last executing test programs: 15m7.961960791s ago: executing program 4 (id=3292): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab4", 0x26, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b", 0x9c}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15m7.870676927s ago: executing program 4 (id=3293): r0 = syz_usb_connect$hid(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x709b42) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) 15m7.281038557s ago: executing program 4 (id=3294): ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000000c0)={0x0, 0x2000000, {0xfffff001, 0x1, 0x2019, 0x5, 0x7, 0x4, 0x2, 0x3}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getrandom(&(0x7f00000000c0)=""/47, 0x2f, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) unshare(0x2000400) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x7c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x8848, @void, @val, @val={0x3, 0x1, 0x5c}, @val={0x4, 0x6, {0x31, 0xfc, 0x0, 0xef}}, @val={0x6, 0x2, 0x10}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x100000000000000) socket$nl_route(0x10, 0x3, 0x0) 15m6.94999222s ago: executing program 3 (id=3295): gettid() r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x11, 0x3, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/19, 0x13}, 0x80}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)={'exec ', '&\f&\x00\x00\x00\x00\x00\x00h\xd4y\xc7\xab\x86-A:\x92\xf5[\x9fk6\x02^\x0ftp(\xc2\x98\x02\x00G\xa1y\x8dzq\x98\x82\xa0\x16\t\x9c\xd6$\v\b\x8b\xf14;u\x89\xb7\vY\xbc\xda};\r\xd8~<\xbaea\xd6\x84+\x10\xd32&\xf9\x96\xccf\xef\xe2\xbb\xafx8\x90\xe9\x9bf\xa5\xf4T\x952\xfe\xcd\x01a\xf5\xae\xa9\"\x9f\xb3TN\xe8\x1c\x85X\xf2c\xbf\xc3\xeb`\xb9\x83\xcf!F\\0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) r6 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r6, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) 15m6.581976485s ago: executing program 4 (id=3299): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000580)=ANY=[], 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) (fail_nth: 4) 15m6.001208987s ago: executing program 3 (id=3301): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x143000, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x3, 0x20000008, 0x9, 0x3, 0x2, 0x11, 0xffffffffffffffff}}) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x1c) read$FUSE(r2, &(0x7f0000004900)={0x2020, 0x0, 0x0}, 0x2020) socket$l2tp(0x2, 0x2, 0x73) write$FUSE_INIT(r2, &(0x7f00000006c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000080007d0000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf257b0000001400fe0089b05607fdb1a2ca3161d52ec15963820a000600ffffffffffff00001400fe006ce48e6f0adbe5d80b316280afedab5e0a000600ffffffffffff00001400fe000c7c4bd531dc291e5a0822b4df9c257e140002010cf31660fa74ed00529a0d8f918d60ba"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x40806685, &(0x7f0000000000)={0x0, 0x7fff}) r6 = syz_open_dev$vbi(&(0x7f0000000800), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000180)={0x6, @output={0x0, 0x1, {0x1000, 0x9}, 0x7, 0x666a}}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x34004004}, 0x4000) 15m5.437763102s ago: executing program 4 (id=3307): r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r8, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m4.187333468s ago: executing program 2 (id=3312): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1, 0x0, 0x0, 0x91}}], 0x1, 0x20008000) 15m3.43384409s ago: executing program 2 (id=3316): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f68737200000000080003000300000018000380140003"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4003}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000300001c005a80180001"], 0x4c}}, 0x0) 15m3.33079422s ago: executing program 2 (id=3317): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x9bf, 0x401, 0x6, 0x3, 0x650086f5, 0xffffffffffffffff}) getpgid(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101041, 0x40) readlinkat(r2, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)=""/253, 0xfd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000340)=r0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400200, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f00000003c0)) socketpair(0xb, 0x3, 0x5, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1, 0x100) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x2a, 0x0, "3e7ffa9a742f3db86553b29979782f2d9c9ced044bfb74e5698b22a5987bdcc4c6a62ccf46b61e2dcb0453e1f6c41307be7444cc385e6ca89b9eb992599bd15c544a8e3a91beefd4eacc3730b3f31d3f"}, 0xd8) statx(r5, &(0x7f0000000580)='./file0\x00', 0x400, 0x8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r8, r9, r9) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$BLKOPENZONE(r5, 0x40101286, &(0x7f0000002700)={0x4, 0x9}) ioctl$OCFS2_IOC_REFLINK(r5, 0x40186f04, &(0x7f00000027c0)={&(0x7f0000002740)='Q+\x00', &(0x7f0000002780)='[\x00', 0x1}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002800)={{{@in=@private, @in=@initdev}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000002900)=0xe8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000029c0)={r5, &(0x7f0000002940)="0b4628afd2fd0784499ee23442978bf13d3e4b664037a0b4d2aadcb45052a62bbe8fb2fb6a1e53159fd15df6", &(0x7f0000002980)=@tcp6=r6}, 0x20) r10 = add_key$keyring(&(0x7f0000002a80), &(0x7f0000002ac0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000002a00), &(0x7f0000002a40)={'syz', 0x3}, 0x0, 0x0, r10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002b00), 0x202002, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000002b40)={0x2b, @remote, 0x4e20, 0x1, 'rr\x00', 0x10, 0x8, 0x27}, 0x2c) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000002b80)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000002bc0)='cifs.spnego\x00', &(0x7f0000002c00)=@chain={'key_or_keyring:', r10}) 15m3.126002508s ago: executing program 2 (id=3319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a0202000005240600", @ANYRES64=r0], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 15m2.654849608s ago: executing program 3 (id=3321): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 15m2.417615453s ago: executing program 3 (id=3322): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0xe, 0x12, r0, 0x0) read$dsp(r0, &(0x7f0000000280)=""/247, 0xf7) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 15m2.328565056s ago: executing program 4 (id=3323): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001040), 0x800, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001080)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{}, "d713ac6f9817ffa21dd7177f2620976ee5d8e9acbef5853c4329aeeb2adb5c9515b4cce50e25e517572613472a06463b3acc5bffa87ea864c154e299786b39a1bb187e0708ed9bb8ee2d53f21098b0f6d155c6c169d525502c0164c9906efd7bd6efdeed3ee6f69143e62bda96c3f73cca64e34397c13a055c54cadbb9d9b608ccbe9476aef5d583667ffbcca0779535d0621de70aa719da6658e0aa54952d41eb50f16adfbc25c9631c7dd0e98b7610bb7a85b07b5f93ec997f834e9b775cb5aa2a48f227b68bbb88377a9d8ce70f5eaeb5ede68482108bd4ca4bd3f1dacf155eb793670e33b6677f9b1061ba30fa2ed41cac7f2b111446f19e9e5c4ac00af519b623f794fd6110647cf9e44488c94096f08cc4c2d5c66b9ccb4f5ca4961073e8ec83aba22b2cb674d14b931934fbc535577ba6b273106ef692826c73ea3d6cca6cf4ecf4f8daa6034994c405bf63c09cebd8b1dc512d3854f580fec751b921d69f10a8d3ac0841ea61a5ecb31c98d997459fcf60dd9dad93c81f2680aca87dcceac8c0357eb14399b7542416b089ac5f7549dbd34e410604a94634dfbe76cd079f1ca305547a2814e0e7aba870438249d2d4d577d5ee000fe278356e8a9bd0a76c9d95c4a3a2d54dc75c13013a1d774dd764408f8a07abb084a2e7625936a89dde2396735c57ba96d504793a2efb6aea597dff8b33fb00dd4f2435f58cfd3a1788773db9907c52466d5048cdf3fbebeaa8fd5bca96afb85930a0bccd8ecd3a0b228cc77bcb4f5d07ab9111f6f58a8e4b7c3e852c252e162604a284d606d2abc1783b221298aa746829aabe85f11822d429ef0b99a7a1bec0c90c9223e1503bd3495a71c9dbf34a0f6b75a71e5fc09ffac04bcf9d58e94b6a984dd0c710b1ae8e642aadf446f4f4d3a60f4a2cc7e8e24a27e9703fdee373987b50cd904f5245c5de7d52c86e073033589b57cd90b44723cd6185792ba5a72979a9781aa5eb1a7128bf12bb6e6631e63abc0ff865c765348baf3557ffa9fe2918a316ecb743ea36e14e1236640d6e2bac50425ff88f060bbbc62e3d8c37be137680580e686fe7badcc35cbcb1fc5f1c5a1f0ec16b9db9b59d39f39d4c7c15d1cabcecbf29a9a516329a2511565137efd3cd2ca4dced7bf0f808104a8c572328527f82ecc60be846dee44db8e38cadb236655cb5d135a6c86ef8663326df9b120786f57e90e631d9f8208408fab8053bb9ae511aed21e62b600d1c468f478f155fc71a3d2fd2a98c7d6beefaca0f5e1cb62c6604c3d5e7050a0bdd2005b4ea87561283346933b24f3f14de691984e6bc2c40568cf30fee319e9059a3f6a65b25b45662a987b28be633753432816c8f08cf655d94b27f835f11f820ef591bfaf906613dbca0e3934ffd4be5b4084242b67e3db9c77664a35f80bd2161786a121771e13001d6c696a6275ecc82b8b54c9efb2228c852eab9b98eb13b31aab10c4295908d985c3b44255232fd973f22cadc2edebd26dda1f77d7b7229b0190202bc91bb3085da848b5a148f7b6da247edf92cccb9b0e830f541c3de7081b4e469fcd66c5be8b20b4d2e40abb2f7af782609624f53e87a7cd0dad753eb1ab7b21136db767bdfe8272c09b82789e895ec4f3ba670be0fc8bd1e25ca03981328e03662bf3b026dd76f975f412c1d76ca791d14311497744c8c08dc3f4aad850ad844b0c9bf6437dd2ee3388b0f59359640b6c69b5b75c16926ac4b3202138d1bccd628559f2d6d46610ee78abeec66e44defa009508e04a5832ebb396e8ac3977bdbbe074bcd0919bc2a81dcd2868f68a89e6bb3c9aec1b51de96308acd8f7275fdec548733ccdb36c5ce279a16da998db9846ffa589f260c270cfd58789fc413e4ce38044cb756ac7d7d9cb8da98ebd882daf0dd41a2814e190462142cc08a4605a647984db2120cfebd1051f9a217e1401c41be52ec6856bc1eb673349ff73c44af0c54e0f7d921f920275fc65426ceea2e503071a57cd63172511c972153fb915a2ba285d851ab003fc0a18bc7b9fd5926dc81bf0d4a37d380658a75f4355668c249a2693285b7e6501fdc352a83e1013fe5e1ada5159c35a4345a856e87d2656158eb598a49412b22ab720fcdd9d79e98d55bca4f1432d6618f267def21bced545b38c85f83858d26dcf17d7a4477e3707fe5dd7c11808edc81136757c36c3ce52c11573357341041dd93dde5963b768ad2ba507ee4c36cb6dda9991c6c592d59ea83c612ad6f4126e1bbb3c923f84f5ca20390b42da0d275796ecee21f8d09f9f903dd5f0eeaa88b7a5edc484bdf0ff5586a14d2d0cd9897983405144d28a579654a97e8a02ca91131d65cb88213ea178ce8375ed1e899d0d759fac7e446eab34a0338df5dc58be2bb48d36145c2db2416f74d945b510f2c7db7a99715f09d269da2304a3dff1ab78b10a9e0fbc7b6fef74ee0f0da42b583c54e8de0a5a5046ee75d9fac27985cd136bcf90ecd5cc62fc864dc46161b2387d2d4f3325bed4dba8c9582a7b61da8da8450fdea96c38e3075a4a00d184413412b77c9de27d8c2e01c76295b5f0fc4079d86a6b0cbded8969ae37d7dd5c208c3620eccbfa263adfbe4d59134d4f5a1e562bc6007514b433deef364107ad04af4bdca57ed30e1a42fc15ee4224fe048f03291d7c56c9973b52683ffe8b0ed80e90647de4ece49cb647c8c26f009968bb031af0e9e9206bd1573cde9cde4d7399679ba7620cc76d2121bc9af8e0b4f662689b1e2d6a06721db809bb5ca1d66c9edf6d8196db75b7912cc54a96f915a0e2f7e6759b188660cdee4e08ea8a0fa1dc13acfa0912d3066c353e846ca22d362ecd38b92b4af9fd3549f69031c72691abdedcdee4d0a5ea6f1d25e4d2df1265af4295eacbd3fb5041a4c4ba2ccef899e0e550a553340ff85d7d2eed725c50e94231d60924dbf2908b8c1ba1b4ee784b4086212e53e9331303181e47db6cef0f4a44571dca68730fc7357af14b567bb67310be0ab91c44e9fae66a742f795f80717e62b44ac6524622415aedaf5b2ceccda03a9f99b31a97eafd68dc7472cd13f6e7cd43d647a34c4ae2ecd0b1bc3765d6959dacb6af7cf50979939e0872d25fe1b522d73aa190bc37425bc8dcd2eddc4df9558a40263aa611aef5dfac4a4c5e2443cd320554cc740c18cd1377a2d39e1a653837ba6ea2ddf72297cc92ec55a1b4fa7877832a51757e3bb8b3718b2bca44a46ce5386fb9a431d67d83850d1fe4bc5f6c12f341fd582cde91fe2988f0042c8abd2f5b2bdccdba1bc7c85d0cbfa41192f0efb40fb07fe7d26c3efb1788a925961ab4137f2b387f006615642d74465eac55b21b29b6950f8a65e3a83d1f288c78948a42883d4fb7918da46dac31095fb9209cb4255427f054316b46b3ba939228faff96c7538047e9a4efa29f586d66a60ba6ab56a0a301983440b9d1925a4a16d4983dfd82830a973b001d011655bc015c9d21ca63afd3f9b0d4a5b57681aabe5ba0ab48bcd3b94d309eecdbd77ce07717d1e109bd75f97aedf46abb235bee88c1b11eeaf082bcd5da3d13110b8fa135562221dad97334330034abe05fef0850a2da844b9772973bd5b09326818e33e0c39a503fe2d75c3a92d9255c7abec42ae102ee69f88f84f22827f83e28d2fc13005847e18caabb0923b1536dad9cb7be8df90188151cb42656d8e0294eb6765e5045ff0d7c6182759097dd8abe1f243a8a3983c11425b2356e37c3baa3ce6b2262605d3dd97ef37b4bb973664611efaf5e74d0c31db2a51f42a4c7979cfdc568321fda8858de0c628b58dd1bea98f387d45f8fde6aa4bc20df10aca9e0dc9ea1339e01b10c4ab88589875699b88a667a0c15ba65b45d953e6edf4e0436e7ff0d72a567fd8edf14133ae0f919c7a51d1a17b185fba1a7726156626637ce1942bccc98f9c2363b65a9a58cf94b77e1243ee10dd19dd0e3edc8d208a67d3f41a42a28dc7c1508cfb5f203b1838102cf88886a03c08ae5f38552193e2472ba9e02915de657bade05a75205a0c9cbdd4338344bbac7eabf84cd53d6b69ea80e61963036112352fe94576cdac7630cf3925be34488b5b9b1ad38fff915a4fc6f7b7f914d7e7a80194004443498bfb3bed0592851bd8c390a949abb44a9c5320b58a4df9e138381430584115d3dbb4f40c293df1d469e06c0d7de7277ef8551614845483af08845747a2e2104874dcbd16c55332b76273e01c4db452af73387a317438716c03b0e8da5b2c6a9b4930998c910fa0c086dba7dd5c8b803dc7f51862d4b29c0c208259fa33fa6a11033f992192f175409957b4641d3a0a9c38e10a133e381dc03d8344ca3dc9e9d77be1dffeaffffcad32538e8c21ce690f08c5bfee2479f5a4b0d7effde6e724684fa47cda927c3437cd1483d9ada828f19b2d55a7f788e566c95a15df3b8ce878197fe9716b2390aba5cbbc595cf2d1d6eeee59b27731f7d94c797900de8cbd91f711fbb34a660943be772109e322d6b2cd6e885bbe35981999f18e4c69dbe6d981672cec31631d89f9b999df72bdaea3d660906b621e4251d531b68424d6e09557a44718683d082bdb19d6b27af9d59c741f19a3d8fb89389b301bdf54026ff9d5d7a9992c6a2fbe78458c132c4f46b704b30065e324319e791c6998a385310e0f86aea79b520884fa172ca5bc31eb64eb914d630ba63b655bba1c6ffc75c27ff5d469a08aeef9797698c92e2e24b7deb7bf505fff771a532d1b317fdd557c68a0954001cfd5e50df47af257240c5d5adbcc8611066f35c3c3f0883a243800f88642ab67fbe5a9c270965844bbc8ad72dffd63f3b40da1587d0658b7b88d3dea1eff0b424afdd233e1ead8b165f020afd912cbdbec50347ebf6c577b7f037ce35f8b42bbeef2e1449835e9db11973750b4125d465f34d43fcf29a2df56406a24e4a5a9c629a666cdad604c8a0424684ae51eabff017d04efd3ecbdd6f6be435187a00c1f466e0761fc3be9558b085d0c4cf69d23e7164b57f68c75e4544213126c08cf29a3e4f89b8ed519d77fdb043963259b32fc2ef10119516ecf97dc7a604198b812b63e6d9de93bd66a145f1545b87005ede8fc4b0d2a5f63144a98b0010f414be15f9037a12ed4f89e0b6d83446dc8f814b45bd215905e6526518e2d509a64ee19028bafdf1b885495643ed449d98065e99019a5d745c560961e95901954affc13e3b0bae3abfb927a86119c36bfceed3fbc40a2930bc1e8bf988a68604455fd6e58109801833335f523a7f51800a5333a44d459aa9eae152557fa1f50c0ad83b869efd079fb8b82ffd2382749033e5810f8118fa34726612b16c1b66f6cd0d1e6551ab0c356f4e69109cd6100c0100bba44de8791538a78432161e1de6379e2ce96f4a04501806bf8a202f5f982fc642147e636dddd35694ebe60705bddaa3df36ff44adc2af003d9c96d68fe7f6b4c810e3f76f8cdf50b2a6c8448eb1d6219225808aac342b6729f63814fc4b40fa72f05913ea0bd986dac134c7b92cb0c609376bce0dc3cbcf421684cf308e1d7d7f9cf4de10b9937e8510b36beca1e4330e0c889931c600ee38ebac67447d8a4ffeb8afe03d80eed7b6fdff27a4ccbffc0ad05a15e970e0e290ccbe5e5443cda66f3cd8de45bf20b6d6a3d24908b5abc0d3f1ffe96da40e6e2c0edf56cef5e349147c61b484d8054333b8d001236481e80931eca45619e1fd7c71b37619f7238bcbe469999702fbe70659486a0c09c02dbeaad36231fd74d5599ea6"}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000a80)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x0, 0xf, 0x1, '4'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x1e, 0x4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r8 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3, 0x0, 0x92]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4000) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) 15m1.997449684s ago: executing program 3 (id=3324): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='k\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x6, 0xff, 0x3fd, 0x9, 0x87}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="94", 0x1}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r3) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, '\x00', 0x22}, 0x80000001}, 0x1c) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r6, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000380)=0x2) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 15m1.068560869s ago: executing program 2 (id=3327): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001540)=[{0x1000, 0xb801, 0x0, 0x0}, {0x40, 0xe011, 0x0, &(0x7f0000000100)}], 0x2}) 14m50.274242671s ago: executing program 2 (id=3328): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0xd6, 0x6}) syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x67, 0x80000000}, [@selector_unit={0x6, 0x24, 0xc, 0x1, 0x1, "dc"}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x0, 0x0, 0x6, 0x3ff}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x3, [0x2, 0x1]}, @extension_unit={0x15, 0x24, 0xa, 0x1, 0x3, [0x2, 0x2, 0x0, 0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x402, 0x3, 0x8, 0x9, 0x4, 0x5, 0x1000, 0xb}, @processing_unit={0x15, 0x24, 0x9, 0x6, 0x5, [0x0, 0x1, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x33, 0x4, 0x2, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x0, 0x8}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x9, "dcd4b8", "f8c391"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x2, 0x6, 0xe, "0231ce"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x9, 0x5, {0xa, 0x25, 0x25, 0xc9b, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb0, 0x0, 0x2, {0xa, 0x25, 0x25, 0x3, 0x40, 0x100}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xa, 0x5, 0x2, 0x20, 0x91}, 0xae, &(0x7f0000000380)={0x5, 0xf, 0xae, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0x2}, @generic={0x82, 0x10, 0x3, "83f44097727fd9b4ceea2375a5972a18362dbc576b3fe972abb66f3379585c3270c5b97eed3e45c44fe58cef6544d338a78141d9b6a44c4cf15d2ba2028fdb17f0af03455bdd5ca513d09c9d4324b12693e4f52eb3bfd4fe7415fb65cee985a0645a9c6631b7096ba92e59eb9bd6c54f1d8c75bff50e1731f4fb2fd9c83485"}, @ssp_cap={0xc, 0x10, 0xa, 0xe, 0x0, 0x8, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x9}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2001}}]}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000001540)=[{0x1000, 0xb801, 0x0, 0x0}, {0x40, 0xe011, 0x0, &(0x7f0000000100)}], 0x2}) 14m47.229565322s ago: executing program 3 (id=3329): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='.\x02\x00', 0x2) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000280)}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x24, 0x4, 0xf0bd26, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x24008890) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000c00520001000000000000000000020000000c00010001"], 0x20}}, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 14m43.672152207s ago: executing program 32 (id=3326): syz_usb_connect(0x4, 0xae5, &(0x7f0000000e00)={{0x12, 0x1, 0x201, 0xbc, 0x16, 0xd0, 0x10, 0xc45, 0x6005, 0xcc0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad3, 0x4, 0xf9, 0x5, 0x60, 0x82, "", [{{0x9, 0x4, 0x7b, 0x40, 0x9, 0x9a, 0xa3, 0xac, 0x1, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0xe, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x10, 0x4}]}], [{{0x9, 0x5, 0xa, 0x20, 0x3ff, 0x1, 0x37, 0x3, [@generic={0xec, 0x1a, "51a4b567042506da54a2ea36924ab58ef3a0e633cb310eda3bb6f3264b3ded924fee8431c089ddffdafa56852497d0badf40d28029f1fa88670077c30b3d3ca323788f8326b98debf917ee7f31864c97371ecbf2b270199bd1c213a471a9c210408297bc72b7569ce5690ad9243b84465e238be9f89fc05ddc000f71c1af4407df6f133889a560f137cc1cd7485892d5fdd223ac80172dddeaa182875bd53668f5ca9d4ce600edd04a193849f9ea5d9e56a6bd8b10935ba7a7b29576109c9ce9beaa451472b4b16a889eba2591bb4cfb6f219ba25da081b4c3eb6310e1d793b97728d84ae2e0f44566fd"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x4, 0x4e, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x69, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xf, 0x4, 0x8, [@generic={0x9f, 0xb, "2894eb1d1d1ed9efb9c59cc68e20a6e0ddf62396208aeaf5e7bfb62b05e38e74bb8b4c8496c399ad5404b10dd013c7676b6461cb3cbf3969e0939f4fae0972ef73e3c096ae0bc94fa87a722caa8b6d7107d270a43b59930acdb80c7da982d219542103f1d9372ff99e64e36e08fa9303f6d794fd137c31077f4fa71ad8da9450e3f091ae9210a9e01a7d6912de18884a35dbe86deb2542a90bd28bbc7a"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x40, 0x7, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x9, 0x8, 0x80}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x2, 0xfc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe2, 0x6bf0}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0x63, 0x39, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x7}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x2, 0xdd, 0x3, [@generic={0xca, 0x5, "35a582ac6c3dc607181794cfefe95e1c341025b1ffd0d52a4eb43a7b0949a078596a214fda378e3dbb588024aee809fd0a58d95269d26cdbdf01f2b2e0fe7a8ff81c6ddcb2f71031975cbf5fd7b3ce1c84bc37f0c527d993b5c60f258eba55e09a8bc22b3f994aa4259367ee331e23e9e0dfc329799bcef5a8b8cd75796f33decb40dfd6759d338ef5f2129a41e8448f0e1eba9eb34ce2a7edaf6ca397273d4ad681c1accad1588089a48b655632ad2101b35007a676c50f33637a02da2b3d4b29c24d89fb54d7c1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x401}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0xaa, 0xff}}]}}, {{0x9, 0x4, 0x5e, 0x5, 0xf, 0x6c, 0xeb, 0x13, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x27}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x1, 0x3, [0x9, 0xa, 0x5], 0x58}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x403, 0x2, 0x4, 0x9}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x9, "f066"}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x1, 0x8, 0x8, 0x8}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x993f, 0x40, 0x6, "ca1f9701"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0xcd, 0x80, "1677"}, @as_header={0x7, 0x24, 0x1, 0xf7, 0x7, 0x1004}]}], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0xf7, 0x6, 0xa, [@generic={0xbe, 0xd, "22b213210977d03a29b52db48dbdbca7f2a665ea998d9e022db12821a6fbf37fd3c8ba63a0dcb97322366ee52c48fd184e69d5567723c3569080b0eb98111649a161a17697292bf4bf15e3a6864a718d3a6e8c00e714b53161c634523be7dc8f05d1ab4c918a8623c3beb8980380ac833ea6b0e7bcc37ac8d9c57337865b0f979c16d2651f7cc4e002a621912814c77e8304b2318b92356893a23bfb077ead6910705a5dfeb761f8b33dbb75cb37fb4af9c170d6216e67ba7949a9a7"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7f, 0x10, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x3, 0xd, 0xf3}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x81, 0x9, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x2, 0x3, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x8, 0x6d, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x6}]}}, {{0x9, 0x5, 0xc, 0x18, 0x8, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x12c8}, @generic={0xe, 0x24, "e433b8b6aee22a182805e027"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x23, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x30, 0xff, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}, @generic={0x8a, 0x5, "70e29cc34fa6781024bdd5002b8bb3fcf7c50234030d4e04cd14f79fcc5d457e61fdc2413b08aebfa64d84b1ff6dad19b16bed121d38aba9a7b00d4c3fd02ca7385ce96475cf1399b261166527f1950011f38898d3c1876567c6d95bb45d601bc08fbb14fdc2b443b94d24f8f5ea0336d14daf499cd6182a303646a8ffe9223249425cf032ea9513"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x7, 0x54, [@generic={0xbf, 0x7, "5a9dcb30af9f3a22657882a4b02463fbc3399485b4463c14d22efe2a9b7efa6e81c5598617d9b6f6c5083016ff61cea4f7488d1300b1e372373ca2eea654136826777cdfaa62e619b5a0367dc8447d39334c83769ce0b8de6e3a67345c030f9167c093d32584d6793ffe1b3a8292e053c39fadbb6193f06218d9a69a252a051bc4152e6360d0670508ba0b1d6ee1926f3f3f027d323f136a6e87e2b5032fec509225f8cc71fcd182ffbb8ecc4f26ab424f5e6dd8415b665d36df3f1b00"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x2, 0x1, 0x0, [@generic={0x5a, 0x3, "a7c5aeb936baa444db4706753f3390377f06721a6ef08ee9929dbd054e304e5c05e3bf585029edb7f5ae5c8f5864cfe730c5dd7eabbefe5e7afd148b134eacf85a7e259633aa269e7508db7c46caaf940e8a60428215bc8b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x6, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x79, 0x8}, @generic={0xbb, 0x5, "c95ae94bc6117d3b0e7b14ab2e2c405a66a90c353e706afe2fdd67821cbae7db5ef2b595da69344c77fa0fdf4ba24f5136f54b5532da755e73ac3aac54129fe04a31acedc9da54aeb747aa3cad51f84f144453d926a63ce91f498cb8aad267fab97274f8bedfa06ce0f4b33c3636ff45ebbed9c97328e9571b2f2a167f101558a13b63c704fa478df9344a2c6893e983d396d48e53fe79ea331e0ef08f97d1eda017e1a5d1b55501d2c5d88944ef7a8c32b9a18af85360b3a5"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x0, 0xa9, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x1b7ef04540e4f016, 0x1}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0xe, 0x6, 0x81}}]}}, {{0x9, 0x4, 0x66, 0x0, 0x0, 0xbc, 0x50, 0x4f, 0x3, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x7, 0x6, 0xe2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x2, 0x45, 0x6, "65ba"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x9, "94", '\v'}]}, @uac_control={{0xa, 0x24, 0x1, 0xfffe, 0x3f}, [@selector_unit={0x9, 0x24, 0x5, 0x2, 0x7, "73b73b7f"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x1, "e1c8c636"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x6, 0xd, 0x1, 0x52}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x1, 0x4, [0x1, 0x5, 0x4, 0x7], 0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x1c, "9c1224"}]}]}}, {{0x9, 0x4, 0x11, 0x4, 0xe, 0x88, 0x51, 0x4e, 0xff, [@generic={0x2b, 0xf, "d27b6fdb733b731032da0a4fe5c49bbd0e66cafe0f2b9a542f4309c152ff18e1b07afb27dd27e76c24"}], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x8, 0x80, 0xc}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x0, 0x1, 0xc, [@generic={0xbd, 0x21, "26602823cc42686c064fc311d67634f509056258fbc2a7734538892e5938b78135a72ace99d13021a6d4613fb4ab6ac5d4c936a26971bce1210568afdaf76d6f216b1b8ca5c2760da6b2f0cc31e38e787547f7345a805e48f4198dd40577a9834d438a54553c612a97d5e014c41b0500bdbbbe3dc91e29b7f7ff38d0e95d4ce08fa351982d2fae79dfc1814cea0ba7375817af02e832112f03b69c1d9cf8f86f292bedd523e64ffb5bea325b61c4e82b59bcff2bea105e06e719f6"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x7, 0x7f, 0x15, [@generic={0x83, 0xf, "54ca5c0869c51bf83d30cc30a5e94d929e35c6ddaba47dc4efdae755245759a44f479e78416f7019a79343686a9788ded17bec77d14bd595a40ae2e3dcef9d61ac8f99b89b662cd217f36fc3f367a5a042ac4e252e12623a1e8df1c07afa0d62c4a4e88005b9e3a8326f2ab46f17519afbafa3187ab18c63af4059ea037391418a"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0xff, 0xfc, 0x10, [@generic={0x22, 0x7, "8ce543122a4311f1bdc7d11cac7c51528dd2d66511dce996bb117e81a0ca5f3a"}, @generic={0x6a, 0x21, "6934a4f7e447d2f1f222cd24550d02cfffb22274f9364f0351c1840d51bfd773a03d9bbadc5c72bc7bc9a071efdeb9b8bd30ed6118d70d4fa824e54978aefacfe0ded0022fd5aced2d61d806a4facb40d084a1c2e23e872fabbd5f7569d60e334c3ec6c9be966977"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x21, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xff, 0x80, 0x5}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0xf6, 0x15, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xe, 0x4, 0xfa}}, {{0x9, 0x5, 0xb, 0x5, 0x40, 0x0, 0x1, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x1, 0x7, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x68, 0x2}, @generic={0x98, 0x5, "0c6c7274fef50a7d9507e8e50880f27fc73293254f89348d1b102eed7edd415b7748c107e2bcde03af8c2ef8e29b25157ea21b75011210d59a4c4c48c9e4a9b0a793a9aa1eb5aa166c7449f5aa3fc3575a15a55b5768947d7d6e2583333f6d1506e22edc4b9732cb0d165990865e2490fc7f3ebc2e343ebb73cf40e3c0fa26605bb0c4bd1ca291c8d2ac249201dae8a4eb5cee03fc80"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3c, 0xf9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x6, 0x6, 0x64}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7f, 0x43, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x3, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x250, 0x4, 0x1, 0x79, 0x40, 0x2}, 0x64, &(0x7f0000001940)={0x5, 0xf, 0x64, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x0, 0x6, 0x5, 0x20}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x4, 0x8a}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e715ea6a1bfa1ff0b9f279db696f43eb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8, 0x7, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x19, 0x6, 0x8, 0xff0f, 0x9, [0xff3fff, 0xff00c0, 0xc000, 0x30, 0xe8, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x9, 0xff, 0xa4f, 0xd}]}, 0x4, [{0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x3401}}]}) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80) syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a40008090501010002"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000900)={{0x86, 0x5, 0x81, 0x0, '\x00', 0x6}, 0x1, [0x2, 0x2, 0x10001, 0xfffffffffffffffd, 0x10001, 0x0, 0x8000, 0x7, 0xffffffff, 0xfffffffffffffffb, 0xea8, 0x10000000000004, 0x6a, 0x1, 0x10000, 0x0, 0xfffffffffffffff9, 0x8, 0xf, 0x5, 0x5, 0x1ff0, 0x2, 0x2, 0x162, 0x7eec1752, 0x3, 0xfffffffffffffffe, 0xafc6, 0x74, 0x7, 0x5, 0x7, 0x843b, 0x80000000, 0x5, 0x0, 0x324, 0x3, 0x2, 0x3, 0x1, 0xbf6a, 0x7, 0x4, 0x9, 0xa6, 0x6, 0x8000000000000000, 0x9, 0x2, 0x9, 0x0, 0x6, 0x8000, 0xa1, 0x80000001, 0x9, 0x1, 0x3, 0xfffffffffffffff8, 0x8, 0x45b, 0xc, 0x2, 0x1, 0x1, 0x100b8, 0xd, 0x3, 0x0, 0x6, 0x4, 0x901, 0xd78a, 0x6, 0x7e4, 0x1, 0xff, 0x8, 0x800000000009, 0x4, 0x6, 0x401, 0x6, 0x42, 0x2008000, 0x7, 0x8000, 0x8, 0x7f, 0x7, 0xf36, 0x6648, 0x100000, 0x0, 0x9, 0x3, 0xed5, 0x651, 0x101, 0x100000000, 0x6, 0x2, 0xffffffff, 0x7, 0x47, 0x1, 0x7, 0x2, 0x7, 0x7, 0x5, 0xffffffff, 0x7, 0x7fff, 0x9, 0x1, 0x56, 0x2c3, 0x8, 0x5, 0x3, 0x10, 0x3, 0x6, 0x8, 0x8]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x204c000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40200001300000827bd7000ffdbdf25fe8000000000000000000000000000aaac1414350000000000000000000000004e220b454e2201010800808002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0x2a4}, 0x1, 0x0, 0x0, 0x40880}, 0x80) 14m37.873728669s ago: executing program 33 (id=3325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001380)=""/92, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x3, 0xb}, 0x20) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x17) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x1, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x3, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0xfffffffd, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0xe, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40040000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0xa, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x6, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x10001, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x84b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x80000001, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x7fffffff, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x668, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x7, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x5, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x100010, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x0, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xfdffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9, 0x10000009, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0x7, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80001ffe, 0x8, 0x8000, 0x10004, 0x10, 0x1a, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x0, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x403, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x7, 0x10001, 0xf, 0x5, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x6, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0x7ff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7ffc, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x200, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x8, 0x8000005, 0x4, 0x101, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x662325c, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x2000011, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x200000, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x1ff, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x0, 0x9, 0xffffc488, 0x204, 0x10002, 0x81, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x2a9c, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x8, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0xb, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x3a, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x5, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x7, 0x3, 0x35, 0x8, 0x1, 0x2, 0x34, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x9, 0x9e95, 0x9, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0x4bfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe01, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0x103, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x4, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x7, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x0, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffefffe, 0x924, 0x499, 0x8, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0x8, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xce, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffc, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x3, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0xa4, 0x5, 0x8, 0x2, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x7, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x3, 0x20000000, 0x0, 0xe, 0x5, 0x9, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10002, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, 0x0) (async) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async, rerun: 32) ioctl$sock_qrtr_TIOCOUTQ(r4, 0x894b, &(0x7f0000000000)) (rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f0000000140)) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) (async, rerun: 64) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (rerun: 64) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1851da0ef1178acb000000e40901030000000000000000010000000900010073797a300000000028000000030a01020000000080000000e2ffffff0900030073000a4000000006140000a2f3cd0011000100000000a51a4d00000000000055acca8876c4e045f700000000000000004c8699dd427ae1c15a774519264b674b38b1bc000052cc20682d2ffe0a03f9"], 0x70}, 0x1, 0x0, 0x0, 0x4084800}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write$char_usb(r6, &(0x7f0000000040)="e2", 0xff0f) (async) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000001280)=""/194) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace$setregs(0xd, r9, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r9, 0x5, 0x4) 14m20.224827583s ago: executing program 34 (id=3323): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001040), 0x800, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001080)) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{}, "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"}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000a80)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x0, 0xf, 0x1, '4'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x1e, 0x4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r8 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3, 0x0, 0x92]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4000) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) 14m17.008321792s ago: executing program 35 (id=3328): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000000)={0xd6, 0x6}) syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x67, 0x80000000}, [@selector_unit={0x6, 0x24, 0xc, 0x1, 0x1, "dc"}, @source_unit={0xc, 0x24, 0xb, 0x1, 0x0, 0x0, 0x6, 0x3ff}, @extension_unit={0xd, 0x24, 0xa, 0x2, 0x3, [0x2, 0x1]}, @extension_unit={0x15, 0x24, 0xa, 0x1, 0x3, [0x2, 0x2, 0x0, 0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x402, 0x3, 0x8, 0x9, 0x4, 0x5, 0x1000, 0xb}, @processing_unit={0x15, 0x24, 0x9, 0x6, 0x5, [0x0, 0x1, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x33, 0x4, 0x2, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0x0, 0x8}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x9, "dcd4b8", "f8c391"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x2, 0x6, 0xe, "0231ce"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x9, 0x5, {0xa, 0x25, 0x25, 0xc9b, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb0, 0x0, 0x2, {0xa, 0x25, 0x25, 0x3, 0x40, 0x100}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xa, 0x5, 0x2, 0x20, 0x91}, 0xae, &(0x7f0000000380)={0x5, 0xf, 0xae, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0x2}, @generic={0x82, 0x10, 0x3, "83f44097727fd9b4ceea2375a5972a18362dbc576b3fe972abb66f3379585c3270c5b97eed3e45c44fe58cef6544d338a78141d9b6a44c4cf15d2ba2028fdb17f0af03455bdd5ca513d09c9d4324b12693e4f52eb3bfd4fe7415fb65cee985a0645a9c6631b7096ba92e59eb9bd6c54f1d8c75bff50e1731f4fb2fd9c83485"}, @ssp_cap={0xc, 0x10, 0xa, 0xe, 0x0, 0x8, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x5, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x9}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2001}}]}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000001540)=[{0x1000, 0xb801, 0x0, 0x0}, {0x40, 0xe011, 0x0, &(0x7f0000000100)}], 0x2}) 14m13.408759393s ago: executing program 36 (id=3329): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(r6, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='.\x02\x00', 0x2) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000280)}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x24, 0x4, 0xf0bd26, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x24008890) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000c00520001000000000000000000020000000c00010001"], 0x20}}, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 11m2.301337772s ago: executing program 7 (id=3561): r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r7, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m59.222009657s ago: executing program 7 (id=3565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x4788, 0x0, 0x4040098}, 0x4000) 10m58.521555345s ago: executing program 7 (id=3568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r10, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x45080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xc, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r11, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r7) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd08a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r14, &(0x7f0000001b00)="09000000e70014000000d87bfbf788a83baa88a8000088a8ffff8100009988a8", 0x20, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r15, 0x1, 0xc, 0x6, @random="5b82d0b16529"}, 0x14) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 10m58.317588755s ago: executing program 7 (id=3569): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab4", 0x26, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5", 0x84}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) io_setup(0x10000, &(0x7f0000002400)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m57.845711867s ago: executing program 7 (id=3573): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x10, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf06}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xfffe, 0x5}, {0x6, 0x24, 0x1a, 0x40, 0x1c}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xb6, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x35, 0x5, 0x45, 0xff, 0x84}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x2, [{0x74, &(0x7f0000000340)=ANY=[@ANYBLOB="7403923943da122af8ed0a75d06a44a4ce004e6b902c51d93f3e26186774ec8bd199c4538b1e230e8aa89fbe0f199f7f78e90255076d46f35da068b8ca1fe08bd80c57c090f3f6242c1d619fe9fa839cebbe1a2a9525eaa7edb69c8010c51b72f82f87cf63d4d0315621bcea73ae0714429e0d9ba7be3cad0f2812f2681fbf4af04594"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41c}}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000e86000/0x2000)=nil, &(0x7f000098b000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0027bd7000fddbdf2526000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c045) r5 = io_uring_setup(0x1bca, &(0x7f0000000040)={0x0, 0x110c89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000100)=0x4) 10m57.565847276s ago: executing program 7 (id=3576): listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4000009e, 0x0, 0xf83}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000080)={0x20004, r6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r8}) (async) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000140)={0x42, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x43564548}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01864c1, &(0x7f0000000280)={r10}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01864c1, &(0x7f0000000180)={r10}) (async) r12 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r12, 0xc01864c1, &(0x7f0000000280)={r13}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r12, 0xc01864c1, &(0x7f0000000180)={r13}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000000c0)=[r3, 0x0, r4, r10, 0x0, r13, r14], &(0x7f00000002c0)=[0x10000, 0x87], 0x7, 0x1}) 10m57.039366943s ago: executing program 37 (id=3576): listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4000009e, 0x0, 0xf83}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000080)={0x20004, r6, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r8}) (async) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000140)={0x42, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x43564548}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01864c1, &(0x7f0000000280)={r10}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01864c1, &(0x7f0000000180)={r10}) (async) r12 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r12, 0xc01864c1, &(0x7f0000000280)={r13}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r12, 0xc01864c1, &(0x7f0000000180)={r13}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000000c0)=[r3, 0x0, r4, r10, 0x0, r13, r14], &(0x7f00000002c0)=[0x10000, 0x87], 0x7, 0x1}) 1m52.813004735s ago: executing program 0 (id=8027): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9b4, 0x0, 0x2, 0x0, &(0x7f0000000200)="80fa", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0xcb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501"}, 0x50) 1m52.747254946s ago: executing program 0 (id=8029): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4c891) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m52.699147615s ago: executing program 0 (id=8030): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x24, &(0x7f0000002d80)="f0c46000", 0x4) syz_emit_ethernet(0x102, &(0x7f0000000800)=ANY=[@ANYBLOB="012feb430000aaaaaaaaaaaa8100600086dd6700000100c83a00fe880000000000000000000000001201ff0200000000000000"], 0x0) 1m52.667064685s ago: executing program 0 (id=8031): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x10, "36f0000000000000000200000000"}]}}}}}}}}, 0x0) 1m52.618237706s ago: executing program 0 (id=8033): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x101, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) accept4$inet6(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = dup2(r6, r6) write$6lowpan_enable(r7, &(0x7f00000000c0)='1', 0x1) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000300"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1m51.659816106s ago: executing program 0 (id=8034): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m36.491518227s ago: executing program 38 (id=8034): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 10.903361243s ago: executing program 1 (id=8680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2}}}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = accept4$unix(r1, &(0x7f0000000180), &(0x7f0000000240)=0x6e, 0x80000) connect$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r7, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200010025bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000bc0)=""/245, 0xf5) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r9, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @stop_pts=0x8}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.37015147s ago: executing program 9 (id=8691): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0xfffffffffffffce8, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x5, 0xd, {0xd, 0x21, "68beb05fdeb844e49667cd"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x5}, 0x0}) 7.518117892s ago: executing program 1 (id=8696): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x98, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xb6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x281}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x40}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xe}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fff}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 7.353004775s ago: executing program 1 (id=8697): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a5f6c8fad061cc0ef00030529bd70000000000018000000000000000d00000000000000"], 0x28}], 0x1}, 0x14008010) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x254, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x208, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x8003}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04482c55ba8dacce2abbbc52dd804af920e8456d8129eb14acebb7ca3cfa4af7"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x254}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000040)='@)\xb4^\x00', 0x121300, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x8]}, {0x0, 0x5, 0x80000000, 0x100}}, 0x80000001, &(0x7f0000000100), &(0x7f0000000140)=0x5}, {[0xd08, 0x3, 0xe6, 0x17b0e6ff]}, 0x401, 0x28, &(0x7f0000000180)=""/40}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000280)=[{0x8, 0x5, 0xd, 0xfffffe00}, {0x0, 0x10, 0x1, 0x8d7}]}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x1d, 0x0, &(0x7f0000000480)) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000300)={0x1, {{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x4}, 0x3}}}, 0x108) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8a040, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) setns(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r2], 0x1fc}}, 0x0) 7.343602578s ago: executing program 5 (id=8698): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x42a0c0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x202000037fff9, 0x12) syz_usb_connect(0x3, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYBLOB="b238"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 6.522743898s ago: executing program 8 (id=8703): ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000140)={r1, 0x6, &(0x7f0000000080)=[0x0, 0xba56, 0x6, 0xfa4f, 0x3, 0x3f1], &(0x7f00000000c0)=[0xa, 0x4], &(0x7f0000000100)=[0x5, 0x1, 0xa2, 0x3, 0x0]}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@local, 0x7fffffff}, @local, 0x5, 0x0, 0x5, 0xc, 0x3, 0x2, 0x3ff}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x70000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r4, 0x4, 0x3, &(0x7f00000002c0)="7eea7219757666af10c82ba7e509bf545e1ad08009eca22146be84f5ae71f997fa3f86cd478fd6dd68ac19fd2108d2edd52ec2c19c25eb083ddb500e35fa2a3d7e59b9de49fd2f286f0be80ba296bafebdb9a798c34743269988ac89793e824d0643cb5af54ca803e88ac55f4c9bd22edafcf77ba6a0033734949346fdd76a79b6c0c22890ee4b3d2b443b3f30bd01f35d8d4646b6904083b7d043248511d861f961bc455ff3", 0xa6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r2, 0x5f981000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000b00)={{r5, &(0x7f00000003c0)='/dev/vmci\x00', 0x200500, &(0x7f0000000400)={@align=0xa9, {0x7fff, 0xa, 0x2, 0x100000000}}, 0x1ff, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x2c30}, 0x6, &(0x7f0000000a40)=[{0x2, 0x800, &(0x7f00000004c0)='/dev/vmci\x00', &(0x7f0000000500)="44f9fcd9a01e213f03b106a637ec6e8413724dc288e17bca7b409f7a550685a2c968c06b3e963a7b68d26c998d2759f98f86773682781bc7ff98284723b9cd7d7295ff922d1d7466e3a92d587b5ce6288d49f1796362210ae385790b1f1f550c1f6ac76a1f34f53403919dec98b7d8971d40e827c69d3b9065600089dfd1ae625fd0ceb0f9deafa2cf55363e7f64bf80f41d619912ecd55655a8b6a0918f9c8577e49d18f03884150b9e0a5ed7b4a1823e94c47ea1c0cdfe94041dd07597295583e49b6a6fd8a33e1d64ba3ac40c895b4881be8f9d448a07acad84b47f13f3caa0e2fc7c4c", 0xe5, 0x32}, {0x2, 0x3, &(0x7f0000000600)='/dev/urandom\x00', &(0x7f0000000640)="b12c174a93e127ab4249fa0d4851fdda0c1cbc3e374b29c82fd512e6657576f7f267752f1f56c9321ee9bb4f3d7eb7b9ecc80a2aadc90705f863510f51560ca69dcf603e973f62295d248753f64318a3c2ba1f93dbbd1722cce65f7ba46cde49a375fe6bb19d93608429ddd15aa7cee1bb7a", 0x72, 0x20}, {0x1, 0x3ff, &(0x7f00000006c0)='^)\x00', &(0x7f0000000700)="866a575d8358ee241c5b790ad9590c28f806ec5f713871288483b3970c363d88af1831ab37355b7f8455cb2100458fcd7cc008b9e1f08aff8761ab16bb4dba96069b6cae935eb4167f5d1cf6096b7de6afedce9ce0d3d9901e5353fa664c3864c30b0f915252c8f59874ba706f6ea6b1ec1bf08f589bcbefefa82bab6fe1d3e0e313d1d63769cceac9c7183a9789ec707ce88141d6f934b906d594786c8858444d5f3bdb53c3", 0xa6, 0x2a}, {0x3, 0x7fffffff, &(0x7f00000007c0)='.^@$^\x00', &(0x7f0000000800)="7e0e2bff6a7c4bb0ae538385e2b893e53af5a8d2c3cadb9d1eff70905d3e7d316c2b9a3f6a74ac4173fdf5068ba5199775d2e93b985275d7d5f0", 0x3a, 0x8}, {0x1, 0x9, &(0x7f0000000840)=')', &(0x7f0000000880)="7cc51dad8a64b7944b5d362d0a4cbedc80b58a609b4849ffbb7236298247bee4e396ebc31d01dbfc4716675d67fff74b6f12f1ac3a756abcb05c5730d00cbf1dc3", 0x41, 0x8}, {0x3, 0x3, &(0x7f0000000900)='\x00', &(0x7f0000000940)="ccdda5e13dbb54a76c36283b41caac77f0cd8ef894bad25eb2a1773fae74b4cd7af12ae7d1d9d75d47dfc2b6492fba92567380798ddfbdabd9cb4544ea6796430c0d74b7fddb98d34cb442e607a3f76c9df8e64fa8fa036a9a1c8eb08f819beb3259fae21421e743bbced0cff47edf5bc950219361b7c4e536b8159a676330ba42b848b63cbe54217966005307b604cbd3aa58ed52495f848f67127d4ff3d565cf91c97bfc13176584d05fa97faab459e5c8bdba09ba41b811bbc333f4bc1417a34c5a4966", 0xc5, 0x12}]}) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000b80)={r6, 0x0, 0x100000000, 0x8000, 0x7, 0x8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000d80)={0xfffffffffffffffd, 0x0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10c, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9bc2}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x56f1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x364}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x45b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1d2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008081}, 0x40044) r8 = openat$cgroup_int(r6, &(0x7f0000000dc0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000e00), 0x12) close_range(r2, r3, 0x2) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000e40)=0x7) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x71}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8881}, 0x40) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x20000010) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000010c0)={r0, r1, r0, 0x0, 0x0, 0x2, &(0x7f0000001080)=[0x0, 0x0]}) connect$inet6(r6, &(0x7f0000001100)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe95}, 0x1c) read$FUSE(r6, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$pokeuser(0x6, r9, 0x8, 0x580a) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000031c0), r6) getsockname$packet(r6, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003240)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003540)={r6, 0xe0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000003340)=[{}, {}], 0x10, 0x10, &(0x7f0000003380), &(0x7f00000033c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000003400)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000036c0)={'gretap0\x00', &(0x7f0000003580)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x80000001, 0x3, {{0x3f, 0x4, 0x0, 0x1, 0xfc, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x34, 0x6d, 0x3, 0xf, [{@multicast1, 0x6}, {@private=0xa010100}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0xab}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0x6, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@multicast2, 0xdc}, {@multicast2, 0x40}]}, @generic={0x44, 0xd, "eef00add9eab6dd9ece32e"}, @timestamp={0x44, 0x20, 0x55, 0x0, 0xe, [0x8, 0x9, 0x1, 0x0, 0x4, 0x4, 0x6]}, @ra={0x94, 0x4}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}, @timestamp_prespec={0x44, 0x4c, 0xf, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x5}, {@rand_addr=0x64010100, 0xffffffff}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x10001}]}, @generic={0x83, 0x9, "54888d67f00408"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000003840)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0x88, r10, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) 6.317422492s ago: executing program 8 (id=8704): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=@delsa={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d4, 0x2, 0x6c}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5.988602112s ago: executing program 9 (id=8705): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, 0x0, 0x0) 5.810465705s ago: executing program 9 (id=8706): r0 = socket$inet(0x2, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000400)=""/174, 0xae}], 0x3, &(0x7f0000000500)=""/109, 0x6d}, 0x400}, {{&(0x7f0000000580)=@pppol2tpv3, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000d00)=""/107, 0x6b}, 0x100000}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r5 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x812c0000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) r5 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000000700)={[&(0x7f00000000c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0x20, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x8, 0x1, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0x7f, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x1000200004, 0x4, 0x2, 0x1, 0x1], 0x8080000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc001001f, 0x0, 0x7f23}]}) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e24, 0xef1f, @mcast2, 0x5}, 0x1c) syz_usb_connect$midi(0x2, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500200000010b40420934000de02030109023c000101f000080904003af2ee00000103300fa5bf"], &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x340, 0x0, 0x4, 0x9, 0xff, 0x80}, 0xe5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1001}}]}) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5.147805292s ago: executing program 8 (id=8714): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x3, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 5.064692522s ago: executing program 6 (id=8715): openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) clock_adjtime(0x6, &(0x7f0000000500)={0xffffffff, 0x5, 0x8000, 0x2, 0x9, 0x5, 0x8, 0x4, 0xff, 0x3, 0x1, 0x8000000000000001, 0x3, 0x7, 0x5, 0xffffffffffffffff, 0x200, 0xbeb667f, 0xe00000000, 0x495, 0x8, 0x9, 0x80, 0x4, 0x4, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a00000409"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100"], 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca3", 0x4}, {0x0}], 0x2}], 0x1, 0x40800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 4.781304043s ago: executing program 9 (id=8716): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="f400090006", 0x5}], 0x1}, 0x0) 4.607926043s ago: executing program 9 (id=8717): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.events\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000a000000500004800000010073797a30000000000e44d2"], 0x64}}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x2, {0xa, 0x4e21, 0x1b9fcb84, @private0, 0xffffffff}}}, 0x38) close(r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c0001800600060088a80000100004"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000cd9000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x9, 0xffffffff, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r9 = syz_open_dev$video4linux(&(0x7f0000000380), 0xd6f0, 0x40000) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f00000002c0)={0xf0f001, 0x8, "b9a38e16cdf0c66d70645df1671c21ca1117e4f87a5fede47e091fef5e4eb2c0", 0x3, 0x9, 0x3, 0x3, 0x8}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r11, 0x0, 0x2000000008, 0x0) fcntl$setpipe(r10, 0x407, 0xb21) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001400)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xfff1, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff0, 0x4c18, 0x4, 0xf, 0x5e658b64, 0xfffffffb, 0xf, 0xffff, 0x100001, 0x7, 0x0, 0x80, 0x3, 0x4, 0x9, 0x200, 0xfff, 0x6e7, 0x7, 0x10, 0x0, 0x5, 0x885, 0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffff, 0x469, 0x8, 0x3, 0x5, 0x40, 0x8, 0xfffffff8, 0xe, 0x1ff, 0x2, 0x0, 0x5, 0x80005, 0x2, 0x4, 0x7, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4, 0x3, 0x9, 0x7, 0x8000, 0x511, 0x1, 0x7, 0x6, 0x7fffffff, 0x505, 0x3, 0x1cb, 0x1010000, 0x80000000, 0x9, 0x4, 0x7, 0x3, 0x6, 0x7, 0xf5e, 0x5, 0x9, 0x65, 0x3, 0x10000, 0x9, 0x10000, 0xe2, 0x6, 0x1, 0x8, 0xefb, 0x3, 0x4, 0x6, 0x4, 0x7, 0x7f, 0x4, 0x4, 0x80000001, 0x0, 0x3b53, 0xbcf, 0x1c, 0x81, 0x4, 0x6, 0x8001, 0x2, 0x10, 0x3, 0x0, 0x40, 0xfec6, 0x0, 0x3, 0xc, 0x9, 0x5, 0x890, 0x7, 0xe181, 0x1d, 0x1af, 0x1, 0x10001, 0x86, 0x10, 0x19e, 0x6, 0x15, 0x4aa0, 0x3214, 0x1000, 0x0, 0x4, 0x4, 0x8, 0xd, 0x6, 0xffffffff, 0xb005, 0x10000, 0x8, 0x6, 0x3, 0x7, 0x10000, 0xfa, 0x9, 0x1, 0x1, 0x82, 0x8, 0x7, 0xc4e, 0x2, 0x9, 0x3ff, 0x7b82eae2, 0x400200, 0x3ff, 0x7, 0xfffffbd5, 0x5, 0x400, 0xfffff360, 0x8, 0x5, 0xd6d, 0x1, 0x9, 0x3, 0x9, 0x0, 0x3ff, 0x8, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x80000001, 0x63, 0x618, 0x5, 0xd0, 0x9, 0xa, 0xec, 0x3, 0x6, 0x5, 0x1, 0xffff8001, 0xf00, 0x9, 0x2, 0x400, 0x5, 0xfffffffd, 0x9, 0xfff, 0x3, 0x2, 0x3, 0x4000004, 0x7, 0x7, 0x2, 0x9c28, 0x2, 0x2, 0x8000, 0xdb4, 0x6, 0x6, 0x0, 0xdb6b, 0x0, 0xf76, 0x40000006, 0xa, 0x2, 0x5, 0x51c7, 0x3d, 0x0, 0x1, 0xe1bb, 0x7, 0x3, 0x8, 0x6, 0x6, 0xaa, 0x9, 0x1ff, 0x2ce, 0x3, 0x6, 0x1, 0x80000000, 0xffffffcc, 0x4, 0x6297, 0x1, 0xa9ef, 0x7, 0x1, 0x4, 0x7, 0x0, 0x8, 0x2a43, 0x5, 0xffffffff, 0xd4a, 0x7, 0x2, 0x2, 0xc, 0x6]}]}]}}]}, 0x43c}}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) 4.296533301s ago: executing program 1 (id=8718): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init() r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x53, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x49, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "8f836806f2ec"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x16a, 0xb70, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4b, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xf3, 0x1}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x30, &(0x7f0000000380)={0x5, 0xf, 0x30, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x50, 0x7, 0x3, 0xfffe, 0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xf2, 0x2, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x6, 0x1}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}, {0x76, &(0x7f0000000480)=@string={0x76, 0x3, "bd2248877437e6874605d7264eb9ebdbbc002808d00432e5e7e42d4dac1e3a53f2819382ececc435d0373075e44837ba57e26a4a232179c10504016a5adcd98fbc7b4c20c823c15254dd66142ea76e80e65cde2b2ae3d3f292eb90f3918618d9c2242bb4a729761449f14e599dd161e78c871c6c"}}, {0x51, &(0x7f0000000500)=@string={0x51, 0x3, "ddd8c0601e74afc2457a10965d328d909de7741747da856f090015a9019d48f570870737fe2b3b64ef5d09e63d2f9885d3260bb9938ba93bd1a62f142ad920a7722590ff08c4d2c5bd8136a740be81"}}]}) ioctl$VT_RESIZE(r2, 0x5609, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xa8) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab408090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 3.926253563s ago: executing program 6 (id=8719): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) socket$inet(0x2, 0x803, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 3.570993124s ago: executing program 8 (id=8720): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x42a0c0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x202000037fff9, 0x12) syz_usb_connect(0x3, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYBLOB="b238"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 3.540459198s ago: executing program 6 (id=8721): connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.280024598s ago: executing program 6 (id=8722): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000", @ANYBLOB="a787"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x2, {[@fastopen={0x1e, 0x2}]}}, {"6ec43924b8b27554d4e63bd6022392c3093f0a7eda41a14e44a3d1047635af10"}}}}}}}, 0x0) 2.95729435s ago: executing program 6 (id=8723): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000680)=""/15, 0x45}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.36353892s ago: executing program 9 (id=8724): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a5f6c8fad061cc0ef00030529bd70000000000018000000000000000d00000000000000"], 0x28}], 0x1}, 0x14008010) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x254, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x208, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x118, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x8003}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04482c55ba8dacce2abbbc52dd804af920e8456d8129eb14acebb7ca3cfa4af7"}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x254}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000040)='@)\xb4^\x00', 0x121300, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x8]}, {0x0, 0x5, 0x80000000, 0x100}}, 0x80000001, &(0x7f0000000100), &(0x7f0000000140)=0x5}, {[0xd08, 0x3, 0xe6, 0x17b0e6ff]}, 0x401, 0x28, &(0x7f0000000180)=""/40}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000280)=[{0x8, 0x5, 0xd, 0xfffffe00}, {0x0, 0x10, 0x1, 0x8d7}]}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x1d, 0x0, &(0x7f0000000480)) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000300)={0x1, {{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x4}, 0x3}}}, 0x108) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8a040, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) setns(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r2], 0x1fc}}, 0x0) 1.625963833s ago: executing program 5 (id=8725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.459041957s ago: executing program 5 (id=8726): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001040)={0x38, 0x3, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000001080)=[{0x1, 0x9, 0x1000}, {0x2, 0x7, 0x75f765c120cc3f9e}, {0x0, 0x6, 0x2000}, {0x0, 0x4, 0x800}, {0xdf54a61ef573de3e, 0xdc29}, {0x2, 0x6e, 0x1800}], 0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, {0x4}}]}]}, 0x6c}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f00001ee000/0x4000)=nil, 0x4000, 0x3000002, 0x100010, r2, 0xef686000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) 1.433055588s ago: executing program 8 (id=8727): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="f400090006", 0x5}], 0x1}, 0x0) 1.245386206s ago: executing program 8 (id=8728): creat(&(0x7f0000000000)='./file0\x00', 0x93) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x93) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gRoup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async) r3 = syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gRoup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000600)="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", 0x2000, &(0x7f0000004c00)={&(0x7f0000000040)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x2, 0x2133810c, 0x7fff, 0xbf2, 0x4, 0x8, 0x0, 0x0, 0x1, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) linkat(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) (async) linkat(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001d40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000900)="bc", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0xfffffffe, 0xffffff6a}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xa, 0xfffffffe, 0xffffff6a}, 0x10) mlock(&(0x7f000000a000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480), &(0x7f0000000540)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe2$watch_queue(&(0x7f0000000380), 0x80) (async) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2000000000) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000300)="0f20e06635000004000f22e00f20e06635004000000f22e00f01ca66b80e0000000f23d80f21f86635c00000a00f23f8baa000b026ee66b94409000066b80000010066ba000000000f30ba6100b80900ef0f01c3baf80c66b816ccad8766efbafc0ced260f01c9", 0x67}], 0x0, 0x4b, 0x0, 0x0) inotify_add_watch(r7, &(0x7f0000000580)='./file0\x00', 0x800) (async) inotify_add_watch(r7, &(0x7f0000000580)='./file0\x00', 0x800) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$sierra_net(r10, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000100)=0x7, 0x4) sendmsg$netlink(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200010027bd7000000028cb72005e"], 0x24}], 0x1}, 0x4000800) (async) sendmsg$netlink(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200010027bd7000000028cb72005e"], 0x24}], 0x1}, 0x4000800) dup(r9) (async) r12 = dup(r9) write$UHID_INPUT(r12, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) 1.108927828s ago: executing program 6 (id=8729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0) r2 = syz_clone(0xa78db780, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) r4 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffe80, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x48, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x17, 0xffe0}, {0x4, 0xe}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_bfifo={{0xd}, {0x8, 0x2, 0x8}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000540)={0x14, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES64=r2, @ANYRESHEX=r3, @ANYRES16=r4], &(0x7f00000002c0)=ANY=[@ANYBLOB="006c784d72f909b77a73d55303df5ea0c93c00000000000000"]}, &(0x7f0000000780)={0x34, &(0x7f0000000a00)=ANY=[], &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xe}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "6df032e56f97ac35e17137ccba27a2e671581eecea3a10ea59e4a88c7bd60f2d70e9ebdaa86547b460f15b053dddad"}}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x8) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0xffff, 0x6d7, 0x0, 0x79, 0x3, "5acf8f53872ebc82"}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r10, 0x0) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0xffb) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x4) writev(r8, &(0x7f00000024c0)=[{&(0x7f0000000480)="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", 0x197}], 0x1) 610.55013ms ago: executing program 1 (id=8730): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0xdd, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xd0, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x200, 0x3, 0xcd34, 0x9, 0x2, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x83, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0x800c, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x9, 0x9fd, 0x10000006, 0x200, 0x4, 0x2002]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x9, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x2000005, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x305, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x6, 0x80000003, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0x4, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x3, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2", 0x1}], 0x1}, 0x20004014) 309.737017ms ago: executing program 1 (id=8731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x3, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) 0s ago: executing program 5 (id=8732): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): mber 105 using dummy_hcd [ 1545.844029][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.850569][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.989632][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 1545.989665][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1545.998865][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 1546.000432][T30243] usb 9-1: Using ep0 maxpacket: 8 [ 1546.006402][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x37 [ 1546.019510][T27124] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1546.052806][T30243] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1546.087553][T30243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.095910][ T6643] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1546.125868][T30495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8308'. [ 1546.138695][T30243] usb 9-1: Product: syz [ 1546.157372][T30243] usb 9-1: Manufacturer: syz [ 1546.177764][T30243] usb 9-1: SerialNumber: syz [ 1546.214959][T30243] usb 9-1: config 0 descriptor?? [ 1546.241816][T30243] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1546.290523][ T6643] usb 10-1: Using ep0 maxpacket: 32 [ 1546.306911][ T6643] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1546.317629][ T6643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.333202][ T6643] usb 10-1: config 0 descriptor?? [ 1546.437485][T30243] gspca_sonixj: reg_r err -32 [ 1546.451891][T30243] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 1546.538150][T30243] usb 9-1: USB disconnect, device number 105 [ 1546.565426][ T6643] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1546.599461][ T6643] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1546.643828][ T6643] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1546.660853][ T6643] usb 10-1: media controller created [ 1546.693564][ T6643] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1547.181481][T30528] syz.1.8316 (30528): drop_caches: 3 [ 1547.305010][ T6643] az6027: usb out operation failed. (-71) [ 1547.321157][ T6643] az6027: usb out operation failed. (-71) [ 1547.330141][ T6643] stb0899_attach: Driver disabled by Kconfig [ 1547.336622][ T6643] az6027: no front-end attached [ 1547.336622][ T6643] [ 1547.346037][ T6643] az6027: usb out operation failed. (-71) [ 1547.353496][ T6643] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1547.363797][ T6643] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input220 [ 1547.389114][ T6643] dvb-usb: schedule remote query interval to 400 msecs. [ 1547.416895][ T6643] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1547.447864][ T6643] usb 10-1: USB disconnect, device number 51 [ 1547.542440][ T6643] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1547.800557][ T6638] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1547.957789][ T6638] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1547.989204][T30557] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8320'. [ 1547.991303][ T6638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.049482][ T6638] usb 2-1: config 0 descriptor?? [ 1548.091962][ T6638] pwc: Creative Labs Webcam 5 detected. [ 1548.412598][T30243] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1548.472362][T30540] xt_cgroup: invalid path, errno=-2 [ 1548.550536][T30243] usb 10-1: device descriptor read/64, error -71 [ 1548.551492][T30580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.566560][T30580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.823251][ T6638] pwc: send_video_command error -71 [ 1548.828914][T30243] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1548.848158][ T6638] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1548.863281][ T6638] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1548.884435][ T6638] usb 2-1: USB disconnect, device number 91 [ 1549.002561][T30243] usb 10-1: device descriptor read/64, error -71 [ 1549.136879][T30243] usb usb10-port1: attempt power cycle [ 1549.227414][T30595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8327'. [ 1549.436671][T30600] loop2: detected capacity change from 0 to 7 [ 1549.448620][T30600] Dev loop2: unable to read RDB block 7 [ 1549.456454][T30600] loop2: unable to read partition table [ 1549.465982][T30600] loop2: partition table beyond EOD, truncated [ 1549.473671][T30600] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1549.496580][ T4994] Dev loop2: unable to read RDB block 7 [ 1549.508701][ T4994] loop2: unable to read partition table [ 1549.518125][T30243] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1549.534084][ T4994] loop2: partition table beyond EOD, truncated [ 1549.561146][T30243] usb 10-1: device descriptor read/8, error -71 [ 1549.756244][T30610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8332'. [ 1549.845183][T30243] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1549.893883][T30615] tipc: Started in network mode [ 1549.902503][T30615] tipc: Node identity ac14140f, cluster identity 4711 [ 1549.943953][T30615] tipc: New replicast peer: 255.255.255.255 [ 1549.952787][T30615] tipc: Enabled bearer , priority 10 [ 1550.021357][T30243] usb 10-1: device descriptor read/8, error -71 [ 1550.150922][T30243] usb usb10-port1: unable to enumerate USB device [ 1550.431217][ T6638] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1550.458528][T30608] syz.6.8331 (30608): drop_caches: 3 [ 1550.596876][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 1550.596897][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1550.604253][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 1550.611519][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x37 [ 1550.618683][T27124] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1550.647192][ T6638] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1550.661431][ T6638] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1550.673014][ T6638] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1550.695422][ T6638] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1550.706180][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1550.727880][ T6638] usb 2-1: Product: syz [ 1550.739279][ T6638] usb 2-1: Manufacturer: syz [ 1550.745599][ T6638] usb 2-1: SerialNumber: syz [ 1550.772319][ T6638] usb 2-1: config 0 descriptor?? [ 1550.792987][ T6638] usb 2-1: selecting invalid altsetting 0 [ 1550.984251][T30617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.004127][T30617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.065384][T30617] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 1551.073126][ T6638] tipc: Node number set to 2886997007 [ 1551.096803][T16310] usb 2-1: USB disconnect, device number 92 [ 1551.521522][T30649] FAULT_INJECTION: forcing a failure. [ 1551.521522][T30649] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.577488][T30649] CPU: 0 UID: 0 PID: 30649 Comm: syz.9.8342 Tainted: G L syzkaller #0 PREEMPT(full) [ 1551.577520][T30649] Tainted: [L]=SOFTLOCKUP [ 1551.577527][T30649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1551.577538][T30649] Call Trace: [ 1551.577546][T30649] [ 1551.577555][T30649] dump_stack_lvl+0xe8/0x150 [ 1551.577589][T30649] should_fail_ex+0x40c/0x560 [ 1551.577617][T30649] should_failslab+0xa8/0x100 [ 1551.577646][T30649] __kmalloc_noprof+0xfe/0x720 [ 1551.577668][T30649] ? rcu_is_watching+0x15/0xb0 [ 1551.577696][T30649] ? tomoyo_realpath_from_path+0xef/0x640 [ 1551.577716][T30649] ? tomoyo_realpath_from_path+0xef/0x640 [ 1551.577744][T30649] tomoyo_realpath_from_path+0xef/0x640 [ 1551.577773][T30649] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1551.577800][T30649] tomoyo_path_number_perm+0x246/0x5f0 [ 1551.577833][T30649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1551.577859][T30649] ? __lock_acquire+0x683/0x2cf0 [ 1551.577899][T30649] ? hook_file_ioctl+0x1f0/0x5f0 [ 1551.577945][T30649] ? __fget_files+0x2a/0x420 [ 1551.577972][T30649] ? __fget_files+0x2a/0x420 [ 1551.577994][T30649] ? __fget_files+0x3a2/0x420 [ 1551.578017][T30649] ? __fget_files+0x2a/0x420 [ 1551.578044][T30649] security_file_ioctl+0xc3/0x2a0 [ 1551.578071][T30649] __se_sys_ioctl+0x47/0x170 [ 1551.578095][T30649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.578117][T30649] do_syscall_64+0x174/0x580 [ 1551.578143][T30649] ? trace_irq_disable+0x3b/0x140 [ 1551.578166][T30649] ? clear_bhb_loop+0x40/0x90 [ 1551.578189][T30649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.578208][T30649] RIP: 0033:0x7f6c5a19de59 [ 1551.578226][T30649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.578242][T30649] RSP: 002b:00007f6c5afa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.578271][T30649] RAX: ffffffffffffffda RBX: 00007f6c5a425fa0 RCX: 00007f6c5a19de59 [ 1551.578285][T30649] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 1551.578298][T30649] RBP: 00007f6c5afa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.578310][T30649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.578320][T30649] R13: 00007f6c5a426038 R14: 00007f6c5a425fa0 R15: 00007f6c5a54fa48 [ 1551.578347][T30649] [ 1551.578365][T30649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1552.157491][T30655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8344'. [ 1552.186869][T30649] program syz.9.8342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1552.472899][T30668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8349'. [ 1552.590530][ T6638] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1552.733127][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 1552.733158][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1552.741849][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 1552.749202][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x37 [ 1552.759309][T27124] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1552.774673][ T6638] usb 10-1: Using ep0 maxpacket: 8 [ 1552.788266][ T6638] usb 10-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1552.812895][ T6638] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.833954][ T6638] usb 10-1: Product: syz [ 1552.840759][ T6638] usb 10-1: Manufacturer: syz [ 1552.845494][ T6638] usb 10-1: SerialNumber: syz [ 1552.858493][ T6638] usb 10-1: config 0 descriptor?? [ 1552.889770][ T6638] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1552.914862][ T6638] pctv452e: pctv452e_power_ctrl: 1 [ 1552.914862][ T6638] [ 1552.923240][ T6638] usb 10-1: selecting invalid altsetting 3 [ 1552.931200][ T6638] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1552.931200][ T6638] [ 1552.946422][ T6638] dvb-usb: bulk message failed: -22 (5/0) [ 1552.959458][ T6638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1552.975990][T30684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8356'. [ 1552.984339][ T6638] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1552.993536][ T6638] usb 10-1: media controller created [ 1552.999594][ T6638] dvb-usb: bulk message failed: -22 (8/0) [ 1553.005524][ T6638] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1553.013614][ T6638] dvb-usb: MAC address reading failed. [ 1553.034264][ T6638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1553.104269][T30662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.131707][T30662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.133915][T30692] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8359'. [ 1553.154717][ T6638] DVB: Unable to find symbol stb0899_attach() [ 1553.168761][T30662] netlink: 'syz.9.8347': attribute type 4 has an invalid length. [ 1553.179376][ T6638] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1553.207664][T30662] netlink: 'syz.9.8347': attribute type 4 has an invalid length. [ 1553.340670][ T6638] rc_core: IR keymap rc-tt-1500 not found [ 1553.346563][ T6638] Registered IR keymap rc-empty [ 1553.356186][ T6638] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1553.376970][ T6638] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input221 [ 1553.405860][ T6638] dvb-usb: schedule remote query interval to 100 msecs. [ 1553.423398][ T6638] pctv452e: pctv452e_power_ctrl: 0 [ 1553.423398][ T6638] [ 1553.438267][ T6638] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1553.476699][ T6638] usb 10-1: USB disconnect, device number 56 [ 1553.605943][ T6638] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1555.090541][ T6638] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1555.252497][ T6638] usb 10-1: Using ep0 maxpacket: 8 [ 1555.268579][ T6638] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1555.299198][ T6638] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1555.326102][ T6638] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1555.356396][ T6638] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1555.403468][ T6638] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1555.417136][ T6638] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.643774][ T6638] usb 10-1: GET_CAPABILITIES returned 0 [ 1555.671182][ T6638] usbtmc 10-1:16.0: can't read capabilities [ 1555.843936][T30750] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[30751] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[30750] [ 1555.887552][ T6643] usb 10-1: USB disconnect, device number 57 [ 1555.893940][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1555.893958][ T29] audit: type=1800 audit(1784162542.234:911): pid=30750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8378" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1556.310480][T16310] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1556.514109][T16310] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1556.549116][T16310] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1556.587808][T16310] usb 9-1: Product: syz [ 1556.594720][T16310] usb 9-1: SerialNumber: syz [ 1556.639755][T16310] usb 9-1: config 0 descriptor?? [ 1556.909404][T16310] usb 9-1: USB disconnect, device number 106 [ 1557.328209][T27124] Bluetooth: hci5: Unknown advertising packet type: 0x19 [ 1557.328275][T27124] Bluetooth: hci5: Unknown advertising packet type: 0x1f [ 1557.338908][T27124] Bluetooth: hci5: Unknown advertising packet type: 0x31 [ 1557.346333][T27124] Bluetooth: hci5: Unknown advertising packet type: 0x37 [ 1557.353911][T27124] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1557.749003][T30795] syz.9.8397 (30795): drop_caches: 3 [ 1557.918640][T30801] FAULT_INJECTION: forcing a failure. [ 1557.918640][T30801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.944325][T30801] CPU: 0 UID: 0 PID: 30801 Comm: syz.9.8399 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.944358][T30801] Tainted: [L]=SOFTLOCKUP [ 1557.944365][T30801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1557.944376][T30801] Call Trace: [ 1557.944384][T30801] [ 1557.944392][T30801] dump_stack_lvl+0xe8/0x150 [ 1557.944426][T30801] should_fail_ex+0x40c/0x560 [ 1557.944452][T30801] _copy_from_user+0x2d/0xb0 [ 1557.944480][T30801] ___sys_sendmsg+0x1c6/0x360 [ 1557.944505][T30801] ? __lock_acquire+0x683/0x2cf0 [ 1557.944532][T30801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1557.944591][T30801] ? __fget_files+0x2a/0x420 [ 1557.944615][T30801] ? __fget_files+0x3a2/0x420 [ 1557.944655][T30801] __x64_sys_sendmsg+0x1b1/0x290 [ 1557.944687][T30801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1557.944734][T30801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.944755][T30801] do_syscall_64+0x174/0x580 [ 1557.944784][T30801] ? clear_bhb_loop+0x40/0x90 [ 1557.944807][T30801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.944826][T30801] RIP: 0033:0x7f6c5a19de59 [ 1557.944845][T30801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.944861][T30801] RSP: 002b:00007f6c5afa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1557.944881][T30801] RAX: ffffffffffffffda RBX: 00007f6c5a425fa0 RCX: 00007f6c5a19de59 [ 1557.944896][T30801] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1557.944909][T30801] RBP: 00007f6c5afa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.944921][T30801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1557.944932][T30801] R13: 00007f6c5a426038 R14: 00007f6c5a425fa0 R15: 00007f6c5a54fa48 [ 1557.944961][T30801] [ 1558.326953][T30802] vivid-000: disconnect [ 1558.425728][T30809] netlink: 'syz.6.8402': attribute type 12 has an invalid length. [ 1558.434126][ T6643] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1558.590528][ T6643] usb 10-1: Using ep0 maxpacket: 16 [ 1558.598834][ T6643] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1558.610991][ T6643] usb 10-1: language id specifier not provided by device, defaulting to English [ 1558.626677][ T6643] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1558.644524][T30798] vivid-000: reconnect [ 1558.663151][T30810] openvswitch: netlink: Actions may not be safe on all matching packets [ 1558.680521][ T6643] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.690341][ T6643] usb 10-1: Product: ‚ꐃ澥͠⬐ꋇǩ䅋嫋5 [ 1558.713288][ T6643] usb 10-1: SerialNumber: syz [ 1558.937783][ T6643] usb 10-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1559.063347][ T6643] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1559.102839][ T6643] usb 10-1: USB disconnect, device number 58 [ 1559.138829][T30822] loop2: detected capacity change from 0 to 7 [ 1559.150344][T30822] Dev loop2: unable to read RDB block 7 [ 1559.157190][T30822] loop2: unable to read partition table [ 1559.163670][T30822] loop2: partition table beyond EOD, truncated [ 1559.208974][T30822] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1559.251925][T28991] udevd[28991]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1559.294622][T30825] program syz.5.8410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1559.315943][T30825] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1559.342621][T30825] program syz.5.8410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1559.399762][T30830] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8412'. [ 1559.555415][T30836] vlan0: entered promiscuous mode [ 1559.561083][T12139] usb 9-1: new full-speed USB device number 107 using dummy_hcd [ 1559.570799][T30836] syz_tun: entered promiscuous mode [ 1559.638485][T30841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8414'. [ 1559.650321][ T6643] IPVS: starting estimator thread 0... [ 1559.745909][T12139] usb 9-1: not running at top speed; connect to a high speed hub [ 1559.755358][T30842] IPVS: using max 35 ests per chain, 84000 per kthread [ 1559.771329][T12139] usb 9-1: config 1 interface 0 altsetting 38 endpoint 0x81 has invalid maxpacket 2626, setting to 64 [ 1559.794315][T12139] usb 9-1: config 1 interface 0 altsetting 38 has an invalid descriptor for endpoint zero, skipping [ 1559.837639][T12139] usb 9-1: config 1 interface 0 altsetting 38 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1559.881796][T12139] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1559.913075][T12139] usb 9-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.40 [ 1559.934984][T12139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.945836][T12139] usb 9-1: SerialNumber: ᐁ [ 1559.966486][T30826] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1560.182960][T30826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.206415][T30826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.520465][ T6643] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1560.698234][ T6643] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1560.727240][ T6643] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1560.756545][ T6643] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1560.783136][ T6643] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1560.815471][ T6643] usb 10-1: Product: syz [ 1560.828707][ T6643] usb 10-1: Manufacturer: syz [ 1560.850114][ T6643] usb 10-1: SerialNumber: syz [ 1560.872391][ T6643] usb 10-1: config 0 descriptor?? [ 1560.903834][T30857] loop2: detected capacity change from 0 to 7 [ 1560.919967][T30857] Dev loop2: unable to read RDB block 7 [ 1560.933304][T30857] loop2: unable to read partition table [ 1560.946509][T30857] loop2: partition table beyond EOD, truncated [ 1560.969962][ T6643] usb 10-1: selecting invalid altsetting 0 [ 1560.973733][T30857] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1561.143520][T30859] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8422'. [ 1561.167927][ T6643] usb 10-1: USB disconnect, device number 59 [ 1561.269387][T28986] udevd[28986]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1561.450784][T12130] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1561.580484][T12130] usb 6-1: device descriptor read/64, error -71 [ 1561.611335][T12139] usbhid 9-1:1.0: can't add hid device: -71 [ 1561.632355][T12139] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1561.659974][T12139] usb 9-1: USB disconnect, device number 107 [ 1561.830532][T12130] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1561.895788][T30871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8426'. [ 1561.986025][T12130] usb 6-1: device descriptor read/64, error -71 [ 1562.110981][T12130] usb usb6-port1: attempt power cycle [ 1562.120145][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 1562.120176][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1562.128343][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 1562.137635][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x37 [ 1562.146180][T27124] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1562.289115][T30888] netlink: 'syz.1.8431': attribute type 12 has an invalid length. [ 1562.297352][T30888] netlink: 'syz.1.8431': attribute type 10 has an invalid length. [ 1562.306956][T30888] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8431'. [ 1562.317907][T12139] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1562.419497][T30890] loop2: detected capacity change from 0 to 7 [ 1562.432209][T30890] Dev loop2: unable to read RDB block 7 [ 1562.437859][T30890] loop2: unable to read partition table [ 1562.444812][T30890] loop2: partition table beyond EOD, truncated [ 1562.451845][T12139] usb 10-1: device descriptor read/64, error -71 [ 1562.460828][T30890] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1562.460825][T12130] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1562.482779][T12130] usb 6-1: device descriptor read/8, error -71 [ 1562.720678][T12139] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1562.741306][T12130] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1562.774048][T12130] usb 6-1: device descriptor read/8, error -71 [ 1562.892528][T12139] usb 10-1: device descriptor read/64, error -71 [ 1562.892601][T12130] usb usb6-port1: unable to enumerate USB device [ 1563.012857][T12139] usb usb10-port1: attempt power cycle [ 1563.390593][T12139] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1563.437232][T12139] usb 10-1: device descriptor read/8, error -71 [ 1563.690840][T12139] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1563.724983][T12139] usb 10-1: device descriptor read/8, error -71 [ 1563.820488][T25105] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1563.840914][T12139] usb usb10-port1: unable to enumerate USB device [ 1563.970765][T25105] usb 2-1: Using ep0 maxpacket: 16 [ 1563.977565][T25105] usb 2-1: config 254 has an invalid interface number: 52 but max is 0 [ 1563.993991][T25105] usb 2-1: config 254 has no interface number 0 [ 1564.000303][T25105] usb 2-1: config 254 interface 52 has no altsetting 0 [ 1564.014581][T25105] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 1564.024063][T25105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.036117][T25105] usb 2-1: Product: syz [ 1564.040322][T25105] usb 2-1: Manufacturer: syz [ 1564.045101][T25105] usb 2-1: SerialNumber: syz [ 1564.263231][T30922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.282945][T30922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.305167][ T29] audit: type=1326 audit(1784162550.654:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.1.8436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x0 [ 1564.492285][T30960] FAULT_INJECTION: forcing a failure. [ 1564.492285][T30960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.507157][T30960] CPU: 1 UID: 0 PID: 30960 Comm: syz.5.8439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1564.507189][T30960] Tainted: [L]=SOFTLOCKUP [ 1564.507196][T30960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1564.507207][T30960] Call Trace: [ 1564.507215][T30960] [ 1564.507223][T30960] dump_stack_lvl+0xe8/0x150 [ 1564.507257][T30960] should_fail_ex+0x40c/0x560 [ 1564.507284][T30960] _copy_from_user+0x2d/0xb0 [ 1564.507312][T30960] ___sys_sendmsg+0x1c6/0x360 [ 1564.507340][T30960] ? __lock_acquire+0x683/0x2cf0 [ 1564.507370][T30960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.507424][T30960] ? __fget_files+0x2a/0x420 [ 1564.507448][T30960] ? __fget_files+0x3a2/0x420 [ 1564.507479][T30960] __x64_sys_sendmsg+0x1b1/0x290 [ 1564.507507][T30960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1564.507545][T30960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.507566][T30960] do_syscall_64+0x174/0x580 [ 1564.507590][T30960] ? trace_irq_disable+0x3b/0x140 [ 1564.507611][T30960] ? clear_bhb_loop+0x40/0x90 [ 1564.507633][T30960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.507651][T30960] RIP: 0033:0x7fe99719de59 [ 1564.507670][T30960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.507684][T30960] RSP: 002b:00007fe9953f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1564.507704][T30960] RAX: ffffffffffffffda RBX: 00007fe997425fa0 RCX: 00007fe99719de59 [ 1564.507717][T30960] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1564.507727][T30960] RBP: 00007fe9953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.507739][T30960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.507748][T30960] R13: 00007fe997426038 R14: 00007fe997425fa0 R15: 00007fe99754fa48 [ 1564.507774][T30960] [ 1565.008266][T27124] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1565.157198][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8445'. [ 1565.168236][T30975] loop2: detected capacity change from 0 to 7 [ 1565.189331][T30975] Dev loop2: unable to read RDB block 7 [ 1565.211716][T30975] loop2: unable to read partition table [ 1565.227212][T30975] loop2: partition table beyond EOD, truncated [ 1565.246842][T30975] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1565.465935][T30984] tipc: Enabled bearer , priority 0 [ 1565.474209][T30979] syz.5.8446 (30979): drop_caches: 3 [ 1565.530703][T30985] syzkaller0: entered promiscuous mode [ 1565.538539][T30985] syzkaller0: entered allmulticast mode [ 1565.553744][T30984] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1565.666959][T30983] tipc: Resetting bearer [ 1565.770503][T30983] tipc: Disabling bearer [ 1565.901509][T30997] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8453'. [ 1565.967428][T30999] syzkaller0: entered promiscuous mode [ 1565.983616][T30999] syzkaller0: entered allmulticast mode [ 1565.989466][T27124] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 1565.996944][T27124] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1566.126216][T31007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8457'. [ 1566.251145][ T6638] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1566.335846][T31019] qrtr: Invalid version 0 [ 1566.417735][T31019] syzkaller1: entered promiscuous mode [ 1566.425946][ T6638] usb 10-1: device descriptor read/64, error -71 [ 1566.437194][T31019] syzkaller1: entered allmulticast mode [ 1566.567062][T12139] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1566.620847][T25105] usb-storage 2-1:254.52: USB Mass Storage device detected [ 1566.650315][T25105] usb-storage 2-1:254.52: This device (04e6,000a,0200 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1566.650315][T25105] Please send a copy of this message to and [ 1566.701839][ T6638] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1566.730617][T12139] usb 9-1: Using ep0 maxpacket: 32 [ 1566.748045][T12139] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1566.778768][T12139] usb 9-1: config 0 has no interface number 0 [ 1566.786178][T12139] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1566.786450][T25105] usb 2-1: USB disconnect, device number 93 [ 1566.807185][T12139] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1566.823329][T12139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.860598][ T6638] usb 10-1: device descriptor read/64, error -71 [ 1566.867264][T12139] usb 9-1: Product: syz [ 1566.887611][T12139] usb 9-1: Manufacturer: syz [ 1566.897625][T12139] usb 9-1: SerialNumber: syz [ 1566.917551][T12139] usb 9-1: config 0 descriptor?? [ 1566.930121][T31017] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1566.981086][ T6638] usb usb10-port1: attempt power cycle [ 1567.157439][T31017] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1567.253916][T31041] FAULT_INJECTION: forcing a failure. [ 1567.253916][T31041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.267497][T31041] CPU: 0 UID: 0 PID: 31041 Comm: syz.5.8468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1567.267536][T31041] Tainted: [L]=SOFTLOCKUP [ 1567.267543][T31041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1567.267555][T31041] Call Trace: [ 1567.267562][T31041] [ 1567.267570][T31041] dump_stack_lvl+0xe8/0x150 [ 1567.267602][T31041] should_fail_ex+0x40c/0x560 [ 1567.267629][T31041] _copy_from_user+0x2d/0xb0 [ 1567.267657][T31041] ___sys_sendmsg+0x1c6/0x360 [ 1567.267685][T31041] ? __lock_acquire+0x683/0x2cf0 [ 1567.267714][T31041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1567.267774][T31041] ? __fget_files+0x2a/0x420 [ 1567.267798][T31041] ? __fget_files+0x3a2/0x420 [ 1567.267830][T31041] __x64_sys_sendmsg+0x1b1/0x290 [ 1567.267861][T31041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1567.267905][T31041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.267925][T31041] do_syscall_64+0x174/0x580 [ 1567.267952][T31041] ? trace_irq_disable+0x3b/0x140 [ 1567.267975][T31041] ? clear_bhb_loop+0x40/0x90 [ 1567.267998][T31041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.268017][T31041] RIP: 0033:0x7fe99719de59 [ 1567.268035][T31041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.268052][T31041] RSP: 002b:00007fe9953f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1567.268071][T31041] RAX: ffffffffffffffda RBX: 00007fe997425fa0 RCX: 00007fe99719de59 [ 1567.268085][T31041] RDX: 0000000000040000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1567.268098][T31041] RBP: 00007fe9953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.268110][T31041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.268122][T31041] R13: 00007fe997426038 R14: 00007fe997425fa0 R15: 00007fe99754fa48 [ 1567.268152][T31041] [ 1567.458824][ T6638] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1567.524850][ T6638] usb 10-1: device descriptor read/8, error -71 [ 1567.657729][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8473'. [ 1567.705946][T31053] FAULT_INJECTION: forcing a failure. [ 1567.705946][T31053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1567.719282][T31053] CPU: 0 UID: 0 PID: 31053 Comm: syz.1.8474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1567.719311][T31053] Tainted: [L]=SOFTLOCKUP [ 1567.719318][T31053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1567.719329][T31053] Call Trace: [ 1567.719337][T31053] [ 1567.719346][T31053] dump_stack_lvl+0xe8/0x150 [ 1567.719370][T31053] should_fail_ex+0x40c/0x560 [ 1567.719386][T31053] _copy_from_user+0x2d/0xb0 [ 1567.719402][T31053] ___sys_sendmsg+0x1c6/0x360 [ 1567.719423][T31053] ? __lock_acquire+0x683/0x2cf0 [ 1567.719453][T31053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1567.719498][T31053] ? kstrtouint+0x6e/0xe0 [ 1567.719524][T31053] ? __fget_files+0x2a/0x420 [ 1567.719538][T31053] ? __fget_files+0x3a2/0x420 [ 1567.719555][T31053] __sys_sendmmsg+0x273/0x4d0 [ 1567.719570][T31053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1567.719598][T31053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1567.719639][T31053] ? ksys_write+0x242/0x270 [ 1567.719663][T31053] ? __pfx_ksys_write+0x10/0x10 [ 1567.719681][T31053] __x64_sys_sendmmsg+0xa0/0xc0 [ 1567.719692][T31053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.719702][T31053] do_syscall_64+0x174/0x580 [ 1567.719721][T31053] ? trace_irq_disable+0x3b/0x140 [ 1567.719745][T31053] ? clear_bhb_loop+0x40/0x90 [ 1567.719768][T31053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.719788][T31053] RIP: 0033:0x7f67d559de59 [ 1567.719805][T31053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.719814][T31053] RSP: 002b:00007f67d64a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1567.719826][T31053] RAX: ffffffffffffffda RBX: 00007f67d5825fa0 RCX: 00007f67d559de59 [ 1567.719835][T31053] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 1567.719842][T31053] RBP: 00007f67d64a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.719848][T31053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.719854][T31053] R13: 00007f67d5826038 R14: 00007f67d5825fa0 R15: 00007f67d594fa48 [ 1567.719876][T31053] [ 1567.781105][ T6638] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1567.861586][T31055] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1567.901256][ T6638] usb 10-1: device descriptor read/8, error -71 [ 1568.011330][T26100] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1568.011492][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.037740][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.082987][ T6638] usb usb10-port1: unable to enumerate USB device [ 1568.170703][T26100] usb 6-1: Using ep0 maxpacket: 8 [ 1568.181332][T26100] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1568.191221][T26100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.199277][T26100] usb 6-1: Product: syz [ 1568.204255][T26100] usb 6-1: Manufacturer: syz [ 1568.208935][T26100] usb 6-1: SerialNumber: syz [ 1568.218427][T26100] usb 6-1: config 0 descriptor?? [ 1568.228390][T26100] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1568.236976][T26100] pctv452e: pctv452e_power_ctrl: 1 [ 1568.236976][T26100] [ 1568.255356][T26100] usb 6-1: selecting invalid altsetting 3 [ 1568.262981][T26100] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1568.262981][T26100] [ 1568.274934][T26100] dvb-usb: bulk message failed: -22 (5/0) [ 1568.285745][T26100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1568.296919][T26100] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1568.305754][T26100] usb 6-1: media controller created [ 1568.311596][T26100] dvb-usb: bulk message failed: -22 (8/0) [ 1568.317384][T26100] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1568.326350][T26100] dvb-usb: MAC address reading failed. [ 1568.347003][T26100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1568.413518][T26100] DVB: Unable to find symbol stb0899_attach() [ 1568.419853][T26100] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1568.438673][T31051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.457501][T31051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.491521][T31051] netlink: 'syz.5.8472': attribute type 4 has an invalid length. [ 1568.508661][T31051] netlink: 'syz.5.8472': attribute type 4 has an invalid length. [ 1568.550634][T26100] rc_core: IR keymap rc-tt-1500 not found [ 1568.556499][T26100] Registered IR keymap rc-empty [ 1568.567023][T26100] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1568.579693][T26100] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input222 [ 1568.595873][T26100] dvb-usb: schedule remote query interval to 100 msecs. [ 1568.603018][T26100] pctv452e: pctv452e_power_ctrl: 0 [ 1568.603018][T26100] [ 1568.610324][T26100] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1568.623579][T26100] usb 6-1: USB disconnect, device number 91 [ 1568.709380][T26100] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1568.800642][T12130] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1568.950470][T12130] usb 2-1: Using ep0 maxpacket: 32 [ 1568.957417][T12130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1568.979261][T12130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1568.994876][T12130] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1569.009342][T12130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1569.024982][T12130] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1569.039244][T12130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.047717][T12130] usb 2-1: Product: syz [ 1569.052080][T12130] usb 2-1: Manufacturer: syz [ 1569.056692][T12130] usb 2-1: SerialNumber: syz [ 1569.069649][T12130] usb 2-1: config 0 descriptor?? [ 1569.086817][T12130] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input223 [ 1569.104953][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.125449][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.154368][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.189153][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.262077][T28946] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.294359][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.304720][T31078] netlink: 140 bytes leftover after parsing attributes in process `syz.9.8484'. [ 1569.315654][T12139] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1569.326215][T12139] asix 9-1:0.188: probe with driver asix failed with error -71 [ 1569.353404][T12139] usb 9-1: USB disconnect, device number 108 [ 1569.378463][ T4979] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1569.385289][T31076] FAULT_INJECTION: forcing a failure. [ 1569.385289][T31076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.459514][T31076] CPU: 1 UID: 0 PID: 31076 Comm: syz.5.8483 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.459546][T31076] Tainted: [L]=SOFTLOCKUP [ 1569.459552][T31076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1569.459563][T31076] Call Trace: [ 1569.459571][T31076] [ 1569.459578][T31076] dump_stack_lvl+0xe8/0x150 [ 1569.459610][T31076] should_fail_ex+0x40c/0x560 [ 1569.459636][T31076] _copy_from_user+0x2d/0xb0 [ 1569.459663][T31076] ___sys_sendmsg+0x1c6/0x360 [ 1569.459692][T31076] ? __lock_acquire+0x683/0x2cf0 [ 1569.459720][T31076] ? __pfx____sys_sendmsg+0x10/0x10 [ 1569.459776][T31076] ? __fget_files+0x2a/0x420 [ 1569.459797][T31076] ? __fget_files+0x3a2/0x420 [ 1569.459830][T31076] __x64_sys_sendmsg+0x1b1/0x290 [ 1569.459860][T31076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1569.459902][T31076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.459923][T31076] do_syscall_64+0x174/0x580 [ 1569.459951][T31076] ? clear_bhb_loop+0x40/0x90 [ 1569.459975][T31076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.459994][T31076] RIP: 0033:0x7fe99719de59 [ 1569.460012][T31076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.460028][T31076] RSP: 002b:00007fe9953f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.460049][T31076] RAX: ffffffffffffffda RBX: 00007fe997425fa0 RCX: 00007fe99719de59 [ 1569.460063][T31076] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 1569.460075][T31076] RBP: 00007fe9953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.460088][T31076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.460099][T31076] R13: 00007fe997426038 R14: 00007fe997425fa0 R15: 00007fe99754fa48 [ 1569.460129][T31076] [ 1569.689828][T31082] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1569.728443][T31086] FAULT_INJECTION: forcing a failure. [ 1569.728443][T31086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.742007][T31086] CPU: 1 UID: 0 PID: 31086 Comm: syz.9.8486 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.742037][T31086] Tainted: [L]=SOFTLOCKUP [ 1569.742044][T31086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1569.742055][T31086] Call Trace: [ 1569.742063][T31086] [ 1569.742071][T31086] dump_stack_lvl+0xe8/0x150 [ 1569.742101][T31086] should_fail_ex+0x40c/0x560 [ 1569.742126][T31086] _copy_from_user+0x2d/0xb0 [ 1569.742151][T31086] ___sys_sendmsg+0x1c6/0x360 [ 1569.742178][T31086] ? __lock_acquire+0x683/0x2cf0 [ 1569.742205][T31086] ? __pfx____sys_sendmsg+0x10/0x10 [ 1569.742261][T31086] ? __fget_files+0x2a/0x420 [ 1569.742282][T31086] ? __fget_files+0x3a2/0x420 [ 1569.742312][T31086] __x64_sys_sendmsg+0x1b1/0x290 [ 1569.742341][T31086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1569.742384][T31086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.742403][T31086] do_syscall_64+0x174/0x580 [ 1569.742429][T31086] ? trace_irq_disable+0x3b/0x140 [ 1569.742451][T31086] ? clear_bhb_loop+0x40/0x90 [ 1569.742473][T31086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.742492][T31086] RIP: 0033:0x7f6c5a19de59 [ 1569.742510][T31086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.742526][T31086] RSP: 002b:00007f6c5afa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.742546][T31086] RAX: ffffffffffffffda RBX: 00007f6c5a425fa0 RCX: 00007f6c5a19de59 [ 1569.742560][T31086] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 1569.742572][T31086] RBP: 00007f6c5afa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.742584][T31086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.742595][T31086] R13: 00007f6c5a426038 R14: 00007f6c5a425fa0 R15: 00007f6c5a54fa48 [ 1569.742625][T31086] [ 1570.005911][T31091] FAULT_INJECTION: forcing a failure. [ 1570.005911][T31091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1570.019612][T31091] CPU: 0 UID: 0 PID: 31091 Comm: syz.9.8488 Tainted: G L syzkaller #0 PREEMPT(full) [ 1570.019642][T31091] Tainted: [L]=SOFTLOCKUP [ 1570.019649][T31091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1570.019661][T31091] Call Trace: [ 1570.019668][T31091] [ 1570.019677][T31091] dump_stack_lvl+0xe8/0x150 [ 1570.019711][T31091] should_fail_ex+0x40c/0x560 [ 1570.019737][T31091] _copy_from_user+0x2d/0xb0 [ 1570.019765][T31091] ___sys_sendmsg+0x1c6/0x360 [ 1570.019793][T31091] ? __lock_acquire+0x683/0x2cf0 [ 1570.019822][T31091] ? __pfx____sys_sendmsg+0x10/0x10 [ 1570.019883][T31091] ? __fget_files+0x2a/0x420 [ 1570.019907][T31091] ? __fget_files+0x3a2/0x420 [ 1570.019940][T31091] __x64_sys_sendmsg+0x1b1/0x290 [ 1570.019971][T31091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1570.020015][T31091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.020037][T31091] do_syscall_64+0x174/0x580 [ 1570.020063][T31091] ? trace_irq_disable+0x3b/0x140 [ 1570.020087][T31091] ? clear_bhb_loop+0x40/0x90 [ 1570.020110][T31091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.020129][T31091] RIP: 0033:0x7f6c5a19de59 [ 1570.020148][T31091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.020165][T31091] RSP: 002b:00007f6c5afa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1570.020186][T31091] RAX: ffffffffffffffda RBX: 00007f6c5a425fa0 RCX: 00007f6c5a19de59 [ 1570.020200][T31091] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 1570.020213][T31091] RBP: 00007f6c5afa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.020225][T31091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.020235][T31091] R13: 00007f6c5a426038 R14: 00007f6c5a425fa0 R15: 00007f6c5a54fa48 [ 1570.020272][T31091] [ 1570.420597][T25105] usb 2-1: USB disconnect, device number 94 [ 1570.492749][T12139] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 1570.519444][T31104] FAULT_INJECTION: forcing a failure. [ 1570.519444][T31104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1570.546405][T31104] CPU: 0 UID: 0 PID: 31104 Comm: syz.1.8491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1570.546437][T31104] Tainted: [L]=SOFTLOCKUP [ 1570.546445][T31104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1570.546456][T31104] Call Trace: [ 1570.546463][T31104] [ 1570.546472][T31104] dump_stack_lvl+0xe8/0x150 [ 1570.546508][T31104] should_fail_ex+0x40c/0x560 [ 1570.546534][T31104] _copy_from_user+0x2d/0xb0 [ 1570.546563][T31104] ___sys_sendmsg+0x1c6/0x360 [ 1570.546620][T31104] ? __lock_acquire+0x683/0x2cf0 [ 1570.546649][T31104] ? __pfx____sys_sendmsg+0x10/0x10 [ 1570.546709][T31104] ? __fget_files+0x2a/0x420 [ 1570.546733][T31104] ? __fget_files+0x3a2/0x420 [ 1570.546766][T31104] __x64_sys_sendmsg+0x1b1/0x290 [ 1570.546795][T31104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1570.546841][T31104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.546862][T31104] do_syscall_64+0x174/0x580 [ 1570.546888][T31104] ? trace_irq_disable+0x3b/0x140 [ 1570.546911][T31104] ? clear_bhb_loop+0x40/0x90 [ 1570.546934][T31104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.546952][T31104] RIP: 0033:0x7f67d559de59 [ 1570.546978][T31104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.546995][T31104] RSP: 002b:00007f67d64a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1570.547016][T31104] RAX: ffffffffffffffda RBX: 00007f67d5825fa0 RCX: 00007f67d559de59 [ 1570.547031][T31104] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1570.547044][T31104] RBP: 00007f67d64a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.547057][T31104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.547067][T31104] R13: 00007f67d5826038 R14: 00007f67d5825fa0 R15: 00007f67d594fa48 [ 1570.547096][T31104] [ 1570.548150][T26100] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1570.693865][T31110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8493'. [ 1570.834445][T12139] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1570.845928][T12139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.863401][T12139] usb 9-1: Product: syz [ 1570.874727][T12139] usb 9-1: Manufacturer: syz [ 1570.885203][T12139] usb 9-1: SerialNumber: syz [ 1570.904911][T12139] usb 9-1: config 0 descriptor?? [ 1570.924966][T26100] usb 6-1: Using ep0 maxpacket: 32 [ 1570.934400][T26100] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 1570.954205][T26100] usb 6-1: config 4 has no interface number 0 [ 1570.983682][T26100] usb 6-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 1571.010576][T26100] usb 6-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1571.050172][T26100] usb 6-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 1571.071525][T26100] usb 6-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1571.086881][T26100] usb 6-1: config 4 interface 228 has no altsetting 0 [ 1571.127915][T25105] usb 9-1: USB disconnect, device number 109 [ 1571.128345][T26100] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1571.182835][T26100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.220308][T26100] usb 6-1: Product: syz [ 1571.226828][T26100] usb 6-1: Manufacturer: syz [ 1571.232336][T26100] usb 6-1: SerialNumber: syz [ 1571.352228][T31117] tipc: Enabling of bearer rejected, already enabled [ 1571.570684][T26100] usb 6-1: USB disconnect, device number 92 [ 1571.606892][T30864] udevd[30864]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.660493][T25105] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1571.827653][T25105] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1571.858032][T25105] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1571.931398][T25105] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1571.971054][T25105] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1572.037638][T25105] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1572.067948][T25105] usb 10-1: Product: syz [ 1572.083829][T25105] usb 10-1: Manufacturer: syz [ 1572.107741][T25105] usb 10-1: SerialNumber: syz [ 1572.119299][T25105] usb 10-1: config 0 descriptor?? [ 1572.159467][T25105] usb 10-1: selecting invalid altsetting 0 [ 1572.291973][T31124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.310491][T12130] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1572.320693][T12139] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1572.376299][T31118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.398888][T31118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.422558][T25105] usb 10-1: USB disconnect, device number 68 [ 1572.492636][T12130] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1572.501907][T12130] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1572.512460][T12130] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1572.521773][T12130] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.533558][T12130] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1572.542625][T12139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.545119][T12130] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1572.556412][T12139] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1572.577097][T12139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.578621][T12130] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1572.597890][T12139] usb 2-1: config 0 descriptor?? [ 1572.601847][T12130] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1572.611159][T12130] usb 9-1: Product: syz [ 1572.617006][T12130] usb 9-1: Manufacturer: syz [ 1572.634416][T31122] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1572.644173][T12130] cdc_wdm 9-1:1.0: skipping garbage [ 1572.649434][T12130] cdc_wdm 9-1:1.0: skipping garbage [ 1572.656839][T12130] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1572.664333][T12130] cdc_wdm 9-1:1.0: Unknown control protocol [ 1572.825435][T31120] sg_write: data in/out 680960/136 bytes for SCSI command 0x0-- guessing data in; [ 1572.825435][T31120] program syz.1.8495 not setting count and/or reply_len properly [ 1572.851534][T12139] usbhid 2-1:0.0: can't add hid device: -71 [ 1572.860073][T12139] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1572.875064][ C0] wdm_int_callback: 6952 callbacks suppressed [ 1572.875089][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.887781][ C0] wdm_int_callback: 6952 callbacks suppressed [ 1572.887795][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.900232][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.906822][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.913304][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.919922][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.926285][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.932978][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.939282][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.945870][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.952280][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.958890][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.965406][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.972022][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.978437][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1572.980752][T12139] usb 2-1: USB disconnect, device number 95 [ 1572.985061][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1572.985629][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1573.003669][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1573.010544][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1573.017269][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1573.237648][T12130] usb 9-1: USB disconnect, device number 110 [ 1573.351584][T12139] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1573.501261][T12139] usb 2-1: no configurations [ 1573.506010][T12139] usb 2-1: can't read configurations, error -22 [ 1573.640616][T12139] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1573.801775][T12139] usb 2-1: no configurations [ 1573.811322][T12139] usb 2-1: can't read configurations, error -22 [ 1573.826677][T12139] usb usb2-port1: attempt power cycle [ 1573.986456][T31139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1574.170725][T12139] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1574.191637][T12139] usb 2-1: no configurations [ 1574.196274][T12139] usb 2-1: can't read configurations, error -22 [ 1574.329397][T31146] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8503'. [ 1574.338955][T12139] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1574.362053][T12139] usb 2-1: no configurations [ 1574.368152][T12139] usb 2-1: can't read configurations, error -22 [ 1574.375608][T12139] usb usb2-port1: unable to enumerate USB device [ 1574.395319][T31148] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8504'. [ 1574.438494][T31150] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8505'. [ 1574.582234][T31154] loop2: detected capacity change from 0 to 7 [ 1574.590568][T31154] Dev loop2: unable to read RDB block 7 [ 1574.596335][T31154] loop2: unable to read partition table [ 1574.602430][T31154] loop2: partition table beyond EOD, truncated [ 1574.609876][T31154] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1574.841309][T31161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8509'. [ 1575.048917][T31169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8513'. [ 1575.141959][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8515'. [ 1575.185603][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8516'. [ 1575.763589][T31193] syz.1.8524 (31193): drop_caches: 3 [ 1575.789185][T31198] syzkaller0: entered promiscuous mode [ 1575.803064][T31198] syzkaller0: entered allmulticast mode [ 1575.819310][T31200] netlink: 6208 bytes leftover after parsing attributes in process `syz.8.8521'. [ 1576.064460][T31203] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1576.171033][T31208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8528'. [ 1576.264159][T31214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8530'. [ 1576.284083][T31214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8530'. [ 1576.339900][T31216] FAULT_INJECTION: forcing a failure. [ 1576.339900][T31216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.359025][T31216] CPU: 0 UID: 0 PID: 31216 Comm: syz.5.8532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.359071][T31216] Tainted: [L]=SOFTLOCKUP [ 1576.359078][T31216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1576.359091][T31216] Call Trace: [ 1576.359099][T31216] [ 1576.359108][T31216] dump_stack_lvl+0xe8/0x150 [ 1576.359143][T31216] should_fail_ex+0x40c/0x560 [ 1576.359172][T31216] _copy_from_user+0x2d/0xb0 [ 1576.359199][T31216] ___sys_sendmsg+0x1c6/0x360 [ 1576.359230][T31216] ? __lock_acquire+0x683/0x2cf0 [ 1576.359262][T31216] ? __pfx____sys_sendmsg+0x10/0x10 [ 1576.359323][T31216] ? __fget_files+0x2a/0x420 [ 1576.359349][T31216] ? __fget_files+0x3a2/0x420 [ 1576.359384][T31216] __x64_sys_sendmsg+0x1b1/0x290 [ 1576.359418][T31216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1576.359464][T31216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.359488][T31216] do_syscall_64+0x174/0x580 [ 1576.359516][T31216] ? trace_irq_disable+0x3b/0x140 [ 1576.359542][T31216] ? clear_bhb_loop+0x40/0x90 [ 1576.359565][T31216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.359587][T31216] RIP: 0033:0x7fe99719de59 [ 1576.359607][T31216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.359622][T31216] RSP: 002b:00007fe9953f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1576.359642][T31216] RAX: ffffffffffffffda RBX: 00007fe997425fa0 RCX: 00007fe99719de59 [ 1576.359655][T31216] RDX: 0000000002040010 RSI: 0000200000000340 RDI: 0000000000000004 [ 1576.359666][T31216] RBP: 00007fe9953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.359678][T31216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.359688][T31216] R13: 00007fe997426038 R14: 00007fe997425fa0 R15: 00007fe99754fa48 [ 1576.359715][T31216] [ 1576.430545][T26100] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1576.466346][T31218] tipc: Enabled bearer , priority 0 [ 1576.558829][T31219] syzkaller0: entered promiscuous mode [ 1576.570191][T31219] syzkaller0: entered allmulticast mode [ 1576.599402][T31218] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1576.646512][T31217] tipc: Resetting bearer [ 1576.712434][T26100] usb 2-1: Using ep0 maxpacket: 32 [ 1576.720345][T26100] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1576.734649][T26100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.764580][T26100] usb 2-1: config 0 descriptor?? [ 1576.788616][T26100] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1576.797606][T31217] tipc: Disabling bearer [ 1576.939722][T31223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8534'. [ 1576.984855][T31208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.019279][T31208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.312636][T12139] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1577.321352][T26100] gspca_sunplus: reg_w_riv err -110 [ 1577.335569][T26100] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1577.485170][T31242] syzkaller0: entered promiscuous mode [ 1577.500815][T31242] syzkaller0: entered allmulticast mode [ 1577.508100][T12139] usb 10-1: Using ep0 maxpacket: 32 [ 1577.526799][T12139] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1577.547762][T12139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1577.569606][T12139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1577.616731][T26100] usb 2-1: USB disconnect, device number 100 [ 1577.625479][T12139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1577.641767][T12139] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1577.660097][T12139] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1577.685069][T12139] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.694056][T12139] usb 10-1: Product: syz [ 1577.698389][T12139] usb 10-1: Manufacturer: syz [ 1577.726334][T12139] usb 10-1: SerialNumber: syz [ 1577.747686][T12139] usb 10-1: config 0 descriptor?? [ 1577.882328][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8545'. [ 1578.010997][T31259] FAULT_INJECTION: forcing a failure. [ 1578.010997][T31259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.070150][T31259] CPU: 1 UID: 0 PID: 31259 Comm: syz.6.8546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.070182][T31259] Tainted: [L]=SOFTLOCKUP [ 1578.070188][T31259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1578.070202][T31259] Call Trace: [ 1578.070210][T31259] [ 1578.070218][T31259] dump_stack_lvl+0xe8/0x150 [ 1578.070252][T31259] should_fail_ex+0x40c/0x560 [ 1578.070278][T31259] _copy_from_user+0x2d/0xb0 [ 1578.070307][T31259] ___sys_sendmsg+0x1c6/0x360 [ 1578.070336][T31259] ? __lock_acquire+0x683/0x2cf0 [ 1578.070363][T31259] ? __pfx____sys_sendmsg+0x10/0x10 [ 1578.070393][T31259] ? kstrtouint+0x6e/0xe0 [ 1578.070436][T31259] ? __fget_files+0x2a/0x420 [ 1578.070459][T31259] ? __fget_files+0x3a2/0x420 [ 1578.070492][T31259] __sys_sendmmsg+0x273/0x4d0 [ 1578.070516][T31259] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1578.070543][T31259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1578.070584][T31259] ? ksys_write+0x242/0x270 [ 1578.070614][T31259] ? __pfx_ksys_write+0x10/0x10 [ 1578.070647][T31259] __x64_sys_sendmmsg+0xa0/0xc0 [ 1578.070666][T31259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.070687][T31259] do_syscall_64+0x174/0x580 [ 1578.070713][T31259] ? trace_irq_disable+0x3b/0x140 [ 1578.070736][T31259] ? clear_bhb_loop+0x40/0x90 [ 1578.070759][T31259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.070779][T31259] RIP: 0033:0x7ff4d679de59 [ 1578.070797][T31259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.070822][T31259] RSP: 002b:00007ff4d7589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1578.070842][T31259] RAX: ffffffffffffffda RBX: 00007ff4d6a25fa0 RCX: 00007ff4d679de59 [ 1578.070856][T31259] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 1578.070868][T31259] RBP: 00007ff4d7589090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.070879][T31259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.070890][T31259] R13: 00007ff4d6a26038 R14: 00007ff4d6a25fa0 R15: 00007ff4d6b4fa48 [ 1578.070920][T31259] [ 1578.298966][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8549'. [ 1578.318287][T31263] FAULT_INJECTION: forcing a failure. [ 1578.318287][T31263] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.332125][T31263] CPU: 1 UID: 0 PID: 31263 Comm: syz.8.8548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.332157][T31263] Tainted: [L]=SOFTLOCKUP [ 1578.332164][T31263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1578.332175][T31263] Call Trace: [ 1578.332184][T31263] [ 1578.332192][T31263] dump_stack_lvl+0xe8/0x150 [ 1578.332227][T31263] should_fail_ex+0x40c/0x560 [ 1578.332255][T31263] should_failslab+0xa8/0x100 [ 1578.332284][T31263] __kmalloc_noprof+0xfe/0x720 [ 1578.332313][T31263] ? rcu_is_watching+0x15/0xb0 [ 1578.332341][T31263] ? tomoyo_realpath_from_path+0xef/0x640 [ 1578.332362][T31263] ? tomoyo_realpath_from_path+0xef/0x640 [ 1578.332390][T31263] tomoyo_realpath_from_path+0xef/0x640 [ 1578.332420][T31263] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1578.332447][T31263] tomoyo_path_number_perm+0x246/0x5f0 [ 1578.332477][T31263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1578.332507][T31263] ? sb_end_write+0xe5/0x190 [ 1578.332531][T31263] ? vfs_write+0x9ce/0xba0 [ 1578.332564][T31263] ? hook_file_ioctl+0x1f0/0x5f0 [ 1578.332615][T31263] ? ksys_write+0x1fc/0x270 [ 1578.332649][T31263] security_file_ioctl+0xc3/0x2a0 [ 1578.332677][T31263] __se_sys_ioctl+0x47/0x170 [ 1578.332695][T31263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.332717][T31263] do_syscall_64+0x174/0x580 [ 1578.332741][T31263] ? trace_irq_disable+0x3b/0x140 [ 1578.332762][T31263] ? clear_bhb_loop+0x40/0x90 [ 1578.332782][T31263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.332799][T31263] RIP: 0033:0x7f3c1db9de59 [ 1578.332816][T31263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.332831][T31263] RSP: 002b:00007f3c1e9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.332850][T31263] RAX: ffffffffffffffda RBX: 00007f3c1de25fa0 RCX: 00007f3c1db9de59 [ 1578.332862][T31263] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000007 [ 1578.332871][T31263] RBP: 00007f3c1e9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.332881][T31263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.332891][T31263] R13: 00007f3c1de26038 R14: 00007f3c1de25fa0 R15: 00007f3c1df4fa48 [ 1578.332917][T31263] [ 1578.332946][T31263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1578.533796][T31269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8550'. [ 1578.545609][T12139] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1578.584852][T12139] input input224: Device does not respond to id packet M [ 1578.601354][T12139] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1578.620555][T12139] input input224: Device does not respond to id packet P [ 1578.649062][T12139] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1578.673105][T12139] input input224: Device does not respond to id packet B [ 1578.880055][T31276] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8552'. [ 1579.090479][T12130] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1579.237135][T12139] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1579.252535][T12130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.252564][T12139] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1579.252932][T12139] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1579.278494][T12130] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.312347][T12139] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1579.316623][T12130] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1579.326099][T12139] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input224 [ 1579.356904][T12130] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.387819][T12139] usb 10-1: USB disconnect, device number 69 [ 1579.404663][T12130] usb 9-1: config 0 descriptor?? [ 1579.629072][T31282] syzkaller0: entered promiscuous mode [ 1579.635599][T31282] syzkaller0: entered allmulticast mode [ 1579.858186][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.883684][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.905105][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.925293][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.945084][T31291] syzkaller0: entered promiscuous mode [ 1579.950916][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.950952][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.950980][T12130] hid-thrustmaster 0003:044F:B65D.004B: unknown main item tag 0x0 [ 1579.972237][T12130] hid-thrustmaster 0003:044F:B65D.004B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1579.998175][T12130] hid-thrustmaster 0003:044F:B65D.004B: Wrong number of endpoints? [ 1580.024946][T31294] FAULT_INJECTION: forcing a failure. [ 1580.024946][T31294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.037718][T31291] syzkaller0: entered allmulticast mode [ 1580.046352][T31296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8559'. [ 1580.060959][ C0] hid-thrustmaster 0003:044F:B65D.004B: Unknown packet type 0x6d47, unable to proceed further with wheel init [ 1580.086577][T31294] CPU: 0 UID: 0 PID: 31294 Comm: syz.1.8558 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.086609][T31294] Tainted: [L]=SOFTLOCKUP [ 1580.086617][T31294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1580.086628][T31294] Call Trace: [ 1580.086636][T31294] [ 1580.086645][T31294] dump_stack_lvl+0xe8/0x150 [ 1580.086678][T31294] should_fail_ex+0x40c/0x560 [ 1580.086706][T31294] _copy_from_user+0x2d/0xb0 [ 1580.086733][T31294] ___sys_sendmsg+0x1c6/0x360 [ 1580.086760][T31294] ? __lock_acquire+0x683/0x2cf0 [ 1580.086785][T31294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.086839][T31294] ? __fget_files+0x2a/0x420 [ 1580.086863][T31294] ? __fget_files+0x3a2/0x420 [ 1580.086896][T31294] __x64_sys_sendmsg+0x1b1/0x290 [ 1580.086928][T31294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1580.086974][T31294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.086995][T31294] do_syscall_64+0x174/0x580 [ 1580.087025][T31294] ? clear_bhb_loop+0x40/0x90 [ 1580.087048][T31294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.087076][T31294] RIP: 0033:0x7f67d559de59 [ 1580.087094][T31294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.087111][T31294] RSP: 002b:00007f67d6482028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.087132][T31294] RAX: ffffffffffffffda RBX: 00007f67d5826090 RCX: 00007f67d559de59 [ 1580.087146][T31294] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1580.087158][T31294] RBP: 00007f67d6482090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.087170][T31294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.087181][T31294] R13: 00007f67d5826128 R14: 00007f67d5826090 R15: 00007f67d594fa48 [ 1580.087209][T31294] [ 1580.284623][T31277] blktrace: Concurrent blktraces are not allowed on sg0 [ 1580.316426][T12130] usb 9-1: USB disconnect, device number 111 [ 1580.407546][T31293] fido_id[31293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1580.624995][T31305] FAULT_INJECTION: forcing a failure. [ 1580.624995][T31305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.651545][T31305] CPU: 1 UID: 0 PID: 31305 Comm: syz.1.8563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.651578][T31305] Tainted: [L]=SOFTLOCKUP [ 1580.651585][T31305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1580.651595][T31305] Call Trace: [ 1580.651603][T31305] [ 1580.651611][T31305] dump_stack_lvl+0xe8/0x150 [ 1580.651641][T31305] should_fail_ex+0x40c/0x560 [ 1580.651664][T31305] _copy_from_user+0x2d/0xb0 [ 1580.651691][T31305] ___sys_sendmsg+0x1c6/0x360 [ 1580.651720][T31305] ? __lock_acquire+0x683/0x2cf0 [ 1580.651749][T31305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1580.651810][T31305] ? __fget_files+0x2a/0x420 [ 1580.651830][T31305] ? __fget_files+0x3a2/0x420 [ 1580.651858][T31305] __x64_sys_sendmsg+0x1b1/0x290 [ 1580.651887][T31305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1580.651926][T31305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.651944][T31305] do_syscall_64+0x174/0x580 [ 1580.651968][T31305] ? trace_irq_disable+0x3b/0x140 [ 1580.651988][T31305] ? clear_bhb_loop+0x40/0x90 [ 1580.652010][T31305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.652028][T31305] RIP: 0033:0x7f67d559de59 [ 1580.652045][T31305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.652059][T31305] RSP: 002b:00007f67d64a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.652079][T31305] RAX: ffffffffffffffda RBX: 00007f67d5825fa0 RCX: 00007f67d559de59 [ 1580.652092][T31305] RDX: 0000000020000010 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1580.652104][T31305] RBP: 00007f67d64a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.652115][T31305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.652127][T31305] R13: 00007f67d5826038 R14: 00007f67d5825fa0 R15: 00007f67d594fa48 [ 1580.652156][T31305] [ 1580.988029][T31312] FAULT_INJECTION: forcing a failure. [ 1580.988029][T31312] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.033068][T31312] CPU: 0 UID: 0 PID: 31312 Comm: syz.8.8566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.033101][T31312] Tainted: [L]=SOFTLOCKUP [ 1581.033108][T31312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1581.033123][T31312] Call Trace: [ 1581.033131][T31312] [ 1581.033139][T31312] dump_stack_lvl+0xe8/0x150 [ 1581.033172][T31312] should_fail_ex+0x40c/0x560 [ 1581.033198][T31312] should_failslab+0xa8/0x100 [ 1581.033226][T31312] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1581.033249][T31312] ? create_new_namespaces+0x33/0x6b0 [ 1581.033269][T31312] ? create_new_namespaces+0x33/0x6b0 [ 1581.033295][T31312] create_new_namespaces+0x33/0x6b0 [ 1581.033316][T31312] ? __pfx_vfs_write+0x10/0x10 [ 1581.033347][T31312] __se_sys_setns+0x2af/0x1b70 [ 1581.033377][T31312] ? __pfx___se_sys_setns+0x10/0x10 [ 1581.033409][T31312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.033428][T31312] do_syscall_64+0x174/0x580 [ 1581.033455][T31312] ? clear_bhb_loop+0x40/0x90 [ 1581.033574][T31312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.033594][T31312] RIP: 0033:0x7f3c1db9de59 [ 1581.033612][T31312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.033628][T31312] RSP: 002b:00007f3c1e9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1581.033647][T31312] RAX: ffffffffffffffda RBX: 00007f3c1de25fa0 RCX: 00007f3c1db9de59 [ 1581.033660][T31312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 1581.033671][T31312] RBP: 00007f3c1e9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.033682][T31312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.033694][T31312] R13: 00007f3c1de26038 R14: 00007f3c1de25fa0 R15: 00007f3c1df4fa48 [ 1581.033723][T31312] [ 1581.417541][T31324] __nla_validate_parse: 1 callbacks suppressed [ 1581.417561][T31324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1581.493810][T31326] binder_alloc: 31325: pid 31325 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1581.748131][T31335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8574'. [ 1581.947330][T31338] FAULT_INJECTION: forcing a failure. [ 1581.947330][T31338] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.980912][T31338] CPU: 1 UID: 0 PID: 31338 Comm: syz.6.8575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1581.980932][T31338] Tainted: [L]=SOFTLOCKUP [ 1581.980936][T31338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1581.980943][T31338] Call Trace: [ 1581.980948][T31338] [ 1581.980953][T31338] dump_stack_lvl+0xe8/0x150 [ 1581.980975][T31338] should_fail_ex+0x40c/0x560 [ 1581.980990][T31338] should_failslab+0xa8/0x100 [ 1581.981007][T31338] __kmalloc_cache_noprof+0xa8/0x660 [ 1581.981021][T31338] ? alloc_pipe_info+0xe8/0x4c0 [ 1581.981031][T31338] ? alloc_pipe_info+0xe8/0x4c0 [ 1581.981043][T31338] alloc_pipe_info+0xe8/0x4c0 [ 1581.981054][T31338] splice_direct_to_actor+0xa41/0xcb0 [ 1581.981076][T31338] ? __pfx_aa_file_perm+0x10/0x10 [ 1581.981089][T31338] ? __pfx_direct_splice_actor+0x10/0x10 [ 1581.981103][T31338] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1581.981122][T31338] do_splice_direct+0x195/0x290 [ 1581.981138][T31338] ? __pfx_do_splice_direct+0x10/0x10 [ 1581.981152][T31338] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1581.981169][T31338] ? bpf_lsm_file_permission+0x9/0x20 [ 1581.981181][T31338] ? security_file_permission+0x75/0x260 [ 1581.981196][T31338] ? rw_verify_area+0x203/0x4c0 [ 1581.981214][T31338] do_sendfile+0x52e/0x7c0 [ 1581.981231][T31338] ? __pfx_do_sendfile+0x10/0x10 [ 1581.981249][T31338] ? __fget_files+0x3a2/0x420 [ 1581.981268][T31338] __se_sys_sendfile64+0x144/0x1a0 [ 1581.981281][T31338] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1581.981297][T31338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.981308][T31338] do_syscall_64+0x174/0x580 [ 1581.981324][T31338] ? trace_irq_disable+0x3b/0x140 [ 1581.981336][T31338] ? clear_bhb_loop+0x40/0x90 [ 1581.981352][T31338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.981362][T31338] RIP: 0033:0x7ff4d679de59 [ 1581.981374][T31338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.981383][T31338] RSP: 002b:00007ff4d7589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.981395][T31338] RAX: ffffffffffffffda RBX: 00007ff4d6a25fa0 RCX: 00007ff4d679de59 [ 1581.981403][T31338] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1581.981409][T31338] RBP: 00007ff4d7589090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.981416][T31338] R10: 0000000001000009 R11: 0000000000000246 R12: 0000000000000001 [ 1581.981422][T31338] R13: 00007ff4d6a26038 R14: 00007ff4d6a25fa0 R15: 00007ff4d6b4fa48 [ 1581.981438][T31338] [ 1582.315670][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 1582.315702][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 1582.325982][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 1582.333108][T27124] Bluetooth: hci0: Unknown advertising packet type: 0x37 [ 1582.340567][T27124] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1582.528852][T31345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8578'. [ 1582.930773][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8581'. [ 1583.022922][T31357] FAULT_INJECTION: forcing a failure. [ 1583.022922][T31357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.048452][T31357] CPU: 1 UID: 0 PID: 31357 Comm: syz.9.8582 Tainted: G L syzkaller #0 PREEMPT(full) [ 1583.048485][T31357] Tainted: [L]=SOFTLOCKUP [ 1583.048492][T31357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1583.048504][T31357] Call Trace: [ 1583.048512][T31357] [ 1583.048520][T31357] dump_stack_lvl+0xe8/0x150 [ 1583.048554][T31357] should_fail_ex+0x40c/0x560 [ 1583.048581][T31357] _copy_from_user+0x2d/0xb0 [ 1583.048609][T31357] get_timespec64+0x96/0x1b0 [ 1583.048636][T31357] ? __pfx_get_timespec64+0x10/0x10 [ 1583.048672][T31357] __x64_sys_recvmmsg+0x14b/0x250 [ 1583.048696][T31357] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1583.048723][T31357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.048744][T31357] do_syscall_64+0x174/0x580 [ 1583.048769][T31357] ? trace_irq_disable+0x3b/0x140 [ 1583.048794][T31357] ? clear_bhb_loop+0x40/0x90 [ 1583.048817][T31357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.048836][T31357] RIP: 0033:0x7f6c5a19de59 [ 1583.048855][T31357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.048870][T31357] RSP: 002b:00007f6c5af85028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1583.048891][T31357] RAX: ffffffffffffffda RBX: 00007f6c5a426090 RCX: 00007f6c5a19de59 [ 1583.048905][T31357] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1583.048919][T31357] RBP: 00007f6c5af85090 R08: 0000200000003700 R09: 0000000000000000 [ 1583.048931][T31357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.048942][T31357] R13: 00007f6c5a426128 R14: 00007f6c5a426090 R15: 00007f6c5a54fa48 [ 1583.048971][T31357] [ 1583.330032][T31362] FAULT_INJECTION: forcing a failure. [ 1583.330032][T31362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.356170][T31362] CPU: 1 UID: 0 PID: 31362 Comm: syz.6.8585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1583.356200][T31362] Tainted: [L]=SOFTLOCKUP [ 1583.356206][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1583.356216][T31362] Call Trace: [ 1583.356224][T31362] [ 1583.356231][T31362] dump_stack_lvl+0xe8/0x150 [ 1583.356263][T31362] should_fail_ex+0x40c/0x560 [ 1583.356289][T31362] _copy_from_user+0x2d/0xb0 [ 1583.356316][T31362] ___sys_sendmsg+0x1c6/0x360 [ 1583.356340][T31362] ? __lock_acquire+0x683/0x2cf0 [ 1583.356367][T31362] ? __pfx____sys_sendmsg+0x10/0x10 [ 1583.356423][T31362] ? __fget_files+0x2a/0x420 [ 1583.356447][T31362] ? __fget_files+0x3a2/0x420 [ 1583.356479][T31362] __x64_sys_sendmsg+0x1b1/0x290 [ 1583.356508][T31362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1583.356571][T31362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.356592][T31362] do_syscall_64+0x174/0x580 [ 1583.356624][T31362] ? trace_irq_disable+0x3b/0x140 [ 1583.356648][T31362] ? clear_bhb_loop+0x40/0x90 [ 1583.356668][T31362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.356684][T31362] RIP: 0033:0x7ff4d679de59 [ 1583.356701][T31362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.356717][T31362] RSP: 002b:00007ff4d7589028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.356737][T31362] RAX: ffffffffffffffda RBX: 00007ff4d6a25fa0 RCX: 00007ff4d679de59 [ 1583.356750][T31362] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1583.356762][T31362] RBP: 00007ff4d7589090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.356773][T31362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.356784][T31362] R13: 00007ff4d6a26038 R14: 00007ff4d6a25fa0 R15: 00007ff4d6b4fa48 [ 1583.356813][T31362] [ 1583.370266][T31367] program syz.1.8583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.296477][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8595'. [ 1584.860638][T31404] loop2: detected capacity change from 0 to 7 [ 1584.861555][T31405] program syz.1.8599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.869172][T31404] Dev loop2: unable to read RDB block 7 [ 1584.884223][T31404] loop2: unable to read partition table [ 1584.890191][T31404] loop2: partition table beyond EOD, truncated [ 1584.897950][T31404] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1585.029675][T31408] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1585.109535][T31408] PKCS8: Unsupported PKCS#8 version [ 1585.327889][T31408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.335533][T31408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.398981][T31429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8607'. [ 1585.430605][ T6638] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1585.590503][ T6638] usb 2-1: Using ep0 maxpacket: 16 [ 1585.605065][ T6638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.616868][ T6638] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1585.630973][ T6638] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1585.641849][ T6638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.660688][ T6638] usb 2-1: Product: syz [ 1585.673372][ T6638] usb 2-1: Manufacturer: syz [ 1585.682792][ T6638] usb 2-1: SerialNumber: syz [ 1585.712255][ T6638] usb 2-1: 0:2 : does not exist [ 1585.725212][ T6638] usb 2-1: unit 15 not found! [ 1585.742000][T31408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.819091][T31408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.254546][T12133] usb 2-1: USB disconnect, device number 101 [ 1586.278830][T28391] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.318730][T28391] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.363715][T28391] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.414005][T28391] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.634352][T31456] program syz.8.8611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1586.711129][T31460] loop2: detected capacity change from 0 to 7 [ 1586.732510][T31458] FAULT_INJECTION: forcing a failure. [ 1586.732510][T31458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.737933][T31460] Dev loop2: unable to read RDB block 7 [ 1586.751308][T31458] CPU: 1 UID: 0 PID: 31458 Comm: syz.5.8612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.751336][T31458] Tainted: [L]=SOFTLOCKUP [ 1586.751342][T31458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1586.751353][T31458] Call Trace: [ 1586.751360][T31458] [ 1586.751369][T31458] dump_stack_lvl+0xe8/0x150 [ 1586.751400][T31458] should_fail_ex+0x40c/0x560 [ 1586.751425][T31458] _copy_from_user+0x2d/0xb0 [ 1586.751453][T31458] ___sys_sendmsg+0x1c6/0x360 [ 1586.751480][T31458] ? __lock_acquire+0x683/0x2cf0 [ 1586.751508][T31458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1586.751567][T31458] ? __fget_files+0x2a/0x420 [ 1586.751588][T31458] ? __fget_files+0x3a2/0x420 [ 1586.751620][T31458] __x64_sys_sendmsg+0x1b1/0x290 [ 1586.751651][T31458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1586.751694][T31458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.751714][T31458] do_syscall_64+0x174/0x580 [ 1586.751741][T31458] ? clear_bhb_loop+0x40/0x90 [ 1586.751764][T31458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.751783][T31458] RIP: 0033:0x7fe99719de59 [ 1586.751808][T31458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.751824][T31458] RSP: 002b:00007fe9953f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.751845][T31458] RAX: ffffffffffffffda RBX: 00007fe997425fa0 RCX: 00007fe99719de59 [ 1586.751859][T31458] RDX: 0000000020004014 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1586.751871][T31458] RBP: 00007fe9953f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.751884][T31458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.751894][T31458] R13: 00007fe997426038 R14: 00007fe997425fa0 R15: 00007fe99754fa48 [ 1586.751923][T31458] [ 1586.866168][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x19 [ 1586.879593][T31460] loop2: unable to read partition table [ 1586.888183][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x1f [ 1586.888210][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x31 [ 1586.888226][T27124] Bluetooth: hci3: Unknown advertising packet type: 0x37 [ 1586.888239][T27124] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1586.987990][T31460] loop2: partition table beyond EOD, truncated [ 1586.994802][T31460] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1587.252067][T31472] tipc: Enabled bearer , priority 0 [ 1587.292272][T31472] syzkaller0: entered promiscuous mode [ 1587.302307][T31472] syzkaller0: entered allmulticast mode [ 1587.311638][T31474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8619'. [ 1587.321502][T31475] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1587.405096][T31471] tipc: Resetting bearer [ 1587.488806][T31471] tipc: Disabling bearer [ 1587.525078][T31480] syzkaller0: entered promiscuous mode [ 1587.531824][T31480] syzkaller0: entered allmulticast mode [ 1588.054619][T31509] FAULT_INJECTION: forcing a failure. [ 1588.054619][T31509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.125663][T31509] CPU: 0 UID: 0 PID: 31509 Comm: syz.1.8631 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.125695][T31509] Tainted: [L]=SOFTLOCKUP [ 1588.125701][T31509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1588.125709][T31509] Call Trace: [ 1588.125714][T31509] [ 1588.125719][T31509] dump_stack_lvl+0xe8/0x150 [ 1588.125741][T31509] should_fail_ex+0x40c/0x560 [ 1588.125757][T31509] _copy_from_user+0x2d/0xb0 [ 1588.125773][T31509] ___sys_sendmsg+0x1c6/0x360 [ 1588.125790][T31509] ? __lock_acquire+0x683/0x2cf0 [ 1588.125807][T31509] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.125839][T31509] ? __fget_files+0x2a/0x420 [ 1588.125852][T31509] ? __fget_files+0x3a2/0x420 [ 1588.125870][T31509] __x64_sys_sendmsg+0x1b1/0x290 [ 1588.125887][T31509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1588.125911][T31509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.125922][T31509] do_syscall_64+0x174/0x580 [ 1588.125939][T31509] ? clear_bhb_loop+0x40/0x90 [ 1588.125952][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.125962][T31509] RIP: 0033:0x7f67d559de59 [ 1588.125973][T31509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.125982][T31509] RSP: 002b:00007f67d64a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.125993][T31509] RAX: ffffffffffffffda RBX: 00007f67d5825fa0 RCX: 00007f67d559de59 [ 1588.126001][T31509] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1588.126007][T31509] RBP: 00007f67d64a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.126014][T31509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.126020][T31509] R13: 00007f67d5826038 R14: 00007f67d5825fa0 R15: 00007f67d594fa48 [ 1588.126035][T31509] [ 1588.346175][T31507] syz.6.8627 (31507): drop_caches: 3 [ 1588.559463][T31512] FAULT_INJECTION: forcing a failure. [ 1588.559463][T31512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.580837][T31513] tipc: Enabled bearer , priority 0 [ 1588.587702][T31512] CPU: 1 UID: 0 PID: 31512 Comm: syz.1.8632 Tainted: G L syzkaller #0 PREEMPT(full) [ 1588.587724][T31512] Tainted: [L]=SOFTLOCKUP [ 1588.587728][T31512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1588.587734][T31512] Call Trace: [ 1588.587740][T31512] [ 1588.587745][T31512] dump_stack_lvl+0xe8/0x150 [ 1588.587766][T31512] should_fail_ex+0x40c/0x560 [ 1588.587782][T31512] _copy_from_user+0x2d/0xb0 [ 1588.587798][T31512] ___sys_sendmsg+0x1c6/0x360 [ 1588.587815][T31512] ? __lock_acquire+0x683/0x2cf0 [ 1588.587831][T31512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.587863][T31512] ? __fget_files+0x2a/0x420 [ 1588.587877][T31512] ? __fget_files+0x3a2/0x420 [ 1588.587894][T31512] __x64_sys_sendmsg+0x1b1/0x290 [ 1588.587912][T31512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1588.587936][T31512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.587947][T31512] do_syscall_64+0x174/0x580 [ 1588.587963][T31512] ? trace_irq_disable+0x3b/0x140 [ 1588.587976][T31512] ? clear_bhb_loop+0x40/0x90 [ 1588.587991][T31512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.588010][T31512] RIP: 0033:0x7f67d559de59 [ 1588.588027][T31512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.588036][T31512] RSP: 002b:00007f67d64a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.588048][T31512] RAX: ffffffffffffffda RBX: 00007f67d5825fa0 RCX: 00007f67d559de59 [ 1588.588056][T31512] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1588.588063][T31512] RBP: 00007f67d64a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.588069][T31512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.588075][T31512] R13: 00007f67d5826038 R14: 00007f67d5825fa0 R15: 00007f67d594fa48 [ 1588.588093][T31512] [ 1588.803014][T31513] syzkaller0: entered promiscuous mode [ 1588.808664][T31513] syzkaller0: entered allmulticast mode [ 1588.817237][T31513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1588.868490][T31511] tipc: Resetting bearer [ 1588.902267][T31511] tipc: Disabling bearer [ 1589.056062][T31515] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1589.258453][T31523] tipc: Enabling of bearer rejected, failed to enable media [ 1589.267024][T31524] tipc: Enabling of bearer rejected, failed to enable media [ 1589.282720][T31522] syzkaller0: entered promiscuous mode [ 1589.309392][T31522] syzkaller0: entered allmulticast mode [ 1589.761398][T31541] FAULT_INJECTION: forcing a failure. [ 1589.761398][T31541] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.775539][T31539] tipc: Enabled bearer , priority 0 [ 1589.795846][T31539] syzkaller0: entered promiscuous mode [ 1589.810515][T31541] CPU: 0 UID: 0 PID: 31541 Comm: syz.6.8643 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.810545][T31541] Tainted: [L]=SOFTLOCKUP [ 1589.810551][T31541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1589.810563][T31541] Call Trace: [ 1589.810571][T31541] [ 1589.810579][T31541] dump_stack_lvl+0xe8/0x150 [ 1589.810612][T31541] should_fail_ex+0x40c/0x560 [ 1589.810642][T31541] should_failslab+0xa8/0x100 [ 1589.810671][T31541] __kmalloc_noprof+0xfe/0x720 [ 1589.810694][T31541] ? rcu_is_watching+0x15/0xb0 [ 1589.810721][T31541] ? tomoyo_realpath_from_path+0xef/0x640 [ 1589.810740][T31541] ? tomoyo_realpath_from_path+0xef/0x640 [ 1589.810767][T31541] tomoyo_realpath_from_path+0xef/0x640 [ 1589.810797][T31541] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1589.810825][T31541] tomoyo_path_number_perm+0x246/0x5f0 [ 1589.810855][T31541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1589.810881][T31541] ? __lock_acquire+0x683/0x2cf0 [ 1589.810920][T31541] ? hook_file_ioctl+0x1f0/0x5f0 [ 1589.810967][T31541] ? __fget_files+0x2a/0x420 [ 1589.810995][T31541] ? __fget_files+0x2a/0x420 [ 1589.811018][T31541] ? __fget_files+0x3a2/0x420 [ 1589.811041][T31541] ? __fget_files+0x2a/0x420 [ 1589.811068][T31541] security_file_ioctl+0xc3/0x2a0 [ 1589.811097][T31541] __se_sys_ioctl+0x47/0x170 [ 1589.811116][T31541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.811136][T31541] do_syscall_64+0x174/0x580 [ 1589.811162][T31541] ? trace_irq_disable+0x3b/0x140 [ 1589.811186][T31541] ? clear_bhb_loop+0x40/0x90 [ 1589.811209][T31541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.811228][T31541] RIP: 0033:0x7ff4d679de59 [ 1589.811246][T31541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.811263][T31541] RSP: 002b:00007ff4d7589028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.811283][T31541] RAX: ffffffffffffffda RBX: 00007ff4d6a25fa0 RCX: 00007ff4d679de59 [ 1589.811298][T31541] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1589.811310][T31541] RBP: 00007ff4d7589090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.811323][T31541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.811334][T31541] R13: 00007ff4d6a26038 R14: 00007ff4d6a25fa0 R15: 00007ff4d6b4fa48 [ 1589.811364][T31541] [ 1589.811407][T31541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1589.868817][T31539] syzkaller0: entered allmulticast mode [ 1589.930924][T31545] kAFS: unable to lookup cell '(,' [ 1590.149143][T31552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8648'. [ 1590.196641][T31552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8648'. [ 1590.196653][T31542] tipc: Resetting bearer [ 1590.233973][T31542] tipc: Resetting bearer [ 1590.262710][T31546] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1590.393590][T31538] tipc: Resetting bearer [ 1590.454950][T31538] tipc: Disabling bearer [ 1590.470899][T31562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8651'. [ 1590.484473][T31562] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8651'. [ 1590.910052][T31578] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8657'. [ 1590.989273][T31582] kAFS: unable to lookup cell '(,' [ 1591.039805][T31566] syz.1.8652 (31566): drop_caches: 3 [ 1591.334452][T31590] FAULT_INJECTION: forcing a failure. [ 1591.334452][T31590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.377261][T31590] CPU: 1 UID: 0 PID: 31590 Comm: syz.8.8661 Tainted: G L syzkaller #0 PREEMPT(full) [ 1591.377294][T31590] Tainted: [L]=SOFTLOCKUP [ 1591.377301][T31590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1591.377313][T31590] Call Trace: [ 1591.377327][T31590] [ 1591.377336][T31590] dump_stack_lvl+0xe8/0x150 [ 1591.377369][T31590] should_fail_ex+0x40c/0x560 [ 1591.377396][T31590] _copy_from_user+0x2d/0xb0 [ 1591.377423][T31590] ___sys_sendmsg+0x1c6/0x360 [ 1591.377452][T31590] ? __lock_acquire+0x683/0x2cf0 [ 1591.377479][T31590] ? __pfx____sys_sendmsg+0x10/0x10 [ 1591.377536][T31590] ? __fget_files+0x2a/0x420 [ 1591.377556][T31590] ? __fget_files+0x3a2/0x420 [ 1591.377587][T31590] __x64_sys_sendmsg+0x1b1/0x290 [ 1591.377618][T31590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1591.377663][T31590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.377682][T31590] do_syscall_64+0x174/0x580 [ 1591.377706][T31590] ? trace_irq_disable+0x3b/0x140 [ 1591.377728][T31590] ? clear_bhb_loop+0x40/0x90 [ 1591.377751][T31590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.377770][T31590] RIP: 0033:0x7f3c1db9de59 [ 1591.377789][T31590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.377806][T31590] RSP: 002b:00007f3c1e9b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.377825][T31590] RAX: ffffffffffffffda RBX: 00007f3c1de25fa0 RCX: 00007f3c1db9de59 [ 1591.377839][T31590] RDX: 000000001400c0c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1591.377852][T31590] RBP: 00007f3c1e9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.377863][T31590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.377874][T31590] R13: 00007f3c1de26038 R14: 00007f3c1de25fa0 R15: 00007f3c1df4fa48 [ 1591.377903][T31590] [ 1592.187045][T31623] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1592.386887][T31631] kAFS: unable to lookup cell '(,' [ 1592.669151][T31628] syz.9.8668 (31628): drop_caches: 3 [ 1592.765349][T31641] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8675'. [ 1592.807875][T31643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8676'. [ 1592.865415][T31646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8676'. [ 1593.064331][T31652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8678'. [ 1593.330546][T15938] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1593.503121][T15938] usb 6-1: Using ep0 maxpacket: 16 [ 1593.519677][T15938] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1593.548738][T15938] usb 6-1: config 251 has no interface number 0 [ 1593.600943][T15938] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1593.728347][ T29] audit: type=1326 audit(1784162580.054:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1593.759169][T15938] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1593.864285][T15938] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1594.013489][ T29] audit: type=1326 audit(1784162580.054:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.087638][T15938] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1594.133370][ T29] audit: type=1326 audit(1784162580.064:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.174534][T15938] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1594.224541][T15938] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 56 [ 1594.236646][ T29] audit: type=1326 audit(1784162580.064:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.274342][T15938] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1594.306499][T15938] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1594.319669][ T29] audit: type=1326 audit(1784162580.064:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.362447][T15938] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1594.393091][T15938] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1594.419054][ T29] audit: type=1326 audit(1784162580.074:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.445403][T15938] usb 6-1: Product: syz [ 1594.455167][T15938] usb 6-1: SerialNumber: syz [ 1594.470749][T31654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1594.479450][ T29] audit: type=1326 audit(1784162580.134:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.508642][ T29] audit: type=1326 audit(1784162580.134:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.541943][ T29] audit: type=1326 audit(1784162580.154:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.712974][ T29] audit: type=1326 audit(1784162580.154:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31657 comm="syz.1.8680" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d559de59 code=0x7ffc0000 [ 1594.755554][T15938] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1594.779577][T15938] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1594.859038][T15938] usb 6-1: USB disconnect, device number 93 [ 1595.191921][T31705] bridge0: port 1(vlan2) entered blocking state [ 1595.205925][T31705] bridge0: port 1(vlan2) entered disabled state [ 1595.222340][T31705] vlan2: entered allmulticast mode [ 1595.249394][T31705] geneve0: entered allmulticast mode [ 1595.277515][T31705] vlan2: entered promiscuous mode [ 1595.317969][T31705] geneve0: entered promiscuous mode [ 1595.443685][T31705] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8687'. [ 1595.772841][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8690'. [ 1596.024689][T31725] FAULT_INJECTION: forcing a failure. [ 1596.024689][T31725] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.051394][T15938] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1596.073758][T31725] CPU: 0 UID: 0 PID: 31725 Comm: syz.8.8694 Tainted: G L syzkaller #0 PREEMPT(full) [ 1596.073787][T31725] Tainted: [L]=SOFTLOCKUP [ 1596.073795][T31725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1596.073806][T31725] Call Trace: [ 1596.073814][T31725] [ 1596.073822][T31725] dump_stack_lvl+0xe8/0x150 [ 1596.073856][T31725] should_fail_ex+0x40c/0x560 [ 1596.073882][T31725] should_failslab+0xa8/0x100 [ 1596.073911][T31725] __kmalloc_cache_noprof+0xa8/0x660 [ 1596.073935][T31725] ? __kmalloc_cache_noprof+0x150/0x660 [ 1596.073957][T31725] ? ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1596.073977][T31725] ? ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1596.074003][T31725] ovs_ct_limit_cmd_set+0x2f8/0xb00 [ 1596.074036][T31725] genl_family_rcv_msg_doit+0x233/0x340 [ 1596.074066][T31725] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1596.074099][T31725] ? bpf_lsm_capable+0x9/0x20 [ 1596.074122][T31725] ? security_capable+0x7e/0x2c0 [ 1596.074163][T31725] genl_rcv_msg+0x614/0x7a0 [ 1596.074194][T31725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1596.074216][T31725] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1596.074238][T31725] ? __pfx_ref_tracker_free+0x10/0x10 [ 1596.074261][T31725] ? __asan_memcpy+0x40/0x70 [ 1596.074281][T31725] ? __skb_clone+0x5c/0x6c0 [ 1596.074306][T31725] netlink_rcv_skb+0x226/0x4a0 [ 1596.074337][T31725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1596.074361][T31725] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1596.074397][T31725] ? down_read+0x2be/0x330 [ 1596.074419][T31725] genl_rcv+0x28/0x40 [ 1596.074441][T31725] netlink_unicast+0x7bb/0x940 [ 1596.074474][T31725] netlink_sendmsg+0x813/0xb40 [ 1596.074503][T31725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.074525][T31725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1596.074550][T31725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1596.074569][T31725] sock_sendmsg_nosec+0x13a/0x180 [ 1596.074595][T31725] ____sys_sendmsg+0x54e/0x850 [ 1596.074626][T31725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1596.074662][T31725] ? import_iovec+0x73/0xa0 [ 1596.074693][T31725] ___sys_sendmsg+0x2a5/0x360 [ 1596.074729][T31725] ? __lock_acquire+0x683/0x2cf0 [ 1596.074757][T31725] ? __pfx____sys_sendmsg+0x10/0x10 [ 1596.074815][T31725] ? __fget_files+0x2a/0x420 [ 1596.074836][T31725] ? __fget_files+0x3a2/0x420 [ 1596.074866][T31725] __x64_sys_sendmsg+0x1b1/0x290 [ 1596.074896][T31725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1596.074937][T31725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.074955][T31725] do_syscall_64+0x174/0x580 [ 1596.074979][T31725] ? trace_irq_disable+0x3b/0x140 [ 1596.075000][T31725] ? clear_bhb_loop+0x40/0x90 [ 1596.075021][T31725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.075039][T31725] RIP: 0033:0x7f3c1db9de59 [ 1596.075056][T31725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.075088][T31725] RSP: 002b:00007f3c1e9b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1596.075108][T31725] RAX: ffffffffffffffda RBX: 00007f3c1de25fa0 RCX: 00007f3c1db9de59 [ 1596.075122][T31725] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1596.075134][T31725] RBP: 00007f3c1e9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.075145][T31725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.075157][T31725] R13: 00007f3c1de26038 R14: 00007f3c1de25fa0 R15: 00007f3c1df4fa48 [ 1596.075185][T31725] [ 1596.540863][T31720] IPv6: Can't replace route, no match found [ 1596.597902][T31730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8696'. [ 1596.623516][T15938] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1596.634851][T15938] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1596.654097][T15938] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1596.688051][T15938] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1596.733195][T15938] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1596.765042][T15938] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1596.782052][T15938] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1596.792412][T15938] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1596.810843][T15938] usb 10-1: Product: syz [ 1596.820687][T15938] usb 10-1: Manufacturer: syz [ 1596.842652][T31717] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1596.870324][T15938] cdc_wdm 10-1:1.0: skipping garbage [ 1596.890819][T15938] cdc_wdm 10-1:1.0: skipping garbage [ 1596.905280][T15938] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1596.912440][T15938] cdc_wdm 10-1:1.0: Unknown control protocol [ 1596.940457][T12133] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1597.066218][ C0] wdm_int_callback: 1176 callbacks suppressed [ 1597.066247][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.079037][ C0] wdm_int_callback: 1176 callbacks suppressed [ 1597.079063][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.091979][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.098727][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.105846][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.112557][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.119300][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.126014][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.132660][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.139457][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.146073][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.152778][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.159356][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.166158][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.172695][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.179409][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.185794][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.192517][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.199459][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1597.206178][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1597.250526][T30243] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1597.281298][T12133] usb 2-1: Using ep0 maxpacket: 16 [ 1597.289619][T12133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.303301][T12133] usb 2-1: config 0 has no interfaces? [ 1597.313602][T12133] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1597.339161][T12133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.370158][T12133] usb 2-1: Product: syz [ 1597.383080][T12133] usb 2-1: Manufacturer: syz [ 1597.408330][T12133] usb 2-1: SerialNumber: syz [ 1597.420489][T30243] usb 6-1: Using ep0 maxpacket: 16 [ 1597.460273][T30243] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1597.470506][T12133] usb 2-1: config 0 descriptor?? [ 1597.492282][T30243] usb 6-1: config 251 has no interface number 0 [ 1597.493211][T15938] usb 10-1: USB disconnect, device number 70 [ 1597.504753][T30243] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1597.532764][T30243] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1597.572327][T30243] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1597.612220][T30243] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1597.641551][T30243] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1597.680849][T30243] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 56 [ 1597.716772][T30243] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1597.777887][T30243] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1597.787737][T30243] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1597.797201][T30243] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1597.821709][T30243] usb 6-1: Product: syz [ 1597.831713][T30243] usb 6-1: SerialNumber: syz [ 1597.862792][T31738] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1598.091138][T30243] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1598.112726][T30243] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1598.159382][T30243] usb 6-1: USB disconnect, device number 94 [ 1598.950158][T31783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8713'. [ 1599.297892][T31791] syz.8.8714 (31791): drop_caches: 3 [ 1599.755485][T15938] usb 2-1: USB disconnect, device number 102 [ 1599.790556][T30243] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1600.008465][T30243] usb 6-1: descriptor type invalid, skip [ 1600.028829][T30243] usb 6-1: descriptor type invalid, skip [ 1600.036611][T30243] usb 6-1: not running at top speed; connect to a high speed hub [ 1600.057359][T30243] usb 6-1: config 1 has an invalid descriptor of length 165, skipping remainder of the config [ 1600.069447][T30243] usb 6-1: too many endpoints for config 1 interface 0 altsetting 58: 242, using maximum allowed: 30 [ 1600.083087][T30243] usb 6-1: config 1 interface 0 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 1600.130214][T30243] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1600.166296][T30243] usb 6-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 1600.182497][T30243] usb 6-1: New USB device strings: Mfr=222, Product=2, SerialNumber=3 [ 1600.194502][T30243] usb 6-1: Product: syz [ 1600.200243][T30243] usb 6-1: Manufacturer: syz [ 1600.205480][T30243] usb 6-1: SerialNumber: syz [ 1600.260564][T15938] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1600.441410][T15938] usb 2-1: Using ep0 maxpacket: 8 [ 1600.474865][T15938] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 1600.537442][T15938] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1600.593884][T15938] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1600.650959][T15938] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1600.691629][T15938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1600.759710][T15938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.794086][T15938] usb 2-1: Product: 惀琞슯穅阐㉝邍᝴澅 ꤕ鴁蝰㜇⯾搻巯⼽薘⛓뤋讓㮩ꛑᐯ꜠╲ﾐ쐈엒膽Ꜷ빀 [ 1600.852894][T15938] usb 2-1: Manufacturer: ⊽蝈㝴蟦Ն⛗륎¼ࠨӐ䴭Ậ区臲芓㗄㟐田䣤먷䩪℣셹Ѕ樁这箼⁌⏈勁ᑦꜮ聮峦⯞蚑Ⓜ됫⦧ᑶ奎톝螌氜 [ 1600.907786][T15938] usb 2-1: SerialNumber: syz [ 1600.933804][T31804] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1600.966801][T31804] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1600.984881][T12133] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1601.190839][T12133] usb 9-1: Using ep0 maxpacket: 16 [ 1601.204792][T12133] usb 9-1: config 251 has an invalid interface number: 202 but max is 0 [ 1601.241224][T12133] usb 9-1: config 251 has no interface number 0 [ 1601.266357][T12133] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1601.334938][T12133] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1601.372896][T12133] usb 9-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1601.403056][T12133] usb 9-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1601.439297][T31804] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1601.455388][T12133] usb 9-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1601.497221][T12133] usb 9-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 56 [ 1601.518691][T31824] netlink: 'syz.6.8723': attribute type 4 has an invalid length. [ 1601.547826][T12133] usb 9-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1601.605940][T12133] usb 9-1: config 251 interface 202 has no altsetting 0 [ 1601.609673][T15938] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1601.656269][T12133] usb 9-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1601.677027][T12133] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1601.696352][T12133] usb 9-1: Product: syz [ 1601.724808][T12133] usb 9-1: SerialNumber: syz [ 1601.747112][T31816] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1601.806854][T15938] usb 2-1: USB disconnect, device number 103 [ 1601.991976][T12133] cxacru_cm: 36 callbacks suppressed [ 1601.991993][T12133] cxacru 9-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 1602.058356][T12133] cxacru 9-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1602.066325][T31437] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1602.098554][T12133] cxacru 9-1:251.202: probe with driver cxacru failed with error -22 [ 1602.151762][T15938] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1602.178478][T12133] usb 9-1: USB disconnect, device number 112 [ 1602.232641][T31437] usb 10-1: Using ep0 maxpacket: 16 [ 1602.242247][T31437] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.260273][T30243] usb 6-1: selecting invalid altsetting 0 [ 1602.279060][T31437] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.290884][T30243] usb 6-1: can't set first interface for hiFace device. [ 1602.310484][T30243] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1602.336084][T15938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1602.346888][T31437] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1602.352725][T15938] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.373440][T15938] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1602.387853][T15938] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1602.400003][T15938] usb 2-1: config 66 interface 0 has no altsetting 0 [ 1602.400055][T30243] usb 6-1: USB disconnect, device number 95 [ 1602.415333][T31437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.436353][T31437] usb 10-1: Product: syz [ 1602.450748][T31437] usb 10-1: Manufacturer: syz [ 1602.459803][T15938] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1602.471519][T31437] usb 10-1: SerialNumber: syz [ 1602.487518][T15938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.500118][T31437] usb 10-1: config 0 descriptor?? [ 1602.506240][T15938] usb 2-1: Product: syz [ 1602.521629][T15938] usb 2-1: Manufacturer: syz [ 1602.528058][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8725'. [ 1602.537314][T15938] usb 2-1: SerialNumber: syz [ 1602.839249][T15938] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1602.846374][T15938] usb 2-1: USB disconnect, device number 104 [ 1602.976498][T31840] fuse: Unknown parameter 'gRoup_id' [ 1602.977718][T31842] fuse: Unknown parameter 'gRoup_id' [ 1603.290556][T31437] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 1603.460467][T31437] usb 9-1: Using ep0 maxpacket: 16 [ 1603.478700][T31437] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1603.491661][T31437] usb 9-1: config 0 has no interface number 0 [ 1603.501552][T31437] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1603.538970][T31437] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1603.551747][T31848] syzkaller0: entered promiscuous mode [ 1603.563617][T31437] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1603.572259][T31848] syzkaller0: entered allmulticast mode [ 1603.590491][T31437] usb 9-1: Product: syz [ 1603.606950][T31437] usb 9-1: SerialNumber: syz [ 1603.645599][T31437] usb 9-1: config 0 descriptor?? [ 1603.664385][T31437] cm109 9-1:0.8: invalid payload size 8, expected 4 [ 1603.685138][T31437] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input225 [ 1604.019120][T31852] syz.1.8731 (31852): drop_caches: 3 [ 1604.103459][ C0] cm109 9-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1604.103668][T15938] usb 9-1: USB disconnect, device number 113 [ 1604.110484][ C0] ------------[ cut here ]------------ [ 1604.110500][ C0] URB ffff8880497cfe00 submitted while active [ 1604.110523][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: syz.1.8731/31851 [ 1604.110570][ C0] Modules linked in: [ 1604.110672][ C0] CPU: 0 UID: 0 PID: 31851 Comm: syz.1.8731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1604.153132][ C0] Tainted: [L]=SOFTLOCKUP [ 1604.157452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1604.167531][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1604.173000][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 49 50 d3 fa 49 83 3e 00 74 40 e8 fe c4 65 fa 48 8d 3d d7 c3 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 e3 c4 65 fa eb 05 e8 dc c4 [ 1604.192656][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010083 [ 1604.198733][ C0] RAX: ffffffff8760ac82 RBX: ffff8880497cfe00 RCX: 0000000000040000 [ 1604.206718][ C0] RDX: ffffc90002081000 RSI: ffff8880497cfe00 RDI: ffffffff90657060 [ 1604.214706][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1604.222684][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: ffff888034d03048 [ 1604.230659][ C0] R13: ffff888034d03030 R14: ffff8880497cfe08 R15: 0000000000000820 [ 1604.238632][ C0] FS: 00007f67d64826c0(0000) GS:ffff888124f56000(0000) knlGS:0000000000000000 [ 1604.247559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1604.254146][ C0] CR2: 0000200000198030 CR3: 00000000796f0000 CR4: 00000000003526f0 [ 1604.262127][ C0] Call Trace: [ 1604.265406][ C0] [ 1604.268246][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1604.274063][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 1604.279456][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 1604.284827][ C0] dummy_timer+0xac3/0x4b40 [ 1604.289335][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1604.294284][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1604.299237][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1604.304613][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1604.309557][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1604.315365][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1604.320301][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1604.325511][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1604.330637][ C0] handle_softirqs+0x225/0x840 [ 1604.335434][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1604.340222][ C0] __irq_exit_rcu+0xca/0x220 [ 1604.344820][ C0] irq_exit_rcu+0x9/0x30 [ 1604.349062][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1604.354699][ C0] [ 1604.357624][ C0] [ 1604.360551][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1604.366529][ C0] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 1604.373303][ C0] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c [ 1604.392908][ C0] RSP: 0018:ffffc9000da2f120 EFLAGS: 00000246 [ 1604.398973][ C0] RAX: ffffffff81ba5317 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1604.406947][ C0] RDX: ffffc90021b0c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1604.414913][ C0] RBP: ffffc9000da2f250 R08: ffffffff905781f7 R09: 1ffffffff20af03e [ 1604.422884][ C0] R10: dffffc0000000000 R11: fffffbfff20af03f R12: 1ffff110170e81d1 [ 1604.430851][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 1604.438826][ C0] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 1604.444997][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1604.450248][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1604.455631][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1604.461962][ C0] ? rcu_is_watching+0x15/0xb0 [ 1604.466733][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1604.472113][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1604.477307][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1604.482426][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 1604.487543][ C0] ? page_table_check_clear+0x49d/0x500 [ 1604.493095][ C0] ptep_clear_flush+0x120/0x170 [ 1604.497948][ C0] do_wp_page+0x3d52/0x4c70 [ 1604.502451][ C0] ? do_wp_page+0x375f/0x4c70 [ 1604.507132][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1604.511972][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1604.516998][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1604.522408][ C0] handle_mm_fault+0x1490/0x3080 [ 1604.527382][ C0] ? handle_mm_fault+0xec/0x3080 [ 1604.532340][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1604.537650][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 1604.542971][ C0] do_user_addr_fault+0x744/0x1340 [ 1604.548108][ C0] exc_page_fault+0x6a/0xc0 [ 1604.552631][ C0] asm_exc_page_fault+0x26/0x30 [ 1604.557491][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 1604.563224][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 92 03 00 90 90 90 90 90 90 90 90 90 90 [ 1604.582845][ C0] RSP: 0018:ffffc9000da2f8d8 EFLAGS: 00050202 [ 1604.588935][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000198030 [ 1604.596927][ C0] RDX: ffff8880270e1f00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1604.604912][ C0] RBP: ffffc9000da2fa50 R08: ffffc9000da2f6a7 R09: 1ffff92001b45ed4 [ 1604.612900][ C0] R10: dffffc0000000000 R11: fffff52001b45ed5 R12: 1ffff92001b45f28 [ 1604.620890][ C0] R13: 0000000000000002 R14: 0000200000198000 R15: dffffc0000000000 [ 1604.628900][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 1604.633700][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1604.639014][ C0] ? import_iovec+0x73/0xa0 [ 1604.643549][ C0] ___sys_recvmsg+0x213/0x5a0 [ 1604.648240][ C0] ? __pfx___schedule+0x10/0x10 [ 1604.653111][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1604.658328][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1604.663548][ C0] ? irqentry_exit+0x218/0x8f0 [ 1604.668389][ C0] do_recvmmsg+0x31a/0x7f0 [ 1604.672815][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1604.677751][ C0] ? hook_file_ioctl+0x1f0/0x5f0 [ 1604.682705][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1604.687738][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1604.692766][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1604.698317][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.704469][ C0] do_syscall_64+0x174/0x580 [ 1604.709070][ C0] ? trace_irq_disable+0x3b/0x140 [ 1604.714108][ C0] ? clear_bhb_loop+0x40/0x90 [ 1604.718801][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.724709][ C0] RIP: 0033:0x7f67d559de59 [ 1604.729132][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.748774][ C0] RSP: 002b:00007f67d6482028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1604.757218][ C0] RAX: ffffffffffffffda RBX: 00007f67d5826090 RCX: 00007f67d559de59 [ 1604.765204][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1604.773200][ C0] RBP: 00007f67d5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1604.781180][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1604.789154][ C0] R13: 00007f67d5826128 R14: 00007f67d5826090 R15: 00007f67d594fa48 [ 1604.797152][ C0] [ 1604.800194][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1604.807476][ C0] CPU: 0 UID: 0 PID: 31851 Comm: syz.1.8731 Tainted: G L syzkaller #0 PREEMPT(full) [ 1604.818453][ C0] Tainted: [L]=SOFTLOCKUP [ 1604.822796][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1604.832863][ C0] Call Trace: [ 1604.836151][ C0] [ 1604.838990][ C0] vpanic+0x56c/0xa60 [ 1604.842981][ C0] ? __pfx__printk+0x10/0x10 [ 1604.847569][ C0] ? __pfx_vpanic+0x10/0x10 [ 1604.852089][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1604.857399][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1604.862620][ C0] panic+0xc5/0xd0 [ 1604.866364][ C0] ? __pfx_panic+0x10/0x10 [ 1604.870813][ C0] __warn+0x315/0x4c0 [ 1604.874800][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1604.879657][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1604.884510][ C0] __report_bug+0x331/0x530 [ 1604.889022][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1604.893883][ C0] ? __pfx___report_bug+0x10/0x10 [ 1604.898938][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1604.903892][ C0] report_bug_entry+0x19a/0x290 [ 1604.908754][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 1604.913602][ C0] ? usb_submit_urb+0x81/0x18b0 [ 1604.918446][ C0] handle_bug+0xce/0x200 [ 1604.922683][ C0] exc_invalid_op+0x1a/0x50 [ 1604.927180][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1604.932022][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1604.937478][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 49 50 d3 fa 49 83 3e 00 74 40 e8 fe c4 65 fa 48 8d 3d d7 c3 04 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 e3 c4 65 fa eb 05 e8 dc c4 [ 1604.957087][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010083 [ 1604.963170][ C0] RAX: ffffffff8760ac82 RBX: ffff8880497cfe00 RCX: 0000000000040000 [ 1604.971160][ C0] RDX: ffffc90002081000 RSI: ffff8880497cfe00 RDI: ffffffff90657060 [ 1604.979151][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1604.987119][ C0] R10: dffffc0000000000 R11: fffff52000000f40 R12: ffff888034d03048 [ 1604.995086][ C0] R13: ffff888034d03030 R14: ffff8880497cfe08 R15: 0000000000000820 [ 1605.003061][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1605.007919][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1605.012767][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1605.018583][ C0] cm109_urb_irq_callback+0x6fb/0xca0 [ 1605.023956][ C0] __usb_hcd_giveback_urb+0x374/0x530 [ 1605.029324][ C0] dummy_timer+0xac3/0x4b40 [ 1605.033828][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1605.038770][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1605.043714][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1605.049093][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1605.054039][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1605.059844][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1605.064773][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1605.069986][ C0] hrtimer_run_softirq+0x17a/0x240 [ 1605.075529][ C0] handle_softirqs+0x225/0x840 [ 1605.080288][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1605.085049][ C0] __irq_exit_rcu+0xca/0x220 [ 1605.089631][ C0] irq_exit_rcu+0x9/0x30 [ 1605.093864][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1605.099494][ C0] [ 1605.102414][ C0] [ 1605.105332][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1605.111305][ C0] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 1605.118075][ C0] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1e 0c [ 1605.137677][ C0] RSP: 0018:ffffc9000da2f120 EFLAGS: 00000246 [ 1605.143745][ C0] RAX: ffffffff81ba5317 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1605.151708][ C0] RDX: ffffc90021b0c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1605.159668][ C0] RBP: ffffc9000da2f250 R08: ffffffff905781f7 R09: 1ffffffff20af03e [ 1605.167630][ C0] R10: dffffc0000000000 R11: fffffbfff20af03f R12: 1ffff110170e81d1 [ 1605.175601][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 1605.183569][ C0] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 1605.190165][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1605.195363][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1605.200735][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1605.207062][ C0] ? rcu_is_watching+0x15/0xb0 [ 1605.211823][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1605.217194][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1605.222387][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1605.227499][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 1605.232611][ C0] ? page_table_check_clear+0x49d/0x500 [ 1605.238154][ C0] ptep_clear_flush+0x120/0x170 [ 1605.243001][ C0] do_wp_page+0x3d52/0x4c70 [ 1605.247497][ C0] ? do_wp_page+0x375f/0x4c70 [ 1605.252169][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1605.257023][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1605.262046][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1605.267419][ C0] handle_mm_fault+0x1490/0x3080 [ 1605.272359][ C0] ? handle_mm_fault+0xec/0x3080 [ 1605.277293][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1605.282587][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 1605.287873][ C0] do_user_addr_fault+0x744/0x1340 [ 1605.292994][ C0] exc_page_fault+0x6a/0xc0 [ 1605.297500][ C0] asm_exc_page_fault+0x26/0x30 [ 1605.302345][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x20 [ 1605.308063][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 11 92 03 00 90 90 90 90 90 90 90 90 90 90 [ 1605.327658][ C0] RSP: 0018:ffffc9000da2f8d8 EFLAGS: 00050202 [ 1605.333721][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000198030 [ 1605.341682][ C0] RDX: ffff8880270e1f00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1605.349645][ C0] RBP: ffffc9000da2fa50 R08: ffffc9000da2f6a7 R09: 1ffff92001b45ed4 [ 1605.357619][ C0] R10: dffffc0000000000 R11: fffff52001b45ed5 R12: 1ffff92001b45f28 [ 1605.365596][ C0] R13: 0000000000000002 R14: 0000200000198000 R15: dffffc0000000000 [ 1605.373592][ C0] ____sys_recvmsg+0x2be/0x4a0 [ 1605.378374][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1605.383663][ C0] ? import_iovec+0x73/0xa0 [ 1605.388170][ C0] ___sys_recvmsg+0x213/0x5a0 [ 1605.392837][ C0] ? __pfx___schedule+0x10/0x10 [ 1605.397779][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1605.403090][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1605.408304][ C0] ? irqentry_exit+0x218/0x8f0 [ 1605.413088][ C0] do_recvmmsg+0x31a/0x7f0 [ 1605.417505][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1605.422432][ C0] ? hook_file_ioctl+0x1f0/0x5f0 [ 1605.427412][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1605.432439][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1605.437463][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1605.443015][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.449077][ C0] do_syscall_64+0x174/0x580 [ 1605.453760][ C0] ? trace_irq_disable+0x3b/0x140 [ 1605.458781][ C0] ? clear_bhb_loop+0x40/0x90 [ 1605.463454][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.469338][ C0] RIP: 0033:0x7f67d559de59 [ 1605.473750][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.493346][ C0] RSP: 002b:00007f67d6482028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1605.501754][ C0] RAX: ffffffffffffffda RBX: 00007f67d5826090 RCX: 00007f67d559de59 [ 1605.509720][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1605.517689][ C0] RBP: 00007f67d5633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1605.525653][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1605.533615][ C0] R13: 00007f67d5826128 R14: 00007f67d5826090 R15: 00007f67d594fa48 [ 1605.541597][ C0] [ 1605.544761][ C0] Kernel Offset: disabled [ 1605.549141][ C0] Rebooting in 86400 seconds..