T30] audit: type=1326 audit(1755338980.496:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.4.3740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfa118ebe9 code=0x0 [ 1001.001346][ T30] audit: type=1326 audit(1755338980.586:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20013 comm="syz.5.3744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd8738ebe9 code=0x0 [ 1001.340515][T11811] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1001.353388][T11811] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1001.371988][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.381715][T11811] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1001.386938][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.427203][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.438183][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.473729][T11811] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1001.488426][T11811] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1001.508157][T11811] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1001.519960][T11811] usb 2-1: USB disconnect, device number 9 [ 1001.591822][T16691] usb 7-1: USB disconnect, device number 11 [ 1001.602176][T19963] delete_channel: no stack [ 1002.434798][T16691] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1002.584795][T16691] usb 7-1: device descriptor read/64, error -71 [ 1002.604012][ T30] audit: type=1804 audit(1755338982.176:4235): pid=20035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3748" name="/newroot/113/file1" dev="fuse" ino=1 res=1 errno=0 [ 1002.834770][T16691] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1002.977489][T16691] usb 7-1: device descriptor read/64, error -71 [ 1002.984892][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1003.050639][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035e4b400: rx timeout, send abort [ 1003.105108][T16691] usb usb7-port1: attempt power cycle [ 1003.137992][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1003.146254][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1003.259987][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.278149][ T24] usb 2-1: config 0 descriptor?? [ 1003.455572][T16691] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1003.475388][T16691] usb 7-1: device descriptor read/8, error -71 [ 1003.502384][T20042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.512736][T20042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.550703][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035e48c00: rx timeout, send abort [ 1003.559477][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035e4b400: abort rx timeout. Force session deactivation [ 1003.655133][ T5954] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1003.715981][T16691] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1003.735734][T16691] usb 7-1: device descriptor read/8, error -71 [ 1003.844964][T16691] usb usb7-port1: unable to enumerate USB device [ 1003.897568][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1003.907578][ T5954] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1003.921431][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1003.931344][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.959630][ T5954] usb 5-1: Product: syz [ 1003.978945][ T5954] usb 5-1: Manufacturer: syz [ 1004.014194][ T24] video4linux radio48: keene_cmd_set failed (-71) [ 1004.023177][ T5954] usb 5-1: SerialNumber: syz [ 1004.032080][ T24] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1004.042972][ T5954] usb 5-1: config 0 descriptor?? [ 1004.057770][ T5954] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1004.064347][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035e48c00: abort rx timeout. Force session deactivation [ 1004.091976][ T24] usb 2-1: USB disconnect, device number 10 [ 1004.588858][ T5954] gspca_zc3xx: reg_w_i err -71 [ 1004.695615][T20078] netlink: 'syz.1.3760': attribute type 1 has an invalid length. [ 1004.703451][T20078] netlink: 'syz.1.3760': attribute type 3 has an invalid length. [ 1004.711596][T20078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3760'. [ 1004.975564][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1005.038352][T20080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.174872][ T5954] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1005.190725][ T5954] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1005.279722][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 1005.297356][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.322839][ T5954] usb 5-1: USB disconnect, device number 10 [ 1005.359508][ T5942] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1005.365363][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1005.370766][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.391218][T20088] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1005.391315][ T5942] usb 2-1: Product: syz [ 1005.403992][ T5942] usb 2-1: Manufacturer: syz [ 1005.410861][ T5942] usb 2-1: SerialNumber: syz [ 1005.456884][ T5942] usb 2-1: config 0 descriptor?? [ 1005.468477][ T5942] usb 2-1: no audio or video endpoints found [ 1005.506171][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3764'. [ 1005.518138][T20096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3764'. [ 1005.753978][T20080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1005.760910][T20080] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1005.836457][ T5942] usb 2-1: USB disconnect, device number 11 [ 1006.038048][T20110] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1006.050600][T20080] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1006.066369][T20080] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1006.196234][ T5943] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1006.212281][T20080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1006.220947][T20080] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1006.260465][T20080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1006.282096][T20080] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1006.309780][T20080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1006.319240][T20080] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1006.356467][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.375197][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.398631][ T5943] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1006.408510][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.426002][ T5943] usb 4-1: config 0 descriptor?? [ 1006.453079][T20080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1006.470923][T20080] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1006.494934][T16691] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1006.647217][ T5943] logitech 0003:046D:C294.0046: unbalanced collection at end of report description [ 1006.660433][ T5943] logitech 0003:046D:C294.0046: parse failed [ 1006.666612][T16691] usb 7-1: Using ep0 maxpacket: 16 [ 1006.673634][ T5943] logitech 0003:046D:C294.0046: probe with driver logitech failed with error -22 [ 1006.684804][T16691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.698332][T16691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.911836][T16691] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1006.923443][T16691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.969410][T16691] usb 7-1: config 0 descriptor?? [ 1007.208836][T20115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.222821][T20115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.309919][T20115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.336527][T20115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.732674][T16691] hid (null): invalid report_size -1012118375 [ 1007.739351][T16691] hid (null): unknown global tag 0xe [ 1007.750595][T16691] hid (null): unknown global tag 0xd [ 1007.762330][T16691] hid (null): unknown global tag 0xe [ 1007.776088][T16691] hid (null): unknown global tag 0xe [ 1007.789150][T16691] hid (null): report_id 64061 is invalid [ 1007.812258][T16691] hid (null): invalid report_count 57762 [ 1007.838579][T16691] hid (null): invalid report_size 45665 [ 1007.981065][T16691] usb 7-1: string descriptor 0 read error: -71 [ 1008.019518][T16691] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 1008.027720][T16691] letsketch 0003:6161:4D15.0047: probe with driver letsketch failed with error -32 [ 1008.043018][T16691] usb 7-1: USB disconnect, device number 16 [ 1008.181771][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3776'. [ 1008.575778][ T5943] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 1008.636831][ T5943] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1008.809536][T16691] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1009.014769][T16691] usb 5-1: Using ep0 maxpacket: 16 [ 1009.026164][T16691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1009.039003][ T5954] usb 4-1: USB disconnect, device number 41 [ 1009.068493][T16691] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1009.122036][T16691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.196796][T16691] usb 5-1: Product: syz [ 1009.211305][T16691] usb 5-1: Manufacturer: syz [ 1009.244806][T16691] usb 5-1: SerialNumber: syz [ 1009.261459][T16691] usb 5-1: config 0 descriptor?? [ 1009.318921][T16691] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1009.360058][T16691] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1009.464872][ T5954] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1009.638149][ T5954] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1009.701020][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.810005][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1009.831852][ T5954] usb 4-1: config 1 has no interface number 0 [ 1009.843846][ T5954] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1009.869280][ T5954] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1009.934440][ T5954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.950658][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.967909][ T5954] usb 4-1: Product: syz [ 1009.976388][T16691] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1009.986584][ T5954] usb 4-1: Manufacturer: syz [ 1009.997842][ T5954] usb 4-1: SerialNumber: syz [ 1010.218659][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.228966][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.242356][T20158] CIFS: VFS: Malformed UNC in devname [ 1010.593244][T16691] em28xx 5-1:0.0: board has no eeprom [ 1010.620099][ T5942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1010.695267][T20180] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3790'. [ 1010.839338][ T5942] usb 2-1: config 0 has no interfaces? [ 1010.885504][ T5942] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1010.897915][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.904678][T16691] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1010.914011][ T5942] usb 2-1: Product: syz [ 1010.928621][ T5942] usb 2-1: Manufacturer: syz [ 1010.943850][T16691] em28xx 5-1:0.0: dvb set to bulk mode. [ 1010.959757][ T2152] em28xx 5-1:0.0: Binding DVB extension [ 1010.982142][ T5942] usb 2-1: SerialNumber: syz [ 1010.993156][ T5942] usb 2-1: config 0 descriptor?? [ 1011.021775][T16691] usb 5-1: USB disconnect, device number 11 [ 1011.081084][T16691] em28xx 5-1:0.0: Disconnecting em28xx [ 1011.111676][ T2152] em28xx 5-1:0.0: Registering input extension [ 1011.181956][T16691] em28xx 5-1:0.0: Closing input extension [ 1011.229679][T16691] em28xx 5-1:0.0: Freeing device [ 1011.360515][T20184] sg_read: process 596 (syz.3.3784) changed security contexts after opening file descriptor, this is not allowed. [ 1011.477424][ T5942] usb 4-1: USB disconnect, device number 42 [ 1012.154692][ T5942] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1012.294734][ T5942] usb 7-1: device descriptor read/64, error -71 [ 1012.484823][ T24] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1012.497228][ T5954] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1012.513990][ T5954] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1012.535100][ T5942] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1012.656469][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 1012.674735][ T5942] usb 7-1: device descriptor read/64, error -71 [ 1012.794879][ T5942] usb usb7-port1: attempt power cycle [ 1012.804889][ T24] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 1013.524712][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 1013.535984][ T24] usb usb4-port1: attempt power cycle [ 1013.545005][T16691] usb 2-1: USB disconnect, device number 12 [ 1013.630624][ T5942] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1013.854184][ T5942] usb 7-1: device descriptor read/8, error -71 [ 1014.094692][ T5942] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1014.114740][ T24] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1014.123100][ T5942] usb 7-1: device descriptor read/8, error -71 [ 1014.146896][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 1014.224759][T16691] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1014.235001][ T5942] usb usb7-port1: unable to enumerate USB device [ 1014.274718][ T24] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1014.296952][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 1014.302571][ T24] usb usb4-port1: unable to enumerate USB device [ 1014.354725][T16691] usb 5-1: device descriptor read/64, error -71 [ 1014.624894][T16691] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1014.765613][T16691] usb 5-1: device descriptor read/64, error -71 [ 1014.878340][T16691] usb usb5-port1: attempt power cycle [ 1014.920886][T20234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.939182][T20234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.984760][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1015.144723][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1015.153788][ T9] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1015.165772][ T9] usb 2-1: config 2 has no interface number 0 [ 1015.175262][ T9] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1015.188430][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1015.202468][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.210679][ T9] usb 2-1: Product: syz [ 1015.219496][ T9] usb 2-1: Manufacturer: syz [ 1015.224185][ T9] usb 2-1: SerialNumber: syz [ 1015.229102][T16691] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1015.278777][ T9] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1015.305313][T16691] usb 5-1: device descriptor read/8, error -71 [ 1015.565381][T16691] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1015.585569][T16691] usb 5-1: device descriptor read/8, error -71 [ 1015.640108][T20242] tipc: Enabled bearer , priority 0 [ 1015.651748][T20243] tipc: Resetting bearer [ 1015.665071][T20241] tipc: Disabling bearer [ 1015.694785][ T2152] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1015.702661][T16691] usb usb5-port1: unable to enumerate USB device [ 1015.854780][ T2152] usb 4-1: Using ep0 maxpacket: 16 [ 1015.865553][ T2152] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1015.879039][ T2152] usb 4-1: config 0 has no interface number 0 [ 1015.885499][ T2152] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.907428][ T2152] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1015.920634][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1015.930094][ T2152] usb 4-1: Product: syz [ 1015.967225][ T2152] usb 4-1: SerialNumber: syz [ 1016.097979][ T2152] usb 4-1: config 0 descriptor?? [ 1016.113758][ T2152] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 1016.141614][ T2152] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input93 [ 1016.365844][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.373244][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.381161][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.388914][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.396422][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.403589][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.411990][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.419460][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.426757][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.434268][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1016.442535][ T2152] usb 4-1: USB disconnect, device number 47 [ 1016.448547][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1016.464110][ T2152] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1017.299255][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3816'. [ 1017.330540][ T5942] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 1017.345031][ T5942] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1017.374698][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1017.395245][T11811] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1017.508798][ T24] usb 4-1: device descriptor read/64, error -71 [ 1017.576160][T11811] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1017.584972][T11811] usb 5-1: config 0 has no interface number 0 [ 1017.591514][T11811] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1017.762550][ T5942] usb 2-1: USB disconnect, device number 13 [ 1017.841202][T11811] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1017.852069][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1017.902743][T11811] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1017.910664][T20291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1017.920640][T20291] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.928164][T20291] IPv6: NLM_F_CREATE should be set when creating new route [ 1017.935599][T11811] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1017.935628][T11811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.935645][T11811] usb 5-1: Product: syz [ 1017.935658][T11811] usb 5-1: Manufacturer: syz [ 1017.935672][T11811] usb 5-1: SerialNumber: syz [ 1017.976596][T11811] usb 5-1: config 0 descriptor?? [ 1017.984391][T20267] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1017.997550][ T24] usb 4-1: device descriptor read/64, error -71 [ 1018.105003][ T24] usb usb4-port1: attempt power cycle [ 1018.207301][T11811] usb 5-1: probing VID:PID(2201:012C) [ 1018.222832][T11811] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1018.321327][T11811] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 1018.371348][T11811] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1018.418333][T11811] vub300 5-1:0.239: probe with driver vub300 failed with error -22 [ 1018.474706][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1018.493504][T11811] usb 5-1: USB disconnect, device number 16 [ 1018.616375][ T24] usb 4-1: device descriptor read/8, error -71 [ 1018.865181][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1018.885630][ T24] usb 4-1: device descriptor read/8, error -71 [ 1019.011878][ T24] usb usb4-port1: unable to enumerate USB device [ 1020.518868][T20327] bond0: entered promiscuous mode [ 1020.528817][T20327] bond_slave_0: entered promiscuous mode [ 1020.540770][T20327] bond_slave_1: entered promiscuous mode [ 1020.557970][T20327] macvlan1: entered promiscuous mode [ 1020.570885][T20327] hsr2: entered promiscuous mode [ 1020.584701][T11811] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1020.633173][T20329] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1020.736552][T11811] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 1020.745148][T11811] usb 4-1: config 0 has no interface number 0 [ 1020.816026][T11811] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1020.880669][T11811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.004365][T11811] usb 4-1: Product: syz [ 1021.020591][T11811] usb 4-1: Manufacturer: syz [ 1021.072011][T11811] usb 4-1: SerialNumber: syz [ 1021.100729][T11811] usb 4-1: config 0 descriptor?? [ 1021.148299][T11811] mvusb_mdio 4-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 1021.201988][T20340] sctp: [Deprecated]: syz.1.3833 (pid 20340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1021.201988][T20340] Use struct sctp_sack_info instead [ 1023.023813][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3838'. [ 1023.192963][T20396] binder: 20395:20396 ioctl 40101286 200000000040 returned -22 [ 1023.203685][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3846'. [ 1023.279501][T16691] usb 4-1: USB disconnect, device number 52 [ 1023.464690][T11811] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1023.714675][T11811] usb 2-1: Using ep0 maxpacket: 32 [ 1023.725793][T11811] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1023.749376][T11811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1024.104515][T11811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1024.384717][T11811] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1024.636692][T11811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.766513][T11811] usb 2-1: config 0 descriptor?? [ 1024.792046][T20394] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1024.835921][T11811] hub 2-1:0.0: USB hub found [ 1025.055739][T11811] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1025.107277][T11811] usbhid 2-1:0.0: can't add hid device: -71 [ 1025.123476][T11811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1025.657697][T20427] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 1025.703761][T11811] usb 2-1: USB disconnect, device number 14 [ 1026.394733][T11811] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1026.574792][T11811] usb 2-1: Using ep0 maxpacket: 8 [ 1026.587987][T11811] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1026.614687][T11811] usb 2-1: config 0 has no interface number 0 [ 1026.641708][T11811] usb 2-1: config 0 interface 12 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1026.652784][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3857'. [ 1026.735155][T11811] usb 2-1: config 0 interface 12 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 1026.735387][T16691] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1026.759385][T11811] usb 2-1: config 0 interface 12 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 1026.776615][T11811] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1026.787135][T11811] usb 2-1: config 0 interface 12 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1026.799500][T11811] usb 2-1: config 0 interface 12 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1026.848929][T11811] usb 2-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=60.6a [ 1026.868179][T11811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.882542][T11811] usb 2-1: Product: syz [ 1026.888440][T11811] usb 2-1: Manufacturer: syz [ 1026.893295][T11811] usb 2-1: SerialNumber: syz [ 1026.924047][T11811] usb 2-1: config 0 descriptor?? [ 1026.956780][T20442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.974253][T16691] usb 4-1: Using ep0 maxpacket: 8 [ 1026.981357][T20442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1026.992851][T16691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.015352][T16691] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1027.016291][T11811] ipaq 2-1:0.12: PocketPC PDA converter detected [ 1027.026953][T16691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.056779][T16691] usb 4-1: config 0 descriptor?? [ 1027.063200][T11811] usb 2-1: active config #0 != 1 ?? [ 1027.573573][ T9] usb 2-1: USB disconnect, device number 15 [ 1027.581020][T16691] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1027.742268][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3863'. [ 1027.768948][T20469] netlink: 'syz.6.3863': attribute type 1 has an invalid length. [ 1028.022528][ T2152] usb 4-1: USB disconnect, device number 53 [ 1028.134982][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1028.211427][T20478] syz_tun: entered allmulticast mode [ 1028.284865][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1028.291970][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.303944][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 7 [ 1028.316510][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 9272, setting to 1024 [ 1028.330110][ T9] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1028.340072][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.349645][ T9] usb 7-1: Product: syz [ 1028.353963][ T9] usb 7-1: Manufacturer: syz [ 1028.358817][ T9] usb 7-1: SerialNumber: syz [ 1028.365703][ T9] usb 7-1: config 0 descriptor?? [ 1028.379221][ T9] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1028.691080][T20485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.943717][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3870'. [ 1029.136591][T18265] usb 7-1: Failed to submit usb control message: -71 [ 1029.140436][ T9] usb 7-1: USB disconnect, device number 21 [ 1029.159923][ T30] audit: type=1326 audit(1755339008.746:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20501 comm="syz.1.3873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe226d8ebe9 code=0x0 [ 1029.726406][T18265] usb 7-1: unable to send the bmi data to the device: -71 [ 1029.750545][T18265] usb 7-1: unable to get target info from device [ 1029.771476][T18265] usb 7-1: could not get target info (-71) [ 1029.777781][T18265] usb 7-1: could not probe fw (-71) [ 1030.073272][T20528] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3880'. [ 1030.250977][T20540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.263233][T20540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.360984][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1031.087544][ T2152] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1031.208582][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1031.274880][ T2152] usb 5-1: Using ep0 maxpacket: 16 [ 1031.282504][ T2152] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1031.292097][ T2152] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1031.349166][ T2152] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1031.393764][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.417773][T20572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1031.563030][ T2152] usb 5-1: config 0 descriptor?? [ 1032.108102][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.134395][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.152549][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.181712][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.201976][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.265917][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.283026][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.307408][ T2152] hid-generic 00A0:0008:0003.004B: unknown main item tag 0x0 [ 1032.356694][ T2152] hid-generic 00A0:0008:0003.004B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1032.391486][T20584] fuse: Unknown parameter 'user_i00000000000000000000' [ 1032.641369][T20598] No buffer was provided with the request [ 1032.675022][ T2152] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1032.838119][ T2152] usb 7-1: config 0 has an invalid interface number: 254 but max is 0 [ 1032.855134][ T2152] usb 7-1: config 0 has no interface number 0 [ 1032.861319][ T2152] usb 7-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b2.35 [ 1032.874686][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.892863][ T2152] usb 7-1: config 0 descriptor?? [ 1032.901531][ T2152] ldusb 7-1:0.254: Interrupt in endpoint not found [ 1033.267553][ T43] usb 7-1: USB disconnect, device number 22 [ 1033.868508][T16691] usb 5-1: USB disconnect, device number 17 [ 1034.310022][T20631] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1034.318068][T20634] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1034.325596][T20634] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 1034.708514][T20638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.721226][T20638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.705648][T20653] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3915'. [ 1035.794723][ T2152] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1035.984871][ T2152] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1035.991735][ T2152] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1036.002021][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.019010][ T2152] usb 5-1: config 0 descriptor?? [ 1036.024865][T11811] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1036.184841][T11811] usb 4-1: Using ep0 maxpacket: 32 [ 1036.196022][T11811] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 1036.208980][T11811] usb 4-1: config 0 has no interface number 0 [ 1036.228071][T11811] usb 4-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 1036.239467][T11811] usb 4-1: config 0 interface 53 has no altsetting 0 [ 1036.255921][T20649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.260120][T11811] usb 4-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 1036.273899][T20649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.293291][T11811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.307888][T11811] usb 4-1: Product: syz [ 1036.312488][T11811] usb 4-1: Manufacturer: syz [ 1036.317718][T11811] usb 4-1: SerialNumber: syz [ 1036.324124][T11811] usb 4-1: config 0 descriptor?? [ 1036.335962][T20658] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1036.354360][T11811] iowarrior 4-1:0.53: no interrupt-in endpoint found [ 1036.575883][T20658] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 1036.596190][T20658] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3916'. [ 1036.623225][T20654] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1036.635207][T16691] usb 4-1: USB disconnect, device number 54 [ 1036.723890][ T2152] video4linux radio48: keene_cmd_set failed (-71) [ 1036.748702][ T2152] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1036.766543][ T2152] usb 5-1: USB disconnect, device number 18 [ 1036.897425][T16691] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 1036.942367][T16691] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1037.861535][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1038.484764][T11811] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 1038.654914][T11811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1038.715249][T11811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.734777][ T5942] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1038.752775][T11811] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1038.764150][T11811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.777538][T20718] program syz.6.3931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1038.802879][T11811] usb 5-1: config 0 descriptor?? [ 1038.923050][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 1038.951107][ T5942] usb 2-1: config 0 has no interfaces? [ 1038.960709][ T5942] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1038.970509][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1038.984775][ T5942] usb 2-1: SerialNumber: syz [ 1038.997138][ T5942] usb 2-1: config 0 descriptor?? [ 1039.144705][ T2152] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1039.384373][ T2152] usb 7-1: Using ep0 maxpacket: 16 [ 1039.395016][T18265] tipc: Subscription rejected, illegal request [ 1039.400518][ T2152] usb 7-1: config 8 has an invalid interface number: 39 but max is 0 [ 1039.410328][ T2152] usb 7-1: config 8 has no interface number 0 [ 1039.425202][T11811] glorious 0003:258A:0036.004D: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 1039.460718][ T2152] usb 7-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1039.546104][ T2152] usb 7-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1039.609648][ T2152] usb 7-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1039.689649][ T2152] usb 7-1: config 8 interface 39 has no altsetting 0 [ 1039.698098][ T5943] usb 5-1: USB disconnect, device number 19 [ 1039.760404][ T2152] usb 7-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1039.770060][ T2152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.782053][ T2152] usb 7-1: Product: syz [ 1039.789958][ T2152] usb 7-1: Manufacturer: syz [ 1039.796084][ T2152] usb 7-1: SerialNumber: syz [ 1040.021085][ T2152] ipheth 7-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1040.038943][ T2152] ipheth 7-1:8.39: probe with driver ipheth failed with error -71 [ 1040.076642][ T2152] usb 7-1: USB disconnect, device number 23 [ 1040.280131][T20730] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1040.498428][T20734] syz_tun: entered allmulticast mode [ 1040.755013][T11811] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1040.932557][ T2152] IPVS: starting estimator thread 0... [ 1040.941976][T11811] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1040.973846][T11811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.008171][T11811] usb 5-1: Product: syz [ 1041.023894][T11811] usb 5-1: Manufacturer: syz [ 1041.028862][T20744] IPVS: using max 79 ests per chain, 189600 per kthread [ 1041.063164][T11811] usb 5-1: SerialNumber: syz [ 1041.083330][T11811] usb 5-1: config 0 descriptor?? [ 1041.309261][T11811] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1041.368212][ T43] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1041.574960][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1041.626341][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1041.636810][ T5942] usb 2-1: USB disconnect, device number 16 [ 1041.673372][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.693871][ T43] usb 4-1: Product: syz [ 1041.758853][T11811] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1041.776279][ T43] usb 4-1: Manufacturer: syz [ 1041.798945][ T43] usb 4-1: SerialNumber: syz [ 1041.829361][ T43] usb 4-1: config 0 descriptor?? [ 1041.849843][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1042.529281][T11811] usb 5-1: USB disconnect, device number 20 [ 1042.542242][T20734] syz_tun: left allmulticast mode [ 1043.024427][ T43] gspca_sonixj: reg_r err -110 [ 1043.035166][ T43] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1043.174828][T20770] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1043.662433][T20780] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3946'. [ 1044.051454][T20787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.249935][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1044.437812][T20803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.446722][T20803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.452511][ T5943] usb 4-1: USB disconnect, device number 55 [ 1044.484817][T11811] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1044.511037][T20807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.532302][T20807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.636485][T11811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1044.670179][T11811] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1044.683881][T11811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.706380][T11811] usb 2-1: config 0 descriptor?? [ 1045.035066][T20797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.055848][T20797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.830289][T11811] video4linux radio48: keene_cmd_set failed (-71) [ 1045.849030][T11811] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1045.895957][T11811] usb 2-1: USB disconnect, device number 17 [ 1046.135005][ T2152] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1046.429733][ T2152] usb 5-1: Using ep0 maxpacket: 8 [ 1046.449635][ T2152] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1046.460146][ T2152] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1046.565874][T20834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.574935][T20834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.643002][ T2152] usb 5-1: Product: syz [ 1046.649804][ T2152] usb 5-1: Manufacturer: syz [ 1046.656399][ T2152] usb 5-1: SerialNumber: syz [ 1046.703038][ T2152] usb 5-1: config 0 descriptor?? [ 1046.718764][T20837] fuse: Bad value for 'group_id' [ 1046.724260][T20837] fuse: Bad value for 'group_id' [ 1046.780026][ T2152] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1047.144973][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1047.284946][ T2152] gspca_zc3xx: reg_w_i err -110 [ 1047.315157][ T2152] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1047.336410][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.362386][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1047.375225][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.410861][ T9] usb 2-1: Product: syz [ 1047.416087][ T9] usb 2-1: Manufacturer: syz [ 1047.437289][ T9] usb 2-1: SerialNumber: syz [ 1047.482987][ T9] usb 2-1: config 0 descriptor?? [ 1047.519300][ T9] ljca 2-1:0.0: bulk endpoints not found [ 1047.869545][T20850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3967'. [ 1048.456926][T11811] usb 2-1: USB disconnect, device number 18 [ 1048.733379][ T9] usb 5-1: USB disconnect, device number 21 [ 1048.804893][ T5942] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1048.894879][T11811] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1048.935138][ T5942] usb 4-1: device descriptor read/64, error -71 [ 1049.024831][T11811] usb 2-1: device descriptor read/64, error -71 [ 1049.185452][ T5942] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1049.291193][T11811] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1049.306466][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1049.314827][ T5942] usb 4-1: device descriptor read/64, error -71 [ 1049.427021][ T5942] usb usb4-port1: attempt power cycle [ 1049.444981][T11811] usb 2-1: device descriptor read/64, error -71 [ 1049.477110][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1049.483989][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1049.497873][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.511141][ T9] usb 7-1: config 0 descriptor?? [ 1049.555000][T11811] usb usb2-port1: attempt power cycle [ 1049.734180][T20871] fuse: Bad value for 'group_id' [ 1049.742805][T20871] fuse: Bad value for 'group_id' [ 1049.774768][ T5942] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1049.797900][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.817124][ T5942] usb 4-1: device descriptor read/8, error -71 [ 1049.888237][T20874] ALSA: mixer_oss: invalid OSS volume '' [ 1049.900395][T20874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.900636][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.911691][T20874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.955467][T11811] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1049.975780][T11811] usb 2-1: device descriptor read/8, error -71 [ 1050.116209][ T5942] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1050.155880][ T5942] usb 4-1: device descriptor read/8, error -71 [ 1050.215528][T11811] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1050.245455][T11811] usb 2-1: device descriptor read/8, error -71 [ 1050.275093][ T5942] usb usb4-port1: unable to enumerate USB device [ 1050.354946][T11811] usb usb2-port1: unable to enumerate USB device [ 1050.386710][ T9] video4linux radio48: keene_cmd_set failed (-71) [ 1050.406321][ T9] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 1050.426947][ T9] usb 7-1: USB disconnect, device number 24 [ 1051.062465][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3977'. [ 1051.084468][T20893] input: syz0 as /devices/virtual/input/input95 [ 1051.314532][T20894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.844710][ T5942] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1052.017238][T20912] fuse: Bad value for 'group_id' [ 1052.028736][ T5942] usb 7-1: config 0 has no interfaces? [ 1052.034450][T20912] fuse: Bad value for 'group_id' [ 1052.347886][ T5942] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1052.359263][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.387289][ T5942] usb 7-1: Product: syz [ 1052.402107][ T5942] usb 7-1: Manufacturer: syz [ 1052.413695][ T5942] usb 7-1: SerialNumber: syz [ 1052.429507][ T5942] usb 7-1: config 0 descriptor?? [ 1053.204725][T16691] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1053.506559][T16691] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.513564][T16691] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1053.533348][T16691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.563283][T16691] usb 5-1: config 0 descriptor?? [ 1053.912475][T20929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.994930][T20929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.068104][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1054.192074][ T2152] usb 7-1: USB disconnect, device number 25 [ 1054.468283][T16691] video4linux radio48: keene_cmd_set failed (-71) [ 1054.476840][T16691] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1054.592942][T16691] usb 5-1: USB disconnect, device number 22 [ 1054.623301][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.631000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.853102][T20964] tipc: Enabling of bearer rejected, failed to enable media [ 1054.883638][T20970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.915641][T20970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.937491][T20970] program syz.5.3995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.920304][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3999'. [ 1056.186078][ T2152] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1056.335092][ T2152] usb 7-1: Using ep0 maxpacket: 8 [ 1056.348046][ T2152] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1056.358527][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.378376][ T2152] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1056.388727][ T2152] pvrusb2: ********** [ 1056.393005][ T2152] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1056.427203][ T2152] pvrusb2: Important functionality might not be entirely working. [ 1056.498505][ T2152] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1056.617755][ T2152] pvrusb2: ********** [ 1056.640664][ T2344] pvrusb2: Invalid write control endpoint [ 1056.846791][T20986] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 1056.866703][ T2344] pvrusb2: Invalid write control endpoint [ 1056.872821][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1056.889549][ T2152] usb 7-1: USB disconnect, device number 26 [ 1056.936921][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1057.122150][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1057.134991][ T2344] pvrusb2: Device being rendered inoperable [ 1057.141399][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1057.154575][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1057.181838][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1057.186715][T21003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1057.203034][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1057.213794][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1057.274479][T21004] fuse: Unknown parameter 'Fd' [ 1057.375050][T16691] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1057.585158][T16691] usb 2-1: device descriptor read/64, error -71 [ 1057.824737][T16691] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1057.957596][T16691] usb 2-1: device descriptor read/64, error -71 [ 1058.067562][T16691] usb usb2-port1: attempt power cycle [ 1058.096397][T21022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1058.902782][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805545c000: rx timeout, send abort [ 1058.911647][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805545c000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1058.926428][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805545e400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1058.944832][T16691] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1058.976108][T16691] usb 2-1: device descriptor read/8, error -71 [ 1059.004818][ T5954] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1059.166277][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.217379][T16691] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1059.217584][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1059.247077][T16691] usb 2-1: device descriptor read/8, error -71 [ 1059.247736][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1059.267184][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1059.277408][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1059.292444][ T5954] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1059.301923][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1059.310786][ T5954] usb 5-1: Product: syz [ 1059.315271][ T5954] usb 5-1: Manufacturer: syz [ 1059.320195][ T5954] usb 5-1: SerialNumber: syz [ 1059.328425][ T5954] usb 5-1: config 0 descriptor?? [ 1059.358037][T16691] usb usb2-port1: unable to enumerate USB device [ 1059.556868][ T5954] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1059.564803][ T5954] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1059.583586][ T5954] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1059.594248][ T5954] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1059.604111][ T5954] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1059.618300][ T5954] usb 5-1: USB disconnect, device number 23 [ 1059.625482][T16691] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1059.774882][T16691] usb 4-1: device descriptor read/64, error -71 [ 1060.014809][T16691] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1060.014828][ T5954] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1060.094314][T21050] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 1060.114135][T21050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1060.154796][T16691] usb 4-1: device descriptor read/64, error -71 [ 1060.166274][T21054] loop7: detected capacity change from 0 to 7 [ 1060.184817][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1060.208373][ T5954] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1060.216811][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805545dc00: rx timeout, send abort [ 1060.225668][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805545dc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1060.225839][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033a9ec00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1060.259008][ T5954] usb 5-1: config 0 has no interface number 0 [ 1060.269743][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1060.270262][T16691] usb usb4-port1: attempt power cycle [ 1060.284785][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.284813][ T5954] usb 5-1: Product: syz [ 1060.284828][ T5954] usb 5-1: Manufacturer: syz [ 1060.284843][ T5954] usb 5-1: SerialNumber: syz [ 1060.309247][ T5954] usb 5-1: config 0 descriptor?? [ 1060.557226][ T5954] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 1060.569682][ T5954] usb 5-1: USB disconnect, device number 24 [ 1060.883753][T16691] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1060.908937][T21069] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1060.936270][T16691] usb 4-1: device descriptor read/8, error -71 [ 1061.100674][T21073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4021'. [ 1061.118460][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4021'. [ 1061.185629][T16691] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1061.451998][T16691] usb 4-1: device descriptor read/8, error -71 [ 1061.576995][T16691] usb usb4-port1: unable to enumerate USB device [ 1061.724699][ T5954] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1061.888324][ T5954] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1062.002294][ T5954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1062.048069][ T5954] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1062.139102][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.164067][ T5954] usb 5-1: config 0 descriptor?? [ 1062.186981][T21074] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1062.774827][ T2152] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1062.827708][ T5954] elecom 0003:056E:010D.004E: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0 [ 1062.864923][T16691] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1062.946862][ T2152] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1062.957284][ T2152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1062.989519][ T2152] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1063.041169][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1063.056524][T16691] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1063.084720][T16691] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1063.097477][ T2152] usb 4-1: Product: syz [ 1063.102083][ T5954] usb 5-1: USB disconnect, device number 25 [ 1063.110853][ T2152] usb 4-1: Manufacturer: syz [ 1063.124974][ T2152] usb 4-1: SerialNumber: syz [ 1063.157308][T16691] usb 7-1: config 0 has no interface number 0 [ 1063.167014][ T2152] usb 4-1: config 0 descriptor?? [ 1063.173758][T16691] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1063.197547][ T2152] usb 4-1: selecting invalid altsetting 0 [ 1063.206050][T16691] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1063.228971][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1063.229902][T16691] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1063.251386][T16691] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1063.291480][T16691] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1063.315318][T16691] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1063.329349][T16691] usb 7-1: Product: syz [ 1063.333663][T16691] usb 7-1: SerialNumber: syz [ 1063.345146][T16691] usb 7-1: config 0 descriptor?? [ 1063.541548][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 1063.562138][T21105] input: syz0 as /devices/virtual/input/input96 [ 1063.611575][T16691] input: syz (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input97 [ 1063.812544][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.838863][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.396248][ T5954] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1064.479662][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1064.555057][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1064.562442][ T5954] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1064.577370][ T5954] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1064.588637][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.597029][ T5954] usb 5-1: Product: syz [ 1064.603658][ T5954] usb 5-1: Manufacturer: syz [ 1064.611308][ T5954] usb 5-1: SerialNumber: syz [ 1064.634674][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1064.657643][ T5954] usb 5-1: config 0 descriptor?? [ 1064.666409][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.686222][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.697525][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1064.708665][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1064.719421][ T5954] usb 5-1: setting power ON [ 1064.727014][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 1064.733340][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.746282][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1064.770670][ T43] usb 2-1: config 0 descriptor?? [ 1064.782853][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1064.805128][ T43] hub 2-1:0.0: USB hub found [ 1064.829685][ T5954] usb 5-1: media controller created [ 1064.905798][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1064.974213][T21117] dvb-usb: bulk message failed: -22 (3/0) [ 1064.980147][T21117] dvb-usb: bulk message failed: -22 (5/0) [ 1064.987703][T21117] cxusb: i2c wr: len=79 is too big! [ 1064.987703][T21117] [ 1065.028799][ T43] hub 2-1:0.0: 1 port detected [ 1065.051518][ T5954] usb 5-1: selecting invalid altsetting 6 [ 1065.079876][ T5954] usb 5-1: digital interface selection failed (-22) [ 1065.091104][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1065.117709][ T5954] usb 5-1: setting power OFF [ 1065.128321][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 1065.142172][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1065.151965][ T43] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1065.166147][ T43] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1065.189328][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1065.195768][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1065.208321][ T5954] (NULL device *): no alternate interface [ 1065.403362][ T43] usb 2-1: USB disconnect, device number 27 [ 1065.428004][T21137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4039'. [ 1065.463151][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1065.535926][ T5954] usb 5-1: USB disconnect, device number 26 [ 1065.604786][T16691] usb 4-1: USB disconnect, device number 64 [ 1065.740534][ T2152] usb 7-1: USB disconnect, device number 27 [ 1066.125399][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4043'. [ 1066.165157][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4043'. [ 1066.528481][T21147] ip6gretap0: entered promiscuous mode [ 1066.535387][T21147] syz_tun: entered promiscuous mode [ 1066.541182][T21147] debugfs: 'hsr1' already exists in 'hsr' [ 1066.552568][T21147] Cannot create hsr debugfs directory [ 1066.672894][T21157] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4044'. [ 1067.038443][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1067.062016][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1067.187533][ T5943] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1067.394711][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 1067.415659][ T31] INFO: task syz.2.3314:18514 blocked for more than 143 seconds. [ 1067.424496][ T31] Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 [ 1067.441024][ T5943] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1067.469074][T21167] netlink: 'syz.1.4047': attribute type 10 has an invalid length. [ 1067.477672][T21167] veth1_vlan: entered allmulticast mode [ 1067.487121][T21167] team0: Device veth1_vlan failed to register rx_handler [ 1067.518086][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.561489][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1067.597959][ T5943] usb 7-1: config 0 descriptor?? [ 1067.618957][ T31] task:syz.2.3314 state:D stack:27880 pid:18514 tgid:18510 ppid:17056 task_flags:0x400140 flags:0x00004006 [ 1067.689452][ T31] Call Trace: [ 1067.730602][ T31] [ 1067.764789][ T31] __schedule+0x1798/0x4cc0 [ 1067.783149][ T31] ? __pfx___schedule+0x10/0x10 [ 1067.802013][ T31] ? schedule+0x91/0x360 [ 1067.810054][ T31] ? rcu_is_watching+0x15/0xb0 [ 1067.820797][ T31] ? lock_release+0x4b/0x3e0 [ 1067.825653][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1067.831782][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1067.838343][ T31] schedule+0x165/0x360 [ 1067.842949][ T31] schedule_preempt_disabled+0x13/0x30 [ 1067.848998][ T5943] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1067.857133][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1067.871685][ T31] __mutex_lock+0x7e6/0x1360 [ 1067.880847][ T31] ? __mutex_lock+0x5b6/0x1360 [ 1067.894214][ T5943] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1067.901934][ T5943] usb 7-1: media controller created [ 1067.907595][ T31] ? usbdev_open+0x16e/0x760 [ 1067.918598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1067.930424][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1067.939418][ T31] ? bus_find_device+0x273/0x2b0 [ 1067.947521][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1067.969823][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1067.987896][ T31] ? usbdev_open+0xa7/0x760 [ 1068.003678][ T31] usbdev_open+0x16e/0x760 [ 1068.174168][ T5943] az6027: usb out operation failed. (-71) [ 1068.184850][ T5943] az6027: usb out operation failed. (-71) [ 1068.192172][ T5943] stb0899_attach: Driver disabled by Kconfig [ 1068.204984][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1068.210520][ T5943] az6027: no front-end attached [ 1068.210520][ T5943] [ 1068.218035][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1068.223641][ T5943] az6027: usb out operation failed. (-71) [ 1068.229845][ T31] chrdev_open+0x4cc/0x5e0 [ 1068.234722][ T5943] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1068.242036][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1068.247271][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1068.255812][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input98 [ 1068.268205][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1068.273239][ T31] do_dentry_open+0x953/0x13f0 [ 1068.281286][ T5943] dvb-usb: schedule remote query interval to 400 msecs. [ 1068.288474][ T31] vfs_open+0x3b/0x340 [ 1068.292621][ T31] ? path_openat+0x2ecd/0x3830 [ 1068.297611][ T5943] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1068.305776][ T31] path_openat+0x2ee5/0x3830 [ 1068.310505][ T31] ? arch_stack_walk+0xfc/0x150 [ 1068.318382][ T5943] usb 7-1: USB disconnect, device number 28 [ 1068.324918][ T31] ? stack_depot_save_flags+0x40/0x860 [ 1068.331818][ T31] ? __pfx_path_openat+0x10/0x10 [ 1068.337055][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.343406][ T31] do_filp_open+0x1fa/0x410 [ 1068.348087][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1068.353332][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1068.358422][ T31] ? alloc_fd+0x64c/0x6c0 [ 1068.362907][ T31] do_sys_openat2+0x121/0x1c0 [ 1068.368022][ T31] ? __se_sys_futex+0x36f/0x400 [ 1068.373040][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1068.381557][ T31] ? rcu_is_watching+0x15/0xb0 [ 1068.386465][ T31] __x64_sys_openat+0x138/0x170 [ 1068.391463][ T31] do_syscall_64+0xfa/0x3b0 [ 1068.396154][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.402325][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1068.407124][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.413292][ T31] RIP: 0033:0x7fe2ccb8d550 [ 1068.417840][ T31] RSP: 002b:00007fe2cdaa1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1068.426371][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe2ccb8d550 [ 1068.434437][ T31] RDX: 0000000000000002 RSI: 00007fe2cdaa1c10 RDI: 00000000ffffff9c [ 1068.442705][ T31] RBP: 00007fe2cdaa1c10 R08: 0000000000000000 R09: 0000000000000000 [ 1068.450791][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1068.459200][ T31] R13: 00007fe2ccdb6128 R14: 00007fe2ccdb6090 R15: 00007fe2ccedfa28 [ 1068.467300][ T31] [ 1068.470566][ T31] INFO: lockdep is turned off. [ 1068.476178][ T31] NMI backtrace for cpu 0 [ 1068.476202][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1068.476226][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1068.476237][ T31] Call Trace: [ 1068.476245][ T31] [ 1068.476279][ T31] dump_stack_lvl+0x189/0x250 [ 1068.476308][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.476331][ T31] ? __pfx__printk+0x10/0x10 [ 1068.476361][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1068.476384][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1068.476404][ T31] ? __pfx__printk+0x10/0x10 [ 1068.476439][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1068.476468][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1068.476491][ T31] watchdog+0xf93/0xfe0 [ 1068.476516][ T31] ? watchdog+0x1de/0xfe0 [ 1068.476540][ T31] kthread+0x70e/0x8a0 [ 1068.476562][ T31] ? __pfx_watchdog+0x10/0x10 [ 1068.476582][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.476603][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1068.476625][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.476650][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.476671][ T31] ret_from_fork+0x3f9/0x770 [ 1068.476692][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.476713][ T31] ? __switch_to_asm+0x39/0x70 [ 1068.476736][ T31] ? __switch_to_asm+0x33/0x70 [ 1068.476759][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.476778][ T31] ret_from_fork_asm+0x1a/0x30 [ 1068.476804][ T31] [ 1068.476839][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1068.633041][ C1] NMI backtrace for cpu 1 [ 1068.633059][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1068.633078][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1068.633088][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1068.633114][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1068.633128][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1068.633144][ C1] RAX: 94c9bec48fda0d00 RBX: ffffffff81968308 RCX: 94c9bec48fda0d00 [ 1068.633157][ C1] RDX: 0000000000000001 RSI: ffffffff8be334e0 RDI: ffffffff81968308 [ 1068.633169][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 1068.633180][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38130 [ 1068.633191][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 1068.633202][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1068.633215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1068.633226][ C1] CR2: 000000110c3660f0 CR3: 0000000075d36000 CR4: 00000000003526f0 [ 1068.633243][ C1] Call Trace: [ 1068.633250][ C1] [ 1068.633256][ C1] default_idle+0x13/0x20 [ 1068.633271][ C1] default_idle_call+0x74/0xb0 [ 1068.633287][ C1] do_idle+0x1e8/0x510 [ 1068.633304][ C1] ? __pfx_do_idle+0x10/0x10 [ 1068.633324][ C1] cpu_startup_entry+0x44/0x60 [ 1068.633338][ C1] start_secondary+0x101/0x110 [ 1068.633359][ C1] common_startup_64+0x13e/0x147 [ 1068.633383][ C1] [ 1068.727584][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1068.727612][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1068.727635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1068.727646][ T31] Call Trace: [ 1068.727655][ T31] [ 1068.727663][ T31] dump_stack_lvl+0x99/0x250 [ 1068.727689][ T31] ? __asan_memcpy+0x40/0x70 [ 1068.727710][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.727729][ T31] ? __pfx__printk+0x10/0x10 [ 1068.727756][ T31] vpanic+0x281/0x750 [ 1068.727775][ T31] ? __pfx_vpanic+0x10/0x10 [ 1068.727793][ T31] ? preempt_schedule+0xae/0xc0 [ 1068.727816][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1068.727839][ T31] panic+0xb9/0xc0 [ 1068.727857][ T31] ? __pfx_panic+0x10/0x10 [ 1068.727875][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1068.727902][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1068.727923][ T31] watchdog+0xfd2/0xfe0 [ 1068.727949][ T31] ? watchdog+0x1de/0xfe0 [ 1068.727972][ T31] kthread+0x70e/0x8a0 [ 1068.727993][ T31] ? __pfx_watchdog+0x10/0x10 [ 1068.728014][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.728035][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1068.728055][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.728077][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.728096][ T31] ret_from_fork+0x3f9/0x770 [ 1068.728115][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.728133][ T31] ? __switch_to_asm+0x39/0x70 [ 1068.728154][ T31] ? __switch_to_asm+0x33/0x70 [ 1068.728174][ T31] ? __pfx_kthread+0x10/0x10 [ 1068.728194][ T31] ret_from_fork_asm+0x1a/0x30 [ 1068.728221][ T31] [ 1068.732826][ T31] Kernel Offset: disabled