last executing test programs: 19m7.278089247s ago: executing program 32 (id=1198): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) open(0x0, 0x183800, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) dup3(r2, r1, 0x80000) epoll_create(0xe) 19m6.401536166s ago: executing program 33 (id=1195): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) open(0x0, 0x183800, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) dup3(r2, r1, 0x80000) epoll_create(0xe) 18m57.36873443s ago: executing program 34 (id=1200): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r6, r7+60000000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 17m30.261224024s ago: executing program 35 (id=1252): r0 = syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0), 0x2000000}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x40}], 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 16m47.968699832s ago: executing program 2 (id=1270): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000240)={0xa, 0x4c20, 0x0, @local}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16m11.402248259s ago: executing program 6 (id=1203): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000003c0)={@private, @broadcast}, &(0x7f0000001780)=0xc) 16m11.398992928s ago: executing program 2 (id=1277): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) close(0xffffffffffffffff) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(0x0, 0x83) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b", 0x21}], 0x1, &(0x7f0000000900)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40000}], 0x1, 0xc050) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffc, 0x9, 0x5, 0x5, 0x1, 0x1000, 0x7, 0x6}}}}]}, 0x58}}, 0x44080) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x80) 16m4.770194441s ago: executing program 6 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='tqrget PCI:13:13:1.1e\x00'], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="76fce25c37660262dde181", 0xb, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) syz_clone(0x80, &(0x7f0000000080)="d2ab3ac9aa2e63b5efa2048523595c2ae648be1b1dccc0ced0a09631b655807b704a5237e3ea3cd3063e9f", 0x2b, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="76d2d7c3a261712766efd64ee747f98ab2618b5476e41af13fb1601671ad084ece16a85a8d17f3275aa3afcca94e43378241396650bf36b0a0cec9834e3b47ddcedc251316c6fae09227925ff582f3760a7ea6527367617214685a9855f1c209e55b5864646b12f620f80fc11b86604896ad35198ab6e05f8e918115c1f5242255157c633c") write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000002040)=0xf900) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 16m4.483224426s ago: executing program 2 (id=1272): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7, 0x1, 0xa, 0x7, {{0x1a, 0x4, 0x1, 0x7, 0x68, 0x4, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@lsrr={0x83, 0x7, 0x4, [@loopback]}, @cipso={0x86, 0x2d, 0x2, [{0x6, 0xa, "26ef8dca7d292112"}, {0x1, 0x2}, {0x5, 0xa, "6d6e104d4688fe7c"}, {0x7, 0x11, "939180b64cf8002cfddd3746b086d6"}]}, @timestamp_addr={0x44, 0xc, 0x8b, 0x1, 0x4, [{@empty, 0x400}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xd6, [@local]}, @ssrr={0x89, 0x7, 0x98, [@multicast1]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@loopback, 0x5a, r1}) unshare(0x2040600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) ppoll(&(0x7f00000001c0)=[{r2, 0x110}], 0x1, 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000480)={0x1d, r5}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x48}, 0x1, 0x0, 0x0, 0x882}, 0x1) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000180)="9f336d70bf0008000000000000e388fb2c4f7ede37e7de1f2a1cfb06b88038c6ffbf07e70873b0384d86a1ceb4e570554ebc8154bf39", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x4000000000000e7, 0x0) write(r3, &(0x7f0000000340), 0x11000) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000004000000006000000080000000000000030b467b2d10e1cedeb6332c7959043ad4850aa54fbd1c5b1913349ad62a96a6ef6313cde10bb4d3829a03fef63a5708d8fa7542da03482b133d012e62ca5d8cf79937c51117225ee1e44950386b2ec09754e8395f58f4a8b253e0ad5b7e3b3895a9ed9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r7}, 0x38) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x463, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000040)={0xa, 0x4c20, 0x0, @local}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m49.718584534s ago: executing program 2 (id=1273): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)=ANY=[@ANYBLOB="68000000000000004b000000000000002000000000110000"], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r4, r3}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{}]}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)={0x14, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) memfd_secret(0x80000) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 15m49.555284456s ago: executing program 36 (id=1271): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='tqrget PCI:13:13:1.1e\x00'], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="76fce25c37660262dde181", 0xb, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) syz_clone(0x80, &(0x7f0000000080)="d2ab3ac9aa2e63b5efa2048523595c2ae648be1b1dccc0ced0a09631b655807b704a5237e3ea3cd3063e9f", 0x2b, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)="76d2d7c3a261712766efd64ee747f98ab2618b5476e41af13fb1601671ad084ece16a85a8d17f3275aa3afcca94e43378241396650bf36b0a0cec9834e3b47ddcedc251316c6fae09227925ff582f3760a7ea6527367617214685a9855f1c209e55b5864646b12f620f80fc11b86604896ad35198ab6e05f8e918115c1f5242255157c633c") write(r4, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000002040)=0xf900) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 15m41.242216427s ago: executing program 2 (id=1275): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000bc0)="0477960a4a7cdcc82d22c608976fa6f22b7490ecdbaaf42479d77d9e627191a829d060f883de6e51d53849ee5f3bf9db2ca65b1471df6770af", 0x39, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, 0x0, &(0x7f00000001c0)) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffff, 0x0, 0x8000}}, 0x50) splice(r5, 0x0, r7, 0x0, 0x50, 0xf) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r3, r9, 0x0, 0x7ffff004) 15m39.800305744s ago: executing program 2 (id=1276): memfd_create(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = semget$private(0x0, 0x2, 0x88) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000001540)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r6, &(0x7f0000004ec0)=[{{&(0x7f0000003e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80b1}}, {{&(0x7f0000004580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x50}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x3, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f00000000c0)=@arm64_sys={0x603000000013da20, &(0x7f0000000080)=0x9d7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 15m22.602726179s ago: executing program 37 (id=1276): memfd_create(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = semget$private(0x0, 0x2, 0x88) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000001540)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r6, &(0x7f0000004ec0)=[{{&(0x7f0000003e80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80b1}}, {{&(0x7f0000004580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x50}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x3, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f00000000c0)=@arm64_sys={0x603000000013da20, &(0x7f0000000080)=0x9d7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 14m9.704319217s ago: executing program 9 (id=1274): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)=""/109, 0x6d}], 0x1, &(0x7f00000006c0)=""/185, 0xb9}, 0x8}], 0x1, 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="41f4190a00986b000091d2acd566f100006f00", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000003c00088038000080080003000500000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00feffff7f"], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2082) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) dup2(r8, r6) r10 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r10}) 14m8.665198187s ago: executing program 9 (id=1281): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000bc0)="0477960a4a7cdcc82d22c608976fa6f22b7490ecdbaaf42479d77d9e627191a829d060f883de6e51d53849ee5f3bf9db2ca65b1471df6770af", 0x39, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, 0x0, &(0x7f00000001c0)) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffff, 0x0, 0x8000}}, 0x50) splice(r5, 0x0, r7, 0x0, 0x50, 0xf) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48}}, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="cf4a5db1ca0bd3642fed8a518390", 0xe}], 0x1}, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r3, r9, 0x0, 0x7ffff004) 14m7.770085502s ago: executing program 9 (id=1284): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14"], 0x38, 0x2404c002}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000cc0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x28) 14m7.205901893s ago: executing program 38 (id=1284): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14"], 0x38, 0x2404c002}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000cc0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r5, 0xae80, 0x28) 13m24.034088466s ago: executing program 4 (id=1410): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x28a3) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/111) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0xbc, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000804) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f9240"], 0x0) rt_tgsigqueueinfo(r2, r2, 0x2e, &(0x7f0000000340)={0xa, 0xfff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r6 = openat$fb0(0xffffff9c, &(0x7f00000002c0), 0x8800, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d4", 0x45}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4", 0xc}], 0x4, 0x0, 0x0, 0x8010}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x0, 0x58}) recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/89, 0x59}], 0x1}, 0xe}], 0x1, 0x12002, 0x0) recvmmsg(r1, &(0x7f00000044c0)=[{{&(0x7f0000000200)=@ax25={{}, [@default, @default, @rose, @null, @default, @netrom, @rose]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/241, 0xf1}], 0x4, &(0x7f0000000ac0)=""/203, 0xcb}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000c80)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/204, 0xcc}, {&(0x7f0000000dc0)=""/87, 0x57}], 0x5, &(0x7f0000004580)=""/163, 0xa3}, 0x1008}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000002240)=""/113, 0x71}, 0x6}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000002340)=""/141, 0x8d}, {&(0x7f0000002400)=""/153, 0x99}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/57, 0x39}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/122, 0x7a}, {&(0x7f00000036c0)=""/65, 0x41}, {&(0x7f0000003740)=""/189, 0xbd}, {&(0x7f0000003840)=""/4, 0x4}], 0x9, &(0x7f0000000440)=""/16, 0x10}, 0x29a}, {{&(0x7f0000003940)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f00000039c0)}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000900)=""/83, 0x53}, {&(0x7f0000003b00)=""/157, 0x9d}, {&(0x7f0000003bc0)=""/2, 0x2}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000003c80)=""/222, 0xde}, {&(0x7f0000003d80)=""/4, 0x4}], 0x8, &(0x7f0000003e00)=""/133, 0x85}, 0x5}, {{&(0x7f0000003ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000003f40)=""/124, 0x7c}, {&(0x7f0000004000)=""/201, 0xc9}, {&(0x7f0000004100)=""/199, 0xc7}, {&(0x7f0000004200)=""/104, 0x68}, {&(0x7f0000004280)=""/253, 0xfd}], 0x5, &(0x7f00000043c0)=""/246, 0xf6}, 0xff}], 0x6, 0x20023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 13m22.199339403s ago: executing program 4 (id=1416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) 13m21.697728844s ago: executing program 4 (id=1418): stat(&(0x7f0000008e80)='./file0\x00', &(0x7f0000008ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vcsa(0xffffff9c, &(0x7f0000008f40), 0xa6200, 0x0) syz_open_dev$media(&(0x7f0000008f80), 0x1, 0x400) landlock_create_ruleset(&(0x7f0000008fc0)={0x2000, 0x1}, 0x18, 0x1) syz_clone3(&(0x7f0000009200)={0x202000200, &(0x7f0000009000), &(0x7f0000009040), &(0x7f0000009080), {0x8}, &(0x7f00000090c0)=""/164, 0xa4, &(0x7f0000009180)=""/43, &(0x7f00000091c0)=[0xffffffffffffffff], 0x1}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009280), &(0x7f00000092c0)=0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0x8000000000000001, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x2, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x480000, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x80000000, 0x0, r4, 0x2, 0x8019}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000009300), 0x9, 0x40000) openat$vimc0(0xffffff9c, &(0x7f0000009340), 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000009380)=0xffffffffffffffff, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) 13m21.156695769s ago: executing program 4 (id=1419): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000600)=""/109, 0x6d}], 0x1, &(0x7f00000006c0)=""/185, 0xb9}, 0x8}], 0x1, 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="41f4190a00986b000091d2acd566f100006f00", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000003c00088038000080080003000500000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00feffff7f"], 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x4) syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2082) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) dup2(r8, r6) r10 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r10}) 13m19.902427678s ago: executing program 4 (id=1426): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x28a3) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/111) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0xbc, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000804) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f9240"], 0x0) rt_tgsigqueueinfo(r2, r2, 0x2e, &(0x7f0000000340)={0xa, 0xfff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r6 = openat$fb0(0xffffff9c, &(0x7f00000002c0), 0x8800, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d4", 0x45}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4", 0xc}], 0x4, 0x0, 0x0, 0x8010}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x0, 0x58}) recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/89, 0x59}], 0x1}, 0xe}], 0x1, 0x12002, 0x0) recvmmsg(r1, &(0x7f00000044c0)=[{{&(0x7f0000000200)=@ax25={{}, [@default, @default, @rose, @null, @default, @netrom, @rose]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/241, 0xf1}], 0x4, &(0x7f0000000ac0)=""/203, 0xcb}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000c80)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/204, 0xcc}, {&(0x7f0000000dc0)=""/87, 0x57}], 0x5, &(0x7f0000004580)=""/163, 0xa3}, 0x1008}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000002240)=""/113, 0x71}, 0x6}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000002340)=""/141, 0x8d}, {&(0x7f0000002400)=""/153, 0x99}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/57, 0x39}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/122, 0x7a}, {&(0x7f00000036c0)=""/65, 0x41}, {&(0x7f0000003740)=""/189, 0xbd}, {&(0x7f0000003840)=""/4, 0x4}], 0x9, &(0x7f0000000440)=""/16, 0x10}, 0x29a}, {{&(0x7f0000003940)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f00000039c0)}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000900)=""/83, 0x53}, {&(0x7f0000003b00)=""/157, 0x9d}, {&(0x7f0000003bc0)=""/2, 0x2}, {&(0x7f0000000880)=""/89, 0x59}, {&(0x7f0000003c80)=""/222, 0xde}, {&(0x7f0000003d80)=""/4, 0x4}], 0x8, &(0x7f0000003e00)=""/133, 0x85}, 0x5}, {{&(0x7f0000003ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000003f40)=""/124, 0x7c}, {&(0x7f0000004000)=""/201, 0xc9}, {&(0x7f0000004100)=""/199, 0xc7}, {&(0x7f0000004200)=""/104, 0x68}, {&(0x7f0000004280)=""/253, 0xfd}], 0x5, &(0x7f00000043c0)=""/246, 0xf6}, 0xff}], 0x6, 0x20023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 13m19.33994529s ago: executing program 4 (id=1433): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m18.725328892s ago: executing program 39 (id=1433): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000000c0)) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m42.506157315s ago: executing program 0 (id=3501): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/zoneinfo\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000940)={0x1, 0x1, 0x7a, 0x41f7}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x6, 0x1, 0xfff, 0x6]}, &(0x7f0000000200)=0x54) 5m39.320233718s ago: executing program 0 (id=3510): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x6, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x34, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x2, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xba, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "c6de32c546f0"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x6, 0x6, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x81, 0x3a, 0xf, 0x3, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x0, 0xc}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xfc, 0xa, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0xf1, 0xf8, 0x20, 0x3}, 0x25, &(0x7f0000000100)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xf, 0x4, [0xf, 0xc0c0, 0xc03f, 0x807f30, 0x7ec0]}]}, 0x9, [{0x40, &(0x7f0000000140)=@string={0x40, 0x3, "548c93cc12036d194eb3135430d975b3b93051aa187481618d12efc88dc89c51b5b7602fe245ec0f05ff25680096cb3a97959a4fcf6cdc24f29722dc4fe2"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x418}}, {0x46, &(0x7f0000000200)=@string={0x46, 0x3, "0c4850b02cee408700a91bbbc28153448fbf14837a6181117d34924650aa37361c8a45893307ce02f0df632e25f6f36d845494699a58633b079257834c893c269df65337"}}, {0x9a, &(0x7f0000000380)=@string={0x9a, 0x3, "0f8cb69a276baa110f2fc12bd1cdc48c7846dbabf77182c43eda6eea3ba6b21f2b5f2f2a002ca20ce0ba49324bf277ea3930904d1ae8e8d62c5fc3df184026b38f087c187cc09ee82f679c5e3cf563b79c2b837225c0cdfb9d39f046b9b37367e8d9e812a37df207b499694321d0aaaa8070ec040975fa8d498b4ee137d3e20aa50323a66e5953e7eb6269d5fa7ff7d61bb06574239c2ca7"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44e}}, {0xd8, &(0x7f0000000440)=@string={0xd8, 0x3, "eecab72eef5949b526fe1a48ddd32809cdaa2b1306d7956667f54fc1bd8f36e9f192d338f965e68b2edbc8a5d7aa2d2a8b6ff9ed88c84329c91af8be02dccff24e427b776c22a6b68e4283300a86161f9262b4d2900b032f0d73357192098a37b5d4607beb74e71b62d64f8190fb584c7300c7f041a3a551327c427dfe0efe54a184a3a3d2dc937d6893fce5c5295c9e6024bd515ba1234034f1eb37f15f0ef92df9af864d758417a998075c4c01069da53cd558d241398dd438ae5afec5e4971501f3b4d2d8bb534221653caf4a87417ca612190c7d"}}, {0xf8, &(0x7f0000000680)=@string={0xf8, 0x3, "1677ec208aa78055c40896ed8aea72d42ff256635ab90eccea6f364b38d1d9aa9cae3e14703c9e26634c6f4792acbb1454f8a3596457ebc3c4a9a272b96eabe33f1f5999ca8d24c932f4a94aeb9e89f24adb548aa139570ae1864b4e96c000e294f8f782c3a1acedfd0cdc50550cc51acfaf1e31bf15de5e477b9cd5223c81c9d919cb5a5682fbb7554cf46d5be51dc7aa672b10a27715148e4438e781306c12023ec117fc02672ec3494386326466b6f7a3ff0f8b33e7e8d44eda08f91dc2f2c604b4c8193b018f49b345c92577d59d8b449a2d67a051b04539c273127a6ae1bc8ef89911935440634103e351684e00097c1e8b3e2a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x404}}]}) syz_usb_ep_read(r1, 0x0, 0xcf, &(0x7f00000007c0)=""/207) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000540)={0x20, 0x3e, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0}) 5m36.216300951s ago: executing program 0 (id=3521): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$I2C(&(0x7f0000001480), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x60) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r6, r7, 0x3, 0x1, 0x4, 0x5, {0x38, 0x5, 0x5, 0xe, 0x200a, 0x9, 0x2, 0x5, 0xb, 0xd25, 0x7, 0x400, 0x2, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$inet6(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="dd", 0x1}], 0x1}, 0x24008800) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000340), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0x1001, 0x1, 0x0, 0xffffffffffffff71}, &(0x7f00000000c0)=0x40) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x8c, 0x10, 0x44b, 0x70bd2c, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x1000, 0x9020}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8000000000000001}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xf4b}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xe4e}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x8c}}, 0x0) 5m34.585055419s ago: executing program 0 (id=3524): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x7, {0x7, 0x0, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x0, 0x14, 0x3, "b844a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000800)={0x18, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x3b, "f719b363f2187172a8db3eeed4b19e65ec1d98b51b67cc8275cdbb250fe623d988e532171e886c702a62bf901f2646a53e215cabe9ee3194db7c82"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x2}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f0000000080)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x85}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m33.610198711s ago: executing program 0 (id=3527): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x9, 0x401, 0x3032344d, 0x32315559, 0x7, [{0x9, 0xc365}, {0x1000000e, 0xd}, {0x7, 0x200}, {0x8, 0x7fff}, {0xf, 0x4}, {0x5, 0x401}, {0x2, 0x9}, {0x2240, 0x80000001}], 0x6, 0x9, 0x1}}) (fail_nth: 2) 5m33.382914535s ago: executing program 0 (id=3528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x97, 0x8000, 0xb, 0x4, 0x1, 0x98, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x7, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x2, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0x2, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x1ff, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0xfa98, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x7fff, 0x1, 0x9, 0x6, 0xc79, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x60}}, 0x0) 5m32.90922063s ago: executing program 40 (id=3528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x97, 0x8000, 0xb, 0x4, 0x1, 0x98, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x7, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x2, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0x2, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x1ff, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0xfa98, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x7fff, 0x1, 0x9, 0x6, 0xc79, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x60}}, 0x0) 30.025812821s ago: executing program 3 (id=5520): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x38c, 0x1398, 0x1398, 0x38c, 0x1398, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000, 0xff], [0xff000000, 0xffffff00], 'nr0\x00', 'vlan0\x00', {}, {}, 0x6, 0x8, 0x2, 0xf}, 0x0, 0xf4, 0x13c, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x4, 0x0, [], [], 0xfd}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth0_to_hsr\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @local, @remote, @remote, @private1, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0xfffffffe, 0x7, 'pptp\x00', {0x233c}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x484) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0xf8ee34745f88a816, 0x300) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000000003f, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) lstat64(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x2ce}], 0x1}}], 0x1, 0x40000d0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) close(0xffffffffffffffff) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000002c0)=0x2c) sendto$inet(r5, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 25.593674375s ago: executing program 1 (id=5522): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 24.155034022s ago: executing program 8 (id=5524): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000003280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b0a8d2ba779a"}]}, 0x30}}, 0x0) 23.226763094s ago: executing program 3 (id=5525): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000200)) syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100020000000400"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 22.568555381s ago: executing program 1 (id=5526): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000200)) syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100020000000400"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 21.5976897s ago: executing program 5 (id=5530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 21.430550827s ago: executing program 8 (id=5531): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x188, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x94, 0x1f, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x130c, 0x3, 0xffffffffffffffff, 0x1, 0x4}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x94, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x67, 0x6, "bdc2071950102cb2b080ba1982286d1f1892ecb82e0fd163cb5794a24a8b72ee6e372851051c537ebcfaf9eff6d0b58d9e8cf0f4351019947c24ecad3c05782e72cbbd78a3e91698317a5ce44f2a02f04ac55df3685c69d64762fb667ebe9890534e02"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0xfffffffc}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa6}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18.249807876s ago: executing program 7 (id=5532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x2, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40f, 0x0, 0xffffffff}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001b00)={'veth0_macvtap\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x8}}) read$FUSE(r5, &(0x7f0000008100)={0x2020, 0x0, 0x0, 0x0}, 0xfffffddd) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x1f, 0xfdfffffd, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x8000000004, 0x0, 0x7, 0x0, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x82000, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) 18.144198962s ago: executing program 5 (id=5533): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) write(r0, &(0x7f0000002280)="a61077e6c920afcb145c9620ed9c2762bbf3625e97b1cc94c3834f780ec5bef3db18aa9eca3690dc07c4edab0880b3d765f3c75031948e6eb966c8c344179475641ba9ce2cf1fd653bc0c3160d7c8073a64a58957454a16ba8dd6357415b2d28f7234b9829145c62a654bc6cfc0abd55967664ac389b44d8e1594d64296b930c2c4c7c8e8306a8f8a80180583e53ad56246f03beb55c7c22a18b615989a07c63a54f74b54e5f6c674adb1cc19ea3e19adf2b56618a88a876c84bf123c4f155112f09e40893682ba738feef6ccc969c28d363fbb3fda47f2a7483fc37fdda05d782bd75722cdb9b21e476e544866f650bbdd1de672950f1df4d640170", 0xfc) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) readv(r1, &(0x7f00000007c0)=[{0x0, 0xc}, {&(0x7f0000000700)=""/67, 0x43}, {0x0}], 0x3) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa282) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r4, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x10}}, 0x24, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x406, r2) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0xb, 0xd, "c9c26674", "8e485390"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x11, 0x8, 0xa2, 0xb, 0x0, 0x4, 0xa42}}}, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x20, 0xe, 0xd2, "09e13c20793c9e6d0430ac4e511c718c46ac797bb1bef4a82e2be3f4f6168bc95a1aed7a87b854a2855d33a25615d7d914189c7bf32cc43a11af4bb0153c10d03a8b46667e50a8a51808173cd3261098c5ab046b7fd56327b7f872a470311ce7e2fc8f1ba755c161d94fc3dedc00fe2779c74e1b577c198e14e9d15562795b9d0be6d6d72c1a43dd577eaa5fb5092f6b5de7dded838364ca68a5a76333bf3042ae3df81c2e69584ea0282686206e78c5df0eba2bedbe654b567617c0eb76d45c8a06cd1bc337be3aa5716742723027a8ca09"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r6], &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000540)={0x40, 0xb, 0x2, "e333"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="081e8ffe75ee"}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x54a3, &(0x7f0000000480)) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 18.075806421s ago: executing program 8 (id=5534): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd67}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRESHEX=r1], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)}, 0x4000000) r3 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000018c0)={'#! ', './file1/../file0', [], 0xa, "b524be350e7611b133a163b4ab1b0400000000000000000000000000200080ca925f71fcca768a3799bc574e8cbab6290e38d3da0ed66c23ef689b28aaa419845ae174abd9ee5c370a4b62d3ce006b3dee871ce123f03ce3766c9dae569070c09d917831c224a271b5302b90b4c8d778bb488276c5cfa6206142f094e9"}, 0x91) write$UHID_INPUT(r6, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000480)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20008091) 17.502305594s ago: executing program 1 (id=5535): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500"], 0x2c}}, 0x0) 14.049189713s ago: executing program 5 (id=5536): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 13.51555213s ago: executing program 1 (id=5537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x28}, {&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="fd57eaabc453f25452ef57006cc8e52741e52fde82a193350033800400a0800400eb8067ff172d2e5e6d8970e6658c503f8085b8e9b43039e9ec980e722e1b3ff6835146e08e1ef917a1b6620000000000000197ea5d8702dce97d73ce51399dabdfe61774fa10aee62f4300766cda4b0d08109c0377e23d6c5c3472eb1713356738548b4ea9d347688877a333307cb8e98d868740f9ec5bacf4ecbba279101c4842f4598f04ba05d5d7fbf40b0ca309c5f8815ed33f548fcc2002db6909795fad3025f4577c99d69cb60737424dcddabdb4ce277824", @ANYRESHEX=r1], 0x1cc}, {&(0x7f0000000580)={0x53c, 0x42, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="0fe9dd82312b0b0bbe4f1082758180bac7", @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@private0}, @nested={0x504, 0x102, 0x0, 0x1, [@generic="5838f678d7aa15fd3bbbce0ed3950959eea5275c1769d1d864ef28d4122967217456310e6fed1acd6a5d6f1c38e2404c0279a5ceec36e9564e23d465fa3791cce624cca07c4a7fafe990b652e3e226b1cd0bab619e7012b08fb260a47f70d78a278507b161d45c58f636d9145bcaf6358c08bc5d5babd30c0d967e2c12496fcf87b0bb37539735b36d2f5c0981ae8d4861eb187521805a9d9dc122992d91a30dce067af8fc3d66ba9fb325bb5ffd00c8f9b5b36364f49b2546846a00f7df5227aa72757a7d7fb94e2f1a940cd90f9fb235deecf9b820bd74ec63fd93", @nested={0x1b7, 0x134, 0x0, 0x1, [@generic="eb454f3d6e7883c080748db1d89acb5d2c425c9e11fce6efdafed9cfd9d4241160b3ae267d5a38ff18b773747983b386584b74111a8da1515f64574e8fb3514302ad7a34988e0b42be2599e5ec02206098e32196350d1c8aed92d0ff22ac9335a6cfb9fef60a5a328a101fd208ab6f2a0a48215196d26f0fd5743b62b9ae066d81c83ad8fcecdfce28751dc2821aec74769c7e7f881fd3a18527e1f873b269613f8851ec1d9f5a4d09e0f63c7e89f8", @nested={0x14, 0xca, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @u32=0xfffffffc}, @typed={0x8, 0x68, 0x0, 0x0, @fd}]}, @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xdd, 0x136, 0x0, 0x0, @binary="27b7752e4492bf23653f9c6f03d505a9bbc50edf88d6641f85664a3afac8eee34844a964496fe2dd149c387e688ad2417a0eb5d1442e4dd16f6fa81cf419dcbacc33024cea8a0555d0d16d1a50546fda394523abee5aabac1ffa25acf751089757720b8e83290934221eda5a2064f9deeb45075095e2ad9d722d6a0134cb84cfca82bc091c67b57ed1ce80add3c880ce4280a0aaecb1a80a493b298ff1b44d061888daaf9f0577c39b13f62df578d53869bc4f4787697fb75362815df5295b4e87d8e5b02b6c821b7de07c4f081a5525d3c8d50a605dd7b7db"}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x8001}]}, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@remote}, @nested={0xb6, 0xa2, 0x0, 0x1, [@generic="77c2966f27f4b73930d750d2ac116c5d6cfa97040570b46f1e2b6c5b270b5ddd28a02bc3daa7634e9eb83f91582743a60dc00aee8b894326dfa193af780ef86d71c4d7facb06618deb321e188ad5a2f258a87e59da3d933e569951e02c9b7e572af2b551734ae751d4b27a3c852b02fcc21dcd87c2a974e6306dac05b279ca8cf45c8497030771d5f60c0ed4077f23480bc5ffc69f1e2dca72ffe75a96e5c5a6937cf8a817bc2d9664a8590086b3874f5405"]}, @nested={0x8, 0x8f, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @generic="426c5dd1f05a88b03172bd4b5a453eb0557a54aa01491f58362d200cfad87d61145bcb64", @generic="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", @generic="67c7aded5abd0981047b7fa05652dfcb779779b854184193e8f4afc6ca6924f07406a6b3cfa55fe9a23e8305433bedde93f4b456197f1e2d430abcfa59611f1bbde91b2e211ac67c1f30c979c88457197353421486f843b3ee60be6828c158f4f338ccebc2e5c66c6063a6fc990c89", @typed={0x6, 0xb, 0x0, 0x0, @str='/\x00'}]}]}, 0x53c}], 0x3, 0x0, 0x0, 0x44011}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket(0x15, 0x5, 0x0) connect$l2tp6(r5, &(0x7f0000000240)={0xa, 0x0, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3fe}, 0x20) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x20040080) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x8f23) (async) getsockname$l2tp6(r5, 0x0, &(0x7f0000000100)) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0xc8973a6482babc91, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000300)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003800010325bd7000fadbdb2504000000d5b3f482f98800ac2e658dc0a35487c88562033f8f1313d05b472530e01bb9ecd937894885c7ace627476d72701bd49f57929c0393c91fce7a7e8580239e25bb671a22ef0c620662e6d816", @ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x20048085}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 12.81846508s ago: executing program 5 (id=5538): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x500, 0x0, 0x0, 0x0) 11.17727637s ago: executing program 7 (id=5539): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB], 0x2c}}, 0x0) 10.733354986s ago: executing program 3 (id=5540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_io_uring_setup(0x34e7, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x3, 0x281}, 0x0, &(0x7f0000ffe000)) getresgid(0x0, &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), 0x0) process_vm_writev(0x0, &(0x7f0000c22000), 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440), 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000001000030400000000fedbdf25000074006b18818a8afa22324b137fa8d5b118af", @ANYRES32, @ANYBLOB="00080000075005003c0012800b00010062726964676500002c00028005001900020000000c00230001000000000000000c00220006000000000000000500240001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x0, 0x200}, 0xc) recvmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1, &(0x7f0000000400)=""/223, 0xdf}, 0x41) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @thr={&(0x7f0000000300)="22bbcb01f16afd015ddef80ea304b9d1ab8f376b165c1be724afa012556bf7dfc5f94e0df94dad9a6648ad4397c49953ce511585e8a7bdceb7f09780fb5a836b3def47605ae437d76e4c3c4a40b96e3a0d513feee2363061de0cfdcbbc5b338fe255fd0ada5ccd653407ba76c66205830e20291d76c13d79477c86a207b466136fe797a45f7b710212235b4cb42b32fb99e53415639c6dcac3cac71d75d79b13fdc3212c71ce177a1c18d4c0f57151674f4ddb1044b92cc30f05b66f3420d72cc953c7a662ec66e7a062fe966a30621e8f07", &(0x7f0000000080)="42ec0d8edfc6b9c587b4d1ca8c2bdf6983d20a2b4d1d3b416abb977082f0e288f3e1b38b0d2087d5623f03d4"}}, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) 10.292747803s ago: executing program 5 (id=5541): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000003280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b0a8d2ba779a"}]}, 0x30}}, 0x0) 9.103350115s ago: executing program 8 (id=5542): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfbfc, 0x0, 0x0, 0x90f0}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x10, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7ff, 0x9}, &(0x7f0000000180)=0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x2a36, 0x10100, 0x2000004, 0x20000002}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}, 0x1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002540)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002580)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000080)={0x20000000}) 9.087324747s ago: executing program 7 (id=5543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x20, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 8.898207363s ago: executing program 1 (id=5544): creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x11, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xc6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1fff, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 8.802531697s ago: executing program 5 (id=5545): syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402"], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0xc) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x9a3, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0xce, 0xa7, 0x49, 0xff, 0x11d9, 0x1002, 0xb4c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x991, 0x4, 0x7, 0x80, 0xa0, 0x2, [{{0x9, 0x4, 0x2, 0x32, 0x4, 0x5b, 0xfe, 0xa1, 0xb, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8000, 0x3, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2d, 0xb, 0x5}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x822c, 0x2, "2c21174ce4"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xf, 0xfffd, 0x80, "62f60f9c93cd93f92e"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x7, "e6d323649543dda5"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x3, 0x1001}]}], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x4, 0xe}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x7, 0x9, 0x3, [@generic={0xa4, 0xf, "682d900fed40e8d5bb0b57048a29cf17a3deb8cfa172aa99e7d0ded7e5b0f0cb102ed59afba856ab1de5e96a9e70efdb45debd5051bf3c30ddb44308e3d0786c4b4be1d8288fc8f3321333511a2aee7828c21e80ce88ab9d392522b04754f5acf13ac7b20061e21201dff960ef01b454ea4b28e864da00c5d85bc12378cc3b10f7c5f81cbd2a6a11dfc35f350a60d697f920eea5a1b766584b16457455773d17b7a9"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x80, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0x79d}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x9, 0x0, 0xde, [@generic={0xaa, 0xf, "a8af091fae11c69a0086d90e9131f2021c46da261bd1a4423bd7f1b81440fed9e09d5933b5c158e7cea025ce10381a64065a2f651c45ec7640e15dbf244a7fd5105dda884c08195f86f33e749a05753a0c8d1ddf2b7308ffe6cac58c52e935d626dc68a5c60185a93f5c857b5d483d9da19d2fba54c26c1e2cf3ff1b601758bf50029cdd68b59156b4d5faa2bd5169b39aa9063c9f7daa6af26bd254be9d496d9de9e5fcb6a1ab80"}]}}]}}, {{0x9, 0x4, 0x4, 0x4, 0xc, 0x1d, 0xa0, 0xb5, 0x22, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "ed57df8404"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x800, 0x2, 0x3}, {0x6, 0x24, 0x1a, 0xb7, 0x35}, [@mdlm_detail={0x2b, 0x24, 0x13, 0xe, "5919b0e9a2320c8debf68b7e17b52c5f6a70eca67bdeb7ed37b47914c50167b6feb684f2a3234b"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x4, "c9b5102142d00ec721862feec1195c71f8703d72eef0ea057804c94ded24c45bf0d129d0531f19d0b9b485a631f284fdf7e31ab978c3c58bccca4dbcdfb711e3b74331d89dca0effb5a55cd8d935d7c36a4afda42067be6b2a49cdf47ae41d6681e8ab0c9bdf0bbfb2e4afdf48aff145b6894e8c0879511874aacb15fb3fcee3bea6e24c8395662bc754f7dc7a01e18a8a55aa1344dde3ca6817583c36cf6b36b03005a401836250a2c713f9f1480f110f25de4197027dc61a21f2b84cd688ed1f4f912b662037b3242e360193a595d7a38352df1e046f3b6f0180"}, @country_functional={0x8, 0x24, 0x7, 0x2, 0xa6, [0x7]}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x7}, [@processing_unit={0x8, 0x24, 0x7, 0x5, 0x4, 0xf, '%'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x3, 0x7, 0x3, 0x4, 0xa}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x10, 0x40}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x0, 0x9, "c00478e9"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x5, 0x6, 0x8}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x5, 0x6b}]}], [{{0x9, 0x5, 0xb, 0xc, 0x980d9006cb06d34b, 0x9, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x7}, @generic={0xfe, 0x2, "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"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x48, 0x7a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x0, 0x78}, @generic={0x88, 0x6, "8e860e17f5dc6261f415fba997dd5bbb39f9e5c493a9920585b2d03cdb00db03d889cea26bac60da8cf929e8d933c3a5ed3d75a100187b78aa283e3d979358d2338d6b418c1d7ca2121684b1b60c8c1e10892c1b7788c4cabc9035b809b41733c2e1a1649334cdf6b31cd92470431da9b43113ea27e364d8142083d75762228a8c1bcefb3cd9"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xba, 0xf2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xc}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x6, 0x84, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x81, 0x5, [@generic={0x68, 0x4, "0d83b540256ef5dd18ca3b6a2f8c6c1acad80c0dab913cc801584dbe7302eda538a1d807d944d3695dbfd98816a89cb86012ee7e2242196448fb3efb557efe083f642faa1aa0fb9d258ed9cfcf3b5d6962560f13d8a18c6f53246ffc17b4cd438316ec3fe8d5"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x73, 0x6}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xa, 0x4, 0x80}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7f, 0xb9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x417e}]}}, {{0x9, 0x5, 0x80, 0x10, 0x440, 0x5, 0x3, 0xd9, [@generic={0x78, 0xd, "b00a69534affe4b0b149a5f43e797743b3e6bc3fda7408c3b50a0ea20e616d15fdef0e8a8747f8339ce2d9ca48f85b1eb218b403054d32fd0e7f335f51f8e45418a03cc0f0a182cac93c0b39950f06766855de535345c5b70429d34a234caedfa8f5fc7960ed151b72f1b91119006e7bc094f86434a7"}, @generic={0x3f, 0x8, "6aebc4c9ee46250c387b726e76273fdc732758855833ec7f97f19d3c595f477c36f2079ce97fbe19ce8a62699597a6b3c20df10639cf3ae966d582abbb"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x7, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf5, 0xff00}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x5931622891055d7e, 0xff, 0x8}]}}, {{0x9, 0x5, 0x8, 0x3eb93aa51b9e9431, 0x40, 0x3, 0x21, 0x1, [@generic={0xf6, 0x23, "f7926831b0c54695c44b8a6b725ccaff664142c8f6868a3be395126a134dcdb642f793e2c196438fabc93ec8c8b36ceb3209bb692d02d4060d7337a7942a1e9bce37b3d034b489a5bebaaea04817c589e554b89c0a8d5848a1a02c33dfd559cd6690048ed039c8f95fa7905ae7a5e80502ad6fe0ee4ad00c72b02759dadaa045e3819d6086e0dfaafbd583547d337da8d8b21d17ea2f39686c892954a34f9b04c0f085136357e155c2502c314af85894caa4283e707ddf9ce852ed666dc37e1108b163865f735744ba0d650d06f2f75b355608913b20720fb48ae3f75113f78059326b42ee59b223090c952c6f62caa4ff566135"}, @generic={0x19, 0x10, "74fdba92975c61366aeaaa3562fece810d1acbf78c0f47"}]}}]}}, {{0x9, 0x4, 0x4d, 0xfa, 0xb, 0xff, 0x67, 0x12, 0x4d, [], [{{0x9, 0x5, 0x9, 0x3, 0x408, 0x2, 0x8d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x2e, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xc, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0xb}, @generic={0x22, 0x24, "de4c71bfff797c391e3809e7f2907739864d52a869cd7a2aa141728a77b9ceaa"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x8, 0xb5, 0x4}}, {{0x9, 0x5, 0xb, 0x12, 0x400, 0x4c, 0x0, 0x4, [@generic={0x3c, 0x2, "ddbf3c3f64c2f07528ecc85af2ba8c052d3741d0de9fe92fcb456687d9f14b98d381336d9b8b4997318250f9d9da6ac1ed68046d1b4a49f63e2a"}, @generic={0x2a, 0x3, "fb452a0077749390024233b3b1d16a8390fb9e7330cadfd69016047f633aa55e5721ed719330d28f"}]}}, {{0x9, 0x5, 0xe, 0x18, 0x10, 0x9, 0x8, 0x3, [@generic={0x2c, 0xc3391d9fc5dfc244, "11b754f77daf10618a5db78811aa0b6c898efde4f9cd7c536428cafc97937b014ea34ebe78d31b1281b0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x0, 0x4, 0x0, [@generic={0x64, 0x10, "206b34855b5e4099efe5c2648a1defea80b75e278001e76e77b00737445a0d18e555b3dfd3ef83e025a5ee2ebce3c0d8c66996c9169d9de19e25617cc2a1a12f4ce81d020cceb8799c00cf9a304dd0eba3d96e425baf40b50cf9337558c032eff1b7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x56}]}}, {{0x9, 0x5, 0x0, 0x44a642db78fdd887, 0x200, 0x59, 0xe5, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x4, 0xf8, 0xfd, [@generic={0x16, 0x1, "abf7e06222b65c2d9436ee27599661baf0359253"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7f, 0xed, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xdab}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9b28}]}}]}}, {{0x9, 0x4, 0xe9, 0x37, 0x1, 0xff, 0x6, 0x6, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0xf, 0x2}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0xae, 0x2, 0x5, 0x20, 0x7}, 0x39, &(0x7f00000002c0)={0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x20000, 0xf780, 0x4, [0xff0000, 0xff0000, 0xffc000, 0xffc0f0, 0xffc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "bc901747ea2a7434d345cd78eec95c8c"}]}, 0x4, [{0x8f, &(0x7f0000000d80)=@string={0x8f, 0x3, "6b8b0887b0cb9d48df5e041965b18e53501bf02d2cdb5be742993664b6a69aecd13f5c37a90b68892a1a8b1eaf6f60179074ca8312b4b0e168cefaa8640835d66fc7ea01bf5c22c70b4baf0c04359f9f2004332a8b9989b13ac9c025d2d8279a20b00c007582d55dade73231664be822b9278a97ae8d8c1865e63006e8752a328ed007ccc56ca66267d776441d"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2401}}, {0xda, &(0x7f0000000e80)=@string={0xda, 0x3, "54dd636f5dd7f04cc3a023ecf78d318c742b68e7ba33d3a31603050f823daea8b15aebfcc1a4ec5b71bb37932f43757d4d89dd3bbb2b96cdbacfe2be35f9f68d25bde68528cda50c0e8c7dd4682b163c4c20a4866d0c13c7f79231e969346f1708f1360649009392065445b78e2f70ced69868930e8132496f57ff441d49f498441a4a08541e345c347fa69b240d3d7d9d9fc6ca9aa4cdf48332f94c6c3c5e57e1320dd7199673133251732c6f1c4720c4f6a685972e923395f156c62a59523e31b874076eb7c8ba5c0f1f57317a5e73d73df508093697bc"}}, {0x95, &(0x7f0000000f80)=@string={0x95, 0x3, "19b3236d773379c88144c9703beb9bf9d27d86f6fbc88849971dd4eddbe14150ea7ef6fceb541881b20b77598bc23ab5a40372e55e312ad0d78b6cd368b765296654565b1b75c4e65c369c072cb0ab2d23f38ca173e8530e0fdd09836a9221596d065fc5d5c2dccc700fa93bdcf545c2a7297274d3791c4628a8282deeb5528d589f720a028c086f6d48a78bac652fe205eb96"}}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = semget$private(0x0, 0x4, 0x1) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000001080)=""/84) r3 = openat$udambuf(0xffffff9c, &(0x7f0000000280), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000300)={0xffffffffffffffff, 0x4002, 0x1000000000000, 0x8001}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa}]}, 0x28}}, 0x0) semget$private(0x0, 0x3, 0x116) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 7.952727662s ago: executing program 3 (id=5546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000200)=""/252, 0xfc}], 0x2}, 0xa}, {{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f0000000700)=""/234, 0xea}], 0x2, &(0x7f0000000800)=""/212, 0xd4}, 0x8}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000900)}, {&(0x7f0000000940)=""/24, 0x18}], 0x2, &(0x7f00000009c0)=""/154, 0x9a}, 0x4}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/55, 0x37}, {&(0x7f0000000d00)=""/174, 0xae}], 0x4, &(0x7f0000000e00)=""/252, 0xfc}, 0x800}], 0x4, 0x22, &(0x7f0000000f80)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8230}, 0x3}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 7.877060079s ago: executing program 7 (id=5547): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x7, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x10b240, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x2a, 0x3, 0x20000003) fsopen(&(0x7f00000000c0)='fuseblk\x00', 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYRES64=r4], 0x20) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x89, 0x0, 0xffffffff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1f, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) 6.660455614s ago: executing program 1 (id=5548): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$key(0xf, 0x3, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x1100, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0xc000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x7, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r8, 0x0, 0x6, 0xb, 0x4, 0x2, 0x0, 0x932, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x7f, 0x7723, 0x1]}]}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @broadcast, @val={@val, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x63, 0x0, 0x49, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4e22, 0x4e22, 0x4, 0x2}}}}}}, 0x0) syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) socket$nl_route(0x10, 0x3, 0x0) 4.624111129s ago: executing program 7 (id=5549): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x28a3) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000000c0)=""/111) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={0xbc, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000804) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f9240"], 0x0) rt_tgsigqueueinfo(r2, r2, 0x2e, &(0x7f0000000340)={0xa, 0xfff, 0x4}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r6 = openat$fb0(0xffffff9c, &(0x7f00000002c0), 0x8800, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fe", 0x4e}, {&(0x7f0000000300)}, {0x0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4", 0xc}], 0x4, 0x0, 0x0, 0x8010}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ed000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x0, 0x58}) recvmmsg(r8, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/89, 0x59}], 0x1}, 0xe}], 0x1, 0x12002, 0x0) recvmmsg(r1, &(0x7f00000044c0)=[{{&(0x7f0000000200)=@ax25={{}, [@default, @default, @rose, @null, @default, @netrom, @rose]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/241, 0xf1}], 0x4, &(0x7f0000000ac0)=""/203, 0xcb}, 0x6}, {{&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000c80)}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/204, 0xcc}, {&(0x7f0000000dc0)=""/87, 0x57}], 0x5, &(0x7f0000004580)=""/163, 0xa3}, 0x1008}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000002240)=""/113, 0x71}, 0x6}, {{&(0x7f00000022c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000002340)=""/141, 0x8d}, {&(0x7f0000002400)=""/153, 0x99}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/57, 0x39}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/122, 0x7a}, {&(0x7f00000036c0)=""/65, 0x41}, {&(0x7f0000003740)=""/189, 0xbd}, {&(0x7f0000003840)=""/4, 0x4}], 0x9, &(0x7f0000000440)=""/16, 0x10}, 0x29a}, {{&(0x7f0000003940)=@x25, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000900)=""/83, 0x53}, {&(0x7f0000003b00)=""/157, 0x9d}, {&(0x7f0000003bc0)=""/2, 0x2}, {&(0x7f0000000880)=""/89, 0x59}, {0x0}, {&(0x7f0000003d80)=""/4, 0x4}], 0x7, &(0x7f0000003e00)=""/133, 0x85}, 0x5}, {{&(0x7f0000003ec0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000003f40)=""/124, 0x7c}, {&(0x7f0000004000)=""/201, 0xc9}, {&(0x7f0000004100)=""/199, 0xc7}, {&(0x7f0000004200)=""/104, 0x68}, {&(0x7f0000004280)=""/253, 0xfd}], 0x5, &(0x7f00000043c0)=""/246, 0xf6}, 0xff}], 0x6, 0x20023, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.459532692s ago: executing program 8 (id=5550): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x700}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2.442463658s ago: executing program 3 (id=5551): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x12, 0x4) 822.62963ms ago: executing program 7 (id=5552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x151540, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) mq_open(&(0x7f0000000280)='syzkaller0\x00', 0x800, 0x10, &(0x7f00000002c0)={0x5, 0x202, 0x8, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x40) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fanotify_init(0x200, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x8a833d9fa39017f3, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x0, 0x12062, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000001c0)=0x2) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000040)={0x2, 0x6, 0x2, 0x401, 0x7, 0xa83c, "6c3677719085d7a8619ca3788f5ead5e", 0x8, 0x8, 0x4, 0x8, 0x6, 0x5b, 0x1}) r6 = socket(0x10, 0x803, 0x9) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) 85.469234ms ago: executing program 3 (id=5553): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (fail_nth: 7) 0s ago: executing program 8 (id=5554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 1474.347384][ T43] usb 2-1: USB disconnect, device number 71 [ 1474.953188][ T43] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1475.010491][T25178] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4943'. [ 1475.118014][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1475.136638][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1475.136665][T25182] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4944'. [ 1475.160905][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1475.172365][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1475.186995][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1475.198110][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.213459][ T43] usb 4-1: config 0 descriptor?? [ 1475.342997][T10543] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1475.517984][T10543] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.528654][T10543] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1475.539815][T10543] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.553820][T10543] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1475.563028][T10543] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.582289][T10543] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1475.597837][T10543] usb 9-1: invalid MIDI out EP 0 [ 1475.633756][ T43] plantronics 0003:047F:FFFF.005B: ignoring exceeding usage max [ 1475.677717][ T43] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1475.683221][T10210] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1475.817504][T10543] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1475.847411][T10543] usb 9-1: USB disconnect, device number 94 [ 1475.873052][T10210] usb 2-1: Using ep0 maxpacket: 8 [ 1475.884715][T25170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.893252][T10210] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.893280][T10210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1475.934680][T10210] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1475.936741][T25170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.980298][T10210] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1475.992206][T10210] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1476.015605][T10210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.030945][T11038] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1476.033496][T11038] Bluetooth: hci5: unexpected event for opcode 0x0c22 [ 1476.061854][T10210] hub 2-1:1.0: bad descriptor, ignoring hub [ 1476.061887][T10210] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1476.062451][T10210] cdc_wdm 2-1:1.0: skipping garbage [ 1476.062468][T10210] cdc_wdm 2-1:1.0: skipping garbage [ 1476.090571][T10210] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 1476.090597][T10210] cdc_wdm 2-1:1.0: Unknown control protocol [ 1476.410289][T25198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.410570][T25198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.559129][T10210] usb 4-1: USB disconnect, device number 113 [ 1476.583593][ T43] usb 2-1: USB disconnect, device number 72 [ 1476.881974][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1476.906408][T25206] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1476.916505][T25206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.420352][T25220] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4957'. [ 1477.454311][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1478.153090][T10543] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1478.396329][T10543] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1478.409364][T10543] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.436821][T10543] usb 6-1: config 8 has no interface number 0 [ 1478.447456][T10543] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1478.511864][T10543] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1478.541874][T10543] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1478.574621][T10543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.143875][T10543] usb 6-1: string descriptor 0 read error: -71 [ 1479.191966][T10543] ir_toy 6-1:8.177: required endpoints not found [ 1479.219906][T10543] usb 6-1: USB disconnect, device number 93 [ 1479.265946][T25244] binder: 25243:25244 ioctl c0306201 0 returned -14 [ 1480.127991][T25269] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4980'. [ 1480.174608][T25269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.226654][T25273] netlink: 396 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1481.516711][T25309] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1481.653023][T10543] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1481.824112][T25322] IPVS: stopping backup sync thread 25323 ... [ 1481.843780][T10543] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1481.865151][T10543] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.892780][T10543] usb 2-1: config 8 has no interface number 0 [ 1481.907850][T10543] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1481.929285][T10543] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1481.945434][T10543] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1481.997261][T10543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.548235][T10543] usb 2-1: string descriptor 0 read error: -71 [ 1482.557599][T10543] ir_toy 2-1:8.177: required endpoints not found [ 1482.579320][T10543] usb 2-1: USB disconnect, device number 73 [ 1483.502619][T25338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5006'. [ 1483.502766][T25338] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1483.502804][T25338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.807273][T25345] netlink: 396 bytes leftover after parsing attributes in process `syz.5.5008'. [ 1484.334371][T25363] IPVS: stopping backup sync thread 25368 ... [ 1484.579631][T25370] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5019'. [ 1484.735283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.744003][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.546634][T25380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5023'. [ 1486.406656][T25408] netlink: 396 bytes leftover after parsing attributes in process `syz.7.5036'. [ 1486.473447][T10543] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1486.653921][T10543] usb 4-1: Using ep0 maxpacket: 32 [ 1486.793641][T25421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5042'. [ 1487.318799][T25434] netlink: 396 bytes leftover after parsing attributes in process `syz.1.5047'. [ 1487.805093][T25442] netlink: 396 bytes leftover after parsing attributes in process `syz.1.5051'. [ 1488.212619][T25458] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5059'. [ 1488.491363][T25469] netlink: 396 bytes leftover after parsing attributes in process `syz.8.5064'. [ 1488.520588][T25470] netlink: 396 bytes leftover after parsing attributes in process `syz.7.5065'. [ 1489.269636][T10543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1489.299008][T10543] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1489.324146][T10543] usb 4-1: can't read configurations, error -71 [ 1490.603745][T25516] binder: 25515:25516 ioctl c0306201 0 returned -14 [ 1492.771716][T25569] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 1492.780520][T25569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1492.787925][T25569] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.795363][T25569] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.809399][T25569] netlink: 'syz.3.5107': attribute type 1 has an invalid length. [ 1492.876033][T25569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1493.398663][T25586] FAULT_INJECTION: forcing a failure. [ 1493.398663][T25586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.441329][T25586] CPU: 1 UID: 0 PID: 25586 Comm: syz.3.5115 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1493.441361][T25586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1493.441376][T25586] Call Trace: [ 1493.441386][T25586] [ 1493.441396][T25586] dump_stack_lvl+0x189/0x250 [ 1493.441428][T25586] ? __pfx____ratelimit+0x10/0x10 [ 1493.441453][T25586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.441478][T25586] ? __pfx__printk+0x10/0x10 [ 1493.441520][T25586] should_fail_ex+0x414/0x560 [ 1493.441548][T25586] _copy_to_user+0x31/0xb0 [ 1493.441581][T25586] simple_read_from_buffer+0xe1/0x170 [ 1493.441617][T25586] proc_fail_nth_read+0x1df/0x250 [ 1493.441642][T25586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.441666][T25586] ? rw_verify_area+0x258/0x650 [ 1493.441692][T25586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.441715][T25586] vfs_read+0x1fd/0x980 [ 1493.441748][T25586] ? __pfx___mutex_lock+0x10/0x10 [ 1493.441774][T25586] ? __pfx_vfs_read+0x10/0x10 [ 1493.441803][T25586] ? __fget_files+0x2a/0x420 [ 1493.441827][T25586] ? __fget_files+0x3a0/0x420 [ 1493.441844][T25586] ? __fget_files+0x2a/0x420 [ 1493.441873][T25586] ksys_read+0x145/0x250 [ 1493.441903][T25586] ? __pfx_ksys_read+0x10/0x10 [ 1493.441933][T25586] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1493.441959][T25586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1493.441984][T25586] __do_fast_syscall_32+0xb6/0x2b0 [ 1493.442010][T25586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1493.442037][T25586] do_fast_syscall_32+0x34/0x80 [ 1493.442069][T25586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1493.442095][T25586] RIP: 0023:0xf711e539 [ 1493.442114][T25586] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1493.442133][T25586] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1493.442156][T25586] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f510e620 [ 1493.442171][T25586] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1493.442183][T25586] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1493.442195][T25586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1493.442208][T25586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1493.442238][T25586] [ 1493.672784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.343566][T25607] IPVS: stopping backup sync thread 25608 ... [ 1494.357683][T25607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5119'. [ 1494.441986][ T5961] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1494.646323][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 1494.657925][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1494.669744][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1494.680558][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1494.719636][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1494.746432][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1494.794188][ T5961] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1494.822815][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.870636][ T5961] usb 2-1: Product: syz [ 1495.021178][T10210] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1495.029122][ T5961] usb 2-1: Manufacturer: syz [ 1495.047831][ T5961] usb 2-1: SerialNumber: syz [ 1495.162579][ T5961] usb 2-1: config 0 descriptor?? [ 1495.163173][T10210] usb 4-1: device descriptor read/64, error -71 [ 1495.175156][T25603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1495.219425][ T5961] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input123 [ 1495.278924][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1495.565347][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1495.793790][T10210] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1495.826586][ T5202] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1495.838775][ T5961] usb 2-1: USB disconnect, device number 74 [ 1495.839240][ C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1496.013887][T10210] usb 4-1: device descriptor read/64, error -71 [ 1496.143469][T10210] usb usb4-port1: attempt power cycle [ 1496.503190][T10210] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1496.544389][T10210] usb 4-1: device descriptor read/8, error -71 [ 1496.780184][T25648] netlink: 'syz.8.5139': attribute type 1 has an invalid length. [ 1496.793451][T10210] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1496.798404][T25648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1496.808734][T25648] IPv6: NLM_F_CREATE should be set when creating new route [ 1496.816106][T25648] IPv6: NLM_F_CREATE should be set when creating new route [ 1496.864508][T10210] usb 4-1: device descriptor read/8, error -71 [ 1496.873965][T25648] netlink: 'syz.8.5139': attribute type 1 has an invalid length. [ 1496.882075][T25648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1496.992480][T10210] usb usb4-port1: unable to enumerate USB device [ 1497.950190][T25665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1499.164017][T10210] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1499.329825][T10210] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.358930][T10210] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1499.393036][T10210] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1499.409558][T10210] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1499.419078][T10210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.457695][T10210] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1499.487682][T10210] usb 6-1: invalid MIDI out EP 0 [ 1499.640230][T10210] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1499.692110][T10210] usb 6-1: USB disconnect, device number 94 [ 1500.358922][T25723] netlink: 'syz.1.5172': attribute type 1 has an invalid length. [ 1500.367486][T25723] FAULT_INJECTION: forcing a failure. [ 1500.367486][T25723] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.381196][T25723] CPU: 0 UID: 0 PID: 25723 Comm: syz.1.5172 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1500.381227][T25723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1500.381241][T25723] Call Trace: [ 1500.381249][T25723] [ 1500.381259][T25723] dump_stack_lvl+0x189/0x250 [ 1500.381290][T25723] ? __pfx____ratelimit+0x10/0x10 [ 1500.381314][T25723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.381339][T25723] ? __pfx__printk+0x10/0x10 [ 1500.381398][T25723] should_fail_ex+0x414/0x560 [ 1500.381426][T25723] should_failslab+0xa8/0x100 [ 1500.381459][T25723] __kmalloc_noprof+0xcb/0x4f0 [ 1500.381487][T25723] ? __nla_parse+0x40/0x60 [ 1500.381510][T25723] ? seg6_local_build_state+0x129/0xdb0 [ 1500.381540][T25723] seg6_local_build_state+0x129/0xdb0 [ 1500.381574][T25723] ? __lock_acquire+0xab9/0xd20 [ 1500.381600][T25723] ? __pfx_seg6_local_build_state+0x10/0x10 [ 1500.381637][T25723] ? lwtunnel_build_state+0xe2/0x4c0 [ 1500.381667][T25723] lwtunnel_build_state+0x384/0x4c0 [ 1500.381694][T25723] ? lwtunnel_build_state+0xe2/0x4c0 [ 1500.381721][T25723] fib_nh_common_init+0x14b/0x430 [ 1500.381748][T25723] ? in6_dev_get+0x1a/0x290 [ 1500.381780][T25723] ? __pfx_fib_nh_common_init+0x10/0x10 [ 1500.381807][T25723] ? in6_dev_get+0x1a/0x290 [ 1500.381841][T25723] fib6_nh_init+0x1608/0x1ff0 [ 1500.381888][T25723] ? __pfx_fib6_nh_init+0x10/0x10 [ 1500.381916][T25723] ? kasan_save_track+0x4f/0x80 [ 1500.381941][T25723] ? kasan_save_track+0x3e/0x80 [ 1500.381965][T25723] ? __kasan_kmalloc+0x93/0xb0 [ 1500.381990][T25723] ? __kmalloc_noprof+0x27a/0x4f0 [ 1500.382016][T25723] ? fib6_info_alloc+0x30/0xf0 [ 1500.382040][T25723] ? ip6_route_info_create+0x142/0x860 [ 1500.382068][T25723] ? ip6_route_add+0x49/0x1b0 [ 1500.382095][T25723] ? inet6_rtm_newroute+0x1cf/0x18c0 [ 1500.382118][T25723] ? rtnetlink_rcv_msg+0x7cc/0xb70 [ 1500.382144][T25723] ? netlink_rcv_skb+0x205/0x470 [ 1500.382171][T25723] ? netlink_unicast+0x75c/0x8e0 [ 1500.382194][T25723] ? netlink_sendmsg+0x805/0xb30 [ 1500.382220][T25723] ? __sock_sendmsg+0x21c/0x270 [ 1500.382242][T25723] ? ____sys_sendmsg+0x505/0x830 [ 1500.382258][T25723] ? ___sys_sendmsg+0x21f/0x2a0 [ 1500.382275][T25723] ? __sys_sendmsg+0x164/0x220 [ 1500.382291][T25723] ? __do_fast_syscall_32+0xb6/0x2b0 [ 1500.382314][T25723] ? do_fast_syscall_32+0x34/0x80 [ 1500.382337][T25723] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.382405][T25723] ? ip_fib_metrics_init+0x404/0x6f0 [ 1500.382438][T25723] ? fib6_info_alloc+0x30/0xf0 [ 1500.382469][T25723] ip6_route_info_create_nh+0x16a/0xab0 [ 1500.382507][T25723] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 1500.382541][T25723] ? ip6_route_info_create+0x508/0x860 [ 1500.382577][T25723] ip6_route_add+0x6e/0x1b0 [ 1500.382610][T25723] inet6_rtm_newroute+0x1cf/0x18c0 [ 1500.382643][T25723] ? nlmon_xmit+0xb0/0x100 [ 1500.382666][T25723] ? kmem_cache_free+0x18f/0x400 [ 1500.382699][T25723] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1500.382726][T25723] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1500.382750][T25723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.382774][T25723] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1500.382798][T25723] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1500.382826][T25723] ? __dev_queue_xmit+0x27e/0x3a70 [ 1500.382894][T25723] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1500.382920][T25723] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1500.382951][T25723] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1500.382978][T25723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1500.383003][T25723] ? ref_tracker_free+0x63a/0x7d0 [ 1500.383026][T25723] ? __copy_skb_header+0xa7/0x550 [ 1500.383048][T25723] ? __pfx_ref_tracker_free+0x10/0x10 [ 1500.383084][T25723] netlink_rcv_skb+0x205/0x470 [ 1500.383115][T25723] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1500.383145][T25723] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1500.383187][T25723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1500.383216][T25723] ? netlink_deliver_tap+0x2e/0x1b0 [ 1500.383252][T25723] netlink_unicast+0x75c/0x8e0 [ 1500.383290][T25723] netlink_sendmsg+0x805/0xb30 [ 1500.383330][T25723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.383362][T25723] ? __import_iovec+0x5d4/0x7f0 [ 1500.383396][T25723] ? aa_sock_msg_perm+0x94/0x160 [ 1500.383422][T25723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1500.383444][T25723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.383475][T25723] __sock_sendmsg+0x21c/0x270 [ 1500.383504][T25723] ____sys_sendmsg+0x505/0x830 [ 1500.383530][T25723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1500.383566][T25723] ___sys_sendmsg+0x21f/0x2a0 [ 1500.383589][T25723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1500.383647][T25723] ? __fget_files+0x2a/0x420 [ 1500.383666][T25723] ? __fget_files+0x3a0/0x420 [ 1500.383696][T25723] __sys_sendmsg+0x164/0x220 [ 1500.383718][T25723] ? __pfx___sys_sendmsg+0x10/0x10 [ 1500.383754][T25723] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1500.383779][T25723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.383804][T25723] __do_fast_syscall_32+0xb6/0x2b0 [ 1500.383830][T25723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.383857][T25723] do_fast_syscall_32+0x34/0x80 [ 1500.383882][T25723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.383907][T25723] RIP: 0023:0xf7f48539 [ 1500.383925][T25723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1500.383944][T25723] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1500.383965][T25723] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 1500.383980][T25723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.383992][T25723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.384003][T25723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1500.384016][T25723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.384045][T25723] [ 1500.994697][T25725] netlink: 'syz.1.5172': attribute type 1 has an invalid length. [ 1501.008766][T25725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1501.016154][T25725] IPv6: NLM_F_CREATE should be set when creating new route [ 1501.023595][T25725] IPv6: NLM_F_CREATE should be set when creating new route [ 1501.473014][T10210] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1501.534908][T25742] netlink: 'syz.8.5179': attribute type 10 has an invalid length. [ 1501.553205][T25742] veth1_macvtap: left promiscuous mode [ 1501.565732][T25742] bridge0: port 3(macsec0) entered blocking state [ 1501.572490][T25742] bridge0: port 3(macsec0) entered disabled state [ 1501.579465][T25742] macsec0: entered allmulticast mode [ 1501.587119][T25742] macsec0: entered promiscuous mode [ 1501.763763][T25747] IPVS: stopping backup sync thread 25748 ... [ 1501.776160][T25747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5177'. [ 1501.855788][T10210] usb 4-1: config 0 has no interfaces? [ 1501.989761][ T5913] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1502.177393][ T5913] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1502.188407][ T5913] usb 9-1: config 0 has no interfaces? [ 1502.214784][T10210] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1502.229471][ T5913] usb 9-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 1502.240446][T10210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.339720][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.355577][T10210] usb 4-1: Product: syz [ 1502.359830][T10210] usb 4-1: Manufacturer: syz [ 1502.411001][ T5913] usb 9-1: Product: syz [ 1502.432855][T10210] usb 4-1: SerialNumber: syz [ 1502.435070][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5184'. [ 1502.471483][ T5913] usb 9-1: Manufacturer: syz [ 1502.498682][T10210] usb 4-1: config 0 descriptor?? [ 1502.503915][ T5913] usb 9-1: SerialNumber: syz [ 1502.604204][ T5913] usb 9-1: config 0 descriptor?? [ 1502.832746][T25733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1502.966730][T25733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.346060][ T5913] usb 4-1: USB disconnect, device number 120 [ 1504.593108][ T5929] usb 9-1: USB disconnect, device number 95 [ 1504.675620][T25772] FAULT_INJECTION: forcing a failure. [ 1504.675620][T25772] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.719437][T25772] CPU: 1 UID: 0 PID: 25772 Comm: syz.7.5190 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1504.719468][T25772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1504.719483][T25772] Call Trace: [ 1504.719491][T25772] [ 1504.719501][T25772] dump_stack_lvl+0x189/0x250 [ 1504.719530][T25772] ? __pfx____ratelimit+0x10/0x10 [ 1504.719554][T25772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1504.719578][T25772] ? __pfx__printk+0x10/0x10 [ 1504.719612][T25772] ? __pfx___might_resched+0x10/0x10 [ 1504.719635][T25772] ? fs_reclaim_acquire+0x7d/0x100 [ 1504.719659][T25772] should_fail_ex+0x414/0x560 [ 1504.719687][T25772] should_failslab+0xa8/0x100 [ 1504.719722][T25772] __kmalloc_noprof+0xcb/0x4f0 [ 1504.719750][T25772] ? copy_splice_read+0x143/0x9b0 [ 1504.719784][T25772] copy_splice_read+0x143/0x9b0 [ 1504.719823][T25772] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1504.719853][T25772] ? __pfx_copy_splice_read+0x10/0x10 [ 1504.719875][T25772] ? rcu_read_lock_any_held+0xb3/0x120 [ 1504.719898][T25772] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1504.719923][T25772] ? direct_splice_actor+0x10c/0x160 [ 1504.719953][T25772] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1504.719984][T25772] ? file_end_write+0x156/0x250 [ 1504.720017][T25772] ? direct_splice_actor+0x10c/0x160 [ 1504.720049][T25772] ? __pfx_copy_splice_read+0x10/0x10 [ 1504.720077][T25772] splice_direct_to_actor+0x4a9/0xcc0 [ 1504.720128][T25772] ? __pfx_direct_splice_actor+0x10/0x10 [ 1504.720169][T25772] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1504.720200][T25772] ? __pfx_aa_file_perm+0x10/0x10 [ 1504.720232][T25772] do_splice_direct+0x181/0x270 [ 1504.720265][T25772] ? __pfx_do_splice_direct+0x10/0x10 [ 1504.720297][T25772] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1504.720324][T25772] ? rw_verify_area+0x258/0x650 [ 1504.720356][T25772] do_sendfile+0x4da/0x7e0 [ 1504.720387][T25772] ? __pfx_do_sendfile+0x10/0x10 [ 1504.720407][T25772] ? rcu_is_watching+0x15/0xb0 [ 1504.720436][T25772] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 1504.720466][T25772] __do_fast_syscall_32+0xb6/0x2b0 [ 1504.720493][T25772] ? lockdep_hardirqs_on+0x9c/0x150 [ 1504.720521][T25772] do_fast_syscall_32+0x34/0x80 [ 1504.720545][T25772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1504.720570][T25772] RIP: 0023:0xf7f53539 [ 1504.720589][T25772] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1504.720606][T25772] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1504.720629][T25772] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 1504.720643][T25772] RDX: 0000000000000000 RSI: 000000000000d344 RDI: 0000000000000000 [ 1504.720656][T25772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1504.720667][T25772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1504.720678][T25772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1504.720707][T25772] [ 1505.030154][ T5913] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1505.174358][T25778] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5193'. [ 1505.193241][T25778] FAULT_INJECTION: forcing a failure. [ 1505.193241][T25778] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.208214][T25778] CPU: 1 UID: 0 PID: 25778 Comm: syz.7.5193 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1505.208246][T25778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1505.208259][T25778] Call Trace: [ 1505.208269][T25778] [ 1505.208278][T25778] dump_stack_lvl+0x189/0x250 [ 1505.208310][T25778] ? __pfx____ratelimit+0x10/0x10 [ 1505.208333][T25778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1505.208359][T25778] ? __pfx__printk+0x10/0x10 [ 1505.208395][T25778] ? __pfx___might_resched+0x10/0x10 [ 1505.208421][T25778] ? fs_reclaim_acquire+0x7d/0x100 [ 1505.208448][T25778] should_fail_ex+0x414/0x560 [ 1505.208477][T25778] should_failslab+0xa8/0x100 [ 1505.208510][T25778] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1505.208539][T25778] ? __alloc_skb+0x112/0x2d0 [ 1505.208574][T25778] __alloc_skb+0x112/0x2d0 [ 1505.208607][T25778] netlink_ack+0x146/0xa50 [ 1505.208632][T25778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.208651][T25778] ? ref_tracker_free+0x63a/0x7d0 [ 1505.208672][T25778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1505.208693][T25778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1505.208713][T25778] ? __pfx_ref_tracker_free+0x10/0x10 [ 1505.208746][T25778] netlink_rcv_skb+0x28c/0x470 [ 1505.208776][T25778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1505.208799][T25778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1505.208837][T25778] ? down_read+0x1ad/0x2e0 [ 1505.208860][T25778] genl_rcv+0x28/0x40 [ 1505.208878][T25778] netlink_unicast+0x75c/0x8e0 [ 1505.208913][T25778] netlink_sendmsg+0x805/0xb30 [ 1505.208951][T25778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.208983][T25778] ? __import_iovec+0x5d4/0x7f0 [ 1505.209009][T25778] ? aa_sock_msg_perm+0x94/0x160 [ 1505.209034][T25778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1505.209056][T25778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.209087][T25778] __sock_sendmsg+0x21c/0x270 [ 1505.209116][T25778] ____sys_sendmsg+0x505/0x830 [ 1505.209154][T25778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.209192][T25778] ___sys_sendmsg+0x21f/0x2a0 [ 1505.209215][T25778] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.209272][T25778] ? __fget_files+0x2a/0x420 [ 1505.209292][T25778] ? __fget_files+0x3a0/0x420 [ 1505.209322][T25778] __sys_sendmsg+0x164/0x220 [ 1505.209345][T25778] ? __pfx___sys_sendmsg+0x10/0x10 [ 1505.209381][T25778] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1505.209408][T25778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1505.209434][T25778] __do_fast_syscall_32+0xb6/0x2b0 [ 1505.209461][T25778] ? lockdep_hardirqs_on+0x9c/0x150 [ 1505.209489][T25778] do_fast_syscall_32+0x34/0x80 [ 1505.209514][T25778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1505.209541][T25778] RIP: 0023:0xf7f53539 [ 1505.209560][T25778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1505.209579][T25778] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1505.209602][T25778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 1505.209617][T25778] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1505.209630][T25778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1505.209642][T25778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1505.209655][T25778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1505.209686][T25778] [ 1505.337550][ T5913] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.489669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1505.734571][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1505.748144][ T5913] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1505.792582][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1505.811167][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.867475][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1505.928656][ T5913] usb 4-1: invalid MIDI out EP 0 [ 1506.258755][ T5913] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1506.268517][ T5905] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1506.340292][ T5913] usb 4-1: USB disconnect, device number 121 [ 1506.457529][T25798] program syz.5.5198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1506.534947][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.545504][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1506.565768][ T5905] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1506.585048][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1506.595267][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.603785][ T5905] usb 2-1: Product: syz [ 1506.608048][ T5905] usb 2-1: Manufacturer: syz [ 1506.613157][ T5905] usb 2-1: SerialNumber: syz [ 1506.634921][T25791] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1508.583216][T25791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.600380][T25791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.612525][T25791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1508.632662][T25791] netlink: 'syz.1.5197': attribute type 4 has an invalid length. [ 1508.711918][T25818] --map-set only usable from mangle table [ 1508.715129][ T5905] usb 2-1: 0:2 : does not exist [ 1508.781363][ T5905] usb 2-1: USB disconnect, device number 75 [ 1508.790026][T25834] IPVS: stopping backup sync thread 25835 ... [ 1508.799191][T25835] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1508.827886][T24425] udevd[24425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1508.955063][T25834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5210'. [ 1508.988523][ T5961] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1509.154722][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 1509.164930][ T5961] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1509.460019][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.484036][ T5961] usb 4-1: config 0 descriptor?? [ 1509.702361][ T5961] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1509.743438][ T5961] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1509.775310][ T5961] usb 4-1: USB disconnect, device number 122 [ 1510.105003][T25852] FAULT_INJECTION: forcing a failure. [ 1510.105003][T25852] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.213058][T25852] CPU: 1 UID: 0 PID: 25852 Comm: syz.1.5218 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1510.213090][T25852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1510.213104][T25852] Call Trace: [ 1510.213113][T25852] [ 1510.213123][T25852] dump_stack_lvl+0x189/0x250 [ 1510.213155][T25852] ? __pfx____ratelimit+0x10/0x10 [ 1510.213179][T25852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1510.213204][T25852] ? __pfx__printk+0x10/0x10 [ 1510.213239][T25852] ? __pfx___might_resched+0x10/0x10 [ 1510.213263][T25852] ? fs_reclaim_acquire+0x7d/0x100 [ 1510.213293][T25852] should_fail_ex+0x414/0x560 [ 1510.213320][T25852] should_failslab+0xa8/0x100 [ 1510.213353][T25852] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1510.213384][T25852] ? __alloc_skb+0x112/0x2d0 [ 1510.213419][T25852] __alloc_skb+0x112/0x2d0 [ 1510.213453][T25852] netlink_ack+0x146/0xa50 [ 1510.213479][T25852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1510.213501][T25852] ? ref_tracker_free+0x63a/0x7d0 [ 1510.213522][T25852] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1510.213543][T25852] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1510.213564][T25852] ? __pfx_ref_tracker_free+0x10/0x10 [ 1510.213600][T25852] netlink_rcv_skb+0x28c/0x470 [ 1510.213631][T25852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1510.213656][T25852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1510.213705][T25852] ? down_read+0x1ad/0x2e0 [ 1510.213734][T25852] genl_rcv+0x28/0x40 [ 1510.213753][T25852] netlink_unicast+0x75c/0x8e0 [ 1510.213793][T25852] netlink_sendmsg+0x805/0xb30 [ 1510.213834][T25852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.213868][T25852] ? __import_iovec+0x5d4/0x7f0 [ 1510.213896][T25852] ? aa_sock_msg_perm+0x94/0x160 [ 1510.213921][T25852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1510.213944][T25852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.213976][T25852] __sock_sendmsg+0x21c/0x270 [ 1510.214005][T25852] ____sys_sendmsg+0x505/0x830 [ 1510.214038][T25852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1510.214077][T25852] ___sys_sendmsg+0x21f/0x2a0 [ 1510.214100][T25852] ? __pfx____sys_sendmsg+0x10/0x10 [ 1510.214160][T25852] ? __fget_files+0x2a/0x420 [ 1510.214179][T25852] ? __fget_files+0x3a0/0x420 [ 1510.214210][T25852] __sys_sendmsg+0x164/0x220 [ 1510.214233][T25852] ? __pfx___sys_sendmsg+0x10/0x10 [ 1510.214269][T25852] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1510.214294][T25852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1510.214320][T25852] __do_fast_syscall_32+0xb6/0x2b0 [ 1510.214346][T25852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1510.214373][T25852] do_fast_syscall_32+0x34/0x80 [ 1510.214398][T25852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1510.214424][T25852] RIP: 0023:0xf7f48539 [ 1510.214443][T25852] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1510.214461][T25852] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1510.214483][T25852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1510.214498][T25852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1510.214510][T25852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1510.214522][T25852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1510.214535][T25852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1510.214566][T25852] [ 1510.632980][ T5961] usb 9-1: new full-speed USB device number 96 using dummy_hcd [ 1510.937257][ T5961] usb 9-1: config 4 has an invalid interface number: 63 but max is 1 [ 1511.013182][ T5961] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.027117][ T5961] usb 9-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 1511.036542][ T5961] usb 9-1: config 4 has no interface number 0 [ 1511.064373][ T5961] usb 9-1: config 4 interface 63 has no altsetting 0 [ 1511.210058][ T5961] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 1511.244675][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.267069][ T5961] usb 9-1: Product: syz [ 1511.277699][ T5961] usb 9-1: Manufacturer: syz [ 1511.330491][ T5961] usb 9-1: SerialNumber: syz [ 1511.629110][T25851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.639547][T25851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.682187][T25851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.693344][T25851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.833041][ T5913] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1511.995179][ T5913] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.005952][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1512.150087][ T5913] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1512.196385][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1512.206019][T10210] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1512.233422][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.321369][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1512.361585][ T5913] usb 4-1: invalid MIDI out EP 0 [ 1512.375038][T10210] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1512.470084][T10210] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1512.525760][ T5929] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1512.574614][T10210] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1512.640996][T10210] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1512.678636][ T5913] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1512.697001][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.710158][T10210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.729248][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.742675][ T5929] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1512.764518][ T5929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1512.780374][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.791087][ T5929] usb 2-1: Product: syz [ 1512.799249][ T5929] usb 2-1: Manufacturer: syz [ 1512.814619][ T5913] usb 4-1: USB disconnect, device number 123 [ 1512.818968][ T5929] usb 2-1: SerialNumber: syz [ 1512.858304][T25876] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1512.868315][T25878] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 1513.866947][ T5961] usb 9-1: USB disconnect, device number 96 [ 1513.929239][T25878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.953575][T25878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.997042][T25878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1514.036848][T25878] netlink: 'syz.1.5229': attribute type 4 has an invalid length. [ 1514.088426][ T5929] usb 2-1: 0:2 : does not exist [ 1514.117173][ T5929] usb 2-1: USB disconnect, device number 76 [ 1514.197974][T24425] udevd[24425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1514.302442][T25902] netlink: 'syz.8.5239': attribute type 1 has an invalid length. [ 1514.319456][T25906] netlink: 'syz.8.5239': attribute type 1 has an invalid length. [ 1514.468173][T10210] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1514.497451][T10210] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input124 [ 1514.583671][T10210] usb 6-1: USB disconnect, device number 95 [ 1514.589731][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1514.792335][T25917] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1514.990978][T25919] IPVS: stopping backup sync thread 25921 ... [ 1514.997302][T25921] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1515.031363][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5242'. [ 1515.603502][T10210] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1515.766666][T10210] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.780092][T10210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1515.794798][T10210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1515.817703][T10210] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1515.832063][T10210] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1515.853756][T10210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.869123][T10210] usb 6-1: config 0 descriptor?? [ 1516.043269][ T5905] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1516.195949][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.207589][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1516.219200][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1516.230070][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1516.253157][T25945] tipc: Started in network mode [ 1516.258149][T25945] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1516.267569][T25945] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1516.277743][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1516.291102][T25945] tipc: Enabled bearer , priority 10 [ 1516.298128][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1516.311829][T10210] plantronics 0003:047F:FFFF.005C: ignoring exceeding usage max [ 1516.319910][ T5905] usb 4-1: Manufacturer: syz [ 1516.327573][ T5905] usb 4-1: config 0 descriptor?? [ 1516.360976][T25947] netlink: 'syz.1.5252': attribute type 13 has an invalid length. [ 1516.372682][T10210] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1516.451661][T25947] gretap0: refused to change device tx_queue_len [ 1516.458176][T25947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1516.537343][T25929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.569373][T25929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.620565][T11038] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1516.625505][T11038] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1516.697012][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1516.708970][ T5905] Registered IR keymap rc-empty [ 1516.722120][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.753125][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.788109][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1516.801896][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input125 [ 1516.826468][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.857732][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.884156][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.903200][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.923559][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.943119][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.963781][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1516.993779][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1517.013436][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1517.043091][ T5905] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1517.067124][ T5905] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1517.076816][ T5905] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1517.106566][ T5905] usb 4-1: USB disconnect, device number 124 [ 1517.141499][ T5913] usb 6-1: USB disconnect, device number 96 [ 1517.393095][T10210] tipc: Node number set to 1 [ 1517.567993][T25964] netlink: 'syz.1.5257': attribute type 13 has an invalid length. [ 1517.586689][T25964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5257'. [ 1518.188823][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1518.523073][ T5905] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1518.624222][ T5913] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1518.670167][ T30] audit: type=1326 audit(1753638153.512:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.694027][ T30] audit: type=1326 audit(1753638153.512:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.713323][T25991] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1518.717554][ T30] audit: type=1326 audit(1753638153.542:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.747535][ T30] audit: type=1326 audit(1753638153.542:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.770854][ T5905] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.782957][ T5905] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1518.794741][ T5905] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1518.809610][ T30] audit: type=1326 audit(1753638153.542:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.841587][ T30] audit: type=1326 audit(1753638153.542:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.841633][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1518.863795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1518.865440][ T30] audit: type=1326 audit(1753638153.542:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.896509][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1518.910583][ T30] audit: type=1326 audit(1753638153.542:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.923024][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1518.942307][ T30] audit: type=1326 audit(1753638153.542:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1518.972958][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.980587][ T30] audit: type=1326 audit(1753638153.542:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.3.5267" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 1519.019356][ T5905] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1519.030733][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1519.041860][ T5905] usb 2-1: invalid MIDI out EP 0 [ 1519.048056][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.063463][ T5913] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1519.074475][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.110948][ T5913] usb 9-1: config 0 descriptor?? [ 1519.198973][ T5905] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1519.253314][ T5961] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1519.257541][ T5905] usb 2-1: USB disconnect, device number 77 [ 1519.423632][ T5961] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1519.431911][ T5961] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.446412][ T5961] usb 4-1: config 8 has no interface number 0 [ 1519.454658][ T5961] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1519.467953][ T5961] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1519.477938][ T5961] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1519.487148][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.526583][T26000] FAULT_INJECTION: forcing a failure. [ 1519.526583][T26000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.540676][T26000] CPU: 0 UID: 0 PID: 26000 Comm: syz.5.5271 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1519.540708][T26000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1519.540721][T26000] Call Trace: [ 1519.540730][T26000] [ 1519.540738][T26000] dump_stack_lvl+0x189/0x250 [ 1519.540773][T26000] ? __pfx____ratelimit+0x10/0x10 [ 1519.540796][T26000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1519.540819][T26000] ? __pfx__printk+0x10/0x10 [ 1519.540845][T26000] ? __might_fault+0xb0/0x130 [ 1519.540886][T26000] should_fail_ex+0x414/0x560 [ 1519.540913][T26000] _copy_from_iter+0x1db/0x16f0 [ 1519.540944][T26000] ? rcu_is_watching+0x15/0xb0 [ 1519.540963][T26000] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1519.540986][T26000] ? __pfx__copy_from_iter+0x10/0x10 [ 1519.541015][T26000] ? __build_skb_around+0x257/0x3e0 [ 1519.541049][T26000] ? netlink_sendmsg+0x642/0xb30 [ 1519.541076][T26000] ? skb_put+0x11b/0x210 [ 1519.541106][T26000] netlink_sendmsg+0x6b2/0xb30 [ 1519.541143][T26000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1519.541177][T26000] ? __import_iovec+0x5d4/0x7f0 [ 1519.541204][T26000] ? aa_sock_msg_perm+0x94/0x160 [ 1519.541228][T26000] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1519.541251][T26000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1519.541273][T26000] __sock_sendmsg+0x21c/0x270 [ 1519.541294][T26000] ____sys_sendmsg+0x505/0x830 [ 1519.541321][T26000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1519.541358][T26000] ___sys_sendmsg+0x21f/0x2a0 [ 1519.541380][T26000] ? __pfx____sys_sendmsg+0x10/0x10 [ 1519.541427][T26000] ? __fget_files+0x2a/0x420 [ 1519.541440][T26000] ? __fget_files+0x3a0/0x420 [ 1519.541467][T26000] __sys_sendmsg+0x164/0x220 [ 1519.541490][T26000] ? __pfx___sys_sendmsg+0x10/0x10 [ 1519.541525][T26000] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1519.541548][T26000] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.541569][T26000] __do_fast_syscall_32+0xb6/0x2b0 [ 1519.541588][T26000] ? lockdep_hardirqs_on+0x9c/0x150 [ 1519.541607][T26000] do_fast_syscall_32+0x34/0x80 [ 1519.541634][T26000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1519.541660][T26000] RIP: 0023:0xf7f31539 [ 1519.541677][T26000] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1519.541694][T26000] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1519.541715][T26000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1519.541725][T26000] RDX: 0000000020040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1519.541734][T26000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1519.541742][T26000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1519.541751][T26000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1519.541779][T26000] [ 1519.874875][ T5913] plantronics 0003:047F:FFFF.005D: ignoring exceeding usage max [ 1519.878279][T25987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.901589][ T5913] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1519.916601][T25987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.062491][T11038] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1520.063403][T11038] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 1520.214640][ T5961] usb 4-1: string descriptor 0 read error: -71 [ 1520.222454][ T5961] ir_toy 4-1:8.177: required endpoints not found [ 1520.251823][ T5961] usb 4-1: USB disconnect, device number 125 [ 1520.498028][T26019] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5277'. [ 1520.610191][ T5961] usb 9-1: USB disconnect, device number 97 [ 1521.017914][T26035] IPVS: stopping backup sync thread 26036 ... [ 1521.089158][T26041] netlink: 'syz.3.5285': attribute type 11 has an invalid length. [ 1521.168753][T26044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5286'. [ 1521.780159][ T5961] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1521.965007][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1521.992936][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1522.017790][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1522.047297][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1522.080578][ T5961] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1522.100582][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.127119][ T5961] usb 6-1: config 0 descriptor?? [ 1522.163672][ T5905] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1522.293362][ T5913] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1522.330938][ T5905] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1522.353081][ T5905] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.369138][ T5905] usb 4-1: config 8 has no interface number 0 [ 1522.376809][ T5905] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1522.395305][ T5905] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1522.402435][ T5905] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1522.443429][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.460659][ T5913] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 1522.485829][ T5913] usb 2-1: config 0 has an invalid interface number: 9 but max is 1 [ 1522.516051][ T5913] usb 2-1: config 0 has no interface number 0 [ 1522.522264][ T5913] usb 2-1: config 0 has no interface number 1 [ 1522.529444][ T5913] usb 2-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30 [ 1522.541523][ T5913] usb 2-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1522.555374][ T5913] usb 2-1: config 0 interface 9 has no altsetting 0 [ 1522.562108][ T5913] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 1522.564987][ T5961] plantronics 0003:047F:FFFF.005E: ignoring exceeding usage max [ 1522.571693][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.626273][ T5913] usb 2-1: config 0 descriptor?? [ 1522.627821][ T5961] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1522.647386][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1522.723040][ T5913] snd-usb-audio 2-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 1522.742086][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1522.808752][T26050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.851199][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1522.853772][T26050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.876712][T11038] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1522.878253][T11038] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1523.028842][ T5913] snd-usb-audio 2-1:0.9: probe with driver snd-usb-audio failed with error -2 [ 1523.047251][ T5913] usb 2-1: USB disconnect, device number 78 [ 1523.101731][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 1523.116205][ T5905] ir_toy 4-1:8.177: required endpoints not found [ 1523.145434][ T5905] usb 4-1: USB disconnect, device number 126 [ 1523.382549][ T5961] usb 6-1: USB disconnect, device number 97 [ 1523.493699][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1523.500308][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1523.516768][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.531527][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 1523.538121][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1523.547461][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.557431][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 1523.564201][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1523.573480][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.591630][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(13) [ 1523.598315][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1523.649021][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.654117][T26100] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16) [ 1523.661311][T26100] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1523.677678][T26100] vhci_hcd vhci_hcd.0: Device attached [ 1523.695113][ T5905] vhci_hcd: vhci_device speed not set [ 1523.705321][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15) [ 1523.711994][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1523.726070][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.742843][T26087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1523.782417][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(21) [ 1523.789204][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1523.792992][ T5905] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1523.806030][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.904213][T26087] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(26) [ 1523.910900][T26087] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1523.945253][T26087] vhci_hcd vhci_hcd.0: Device attached [ 1523.983610][T26103] vhci_hcd: connection closed [ 1523.983872][T26108] vhci_hcd: connection closed [ 1523.987344][T26113] netlink: 'syz.3.5306': attribute type 13 has an invalid length. [ 1523.990058][T26101] vhci_hcd: connection closed [ 1523.993399][T26091] vhci_hcd: connection closed [ 1523.993654][T26088] vhci_hcd: connection reset by peer [ 1524.012161][ T59] vhci_hcd: stop threads [ 1524.016466][T26096] vhci_hcd: connection closed [ 1524.021070][T26094] vhci_hcd: connection closed [ 1524.025992][ T59] vhci_hcd: release socket [ 1524.031284][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1524.065965][ T59] vhci_hcd: disconnect device [ 1524.080733][ T59] vhci_hcd: stop threads [ 1524.092138][ T59] vhci_hcd: release socket [ 1524.107264][ T59] vhci_hcd: disconnect device [ 1524.112755][T26110] vhci_hcd: connection closed [ 1524.115786][ T59] vhci_hcd: stop threads [ 1524.129410][ T59] vhci_hcd: release socket [ 1524.136104][ T59] vhci_hcd: disconnect device [ 1524.153174][ T59] vhci_hcd: stop threads [ 1524.157694][ T59] vhci_hcd: release socket [ 1524.171898][ T59] vhci_hcd: disconnect device [ 1524.181946][ T59] vhci_hcd: stop threads [ 1524.187798][ T59] vhci_hcd: release socket [ 1524.192491][ T59] vhci_hcd: disconnect device [ 1524.198521][ T59] vhci_hcd: stop threads [ 1524.204113][ T59] vhci_hcd: release socket [ 1524.208790][ T59] vhci_hcd: disconnect device [ 1524.217195][ T59] vhci_hcd: stop threads [ 1524.223300][ T59] vhci_hcd: release socket [ 1524.228156][ T59] vhci_hcd: disconnect device [ 1524.239398][ T59] vhci_hcd: stop threads [ 1524.245601][ T59] vhci_hcd: release socket [ 1524.256946][ T59] vhci_hcd: disconnect device [ 1524.873087][ T43] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1525.542973][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1526.284406][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1526.304351][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.312460][ T43] usb 6-1: Product: syz [ 1526.344283][ T43] usb 6-1: Manufacturer: syz [ 1526.349251][ T43] usb 6-1: SerialNumber: syz [ 1526.370929][ T43] usb 6-1: config 0 descriptor?? [ 1526.560184][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5323'. [ 1526.599804][ T43] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1526.620276][ T43] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1526.667882][ T43] usb 6-1: USB disconnect, device number 98 [ 1526.873017][T10210] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1527.043095][T10210] usb 2-1: Using ep0 maxpacket: 8 [ 1527.064718][T10210] usb 2-1: config 219 has an invalid interface number: 39 but max is 0 [ 1527.088220][T10210] usb 2-1: config 219 has no interface number 0 [ 1527.104287][T10210] usb 2-1: config 219 interface 39 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1527.129985][T10210] usb 2-1: config 219 interface 39 has no altsetting 0 [ 1527.153728][T10210] usb 2-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice= 7.a7 [ 1527.176632][T10210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.186594][T10210] usb 2-1: Product: ‖覇嵕뒩붼⹬县뙧 [ 1527.192743][T10210] usb 2-1: Manufacturer: ├끗ꊢ뙆쒦䀈⸕댗옌哫乌쒵潲詈ﺊ䶅鸒噶鱽榽⭘똌䄵水࿘噗ߞ旃海줟軥ﺭ퇙怒⻦懰铂宥䜤횬滌㥭㡾ꩡ⏸ะ瓊苟烸죥ⱔ쇚⠨ᛦ駦ൡ낙⠩᱌物烴ꥀ⽗霁ឭ匡냤솲뢾䙓쿯냔Ӓ껕赁壉椆:䔋⟿ [ 1527.226875][T10210] usb 2-1: SerialNumber: 㐯䂈縕Ꙡ帾ᖴ筡狒ᒩ䋲ഘ寴첯톴簩㉘✢㍺짏智紐禨عڥ兒띆㪨揂쉥幰᰾졶绀㌴ᦐꅅḔ筝똤ྴ랭웜綩⿀檤殮豢뱪橉渳鏥语蔌␓뼫챻捶樍흈든쀷朗脸༱섧↿謁੕諒욆鯇ͪ雚溭㕌爽끲ᕹȷἙ㷴揱綢ꌣ뭛륬燧ꬌ୞㭎⽳瓘쬴⥦뎜攖 [ 1527.312559][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5332'. [ 1527.484080][T10210] cdc_acm 2-1:219.39: Zero length descriptor references [ 1527.513727][T10210] cdc_acm 2-1:219.39: probe with driver cdc_acm failed with error -22 [ 1527.533270][T10210] usb 2-1: USB disconnect, device number 79 [ 1527.704284][T10543] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1527.742629][T26206] FAULT_INJECTION: forcing a failure. [ 1527.742629][T26206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.759359][T26206] CPU: 0 UID: 0 PID: 26206 Comm: syz.5.5340 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1527.759390][T26206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1527.759405][T26206] Call Trace: [ 1527.759414][T26206] [ 1527.759424][T26206] dump_stack_lvl+0x189/0x250 [ 1527.759455][T26206] ? __pfx____ratelimit+0x10/0x10 [ 1527.759479][T26206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1527.759504][T26206] ? __pfx__printk+0x10/0x10 [ 1527.759532][T26206] ? __might_fault+0xb0/0x130 [ 1527.759581][T26206] should_fail_ex+0x414/0x560 [ 1527.759609][T26206] _copy_from_user+0x2d/0xb0 [ 1527.759639][T26206] do_ipv6_setsockopt+0x32d/0x2fb0 [ 1527.759677][T26206] ? get_pid_task+0x20/0x1f0 [ 1527.759707][T26206] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1527.759743][T26206] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1527.759777][T26206] ? vfs_write+0x8d8/0xa90 [ 1527.759808][T26206] ? __pfx___might_resched+0x10/0x10 [ 1527.759842][T26206] ? __lock_acquire+0xab9/0xd20 [ 1527.759870][T26206] ? aa_sk_perm+0x81e/0x950 [ 1527.759896][T26206] ? __pfx_aa_sk_perm+0x10/0x10 [ 1527.759925][T26206] ipv6_setsockopt+0x59/0x170 [ 1527.759944][T26206] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1527.759975][T26206] do_sock_setsockopt+0x179/0x1b0 [ 1527.760010][T26206] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1527.760048][T26206] __do_fast_syscall_32+0xb6/0x2b0 [ 1527.760073][T26206] ? lockdep_hardirqs_on+0x9c/0x150 [ 1527.760101][T26206] do_fast_syscall_32+0x34/0x80 [ 1527.760126][T26206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1527.760152][T26206] RIP: 0023:0xf7f31539 [ 1527.760171][T26206] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1527.760189][T26206] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1527.760211][T26206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1527.760225][T26206] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 00000000000005a8 [ 1527.760238][T26206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1527.760250][T26206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1527.760263][T26206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1527.760293][T26206] [ 1528.121417][T26209] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1528.132988][T10543] usb 4-1: Using ep0 maxpacket: 32 [ 1528.140459][T10543] usb 4-1: config 0 has no interfaces? [ 1528.151782][T10543] usb 4-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 1528.161420][T10543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.169644][T10543] usb 4-1: Product: syz [ 1528.174250][T10543] usb 4-1: Manufacturer: syz [ 1528.178896][T10543] usb 4-1: SerialNumber: syz [ 1528.224246][T10543] usb 4-1: config 0 descriptor?? [ 1528.354654][T26213] SET target dimension over the limit! [ 1528.434465][T26217] block device autoloading is deprecated and will be removed. [ 1528.495317][T10543] usb 4-1: USB disconnect, device number 127 [ 1528.847578][T26232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 1528.953374][ T5905] vhci_hcd: vhci_device speed not set [ 1529.013275][T10936] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1529.193176][T10936] usb 9-1: Using ep0 maxpacket: 16 [ 1529.207020][T10936] usb 9-1: config 247 has an invalid interface number: 211 but max is 3 [ 1529.228620][T10936] usb 9-1: config 247 has an invalid interface number: 101 but max is 3 [ 1529.248587][T10936] usb 9-1: config 247 has an invalid interface number: 180 but max is 3 [ 1529.276594][T10936] usb 9-1: config 247 has an invalid interface number: 66 but max is 3 [ 1529.666162][T10936] usb 9-1: config 247 has an invalid interface number: 117 but max is 3 [ 1529.703443][T10936] usb 9-1: config 247 has 5 interfaces, different from the descriptor's value: 4 [ 1529.739877][T10936] usb 9-1: config 247 has no interface number 0 [ 1529.775155][T10936] usb 9-1: config 247 has no interface number 1 [ 1529.818506][T10936] usb 9-1: config 247 has no interface number 2 [ 1529.884505][T10936] usb 9-1: config 247 has no interface number 3 [ 1529.921455][T10936] usb 9-1: config 247 has no interface number 4 [ 1529.970985][T10936] usb 9-1: config 247 interface 211 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1530.066090][T10936] usb 9-1: config 247 interface 211 altsetting 4 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1530.093077][T10936] usb 9-1: config 247 interface 211 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1530.112969][T10936] usb 9-1: config 247 interface 211 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1530.163745][T10936] usb 9-1: config 247 interface 211 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1530.196742][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5356'. [ 1530.212169][T10936] usb 9-1: config 247 interface 211 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1530.217560][T26246] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5355'. [ 1530.259642][T10936] usb 9-1: config 247 interface 211 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1530.264307][T26245] FAULT_INJECTION: forcing a failure. [ 1530.264307][T26245] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.300630][T10936] usb 9-1: config 247 interface 101 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1530.310064][T26245] CPU: 0 UID: 0 PID: 26245 Comm: syz.7.5356 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1530.310101][T26245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1530.310116][T26245] Call Trace: [ 1530.310126][T26245] [ 1530.310137][T26245] dump_stack_lvl+0x189/0x250 [ 1530.310172][T26245] ? __pfx____ratelimit+0x10/0x10 [ 1530.310200][T26245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1530.310228][T26245] ? __pfx__printk+0x10/0x10 [ 1530.310267][T26245] ? __pfx___might_resched+0x10/0x10 [ 1530.310295][T26245] ? fs_reclaim_acquire+0x7d/0x100 [ 1530.310325][T26245] should_fail_ex+0x414/0x560 [ 1530.310356][T26245] should_failslab+0xa8/0x100 [ 1530.310393][T26245] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1530.310427][T26245] ? __alloc_skb+0x112/0x2d0 [ 1530.310466][T26245] __alloc_skb+0x112/0x2d0 [ 1530.310503][T26245] netlink_ack+0x146/0xa50 [ 1530.310533][T26245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1530.310558][T26245] ? ref_tracker_free+0x63a/0x7d0 [ 1530.310581][T26245] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1530.310605][T26245] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1530.310631][T26245] ? __pfx_ref_tracker_free+0x10/0x10 [ 1530.310677][T26245] netlink_rcv_skb+0x28c/0x470 [ 1530.310712][T26245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1530.310749][T26245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1530.310803][T26245] ? down_read+0x1ad/0x2e0 [ 1530.310835][T26245] genl_rcv+0x28/0x40 [ 1530.310859][T26245] netlink_unicast+0x75c/0x8e0 [ 1530.310902][T26245] netlink_sendmsg+0x805/0xb30 [ 1530.310947][T26245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1530.310984][T26245] ? __import_iovec+0x5d4/0x7f0 [ 1530.311016][T26245] ? aa_sock_msg_perm+0x94/0x160 [ 1530.311044][T26245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1530.311069][T26245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1530.311102][T26245] __sock_sendmsg+0x21c/0x270 [ 1530.311136][T26245] ____sys_sendmsg+0x505/0x830 [ 1530.311165][T26245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1530.311208][T26245] ___sys_sendmsg+0x21f/0x2a0 [ 1530.311232][T26245] ? __pfx____sys_sendmsg+0x10/0x10 [ 1530.311300][T26245] ? __fget_files+0x2a/0x420 [ 1530.311320][T26245] ? __fget_files+0x3a0/0x420 [ 1530.311355][T26245] __sys_sendmsg+0x164/0x220 [ 1530.311381][T26245] ? __pfx___sys_sendmsg+0x10/0x10 [ 1530.311421][T26245] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1530.311451][T26245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1530.311478][T26245] __do_fast_syscall_32+0xb6/0x2b0 [ 1530.311507][T26245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1530.311539][T26245] do_fast_syscall_32+0x34/0x80 [ 1530.311571][T26245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1530.311600][T26245] RIP: 0023:0xf7f53539 [ 1530.311622][T26245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1530.311643][T26245] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1530.311669][T26245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1530.311686][T26245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1530.311699][T26245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1530.311714][T26245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1530.311750][T26245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1530.311783][T26245] [ 1530.757594][ T5961] usb usb44-port1: attempt power cycle [ 1530.764103][T10936] usb 9-1: config 247 interface 101 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1530.775463][T10936] usb 9-1: config 247 interface 101 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1530.786679][T10936] usb 9-1: config 247 interface 101 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1530.835352][T10936] usb 9-1: config 247 interface 101 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1530.867290][T10936] usb 9-1: config 247 interface 101 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1530.922293][T10936] usb 9-1: config 247 interface 101 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1530.971749][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1531.003066][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 1531.046179][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1531.077628][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 1531.124408][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1531.172936][T10936] usb 9-1: config 247 interface 180 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 1531.183464][T26260] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5362'. [ 1531.210363][T10936] usb 9-1: config 247 interface 180 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 11 [ 1531.252946][T10936] usb 9-1: too many endpoints for config 247 interface 66 altsetting 20: 133, using maximum allowed: 30 [ 1531.278856][T26262] tipc: Started in network mode [ 1531.295251][T26262] tipc: Node identity 42996e45c294, cluster identity 4711 [ 1531.305861][T10936] usb 9-1: config 247 interface 66 altsetting 20 has a duplicate endpoint with address 0x1, skipping [ 1531.318471][T26262] tipc: Enabled bearer , priority 0 [ 1531.338968][ T5961] usb usb44-port1: unable to enumerate USB device [ 1531.345105][T26266] syzkaller0: entered promiscuous mode [ 1531.345778][T10936] usb 9-1: config 247 interface 66 altsetting 20 has an invalid descriptor for endpoint zero, skipping [ 1531.363578][T26266] syzkaller0: entered allmulticast mode [ 1531.413356][T10936] usb 9-1: config 247 interface 66 altsetting 20 has an invalid descriptor for endpoint zero, skipping [ 1531.459029][T10936] usb 9-1: config 247 interface 66 altsetting 20 has 3 endpoint descriptors, different from the interface descriptor's value: 133 [ 1531.499863][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1531.540254][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1531.578995][T10936] usb 9-1: config 247 interface 117 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1531.580486][T26275] FAULT_INJECTION: forcing a failure. [ 1531.580486][T26275] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.633199][T26275] CPU: 1 UID: 0 PID: 26275 Comm: syz.7.5367 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1531.633232][T26275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1531.633246][T26275] Call Trace: [ 1531.633255][T26275] [ 1531.633264][T26275] dump_stack_lvl+0x189/0x250 [ 1531.633295][T26275] ? __pfx____ratelimit+0x10/0x10 [ 1531.633327][T26275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.633353][T26275] ? __pfx__printk+0x10/0x10 [ 1531.633388][T26275] ? __pfx___might_resched+0x10/0x10 [ 1531.633412][T26275] ? fs_reclaim_acquire+0x7d/0x100 [ 1531.633441][T26275] should_fail_ex+0x414/0x560 [ 1531.633469][T26275] should_failslab+0xa8/0x100 [ 1531.633502][T26275] __kmalloc_noprof+0xcb/0x4f0 [ 1531.633528][T26275] ? kfree+0x4d/0x440 [ 1531.633555][T26275] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1531.633588][T26275] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1531.633631][T26275] tomoyo_path2_perm+0x288/0x680 [ 1531.633652][T26275] ? tomoyo_path2_perm+0x235/0x680 [ 1531.633677][T26275] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1531.633753][T26275] tomoyo_path_rename+0x114/0x190 [ 1531.633783][T26275] ? __d_lookup+0x66/0x780 [ 1531.633809][T26275] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1531.633852][T26275] security_path_rename+0x250/0x490 [ 1531.633886][T26275] do_renameat2+0x64d/0xc50 [ 1531.633939][T26275] ? __pfx_do_renameat2+0x10/0x10 [ 1531.633981][T26275] ? strncpy_from_user+0x150/0x290 [ 1531.634007][T26275] ? getname_flags+0x1e5/0x540 [ 1531.634033][T26275] __ia32_sys_renameat2+0xce/0xe0 [ 1531.634067][T26275] __do_fast_syscall_32+0xb6/0x2b0 [ 1531.634093][T26275] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.634121][T26275] do_fast_syscall_32+0x34/0x80 [ 1531.634145][T26275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1531.634170][T26275] RIP: 0023:0xf7f53539 [ 1531.634189][T26275] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1531.634207][T26275] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1531.634229][T26275] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 1531.634244][T26275] RDX: 00000000ffffff9c RSI: 0000000080000000 RDI: 0000000000000002 [ 1531.634258][T26275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.634270][T26275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1531.634283][T26275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.634325][T26275] [ 1531.634374][T26275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1531.903879][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1531.931348][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1532.002999][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 1532.038135][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1532.100969][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1532.139558][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1532.171401][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1532.209902][T26261] tipc: Resetting bearer [ 1532.226980][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1532.258661][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1532.269602][T26283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5371'. [ 1532.301563][T26286] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5370'. [ 1532.335226][T10936] usb 9-1: config 247 interface 117 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1532.348049][T10936] usb 9-1: config 247 interface 211 has no altsetting 0 [ 1532.357194][T10936] usb 9-1: config 247 interface 180 has no altsetting 0 [ 1532.364420][T10936] usb 9-1: config 247 interface 66 has no altsetting 0 [ 1532.371841][T10936] usb 9-1: config 247 interface 117 has no altsetting 0 [ 1532.380529][T26261] tipc: Disabling bearer [ 1532.386528][ T43] tipc: Node number set to 2148363845 [ 1532.393185][T10936] usb 9-1: string descriptor 0 read error: -71 [ 1532.400996][T10936] usb 9-1: New USB device found, idVendor=177f, idProduct=0302, bcdDevice=92.e8 [ 1532.411456][T10936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.448877][T10936] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 1532.470009][T10936] usb 9-1: no configuration chosen from 1 choice [ 1532.499579][T10936] usb 9-1: USB disconnect, device number 98 [ 1532.963471][T10936] usb 9-1: new full-speed USB device number 99 using dummy_hcd [ 1533.124765][T10936] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 1533.149413][T10936] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.173502][T10936] usb 9-1: config 8 has no interface number 0 [ 1533.179719][T10936] usb 9-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1533.226141][T10936] usb 9-1: config 8 interface 177 has no altsetting 0 [ 1533.243392][T10936] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1533.262850][T10936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.398135][T26326] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5388'. [ 1533.596090][T10936] usb 9-1: string descriptor 0 read error: -71 [ 1533.620220][T10936] ir_toy 9-1:8.177: required endpoints not found [ 1533.647755][T10936] usb 9-1: USB disconnect, device number 99 [ 1533.731962][T26334] FAULT_INJECTION: forcing a failure. [ 1533.731962][T26334] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.757173][T26334] CPU: 1 UID: 0 PID: 26334 Comm: syz.3.5392 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1533.757220][T26334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.757233][T26334] Call Trace: [ 1533.757242][T26334] [ 1533.757251][T26334] dump_stack_lvl+0x189/0x250 [ 1533.757282][T26334] ? __pfx____ratelimit+0x10/0x10 [ 1533.757306][T26334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1533.757331][T26334] ? __pfx__printk+0x10/0x10 [ 1533.757365][T26334] ? __pfx___might_resched+0x10/0x10 [ 1533.757389][T26334] ? fs_reclaim_acquire+0x7d/0x100 [ 1533.757416][T26334] should_fail_ex+0x414/0x560 [ 1533.757453][T26334] should_failslab+0xa8/0x100 [ 1533.757486][T26334] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1533.757516][T26334] ? __alloc_skb+0x112/0x2d0 [ 1533.757551][T26334] __alloc_skb+0x112/0x2d0 [ 1533.757585][T26334] netlink_ack+0x146/0xa50 [ 1533.757611][T26334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1533.757632][T26334] ? ref_tracker_free+0x63a/0x7d0 [ 1533.757653][T26334] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1533.757674][T26334] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1533.757695][T26334] ? __pfx_ref_tracker_free+0x10/0x10 [ 1533.757731][T26334] netlink_rcv_skb+0x28c/0x470 [ 1533.757761][T26334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1533.757798][T26334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1533.757844][T26334] ? down_read+0x1ad/0x2e0 [ 1533.757872][T26334] genl_rcv+0x28/0x40 [ 1533.757892][T26334] netlink_unicast+0x75c/0x8e0 [ 1533.757929][T26334] netlink_sendmsg+0x805/0xb30 [ 1533.757969][T26334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.758000][T26334] ? __import_iovec+0x5d4/0x7f0 [ 1533.758026][T26334] ? aa_sock_msg_perm+0x94/0x160 [ 1533.758050][T26334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1533.758071][T26334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.758101][T26334] __sock_sendmsg+0x21c/0x270 [ 1533.758129][T26334] ____sys_sendmsg+0x505/0x830 [ 1533.758155][T26334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1533.758191][T26334] ___sys_sendmsg+0x21f/0x2a0 [ 1533.758214][T26334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1533.758272][T26334] ? __fget_files+0x2a/0x420 [ 1533.758290][T26334] ? __fget_files+0x3a0/0x420 [ 1533.758320][T26334] __sys_sendmsg+0x164/0x220 [ 1533.758341][T26334] ? __pfx___sys_sendmsg+0x10/0x10 [ 1533.758377][T26334] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1533.758413][T26334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1533.758437][T26334] __do_fast_syscall_32+0xb6/0x2b0 [ 1533.758466][T26334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1533.758491][T26334] do_fast_syscall_32+0x34/0x80 [ 1533.758513][T26334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1533.758537][T26334] RIP: 0023:0xf711e539 [ 1533.758553][T26334] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1533.758570][T26334] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1533.758590][T26334] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003dc0 [ 1533.758603][T26334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.758615][T26334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1533.758626][T26334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1533.758637][T26334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1533.758684][T26334] [ 1534.088105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1534.348986][T26346] FAULT_INJECTION: forcing a failure. [ 1534.348986][T26346] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.397795][T26346] CPU: 0 UID: 0 PID: 26346 Comm: syz.5.5398 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1534.397827][T26346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1534.397841][T26346] Call Trace: [ 1534.397849][T26346] [ 1534.397859][T26346] dump_stack_lvl+0x189/0x250 [ 1534.397891][T26346] ? __pfx____ratelimit+0x10/0x10 [ 1534.397914][T26346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1534.397940][T26346] ? __pfx__printk+0x10/0x10 [ 1534.397975][T26346] ? __pfx___might_resched+0x10/0x10 [ 1534.398000][T26346] ? fs_reclaim_acquire+0x7d/0x100 [ 1534.398027][T26346] should_fail_ex+0x414/0x560 [ 1534.398055][T26346] should_failslab+0xa8/0x100 [ 1534.398088][T26346] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1534.398130][T26346] ? __alloc_skb+0x112/0x2d0 [ 1534.398163][T26346] __alloc_skb+0x112/0x2d0 [ 1534.398196][T26346] netlink_ack+0x146/0xa50 [ 1534.398222][T26346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.398242][T26346] ? ref_tracker_free+0x63a/0x7d0 [ 1534.398264][T26346] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1534.398284][T26346] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1534.398305][T26346] ? __pfx_ref_tracker_free+0x10/0x10 [ 1534.398340][T26346] netlink_rcv_skb+0x28c/0x470 [ 1534.398370][T26346] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.398403][T26346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1534.398450][T26346] ? down_read+0x1ad/0x2e0 [ 1534.398479][T26346] genl_rcv+0x28/0x40 [ 1534.398498][T26346] netlink_unicast+0x75c/0x8e0 [ 1534.398537][T26346] netlink_sendmsg+0x805/0xb30 [ 1534.398577][T26346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.398609][T26346] ? __import_iovec+0x5d4/0x7f0 [ 1534.398636][T26346] ? aa_sock_msg_perm+0x94/0x160 [ 1534.398660][T26346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1534.398682][T26346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.398712][T26346] __sock_sendmsg+0x21c/0x270 [ 1534.398740][T26346] ____sys_sendmsg+0x505/0x830 [ 1534.398767][T26346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1534.398804][T26346] ___sys_sendmsg+0x21f/0x2a0 [ 1534.398827][T26346] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.398886][T26346] ? __fget_files+0x2a/0x420 [ 1534.398904][T26346] ? __fget_files+0x3a0/0x420 [ 1534.398934][T26346] __sys_sendmsg+0x164/0x220 [ 1534.398956][T26346] ? __pfx___sys_sendmsg+0x10/0x10 [ 1534.398992][T26346] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1534.399017][T26346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1534.399042][T26346] __do_fast_syscall_32+0xb6/0x2b0 [ 1534.399067][T26346] ? lockdep_hardirqs_on+0x9c/0x150 [ 1534.399094][T26346] do_fast_syscall_32+0x34/0x80 [ 1534.399119][T26346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1534.399143][T26346] RIP: 0023:0xf7f31539 [ 1534.399161][T26346] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1534.399179][T26346] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1534.399201][T26346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1534.399215][T26346] RDX: 0000000008060000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.399228][T26346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1534.399240][T26346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1534.399252][T26346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1534.399283][T26346] [ 1534.769709][T26340] @: renamed from vlan0 (while UP) [ 1534.862771][T26351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1535.564618][T26376] netem: incorrect ge model size [ 1535.564676][T26376] netem: change failed [ 1535.588649][T26376] xt_TCPMSS: Only works on TCP SYN packets [ 1536.012083][T26384] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5414'. [ 1536.033021][T10936] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1536.205752][T10936] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1536.220139][T10936] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.243709][T10936] usb 4-1: config 8 has no interface number 0 [ 1536.261191][T10936] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1536.285037][T10936] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1536.302180][T10936] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1536.327073][T10936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.444816][T26398] FAULT_INJECTION: forcing a failure. [ 1536.444816][T26398] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.458331][T26398] CPU: 1 UID: 0 PID: 26398 Comm: syz.1.5420 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1536.458363][T26398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1536.458376][T26398] Call Trace: [ 1536.458385][T26398] [ 1536.458394][T26398] dump_stack_lvl+0x189/0x250 [ 1536.458424][T26398] ? __pfx____ratelimit+0x10/0x10 [ 1536.458447][T26398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1536.458471][T26398] ? __pfx__printk+0x10/0x10 [ 1536.458513][T26398] should_fail_ex+0x414/0x560 [ 1536.458540][T26398] should_failslab+0xa8/0x100 [ 1536.458572][T26398] __kmalloc_cache_noprof+0x70/0x3d0 [ 1536.458600][T26398] ? sctp_add_bind_addr+0x8c/0x370 [ 1536.458629][T26398] sctp_add_bind_addr+0x8c/0x370 [ 1536.458659][T26398] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1536.458687][T26398] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1536.458713][T26398] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1536.458740][T26398] ? sctp_v6_is_any+0x64/0x80 [ 1536.458768][T26398] ? sctp_copy_one_addr+0x93/0x360 [ 1536.458797][T26398] sctp_bind_addr_copy+0xb3/0x3c0 [ 1536.458823][T26398] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1536.458849][T26398] sctp_connect_new_asoc+0x2e0/0x690 [ 1536.458883][T26398] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1536.458915][T26398] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1536.458945][T26398] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1536.458973][T26398] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1536.459022][T26398] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1536.459046][T26398] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1536.459082][T26398] sctp_sendmsg+0x155c/0x2810 [ 1536.459126][T26398] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1536.459160][T26398] ? aa_sk_perm+0x81e/0x950 [ 1536.459186][T26398] ? __pfx_aa_sk_perm+0x10/0x10 [ 1536.459211][T26398] ? sock_rps_record_flow+0x19/0x410 [ 1536.459239][T26398] ? inet_sendmsg+0x2f4/0x370 [ 1536.459261][T26398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1536.459288][T26398] __sock_sendmsg+0x19c/0x270 [ 1536.459324][T26398] ____sys_sendmsg+0x505/0x830 [ 1536.459351][T26398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.459390][T26398] ___sys_sendmsg+0x21f/0x2a0 [ 1536.459413][T26398] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.459474][T26398] ? __fget_files+0x2a/0x420 [ 1536.459493][T26398] ? __fget_files+0x3a0/0x420 [ 1536.459523][T26398] __sys_sendmsg+0x164/0x220 [ 1536.459545][T26398] ? __pfx___sys_sendmsg+0x10/0x10 [ 1536.459581][T26398] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1536.459607][T26398] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.459632][T26398] __do_fast_syscall_32+0xb6/0x2b0 [ 1536.459658][T26398] ? lockdep_hardirqs_on+0x9c/0x150 [ 1536.459684][T26398] do_fast_syscall_32+0x34/0x80 [ 1536.459709][T26398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1536.459734][T26398] RIP: 0023:0xf7f48539 [ 1536.459752][T26398] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1536.459770][T26398] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1536.459791][T26398] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 1536.459806][T26398] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.459819][T26398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1536.459831][T26398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1536.459843][T26398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1536.459874][T26398] [ 1536.800481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1536.963224][T10210] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 1536.982213][T10936] usb 4-1: string descriptor 0 read error: -71 [ 1536.989927][T10936] ir_toy 4-1:8.177: required endpoints not found [ 1537.000587][T10936] usb 4-1: USB disconnect, device number 2 [ 1537.128435][ T5905] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1537.153058][T10210] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.173429][T10210] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1537.182703][T10210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.191218][T26405] FAULT_INJECTION: forcing a failure. [ 1537.191218][T26405] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.205429][T10210] usb 9-1: config 0 descriptor?? [ 1537.206894][T26405] CPU: 1 UID: 0 PID: 26405 Comm: syz.7.5424 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1537.206928][T26405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1537.206944][T26405] Call Trace: [ 1537.206954][T26405] [ 1537.206966][T26405] dump_stack_lvl+0x189/0x250 [ 1537.207001][T26405] ? __pfx____ratelimit+0x10/0x10 [ 1537.207039][T26405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1537.207067][T26405] ? __pfx__printk+0x10/0x10 [ 1537.207106][T26405] ? __pfx___might_resched+0x10/0x10 [ 1537.207133][T26405] ? fs_reclaim_acquire+0x7d/0x100 [ 1537.207164][T26405] should_fail_ex+0x414/0x560 [ 1537.207195][T26405] should_failslab+0xa8/0x100 [ 1537.207232][T26405] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1537.207266][T26405] ? __alloc_skb+0x112/0x2d0 [ 1537.207304][T26405] __alloc_skb+0x112/0x2d0 [ 1537.207342][T26405] netlink_ack+0x146/0xa50 [ 1537.207373][T26405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1537.207396][T26405] ? ref_tracker_free+0x63a/0x7d0 [ 1537.207421][T26405] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1537.207444][T26405] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1537.207469][T26405] ? __pfx_ref_tracker_free+0x10/0x10 [ 1537.207510][T26405] netlink_rcv_skb+0x28c/0x470 [ 1537.207543][T26405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1537.207570][T26405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1537.207625][T26405] ? down_read+0x1ad/0x2e0 [ 1537.207658][T26405] genl_rcv+0x28/0x40 [ 1537.207682][T26405] netlink_unicast+0x75c/0x8e0 [ 1537.207724][T26405] netlink_sendmsg+0x805/0xb30 [ 1537.207769][T26405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1537.207806][T26405] ? __import_iovec+0x5d4/0x7f0 [ 1537.207836][T26405] ? aa_sock_msg_perm+0x94/0x160 [ 1537.207865][T26405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1537.207891][T26405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1537.207926][T26405] __sock_sendmsg+0x21c/0x270 [ 1537.207958][T26405] ____sys_sendmsg+0x505/0x830 [ 1537.207989][T26405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1537.208037][T26405] ___sys_sendmsg+0x21f/0x2a0 [ 1537.208061][T26405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1537.208130][T26405] ? __fget_files+0x2a/0x420 [ 1537.208150][T26405] ? __fget_files+0x3a0/0x420 [ 1537.208185][T26405] __sys_sendmsg+0x164/0x220 [ 1537.208210][T26405] ? __pfx___sys_sendmsg+0x10/0x10 [ 1537.208250][T26405] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1537.208277][T26405] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.208306][T26405] __do_fast_syscall_32+0xb6/0x2b0 [ 1537.208336][T26405] ? lockdep_hardirqs_on+0x9c/0x150 [ 1537.208367][T26405] do_fast_syscall_32+0x34/0x80 [ 1537.208397][T26405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1537.208425][T26405] RIP: 0023:0xf7f53539 [ 1537.208447][T26405] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1537.208467][T26405] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1537.208492][T26405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1537.208509][T26405] RDX: 0000000000048100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1537.208522][T26405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1537.208537][T26405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1537.208550][T26405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.208584][T26405] [ 1537.615202][ T5905] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.627613][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1537.639321][ T5905] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.653964][ T5905] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1537.666629][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.696472][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1537.711681][ T5905] usb 6-1: invalid MIDI out EP 0 [ 1537.727737][T26411] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5427'. [ 1537.893343][T24425] udevd[24425]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1537.917582][T26413] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5428'. [ 1537.948021][ T5905] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1538.000699][T10210] playstation 0003:054C:0BA0.005F: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.8-1/input0 [ 1538.028342][T10936] usb 6-1: USB disconnect, device number 99 [ 1538.379022][T26430] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5434'. [ 1538.558221][T26435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1539.433028][ T43] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1539.626165][ T43] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1539.634880][ T43] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.753013][ T43] usb 6-1: config 8 has no interface number 0 [ 1539.780580][ T43] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1539.845801][ T43] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1539.858467][ T43] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1539.912141][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.551324][ T43] usb 6-1: string descriptor 0 read error: -71 [ 1540.591060][ T43] ir_toy 6-1:8.177: required endpoints not found [ 1540.633309][ T43] usb 6-1: USB disconnect, device number 100 [ 1540.812245][T10210] playstation 0003:054C:0BA0.005F: Failed to retrieve feature with reportID 18: -71 [ 1540.827901][T10210] playstation 0003:054C:0BA0.005F: Failed to retrieve DualShock4 pairing info: -71 [ 1540.857051][T10210] playstation 0003:054C:0BA0.005F: Failed to get MAC address from DualShock4 [ 1540.868994][T10210] playstation 0003:054C:0BA0.005F: Failed to create dualshock4. [ 1540.887884][T10210] playstation 0003:054C:0BA0.005F: probe with driver playstation failed with error -71 [ 1540.909402][T10210] usb 9-1: USB disconnect, device number 100 [ 1540.953578][T26453] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5440'. [ 1541.269248][T26460] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5443'. [ 1541.672705][T26478] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5451'. [ 1541.945367][T26486] IPVS: stopping backup sync thread 26488 ... [ 1543.253046][ T5912] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1543.338231][T26501] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5458'. [ 1543.427197][ T5912] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1543.453042][ T5912] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.477689][ T5912] usb 2-1: config 8 has no interface number 0 [ 1543.487836][ T5912] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1543.531976][ T5912] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1543.552675][ T5912] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1543.585419][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.734156][T26506] FAULT_INJECTION: forcing a failure. [ 1543.734156][T26506] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.748208][T26506] CPU: 1 UID: 0 PID: 26506 Comm: syz.3.5462 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1543.748240][T26506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1543.748254][T26506] Call Trace: [ 1543.748262][T26506] [ 1543.748272][T26506] dump_stack_lvl+0x189/0x250 [ 1543.748301][T26506] ? __pfx____ratelimit+0x10/0x10 [ 1543.748326][T26506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1543.748352][T26506] ? __pfx__printk+0x10/0x10 [ 1543.748387][T26506] ? __pfx___might_resched+0x10/0x10 [ 1543.748411][T26506] ? fs_reclaim_acquire+0x7d/0x100 [ 1543.748438][T26506] should_fail_ex+0x414/0x560 [ 1543.748466][T26506] should_failslab+0xa8/0x100 [ 1543.748500][T26506] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1543.748543][T26506] ? __alloc_skb+0x112/0x2d0 [ 1543.748579][T26506] __alloc_skb+0x112/0x2d0 [ 1543.748612][T26506] netlink_ack+0x146/0xa50 [ 1543.748640][T26506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1543.748662][T26506] ? ref_tracker_free+0x63a/0x7d0 [ 1543.748684][T26506] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1543.748704][T26506] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1543.748726][T26506] ? __pfx_ref_tracker_free+0x10/0x10 [ 1543.748760][T26506] netlink_rcv_skb+0x28c/0x470 [ 1543.748792][T26506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1543.748818][T26506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1543.748866][T26506] ? down_read+0x1ad/0x2e0 [ 1543.748895][T26506] genl_rcv+0x28/0x40 [ 1543.748917][T26506] netlink_unicast+0x75c/0x8e0 [ 1543.748957][T26506] netlink_sendmsg+0x805/0xb30 [ 1543.748998][T26506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.749031][T26506] ? __import_iovec+0x5d4/0x7f0 [ 1543.749059][T26506] ? aa_sock_msg_perm+0x94/0x160 [ 1543.749085][T26506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1543.749107][T26506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.749138][T26506] __sock_sendmsg+0x21c/0x270 [ 1543.749167][T26506] ____sys_sendmsg+0x505/0x830 [ 1543.749194][T26506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1543.749234][T26506] ___sys_sendmsg+0x21f/0x2a0 [ 1543.749256][T26506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1543.749318][T26506] ? __fget_files+0x2a/0x420 [ 1543.749336][T26506] ? __fget_files+0x3a0/0x420 [ 1543.749368][T26506] __sys_sendmsg+0x164/0x220 [ 1543.749390][T26506] ? __pfx___sys_sendmsg+0x10/0x10 [ 1543.749427][T26506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1543.749453][T26506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1543.749479][T26506] __do_fast_syscall_32+0xb6/0x2b0 [ 1543.749512][T26506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1543.749539][T26506] do_fast_syscall_32+0x34/0x80 [ 1543.749564][T26506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1543.749590][T26506] RIP: 0023:0xf711e539 [ 1543.749610][T26506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1543.749628][T26506] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1543.749651][T26506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1543.749666][T26506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1543.749678][T26506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1543.749690][T26506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1543.749702][T26506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1543.749731][T26506] [ 1544.076975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1544.285551][ T5912] usb 2-1: string descriptor 0 read error: -71 [ 1544.315446][ T5912] ir_toy 2-1:8.177: required endpoints not found [ 1544.379787][ T5912] usb 2-1: USB disconnect, device number 80 [ 1544.546851][T26518] kvm: kvm [26510]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1544.572829][T26518] kvm: kvm [26510]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1544.655961][T26518] kvm: kvm [26510]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1544.787735][T26518] kvm_intel: kvm [26510]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1544.848748][T26530] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1544.873870][T26532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5471'. [ 1545.293170][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1545.520584][T26550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5479'. [ 1545.584433][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1545.613121][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1545.686126][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1545.705933][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1545.742180][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1545.760245][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.771308][T26555] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1545.794606][ T43] usb 4-1: config 0 descriptor?? [ 1546.128147][T26559] team_slave_0: entered allmulticast mode [ 1546.159438][T26559] team_slave_0: entered promiscuous mode [ 1546.178456][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.185051][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.223060][ T43] plantronics 0003:047F:FFFF.0060: ignoring exceeding usage max [ 1546.299330][ T43] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1546.397133][T26562] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5484'. [ 1546.467921][T26564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1546.701179][T26570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1546.735473][T26575] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5490'. [ 1546.960039][T26583] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5493'. [ 1547.309286][ T43] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1548.422667][ T5912] usb 4-1: USB disconnect, device number 3 [ 1548.753196][T10936] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1548.995050][ T5912] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1549.186973][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.237306][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1549.277174][T10936] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.322429][T10936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1549.325048][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.471258][ T5912] usb 4-1: config 0 descriptor?? [ 1549.625587][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 1549.798518][T10936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1549.808461][T10936] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1549.821986][T10936] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1549.831274][T10936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.843737][T10936] usb 6-1: config 0 descriptor?? [ 1549.891181][T26598] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5498'. [ 1550.005506][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1550.042368][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 1550.051242][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1550.063935][T26601] netlink: 'syz.1.5499': attribute type 1 has an invalid length. [ 1550.084090][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 1550.091829][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 1550.110087][T26601] netlink: 'syz.1.5499': attribute type 2 has an invalid length. [ 1550.130265][T26599] kvm: kvm [26594]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1550.155178][T26599] kvm: kvm [26594]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1550.169742][T26601] netlink: 'syz.1.5499': attribute type 1 has an invalid length. [ 1550.178950][T26599] kvm: kvm [26594]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1550.192593][T26605] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5500'. [ 1550.193608][T26601] netlink: 'syz.1.5499': attribute type 2 has an invalid length. [ 1550.225481][T26599] kvm_intel: kvm [26594]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1550.267214][T10936] plantronics 0003:047F:FFFF.0061: ignoring exceeding usage max [ 1550.311537][T10936] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1550.320606][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 1550.432196][T26611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.441424][T26611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.486416][T26591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.542836][T26591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.588616][T11038] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1550.588882][T11038] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1550.770057][T26615] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5503'. [ 1551.015386][T26621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1551.173387][ T43] usb 6-1: USB disconnect, device number 101 [ 1551.589338][T26623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1551.668351][ T5912] pwc: recv_control_msg error -71 req 02 val 2100 [ 1551.675396][ T5912] pwc: recv_control_msg error -71 req 04 val 1500 [ 1551.685825][ T5912] pwc: recv_control_msg error -71 req 02 val 2500 [ 1551.723657][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 1551.742306][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 1551.752311][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 1551.810541][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 1551.856769][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 1551.881176][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 1551.949186][ T5912] pwc: Registered as video103. [ 1551.960082][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input126 [ 1552.010593][ T5912] usb 4-1: USB disconnect, device number 4 [ 1552.416202][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1552.430512][T26647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1552.944450][T26651] FAULT_INJECTION: forcing a failure. [ 1552.944450][T26651] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.021718][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.5.5514 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 1553.021752][T26651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1553.021767][T26651] Call Trace: [ 1553.021776][T26651] [ 1553.021786][T26651] dump_stack_lvl+0x189/0x250 [ 1553.021817][T26651] ? __pfx____ratelimit+0x10/0x10 [ 1553.021840][T26651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1553.021858][T26651] ? __pfx__printk+0x10/0x10 [ 1553.021900][T26651] ? __pfx___might_resched+0x10/0x10 [ 1553.021918][T26651] ? fs_reclaim_acquire+0x7d/0x100 [ 1553.021936][T26651] should_fail_ex+0x414/0x560 [ 1553.021956][T26651] should_failslab+0xa8/0x100 [ 1553.021982][T26651] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1553.022004][T26651] ? __alloc_skb+0x112/0x2d0 [ 1553.022030][T26651] __alloc_skb+0x112/0x2d0 [ 1553.022054][T26651] netlink_ack+0x146/0xa50 [ 1553.022075][T26651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1553.022090][T26651] ? ref_tracker_free+0x63a/0x7d0 [ 1553.022105][T26651] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1553.022121][T26651] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1553.022136][T26651] ? __pfx_ref_tracker_free+0x10/0x10 [ 1553.022161][T26651] netlink_rcv_skb+0x28c/0x470 [ 1553.022183][T26651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1553.022207][T26651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1553.022248][T26651] ? down_read+0x1ad/0x2e0 [ 1553.022269][T26651] genl_rcv+0x28/0x40 [ 1553.022288][T26651] netlink_unicast+0x75c/0x8e0 [ 1553.022316][T26651] netlink_sendmsg+0x805/0xb30 [ 1553.022345][T26651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1553.022369][T26651] ? __import_iovec+0x5d4/0x7f0 [ 1553.022390][T26651] ? aa_sock_msg_perm+0x94/0x160 [ 1553.022408][T26651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1553.022424][T26651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1553.022447][T26651] __sock_sendmsg+0x21c/0x270 [ 1553.022469][T26651] ____sys_sendmsg+0x505/0x830 [ 1553.022488][T26651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1553.022514][T26651] ___sys_sendmsg+0x21f/0x2a0 [ 1553.022531][T26651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1553.022573][T26651] ? __fget_files+0x2a/0x420 [ 1553.022586][T26651] ? __fget_files+0x3a0/0x420 [ 1553.022607][T26651] __sys_sendmsg+0x164/0x220 [ 1553.022623][T26651] ? __pfx___sys_sendmsg+0x10/0x10 [ 1553.022649][T26651] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1553.022667][T26651] ? lockdep_hardirqs_on+0x9c/0x150 [ 1553.022685][T26651] __do_fast_syscall_32+0xb6/0x2b0 [ 1553.022705][T26651] ? lockdep_hardirqs_on+0x9c/0x150 [ 1553.022724][T26651] do_fast_syscall_32+0x34/0x80 [ 1553.022742][T26651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1553.022761][T26651] RIP: 0023:0xf7f31539 [ 1553.022775][T26651] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1553.022787][T26651] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1553.022803][T26651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1553.022815][T26651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1553.022828][T26651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1553.022840][T26651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1553.022857][T26651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1553.022885][T26651] [ 1553.039793][T26653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5515'. [ 1553.879829][T11038] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1553.897566][T26661] netlink: 'syz.5.5519': attribute type 10 has an invalid length. [ 1553.907541][T10936] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 1553.917891][T26661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.946361][T26661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.953677][T26661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.048534][T26661] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1554.086698][T10936] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.103731][T10936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1555.588122][T10936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1555.628198][T10936] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1556.045979][T10936] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1556.067701][T10936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.366205][T10936] usb 9-1: config 0 descriptor?? [ 1557.431888][T10936] plantronics 0003:047F:FFFF.0062: ignoring exceeding usage max [ 1557.654037][T26657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.759974][T10936] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1558.040954][T26657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.867537][T26676] dvmrp1: entered allmulticast mode [ 1559.761221][T10210] usb 9-1: USB disconnect, device number 101 [ 1559.907497][T26678] fido_id[26678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1561.819771][T26699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5528'. [ 1561.978524][T26701] IPVS: stopping backup sync thread 26702 ... [ 1561.985475][T26702] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1562.287459][T26707] IPVS: Unknown mcast interface: veth1_to_bridge [ 1567.162990][T16924] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 1569.488039][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1569.723142][T16924] usb 9-1: device descriptor read/64, error -32 [ 1569.824922][T26724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1570.013188][T16924] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 1570.022129][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1570.412554][T16924] usb 9-1: device descriptor read/64, error -32 [ 1570.533830][T16924] usb usb9-port1: attempt power cycle [ 1571.594132][T16924] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 1571.643284][ C0] raw-gadget.0 gadget.8: failed to queue control event [ 1571.650441][T16924] usb 9-1: device descriptor read/8, error -32 [ 1571.765210][T16924] raw-gadget.0 gadget.8: failed to queue suspend event [ 1572.243212][T16924] raw-gadget.0 gadget.8: failed to queue reset event [ 1572.558533][T16924] raw-gadget.0 gadget.8: failed to queue resume event [ 1572.773008][T16924] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1572.990181][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 1572.997476][T16924] usb 9-1: device descriptor read/8, error -32 [ 1573.113536][T16924] raw-gadget.0 gadget.8: failed to queue suspend event [ 1573.233139][T16924] usb usb9-port1: unable to enumerate USB device [ 1573.516004][T26738] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5539'. [ 1573.576314][T26721] raw-gadget.0 gadget.8: failed to queue disconnect event [ 1574.811455][T26740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5540'. [ 1576.113088][T16924] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1576.325124][T16924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.404219][T16924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1576.530836][T16924] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1576.843120][T16924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1577.024099][T16924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.063220][T16924] usb 6-1: Product: syz [ 1577.308622][T16924] usb 6-1: Manufacturer: syz [ 1577.322162][T16924] usb 6-1: SerialNumber: syz [ 1577.344508][T26752] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1582.703301][T16924] usb 6-1: 0:2 : does not exist [ 1587.435403][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5554'. [ 1702.682852][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1702.689982][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26786/1:b..l [ 1702.698513][ C1] rcu: (detected by 1, t=10502 jiffies, g=188189, q=574156 ncpus=2) [ 1702.706615][ C1] task:syz.7.5552 state:R running task stack:26072 pid:26786 tgid:26784 ppid:18439 task_flags:0x40044c flags:0x20004000 [ 1702.721390][ C1] Call Trace: [ 1702.724719][ C1] [ 1702.727684][ C1] __schedule+0x16fd/0x4cf0 [ 1702.732255][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1702.737593][ C1] ? __pfx___schedule+0x10/0x10 [ 1702.742504][ C1] ? __lock_acquire+0xab9/0xd20 [ 1702.747474][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1702.752968][ C1] preempt_schedule_irq+0xb5/0x150 [ 1702.758304][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1702.764110][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1702.769968][ C1] irqentry_exit+0x6f/0x90 [ 1702.774405][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1702.780484][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 1702.785798][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1702.805520][ C1] RSP: 0018:ffffc9000481ef58 EFLAGS: 00000206 [ 1702.811600][ C1] RAX: e6ebbd5cf6668d00 RBX: 0000000000000000 RCX: e6ebbd5cf6668d00 [ 1702.819577][ C1] RDX: 0000000000000000 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 1702.827553][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 1702.835532][ C1] R10: ffffc9000481f118 R11: ffffffff81acfe50 R12: 0000000000000002 [ 1702.843507][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1702.851505][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.856628][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1702.862790][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.867921][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.873056][ C1] ? __mmput+0x118/0x420 [ 1702.877306][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.882423][ C1] unwind_next_frame+0xc2/0x2390 [ 1702.887475][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.892595][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1702.897714][ C1] ? exit_mmap+0x444/0xb50 [ 1702.902147][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1702.908412][ C1] arch_stack_walk+0x11c/0x150 [ 1702.913185][ C1] ? __mmput+0x118/0x420 [ 1702.917437][ C1] stack_trace_save+0x9c/0xe0 [ 1702.922124][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1702.927503][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1702.932710][ C1] kasan_save_stack+0x3e/0x60 [ 1702.937392][ C1] ? kasan_save_stack+0x3e/0x60 [ 1702.942264][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1702.947729][ C1] ? call_rcu+0x157/0x9c0 [ 1702.952066][ C1] ? kmem_cache_free+0x309/0x400 [ 1702.957035][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 1702.961920][ C1] ? unlink_anon_vmas+0x503/0x670 [ 1702.966992][ C1] ? free_pgtables+0x7bf/0xaf0 [ 1702.971859][ C1] ? exit_mmap+0x444/0xb50 [ 1702.976289][ C1] ? __mmput+0x118/0x420 [ 1702.980573][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1702.985782][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1702.991942][ C1] call_rcu+0x157/0x9c0 [ 1702.996167][ C1] ? __pfx_call_rcu+0x10/0x10 [ 1703.000983][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 1703.005876][ C1] kmem_cache_free+0x309/0x400 [ 1703.010662][ C1] __put_anon_vma+0x12b/0x2d0 [ 1703.015358][ C1] unlink_anon_vmas+0x503/0x670 [ 1703.020314][ C1] free_pgtables+0x7bf/0xaf0 [ 1703.025007][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1703.030128][ C1] ? __pfx_down_write+0x10/0x10 [ 1703.035078][ C1] ? __mas_set_range+0x12f/0x3c0 [ 1703.040027][ C1] exit_mmap+0x444/0xb50 [ 1703.044287][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1703.049076][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1703.054285][ C1] ? __khugepaged_exit+0x319/0x470 [ 1703.059415][ C1] ? kmem_cache_free+0x18f/0x400 [ 1703.064360][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1703.069661][ C1] ? __khugepaged_exit+0x347/0x470 [ 1703.074793][ C1] __mmput+0x118/0x420 [ 1703.079303][ C1] exit_mm+0x1da/0x2c0 [ 1703.083386][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1703.087992][ C1] ? rcu_is_watching+0x15/0xb0 [ 1703.092853][ C1] do_exit+0x648/0x22e0 [ 1703.097023][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1703.102147][ C1] ? __pfx_do_exit+0x10/0x10 [ 1703.106758][ C1] do_group_exit+0x21c/0x2d0 [ 1703.111359][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1703.116565][ C1] get_signal+0x1286/0x1340 [ 1703.121102][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1703.126669][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1703.132842][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 1703.138311][ C1] exit_to_user_mode_loop+0x75/0x110 [ 1703.143689][ C1] __do_fast_syscall_32+0x1f4/0x2b0 [ 1703.148922][ C1] do_fast_syscall_32+0x34/0x80 [ 1703.153779][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1703.160136][ C1] RIP: 0023:0xf7f53539 [ 1703.164293][ C1] RSP: 002b:00000000f505560c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1703.172727][ C1] RAX: fffffffffffffe00 RBX: 00000000f7415018 RCX: 0000000000000080 [ 1703.180735][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f741501c [ 1703.188722][ C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 1703.196699][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1703.204673][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.212679][ C1] [ 1703.215914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1710.147639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1710.255103][ T1297] ieee802154 phy1 wpan1: encryption failed: -22