last executing test programs: 29m30.503199709s ago: executing program 1 (id=780): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) unshare(0x2040400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 29m29.734567639s ago: executing program 1 (id=783): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) msgsnd(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="010000008d0d000040352074391be3a54d343d15079bccac06cbf9f255b21579a4e505585daf01af98dc30438ab7144af359aab2c44c6d92b458ca862df6204097ea264c78ad5a01b0b1b7bf09d6b124353fa86e31083f5d9087978b4b7504665ba2da3913d7f831f3f48c51e64f8073e330c5ccf075082f26d9a351d3b3254b05b03dda78abb21de040734af919c0f4b85cfeae1a633176e6f49bb8921e4ba270270e4f7d8b3b3f370600000000000000c4d2a85cfbcbdfef0fc90d3cc02875e760e730d7b8e1295a2e4bf791"], 0x2000, 0x0) 29m29.598269992s ago: executing program 1 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x200000000000000, 0x0, 0x40448e0}, 0x4000) 29m29.376942668s ago: executing program 1 (id=787): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x2000, 0x0, 0x0, 0x0) 29m27.623730489s ago: executing program 1 (id=791): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0081, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)="b04a235406ac", 0x6}], 0x2, 0x8, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 29m26.311466559s ago: executing program 1 (id=798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340), &(0x7f0000000280)) (async) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 29m11.225538675s ago: executing program 32 (id=798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340), &(0x7f0000000280)) (async) r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 24m29.641805297s ago: executing program 2 (id=1987): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 24m28.298965056s ago: executing program 2 (id=1991): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="b67cbbec5102eb1971bff5f530e2d88ec21f3fd29f17849707a2e95f59a7ed8ec2ec92c2cf182c3535", @ANYRES64=r5, @ANYRESDEC=r2, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRESOCT=r2, @ANYRES32=r3, @ANYRES16=r4, @ANYRES8=r4, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x3000000000, 0xf}, &(0x7f0000000240)=0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x10004800}, 0xc000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x80000, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000600)="990f01c466b80a0000000f23c00f21f86635030007000f23f8f3a766b9800000c00f326635008000000f30f30f012ff02843040f78e3fc0f68c9", 0x3a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000280)={r7, 0x40}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r12, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 24m26.814750392s ago: executing program 2 (id=2001): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 24m25.641480081s ago: executing program 2 (id=2002): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000002940)='./file0\x00') unshare(0x22020600) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 24m24.728826939s ago: executing program 2 (id=2007): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x6590000, 0x8fb3507], 0x2) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000400)=[{0x2, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000300)=""/128, 0x80}], &(0x7f00000003c0)=[0x7, 0x100000001, 0x9]}], 0x1) syz_open_pts(r4, 0x141601) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x401) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000004c0)=@secondary) add_key$keyring(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x8346, 0x18, 0x0, {}, {0x0, 0xdffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}) 24m21.96418921s ago: executing program 2 (id=2015): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, 'D\xb0\a\x00\xb7\x1a\xfem\x9d\xf4^\xde\"P\xa1\\xAK-\x00\x00', 0x3a, './file0'}, 0x3f) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x40000000, 0x3a, '\xff\xff', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0', 0x3a, [0x1f, 0x43, 0x4f, 0x46, 0x46, 0x4f]}, 0x51) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000180)=0x178, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @remote, 0xcdce}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}, 0xd}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x354e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)="f621a35a2bba7a22cc7309d438aad2df721a0b392e6152e752eb63c000365b8c2a93a3fe1536cd", 0x27}, {&(0x7f0000000340)="a78b40113516583c25ff32f7479207e0ad05eefa658007c49b8bec81df57c1242ca0f430deabf5e0c099b0e4a16ccd25026d82005895a02a6a3949ccff248c548cb47a0a8468563afeac772c6ebdac76f8785503736c1d6d347894963c6ec3676a924ab880ce2cc4258ccd8e5561daa999e21005eb827e57684401667bc053a8ce5a80a63f20f01261130ed542fb00cbc96c197ce48b701a", 0x98}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f00000004c0)="869ca1f280fa92a02847926be96cc1323f9eeadf1e5895e9e9571e437fd58b7c645fb961ea196b78b4d4ea47bc104b489a65918ed85b25412502ddfeed5fc9120b9d03a78ec1cd2d3c6ad5dcba10e40e90fb50fdb3e5f1ca0f001e21f232f09b37f5a381a21b49a51348c7bd2f912005e07078615b479150d46add42ecc9c06c112f392c20f79cc08e139caa4605ee894c1025", 0x93}], 0x4, &(0x7f0000000580)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x11, 0xa, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf7, 0x41cf, [0x4ee, 0x7, 0x87ee, 0x1ad, 0x4, 0x3]}}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xd}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xaefe}}, @rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x4, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xc0e}}, @dontfrag={{0x14, 0x29, 0x3e, 0xca98}}], 0x110}}], 0x2, 0x20000001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) llistxattr(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)=""/16, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x24000080) syz_usb_connect(0x1, 0x6da, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xbd, 0x63, 0xa3, 0x40, 0xccd, 0xb4, 0xdbfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c8, 0x2, 0x1, 0x40, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x6, 0xb, 0xb, 0xb3, 0xff, 0xc, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "098e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffff001, 0x7, 0xb2b, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0xc}, [@mdlm_detail={0x29, 0x24, 0x13, 0x6, "c0c44927c65dfa9aef089ea49d5098a40e490729aab2268d5932cf66c2a9d8c05c99355db1"}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x9}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x91, 0x7, 0x3, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0xb9, "092ed94e8c0b"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0xf74, 0x1, "f7eb52"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x6, 0x2, 0x2, 0xb1, 0x6}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0x74, "c0"}]}], [{{0x9, 0x5, 0xd, 0x10, 0x90, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2d6e}, @generic={0x5c, 0xb, "0ab6cd89c5c506e6c7b7be4fd0d35e2058b3d3cf9d7d75c7a96c0f036d9eb820ad1dcb7251d50bd1487e5a8839d7ef0102d61d55ac07c670bfc1f2723775c53db01367bf41f622b9a1660d4f24a8fedcc1b6d2be03318d806186"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x5, 0x0, 0x7, [@generic={0x43, 0xd, "7524558b8295427f29718537732aabea7e780705508001825886b25dd66309509347586e4acbd613e34216833cc2e78781d69f78deebdae3ea04619b737dafd022"}, @generic={0x52, 0x23, "51508f6a7c1cee33e22344f5405ec31aaf276bb50d027072da4ccabbe32eddad98ae56caaafb3c8364f36b439764e698666274d4757718f21276d7fb0709f08f79cefc292b01894f1a8ec26d9302bf5c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x9, 0x7, 0x200, 0x45, 0x6, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x80, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x8}, @generic={0x21, 0x9, "61f25727ec7ff80eb3ec8755ce6e6c1985b910310110b94d5e315a694fe00b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0x4, 0x6}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7, 0xfa, 0x2, [@generic={0x5, 0x6, "125724"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x40, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xc9b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x7fa6}]}}, {{0x9, 0x5, 0xd5df3a0fe76256b8, 0xc, 0x20, 0x1, 0x2a, 0xf, [@generic={0x30, 0x6, "9a19d6aa999dccbbbeee722b1b275b56adf08aef0db85fd434f1f71b46545340527cf1889c92ad6ff16041f92a66"}]}}, {{0x9, 0x5, 0x89, 0x4, 0x50, 0x2, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @generic={0x76, 0x21, "3c3819b30592814483f560362838a050e96ef015ac97e5d12b07bcbe8ccfa6cd3b53f45c30e41e52545d58e1fa9a7b95e436351f080678286e1bc52d1e10d5cfddbe5c28ebb98048f3ee74b77287d5879d21df067e7d1fdf5597b292cbff6379e11f0fe7f3d89a50772051575afc2358205b3c00"}]}}]}}, {{0x9, 0x4, 0x5c, 0x0, 0x8, 0x2a, 0x7f, 0x75, 0x9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9a2db670"}, {0x5, 0x24, 0x0, 0xbcda}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0xb6a2, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x3}}], [{{0x9, 0x5, 0x5, 0x3, 0x400, 0x6, 0x0, 0x6, [@generic={0x102, 0x62, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x5, 0x7f, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x93, 0x6}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x3, 0x5, 0x5, [@generic={0x7e, 0x10, "0a444f192d5dc2b31d1953a5adcbe6656bc72ce85ed40415ab92dc84ece829cdced65ac3b7b193e3422d2bddc606e67d6370643367c00e1c9cbf8a07ad352a193927f7f26064ae9f11816e4036a33bc93e10487545dc10c97e5e5618eaa74c9dcfae888ce52d0f48c2e1344b92355af3fe57539351c3606e4b2f7ee9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7f, 0x2, 0x0, [@generic={0x19, 0xd, "be9f9a234a3f736fe93f3167650afd40a12992d1c8a733"}, @generic={0xbc, 0x22, "0771eddf2b0dcbaae1684529a40e851054b5f66179440291e67b06ab094667874098c88db990398524e744d2ec0be76b0e39fe34ebcc374b6cb3ab827967ef0fd95f9be710442b48b0c0539ee731b0a4a497b3e67d0bb4639f04d24f10d7afa5a64213b084a25b17467d486f7d59be2dd0d8f77ed4c4f0b782b8fdd9d4aa99e9e9a49f96ded06a7f0f32fda5c8fbeb73f31d2c7c7431df84c6198c8fb53ed7ee69b191aab4ba67520eee0e5d9923ce9a3b833f854cda583d6a88"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x6, 0xfa, 0x2}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x7, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xd8, 0x9, 0xff, [@generic={0xf7, 0x4, "40a2150e6a2f4ac00f0bad31729bdd10773afefd2def1048df7e37fe28ed8fe026d649e7661e180d499a9f23db7ffd0549c1fb0d65c847c8b70a0aa83ba6cefdbe51d470fd6d5c77fa9ec12f64929c021b9c5874d7640530c20c4b8a3f274ef8d86cc658761aaa9e1b511066afc965f92e93daf68667f2a4f5fe3bf0182f1d8668474e381214d4cda0a0f7b79fb52c02c5fd62fd8448d68a7b43b0617c6dbbc7b0940e3e005f66eb73d0186f06f4f7486d7466a3e153612fae680d246dae9f12f79a55ea124c3aefb1eced5e7d6c8a6de8a17ad1afa50ec755dd5a40d79cd3d81970e16f3a2f16be1922e99fccba30a71a8c5ab2c8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xc000}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x201, 0x7, 0x1, 0x9, 0x10, 0xb9}, 0x10, &(0x7f0000000f00)=ANY=[@ANYBLOB="050f1000012510010c0400037f004002"], 0x5, [{0xfc, &(0x7f0000000f40)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xa92857e8eaf86ffb}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x340a}}, {0x84, &(0x7f00000010c0)=@string={0x84, 0x3, "f6483309ea8052dd1407102a6d72846820970e4ccd8795b9b68207a5f113d61e903f23f85c336f9a68240b50d88d377a8efea17ed6f331ff4ce154caeea7959bdf26766921ac6b29968f68759a11715867b953e39beede06891c4c5450e962d8012f3c2947775f1c3b1bc16d7d84ae80f1459ca5a3c7b32697a5e48fbcbff235d7fd"}}, {0x79, &(0x7f0000001180)=@string={0x79, 0x3, "1e0910fe3e018aba0264a678a7a9643d6ae703f2452ee4ebd14c08113b0c66ce54c65eb33be465ab2d3d5bb4e3010292482e8a47fd1d958f134a3768646272c80175bd19167677ae74667ff1ef99c0420055a71a45ad6413604b4d4125e065f7ca4eb41b902f4ad844826b74de892c5c0635b3101910eb"}}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6], 0xfdef) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x202000, 0x102) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) 24m21.223852367s ago: executing program 33 (id=2015): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, 'D\xb0\a\x00\xb7\x1a\xfem\x9d\xf4^\xde\"P\xa1\\xAK-\x00\x00', 0x3a, './file0'}, 0x3f) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x40000000, 0x3a, '\xff\xff', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0', 0x3a, [0x1f, 0x43, 0x4f, 0x46, 0x46, 0x4f]}, 0x51) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000180)=0x178, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @remote, 0xcdce}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}, 0xd}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x354e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)="f621a35a2bba7a22cc7309d438aad2df721a0b392e6152e752eb63c000365b8c2a93a3fe1536cd", 0x27}, {&(0x7f0000000340)="a78b40113516583c25ff32f7479207e0ad05eefa658007c49b8bec81df57c1242ca0f430deabf5e0c099b0e4a16ccd25026d82005895a02a6a3949ccff248c548cb47a0a8468563afeac772c6ebdac76f8785503736c1d6d347894963c6ec3676a924ab880ce2cc4258ccd8e5561daa999e21005eb827e57684401667bc053a8ce5a80a63f20f01261130ed542fb00cbc96c197ce48b701a", 0x98}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f00000004c0)="869ca1f280fa92a02847926be96cc1323f9eeadf1e5895e9e9571e437fd58b7c645fb961ea196b78b4d4ea47bc104b489a65918ed85b25412502ddfeed5fc9120b9d03a78ec1cd2d3c6ad5dcba10e40e90fb50fdb3e5f1ca0f001e21f232f09b37f5a381a21b49a51348c7bd2f912005e07078615b479150d46add42ecc9c06c112f392c20f79cc08e139caa4605ee894c1025", 0x93}], 0x4, &(0x7f0000000580)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x11, 0xa, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf7, 0x41cf, [0x4ee, 0x7, 0x87ee, 0x1ad, 0x4, 0x3]}}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xd}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xaefe}}, @rthdr={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x2, 0x4, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x30}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xc0e}}, @dontfrag={{0x14, 0x29, 0x3e, 0xca98}}], 0x110}}], 0x2, 0x20000001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) llistxattr(&(0x7f0000000740)='./file1\x00', &(0x7f0000000780)=""/16, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x24000080) syz_usb_connect(0x1, 0x6da, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xbd, 0x63, 0xa3, 0x40, 0xccd, 0xb4, 0xdbfd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c8, 0x2, 0x1, 0x40, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x6, 0xb, 0xb, 0xb3, 0xff, 0xc, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "098e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffff001, 0x7, 0xb2b, 0x2}, {0x6, 0x24, 0x1a, 0x1, 0xc}, [@mdlm_detail={0x29, 0x24, 0x13, 0x6, "c0c44927c65dfa9aef089ea49d5098a40e490729aab2268d5932cf66c2a9d8c05c99355db1"}]}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x9}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x5, 0x91, 0x7, 0x3, 0x2}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0xb9, "092ed94e8c0b"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0xf74, 0x1, "f7eb52"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x6, 0x2, 0x2, 0xb1, 0x6}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0x74, "c0"}]}], [{{0x9, 0x5, 0xd, 0x10, 0x90, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2d6e}, @generic={0x5c, 0xb, "0ab6cd89c5c506e6c7b7be4fd0d35e2058b3d3cf9d7d75c7a96c0f036d9eb820ad1dcb7251d50bd1487e5a8839d7ef0102d61d55ac07c670bfc1f2723775c53db01367bf41f622b9a1660d4f24a8fedcc1b6d2be03318d806186"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x5, 0x0, 0x7, [@generic={0x43, 0xd, "7524558b8295427f29718537732aabea7e780705508001825886b25dd66309509347586e4acbd613e34216833cc2e78781d69f78deebdae3ea04619b737dafd022"}, @generic={0x52, 0x23, "51508f6a7c1cee33e22344f5405ec31aaf276bb50d027072da4ccabbe32eddad98ae56caaafb3c8364f36b439764e698666274d4757718f21276d7fb0709f08f79cefc292b01894f1a8ec26d9302bf5c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x1}]}}, {{0x9, 0x5, 0x9, 0x7, 0x200, 0x45, 0x6, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x80, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x8}, @generic={0x21, 0x9, "61f25727ec7ff80eb3ec8755ce6e6c1985b910310110b94d5e315a694fe00b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0x4, 0x6}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x7, 0xfa, 0x2, [@generic={0x5, 0x6, "125724"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x40, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xc9b}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x7fa6}]}}, {{0x9, 0x5, 0xd5df3a0fe76256b8, 0xc, 0x20, 0x1, 0x2a, 0xf, [@generic={0x30, 0x6, "9a19d6aa999dccbbbeee722b1b275b56adf08aef0db85fd434f1f71b46545340527cf1889c92ad6ff16041f92a66"}]}}, {{0x9, 0x5, 0x89, 0x4, 0x50, 0x2, 0x80, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x9}, @generic={0x76, 0x21, "3c3819b30592814483f560362838a050e96ef015ac97e5d12b07bcbe8ccfa6cd3b53f45c30e41e52545d58e1fa9a7b95e436351f080678286e1bc52d1e10d5cfddbe5c28ebb98048f3ee74b77287d5879d21df067e7d1fdf5597b292cbff6379e11f0fe7f3d89a50772051575afc2358205b3c00"}]}}]}}, {{0x9, 0x4, 0x5c, 0x0, 0x8, 0x2a, 0x7f, 0x75, 0x9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "9a2db670"}, {0x5, 0x24, 0x0, 0xbcda}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0xb6a2, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x3}}], [{{0x9, 0x5, 0x5, 0x3, 0x400, 0x6, 0x0, 0x6, [@generic={0x102, 0x62, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x81}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x5, 0x7f, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x93, 0x6}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x3, 0x5, 0x5, [@generic={0x7e, 0x10, "0a444f192d5dc2b31d1953a5adcbe6656bc72ce85ed40415ab92dc84ece829cdced65ac3b7b193e3422d2bddc606e67d6370643367c00e1c9cbf8a07ad352a193927f7f26064ae9f11816e4036a33bc93e10487545dc10c97e5e5618eaa74c9dcfae888ce52d0f48c2e1344b92355af3fe57539351c3606e4b2f7ee9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x7f, 0x2, 0x0, [@generic={0x19, 0xd, "be9f9a234a3f736fe93f3167650afd40a12992d1c8a733"}, @generic={0xbc, 0x22, "0771eddf2b0dcbaae1684529a40e851054b5f66179440291e67b06ab094667874098c88db990398524e744d2ec0be76b0e39fe34ebcc374b6cb3ab827967ef0fd95f9be710442b48b0c0539ee731b0a4a497b3e67d0bb4639f04d24f10d7afa5a64213b084a25b17467d486f7d59be2dd0d8f77ed4c4f0b782b8fdd9d4aa99e9e9a49f96ded06a7f0f32fda5c8fbeb73f31d2c7c7431df84c6198c8fb53ed7ee69b191aab4ba67520eee0e5d9923ce9a3b833f854cda583d6a88"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x6, 0xfa, 0x2}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x7, 0xc, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xd8, 0x9, 0xff, [@generic={0xf7, 0x4, "40a2150e6a2f4ac00f0bad31729bdd10773afefd2def1048df7e37fe28ed8fe026d649e7661e180d499a9f23db7ffd0549c1fb0d65c847c8b70a0aa83ba6cefdbe51d470fd6d5c77fa9ec12f64929c021b9c5874d7640530c20c4b8a3f274ef8d86cc658761aaa9e1b511066afc965f92e93daf68667f2a4f5fe3bf0182f1d8668474e381214d4cda0a0f7b79fb52c02c5fd62fd8448d68a7b43b0617c6dbbc7b0940e3e005f66eb73d0186f06f4f7486d7466a3e153612fae680d246dae9f12f79a55ea124c3aefb1eced5e7d6c8a6de8a17ad1afa50ec755dd5a40d79cd3d81970e16f3a2f16be1922e99fccba30a71a8c5ab2c8"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0xc000}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x201, 0x7, 0x1, 0x9, 0x10, 0xb9}, 0x10, &(0x7f0000000f00)=ANY=[@ANYBLOB="050f1000012510010c0400037f004002"], 0x5, [{0xfc, &(0x7f0000000f40)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xa92857e8eaf86ffb}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x340a}}, {0x84, &(0x7f00000010c0)=@string={0x84, 0x3, "f6483309ea8052dd1407102a6d72846820970e4ccd8795b9b68207a5f113d61e903f23f85c336f9a68240b50d88d377a8efea17ed6f331ff4ce154caeea7959bdf26766921ac6b29968f68759a11715867b953e39beede06891c4c5450e962d8012f3c2947775f1c3b1bc16d7d84ae80f1459ca5a3c7b32697a5e48fbcbff235d7fd"}}, {0x79, &(0x7f0000001180)=@string={0x79, 0x3, "1e0910fe3e018aba0264a678a7a9643d6ae703f2452ee4ebd14c08113b0c66ce54c65eb33be465ab2d3d5bb4e3010292482e8a47fd1d958f134a3768646272c80175bd19167677ae74667ff1ef99c0420055a71a45ad6413604b4d4125e065f7ca4eb41b902f4ad844826b74de892c5c0635b3101910eb"}}]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6], 0xfdef) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x202000, 0x102) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) 10m2.554688618s ago: executing program 0 (id=4962): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001800f3d202000000fddbdf4702000004fd00c807000000002c001680080006000500000006001500030000001f6d3ffe5100f5588cb766fcfccaefd7a04f4c27e9ee46f1f22f3d5a57404a01f47366b73c45a2d7a5b9ad3418356279fc789133b17bb5ae57b80aed099ec56abd8b4d380f88bd9e5027c3f41090a44b0cab733a7d111e1442f51d2c84f203c73977e15cb95ea3a3defe46cf10ff976e7772cf5a20335439afec02f9e284a778056cf044b97fac11e3a518b2523681de1e1b139eee02b4532ac02223eec468d4741704d8c0583df3931c63867c52cf581a"], 0x30}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x708, 0x41e3, 0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="55d1", 0x2) 10m2.507166156s ago: executing program 0 (id=4963): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x1000003, 0x2, 0x800000000400000, 0x7f, 0x9, {0x1, 0xfffffffffffffffe, 0x80000000000, 0x80000000004, 0x400000000003, 0x6, 0x0, 0x80, 0x1, 0x2000, 0x4000000, r2, r3, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m2.44664996s ago: executing program 0 (id=4964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xa, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m2.281377101s ago: executing program 0 (id=4967): fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000200)=""/92, 0x5c}, &(0x7f00000000c0), 0x23}, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000280)={0xa, 0x1, 0x7, {0x8000, 0x1000, 0x4, 0x8}}) syz_emit_ethernet(0x1fc, &(0x7f0000001600)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x4, 0x5, 0x5, 0x47504a4d, [0x200, 0x7], [0x4f, 0x6], 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 9m59.832516271s ago: executing program 0 (id=4977): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000580)="460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486f26654c0fae8d00000000bb559a0000639a0f75bed5370b1c0b1cd2950e000000db37", 0x98000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000000c000300686173683a697000200005000a00000005000400010000001c33c69a74858f9f60b0c249ec47f7ad1f52e8fc78750a1dd977fe23f403648aa2bdcc5407e2625c7bb1f9861f6512b14715e919fab10fd52eb41d7f126ad7"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 9m59.190767135s ago: executing program 0 (id=4982): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2387dd60f900f500140600fe880000000000000000000000000101fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) wait4(r1, 0x0, 0xe000000b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000400)={'binder0\x00'}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x17) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x8000000, 0x2000, 0xe, 0x42, 0xff, 0x8, 0x3, 0xb0, 0x7, 0x81, 0x7f, 0x2}, {0xf000, 0x10000, 0x4, 0x0, 0x0, 0xe, 0x7, 0x1, 0x5, 0x17, 0xfd, 0x4}, {0xdddd0000, 0x6000, 0xd, 0x0, 0x4, 0x0, 0x4, 0x4, 0x7, 0x2, 0x4, 0xa}, {0x1000, 0xdddd1000, 0x3, 0x4, 0xf8, 0x5, 0x6, 0x3, 0x2, 0x8, 0x4, 0x71}, {0x80a0000, 0xdddd0000, 0xe, 0x0, 0x0, 0x70, 0x4, 0x6, 0x2, 0x8f, 0x75, 0xa7}, {0x2, 0x3000, 0xb, 0x3c, 0x5c, 0x36, 0x2e, 0x80, 0x4, 0x81, 0x1, 0x40}, {0x80a0000, 0x8080000, 0xc, 0xff, 0xa0, 0x0, 0x0, 0xb5, 0x5, 0xff, 0x4, 0x9}, {0xeeee8000, 0x3000, 0xb, 0xf9, 0x5, 0x0, 0x6, 0x2, 0x7e, 0xba, 0xb, 0xb0}, {0xffff1000, 0xfe01}, {0x2000, 0x8}, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x6100, 0x6000, [0x0, 0x9, 0x9, 0x6]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121c83, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) getrlimit(0x8, &(0x7f0000000100)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x5) r7 = eventfd(0x3) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r7, 0x7, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpgrp(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) 9m58.71082553s ago: executing program 34 (id=4982): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2387dd60f900f500140600fe880000000000000000000000000101fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) tkill(r1, 0x12) wait4(r1, 0x0, 0xe000000b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000400)={'binder0\x00'}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f00000003c0)=0x17) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x8000000, 0x2000, 0xe, 0x42, 0xff, 0x8, 0x3, 0xb0, 0x7, 0x81, 0x7f, 0x2}, {0xf000, 0x10000, 0x4, 0x0, 0x0, 0xe, 0x7, 0x1, 0x5, 0x17, 0xfd, 0x4}, {0xdddd0000, 0x6000, 0xd, 0x0, 0x4, 0x0, 0x4, 0x4, 0x7, 0x2, 0x4, 0xa}, {0x1000, 0xdddd1000, 0x3, 0x4, 0xf8, 0x5, 0x6, 0x3, 0x2, 0x8, 0x4, 0x71}, {0x80a0000, 0xdddd0000, 0xe, 0x0, 0x0, 0x70, 0x4, 0x6, 0x2, 0x8f, 0x75, 0xa7}, {0x2, 0x3000, 0xb, 0x3c, 0x5c, 0x36, 0x2e, 0x80, 0x4, 0x81, 0x1, 0x40}, {0x80a0000, 0x8080000, 0xc, 0xff, 0xa0, 0x0, 0x0, 0xb5, 0x5, 0xff, 0x4, 0x9}, {0xeeee8000, 0x3000, 0xb, 0xf9, 0x5, 0x0, 0x6, 0x2, 0x7e, 0xba, 0xb, 0xb0}, {0xffff1000, 0xfe01}, {0x2000, 0x8}, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x6100, 0x6000, [0x0, 0x9, 0x9, 0x6]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121c83, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) getrlimit(0x8, &(0x7f0000000100)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x5) r7 = eventfd(0x3) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000280)={r7, 0x7, 0x2, r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpgrp(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x208e24b) 9m27.031063931s ago: executing program 3 (id=5112): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x80000000004) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000200)=0x30) write(r2, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) 9m26.930780493s ago: executing program 3 (id=5114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x4000, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x5f}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0xffff}}}}}}, 0x0) 9m26.921133916s ago: executing program 3 (id=5115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) semget$private(0x0, 0x5, 0x1a4) (async) semget$private(0x0, 0x5, 0x1a4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r3, @ANYRES16=r6], 0x30, 0x4008040}, 0x1) syz_io_uring_submit(r4, r5, 0x0) (async) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000681c0000060a010400000000000000000100000008000b4000000000401c0480441701800e000100696d6d65646961746500000030170280080001400000000000020280da000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870e0000280002800800018000000000080003400000000008000340000000000900020073797a32000000005400028008000180000000000900020073797a31000000000900020073797a31000000000800034000000000080003400000000008000340000000000900020073797a30000000000900020073797a3000000000100002800900020073797a320000000094000100a601cb73261b6882237a065ff363762d4e1f15598e444ff364754c34b4528543748c9b79c430aa603175a7e3b5b9d190a2c2c4188b7c26120148c094d265a74365a97767ab9cbb31397039ab3f063f96a0d751f68f1af1a4f74a3f5d1cd4c3f29834815f07d702f399b124dfd3b860402c6998b9ad7d6cab6628759fc92df931a9e7e7bb6acbcb7ef909c15a79d6479a0800014000000000b41102806000010065fe9bb27826716fe37215876f3fdda74da914f0fe731980c3a4996a301da00f85e6a0d1e57217beef5c385d81f53cda9f47f7a3be67cf71ac8f58d16c169cfd9eba864d0d4d18181c1553667bc0f38b5d57f6db4617cf5aaee197826b000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727aad002400028008000340000000000900020073797a32000000000900020073797a32000000000400028020000100a1d1361784d5d07d33e06b7ce747466cd48ee5496c948e573baa0d077c0001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553731f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897f8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8e88d2c0c0002800800018000000000040002800c000280080003400000000004100100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a99171455d6801c435073d5d8143b24d9241bba82b7553e7b36c44062fc4047bf4bc8d6c9d594dd6bb220297616256ae9d30d98d33c1fad934f2f392bcc977d417d6463f84feb16f410045772bb92ed2d7eb93fec3dbe9490f10b4e7e293a50c1e196b8c4b9479013b9f9ad74eb96d7e828e0843f56a0c652b1054e7c20740cd540eb78c45d46ab7ee71e908b2fe1f072b5066ff2b8c232992ce6e38629f3acdfc6876dbc6f67e91ca069b8aa785b94d6569667f4a5675b1ad3274f96c411a8cdb500c4a50d56951d196a5849d7d4651cf38d73b88c66a6e9ac9d6103ded9f686fda7a56d262b5f7aca3661329ff505152d61bb10306e03338bc331096513123926b8b3005bf63486b8179ffbeba6c2122d53caa76ba756e1b8c5dd2d64915017d0ac348aac7e20280700b0379604c57988f4d13760e16ff4c29fd6ad76775d8c1619cc9a286958ea390635c90957aeac760caab20f297765091e8c4620e4041c256e3e063c4a75ad4e1b8563e84393f77f36212baba9c6644735de1b09acc0c33d88ec1c86f016e6fb8c0662645d2755a5470043c1bd2059079723ca0d0acb27c1916bf3821309606b8876ca60b87e52dce1fee4c697fc606406ed9d5aea44646891df32dfa567e9b93c02fcdff6e8a3583bd0c8507974805c0786895489f69d19c8970a762b03448894187f3150fcf433b00ead09987cee6473e28492532e74c846d0ab6e7908e260571f62e712fd8d0212030e41681b1e23c8f60af3c458eba1d41c1a365901039adee88ccc1f8dd06911ec37048509acbb56491ed5bc91d274faad42ca11e2b3d02f14c95d20aab34e313f1b91928408142d19570b217237b39a6281322b7cc7d8dee6a07145cd3827dff0e55b7ac5ac618e8e81b42002efb045fff6c08915888470bbe430749693c0d65c182c3483561624b7c309e19e94ba194f403ee8a1406d5f09df5cfa3839e1017d99b226b40a6baa06aff4b17a6fe995a6a83c56bba65a118bd93432d27d44fcc125e395f818fef7b82360eccc399ed0f03e1f0be86baeec92b67b54fcab9389bb5fdcb8b4303b6c2a4262ee30b37b917c6e14f2b52d481d2e5ad02739851b203b8602b983dc19bffdd3748fd0b29dc6b70054e68534888c02cdef58d15c79258c9880dd32ad90fbd2c766b2a68b880e7f0262640fc3e32c88e913dac1cf34201adda0cd457e87013889dc6f69d17bf1318b11c6293c1fb429050dcd33af8b7e31ce38990d358da60c5b31d16dadd46c6aad637b92ccad11b6249679998be4918d50e8208dd8286b1e325b8e023cbd9d707481752ecc6c5bfdb12aa88e14a154db4e79a64daa5ee9a53ac35b42c0000f07a9e427c3f215f11deef388b8f9960ac15251f2bb02ec282c858605061006211958260a8ce394f55a1c70883271709f24c1eb3f64eff2c2b69fb1368cce3d0f8d3d62e6192fc8b2368b0ae1311da57a8633060153293435ba8945249b9226ea630b2b6aa33d181cacddda6d3338fe6e9f1779d966d14c1f156757d5f5fb15102002c39421cb41b97b142853b6da4b86bb88aadf526447c5a12b4c324f9a1604cb7956b9afb5c596641f9cd9fc6be37eff82f32ce45d0515bf1cc966b8e57397986817399c98047622c87acfb1c6bfb0a37f326d285e22f6308bd1384c1e8681d44762dae45e073d246b52f6414eedecb90217057d42f985a2f8e2acd041af03e61d69e67e1689459a267090993e3d98f45314b9d43570a482c21ef678793f85f181eb677b4f73981c5d0a1ca8c6e65249359ca95093185cc8640e1f1cec8abfef53ba9c7fc24f0ca20389e9606dcfbaa93f5426e084d9cf522b3c75411aa34c22b289b1a7bd3ab01efebc27a1e09ee81056a113839234c0400dba9696c219eeacae13623505cdded580bc54819974c06ffcbb87c45d377c0bedf25907327bb7f4d07b600c9a816620815275c75aca418ade32ea85c965b379e8af6d8c8a32aa7f546978617cd907d39e75aab3221bb030194559e73d93e74d897b114b39d53ec305d332310b7abbef44569307703e916f7514b8497b6f3fb6f0daccd7bd301f67cad840419cf7128aa0b6264c6bbfd0c21eb6771bfbcc8590cbf7de3e6d9aa83667deb776715736c9194bb8825d0abce6d9b2693f93aa81ca67eb0ac9566456d6dababb75ccef060df30c8c23be41560e58f9f846debbf43765649047187cc7549d6728190675e7be45b3f56ed71564ae74b544b493e567459503b237a811a84036512e0728879eecc085ed1807613eb097ed784237c8746e96b73912be98f20dd2e2d4a79d0f6df706cf2366acbd01eafad1de8930d04bef65a5ee17ee453d5cb648d6279dd602814445d2967af8c1b1e92dc049ad9bee6f3b746ba5d8323b02f3ad671538f71efb65dd31fb86c090b77de525a678c12be72b86a62d1d850a1ab62ec46e0f11d34f43dac738bb2c2f925af7cc9d46a2b63f54077f0bc0035848da6f4ffff071ef4e1b8ba9a4fe2e4e1778c4f715a97787c29a4187c718dedf0459a4a6c736d0cefd2d6e2c49b7332d68ede037fe6f4281fee0afeccdd2c22763783f681ed014461aa805fdce74a1712a79473b5d99ab08b9dd4c3c6eae5d16f689ec2084382bf1b44fb1ac891e0a5adddcefb1b11f755ff2eadfa2d992c740826b246d3a91346a87f8802796e269323151f9c359715c6199338c003e19f8dfc474bc898bc3f0ef4a9b8d47cea6c655840dc9cc685c6e16104beadca4b069957fd54b62c6077c717f1b8ff6052aa89237ce8b71c44ca4f2fcedcee464774eb56132ddf1c037def1ad39a14e00f76f1fe84d90b48dd3c28bbbfeb157416b659b740bc35949765e8644a50eca9116c043718e233f80a307cf78c93cd6e38a2cf143faaaf602806556dc293d4907f5aa4e541901ee12267697cfc7fa35d979d6aaf8312e21c4f571dd32b506fc488da3843629ff5b63db55a5021286346b691ce7d8f930cdbcb4d07411f585de89696b33e0a8f32bc42ec9f6699f4a8af2fd74d1359898558ea0158342ff7703611af8d5a98c537b3bf6856bdfec88c73013b9cdcf987a12c9df591aa75d28ead7537e975479b9712d713b36744e5dc4ffd05f168be52bd0f4ffeb4ae6a638f2e415ef1a2d5d4d9d9a9e8bdb08265492b49e2ca6651a93230ed3ba9c09bc112591117939b043016732a083be675327b92c4624cbc62113c85253e653d001c157d23a3d1784a1cc1cf6d564bdb1c910a492d351c3471ee5486887c1f32555fb286da41ae46f3910516ed3bc4c8262cf6a668d0fb4f472dd7ffd23f9c5dbaa9f22f0f5a97905effdcb7877aba1213a2412bc5bd5fc6d8e7d0e7be5baa3c09dcc2b2299a72450adf04667244c930e638d4ce768386f8d954fba62a4fdc723c7cb8432361addbf15c086b4c1321463f2ec34d623426c4de8f4724b403ca013d5ea473be184d44716c3d7bc74d802e7f3898799346a752130aa3db94962ef7625fad6d2fa3b3ce37ba6ece06a4fde35b6490285bb66718551ca883edef903d3885deb852dd05df86eedec946b3543cf85cc5f3f89f13dae6cdc9d3b238fce59f4aae66ff2aba8c99ffd7c14b07a069fbade76084bdfbcecc00492147356d3d931bf15cf4b759981c290b9951d7abee0e43a6f9fac598c174d2ae0894dc5697633a0d051c5ace7f295376b53cfbfb5b49d01d09e56912d74d9494741c6fde0562004c5397c9f477a80be0db173a5336cfd74afa55f8afb1f0b93f2d6cc8b18cc3bbc954291a69c889f8361d0d93ccd9f1e0d950e08e1030eed47957c369e64c97aef34c289a778863d34684d90f54ec29a1a45b058d96dcd77d4708c8ce8fa087dc212f0f4785b1e145c7e6c734fcc8ec0a0fdc457cb60c57bc1259d05ed92ddacc9ba2d8e810ffde8ccf67ec43ac8f05c5f9dff3efbafe67271a7cbfd85dc90f870a3a2be2145b767edfa0e666a041ca7b99ac6cf09379df560e27bf00b60acc8bdc28bf765fd1a3a6daf20905e5f0a2dd473b3fbe1eaa414e5af8d4fa9847af219db7118d609cf28a45d810cfc2cbc9dfcdd1676816309165d89cf3a138fb785f4e41adb7e15cf40e6401ca684bfb976d4a7989b4fe6666fd926857366da896815d243c033fa243f6d02c683091d8b9ba613225246ab1f661f8085da9f18682e410e9aa771e6f30cb8b00d17e7cfaefd9d9b80a8760506f34ba04e0844b5dc8ec53cdf578d2a0bbdbe3ba4c92ff75d85caa97b396405f06dcecf136a3a73944a44e333df258a86960285f6cf2a5185b9e1afdd6feadef8f25b0836ab644eaedaa39b7f840332b6ba4a2e2ca4007dc02a8009e81d23428651a597437155d03a177e9c8501fbfca334d2515cbbde3116e5db438de268eb4ed4c29c7e19a421e7581969919449ea4982018a0ab283790a3741495572568476abc5ef7110db461167846cdfb21f5af30692724a3930b34a95fbfd2fea886ae5c3d30ab3737a5df1689ca3e30e24c1a907196e34002247bec3c7b58ead4c5b374f2ff6408bfc8f513c6bf7e8cf3a493046c16340459053a569fedf652bd4f6b04c43fa770b084defa3b2d7182feff095c4f0fd23e33ba1a3513e7a9c6a42ac35afa085083fe1ec331a1b1d4b11c5fc9573cfaf984027c98191ef52ec14e23477ce2b8ebc8523f3dc74fea42984d8711c2d5a98a92bfa26e8b92053e448f1d0aa9b3ad6bb159e08eb923d710e50784166e2d0021a933de490eb0542e45072c178646a6f674a5eabdde0aff8c20ef266c41bcb3150a8e2948e46e618988d44305ccb39dd77909f24704000280b80002809c000100875ba50afb7c4103b226f60ec3155234e3877c38dfdddca157704e58f963af3fd3ab9cddf625c2c3b44632f25af3de897f9aef70806700bc24c712677751fe844e94e44aa78410a88d4d32cc8fc592535e47a2045b6b13fec2acff1c57ec2e44789220c6ad86cde3262c0e29767d0793beb652eaa9ef1c9befb0a0641870d88c46e54141d2d8882c844b51249f0528a3413711f0c9b13a3b170001004310bc2a4e2de1f78da171e70703a65b8066da0004000280e0010280490001003342d233e05edebf6453ad40ffb8fdc32e50e78270ec9bdf6e7643df95e8d153f0fc5e15f615da4801b0fdb192177422b143dbbe14ee95b9f90e9d8797ca929c8a7ca57574000000e40001006aa6eaac6f4b461864c9dbab56133eaaa9f50b6770a119a9d89fec6e4376b5b2c32f661be94a4fe7c0755fd642f4b8d4752b9660d5b61226062d8871599bbcfa7c8206e27495557f57bc4647d209c70145e88dfe8b23aab7743c420ca8d3bffa2d96d91374fa565ac88aba12fb8163ec8d485eda1ff86f398f947db05a51b74abee278e6add982c178c4e08fb5aa9ef689629f74947a06d3b2d653216aaba7124ab6cf2a2bb2662834fc66fa32961f2065450b967516aaa8bed092ee58639c4fa0afe229c4a5e5c6f0d899360b0a26467db5b4f43fb3228fab59ae84be114ba08800010000000001290ad3eb30b6f62075fa7597f1fd84d9549fb819d48dc0632c14e96918cc653ec6718691516a727a180f8cd727f98394328b476bd4496f31fbdbecac89913ab041d49d9083286f1919c157b091587e87ec3ece2bfeb2c64400e7f8d1919215eb96d3f0919ae61554cf4911b5c2b6e2332e869e337ab23d2de9544ec2b5304dc52400028008000340000000000800018000000000080003400000000008000180000000004800028044000280080003400000000008000180000000000900020073797a3100000000080003400000000008000180000000000900020073797a3000000000080001800000000048000280340002800900020073797a300000000008000340000000000900020073797a300000000008000340000000000800018000000000100002800900020073797a32000000003800028034000280080001800000000008000340000000000800034000000000080001800000000008000180fffffffd0800034000000000b40401800c0001006269747769736500a4040280080003400000000008000240000000000800064000000000080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340000000000800034000000000080003400000000008000180000000006200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034000000000080003400000000008000180000000000800014000000000600004804000028008000180000000000900020073797a3000000000080001800000000008000180000000000900020073797a31000000000900020073797a31000000001c0002800900020073797a31000000000900020073797a32000000000800024000000000ac010480b200010006687351802453c1b314541f275193ac658985478517d01198c7d90f63dbcb74fce872904af6593131bccce0ef918bcbf359a0d8aa2801d0f31fc8aae73107413f6112724ccec7e130fb84435e63fed1d71f589f8b071b95bb38e0532478f6d3592922c17c635ea7a8f7ad3260e620447bf7f845e6017d17014e26504fe91922a2b5e10b8511169b2a9ac673e340506a052cea05d8a429d989757a396fe43535df4fe926987ed7fc41dd6acfdf2600000b0001000bca99f460f4b0002800028008000180000000000900020073797a30000000000800034000000000080003400000000004000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d6574610000000024000280080002400000000008000340000000000800035000000000080003400000003cd43137800a0001006c696d69740000000900010073797a30"], 0x1cdc}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) (async) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) r12 = syz_clone(0x82001000, &(0x7f0000001800), 0x0, &(0x7f0000001840), 0x0, 0x0) wait4(r12, 0x0, 0x40000000, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000840)={0x2, r12}) 9m26.182474473s ago: executing program 3 (id=5123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b00010067656e65766500000c0002"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) 9m24.987543353s ago: executing program 3 (id=5125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x601}]}]}, 0x38}}, 0x0) 9m24.806305628s ago: executing program 3 (id=5127): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x3, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '#Eq'}, {0x5, 0x24, 0x0, 0x551}, {0xd, 0x24, 0xf, 0x1, 0x1152, 0xa3b3, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x1c}, [@mbim={0xc, 0x24, 0x1b, 0xa44, 0xa, 0x8, 0x0, 0x9, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x9, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xa1, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xfd, 0x6, 0x8, 0x20, 0x22}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x0, 0x9}]}, 0x1, [{0x31, &(0x7f0000000240)=@string={0x31, 0x3, "50061f99236cc9482f90130731af3c09c6665a92363280cf3636d36372b572620b4c731398c8171f93c4671c5435ce"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x20, 0x35, 0x100, {0x100, 0x5, "7c42931036bb6e1a4775e130c3a4afc5e4a106d33caf2f5f3810d836383b2fbad22910eb5e9cba50019cd97839c7dbc20e5721e66ddec785590e25b1fb498675acafb92fcee47cb7b7ec15b588b5770fd8922a9268c8d5274140201c8ae76015acd59b9affbca1d637bc9422fbd0b7fb69fa93cddeea3509715ded0bfde1819ec1dd79ec8e8742dbc0f3d24729adbe2cfded7c0316bd0407a72cc512694cb4a9b891fd68b5b1aa3f095424ed945f661dc093acee52bc3c7e62b8cdc2a2f01082b369376ecbd0f674cab2389564a555a7d197416e9c010f09fa90301aff637f05c42b02e0805b75f11531342633a7ef832a2673d1f27d2bc705c17f5bb844"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x60, 0x1c, 0x1f, "4ea7538650db60c2decc5c59fc1dbf8c8fd0db90cb76bdae0a865ab241923c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x500, 0x5, 0x7, 0x6, 0x41, 0x0, 0xbc, 0x0, 0x401, 0x8, 0x9, 0x7}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x3c}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x5f, {0x5f, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1680bb7fcdc61a45a16816e0e6f78c3be4173b100806ff414b32a0a9fe4e671d8e48a5bb8c2"}}, 0x0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x100013ff, 0xc7, 0x0, 0x0, 0x1ffffff, 0xfff, 0x2, 0xfffffffc, 0x0, 0x0}) 9m9.688270359s ago: executing program 35 (id=5127): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$cdc_ncm(0x6, 0x9a, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x2, 0x1, 0x3, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '#Eq'}, {0x5, 0x24, 0x0, 0x551}, {0xd, 0x24, 0xf, 0x1, 0x1152, 0xa3b3, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x1c}, [@mbim={0xc, 0x24, 0x1b, 0xa44, 0xa, 0x8, 0x0, 0x9, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x9, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x8, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xa1, 0x9a}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x1, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xfd, 0x6, 0x8, 0x20, 0x22}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x0, 0x9}]}, 0x1, [{0x31, &(0x7f0000000240)=@string={0x31, 0x3, "50061f99236cc9482f90130731af3c09c6665a92363280cf3636d36372b572620b4c731398c8171f93c4671c5435ce"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x20, 0x35, 0x100, {0x100, 0x5, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x60, 0x1c, 0x1f, "4ea7538650db60c2decc5c59fc1dbf8c8fd0db90cb76bdae0a865ab241923c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x500, 0x5, 0x7, 0x6, 0x41, 0x0, 0xbc, 0x0, 0x401, 0x8, 0x9, 0x7}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x3c}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x5f, {0x5f, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1680bb7fcdc61a45a16816e0e6f78c3be4173b100806ff414b32a0a9fe4e671d8e48a5bb8c2"}}, 0x0}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e500000000000000bf980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x100013ff, 0xc7, 0x0, 0x0, 0x1ffffff, 0xfff, 0x2, 0xfffffffc, 0x0, 0x0}) 9m1.806792849s ago: executing program 6 (id=5196): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000001a80)=""/207, 0xcf}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f0000000380)=""/107, 0x6b}], 0x4}, 0x80000000}], 0x4, 0x10000, 0x0) 9m1.779388582s ago: executing program 6 (id=5197): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) getdents64(r0, &(0x7f0000000000)=""/226, 0xe2) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x18}, 0x18) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r4, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 9m1.703364156s ago: executing program 6 (id=5198): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000100)=""/159) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x101}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f0000000540)=""/223, 0xdf}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000002640)=""/4111, 0x100f}, {&(0x7f0000000480)=""/10, 0xa}], 0x5, 0x24}}], 0x48}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0xffffff81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31cc7172c856b141e3f4e87e6ab615ea379a12c5a6f5c6e8b30138f5f3570909f89f3e47f8090000c30a1c48cdff030000fad4624800"}, 0xd8) statx(r3, &(0x7f0000001180)='./file0\x00', 0x400, 0x10, &(0x7f00000011c0)) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xaf4, 0x2) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e98700000800458e00280064000003069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100007927800e7"], 0x0) 9m1.481004441s ago: executing program 6 (id=5200): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000700)=[@rdmsr={0x32, 0x18, {0x384}}, @wrmsr={0x1e, 0x20, {0x641, 0x10000}}, @out_dx={0xaa, 0x28, {0x1d2a, 0x4, 0x1}}, @rdmsr={0x32, 0x18, {0xbb8}}, @wrmsr={0x1e, 0x20, {0xa12, 0xffffffffffffff9e}}, @out_dx={0xaa, 0x28, {0xf04a, 0x4, 0x5a}}, @wr_drn={0x6e, 0x20, {0x5, 0x100000000}}, @in_dx={0x82, 0x20, {0xe3bd, 0x2}}, @wr_drn={0x6e, 0x20, {0x7, 0xffffffffffffffff}}, @rdmsr={0x32, 0x18, {0x9e0}}, @rdmsr={0x32, 0x18, {0x279}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x7b1, 0x4974}}, @wr_crn={0x46, 0x20, {0x4, 0xe2a8}}, @rdmsr={0x32, 0x18, {0xb0b}}], 0x1d0}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000004c0)={0x2000, 0x111000}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010000bd7000ffdbdf251640000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) r6 = io_uring_setup(0x2a8d, &(0x7f0000000500)={0x0, 0xf85d, 0x40, 0x3, 0x1a5}) unshare(0x22020400) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r7, 0xff, 0x10, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000000)=r8, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="f916a3f379ea6e0696582ee94c0c8767fa54812e9fe62f1faf9b11d6aeac8dfe8054499b10350b089168221f3d16f4dadba5b2966743a060d4f49d545deee72dfaa5015fd72f0367e4663f83b5e25de6751abe8526dee5302f898b1b1f4d71aa98deed0ad043a282cb194b09eb20a21a3d3c50d4f362d93d5d8b69a0351eef4e3af8ab800ee7e486b185bb860f186590e92257d73171714614aa9a7863396b21755448f4901f1cb85a5cf299dc38c489a18de5ec85cbf660e156c938e6dc2ce14ee8571b685fa6335d4c95d9117e84efbd13cb99d127b6d054b83bab998aefaa9a4785372a117b39722a613596ddd4a4a74b536f819e", 0xf6}, {&(0x7f00000003c0)="fa4094a63923b780", 0x8}], 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r11, r12}, 0xc) r13 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r13, 0x107, 0xb, 0xfffffffffffffffe, &(0x7f00000003c0)=0x1a) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd710003002300ac00030000000300", @ANYRES32=r10, @ANYBLOB="20001d801c000080060005006b0000000500060000000000050007004c000000"], 0x3c}}, 0x4) 9m1.418528216s ago: executing program 6 (id=5201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r9, 0xff, 0x6, &(0x7f0000000000)="e8794bfa", 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x1]}, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x1ff) close(r13) (async) close(r13) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) r14 = socket(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) 9m1.122634892s ago: executing program 6 (id=5202): socket$kcm(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) getpriority(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000200)={0x5f, 0x4, 0x3, 0x5, 0xc433, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14f500001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0xc0884123, &(0x7f0000000080)) 9m0.916077663s ago: executing program 36 (id=5202): socket$kcm(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) getpriority(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000200)={0x5f, 0x4, 0x3, 0x5, 0xc433, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14f500001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0xc0884123, &(0x7f0000000080)) 11.56074753s ago: executing program 7 (id=7342): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace", 0x65}], 0x1}, 0x14) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x24040000) unshare(0x2c020400) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x1f, 0x3, 0x17, 0x1}, 0x50, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) fanotify_init(0x4000, 0x0) unshare(0x2040400) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 9.569050596s ago: executing program 5 (id=7355): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x24009810) sendmmsg$inet6(r1, &(0x7f0000004c80), 0x0, 0x44) 9.481592905s ago: executing program 5 (id=7356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9900aa000041000000000100000000000000b52400060000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) chroot(&(0x7f0000000300)='.\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) getcwd(&(0x7f0000000000)=""/204, 0xcc) r3 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x424081, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_int(r6, 0x29, 0x10, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffffff}]}}]}, 0x38}}, 0x0) r7 = io_uring_setup(0x35b4, &(0x7f0000000300)={0x0, 0x112, 0x80, 0x0, 0x37b}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) r9 = syz_io_uring_setup(0x3dd9, &(0x7f0000000140)={0x0, 0xaee2, 0x8000, 0x0, 0xbfdfffbc, 0x0, r7}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r9, 0x32d7, 0x0, 0x46, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880400030a00040001001bddff00000008000d0000000100"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) 9.43761821s ago: executing program 5 (id=7357): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000080)) 9.158369126s ago: executing program 5 (id=7358): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0x14, 0x4, "3fab0be5"}, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007340)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x34, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) r6 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r7, 0x1, 0x70bd29, 0xa, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x77}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, 0x0, 0x40000) 7.961091897s ago: executing program 7 (id=7363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x34, r3, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, 0x0, 0x0) 7.862422131s ago: executing program 7 (id=7364): socket(0x40000000015, 0x805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x4) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept4(r0, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x1a19c2, 0xab1b39fa609e4367) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) 7.66222956s ago: executing program 9 (id=7366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x24009810) sendmmsg$inet6(r1, &(0x7f0000004c80), 0x0, 0x44) 7.586808539s ago: executing program 9 (id=7367): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) close(0x4) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85, 0x21}, 0x3c) 6.915190774s ago: executing program 9 (id=7371): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(0x0, 0xf, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket(0x40000000015, 0x5, 0x0) recvfrom$inet(r5, 0x0, 0x0, 0x40002000, 0x0, 0x0) r6 = accept4(r3, 0x0, &(0x7f0000000300), 0x80000) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000280)=0x7, 0x4) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000002c0)="8c372eecbf38", 0x6}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x2000c010) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r9 = io_uring_setup(0x2c23, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000400)=[0xe758, 0x3], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904010002ffffff000905fc52"], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)={0x2, 0x3}) 4.988212047s ago: executing program 5 (id=7374): faccessat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000ff1c1b1f1c4000010203010902240001010800fe09040000020301025f09210800060122cb0f09058103ff03"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x755, 0x2626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x50, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xa1, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x7f, 0xbe, 0x1, {0x22, 0x9bc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xf4, 0xf}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x5e, 0x0, 0x8, 0xfa}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x242f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x448}}, {0xa4, &(0x7f0000000340)=@string={0xa4, 0x3, "29e0fd42c1ee13214b2f642659a1ea047a026ce74557d267e735560a0c8df81099ec64070ae1a780c6bebd1ffb386c217acc2e6e24e6cfcbab94f91ee6ba2e4f340bfb5e3f1b3fffc9b899a6b4e0fd3e767822add6d422aafc3be309d6bff22ccfb81a1a2edc8c91379c979cff634ad88ca8163ad84228941284555d3a45e2af847f2af486c14f02a9de6c9c33ddf8e771720888c20eab24346af368ccf48ba739bb"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x400, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r6, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x2, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) timer_gettime(r7, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 4.786890964s ago: executing program 7 (id=7376): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x100) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x6000) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x680882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.380115404s ago: executing program 4 (id=7379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x9, 0x8001, 0x0, 0x9, 0x0, 0xc0, 0xcf68, 0xffffffff}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000340)=0x9) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)=0x10001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_usb_connect(0x5, 0x255, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) syz_usb_connect(0x0, 0x33, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRES64], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x2000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 3.706502711s ago: executing program 8 (id=7381): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x11, r0, 0x0) (fail_nth: 9) 3.297249686s ago: executing program 9 (id=7382): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x60400, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x200, 0x7}, 0x10) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) 3.238229926s ago: executing program 8 (id=7383): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000002b2400, 0x0) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x0) (async) fadvise64(r0, 0x9154, 0x5, 0x5) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded', 0x40000, 0x41) read$watch_queue(r1, &(0x7f00000002c0)=""/37, 0x25) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) 3.054789982s ago: executing program 7 (id=7384): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x400, 0x3, 0x4, 0x0, 0x4, {}, {0x3, 0x0, 0x6, 0x7, 0x1, 0xc6, "9b09ffcd"}, 0x8, 0x2, {0x0}, 0x5}) 3.025727286s ago: executing program 8 (id=7385): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x8, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x0, 0x229}) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) pipe2(0x0, 0x4000) fallocate(0xffffffffffffffff, 0x2, 0x100000000, 0x9c7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) setns(0xffffffffffffffff, 0x8020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) inotify_init() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000001000303000000000000000000000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000008000092000040"]) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000000)) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf2514000000240007800c00030004000000000000000800020007"], 0x38}}, 0x0) 3.006616911s ago: executing program 7 (id=7386): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'L+', 0xdb9}, 0x16, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100dca983c5422814e1ad774d21ce10000600000000002000000000000000"], 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001000)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x9d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="b899cdf3e27d284e703f3e88a6f0dd9fe9188e1a49a802eeb46b6c307c4689bca8526ade0c04f07d7e1f9e947051fbc4ca30b1736568cc036b5d217f59150ecd70d53680f8977ea920488fcad73328297a78cef69257bca8a036567cc554fdebc5f400edeaa19c4230c120f3983ff4f49476dde8d3e59c00b1e58ae00e0e46a571ea0f9e1ead864a91c5239cf6046aa10d52d8f85a9b8a824fbd38ede24b5e5720f078e233e94cb91d5316bb316ae40ee21b3e169df25840025d508295eaf61eb6bebe1b8d4738aa7acfd672011769dc505e78b458a95a9d24b94f112890c0a1419fb5fb3aba4e34189c923d", 0xec}, {&(0x7f00000002c0)="10678e586ef3d1ba", 0x8}], 0x2}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x4, @private0, 0x2}, 0x1c, &(0x7f0000000880), 0x0, &(0x7f00000010c0)=[@hopopts={{0xe8, 0x29, 0x36, {0x62, 0x19, '\x00', [@enc_lim={0x4, 0x1, 0x87}, @calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0xfffa}}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x3d}, @generic={0xed, 0xb7, "26f6bb543edd8475ceec51f01f0c4e52a2a597005b3eb4f38f217e8067d79cd29446e61fb5069762dbf24e74f955868f8ba045e6d3106cebec0b7d6b158e5a4ea1248a759554652facb88390bc4fa612b091224a1095208ab37214ec5a70acc464c54c23830a9117fb7d86ec2d3a69189570f5998fd9ce6b91d65598995e8d98663212e21bc9bafdd49e42f916bf0505fd1d270ae0ed079043199f823bf85e14ed16f1ccb667aab485ebf80a9149149d8631473fd9f75c"}]}}}, @dstopts_2292={{0x208, 0x29, 0x4, {0x87, 0x3d, '\x00', [@generic={0x5, 0xcd, "248dd3d89324d28c2022ff0eb37b4497f9ad8ae85a658f6290ed28deca19051bb25228b3470b0422d6754e3e5217adcbb1667db578161c0571b2e1b0aee08f520f1afc601a87ba33ae5cbe7df792fd3c7ebc4ccf0a2be8c20d61657d9f936fecba7b439f4e5a046cc1373e88a97864e972fbf942e026043e1ec058af55902cf0fb2fc4d6a806c5324cb6aac2ff95420c9c64d825d3e18e10bcab85ddf4df664e3bf21534e23355335b6869880ca5d9f270829a3c7d23316eededa14922603720051a9a30ac5fc24905aba83811"}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xf4, "6ca279659c91f7980598c5f6b84e17f97b25c8400e181b6d5343e23ad3f690afae4bd5487e40fc6a35b8e27372bbbb26ac253e1de6f4eb5b8f72b8c9d119abeb4f2e551fcfcb24e829154b3f67480f8d6a1fad578d4088bf332f7703965ae96e499648f44cc8aca31330b69674d590714004f758c5da0b0e31f261f4a7bab23f47db5adb0dead29a91bfb6473674c475bed77244260086d6058a9ea3d26f28f18f0b40022989ecb397b2bbc62d306e62395c2e3176348ebb026f4516348430d47dbb5e0e72b4626218582366aac4995509a336077b2fe96a6355b0407118f5fb5f0d2699035b5183875c9b918632d45b7735bed4"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim, @ra={0x5, 0x2, 0x7}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x2f, 0xe, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x0, 0xe, 0x46, 0x3, [0xa, 0x7fff, 0xffff, 0x1000000000000000, 0x8, 0xd07, 0x4]}}, @jumbo={0xc2, 0x4, 0x401}, @calipso={0x7, 0x8, {0x2, 0x0, 0x7, 0x2}}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xffffffff}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x81, 0x0, [@mcast1]}}}], 0x3a8}}, {{&(0x7f0000000b80)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, 0x1c, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="140000000000000029000000430000000900000000000000280000000000000029000000370000006201000000000000c20400000006c2040000000900010000980000000000000029000000390000000410010b00000000fc000000000000000000000000000000fc0000000000000000000000000000000000000000000000000036d8f9970e1198ea0000000000000000000000000001fe8000000000000000000000000000bbfc010000000000000000000000000000ff010000000000000000000000000001fe800000000000000000000000000015140000000000000029000000430000000000000000000000680200000000000029000000370000005c4a00000000000007517e0e32474c9fba082ea24029ae0a6b916f863fa8d56712fa14175602cc44c1bfcbe651b50f9b4dee549fd584421a4002fb1954fff1968f5338f3319836bae4b47719b349eee806bcb9ac9e84c688d42b14c2040000777708b3bc4c5c1f7a6114c27bef2f1d1d6e8c20c8f4d83e45fba6aebd35d8b87dc8c306aab34af79d8317f26271bec24810a43f1be237f892a6b043c6c4bab299faf3837327d2f23ef9b31f503172916bc43342bae85a9e173c643cb427cd72bf73e6abf168f68a05f64d62ebb6c01a9225c7848673590f89b650b716f57526e07b9627bd4b64565885bd6504efd208cfe39c287a41b5ac7a33459c63640747bff648e06698130ab9927b74664a8d47de99c47a5d20be04fac4ef9ea1c85ef80fb6cbe86c23d6912dbe301a744da87026f2b971c5beb64741070b8aad8c4115d3d2e77ccfead184436b47133f9c5f2edab3bf10429891f66f9d73ebe1cc106e513a805c1a1189cc647da1b1bb3980561b5687c2be6ccabc0b985b33bf17345b55c41c6dfbe44630f8723580c7a60c38032b5b1bc757e70b97233d56c3ce0e9f8c4b72ae7121e7a874d21b8f36f73ada95840cfc20889bbf2b35419b5093c9070b1763780f92ef60e7b99e2b35dc895861d432621e6162b3b5e030181137dba15ba786b95ef2aecf0bf096ea5502a8637f217233270ba05836c45423f39a1012ec456a57ee2a7e477bdd58c8f171e4e2218d4e050200090738000000010c09ff010700000000000000fbfffffffffffffffdffffffffffffff0000010000000000020000400000000001000000000000000401070103000000140000000000000029000000430000006d000000000000001400000000000000290000003e0000000600000000000000"], 0x388}}], 0x3, 0x4010) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) close(r4) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x15, 0x122, 0x0, 0x0) 2.266900515s ago: executing program 8 (id=7387): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x3000, @loopback, 0xffffffff}, 0x1c) 2.178134469s ago: executing program 8 (id=7388): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x24009810) sendmmsg$inet6(r1, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) 2.014604048s ago: executing program 8 (id=7389): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xcb, 0xd0, 0x22, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x10, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x6, 0x6}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7f, 0x6, 0x1, 0x10, 0x6}, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x4, 0x48e5}, @ss_container_id={0x14, 0x10, 0x4, 0x47, "2b859b8a99dfd71b837ec61b11891700"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40c}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000a80)=ANY=[@ANYBLOB="200a2d0000002d01a9f5de054661806199ac02fa12ded395257a3fece999db16540dbea31af325bd6485afc270b3c7dd8ebf79167038d310fef8cd32f94400000000a76c1c80bb5778d7d1bbfbed90b35a6b976f737e3b6e48e8743500b418d3ce1a00"/109], &(0x7f0000000300)={0x0, 0x3, 0x85, @string={0x85, 0x3, "bf4a4c7e1675053280a438b5f8a544b346f80623948d4ac70acbb5d7d5e60236879ba26b7f4546d2719665604fde213ede346d443747e35cff2ca2baabacdab2f766c9d4d96581898d5963318061fd89beb3cb8286e8832abc8593d90ee0149450274d38bbf5c89821bb4661590b155713b3eb4ac6f1f9c756ba236fda4d5c313bbe95"}}, &(0x7f00000003c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "8727be8428d83c9df527d1bcfa9e4cf7"}, @wireless={0xb, 0x10, 0x1, 0x75765c1835f05b08, 0x20, 0x1, 0xf, 0x800, 0xfe}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x8, 0x1, 'J#7]', "8346cb94"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x7, 0x6, 0x7, 0x7, 0x7}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x20, 0x12, 0x5f, "3a2e1e5e6a2b2dc0fef4636764714515a753fe8858f9ec4f127c4d7605f895b0ac43f5309a5a97e46b27c311a43f7741ad5a7443a8c41fab0ae88f64476c661e89436539bd84347ea49622f99510cbe2f6005793f914ee56fd1ba6247381c6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x60, 0x8}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0xb4}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000780)={0x40, 0xb, 0x2, "549f"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x98}, &(0x7f0000000800)={0x40, 0x13, 0x6, @random="7c60858741ce"}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="e17cdf4f1fe9"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "e762"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x100}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r3, 0x0, 0x5, 0x1000000000005}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0xfffffffffffffffd, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000000c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)={0x40, 0x13, 0x3, "6d955e"}, 0x0, 0x0}) 1.889950985s ago: executing program 9 (id=7390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="11c47b3eef5af9d27600a26971c6f6ac69579d8615bf86179bd622ea4f21a938f9686506f2b04b21d8cc5470bbd9df7606e609445d527fcd01603c7c250d0b49493e83a0dcad4d6be3f29bc653b2315b38a00e3efc4a5c79e852be2342750e4a6501b277d64c3c2faacd2801fcfda9b2f4e40b4dedc907e3a8cad097c132be3d1419b728417bf774ae402d87287b48c240a0b07ef1f593c4f0098175d09663084256b21decf0fa85a69ffb316be8de416d945f3daaea45b6b8a5111e02dbb075ca2f5479360c7c4dd781c1f6d9b5a704bae7db01994b8c77136f557d438a0eb17a5a77d65ec12f4f713c989e39c1d1", 0xef}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a4ab9b76e", 0x4a}], 0x3}, 0x4000042) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLI'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r9, 0x4112, 0x0) sendmmsg$unix(r4, &(0x7f0000003780)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="661dd7248f687504ca1b6f9f9729e71d4788847dd991d6aa677388847770fe9a828e558252797010b46ed31f48f74615d6eb50bc663106f071dd0d3e556c9ecc8b4d6cde1e23ca7b79268a46e3d7c867ad3d90f3aad5be77fc1bbb4394ec148f8798f3c1ad6a217b92c131ca0a1a", 0x6e}, {&(0x7f0000000480)="f83f73dd312b0184101e6a3ff29ad3d14d98b20140764b705b5e747459a0aeb968e8650320a19f2ea91e5774fe72f924b9b7146cb4912805df57d82dc37dd9bb3e69777b394d3809bfa5adf6b0b7cf635f998859cad2a697ef9aaa3adb19d796a57564da8a18f69a43656979617bda12676a3f3dc0cad20e4068fde1d2e612591cdeb97636ff597cf83015e0ea0b250d4693935139c0cfea5664", 0x9a}, {&(0x7f0000000540)}, {&(0x7f0000000600)="5a7d1e2294b799575c7bb8", 0xb}, {&(0x7f0000000640)}], 0x5, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4841}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000880)="554438ed8fbe531e9537ca93556e5806593df5efb57de6868e673a2b8968d453f4d695dd57ec0293ffb7b8dbcf5bda23bbb5786ddc5214c4124f189afae76bf30ee06e3dd6197f1c8c8c5759bba7ec0ae641c7b8eb466c689e9008a1cd49e78505b9b8460dc292f711ab73", 0x6b}, {&(0x7f0000000900)="69c700a753582dbfb66d69ef7ba07655dc648238380cdf2da24b4f438cc29bf1f26389b00bf57833992e7d4581739c479fef23b8d8c5eee5c5bcc02c4f7fe352c333863f", 0x44}, {&(0x7f0000000980)}, {&(0x7f00000009c0)}, {0x0}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d6be7ebcd2e3a928e428d887ce1725f94c294113d7163b03fae1e39f20be7aef1e5ead7d9d29ca5ef11cac5ab9238426bfa9cae455df301a276f2ca68af0591f9da09f0b196bf4769f42a0de"], 0x38, 0x8000}}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="140000000000000001000000", @ANYRES32=r2, @ANYBLOB="0000000010000000000000000100000001000000", @ANYRES32, @ANYRES32=r8], 0x30, 0x80}}, {{&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000e40)="191fee6b62149042ff45c0894d286694b4c236ae2125be9ba512ff44b6e51d2061ab129eeb53a3583d061eb5f4f8c0568ce3b1a52ca9c4106eaef7c906e08f55c70fa16b82cf4a9369246c82cd6e4ca00d8293bc479466e768df3f1a92433f72b6f826b62e", 0x65}, {&(0x7f0000000ec0)="81dff25fbb1a32ab550d910244e91eaa67347682e07fabc9ca5d44c84f5c6c960391bc52420f22cd8a6fb93ef1c7517ec024d8059b3708375e075035bda08f03fbaf486b4c431983884181fe5d73314d682060780ffdbd41ef59f5138cb322aae79e36fbd58666c45506fd2b280395674007c1", 0x73}, {&(0x7f0000000fc0)="68535db4ae4ffc2233f64286dff272bdfe675274acf9f87ec5fc9ccd48e096b79d0b15a9e8b240e15f6a17f3f4d8c21f76452124bb4237ffe09bdb2552073ee4f1275f0b8daf4d5bee7958b522b14a384d4fe11a84842d0a1f5fa83854356c625be7706d7cb48eb2003fb81c19583935f8d1e80f2c55239e218f4fa7cee8cfe1b50faddc9e96a4593f4e369568001e35bd", 0x91}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0000000016283472a02eceeb2e8c33c867ff2ae63eb688b8ba83360d58c099f71a5c294a92e05d7f03f794df2986b8e52f849b0b20591766f06df845be42adf8fa21791d46"], 0x28, 0x4800}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002540)="e52a6bff6bc82889834e7ff9a850e678ae8593fe5e23e565cee149a8c3e65d3f1561b3f5c3a2b3b30a013682b4264f29f5e00a817cfba6c316e42c888cd53520219ca1a166d2f18b5e460d69f8eeb0b90b6f56605e1e2dd86adb31d000aacda35b261348319736a97a3c3640a074567aedc226f7278ef7eb0797d8f385d457977c49f739606c91e1a9f59c0566a5db1d61ec5991c2c3aff89227d026cc2258400077055f0e1661602f6b4104", 0xac}], 0x1, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000003740)=[{0x0}, {&(0x7f00000026c0)="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", 0xfbe}, {&(0x7f00000036c0)}], 0x3, 0x0, 0x0, 0x4880}}], 0x7, 0x800) ioctl$SNDCTL_DSP_POST(r8, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.760728408s ago: executing program 5 (id=7391): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rename(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="002185000000850a62fe9785d8f2d201a703e47d72a005b7cea16727d1d4cede0b47e356248835a54ad4e3d5c08ba5ba0a78d9b7e5b1fbec62d57262e0ba20670850163c9c08a9fd97b34d82c413c60118ad8a7b46323d1f26161c2585465e3c686fd889c2e4d36a95cd81"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.299552007s ago: executing program 4 (id=7392): socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e22, 0xfffffffe, @mcast2}, 0xffffffffffffffff, 0x40099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0xffff, 0xfffffff8, 0x0, 0x0, 0x0, 0x20000000}}, &(0x7f00000003c0)='GPL\x00', 0xc, 0x1005, &(0x7f0000001840)=""/4101, 0x0, 0x20}, 0x94) 514.637718ms ago: executing program 4 (id=7393): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x3d, 0x10000, 'syz1\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000180)=0x474) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0xcda}, 0x4) syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) (async) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setlease(r3, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x2e, 0x5, 0x457f1c9146f8f875, "464905e100000000000000007f00", 0x38416761}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x112}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010000108000000400000000000200000", @ANYRES32=0x0, @ANYBLOB="80400100c300010004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x525, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x31e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)) 239.458857ms ago: executing program 4 (id=7394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1081000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8a1}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c000280080007400000000008000340000000160800014000ff00120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30", @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES32=r2], 0x150}}, 0x0) socket(0xa, 0x5, 0x80000001) 211.408924ms ago: executing program 9 (id=7395): futex(0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x300, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 94.753829ms ago: executing program 4 (id=7396): ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) eventfd(0x40000001) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0xf, @empty, 0x26}, 0xffffff16) sendto$inet6(r1, &(0x7f0000000200), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$RTC_WIE_ON(r2, 0x700f) socket$kcm(0x10, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000100), &(0x7f0000000140), 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) write(r5, &(0x7f0000000180)="01010101", 0x4) close(r5) execveat$binfmt(r2, r3, &(0x7f00000001c0), &(0x7f0000000480), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1) close(r6) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000005c0)={[&(0x7f0000000200)='cgroup2\x00', &(0x7f0000000580)='\x00']}, &(0x7f00000002c0), 0x400) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000540)={[&(0x7f00000003c0)='cgroup2\x00', &(0x7f0000000400)=':!\x00', &(0x7f0000000440)=':!\x00', &(0x7f00000004c0)='htcp', &(0x7f0000000500)=':!\x00']}, &(0x7f0000000380), 0x0) 0s ago: executing program 4 (id=7397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x6, 0x10000000, 0x7, 0xff, 0x8, 0xffffffff, 0x1000, 0xc, 0xfffffffb}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@buf) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x28) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2000) syz_open_dev$dri(0x0, 0x2, 0x98240) r5 = socket$l2tp(0x2, 0x2, 0x73) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) sendto(r5, &(0x7f00000001c0)="d9fa27c7e0ec11fe4ee8ec09e3eafb3ec131d2f91d9f23d9254797018863065d6ee51e4e0acd2a5efeaa65609209eaeeedde0160974bfaeb9c0ac6e651c3a9e7c0e2bd43fe48f4dd8fb8135673cdc0fcf20b7c7989735fcb39314957dc8030cea468b61be095180911e8005107364e8d0b78ef3785", 0x75, 0x44000084, 0x0, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x0) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): act the performance. Setting the MTU to 1532 would solve the problem. [ 1916.774806][T31435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.829308][T31435] hsr_slave_0: entered promiscuous mode [ 1916.837061][T31435] hsr_slave_1: entered promiscuous mode [ 1916.844529][T11251] usb 9-1: new full-speed USB device number 87 using dummy_hcd [ 1916.844547][T31435] debugfs: 'hsr0' already exists in 'hsr' [ 1916.844569][T31435] Cannot create hsr debugfs directory [ 1916.894195][T11251] usb 9-1: device descriptor read/8, error -71 [ 1917.004161][T11251] usb usb9-port1: unable to enumerate USB device [ 1917.774177][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1917.844076][T28645] Bluetooth: hci3: command tx timeout [ 1917.972013][T18591] bridge_slave_1: left allmulticast mode [ 1917.983425][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.002545][T18591] bridge_slave_0: left allmulticast mode [ 1918.009675][T18591] bridge_slave_0: left promiscuous mode [ 1918.015939][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.492715][T18591] dvmrp1 (unregistering): left allmulticast mode [ 1918.804355][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1919.208102][T18591] bond0 (unregistering): (slave 56): Releasing backup interface [ 1919.218099][T18591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.263572][T18591] bond0 (unregistering): Released all slaves [ 1919.828020][T18591] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1919.836558][T18591] bond2 (unregistering): left promiscuous mode [ 1919.842712][T18591] bond2 (unregistering): left allmulticast mode [ 1919.844034][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1919.850856][T18591] bond1 (unregistering): Released all slaves [ 1919.924666][T28645] Bluetooth: hci3: command tx timeout [ 1920.025537][T18591] bond2 (unregistering): Released all slaves [ 1920.064226][T31468] netlink: 'syz.8.7001': attribute type 5 has an invalid length. [ 1920.175434][T18591] tipc: Left network mode [ 1920.201081][T31489] FAULT_INJECTION: forcing a failure. [ 1920.201081][T31489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1920.220876][T31489] CPU: 1 UID: 0 PID: 31489 Comm: syz.8.7003 Not tainted syzkaller #0 PREEMPT(full) [ 1920.220898][T31489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1920.220906][T31489] Call Trace: [ 1920.220911][T31489] [ 1920.220916][T31489] dump_stack_lvl+0x189/0x250 [ 1920.220933][T31489] ? __pfx____ratelimit+0x10/0x10 [ 1920.220946][T31489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.220958][T31489] ? __pfx__printk+0x10/0x10 [ 1920.220968][T31489] ? __might_fault+0xb0/0x130 [ 1920.220989][T31489] should_fail_ex+0x414/0x560 [ 1920.221008][T31489] _copy_from_iter+0x1de/0x1790 [ 1920.221027][T31489] ? rcu_is_watching+0x15/0xb0 [ 1920.221041][T31489] ? kmalloc_reserve+0xbd/0x290 [ 1920.221054][T31489] ? __pfx__copy_from_iter+0x10/0x10 [ 1920.221070][T31489] ? __build_skb_around+0x262/0x3f0 [ 1920.221083][T31489] ? netlink_sendmsg+0x642/0xb30 [ 1920.221094][T31489] ? skb_put+0x11b/0x210 [ 1920.221107][T31489] netlink_sendmsg+0x6b2/0xb30 [ 1920.221123][T31489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1920.221136][T31489] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1920.221153][T31489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1920.221162][T31489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1920.221174][T31489] __sock_sendmsg+0x21c/0x270 [ 1920.221191][T31489] ____sys_sendmsg+0x505/0x830 [ 1920.221207][T31489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1920.221224][T31489] ? import_iovec+0x74/0xa0 [ 1920.221236][T31489] ___sys_sendmsg+0x21f/0x2a0 [ 1920.221250][T31489] ? __pfx____sys_sendmsg+0x10/0x10 [ 1920.221281][T31489] ? __fget_files+0x2a/0x420 [ 1920.221290][T31489] ? __fget_files+0x3a0/0x420 [ 1920.221305][T31489] __x64_sys_sendmsg+0x19b/0x260 [ 1920.221319][T31489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1920.221337][T31489] ? __pfx_ksys_write+0x10/0x10 [ 1920.221353][T31489] ? do_syscall_64+0xbe/0xfa0 [ 1920.221368][T31489] do_syscall_64+0xfa/0xfa0 [ 1920.221380][T31489] ? lockdep_hardirqs_on+0x9c/0x150 [ 1920.221393][T31489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.221403][T31489] ? clear_bhb_loop+0x60/0xb0 [ 1920.221415][T31489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.221425][T31489] RIP: 0033:0x7fa1b018eec9 [ 1920.221435][T31489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1920.221444][T31489] RSP: 002b:00007fa1b1029038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1920.221456][T31489] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018eec9 [ 1920.221464][T31489] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1920.221471][T31489] RBP: 00007fa1b1029090 R08: 0000000000000000 R09: 0000000000000000 [ 1920.221477][T31489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1920.221483][T31489] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 1920.221500][T31489] [ 1920.261244][T31435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1920.542486][T31435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1920.631733][T31435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1920.705323][T31435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1920.884537][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1921.001953][T31435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1921.166433][T31435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.188131][T18585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.195263][T18585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.224022][T31511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.233619][T31511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.280814][T18591] hsr_slave_0: left promiscuous mode [ 1921.292984][T18591] hsr_slave_1: left promiscuous mode [ 1921.299666][T18591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1921.307812][T18591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1921.441153][T31519] netlink: 14436 bytes leftover after parsing attributes in process `syz.8.7012'. [ 1921.460075][T31519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1921.923768][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1922.030078][T28645] Bluetooth: hci3: command tx timeout [ 1922.047405][T18591] ` (unregistering): Port device team_slave_1 removed [ 1922.249318][T18591] ` (unregistering): Port device team_slave_0 removed [ 1922.964067][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1923.033816][T11250] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1923.168190][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.175364][T18585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.215525][T11250] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1923.225633][T11250] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1923.235937][T11250] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1923.251418][T11250] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1923.261516][T11250] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1923.271788][T11250] usb 9-1: Product: syz [ 1923.276568][T11250] usb 9-1: Manufacturer: syz [ 1923.319454][T11250] cdc_wdm 9-1:1.0: skipping garbage [ 1923.332052][T11250] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1923.505569][T11250] usb 9-1: USB disconnect, device number 88 [ 1923.873732][T11250] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1924.003852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1924.004013][ T30] audit: type=1326 audit(1760145914.033:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.040588][ T30] audit: type=1326 audit(1760145914.033:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.066721][ T30] audit: type=1326 audit(1760145914.033:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.089669][T11250] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1924.099882][T11250] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1924.109757][T28645] Bluetooth: hci3: command tx timeout [ 1924.115199][ T30] audit: type=1326 audit(1760145914.033:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.115285][T11250] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1924.152297][T11250] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1924.161444][T11250] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1924.170832][T11250] usb 9-1: Product: syz [ 1924.173989][ T30] audit: type=1326 audit(1760145914.033:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.175327][T11250] usb 9-1: Manufacturer: syz [ 1924.214782][ T30] audit: type=1326 audit(1760145914.033:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.238395][T11250] cdc_wdm 9-1:1.0: skipping garbage [ 1924.243611][T11250] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1924.264863][ T30] audit: type=1326 audit(1760145914.033:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.309627][ T30] audit: type=1326 audit(1760145914.033:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.353907][ T30] audit: type=1326 audit(1760145914.033:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.376805][ T30] audit: type=1326 audit(1760145914.033:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31546 comm="syz.9.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1924.427531][T11250] usb 9-1: USB disconnect, device number 89 [ 1924.567022][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7022'. [ 1924.905588][T31435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1925.026750][T31435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1925.044097][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1925.212241][T31435] veth0_vlan: entered promiscuous mode [ 1925.226002][T31561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7023'. [ 1925.227353][T31561] netlink: 'syz.9.7023': attribute type 51 has an invalid length. [ 1925.358522][T31561] macvlan0: entered promiscuous mode [ 1925.376460][T31435] veth1_vlan: entered promiscuous mode [ 1925.467322][T31435] veth0_macvtap: entered promiscuous mode [ 1925.469747][T31435] veth1_macvtap: entered promiscuous mode [ 1925.516789][T31435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1925.523528][T31435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1925.531487][T17896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.531599][T17896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.531698][T17896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.531779][T17896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.855871][T18591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.873722][T18591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.906444][T17896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.916119][T17896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.083818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1927.124138][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1927.991273][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.036996][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.066039][T31595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.103806][T31595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.163857][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1929.002044][T31628] netlink: 'syz.4.7045': attribute type 13 has an invalid length. [ 1929.060390][T31628] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7045'. [ 1929.174110][T31628] syz_tun: refused to change device tx_queue_len [ 1929.203947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1929.506532][T31638] syzkaller0: entered promiscuous mode [ 1929.512256][T31638] syzkaller0: entered allmulticast mode [ 1929.815427][T31642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7048'. [ 1930.243850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1930.775029][T11251] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1930.936335][T11251] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1930.945773][T11251] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1930.962626][T11251] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1930.981284][T11251] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1930.991667][T11251] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1931.000058][T11251] usb 6-1: Product: syz [ 1931.004988][T11251] usb 6-1: Manufacturer: syz [ 1931.019797][T11251] cdc_wdm 6-1:1.0: skipping garbage [ 1931.027252][T11251] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1931.115232][T31666] FAULT_INJECTION: forcing a failure. [ 1931.115232][T31666] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.133872][T31666] CPU: 1 UID: 0 PID: 31666 Comm: syz.8.7058 Not tainted syzkaller #0 PREEMPT(full) [ 1931.133900][T31666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1931.133913][T31666] Call Trace: [ 1931.133921][T31666] [ 1931.133931][T31666] dump_stack_lvl+0x189/0x250 [ 1931.133959][T31666] ? __pfx____ratelimit+0x10/0x10 [ 1931.133992][T31666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1931.134013][T31666] ? __pfx__printk+0x10/0x10 [ 1931.134048][T31666] should_fail_ex+0x414/0x560 [ 1931.134078][T31666] should_failslab+0xa8/0x100 [ 1931.134100][T31666] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1931.134125][T31666] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1931.134150][T31666] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1931.134173][T31666] ? sctp_add_bind_addr+0x8c/0x370 [ 1931.134204][T31666] sctp_add_bind_addr+0x8c/0x370 [ 1931.134233][T31666] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1931.134262][T31666] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1931.134292][T31666] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1931.134319][T31666] ? sctp_v6_is_any+0x64/0x80 [ 1931.134347][T31666] ? sctp_copy_one_addr+0x93/0x360 [ 1931.134375][T31666] sctp_bind_addr_copy+0xb3/0x3c0 [ 1931.134401][T31666] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1931.134427][T31666] sctp_connect_new_asoc+0x2e0/0x690 [ 1931.134460][T31666] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1931.134488][T31666] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1931.134518][T31666] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1931.134538][T31666] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1931.134564][T31666] sctp_sendmsg+0x155c/0x2810 [ 1931.134606][T31666] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1931.134639][T31666] ? aa_sk_perm+0x81e/0x950 [ 1931.134669][T31666] ? __pfx_aa_sk_perm+0x10/0x10 [ 1931.134694][T31666] ? sock_rps_record_flow+0x19/0x410 [ 1931.134714][T31666] ? inet_sendmsg+0x2f4/0x370 [ 1931.134734][T31666] __sock_sendmsg+0x19c/0x270 [ 1931.134765][T31666] __sys_sendto+0x3bd/0x520 [ 1931.134787][T31666] ? __pfx___sys_sendto+0x10/0x10 [ 1931.134804][T31666] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1931.134841][T31666] ? __fget_files+0x3a0/0x420 [ 1931.134868][T31666] ? ksys_write+0x22a/0x250 [ 1931.134896][T31666] ? __pfx_ksys_write+0x10/0x10 [ 1931.134927][T31666] __x64_sys_sendto+0xde/0x100 [ 1931.134953][T31666] do_syscall_64+0xfa/0xfa0 [ 1931.134984][T31666] ? lockdep_hardirqs_on+0x9c/0x150 [ 1931.135008][T31666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.135028][T31666] ? clear_bhb_loop+0x60/0xb0 [ 1931.135053][T31666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.135073][T31666] RIP: 0033:0x7fa1b018eec9 [ 1931.135092][T31666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1931.135109][T31666] RSP: 002b:00007fa1b1029038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1931.135130][T31666] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018eec9 [ 1931.135145][T31666] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000005 [ 1931.135158][T31666] RBP: 00007fa1b1029090 R08: 0000200000000140 R09: 000000000000001c [ 1931.135171][T31666] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1931.135183][T31666] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 1931.135217][T31666] [ 1931.284035][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1931.289394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1931.470608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1931.576627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1931.750270][T26701] usb 6-1: USB disconnect, device number 80 [ 1931.812481][T31669] syzkaller0: entered promiscuous mode [ 1931.818054][T31669] syzkaller0: entered allmulticast mode [ 1931.883203][T31674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.894921][T31674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.909665][T31674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1931.918943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.093865][T26701] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1932.189053][T31680] debugfs: '!' already exists in 'ieee80211' [ 1932.248477][T26701] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1932.285135][T26701] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1932.323950][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1932.333827][T26701] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1932.357227][T26701] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1932.366447][T26701] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1932.379383][T26701] usb 6-1: Product: syz [ 1932.383559][T26701] usb 6-1: Manufacturer: syz [ 1932.443418][T26701] cdc_wdm 6-1:1.0: skipping garbage [ 1932.458346][T26701] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1932.645402][T26701] usb 6-1: USB disconnect, device number 81 [ 1932.743765][T11233] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1932.903900][T11233] usb 9-1: Using ep0 maxpacket: 16 [ 1932.912197][T11233] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1932.928381][T11233] usb 9-1: config 3 has an invalid interface number: 216 but max is 0 [ 1932.937140][T11233] usb 9-1: config 3 has no interface number 0 [ 1932.943391][T11233] usb 9-1: config 3 interface 216 has no altsetting 0 [ 1933.011861][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1933.011879][ T30] audit: type=1326 audit(1760145923.043:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.042960][ T30] audit: type=1326 audit(1760145923.043:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.066191][T11233] usb 9-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 1933.075624][T11233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.091690][T11233] usb 9-1: Product: syz [ 1933.101977][T11233] usb 9-1: Manufacturer: syz [ 1933.109984][T11233] usb 9-1: SerialNumber: syz [ 1933.185801][ T30] audit: type=1326 audit(1760145923.223:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.208198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.269705][ T30] audit: type=1326 audit(1760145923.223:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.293239][ T30] audit: type=1326 audit(1760145923.223:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.322465][ T30] audit: type=1326 audit(1760145923.353:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.353412][ T30] audit: type=1326 audit(1760145923.353:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.376435][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1933.444717][ T30] audit: type=1326 audit(1760145923.353:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.531857][T31703] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7064'. [ 1933.591344][ T30] audit: type=1326 audit(1760145923.383:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.623873][ T30] audit: type=1326 audit(1760145923.383:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31692 comm="syz.9.7065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08378eec9 code=0x7ffc0000 [ 1933.646331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1933.928698][T18591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1933.936863][T18591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.404369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1935.180757][T11233] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:3.216/input/input170 [ 1935.279187][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.282406][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.295549][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.305542][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.374388][T21853] bcm5974 9-1:3.216: could not read from device [ 1935.395499][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.396384][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.419049][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.420383][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.420926][ T5184] bcm5974 9-1:3.216: could not read from device [ 1935.458810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1935.491926][T11233] usb 9-1: USB disconnect, device number 90 [ 1935.681614][T31724] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7071'. [ 1935.708412][T31724] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7071'. [ 1935.775790][T31728] fuse: Unknown parameter '0x0000000000000003' [ 1935.868080][T31728] tipc: Enabled bearer , priority 0 [ 1935.884440][T31728] syzkaller0: entered promiscuous mode [ 1935.898138][T31728] syzkaller0: entered allmulticast mode [ 1935.991092][T31727] tipc: Resetting bearer [ 1936.034097][T31727] tipc: Disabling bearer [ 1936.483905][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1936.507672][T11250] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1936.666235][T11250] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1936.720415][T11250] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1936.740438][T11250] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1936.824282][T11250] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1936.833496][T11250] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1936.853933][T11250] usb 9-1: Product: syz [ 1936.858110][T11250] usb 9-1: Manufacturer: syz [ 1936.892148][T11250] cdc_wdm 9-1:1.0: skipping garbage [ 1936.905626][T11250] cdc_wdm 9-1:1.0: skipping garbage [ 1936.911400][T11250] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1937.049472][T31747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1937.119397][T11241] usb 9-1: USB disconnect, device number 91 [ 1937.433815][T11241] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1937.462551][T31759] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7081'. [ 1937.476495][T31759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1937.524021][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1937.646857][T11241] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1937.655712][T11241] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1937.665170][T11241] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1937.679909][T11241] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1937.690539][T11241] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1937.699480][T11241] usb 9-1: Product: syz [ 1937.704935][T11241] usb 9-1: Manufacturer: syz [ 1937.720811][T11241] cdc_wdm 9-1:1.0: skipping garbage [ 1937.726905][T11241] cdc_wdm 9-1:1.0: skipping garbage [ 1937.732190][T11241] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1937.852545][T31763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1937.896560][T31763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1937.938343][T26701] usb 9-1: USB disconnect, device number 92 [ 1937.962118][T31763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.970866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.226797][T31768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1938.513839][T11250] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1938.563835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1938.715494][T11250] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.728489][T11250] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.739270][T11250] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1938.753540][T11250] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1938.753855][T11241] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1938.762845][T11250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.766195][T11250] usb 10-1: config 0 descriptor?? [ 1938.914374][T11241] usb 9-1: device descriptor read/64, error -71 [ 1939.093836][T11233] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 1939.109818][T31784] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1939.237643][T11250] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1939.264080][T11233] usb 6-1: device descriptor read/64, error -71 [ 1939.270416][T11241] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1939.417117][T11241] usb 9-1: device descriptor read/64, error -71 [ 1939.519745][T11233] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 1939.544013][T11241] usb usb9-port1: attempt power cycle [ 1939.604010][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1939.663765][T11233] usb 6-1: device descriptor read/64, error -71 [ 1939.802089][T11233] usb usb6-port1: attempt power cycle [ 1939.894756][T11241] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1939.924547][T11241] usb 9-1: device descriptor read/8, error -71 [ 1940.046176][T31789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1940.056243][T31789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.166865][T11241] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1940.185772][T11233] usb 6-1: new low-speed USB device number 84 using dummy_hcd [ 1940.194445][T11241] usb 9-1: device descriptor read/8, error -71 [ 1940.214633][T11233] usb 6-1: device descriptor read/8, error -71 [ 1940.304071][T11241] usb usb9-port1: unable to enumerate USB device [ 1940.453872][T11233] usb 6-1: new low-speed USB device number 85 using dummy_hcd [ 1940.474402][T11233] usb 6-1: device descriptor read/8, error -71 [ 1940.585176][T11233] usb usb6-port1: unable to enumerate USB device [ 1940.643872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1940.786606][T31794] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7093'. [ 1940.955458][T31801] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7095'. [ 1941.435165][T26701] usb 10-1: USB disconnect, device number 73 [ 1941.623254][T31808] FAULT_INJECTION: forcing a failure. [ 1941.623254][T31808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1941.636872][T31808] CPU: 0 UID: 0 PID: 31808 Comm: syz.8.7098 Not tainted syzkaller #0 PREEMPT(full) [ 1941.636899][T31808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1941.636912][T31808] Call Trace: [ 1941.636920][T31808] [ 1941.636929][T31808] dump_stack_lvl+0x189/0x250 [ 1941.636956][T31808] ? __pfx____ratelimit+0x10/0x10 [ 1941.636981][T31808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1941.637003][T31808] ? __pfx__printk+0x10/0x10 [ 1941.637035][T31808] should_fail_ex+0x414/0x560 [ 1941.637064][T31808] _copy_to_user+0x31/0xb0 [ 1941.637087][T31808] simple_read_from_buffer+0xe1/0x170 [ 1941.637121][T31808] proc_fail_nth_read+0x1b3/0x220 [ 1941.637148][T31808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1941.637176][T31808] ? rw_verify_area+0x2a6/0x4d0 [ 1941.637213][T31808] ? __lock_acquire+0xab9/0xd20 [ 1941.637231][T31808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1941.637257][T31808] vfs_read+0x1fd/0xa30 [ 1941.637281][T31808] ? fdget_pos+0x247/0x320 [ 1941.637304][T31808] ? __pfx___mutex_lock+0x10/0x10 [ 1941.637332][T31808] ? __pfx_vfs_read+0x10/0x10 [ 1941.637360][T31808] ? __fget_files+0x2a/0x420 [ 1941.637382][T31808] ? __fget_files+0x3a0/0x420 [ 1941.637399][T31808] ? __fget_files+0x2a/0x420 [ 1941.637426][T31808] ksys_read+0x145/0x250 [ 1941.637454][T31808] ? __pfx_ksys_read+0x10/0x10 [ 1941.637485][T31808] ? do_syscall_64+0xbe/0xfa0 [ 1941.637511][T31808] do_syscall_64+0xfa/0xfa0 [ 1941.637532][T31808] ? lockdep_hardirqs_on+0x9c/0x150 [ 1941.637555][T31808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.637572][T31808] ? clear_bhb_loop+0x60/0xb0 [ 1941.637593][T31808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.637610][T31808] RIP: 0033:0x7fa1b018d8dc [ 1941.637628][T31808] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1941.637644][T31808] RSP: 002b:00007fa1b1029030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1941.637663][T31808] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018d8dc [ 1941.637677][T31808] RDX: 000000000000000f RSI: 00007fa1b10290a0 RDI: 0000000000000004 [ 1941.637688][T31808] RBP: 00007fa1b1029090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.637700][T31808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.637711][T31808] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 1941.637742][T31808] [ 1941.876287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1942.076732][T31817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1942.086951][T31817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1942.141492][T31821] openvswitch: netlink: Flow actions attr not present in new flow. [ 1942.154493][T26701] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1942.336376][T26701] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1942.350551][T26701] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1942.366803][T26701] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1942.376860][T26701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.385204][T26701] usb 9-1: Product: syz [ 1942.389593][T26701] usb 9-1: Manufacturer: syz [ 1942.398487][T26701] usb 9-1: SerialNumber: syz [ 1942.479197][T26701] usb 9-1: config 0 descriptor?? [ 1942.487689][T31810] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1942.503900][T31810] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1942.740075][T31810] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1942.766136][T31810] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1942.884178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1943.188417][T31844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7110'. [ 1943.223478][T31810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.235197][T31810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.248816][T26701] Error reading MAC address [ 1943.474347][T11233] usb 9-1: USB disconnect, device number 97 [ 1943.843312][T31867] netlink: 'syz.5.7117': attribute type 4 has an invalid length. [ 1943.851576][T31867] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7117'. [ 1943.934069][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1944.963818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1946.004035][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1946.841952][T11241] IPVS: starting estimator thread 0... [ 1946.945844][T31919] IPVS: using max 49 ests per chain, 117600 per kthread [ 1946.993405][T31899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1947.002751][T31899] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1947.035634][T31899] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1947.044494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1947.089593][T31917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.164340][T31917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.182076][T31917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1947.193026][T31917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1947.232767][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1947.232785][ T30] audit: type=1326 audit(1760145937.263:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.286271][ T30] audit: type=1326 audit(1760145937.263:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.328108][T31926] netlink: 14220 bytes leftover after parsing attributes in process `syz.8.7135'. [ 1947.353325][ T30] audit: type=1326 audit(1760145937.263:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.387394][T31929] netlink: 14436 bytes leftover after parsing attributes in process `syz.5.7136'. [ 1947.398438][ T30] audit: type=1326 audit(1760145937.263:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.454787][ T30] audit: type=1326 audit(1760145937.263:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.503790][ T30] audit: type=1326 audit(1760145937.303:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.534386][ T30] audit: type=1326 audit(1760145937.303:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.556912][ T30] audit: type=1326 audit(1760145937.303:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.579676][ T30] audit: type=1326 audit(1760145937.303:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.604743][ T30] audit: type=1326 audit(1760145937.303:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31923 comm="syz.5.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1947.898710][T31943] syzkaller0: entered promiscuous mode [ 1947.930801][T31943] syzkaller0: entered allmulticast mode [ 1948.084060][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1948.884775][T31932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1948.932703][T31954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1948.955223][T28645] Bluetooth: hci3: command 0x0c1a tx timeout [ 1948.978629][T31952] tipc: Resetting bearer [ 1949.124418][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1950.063818][T11241] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1950.163993][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1950.569872][T31983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7147'. [ 1950.688658][T11241] usb 10-1: config 0 has an invalid interface number: 137 but max is 0 [ 1950.697097][T11241] usb 10-1: config 0 has no interface number 0 [ 1950.704084][T11241] usb 10-1: too many endpoints for config 0 interface 137 altsetting 8: 246, using maximum allowed: 30 [ 1950.717435][T11241] usb 10-1: config 0 interface 137 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 1950.731429][T11241] usb 10-1: config 0 interface 137 has no altsetting 0 [ 1950.739321][T11241] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1950.756972][T11241] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.778455][T11241] usb 10-1: config 0 descriptor?? [ 1950.963864][T28645] Bluetooth: hci3: command 0x0c1a tx timeout [ 1951.203752][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1951.388314][T31988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.404107][T11233] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1951.490044][T31988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1951.573960][T11233] usb 9-1: Using ep0 maxpacket: 16 [ 1951.581074][T11233] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1951.592669][T11233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1951.608247][T11233] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1951.617469][T11233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.625676][T11233] usb 9-1: Product: syz [ 1951.629869][T11233] usb 9-1: Manufacturer: syz [ 1951.634539][T11233] usb 9-1: SerialNumber: syz [ 1951.641732][T11233] usb 9-1: config 0 descriptor?? [ 1951.651154][T11233] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1951.663059][T11233] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1952.007647][T31996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7152'. [ 1952.244084][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1952.258006][T11233] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1952.319902][T32002] input: syz0 as /devices/virtual/input/input173 [ 1952.325727][T11233] em28xx 9-1:0.0: Config register raw data: 0x1b [ 1952.816543][T11233] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1952.827939][T11233] em28xx 9-1:0.0: No AC97 audio processor [ 1952.839505][T11233] usb 9-1: USB disconnect, device number 98 [ 1952.846994][T11233] em28xx 9-1:0.0: Disconnecting em28xx [ 1952.853516][T11233] em28xx 9-1:0.0: Freeing device [ 1953.044253][T28645] Bluetooth: hci3: command 0x0c1a tx timeout [ 1953.246265][T11241] usb 10-1: string descriptor 0 read error: -71 [ 1953.256516][T11241] cp210x 10-1:0.137: cp210x converter detected [ 1953.271878][T11241] cp210x 10-1:0.137: failed to get vendor val 0x370b size 1: -71 [ 1953.283776][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1953.314298][T11241] cp210x 10-1:0.137: querying part number failed [ 1953.337703][T11241] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1953.363485][T11241] usb 10-1: USB disconnect, device number 74 [ 1953.380442][T11241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1953.400467][T11241] cp210x 10-1:0.137: device disconnected [ 1953.598608][T32010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7156'. [ 1954.166219][T32019] netlink: 'syz.5.7159': attribute type 4 has an invalid length. [ 1954.324072][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1954.524868][T32031] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7164'. [ 1954.548815][T32033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.553909][T26701] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1954.568387][T32033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.693864][T26701] usb 6-1: device descriptor read/64, error -71 [ 1954.853996][T11251] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1954.943820][T26701] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1955.021014][T11251] usb 10-1: Using ep0 maxpacket: 16 [ 1955.041065][T11251] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1955.053269][T11251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1955.072862][T11251] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1955.082240][T26701] usb 6-1: device descriptor read/64, error -71 [ 1955.088928][T11251] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.098615][T11251] usb 10-1: Product: syz [ 1955.106970][T11251] usb 10-1: Manufacturer: syz [ 1955.111654][T11251] usb 10-1: SerialNumber: syz [ 1955.120309][T11251] usb 10-1: config 0 descriptor?? [ 1955.134221][T11251] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1955.144352][T11251] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1955.204159][T26701] usb usb6-port1: attempt power cycle [ 1955.322300][T32046] input: syz1 as /devices/virtual/input/input174 [ 1955.363877][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1955.518172][T32045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7171'. [ 1955.573869][T26701] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1955.598085][T26701] usb 6-1: device descriptor read/8, error -71 [ 1955.788235][T11251] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1955.844072][T26701] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1955.862600][T11251] em28xx 10-1:0.0: Config register raw data: 0x1b [ 1955.875474][T26701] usb 6-1: device descriptor read/8, error -71 [ 1955.904800][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1955.904812][ T30] audit: type=1326 audit(1760145945.943:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1955.934632][ T30] audit: type=1326 audit(1760145945.943:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1955.964483][ T30] audit: type=1326 audit(1760145946.003:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1955.988078][T26701] usb usb6-port1: unable to enumerate USB device [ 1955.997314][ T30] audit: type=1326 audit(1760145946.003:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.025401][ T30] audit: type=1326 audit(1760145946.003:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.055242][ T30] audit: type=1326 audit(1760145946.003:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.080685][ T30] audit: type=1326 audit(1760145946.003:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.106536][ T30] audit: type=1326 audit(1760145946.003:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.131010][ T30] audit: type=1326 audit(1760145946.003:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.154189][ T30] audit: type=1326 audit(1760145946.003:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32058 comm="syz.4.7174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1956.225888][T11251] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1956.237110][T11251] em28xx 10-1:0.0: No AC97 audio processor [ 1956.250534][T11251] usb 10-1: USB disconnect, device number 75 [ 1956.268076][T11251] em28xx 10-1:0.0: Disconnecting em28xx [ 1956.279148][T11251] em28xx 10-1:0.0: Freeing device [ 1956.403932][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1956.522322][T32063] ip6tnl1: entered promiscuous mode [ 1956.574015][T32063] ip6tnl1: entered allmulticast mode [ 1957.443833][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1958.384223][T32096] syzkaller0: entered promiscuous mode [ 1958.390054][T32096] syzkaller0: entered allmulticast mode [ 1958.484037][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1958.526059][T32100] fuse: Unknown parameter 'goup_id' [ 1958.564139][T16061] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1958.705180][T16061] usb 6-1: device descriptor read/64, error -71 [ 1958.954719][T16061] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1959.094277][T16061] usb 6-1: device descriptor read/64, error -71 [ 1959.204494][T16061] usb usb6-port1: attempt power cycle [ 1959.329979][T32116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.346473][T32116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.523824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1959.557180][T16061] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1959.654293][T16061] usb 6-1: device descriptor read/8, error -71 [ 1959.751892][T32123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.923900][T16061] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1959.944418][T16061] usb 6-1: device descriptor read/8, error -71 [ 1959.971039][T32123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.015431][T32125] dvmrp18: entered allmulticast mode [ 1960.022768][T32126] netlink: 277 bytes leftover after parsing attributes in process `syz.9.7192'. [ 1960.127501][T16061] usb usb6-port1: unable to enumerate USB device [ 1960.564069][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1961.613887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1961.661937][T32146] syz_tun: entered allmulticast mode [ 1961.679602][T32145] syz_tun: left allmulticast mode [ 1961.991155][T32159] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 1962.644063][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1963.408967][T32167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.424160][T32167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.437724][T32167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.447947][T32167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.613709][T11233] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1963.683735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1963.764935][T11233] usb 6-1: Using ep0 maxpacket: 16 [ 1963.775421][T11233] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1963.784769][T11233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.795228][T11233] usb 6-1: config 0 has no interface number 0 [ 1963.803722][T11233] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1963.813185][T11233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.821690][T11233] usb 6-1: Product: syz [ 1963.827405][T11233] usb 6-1: Manufacturer: syz [ 1963.832088][T11233] usb 6-1: SerialNumber: syz [ 1963.850780][T11233] usb 6-1: config 0 descriptor?? [ 1963.860505][T11233] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 1964.091358][T32180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.102837][T32180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.446578][T11251] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1964.540954][T32190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7213'. [ 1964.550150][T32190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7213'. [ 1964.565722][T32190] macvlan2: entered promiscuous mode [ 1964.603815][T11251] usb 9-1: Using ep0 maxpacket: 8 [ 1964.610203][T11251] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1964.619020][T11251] usb 9-1: config 179 has no interface number 0 [ 1964.625521][T11251] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1964.636824][T11251] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1964.648818][T11251] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1964.660277][T11251] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1964.671942][T11251] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1964.685511][T11251] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1964.694765][T11251] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.711004][T32184] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1964.724429][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1964.842964][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7213'. [ 1965.388544][T32205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.452282][T32205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.503306][T32205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.528605][T32205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.763882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1966.445766][T16061] usb 6-1: USB disconnect, device number 94 [ 1966.489308][T32211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.501865][T32211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.804007][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1966.943948][T16061] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1967.104029][T16061] usb 6-1: Using ep0 maxpacket: 32 [ 1967.116003][T16061] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 1967.125410][T16061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.133482][T16061] usb 6-1: Product: syz [ 1967.138481][T16061] usb 6-1: Manufacturer: syz [ 1967.143163][T16061] usb 6-1: SerialNumber: syz [ 1967.155838][T16061] usb 6-1: config 0 descriptor?? [ 1967.399774][ T24] usb 9-1: USB disconnect, device number 99 [ 1967.399838][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1967.414117][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 1967.432176][T32226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.632114][T32226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.853764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1968.147622][T32226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.251582][T32226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.257402][T16061] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -110 [ 1968.468070][T32241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.587945][T32241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.894052][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1969.113828][T26701] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1969.275502][T26701] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1969.286325][T26701] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1969.297309][T26701] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1969.307540][T26701] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1969.322562][T26701] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1969.332153][T26701] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1969.340192][T26701] usb 9-1: Product: syz [ 1969.344487][T26701] usb 9-1: Manufacturer: syz [ 1969.354253][T26701] cdc_wdm 9-1:1.0: skipping garbage [ 1969.359644][T26701] cdc_wdm 9-1:1.0: skipping garbage [ 1969.365594][T26701] cdc_wdm 9-1:1.0: skipping garbage [ 1969.370936][T26701] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1969.559432][T11233] usb 9-1: USB disconnect, device number 100 [ 1969.895960][T11233] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1969.923735][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1970.046562][T11241] usb 6-1: USB disconnect, device number 95 [ 1970.059860][T11233] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1970.071079][T11233] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1970.082052][T11233] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1970.093142][T11233] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1970.108409][T11233] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1970.119462][T11233] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1970.127897][T11233] usb 9-1: Product: syz [ 1970.132171][T11233] usb 9-1: Manufacturer: syz [ 1970.141529][T11233] cdc_wdm 9-1:1.0: skipping garbage [ 1970.147549][T11233] cdc_wdm 9-1:1.0: skipping garbage [ 1970.152834][T11233] cdc_wdm 9-1:1.0: skipping garbage [ 1970.158381][T11233] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1970.346406][T26701] usb 9-1: USB disconnect, device number 101 [ 1970.964060][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1972.003845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1972.016898][T32291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7243'. [ 1972.243211][T32297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.257883][T32297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.022676][T32306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.040499][T32306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.054090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1973.067880][T32306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.076585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.086790][T11233] usb 9-1: new full-speed USB device number 102 using dummy_hcd [ 1973.250839][T32309] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1973.258985][T11233] usb 9-1: device descriptor read/64, error -71 [ 1973.286323][T32309] CPU: 1 UID: 0 PID: 32309 Comm: syz.4.7247 Not tainted syzkaller #0 PREEMPT(full) [ 1973.286353][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1973.286367][T32309] Call Trace: [ 1973.286377][T32309] [ 1973.286386][T32309] dump_stack_lvl+0x189/0x250 [ 1973.286418][T32309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1973.286440][T32309] ? __pfx__printk+0x10/0x10 [ 1973.286468][T32309] ? kernfs_path_from_node+0x2f/0x290 [ 1973.286493][T32309] ? kernfs_path_from_node+0x250/0x290 [ 1973.286517][T32309] ? kernfs_path_from_node+0x2f/0x290 [ 1973.286546][T32309] sysfs_warn_dup+0x8e/0xa0 [ 1973.286571][T32309] sysfs_do_create_link_sd+0xc0/0x110 [ 1973.286598][T32309] device_add_class_symlinks+0x1cf/0x240 [ 1973.286635][T32309] device_add+0x475/0xb50 [ 1973.286671][T32309] wiphy_register+0x1c81/0x2aa0 [ 1973.286716][T32309] ? __pfx_wiphy_register+0x10/0x10 [ 1973.286742][T32309] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1973.286772][T32309] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1973.286817][T32309] ieee80211_register_hw+0x3473/0x40d0 [ 1973.286856][T32309] ? ieee80211_register_hw+0x1451/0x40d0 [ 1973.286889][T32309] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1973.286909][T32309] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1973.286940][T32309] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1973.286970][T32309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1973.287000][T32309] ? __hrtimer_setup+0x187/0x210 [ 1973.287022][T32309] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1973.287053][T32309] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 1973.287107][T32309] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1973.287128][T32309] ? trace_kmalloc+0x1f/0xd0 [ 1973.287150][T32309] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1973.287176][T32309] ? kstrndup+0xbf/0x160 [ 1973.287207][T32309] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1973.287234][T32309] ? __pfx___nla_validate_parse+0x10/0x10 [ 1973.287272][T32309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1973.287300][T32309] ? rcu_is_watching+0x15/0xb0 [ 1973.287323][T32309] ? __nla_parse+0x40/0x60 [ 1973.287353][T32309] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1973.287390][T32309] genl_family_rcv_msg_doit+0x215/0x300 [ 1973.287421][T32309] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1973.287457][T32309] ? bpf_lsm_capable+0x9/0x20 [ 1973.287478][T32309] ? security_capable+0x7e/0x2e0 [ 1973.287506][T32309] genl_rcv_msg+0x60e/0x790 [ 1973.287536][T32309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1973.287558][T32309] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1973.287581][T32309] ? __asan_memcpy+0x40/0x70 [ 1973.287602][T32309] ? __pfx_ref_tracker_free+0x10/0x10 [ 1973.287632][T32309] netlink_rcv_skb+0x208/0x470 [ 1973.287649][T32309] ? __lock_acquire+0xab9/0xd20 [ 1973.287667][T32309] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1973.287691][T32309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1973.287727][T32309] ? down_read+0x1ad/0x2e0 [ 1973.287754][T32309] genl_rcv+0x28/0x40 [ 1973.287775][T32309] netlink_unicast+0x82f/0x9e0 [ 1973.287801][T32309] ? __pfx_netlink_unicast+0x10/0x10 [ 1973.287836][T32309] ? netlink_sendmsg+0x642/0xb30 [ 1973.287853][T32309] ? skb_put+0x11b/0x210 [ 1973.287876][T32309] netlink_sendmsg+0x805/0xb30 [ 1973.287904][T32309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1973.287927][T32309] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1973.287953][T32309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1973.287970][T32309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1973.287989][T32309] __sock_sendmsg+0x21c/0x270 [ 1973.288018][T32309] ____sys_sendmsg+0x505/0x830 [ 1973.288044][T32309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1973.288074][T32309] ? import_iovec+0x74/0xa0 [ 1973.288095][T32309] ___sys_sendmsg+0x21f/0x2a0 [ 1973.288119][T32309] ? __pfx____sys_sendmsg+0x10/0x10 [ 1973.288146][T32309] ? futex_wait+0x285/0x360 [ 1973.288202][T32309] __x64_sys_sendmsg+0x19b/0x260 [ 1973.288226][T32309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1973.288262][T32309] ? do_syscall_64+0xbe/0xfa0 [ 1973.288288][T32309] do_syscall_64+0xfa/0xfa0 [ 1973.288308][T32309] ? lockdep_hardirqs_on+0x9c/0x150 [ 1973.288329][T32309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.288346][T32309] ? clear_bhb_loop+0x60/0xb0 [ 1973.288367][T32309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.288384][T32309] RIP: 0033:0x7f654f78eec9 [ 1973.288401][T32309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1973.288417][T32309] RSP: 002b:00007f655056b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.288437][T32309] RAX: ffffffffffffffda RBX: 00007f654f9e6180 RCX: 00007f654f78eec9 [ 1973.288451][T32309] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000009 [ 1973.288463][T32309] RBP: 00007f654f811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1973.288474][T32309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1973.288485][T32309] R13: 00007f654f9e6218 R14: 00007f654f9e6180 R15: 00007f654fb0fa28 [ 1973.288515][T32309] [ 1973.993779][T11233] usb 9-1: new full-speed USB device number 103 using dummy_hcd [ 1974.094163][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1974.133753][T11233] usb 9-1: device descriptor read/64, error -71 [ 1974.243998][T11233] usb usb9-port1: attempt power cycle [ 1974.543225][T32316] FAULT_INJECTION: forcing a failure. [ 1974.543225][T32316] name failslab, interval 1, probability 0, space 0, times 0 [ 1974.556404][T32316] CPU: 0 UID: 0 PID: 32316 Comm: syz.5.7250 Not tainted syzkaller #0 PREEMPT(full) [ 1974.556420][T32316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1974.556427][T32316] Call Trace: [ 1974.556432][T32316] [ 1974.556437][T32316] dump_stack_lvl+0x189/0x250 [ 1974.556454][T32316] ? __pfx____ratelimit+0x10/0x10 [ 1974.556468][T32316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1974.556479][T32316] ? __pfx__printk+0x10/0x10 [ 1974.556498][T32316] should_fail_ex+0x414/0x560 [ 1974.556514][T32316] should_failslab+0xa8/0x100 [ 1974.556526][T32316] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1974.556541][T32316] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1974.556555][T32316] ? sctp_add_bind_addr+0x8c/0x370 [ 1974.556567][T32316] ? sctp_add_bind_addr+0xb0/0x370 [ 1974.556582][T32316] sctp_add_bind_addr+0x8c/0x370 [ 1974.556607][T32316] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1974.556635][T32316] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1974.556659][T32316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1974.556684][T32316] ? sctp_v6_is_any+0x64/0x80 [ 1974.556706][T32316] ? sctp_copy_one_addr+0x93/0x360 [ 1974.556722][T32316] sctp_bind_addr_copy+0xb3/0x3c0 [ 1974.556736][T32316] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1974.556750][T32316] sctp_connect_new_asoc+0x2e0/0x690 [ 1974.556767][T32316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1974.556782][T32316] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1974.556798][T32316] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1974.556809][T32316] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1974.556823][T32316] sctp_sendmsg+0x155c/0x2810 [ 1974.556845][T32316] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1974.556863][T32316] ? aa_sk_perm+0x81e/0x950 [ 1974.556879][T32316] ? __pfx_aa_sk_perm+0x10/0x10 [ 1974.556894][T32316] ? sock_rps_record_flow+0x19/0x410 [ 1974.556907][T32316] ? inet_sendmsg+0x2f4/0x370 [ 1974.556920][T32316] __sock_sendmsg+0x19c/0x270 [ 1974.556938][T32316] __sys_sendto+0x3bd/0x520 [ 1974.556953][T32316] ? __pfx___sys_sendto+0x10/0x10 [ 1974.556963][T32316] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1974.556985][T32316] ? __fget_files+0x3a0/0x420 [ 1974.557001][T32316] ? ksys_write+0x22a/0x250 [ 1974.557016][T32316] ? __pfx_ksys_write+0x10/0x10 [ 1974.557032][T32316] __x64_sys_sendto+0xde/0x100 [ 1974.557046][T32316] do_syscall_64+0xfa/0xfa0 [ 1974.557059][T32316] ? lockdep_hardirqs_on+0x9c/0x150 [ 1974.557072][T32316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1974.557082][T32316] ? clear_bhb_loop+0x60/0xb0 [ 1974.557095][T32316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1974.557105][T32316] RIP: 0033:0x7ffaf558eec9 [ 1974.557116][T32316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1974.557125][T32316] RSP: 002b:00007ffaf64c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1974.557138][T32316] RAX: ffffffffffffffda RBX: 00007ffaf57e5fa0 RCX: 00007ffaf558eec9 [ 1974.557146][T32316] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000005 [ 1974.557153][T32316] RBP: 00007ffaf64c7090 R08: 0000200000000140 R09: 000000000000001c [ 1974.557160][T32316] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1974.557166][T32316] R13: 00007ffaf57e6038 R14: 00007ffaf57e5fa0 R15: 00007ffaf590fa28 [ 1974.557184][T32316] [ 1974.873564][T11233] usb 9-1: new full-speed USB device number 104 using dummy_hcd [ 1974.895644][T11233] usb 9-1: device descriptor read/8, error -71 [ 1974.943765][T16061] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1975.095940][T16061] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1975.104891][T16061] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1975.115305][T16061] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1975.124651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1975.131664][T16061] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1975.145478][T11233] usb 9-1: new full-speed USB device number 105 using dummy_hcd [ 1975.146484][T16061] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1975.162410][T16061] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1975.170544][T16061] usb 10-1: Product: syz [ 1975.174900][T16061] usb 10-1: Manufacturer: syz [ 1975.223561][T16061] cdc_wdm 10-1:1.0: skipping garbage [ 1975.229406][T16061] cdc_wdm 10-1:1.0: skipping garbage [ 1975.238988][T16061] cdc_wdm 10-1:1.0: skipping garbage [ 1975.244565][T16061] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1975.254974][T11233] usb 9-1: device descriptor read/8, error -71 [ 1975.366350][T11233] usb usb9-port1: unable to enumerate USB device [ 1975.427503][T11233] usb 10-1: USB disconnect, device number 76 [ 1975.804363][T11233] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1975.978330][T11233] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1975.987318][T11233] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1976.008003][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.017905][T11233] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1976.023572][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.039389][T11233] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1976.096963][T11233] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1976.116063][T11233] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1976.134643][T11233] usb 10-1: Product: syz [ 1976.138939][T11233] usb 10-1: Manufacturer: syz [ 1976.153007][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1976.153024][ T30] audit: type=1326 audit(1760145966.183:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.154997][T11233] cdc_wdm 10-1:1.0: skipping garbage [ 1976.163765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1976.182897][T11233] cdc_wdm 10-1:1.0: skipping garbage [ 1976.199746][T11233] cdc_wdm 10-1:1.0: skipping garbage [ 1976.236691][T11233] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1976.246447][T32338] binder: 32337:32338 ioctl c0046209 200000000000000 returned -22 [ 1976.262933][ T30] audit: type=1326 audit(1760145966.183:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.384577][T11233] usb 10-1: USB disconnect, device number 77 [ 1976.410131][ T30] audit: type=1326 audit(1760145966.203:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.437109][ T30] audit: type=1326 audit(1760145966.203:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.461769][ T30] audit: type=1326 audit(1760145966.203:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.493030][ T30] audit: type=1326 audit(1760145966.223:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.515622][ T30] audit: type=1326 audit(1760145966.233:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.538347][ T30] audit: type=1326 audit(1760145966.233:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.566322][ T30] audit: type=1326 audit(1760145966.233:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.589711][ T30] audit: type=1326 audit(1760145966.233:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.5.7257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x7ffc0000 [ 1976.685729][T32347] netlink: 14436 bytes leftover after parsing attributes in process `syz.4.7260'. [ 1976.697739][T32347] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1976.702240][T32349] syz.5.7261 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1976.875543][T32351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.883010][T32351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.898078][T32356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7262'. [ 1977.204007][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1977.888161][T32351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.907906][T32351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1978.128805][T32356] geneve2: entered promiscuous mode [ 1978.134403][T32356] geneve2: entered allmulticast mode [ 1978.243734][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1978.256093][T32377] FAULT_INJECTION: forcing a failure. [ 1978.256093][T32377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1978.273764][T32377] CPU: 0 UID: 0 PID: 32377 Comm: syz.7.7268 Not tainted syzkaller #0 PREEMPT(full) [ 1978.273789][T32377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1978.273800][T32377] Call Trace: [ 1978.273808][T32377] [ 1978.273817][T32377] dump_stack_lvl+0x189/0x250 [ 1978.273841][T32377] ? __pfx____ratelimit+0x10/0x10 [ 1978.273864][T32377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1978.273883][T32377] ? __pfx__printk+0x10/0x10 [ 1978.273904][T32377] ? fs_reclaim_acquire+0x7d/0x100 [ 1978.273939][T32377] should_fail_ex+0x414/0x560 [ 1978.273968][T32377] prepare_alloc_pages+0x213/0x610 [ 1978.274005][T32377] __alloc_frozen_pages_noprof+0x123/0x370 [ 1978.274029][T32377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1978.274064][T32377] alloc_pages_bulk_noprof+0x560/0x710 [ 1978.274097][T32377] ? trace_kmalloc+0x1f/0xd0 [ 1978.274120][T32377] ? copy_splice_read+0x143/0xa50 [ 1978.274153][T32377] copy_splice_read+0x173/0xa50 [ 1978.274187][T32377] ? __pfx_copy_splice_read+0x10/0x10 [ 1978.274204][T32377] ? register_lock_class+0x51/0x320 [ 1978.274218][T32377] ? file_end_write+0xd8/0x250 [ 1978.274234][T32377] ? direct_splice_actor+0x10c/0x160 [ 1978.274251][T32377] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1978.274266][T32377] splice_direct_to_actor+0x4d0/0xcc0 [ 1978.274292][T32377] ? __pfx_direct_splice_actor+0x10/0x10 [ 1978.274308][T32377] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1978.274332][T32377] do_splice_direct+0x181/0x270 [ 1978.274349][T32377] ? __pfx_do_splice_direct+0x10/0x10 [ 1978.274364][T32377] ? common_file_perm+0x1b5/0x230 [ 1978.274379][T32377] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1978.274390][T32377] ? bpf_lsm_file_permission+0x9/0x20 [ 1978.274402][T32377] ? security_file_permission+0x75/0x290 [ 1978.274414][T32377] ? rw_verify_area+0x255/0x4d0 [ 1978.274430][T32377] do_sendfile+0x4da/0x7e0 [ 1978.274441][T32377] ? __pfx_vfs_write+0x10/0x10 [ 1978.274458][T32377] ? __pfx_do_sendfile+0x10/0x10 [ 1978.274469][T32377] ? __fget_files+0x3a0/0x420 [ 1978.274484][T32377] __se_sys_sendfile64+0x13e/0x190 [ 1978.274495][T32377] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1978.274507][T32377] ? do_syscall_64+0xbe/0xfa0 [ 1978.274523][T32377] do_syscall_64+0xfa/0xfa0 [ 1978.274535][T32377] ? lockdep_hardirqs_on+0x9c/0x150 [ 1978.274548][T32377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.274558][T32377] ? clear_bhb_loop+0x60/0xb0 [ 1978.274571][T32377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.274581][T32377] RIP: 0033:0x7f5bb098eec9 [ 1978.274591][T32377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1978.274601][T32377] RSP: 002b:00007f5bb18ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1978.274613][T32377] RAX: ffffffffffffffda RBX: 00007f5bb0be5fa0 RCX: 00007f5bb098eec9 [ 1978.274621][T32377] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000011 [ 1978.274627][T32377] RBP: 00007f5bb18ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.274634][T32377] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 1978.274641][T32377] R13: 00007f5bb0be6038 R14: 00007f5bb0be5fa0 R15: 00007f5bb0d0fa28 [ 1978.274658][T32377] [ 1978.393957][T32378] FAULT_INJECTION: forcing a failure. [ 1978.393957][T32378] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.751827][T32378] CPU: 1 UID: 0 PID: 32378 Comm: syz.5.7269 Not tainted syzkaller #0 PREEMPT(full) [ 1978.751849][T32378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1978.751857][T32378] Call Trace: [ 1978.751862][T32378] [ 1978.751867][T32378] dump_stack_lvl+0x189/0x250 [ 1978.751884][T32378] ? __pfx____ratelimit+0x10/0x10 [ 1978.751897][T32378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1978.751908][T32378] ? __pfx__printk+0x10/0x10 [ 1978.751923][T32378] ? __pfx___might_resched+0x10/0x10 [ 1978.751934][T32378] ? fs_reclaim_acquire+0x7d/0x100 [ 1978.751953][T32378] should_fail_ex+0x414/0x560 [ 1978.751969][T32378] should_failslab+0xa8/0x100 [ 1978.751981][T32378] __kmalloc_noprof+0xcb/0x7f0 [ 1978.751995][T32378] ? sock_kmalloc+0xd6/0x160 [ 1978.752012][T32378] sock_kmalloc+0xd6/0x160 [ 1978.752027][T32378] skcipher_recvmsg+0x571/0x11d0 [ 1978.752051][T32378] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1978.752067][T32378] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1978.752077][T32378] ? security_socket_recvmsg+0x7e/0x2e0 [ 1978.752088][T32378] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1978.752101][T32378] sock_recvmsg+0x22c/0x270 [ 1978.752120][T32378] __sys_recvfrom+0x1f6/0x340 [ 1978.752133][T32378] ? __pfx___sys_recvfrom+0x10/0x10 [ 1978.752144][T32378] ? count_memcg_event_mm+0x21/0x260 [ 1978.752170][T32378] ? exc_page_fault+0x82/0x100 [ 1978.752185][T32378] ? do_user_addr_fault+0xc85/0x1380 [ 1978.752198][T32378] __x64_sys_recvfrom+0xde/0x100 [ 1978.752212][T32378] do_syscall_64+0xfa/0xfa0 [ 1978.752225][T32378] ? lockdep_hardirqs_on+0x9c/0x150 [ 1978.752238][T32378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.752249][T32378] ? clear_bhb_loop+0x60/0xb0 [ 1978.752261][T32378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.752271][T32378] RIP: 0033:0x7ffaf5590c94 [ 1978.752282][T32378] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1978.752291][T32378] RSP: 002b:00007ffaf64c5ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1978.752303][T32378] RAX: ffffffffffffffda RBX: 00007ffaf64c5fc0 RCX: 00007ffaf5590c94 [ 1978.752312][T32378] RDX: 0000000000001000 RSI: 00007ffaf64c6010 RDI: 0000000000000004 [ 1978.752319][T32378] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1978.752325][T32378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1978.752331][T32378] R13: 00007ffaf64c5f68 R14: 00007ffaf64c6010 R15: 0000000000000000 [ 1978.752348][T32378] [ 1978.993938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1979.284027][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1979.285599][T32384] sctp: [Deprecated]: syz.7.7270 (pid 32384) Use of int in maxseg socket option. [ 1979.285599][T32384] Use struct sctp_assoc_value instead [ 1979.384669][T32390] netdevsim netdevsim9: Direct firmware load for x failed with error -2 [ 1979.413440][T32390] netdevsim netdevsim9: Falling back to sysfs fallback for: x [ 1979.520882][T26701] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1979.667892][T32395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.696931][T26701] usb 6-1: Using ep0 maxpacket: 8 [ 1979.710246][T26701] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1979.719662][T26701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.731800][T32408] tipc: Enabling of bearer rejected, failed to enable media [ 1979.787172][T26701] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1979.794363][T26701] pvrusb2: ********** [ 1979.798383][T26701] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1979.819378][T32410] FAULT_INJECTION: forcing a failure. [ 1979.819378][T32410] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.833132][T26701] pvrusb2: Important functionality might not be entirely working. [ 1979.853807][T26701] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1979.871023][T26701] pvrusb2: ********** [ 1979.890721][T32410] CPU: 0 UID: 0 PID: 32410 Comm: syz.8.7279 Not tainted syzkaller #0 PREEMPT(full) [ 1979.890737][T32410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1979.890744][T32410] Call Trace: [ 1979.890750][T32410] [ 1979.890755][T32410] dump_stack_lvl+0x189/0x250 [ 1979.890771][T32410] ? __pfx____ratelimit+0x10/0x10 [ 1979.890785][T32410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1979.890796][T32410] ? __pfx__printk+0x10/0x10 [ 1979.890809][T32410] ? __pfx___might_resched+0x10/0x10 [ 1979.890823][T32410] ? fs_reclaim_acquire+0x7d/0x100 [ 1979.890842][T32410] should_fail_ex+0x414/0x560 [ 1979.890858][T32410] should_failslab+0xa8/0x100 [ 1979.890869][T32410] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1979.890885][T32410] ? rtnl_newlink+0xfb/0x1c80 [ 1979.890895][T32410] ? kernel_text_address+0xa5/0xe0 [ 1979.890914][T32410] rtnl_newlink+0xfb/0x1c80 [ 1979.890923][T32410] ? arch_stack_walk+0xfc/0x150 [ 1979.890942][T32410] ? __pfx_rtnl_newlink+0x10/0x10 [ 1979.890957][T32410] ? __lock_acquire+0xab9/0xd20 [ 1979.890972][T32410] ? page_table_check_set+0x18d/0x730 [ 1979.890992][T32410] ? page_table_check_set+0x18d/0x730 [ 1979.891007][T32410] ? page_table_check_set+0x18d/0x730 [ 1979.891026][T32410] ? __handle_mm_fault+0x3ac9/0x5400 [ 1979.891042][T32410] ? __handle_mm_fault+0x3ada/0x5400 [ 1979.891059][T32410] ? css_rstat_updated+0x23a/0x4f0 [ 1979.891078][T32410] ? __lock_acquire+0xab9/0xd20 [ 1979.891100][T32410] ? __pfx_rtnl_newlink+0x10/0x10 [ 1979.891110][T32410] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1979.891121][T32410] ? __lock_acquire+0xab9/0xd20 [ 1979.891131][T32410] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1979.891142][T32410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1979.891161][T32410] netlink_rcv_skb+0x208/0x470 [ 1979.891172][T32410] ? __lock_acquire+0xab9/0xd20 [ 1979.891182][T32410] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1979.891194][T32410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1979.891211][T32410] ? netlink_deliver_tap+0x2e/0x1b0 [ 1979.891226][T32410] netlink_unicast+0x82f/0x9e0 [ 1979.891240][T32410] ? __pfx_netlink_unicast+0x10/0x10 [ 1979.891258][T32410] ? netlink_sendmsg+0x642/0xb30 [ 1979.891268][T32410] ? skb_put+0x11b/0x210 [ 1979.891282][T32410] netlink_sendmsg+0x805/0xb30 [ 1979.891299][T32410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.891312][T32410] ? __lock_acquire+0xab9/0xd20 [ 1979.891321][T32410] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1979.891337][T32410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1979.891347][T32410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.891359][T32410] __sock_sendmsg+0x21c/0x270 [ 1979.891377][T32410] sock_write_iter+0x279/0x360 [ 1979.891393][T32410] ? __pfx_sock_write_iter+0x10/0x10 [ 1979.891412][T32410] ? bpf_lsm_file_permission+0x9/0x20 [ 1979.891423][T32410] ? security_file_permission+0x75/0x290 [ 1979.891440][T32410] vfs_write+0x5c9/0xb30 [ 1979.891457][T32410] ? __pfx_sock_write_iter+0x10/0x10 [ 1979.891472][T32410] ? __pfx_vfs_write+0x10/0x10 [ 1979.891491][T32410] ? __fget_files+0x2a/0x420 [ 1979.891505][T32410] ksys_write+0x145/0x250 [ 1979.891520][T32410] ? __pfx_ksys_write+0x10/0x10 [ 1979.891541][T32410] ? do_syscall_64+0xbe/0xfa0 [ 1979.891557][T32410] do_syscall_64+0xfa/0xfa0 [ 1979.891569][T32410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1979.891587][T32410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.891598][T32410] ? clear_bhb_loop+0x60/0xb0 [ 1979.891610][T32410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.891620][T32410] RIP: 0033:0x7fa1b018eec9 [ 1979.891631][T32410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1979.891641][T32410] RSP: 002b:00007fa1b1029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1979.891653][T32410] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018eec9 [ 1979.891661][T32410] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1979.891668][T32410] RBP: 00007fa1b1029090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.891674][T32410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.891681][T32410] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 1979.891697][T32410] [ 1980.323759][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1980.444633][ T2344] pvrusb2: Invalid write control endpoint [ 1980.546454][ T2344] pvrusb2: Invalid write control endpoint [ 1980.552456][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1980.573515][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1980.582066][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1980.592874][ T2344] pvrusb2: Device being rendered inoperable [ 1980.606934][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1980.684976][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1980.804040][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1980.944142][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1980.954525][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1980.971796][T32419] tipc: Enabled bearer , priority 10 [ 1981.062867][T32417] netlink: 'syz.5.7276': attribute type 39 has an invalid length. [ 1981.165047][T11233] usb 6-1: USB disconnect, device number 96 [ 1981.282643][T32425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7282'. [ 1981.364082][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1981.865283][T32427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1982.083742][T16061] tipc: Node number set to 3995983222 [ 1982.103685][T11233] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 1982.133774][T24173] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1982.256354][T11233] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1982.267540][T24173] usb 10-1: device descriptor read/64, error -71 [ 1982.283917][T11233] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1982.301674][T11233] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1982.331031][T11233] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1982.354670][T11233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1982.413904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1982.438526][T32430] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1982.461240][T11233] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1982.486751][T32439] FAULT_INJECTION: forcing a failure. [ 1982.486751][T32439] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.500530][T32439] CPU: 0 UID: 0 PID: 32439 Comm: syz.4.7286 Not tainted syzkaller #0 PREEMPT(full) [ 1982.500557][T32439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1982.500569][T32439] Call Trace: [ 1982.500578][T32439] [ 1982.500586][T32439] dump_stack_lvl+0x189/0x250 [ 1982.500612][T32439] ? __pfx____ratelimit+0x10/0x10 [ 1982.500636][T32439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1982.500656][T32439] ? __pfx__printk+0x10/0x10 [ 1982.500689][T32439] should_fail_ex+0x414/0x560 [ 1982.500718][T32439] should_failslab+0xa8/0x100 [ 1982.500738][T32439] __kmalloc_noprof+0xcb/0x7f0 [ 1982.500763][T32439] ? vmci_handle_arr_create+0x71/0x140 [ 1982.500788][T32439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1982.500819][T32439] vmci_handle_arr_create+0x71/0x140 [ 1982.500848][T32439] vmci_ctx_rcv_notifications_get+0x9e/0x180 [ 1982.500874][T32439] vmci_host_unlocked_ioctl+0x1d68/0x2650 [ 1982.500907][T32439] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1982.500957][T32439] ? kasan_quarantine_put+0xdd/0x220 [ 1982.500984][T32439] ? lockdep_hardirqs_on+0x9c/0x150 [ 1982.501018][T32439] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1982.501046][T32439] ? do_vfs_ioctl+0xbe8/0x1430 [ 1982.501070][T32439] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1982.501094][T32439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1982.501163][T32439] ? __fget_files+0x2a/0x420 [ 1982.501187][T32439] ? __fget_files+0x3a0/0x420 [ 1982.501203][T32439] ? __fget_files+0x2a/0x420 [ 1982.501224][T32439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1982.501247][T32439] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1982.501273][T32439] __se_sys_ioctl+0xf9/0x170 [ 1982.501299][T32439] do_syscall_64+0xfa/0xfa0 [ 1982.501325][T32439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.501343][T32439] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1982.501363][T32439] ? clear_bhb_loop+0x60/0xb0 [ 1982.501386][T32439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1982.501405][T32439] RIP: 0033:0x7f654f78eec9 [ 1982.501423][T32439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1982.501439][T32439] RSP: 002b:00007f65505ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1982.501460][T32439] RAX: ffffffffffffffda RBX: 00007f654f9e5fa0 RCX: 00007f654f78eec9 [ 1982.501475][T32439] RDX: 0000200000000040 RSI: 00000000000007a6 RDI: 0000000000000003 [ 1982.501489][T32439] RBP: 00007f65505ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1982.501502][T32439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.501513][T32439] R13: 00007f654f9e6038 R14: 00007f654f9e5fa0 R15: 00007f654fb0fa28 [ 1982.501544][T32439] [ 1982.513719][T24173] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1982.912893][T26701] usb 9-1: USB disconnect, device number 106 [ 1982.914756][T24173] usb 10-1: device descriptor read/64, error -71 [ 1983.035831][T24173] usb usb10-port1: attempt power cycle [ 1983.383785][T24173] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1983.426608][T24173] usb 10-1: device descriptor read/8, error -71 [ 1983.444150][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1983.604077][T28645] Bluetooth: hci3: command 0x0c1a tx timeout [ 1983.684214][T24173] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1983.719329][T24173] usb 10-1: device descriptor read/8, error -71 [ 1983.839659][T24173] usb usb10-port1: unable to enumerate USB device [ 1984.483809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1984.508717][T32474] fuse: Unknown parameter 'f`' [ 1984.875276][T32477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7297'. [ 1984.936505][T32483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.957138][T32483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.465432][T26701] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1985.525395][T32495] sctp: [Deprecated]: syz.5.7301 (pid 32495) Use of int in maxseg socket option. [ 1985.525395][T32495] Use struct sctp_assoc_value instead [ 1985.541109][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1985.637915][T26701] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1985.724210][T26701] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1985.777555][T26701] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1985.857783][T32504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.874328][T26701] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1985.901904][T32504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.973804][T26701] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1985.983171][T26701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.003479][T26701] usb 10-1: Product: syz [ 1986.008818][T26701] usb 10-1: Manufacturer: syz [ 1986.026655][T32504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7305'. [ 1986.034265][T26701] usb 10-1: SerialNumber: syz [ 1986.056895][T26701] usb 10-1: config 0 descriptor?? [ 1986.067267][T26701] iguanair 10-1:0.0: failed to get version [ 1986.082427][T26701] iguanair 10-1:0.0: probe with driver iguanair failed with error -90 [ 1986.305888][T16061] usb 10-1: USB disconnect, device number 82 [ 1986.403762][T26701] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1986.555931][T26701] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1986.569663][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1986.594904][T26701] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1986.605518][T26701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.617749][T26701] usb 9-1: config 0 descriptor?? [ 1986.627015][T26701] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1986.734847][T32510] netlink: 'syz.7.7307': attribute type 4 has an invalid length. [ 1986.767842][T32512] fuse: Unknown parameter '00000000000000000008' [ 1987.168435][T18591] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.181728][T18591] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.190824][T18591] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.199934][T18591] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.267306][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7312'. [ 1987.604585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1987.753844][T24173] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1987.838330][T32536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7316'. [ 1987.880413][T32536] bond0: option lp_interval: invalid value (0) [ 1987.918131][T32536] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1988.010136][T24173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.032952][T24173] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1988.123876][T24173] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1988.140435][T24173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.154749][T24173] usb 10-1: config 0 descriptor?? [ 1988.644373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1988.727582][T24173] kovaplus 0003:1E7D:2D50.0034: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 1988.847727][T32550] program syz.7.7318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1989.087599][T11233] usb 9-1: USB disconnect, device number 107 [ 1989.472896][T32564] syzkaller0: entered promiscuous mode [ 1989.480164][T32564] syzkaller0: entered allmulticast mode [ 1989.674044][T24173] kovaplus 0003:1E7D:2D50.0034: couldn't init struct kovaplus_device [ 1989.684583][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1989.685027][T24173] kovaplus 0003:1E7D:2D50.0034: couldn't install mouse [ 1989.707265][T24173] kovaplus 0003:1E7D:2D50.0034: probe with driver kovaplus failed with error -32 [ 1990.139906][T32550] syz.7.7318 (32550): drop_caches: 2 [ 1990.168422][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1990.168435][ T30] audit: type=1326 audit(1760145980.203:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32574 comm="syz.5.7328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaf558eec9 code=0x0 [ 1990.207990][T26701] usb 10-1: USB disconnect, device number 83 [ 1990.402620][T32583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7328'. [ 1990.724218][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1991.044087][T26701] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1991.223767][T26701] usb 10-1: Using ep0 maxpacket: 16 [ 1991.245193][T26701] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1991.254670][T26701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.262728][T26701] usb 10-1: Product: syz [ 1991.281893][T26701] usb 10-1: Manufacturer: syz [ 1991.291561][T26701] usb 10-1: SerialNumber: syz [ 1991.327664][T26701] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1991.334691][T26701] r8152-cfgselector 10-1: config 0 descriptor?? [ 1991.764104][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1992.155125][T32599] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1992.162726][T32599] CPU: 0 UID: 0 PID: 32599 Comm: syz.9.7330 Not tainted syzkaller #0 PREEMPT(full) [ 1992.162751][T32599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1992.162762][T32599] Call Trace: [ 1992.162772][T32599] [ 1992.162781][T32599] dump_stack_lvl+0x189/0x250 [ 1992.162810][T32599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1992.162830][T32599] ? __pfx__printk+0x10/0x10 [ 1992.162854][T32599] ? kernfs_path_from_node+0x2f/0x290 [ 1992.162878][T32599] ? kernfs_path_from_node+0x250/0x290 [ 1992.162899][T32599] ? kernfs_path_from_node+0x2f/0x290 [ 1992.162924][T32599] sysfs_warn_dup+0x8e/0xa0 [ 1992.162947][T32599] sysfs_do_create_link_sd+0xc0/0x110 [ 1992.162977][T32599] device_add_class_symlinks+0x1cf/0x240 [ 1992.163014][T32599] device_add+0x475/0xb50 [ 1992.163051][T32599] wiphy_register+0x1c81/0x2aa0 [ 1992.163099][T32599] ? __pfx_wiphy_register+0x10/0x10 [ 1992.163124][T32599] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1992.163155][T32599] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1992.163194][T32599] ieee80211_register_hw+0x3473/0x40d0 [ 1992.163233][T32599] ? ieee80211_register_hw+0x1451/0x40d0 [ 1992.163267][T32599] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1992.163295][T32599] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1992.163321][T32599] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1992.163355][T32599] ? __hrtimer_setup+0x187/0x210 [ 1992.163376][T32599] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1992.163410][T32599] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 1992.163463][T32599] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1992.163487][T32599] ? trace_kmalloc+0x1f/0xd0 [ 1992.163513][T32599] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 1992.163544][T32599] ? kstrndup+0xbf/0x160 [ 1992.163577][T32599] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1992.163612][T32599] ? __pfx___nla_validate_parse+0x10/0x10 [ 1992.163654][T32599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1992.163684][T32599] ? rcu_is_watching+0x15/0xb0 [ 1992.163715][T32599] ? __nla_parse+0x40/0x60 [ 1992.163746][T32599] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1992.163785][T32599] genl_family_rcv_msg_doit+0x215/0x300 [ 1992.163823][T32599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1992.163867][T32599] ? bpf_lsm_capable+0x9/0x20 [ 1992.163891][T32599] ? security_capable+0x7e/0x2e0 [ 1992.163922][T32599] genl_rcv_msg+0x60e/0x790 [ 1992.163956][T32599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1992.163984][T32599] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1992.164024][T32599] netlink_rcv_skb+0x208/0x470 [ 1992.164041][T32599] ? __lock_acquire+0xab9/0xd20 [ 1992.164060][T32599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1992.164089][T32599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1992.164127][T32599] ? down_read+0x1ad/0x2e0 [ 1992.164155][T32599] genl_rcv+0x28/0x40 [ 1992.164178][T32599] netlink_unicast+0x82f/0x9e0 [ 1992.164203][T32599] ? __pfx_netlink_unicast+0x10/0x10 [ 1992.164234][T32599] ? netlink_sendmsg+0x642/0xb30 [ 1992.164253][T32599] ? skb_put+0x11b/0x210 [ 1992.164278][T32599] netlink_sendmsg+0x805/0xb30 [ 1992.164311][T32599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1992.164336][T32599] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1992.164363][T32599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1992.164382][T32599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1992.164406][T32599] __sock_sendmsg+0x21c/0x270 [ 1992.164462][T32599] ____sys_sendmsg+0x505/0x830 [ 1992.164492][T32599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1992.164527][T32599] ? import_iovec+0x74/0xa0 [ 1992.164552][T32599] ___sys_sendmsg+0x21f/0x2a0 [ 1992.164580][T32599] ? __pfx____sys_sendmsg+0x10/0x10 [ 1992.164645][T32599] ? __fget_files+0x2a/0x420 [ 1992.164663][T32599] ? __fget_files+0x3a0/0x420 [ 1992.164702][T32599] __x64_sys_sendmsg+0x19b/0x260 [ 1992.164731][T32599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1992.164774][T32599] ? do_syscall_64+0xbe/0xfa0 [ 1992.164804][T32599] do_syscall_64+0xfa/0xfa0 [ 1992.164828][T32599] ? lockdep_hardirqs_on+0x9c/0x150 [ 1992.164854][T32599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.164875][T32599] ? clear_bhb_loop+0x60/0xb0 [ 1992.164897][T32599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.164915][T32599] RIP: 0033:0x7fb08378eec9 [ 1992.164935][T32599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1992.164952][T32599] RSP: 002b:00007fb084557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1992.164975][T32599] RAX: ffffffffffffffda RBX: 00007fb0839e6180 RCX: 00007fb08378eec9 [ 1992.164990][T32599] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000009 [ 1992.165004][T32599] RBP: 00007fb083811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1992.165018][T32599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1992.165031][T32599] R13: 00007fb0839e6218 R14: 00007fb0839e6180 R15: 00007fb083b0fa28 [ 1992.165068][T32599] [ 1992.804159][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1992.843714][T26701] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1992.993693][T26701] usb 9-1: Using ep0 maxpacket: 8 [ 1993.000726][T26701] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1993.012015][T26701] usb 9-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1993.021524][T26701] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.031801][T26701] usb 9-1: config 0 descriptor?? [ 1993.372669][T26701] usb 9-1: USB disconnect, device number 108 [ 1993.400750][T32610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1993.579447][T32613] FAULT_INJECTION: forcing a failure. [ 1993.579447][T32613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1993.595984][T32613] CPU: 1 UID: 0 PID: 32613 Comm: syz.8.7337 Not tainted syzkaller #0 PREEMPT(full) [ 1993.596000][T32613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1993.596007][T32613] Call Trace: [ 1993.596013][T32613] [ 1993.596019][T32613] dump_stack_lvl+0x189/0x250 [ 1993.596035][T32613] ? __pfx____ratelimit+0x10/0x10 [ 1993.596049][T32613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1993.596060][T32613] ? __pfx__printk+0x10/0x10 [ 1993.596078][T32613] should_fail_ex+0x414/0x560 [ 1993.596094][T32613] _copy_to_user+0x31/0xb0 [ 1993.596107][T32613] simple_read_from_buffer+0xe1/0x170 [ 1993.596125][T32613] proc_fail_nth_read+0x1b3/0x220 [ 1993.596141][T32613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1993.596155][T32613] ? rw_verify_area+0x2a6/0x4d0 [ 1993.596169][T32613] ? __lock_acquire+0xab9/0xd20 [ 1993.596179][T32613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1993.596192][T32613] vfs_read+0x1fd/0xa30 [ 1993.596206][T32613] ? fdget_pos+0x247/0x320 [ 1993.596218][T32613] ? __pfx___mutex_lock+0x10/0x10 [ 1993.596232][T32613] ? __pfx_vfs_read+0x10/0x10 [ 1993.596247][T32613] ? __fget_files+0x2a/0x420 [ 1993.596258][T32613] ? __fget_files+0x3a0/0x420 [ 1993.596267][T32613] ? __fget_files+0x2a/0x420 [ 1993.596303][T32613] ksys_read+0x145/0x250 [ 1993.596319][T32613] ? __pfx_ksys_read+0x10/0x10 [ 1993.596335][T32613] ? do_syscall_64+0xbe/0xfa0 [ 1993.596350][T32613] do_syscall_64+0xfa/0xfa0 [ 1993.596363][T32613] ? lockdep_hardirqs_on+0x9c/0x150 [ 1993.596376][T32613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.596387][T32613] ? clear_bhb_loop+0x60/0xb0 [ 1993.596399][T32613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.596409][T32613] RIP: 0033:0x7fa1b018d8dc [ 1993.596420][T32613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1993.596430][T32613] RSP: 002b:00007fa1b1029030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1993.596442][T32613] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018d8dc [ 1993.596450][T32613] RDX: 000000000000000f RSI: 00007fa1b10290a0 RDI: 0000000000000008 [ 1993.596457][T32613] RBP: 00007fa1b1029090 R08: 0000000000000000 R09: 0000000000000008 [ 1993.596464][T32613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.596470][T32613] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 1993.596487][T32613] [ 1993.835585][ C1] vkms_vblank_simulate: vblank timer overrun [ 1993.844015][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1994.173415][T32625] futex_wake_op: syz.5.7340 tries to shift op by 36; fix this program [ 1994.883741][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1995.009927][T32640] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1995.052185][T26701] r8152-cfgselector 10-1: USB disconnect, device number 84 [ 1995.125477][T32642] input: syz0 as /devices/virtual/input/input177 [ 1995.924012][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1996.144950][T32668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7356'. [ 1996.421342][T24173] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1996.590687][T24173] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1996.605173][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.614979][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.630902][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.646558][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.663686][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.683658][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.691928][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.701296][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.713747][T26701] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1996.722970][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.734074][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.744119][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.760075][T32676] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7359'. [ 1996.769780][T32676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7359'. [ 1996.782540][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.816592][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.828845][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.842983][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.853319][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.866198][T26701] usb 6-1: Using ep0 maxpacket: 16 [ 1996.871733][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.883352][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.888533][T26701] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1996.901266][T26701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.911401][T26701] usb 6-1: Product: syz [ 1996.916014][T26701] usb 6-1: Manufacturer: syz [ 1996.922834][T26701] usb 6-1: SerialNumber: syz [ 1996.931289][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1996.931546][T26701] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1996.947292][T26701] r8152-cfgselector 6-1: config 0 descriptor?? [ 1996.957286][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1996.963748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1996.983271][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1996.995200][T24173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1997.005010][T24173] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1997.018081][T24173] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1997.031989][T24173] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1997.041441][T24173] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1997.064712][T24173] usb 10-1: Product: syz [ 1997.069079][T24173] usb 10-1: Manufacturer: syz [ 1997.073867][T24173] usb 10-1: SerialNumber: syz [ 1997.081317][T24173] usb 10-1: config 0 descriptor?? [ 1997.099996][T24173] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1997.256933][T32680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.274723][T32680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.284048][T32684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.299716][T32684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.312504][T11233] usb 10-1: USB disconnect, device number 85 [ 1997.321035][T11233] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1997.492993][T32686] debugfs: '!' already exists in 'ieee80211' [ 1998.004018][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1998.027342][T32700] syz_tun: entered allmulticast mode [ 1998.188702][ T30] audit: type=1326 audit(1760145988.223:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.231292][T32706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.242817][ T30] audit: type=1326 audit(1760145988.253:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.281438][T32700] dvmrp1: entered allmulticast mode [ 1998.313118][ T30] audit: type=1326 audit(1760145988.263:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.344350][T32706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.374770][T32706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.384478][ T30] audit: type=1326 audit(1760145988.263:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.394031][T32706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.464868][T32699] syz_tun: left allmulticast mode [ 1998.480233][ T30] audit: type=1326 audit(1760145988.263:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.513996][ T30] audit: type=1326 audit(1760145988.263:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f654f78d710 code=0x7ffc0000 [ 1998.572597][ T30] audit: type=1326 audit(1760145988.263:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f654f78eacb code=0x7ffc0000 [ 1998.595312][ T30] audit: type=1326 audit(1760145988.263:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f654f78eacb code=0x7ffc0000 [ 1998.618532][ T30] audit: type=1326 audit(1760145988.383:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.643772][ T30] audit: type=1326 audit(1760145988.383:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32704 comm="syz.4.7370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654f78eec9 code=0x7ffc0000 [ 1998.844256][T32705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7364'. [ 1998.893967][T32705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7364'. [ 1999.044149][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1999.542937][T18585] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.551870][T18585] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.561146][T18585] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.569997][T18585] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.923777][T16061] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 2000.073742][T16061] usb 10-1: Using ep0 maxpacket: 8 [ 2000.080606][T16061] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2000.089085][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2000.096456][T16061] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.111662][T16061] usb 10-1: config 0 has no interface number 0 [ 2000.121637][T16061] usb 10-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2000.137397][T16061] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2000.155812][T16061] usb 10-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2000.173357][T16061] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2000.196750][T16061] usb 10-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2000.215496][T16061] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.258246][T16061] usb 10-1: config 0 descriptor?? [ 2000.281673][T16061] hso 10-1:0.1: Failed to find BULK OUT ep [ 2000.616196][T11251] r8152-cfgselector 6-1: USB disconnect, device number 97 [ 2000.984296][T11251] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2001.123750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2001.153842][T11251] usb 6-1: Using ep0 maxpacket: 8 [ 2001.162017][T11251] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2001.172376][T11251] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 2001.185250][T11251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.195727][T11251] usb 6-1: Product: ш [ 2001.201310][T11251] usb 6-1: Manufacturer: М [ 2001.215257][T11251] usb 6-1: SerialNumber: 䋽ℓ⽋♤ꅙӪɺ坅柒㗧੖贌ჸݤ肧뻆᾽㣻Ⅼ챺渮쯏钫ỹ뫦伮଴廻ᬿ＿룉ꚙ㻽硶괢퓖ꨢ㯼ৣ뿖Ⳳ룏ᨚ醌鰷鲗揿ꢌ㨖䋘鐨萒嵕䔺꿢羄솆ɏ鱬牱蠈ໂ⒫樴棳Ꞌ묹 [ 2001.397761][T32748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.407381][T32748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.644524][T32752] sctp: [Deprecated]: syz.5.7374 (pid 32752) Use of int in max_burst socket option. [ 2001.644524][T32752] Use struct sctp_assoc_value instead [ 2001.962854][T32755] FAULT_INJECTION: forcing a failure. [ 2001.962854][T32755] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.977730][T32755] CPU: 0 UID: 0 PID: 32755 Comm: syz.8.7381 Not tainted syzkaller #0 PREEMPT(full) [ 2001.977746][T32755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2001.977753][T32755] Call Trace: [ 2001.977759][T32755] [ 2001.977764][T32755] dump_stack_lvl+0x189/0x250 [ 2001.977781][T32755] ? __pfx____ratelimit+0x10/0x10 [ 2001.977795][T32755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2001.977806][T32755] ? __pfx__printk+0x10/0x10 [ 2001.977821][T32755] ? __pfx___might_resched+0x10/0x10 [ 2001.977833][T32755] ? fs_reclaim_acquire+0x7d/0x100 [ 2001.977852][T32755] should_fail_ex+0x414/0x560 [ 2001.977869][T32755] should_failslab+0xa8/0x100 [ 2001.977880][T32755] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2001.977895][T32755] ? unlink_anon_vmas+0x650/0x670 [ 2001.977909][T32755] ? snd_pcm_oss_change_params_locked+0x1fe/0x3e40 [ 2001.977936][T32755] snd_pcm_oss_change_params_locked+0x1fe/0x3e40 [ 2001.977969][T32755] ? __lock_acquire+0xab9/0xd20 [ 2001.977979][T32755] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 2001.978003][T32755] ? __pfx_mas_preallocate+0x10/0x10 [ 2001.978023][T32755] snd_pcm_oss_mmap+0x332/0x5a0 [ 2001.978044][T32755] mmap_region+0x18b1/0x2110 [ 2001.978067][T32755] ? __pfx_mmap_region+0x10/0x10 [ 2001.978113][T32755] ? aa_file_perm+0x13a/0x1550 [ 2001.978130][T32755] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 2001.978151][T32755] ? bpf_lsm_mmap_addr+0x9/0x20 [ 2001.978162][T32755] ? security_mmap_addr+0x71/0x270 [ 2001.978175][T32755] ? shmem_mapping+0xd/0x50 [ 2001.978187][T32755] ? memfd_check_seals_mmap+0xc5/0x200 [ 2001.978201][T32755] do_mmap+0xc45/0x10d0 [ 2001.978221][T32755] ? __pfx_do_mmap+0x10/0x10 [ 2001.978232][T32755] ? down_write_killable+0x178/0x230 [ 2001.978250][T32755] ? __pfx_down_write_killable+0x10/0x10 [ 2001.978264][T32755] ? common_file_perm+0x1b5/0x230 [ 2001.978283][T32755] vm_mmap_pgoff+0x2a6/0x4d0 [ 2001.978300][T32755] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2001.978312][T32755] ? __fget_files+0x2a/0x420 [ 2001.978324][T32755] ? __fget_files+0x2a/0x420 [ 2001.978333][T32755] ? __fget_files+0x2a/0x420 [ 2001.978345][T32755] ksys_mmap_pgoff+0x51f/0x760 [ 2001.978362][T32755] do_syscall_64+0xfa/0xfa0 [ 2001.978375][T32755] ? lockdep_hardirqs_on+0x9c/0x150 [ 2001.978388][T32755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.978398][T32755] ? clear_bhb_loop+0x60/0xb0 [ 2001.978411][T32755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.978422][T32755] RIP: 0033:0x7fa1b018eec9 [ 2001.978433][T32755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2001.978442][T32755] RSP: 002b:00007fa1b1029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2001.978455][T32755] RAX: ffffffffffffffda RBX: 00007fa1b03e5fa0 RCX: 00007fa1b018eec9 [ 2001.978463][T32755] RDX: 000000000280000b RSI: 0000000000003000 RDI: 0000200000ffa000 [ 2001.978471][T32755] RBP: 00007fa1b1029090 R08: 0000000000000004 R09: 0000000000000000 [ 2001.978477][T32755] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2001.978484][T32755] R13: 00007fa1b03e6038 R14: 00007fa1b03e5fa0 R15: 00007fa1b050fa28 [ 2001.978501][T32755] [ 2002.289316][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2002.301150][T24173] usb 10-1: USB disconnect, device number 86 [ 2003.120796][ T302] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7385'. [ 2003.364372][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2003.550120][ T307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2003.790328][T11251] usbhid 6-1:1.0: can't add hid device: -71 [ 2003.797090][T11251] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2003.807331][T11251] usb 6-1: USB disconnect, device number 98 [ 2003.903778][T11233] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 2004.050227][ T323] ALSA: mixer_oss: invalid OSS volume 'LI' [ 2004.073688][T11233] usb 9-1: Using ep0 maxpacket: 32 [ 2004.080524][T11233] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2004.088834][T11233] usb 9-1: config 0 has no interface number 0 [ 2004.095105][T11233] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2004.104534][T11233] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2004.113681][T11233] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.121656][T11233] usb 9-1: Product: syz [ 2004.126146][T11233] usb 9-1: Manufacturer: syz [ 2004.130720][T11233] usb 9-1: SerialNumber: syz [ 2004.138018][T11233] usb 9-1: config 0 descriptor?? [ 2004.145833][T11233] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2004.158873][T11233] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2004.193734][T11251] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2004.324724][T11251] usb 6-1: device descriptor read/64, error -71 [ 2004.404061][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2004.563699][T11251] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2004.703798][T11251] usb 6-1: device descriptor read/64, error -71 [ 2004.814077][T11251] usb usb6-port1: attempt power cycle [ 2004.844943][T11233] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2005.052688][ T314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.075379][ T314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.124775][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 2005.124792][ T30] audit: type=1326 audit(1760145995.163:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=327 comm="syz.4.7393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f654f78eec9 code=0x0 [ 2005.163810][T11251] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2005.184311][T11251] usb 6-1: device descriptor read/8, error -71 [ 2005.213373][ T329] bridge0: port 3(bond0) entered disabled state [ 2005.314334][T11233] em28xx 9-1:0.89: AC97 command still being executed: not handled properly! [ 2005.423711][T11251] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2005.444517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2005.456187][T11251] usb 6-1: device descriptor read/8, error -71 [ 2005.502470][T11233] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2005.512626][T11233] em28xx 9-1:0.89: board has no eeprom [ 2005.564123][T11251] usb usb6-port1: unable to enumerate USB device [ 2005.793735][T11233] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2005.801026][T11233] em28xx 9-1:0.89: analog set to bulk mode. [ 2005.807077][T24173] em28xx 9-1:0.89: Registering V4L2 extension [ 2005.924742][T24173] em28xx 9-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 2005.928360][T11251] usb 9-1: USB disconnect, device number 109 [ 2005.933084][T24173] em28xx 9-1:0.89: reading from i2c device at 0x48 failed (error=-19) [ 2005.940869][T11251] em28xx 9-1:0.89: Disconnecting em28xx [ 2005.956978][T24173] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2005.964421][T24173] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2005.971535][T24173] em28xx 9-1:0.89: No AC97 audio processor [ 2005.978770][T24173] usb 9-1: Decoder not found [ 2006.019857][T24173] em28xx 9-1:0.89: failed to create media graph [ 2006.028851][T24173] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2006.037878][T24173] em28xx 9-1:0.89: Registering snapshot button... [ 2006.038553][ T344] ================================================================== [ 2006.052359][ T344] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 2006.059718][ T344] Read of size 8 at addr ffff88806a16c740 by task v4l_id/344 [ 2006.067071][ T344] [ 2006.069383][ T344] CPU: 0 UID: 0 PID: 344 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2006.069402][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2006.069410][ T344] Call Trace: [ 2006.069417][ T344] [ 2006.069423][ T344] dump_stack_lvl+0x189/0x250 [ 2006.069442][ T344] ? __virt_addr_valid+0x1c8/0x5c0 [ 2006.069458][ T344] ? rcu_is_watching+0x15/0xb0 [ 2006.069472][ T344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2006.069483][ T344] ? rcu_is_watching+0x15/0xb0 [ 2006.069495][ T344] ? lock_release+0x4b/0x3e0 [ 2006.069506][ T344] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2006.069520][ T344] ? __virt_addr_valid+0x1c8/0x5c0 [ 2006.069534][ T344] ? __virt_addr_valid+0x4a5/0x5c0 [ 2006.069549][ T344] print_report+0xca/0x240 [ 2006.069563][ T344] ? v4l2_fh_open+0xac/0x420 [ 2006.069576][ T344] kasan_report+0x118/0x150 [ 2006.069589][ T344] ? v4l2_fh_open+0xac/0x420 [ 2006.069603][ T344] v4l2_fh_open+0xac/0x420 [ 2006.069617][ T344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2006.069633][ T344] em28xx_v4l2_open+0x157/0x9a0 [ 2006.069648][ T344] v4l2_open+0x1bc/0x3a0 [ 2006.069663][ T344] chrdev_open+0x4c9/0x5e0 [ 2006.069674][ T344] ? __pfx_chrdev_open+0x10/0x10 [ 2006.069685][ T344] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2006.069698][ T344] ? __pfx_chrdev_open+0x10/0x10 [ 2006.069707][ T344] do_dentry_open+0x950/0x13f0 [ 2006.069722][ T344] vfs_open+0x3b/0x340 [ 2006.069732][ T344] ? path_openat+0x2ecd/0x3830 [ 2006.069746][ T344] path_openat+0x2ee5/0x3830 [ 2006.069767][ T344] ? __pfx_path_openat+0x10/0x10 [ 2006.069783][ T344] do_filp_open+0x1fa/0x410 [ 2006.069796][ T344] ? __lock_acquire+0xab9/0xd20 [ 2006.069807][ T344] ? __pfx_do_filp_open+0x10/0x10 [ 2006.069825][ T344] ? _raw_spin_unlock+0x28/0x50 [ 2006.069837][ T344] ? alloc_fd+0x64c/0x6c0 [ 2006.069854][ T344] do_sys_openat2+0x121/0x1c0 [ 2006.069867][ T344] ? __pfx_do_sys_openat2+0x10/0x10 [ 2006.069879][ T344] ? exc_page_fault+0x82/0x100 [ 2006.069894][ T344] ? do_user_addr_fault+0xc85/0x1380 [ 2006.069905][ T344] __x64_sys_openat+0x138/0x170 [ 2006.069919][ T344] do_syscall_64+0xfa/0xfa0 [ 2006.069932][ T344] ? lockdep_hardirqs_on+0x9c/0x150 [ 2006.069946][ T344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.069957][ T344] ? clear_bhb_loop+0x60/0xb0 [ 2006.069969][ T344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.069980][ T344] RIP: 0033:0x7fc59bea7407 [ 2006.069992][ T344] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2006.070003][ T344] RSP: 002b:00007ffc5b178c00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2006.070015][ T344] RAX: ffffffffffffffda RBX: 00007fc59c691880 RCX: 00007fc59bea7407 [ 2006.070024][ T344] RDX: 0000000000000000 RSI: 00007ffc5b179f1c RDI: ffffffffffffff9c [ 2006.070033][ T344] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2006.070040][ T344] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2006.070048][ T344] R13: 00007ffc5b178e50 R14: 00007fc59c7f8000 R15: 0000560518ecc4d8 [ 2006.070060][ T344] [ 2006.070065][ T344] [ 2006.371817][ T344] Allocated by task 24173: [ 2006.376223][ T344] kasan_save_track+0x3e/0x80 [ 2006.380904][ T344] __kasan_kmalloc+0x93/0xb0 [ 2006.385493][ T344] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2006.390848][ T344] em28xx_v4l2_init+0x10b/0x2e70 [ 2006.395765][ T344] em28xx_init_extension+0x11d/0x1c0 [ 2006.401131][ T344] process_scheduled_works+0xae1/0x17b0 [ 2006.406709][ T344] worker_thread+0x8a0/0xda0 [ 2006.411283][ T344] kthread+0x711/0x8a0 [ 2006.415350][ T344] ret_from_fork+0x4bc/0x870 [ 2006.419918][ T344] ret_from_fork_asm+0x1a/0x30 [ 2006.424661][ T344] [ 2006.426965][ T344] Freed by task 24173: [ 2006.431003][ T344] kasan_save_track+0x3e/0x80 [ 2006.435661][ T344] __kasan_save_free_info+0x46/0x50 [ 2006.440838][ T344] __kasan_slab_free+0x5c/0x80 [ 2006.445578][ T344] kfree+0x19a/0x6d0 [ 2006.449450][ T344] em28xx_v4l2_init+0x1683/0x2e70 [ 2006.454449][ T344] em28xx_init_extension+0x11d/0x1c0 [ 2006.459717][ T344] process_scheduled_works+0xae1/0x17b0 [ 2006.465239][ T344] worker_thread+0x8a0/0xda0 [ 2006.469802][ T344] kthread+0x711/0x8a0 [ 2006.473848][ T344] ret_from_fork+0x4bc/0x870 [ 2006.478412][ T344] ret_from_fork_asm+0x1a/0x30 [ 2006.483156][ T344] [ 2006.485464][ T344] The buggy address belongs to the object at ffff88806a16c000 [ 2006.485464][ T344] which belongs to the cache kmalloc-8k of size 8192 [ 2006.499506][ T344] The buggy address is located 1856 bytes inside of [ 2006.499506][ T344] freed 8192-byte region [ffff88806a16c000, ffff88806a16e000) [ 2006.513483][ T344] [ 2006.515793][ T344] The buggy address belongs to the physical page: [ 2006.522179][ T344] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a168 [ 2006.530922][ T344] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2006.539398][ T344] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2006.546918][ T344] page_type: f5(slab) [ 2006.550879][ T344] raw: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 2006.559445][ T344] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2006.568015][ T344] head: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 2006.576678][ T344] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 2006.585335][ T344] head: 00fff00000000003 ffffea0001a85a01 00000000ffffffff 00000000ffffffff [ 2006.593990][ T344] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2006.602648][ T344] page dumped because: kasan: bad access detected [ 2006.609037][ T344] page_owner tracks the page as allocated [ 2006.614741][ T344] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 337, tgid 336 (syz.4.7396), ts 2005588073957, free_ts 2005534408036 [ 2006.635294][ T344] post_alloc_hook+0x240/0x2a0 [ 2006.640066][ T344] get_page_from_freelist+0x2365/0x2440 [ 2006.645592][ T344] __alloc_frozen_pages_noprof+0x181/0x370 [ 2006.651395][ T344] alloc_pages_mpol+0x232/0x4a0 [ 2006.656232][ T344] allocate_slab+0x96/0x3a0 [ 2006.660716][ T344] ___slab_alloc+0xe94/0x18a0 [ 2006.665370][ T344] __slab_alloc+0x65/0x100 [ 2006.669765][ T344] __kmalloc_cache_noprof+0x411/0x6f0 [ 2006.675118][ T344] tomoyo_init_log+0x111f/0x1f70 [ 2006.680041][ T344] tomoyo_supervisor+0x340/0x1480 [ 2006.685055][ T344] tomoyo_find_next_domain+0x488/0x1aa0 [ 2006.690604][ T344] tomoyo_bprm_check_security+0x11c/0x180 [ 2006.696311][ T344] security_bprm_check+0x89/0x270 [ 2006.701352][ T344] bprm_execve+0x8ee/0x1450 [ 2006.705859][ T344] do_execveat_common+0x510/0x6a0 [ 2006.710887][ T344] __x64_sys_execveat+0xc4/0xe0 [ 2006.715722][ T344] page last free pid 337 tgid 336 stack trace: [ 2006.721937][ T344] __free_frozen_pages+0xbc4/0xd30 [ 2006.727029][ T344] __put_partials+0x146/0x170 [ 2006.731686][ T344] put_cpu_partial+0x1f2/0x2e0 [ 2006.736428][ T344] __slab_free+0x2b9/0x390 [ 2006.740821][ T344] qlist_free_all+0x97/0x140 [ 2006.745391][ T344] kasan_quarantine_reduce+0x148/0x160 [ 2006.750830][ T344] __kasan_slab_alloc+0x22/0x80 [ 2006.755662][ T344] __kmalloc_cache_noprof+0x36f/0x6f0 [ 2006.761013][ T344] alloc_mnt_ns+0xb0/0x310 [ 2006.765410][ T344] __se_sys_fsmount+0x57d/0x870 [ 2006.770235][ T344] do_syscall_64+0xfa/0xfa0 [ 2006.774716][ T344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.780594][ T344] [ 2006.782894][ T344] Memory state around the buggy address: [ 2006.788502][ T344] ffff88806a16c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2006.796542][ T344] ffff88806a16c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2006.804585][ T344] >ffff88806a16c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2006.812632][ T344] ^ [ 2006.818762][ T344] ffff88806a16c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2006.826801][ T344] ffff88806a16c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2006.834886][ T344] ================================================================== [ 2006.844058][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2006.881916][T24173] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input178 [ 2006.904241][ T344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2006.911468][ T344] CPU: 0 UID: 0 PID: 344 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 2006.920309][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2006.930362][ T344] Call Trace: [ 2006.933634][ T344] [ 2006.936558][ T344] dump_stack_lvl+0x99/0x250 [ 2006.941139][ T344] ? __asan_memcpy+0x40/0x70 [ 2006.945723][ T344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2006.950908][ T344] ? __pfx__printk+0x10/0x10 [ 2006.955487][ T344] vpanic+0x237/0x6d0 [ 2006.959473][ T344] ? __pfx_vpanic+0x10/0x10 [ 2006.963967][ T344] ? preempt_schedule+0xae/0xc0 [ 2006.968808][ T344] ? __pfx_preempt_schedule+0x10/0x10 [ 2006.974182][ T344] panic+0xb9/0xc0 [ 2006.977902][ T344] ? __pfx_panic+0x10/0x10 [ 2006.982324][ T344] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 2006.988212][ T344] ? is_module_address+0x17/0xf0 [ 2006.993143][ T344] ? v4l2_fh_open+0xac/0x420 [ 2006.997738][ T344] check_panic_on_warn+0x89/0xb0 [ 2007.002691][ T344] ? v4l2_fh_open+0xac/0x420 [ 2007.007268][ T344] end_report+0x78/0x160 [ 2007.011499][ T344] kasan_report+0x129/0x150 [ 2007.015992][ T344] ? v4l2_fh_open+0xac/0x420 [ 2007.020664][ T344] v4l2_fh_open+0xac/0x420 [ 2007.025069][ T344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2007.031041][ T344] em28xx_v4l2_open+0x157/0x9a0 [ 2007.035884][ T344] v4l2_open+0x1bc/0x3a0 [ 2007.040119][ T344] chrdev_open+0x4c9/0x5e0 [ 2007.044521][ T344] ? __pfx_chrdev_open+0x10/0x10 [ 2007.049624][ T344] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2007.055938][ T344] ? __pfx_chrdev_open+0x10/0x10 [ 2007.060859][ T344] do_dentry_open+0x950/0x13f0 [ 2007.065615][ T344] vfs_open+0x3b/0x340 [ 2007.069673][ T344] ? path_openat+0x2ecd/0x3830 [ 2007.074428][ T344] path_openat+0x2ee5/0x3830 [ 2007.079018][ T344] ? __pfx_path_openat+0x10/0x10 [ 2007.083954][ T344] do_filp_open+0x1fa/0x410 [ 2007.088448][ T344] ? __lock_acquire+0xab9/0xd20 [ 2007.093284][ T344] ? __pfx_do_filp_open+0x10/0x10 [ 2007.098307][ T344] ? _raw_spin_unlock+0x28/0x50 [ 2007.103152][ T344] ? alloc_fd+0x64c/0x6c0 [ 2007.107477][ T344] do_sys_openat2+0x121/0x1c0 [ 2007.112164][ T344] ? __pfx_do_sys_openat2+0x10/0x10 [ 2007.117368][ T344] ? exc_page_fault+0x82/0x100 [ 2007.122132][ T344] ? do_user_addr_fault+0xc85/0x1380 [ 2007.127410][ T344] __x64_sys_openat+0x138/0x170 [ 2007.132256][ T344] do_syscall_64+0xfa/0xfa0 [ 2007.136767][ T344] ? lockdep_hardirqs_on+0x9c/0x150 [ 2007.141960][ T344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.148016][ T344] ? clear_bhb_loop+0x60/0xb0 [ 2007.152681][ T344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2007.158564][ T344] RIP: 0033:0x7fc59bea7407 [ 2007.162969][ T344] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2007.182568][ T344] RSP: 002b:00007ffc5b178c00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2007.190985][ T344] RAX: ffffffffffffffda RBX: 00007fc59c691880 RCX: 00007fc59bea7407 [ 2007.199038][ T344] RDX: 0000000000000000 RSI: 00007ffc5b179f1c RDI: ffffffffffffff9c [ 2007.206998][ T344] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2007.215139][ T344] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2007.223096][ T344] R13: 00007ffc5b178e50 R14: 00007fc59c7f8000 R15: 0000560518ecc4d8 [ 2007.231061][ T344] [ 2007.234330][ T344] Kernel Offset: disabled [ 2007.238635][ T344] Rebooting in 86400 seconds..